last executing test programs: 2m20.707161366s ago: executing program 2 (id=134): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8000, 0x80, 0xffff, 0x3ff, {{0x1a, 0x4, 0x1, 0x5, 0x68, 0x65, 0x0, 0x6, 0x4, 0x0, @local, @rand_addr=0x64010100, {[@lsrr={0x83, 0xb, 0x9, [@rand_addr=0x64010102, @loopback]}, @timestamp={0x44, 0x1c, 0xd7, 0x0, 0xb, [0xe58a, 0x8, 0x9, 0x5, 0xfffff398, 0x3]}, @timestamp_prespec={0x44, 0xc, 0x68, 0x3, 0x6, [{@empty, 0x7f}]}, @noop, @ssrr={0x89, 0x1b, 0x38, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast2, @multicast2, @local, @loopback]}, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4"], 0x6f4}, 0x1, 0x0, 0x0, 0x5}, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@noinit_itable}, {@test_dummy_encryption}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000025c0)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x29, 0xfffffffc, 0x14c0348, 0xc0be, 0x2, 0xf296, 0x2e64, 0x0, 0x0, 0x10, 0x3}}, 0x50) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000600)={0x23e3, 0xfffffffc, 0xd, 0x2}) 2m20.692589897s ago: executing program 2 (id=135): openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000000)=@x86={0x6, 0x62, 0x0, 0x0, 0x9, 0x1, 0xff, 0x86, 0xe, 0x83, 0xf7, 0xff, 0x0, 0x4bf6, 0x401, 0x9, 0xc, 0x8, 0x4, '\x00', 0x5, 0x3}) 2m20.639962418s ago: executing program 2 (id=136): r0 = timerfd_create(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = timerfd_create(0x0, 0x0) ppoll(&(0x7f0000000700)=[{r0, 0x3041}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x700, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x5, 0x200000000000000, 0x0, 0x6, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) 2m19.732026539s ago: executing program 2 (id=144): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) umount2(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x1000000000000000) 2m19.712221169s ago: executing program 2 (id=146): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8000, 0x80, 0xffff, 0x3ff, {{0x1a, 0x4, 0x1, 0x5, 0x68, 0x65, 0x0, 0x6, 0x4, 0x0, @local, @rand_addr=0x64010100, {[@lsrr={0x83, 0xb, 0x9, [@rand_addr=0x64010102, @loopback]}, @timestamp={0x44, 0x1c, 0xd7, 0x0, 0xb, [0xe58a, 0x8, 0x9, 0x5, 0xfffff398, 0x3]}, @timestamp_prespec={0x44, 0xc, 0x68, 0x3, 0x6, [{@empty, 0x7f}]}, @noop, @ssrr={0x89, 0x1b, 0x38, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast2, @multicast2, @local, @loopback]}, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4"], 0x6f4}, 0x1, 0x0, 0x0, 0x5}, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@noinit_itable}, {@test_dummy_encryption}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000025c0)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x29, 0xfffffffc, 0x14c0348, 0xc0be, 0x2, 0xf296, 0x2e64, 0x0, 0x0, 0x10, 0x3}}, 0x50) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000600)={0x23e3, 0xfffffffc, 0xd, 0x2}) 2m19.515638534s ago: executing program 2 (id=152): stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r3) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getresgid(&(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000280)) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) setgroups(0x7, &(0x7f0000000480)=[r0, r1, r3, r4, r5, r6, r7]) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x805, 0x0, 0x4, 0x7, 0x0, 0x3, 0xfc, 0x0, 0x4, 0x0, 0x0, 0x1, 0xff, 0x0, 0x45, [0x0, 0x1]}}) 2m19.515563284s ago: executing program 32 (id=152): stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r3) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getresgid(&(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000280)) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) setgroups(0x7, &(0x7f0000000480)=[r0, r1, r3, r4, r5, r6, r7]) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x805, 0x0, 0x4, 0x7, 0x0, 0x3, 0xfc, 0x0, 0x4, 0x0, 0x0, 0x1, 0xff, 0x0, 0x45, [0x0, 0x1]}}) 44.078945269s ago: executing program 5 (id=775): unshare(0x64000600) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x80009) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x2, 0x101}]}, 0x10) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000002500)='./file1\x00', 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c00200da779e57c52e33a83fdbd563a5b7c6b958cb6e49387a5ba5a89b0887c0292eb888cc8efa81040100d83ba748033542625bc334eaf793332891541000f3c63c0a5f0af254a5bd1f4b81d0c5188ddcadf07eff7b49004e0b243a8a4d93632fbe9ab868d88310829d8e04a3c0572143a3d3d1472cc5da6f72bb097f5f7b95a09e442c0a1463aaa90db7dcbc542dc5bced278eda11583f810469b706968e793db3230"], 0x1, 0x105eb, &(0x7f000000cf00)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x1000000201005) creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000000)=0x3) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000180)={0x0}) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 43.436666064s ago: executing program 5 (id=776): r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0x41d9fda7) mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file1'}, 0x5c}, {@metacopy_off}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir, 0x5c}]}) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff, 0x0, 0x0, 0xff000000], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x238, 0x260, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e8, {0x2}}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff, 0x0, 0xff], @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, [0xffffffff, 0xffffff00, 0xffffffff, 0xff], 0x4d6, 0x3503, 0x10, 0x0, 0x17, 0x13}, {@ipv4=@empty, [0xffffffff, 0x0, 0xffffff00, 0xff000000], @ipv4=@remote, [0xffffff00, 0xffffff00, 0x0, 0xff], 0x4d5, 0x3505, 0x0, 0x1, 0x18, 0x21}, {@ipv6=@private1, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffffff, 0xff, 0xffffff00, 0xff], 0x4d4, 0x3507, 0x4, 0x0, 0x2, 0x8}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xff, 0xffffffff, 0xff0000ff], @ipv4=@rand_addr=0x64010101, [0x0, 0x0, 0xffffffff, 0xff], 0x4d6, 0x3502, 0x3a, 0x1, 0xa, 0xd}], 0x2, 0x2}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) dup(r4) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001000010800000004fcffffff00004c00", @ANYRES32=0x0, @ANYBLOB="e90402000005000008001b00000000000800280029450000a555020ad34e2c1ee493a831642e3e9f33a583304eba04ea38ab34"], 0x30}, 0x1, 0xffffa888}, 0x20000880) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 42.492736776s ago: executing program 5 (id=781): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xfff1, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x11386}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MASK={0x8, 0x6, 0x4}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24041091}, 0x844) 42.439736958s ago: executing program 5 (id=782): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000540)=0x2, 0x4) ppoll(&(0x7f0000000140)=[{r0, 0x4484}], 0x1, &(0x7f0000000040), 0x0, 0x0) 42.438951468s ago: executing program 5 (id=784): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) r0 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000577000/0x4000)=nil, 0x4000, 0x2000001, 0x13, r0, 0xffffd000) syz_clone(0xca700, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) lseek(r2, 0x8000000000000000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) openat(0xffffffffffffff9c, 0x0, 0x542, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000200)={'ipvlan0\x00', 0x10}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000240)=@sr0, r4, &(0x7f0000000380)={0x5, 0x8b8e, 0x3, 0x6, 0xe, 0x0, 0xef9, 0x0, 0x1ff}) sendmsg$NFT_MSG_GETOBJ_RESET(r3, 0x0, 0x40014) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r5}, 0x5) r6 = syz_io_uring_complete(0x0, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/file0\x00', 0x200, 0x6) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000000)='-]\x00', &(0x7f0000000100)='./file0\x00', r7) 42.415054378s ago: executing program 5 (id=785): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x1a10c10, &(0x7f0000001e80)=ANY=[], 0xfc, 0x2b6, &(0x7f0000000480)="$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") syz_read_part_table(0x59d, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0}) r2 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) close_range(r2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @local, @local, {[], {{0x4e23, 0x4e22, 0x2, 0x1, 0x0, 0x0, 0x5, 0xc2, 0x1000}}}}}}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ebfa0e81ceb3dc4c430515dc4dade38ff8c84ace9d15af003afa41b75fbebe5b76443645c1dc73113beef85ec94ed0415b012c498c3bb8f9f0c37b9b323b6d", 0x3f}], 0x1) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000780)={0x2a, 0x6, 0x0, {0x8000000000000001, 0x4, 0x1, 0x0, '%'}}, 0x2a) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) syz_io_uring_complete(0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x40ca110, r0, 0x9bb60000) bind$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$sock_SIOCGIFCONF(r7, 0x8912, 0x0) 26.188395511s ago: executing program 33 (id=785): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x1a10c10, &(0x7f0000001e80)=ANY=[], 0xfc, 0x2b6, &(0x7f0000000480)="$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") syz_read_part_table(0x59d, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0}) r2 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) close_range(r2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @local, @local, {[], {{0x4e23, 0x4e22, 0x2, 0x1, 0x0, 0x0, 0x5, 0xc2, 0x1000}}}}}}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="ebfa0e81ceb3dc4c430515dc4dade38ff8c84ace9d15af003afa41b75fbebe5b76443645c1dc73113beef85ec94ed0415b012c498c3bb8f9f0c37b9b323b6d", 0x3f}], 0x1) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000780)={0x2a, 0x6, 0x0, {0x8000000000000001, 0x4, 0x1, 0x0, '%'}}, 0x2a) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) syz_io_uring_complete(0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x40ca110, r0, 0x9bb60000) bind$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$sock_SIOCGIFCONF(r7, 0x8912, 0x0) 11.269940614s ago: executing program 6 (id=875): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x5b9, &(0x7f0000000680)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bda7, 0x2, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040854}, 0x4008000) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) r5 = dup(r3) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000005700)={0x0, 0x1, 0x6, @remote}, 0x10) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, 0x0) 11.267275554s ago: executing program 4 (id=923): r0 = inotify_init() syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0)={[{@iocharset={'iocharset', 0x3d, 'cp862'}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@utf8no}, {@utf8no}, {@shortname_win95}, {@rodir}, {@shortname_win95}, {@uni_xlateno}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@utf8}, {@shortname_winnt}, {@numtail}, {@uni_xlate}, {@utf8no}, {@utf8no}]}, 0xfd, 0x2a8, &(0x7f0000000240)="$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") mknodat$null(0xffffffffffffff9c, &(0x7f0000001380)='./file0\x00', 0x800, 0x103) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ec00000010000108000600008100000000000000", @ANYRES32=r1, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe"], 0xec}}, 0xc804) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file1\x00') symlink(0x0, &(0x7f00000002c0)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x1c) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xfffffffa, @empty, 0xffff}}}, 0x88) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r3 = inotify_init1(0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x10000011}) inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x810000a0) inotify_init1(0x80000) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000200)='.\x00', 0x5000180) 11.111969208s ago: executing program 3 (id=924): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount$binderfs(&(0x7f00000001c0), &(0x7f0000000300)='./binderfs\x00', 0x0, 0x100000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0xb, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r2, 0x812fd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = memfd_create(&(0x7f00000051c0)='\x02A\xbb\xff\x00\x14\x16\xae\xe5j\xe50\x0f\x14%\xba\x13\x8bn^\xe77\xf3\xad', 0x1) fallocate(r5, 0x0, 0x8, 0x240000b4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) read$FUSE(r7, &(0x7f0000000fc0)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRESDEC=r1, @ANYRES64=r0], 0x50) getrlimit(0x6, &(0x7f0000000100)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) fcntl$getown(r0, 0x9) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 9.172545634s ago: executing program 3 (id=927): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%pK \x00', 0x2000000}, 0x20) r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='user\x00', &(0x7f0000000280)=@secondary) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r3 = inotify_init1(0x0) read(r3, 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x800) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') readlinkat(r4, &(0x7f0000000240)='./file1/file0\x00', &(0x7f0000000540)=""/76, 0x4c) open(&(0x7f0000000180)='.\x00', 0x0, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x1a1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r5, @ANYBLOB="05"], 0x0) 9.172070414s ago: executing program 4 (id=928): syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000080)='./file4\x00', 0xa08c54, &(0x7f00000014c0)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@numtail}, {@numtail}, {@utf8no}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@utf8no}, {@rodir}, {@fat=@discard}, {@rodir}, {@fat=@flush}, {@rodir}]}, 0x89, 0x2c6, &(0x7f0000001540)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) 9.123650774s ago: executing program 4 (id=929): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x181081a, &(0x7f0000000600)={[{@quota}, {@discard}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000001980)="$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") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xb7, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = fsopen(&(0x7f00000010c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x4, 0x204, 0x12}, 0x50) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000f80)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x2f8, 0x228, 0x2f8, 0xfeffffff, 0xffffffff, 0x448, 0x448, 0x448, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], [0xff, 0xffffff00, 0xffffff00, 0xff], 'vlan1\x00', 'vlan0\x00', {}, {}, 0x32, 0x4, 0x0, 0x1e}, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0x9}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', [0xff000000, 0xff, 0xffffffff, 0xff], [0xff, 0xffffffff, 0x0, 0xff], 'team0\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x29, 0x8, 0x6, 0xc}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r3, r2, 0x26}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x5, 0xa}, {0xd}, {0x4, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x200, 0x400a, 0x0, 0xfffffffd, 0x80}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x4, 0x8, 0x409, 0x2, 0x8, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) r5 = fsmount(r1, 0x1, 0x0) fchdir(r5) r6 = inotify_init1(0x800) inotify_add_watch(r6, &(0x7f0000000080)='.\x00', 0x2000745) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) setitimer(0x1, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0xea60}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) syz_usb_connect(0x0, 0x63, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c032090400000208065000070501020002000705820200020009040001040806"], 0x0) 9.032916377s ago: executing program 6 (id=875): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x5b9, &(0x7f0000000680)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bda7, 0x2, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040854}, 0x4008000) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) r5 = dup(r3) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000005700)={0x0, 0x1, 0x6, @remote}, 0x10) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, 0x0) 7.133027732s ago: executing program 1 (id=932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x20008004}, 0x4c820) 7.132414222s ago: executing program 3 (id=933): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}, 0xa0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.119773802s ago: executing program 1 (id=934): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000380)={0xa, 0x4e20, 0xc, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c) sendto$inet6(r2, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000004000000", 0xfe60) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x4000c090) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061103000000000000fa00000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x7, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000003c0), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x10}, 0x28) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0xa4, 0x5, 0x0, 0x20002}, {0x6, 0x8, 0x0, 0x8}]}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0xffff1000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x1, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x80, 0xd6, '\x00', 0x67}, {0x0, 0x5, 0x6, '\x00', 0xf}, {0x5, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd1, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0x4, '\x00', 0x8}, {0xd7, 0xd, 0xcc, '\x00', 0xff}, {0x0, 0x28, 0x80, '\x00', 0x9c}, {0xff, 0x1, 0xfe, '\x00', 0x2c}, {0xfe, 0x47, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x3}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x5}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x47, '\x00', 0xc2}, {0x8, 0x80, 0xf, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x66}, {0x1, 0x6, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x2}]}}) 6.991788725s ago: executing program 6 (id=875): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x5b9, &(0x7f0000000680)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bda7, 0x2, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040854}, 0x4008000) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) r5 = dup(r3) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000005700)={0x0, 0x1, 0x6, @remote}, 0x10) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, 0x0) 5.045912801s ago: executing program 1 (id=936): unshare(0x22060600) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8002, &(0x7f0000000f80)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@quota}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@noinit_itable}, {@stripe={'stripe', 0x3d, 0x9}}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x47f, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101341, 0xaf) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20000000) unshare(0x2000000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x10}}, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0) 5.045302931s ago: executing program 3 (id=937): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/wake_unlock', 0x2202, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8a, &(0x7f0000000800)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0}]) io_setup(0x3fc, &(0x7f0000000000)) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = eventfd2(0x0, 0x1) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x0, r3}) read$eventfd(r3, &(0x7f0000000400), 0x8) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000100)="569534ab1bbe0e03", 0x8}], 0x1) 4.991848083s ago: executing program 4 (id=938): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x3a) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) write$char_usb(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x8800000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, 0x0, 0x3, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000c00)={0x2, 0x0, 0x0}) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d2", @ANYRES16=r2], 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000240), 0x82800, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x7) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r4 = timerfd_create(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) timerfd_settime(r4, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) 4.757905358s ago: executing program 0 (id=939): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x18}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x10, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x6, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000380)="e8", 0xfffffffffffffe98, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) (fail_nth: 1) 4.715444229s ago: executing program 6 (id=875): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x5b9, &(0x7f0000000680)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bda7, 0x2, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040854}, 0x4008000) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) r5 = dup(r3) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000005700)={0x0, 0x1, 0x6, @remote}, 0x10) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, 0x0) 4.693512199s ago: executing program 1 (id=940): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204032, 0xffffffffffffffff, 0xec776000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x109000, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getneightbl={0x14, 0x42, 0x200, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 2.420298403s ago: executing program 0 (id=941): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xbfb3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) read$FUSE(r1, &(0x7f00000002c0)={0x2020}, 0xe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xfffffffa}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r3 = syz_open_pts(r0, 0x109102) unlinkat(r1, &(0x7f0000000100)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x200) r4 = dup3(r3, r0, 0x0) read$FUSE(r4, &(0x7f0000009300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) socket$nl_xfrm(0x10, 0x3, 0x6) syz_fuse_handle_req(r1, &(0x7f0000004340)="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", 0x2000, &(0x7f000000b480)={0x0, &(0x7f00000063c0)={0x18, 0x0, 0xffffffffffff4839, {0x5}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x60, 0x0, 0x0, {{0x6, 0x4000000000000000, 0x5, 0x7, 0x9, 0x1, 0x4, 0xffb1}}}, &(0x7f00000066c0)={0x18, 0x0, 0xf, {0xfffffeff}}, &(0x7f00000021c0)=ANY=[@ANYBLOB="1a0000000000000001000100"], 0x0, 0x0, &(0x7f0000006840)={0x90, 0x0, 0x10, {0x4, 0x0, 0x8744, 0xb8, 0x10001, 0xa767, {0x3, 0x6b72, 0x200, 0x2, 0x9, 0xe, 0x8, 0x3, 0x7, 0x4000, 0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0xba9}}}, &(0x7f00000064c0)=ANY=[], 0x0, &(0x7f0000009200)={0xa0, 0xffffffffffffffda, 0x6, {{0x6, 0x3, 0xb, 0x7, 0xbe, 0x1, {0x2, 0x7fffffff, 0x7, 0x0, 0xfff, 0x8000000000000000, 0x7, 0x198, 0x7fffffff, 0x97dd85008697dbd3, 0x7fff, 0x0, 0x0, 0x2, 0x400}}, {0x0, 0x1}}}, 0x0, &(0x7f000000b340)={0x130, 0xffffffffffffffda, 0xb31, {0x9, 0x2, 0x0, '\x00', {0x40, 0x2, 0xfffffffffffffff9, 0x5, 0x0, r5, 0xa000, '\x00', 0x4, 0x7, 0xfffffffffffffeff, 0x1, {0x6, 0x6}, {0x3, 0xaf6}, {0x7, 0x4}, {0x7, 0x1}, 0x2, 0x7, 0x5}}}}) 2.420047753s ago: executing program 1 (id=942): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) r2 = signalfd(r0, &(0x7f0000000040)={[0xfffffffffffffff8]}, 0x8) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e21, 0xffffa529, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}, 0x1c) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000340)=0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x0, 0x22, 0xc, &(0x7f00000002c0)="c1f1573e81a2847d7a40c6e45b9bdd4822be3382fb18f44972e6924cd993d3cb8d34", &(0x7f0000000300)=""/12, 0xd, 0x0, 0x23, 0xab, &(0x7f0000000380)="10ae2d69e9dc8eb037bc6329ba3a42fab18149558681177d7ef00625a742daf72ba75f", &(0x7f00000003c0)="0d4201b83540758b8f466f641743f3503238465a23ee402a59eb222b903ecc15c3f820948144942fffa34efbc1c04f687dd0f4b1347f561f12404788b1d50e2c93f68ae57023c3df3c452823077dfb869e8e08224afd31af3c320e06f4de9c7e55058e7fe9329097e64058e382aab0dac55adccae31d4d677e28c7559ee19df5b7be39b53186a8f651aa7e571f5b49f502490c62e815142c59e17d6dc8b8adaf3b8db2073dfef962b0b0b1", 0x0, 0x0, 0x2}, 0x50) write$ppp(r3, &(0x7f0000000240)="b0bd", 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001600), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001640)={0x34, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x932, 0x2, 0x0, 0xe, 0x2, 0x7ff}, &(0x7f0000000280)=0x20) syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100190914887314a4ea20bc9c99ee377bead000000080c20181040000102030109028600030180e007080b0101010a20000904000000010120000924010200032600c511240806010000010000000200feff03000c2403fd0004a80306f9ff0a090401000001022000090401014000050400082501810909020009040200000102200009040201010102200009058209ffdecd414cfa0070b5000a0200"], 0x0) 2.419783073s ago: executing program 3 (id=943): bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000040)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x4, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0xfffffffe}, 0x50) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/fscreate\x00') pread64(r0, 0x0, 0x0, 0xfd1) r1 = io_uring_setup(0x3760, &(0x7f00000000c0)={0x0, 0x8458, 0x40, 0x2, 0x36c}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000240)=[@ioring_restriction_register_op={0x0, 0x2}, @ioring_restriction_sqe_flags_allowed={0x2, 0x1d}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB="f9ffffffffffffffdcd5632e5f"], 0x48) 2.347257725s ago: executing program 6 (id=875): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x5b9, &(0x7f0000000680)="$eJzs3W2IHHcdB/Df7N6mebiaNLZqa2xOQ20gdPdyuYREfGGJD7UmtaL4IhTCkdvuhezdnrkN9LaCLb4pCiL4RgShYl9YEQ3kTaXU9kWLbxSU+kClxoAKIhStFERQV2YfrmszaYr3MHjz+cDc/ec/c/v/7y3fndmd/8wEUFgT6Y8kYjwiLkXEzv7sf68w0f/VOXRxLp2S6HY//Zekt97soYtzw1WHf7cj/TEWsTUidh9PYl/l6naXljvnZprN+vnBfK09v1hbWu7cdXZ+plFv1BcOH50+NnVk+uj02j3XyZ9uv+WPd9x35Ynn//7Pb/76yPfT/o4Plo0+j7UyEROD/0klbhqpH0si7l3rxnJS7r/UccdIXTKWY4d4y7rd3d9LX7+3R8S+Xv53Rjn6L95LTz/wt53xy3vy7iOwfrpD2Ytf7QKbVqm3D5yUqhHRL5dK1Wp/H/7m2F5qtpbaBx5sXViY7e8r74pK6cGzzfrk4LPCrqgk6fzBXvn1+ak3zB+K6O0DP1be1puvnmk1Zzf6zQ7oGY+4fOlzZ7bseEP+/1Tu5x/YvNL8/+KFp55Ny6+V8+4NsJHS/H/3tflPhPxD4cg/FJf8Q3HJPxSX/ENxyT8Ul/xDcck/FJf8Q3HJPxTXMP/3nzwZ95882e0Mzn9faDXOnptbPDY1WZ2/cKZ6pnV+sdpotRq9M3bmr/+4zVZr8eBUXHio1q4vtWtLy53T860LC+3TvfP6T9czLgUA5ODUla333rT3uZeSiHjkA9t6U2rLYLmswubW7SaR9znIQD589Ificqk2KC6f8YHkOsu3XmtBc+37AmyMUt4dAHJz562O/0FR+f4fisv3/1Bc9vEB3/9D8fj+H4pr/Br3/7px5N5dkxHxtoj4Sblyw/BeX8D/r/GIy5e//dnayn24FRQUFFYKeb9DAevt9dDn3RMgL7OHLs4Np41q85nGRrUEZHnl7v4goDT3ncHUXzK2cmygsk7jhF5+LGIifvjbx/fPldMpBu9D69AUkOGRRyPiXVnb/6R3bGDXYL3d/dXi5oi4JSLeERHvXGXbX/9Umv8X6qN18g8b563m/9aIuD0ibouId0fEnoh4zyrb/vmlNP+/2jZaJ/9QDJ9/Pu8eAHn5+FN59wDIyyljDKCwvvNw3j0A8vL0D/LuAZCXr7yYdw+g2J67OyIms47/lXrH+4cqg+sC3jC4FsC2iNgeETsG5xDeODhHcOfIMcPrOf3JiIm4/UejdY7/wcYZjv/rXDX+r7Qy/q8cEXtX0cYzHxz/clb9zJ40/088PBz/l05p+8OxgMD6euXRiNsy85+sjPlNIs1pxHv/xzYmvnDlyaz6F+9LH7fyM/mHfHS/FfH+yM7/UFqqtecXa0vLnbt69/Fu1BcOH50+NnVk+uh0rXeJkNrwQiEZTvz11QNZ9S9Ppfn/xmH5h3yk2//t18j/6P7/+1bRxvGvfelUVv3479P873n2zfNf+vOW5DO9+eF9CR6aabfPH4zYkpy4un5qFR2FTW6YkWGG0vzv35f9+X/34G/S7f/xiPhwur8QEf+KiH9HxEci4qMR8bGIuOdN2vzqnY0rWfW/ezLN/+PnbP8hH2n+Z6+z/U9//2MVbRzY/+MvZtV/aG+a/+pv/nDigbF0kn8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtbe03Dk302zWz69jIe/nCAAAAAAAAEXxnwAAAP//xOQ08g==") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bda7, 0x2, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040854}, 0x4008000) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) r5 = dup(r3) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000005700)={0x0, 0x1, 0x6, @remote}, 0x10) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, 0x0) 2.343484135s ago: executing program 3 (id=944): ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000100)={{0x2, 0x4e24, @empty}, {0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x40, {0x2, 0x4e22, @local}, 'dvmrp1\x00'}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000540)={0x7, 0x1, 0xb089, 0xb, 0x7ff, 0x78}) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) r4 = io_uring_setup(0xd71, &(0x7f00000006c0)={0x0, 0x0, 0x40, 0x2, 0x80000}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='+memory +net_prio \x00rdma +rdma +blkio +cpuset -hugetlb +fruezer '], 0x3f) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000001900010028bd7000fcdbdf251d0100000c000b0003000020030000e008000900", @ANYRES32=0x0, @ANYBLOB="0c000a002d94d129bf94bc5b3519e3d90505cf9452dc54a80fb1663cccc373f56a3b74250d768568d44a477689918d5efb18c2a5cc0dc0709537c9fce6c16c5dceda9e7a053eb13b045f1c44813763b938d7978f31c3baff01e388f2c3c6c289252ea59ca189", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x44048811}, 0x4048084) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x0, 0x0, 0xb, "000000000000000000000000009b914bdc00"}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r8, 0xacf5e67dd0b583a1, 0xffffffff, 0x0, {{0x5}, {@void, @val={0x48, 0x99, {0xfff, 0x55}}}}, [@NL80211_ATTR_HE_OBSS_PD={0x10, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "0fa8a7c45555283b"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000740)={0x74, r8, 0x300, 0x70bd2d, 0x4, {{}, {@void, @val={0xc, 0x99, {0x4, 0x4c}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xfff9}, @NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_ADMITTED_TIME={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x8805}, 0x20004000) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000240)=ANY=[@ANYRES8=r6, @ANYRESOCT=r7, @ANYRESOCT=r7], 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000000)={0x400, 0x957, 0x10, 0x7, 0x5, "02dc126c18aeeac4b8b2a19cb26bd300996e10"}) r9 = socket$unix(0x1, 0x2, 0x0) recvfrom$unix(r9, 0x0, 0x0, 0x41, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) futex(&(0x7f0000000340)=0x2, 0x104, 0x2, &(0x7f0000000400)={r10, r11+60000000}, &(0x7f0000000440)=0x1, 0x2) r12 = syz_open_pts(r0, 0x109102) r13 = dup3(r12, r0, 0x0) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r13) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r14, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4044001) read$FUSE(r13, 0x0, 0x0) 153.363497ms ago: executing program 0 (id=945): add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0157d6897dd8d9db82ddd445cd00180100040000000024000000240000000a000000080000000200000fbfffffff0e00000000000000030000000700004005000000fdffa43cc8f1ee014dfb001681f2d00f681c9964d42fa25e5e1b7c7ec2ac22818ba8c925c3f8f0ef0ee80ec5be420d9560de36f00f4b42c3560af7aa4369480dd5258ceada0e25fcd8cb574ea4e169fb0fe93ff21b44d448d29e60e1"], &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x6}, 0x28) capset(&(0x7f0000000380)={0x20071026}, &(0x7f0000000040)) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x4a, 0x201, 0x0, 0x0, {0xa, 0x0, 0x300}, [@generic="c0179a2870"]}, 0x1c}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 152.897746ms ago: executing program 1 (id=946): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xbfb3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) read$FUSE(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xfffffffa}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r3 = syz_open_pts(r0, 0x109102) unlinkat(r1, &(0x7f0000000100)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x200) r4 = dup3(r3, r0, 0x0) read$FUSE(r4, &(0x7f0000009300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) socket$nl_xfrm(0x10, 0x3, 0x6) syz_fuse_handle_req(r1, &(0x7f0000004340)="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", 0x2000, &(0x7f000000b480)={0x0, &(0x7f00000063c0)={0x18, 0x0, 0xffffffffffff4839, {0x5}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x60, 0x0, 0x0, {{0x6, 0x4000000000000000, 0x5, 0x7, 0x9, 0x1, 0x4, 0xffb1}}}, &(0x7f00000066c0)={0x18, 0x0, 0xf, {0xfffffeff}}, &(0x7f00000021c0)=ANY=[@ANYBLOB="1a0000000000000001000100"], 0x0, 0x0, &(0x7f0000006840)={0x90, 0x0, 0x10, {0x4, 0x0, 0x8744, 0xb8, 0x10001, 0xa767, {0x3, 0x6b72, 0x200, 0x2, 0x9, 0xe, 0x8, 0x3, 0x7, 0x4000, 0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0xba9}}}, &(0x7f00000064c0)=ANY=[], 0x0, &(0x7f0000009200)={0xa0, 0xffffffffffffffda, 0x6, {{0x6, 0x3, 0xb, 0x7, 0xbe, 0x1, {0x2, 0x7fffffff, 0x7, 0x0, 0xfff, 0x8000000000000000, 0x7, 0x198, 0x7fffffff, 0x97dd85008697dbd3, 0x7fff, 0x0, 0x0, 0x2, 0x400}}, {0x0, 0x1}}}, 0x0, &(0x7f000000b340)={0x130, 0xffffffffffffffda, 0xb31, {0x9, 0x2, 0x0, '\x00', {0x40, 0x2, 0xfffffffffffffff9, 0x5, 0x0, r5, 0xa000, '\x00', 0x4, 0x7, 0xfffffffffffffeff, 0x1, {0x6, 0x6}, {0x3, 0xaf6}, {0x7, 0x4}, {0x7, 0x1}, 0x2, 0x7, 0x5}}}}) 152.423037ms ago: executing program 4 (id=947): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x280800, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x1, 0x4, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x1}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4844) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000380)=0x18, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x1e0, r3, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x302}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x90}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}], @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_IE={0x19e, 0x2a, [@ibss={0x6, 0x2, 0x9}, @mic={0x8c, 0x10, {0xf1e, "e302dd70c253", @short="039b564fc7fdfc3f"}}, @preq={0x82, 0x46, {{0x0, 0x1}, 0x9d, 0x5, 0x8000, @device_b, 0x25e, @void, 0xfffffff8, 0xef9dfeaf, 0x4, [{{0x1}, @broadcast, 0xdb97}, {{0x1}, @device_a, 0x800}, {{0x1, 0x0, 0x1}, @device_b, 0x6}, {{}, @device_b, 0xb}]}}, @measure_req={0x26, 0xba, {0x3, 0x0, 0xd9, "5abc8b7b8b4f3387a3866ffc1b4c7445ac034c8598a88af477620051752a403deed0239ffe2e7d85332418481b0d25362c0882831c50bb050d7bac02255b7123636223854062c3f5580ffbe4065ef6c3f623e1ac8c682c877f445a6f80ed2b8f5fa13c209adb4e6e2713c4f5648fefae15363a9e399cd0af4d2461ba595e807aa0eb952e29aa5fbbf3ee3f2f210e3438170c94d0ce69fa7c35767f143e4e94d784d9291fb4bd5a619a1defcfb7e5ab91df24ed6fc8bfb1"}}, @peer_mgmt={0x75, 0x6, {0x0, 0x4, @val=0x9, @void, @void}}, @preq={0x82, 0x57, {{0x1, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x1, @device_b, 0x0, @value, 0xa, 0x36f3, 0x5, [{{0x0, 0x0, 0x1}, @device_b, 0x9}, {{0x1}, @device_b, 0x5}, {{0x0, 0x0, 0x1}, @device_b, 0x4e34}, {{0x0, 0x0, 0x1}}, {{0x1}, @device_a, 0x2}]}}, @dsss={0x3, 0x1, 0x3c}, @ht={0x2d, 0x1a, {0x8000, 0x1, 0x0, 0x0, {0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x800, 0xcb48, 0xe}}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = open$dir(&(0x7f00000006c0)='./file0\x00', 0x442, 0x20) r5 = syz_create_resource$binfmt(&(0x7f0000000700)='./file0\x00') execveat$binfmt(r4, r5, &(0x7f00000008c0)={[&(0x7f0000000740)='+!\x00', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='^/]^\'+:!\xeb$\x00', &(0x7f0000000800)='\\/$-\x12\x00', &(0x7f0000000840)='/dev/rfkill\x00', &(0x7f0000000880)='nl80211\x00']}, &(0x7f0000000980)={[&(0x7f0000000900)='+--%\x00', &(0x7f0000000940)='nl80211\x00']}, 0x100) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) write$FUSE_INIT(r6, &(0x7f0000000a00)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2d, 0x0, 0x4008001, 0x7, 0x9, 0x5, 0xddfb, 0x0, 0x0, 0x20, 0x9}}, 0x50) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000a80)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x68, r3, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x40) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={0xffffffffffffffff, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000c80)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa, &(0x7f0000000d40)=[{}], 0x8, 0x10, &(0x7f0000000d80), &(0x7f0000000dc0), 0x8, 0xc6, 0x8, 0x8, &(0x7f0000000e00)}}, 0x10) sendmsg$nl_route(r8, &(0x7f0000001000)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)=@setlink={0x28, 0x13, 0x800, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, 0x140, 0x6a0}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x3}]}, 0x28}}, 0x4000) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001040), 0x4000, 0x0) ioctl$TIOCNXCL(r10, 0x540d) getsockname(r1, &(0x7f0000001080)=@in={0x2, 0x0, @multicast2}, &(0x7f0000001100)=0x80) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x7c, r3, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x911d, 0x4e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40a0}, 0x20000000) r11 = socket$inet_tcp(0x2, 0x1, 0x0) r12 = open$dir(&(0x7f0000001280)='./file0\x00', 0x82780, 0x41) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000001800)={&(0x7f0000002000)={[{&(0x7f00000012c0)="83f4cd5475bda927445596892ffec143035f50cc6ca8eea9200a652da5d9f61ebfe54c8cde431791d016853c4bd68673ba01796035efa0754e5ce2b3bfc7a50c285190aef447ff4d52d1cc92a25c39e73defc569d91bcdf1558f85b329a4b51ff719bc073ceb3314316bb0c1665e84ce4634c6d1b08c0687a7eb3d1b1438238086491824d7e0b16b18b5bdad146b0fb6358a78af92dd976d375ee6072547ffa707fe7ebda770c20eb50e2a62207e", 0xae, 0x1}, {&(0x7f0000001380)="d83f32b0ee976d9946cae008e898ac0857369e71ac2920c2f2944d9ff04a199b36417d453421e60a608246bc61f966b2b30263e10546a970d611ef73375fbd977d46c5f06e5485f2a631eea797f71dc1e1cba8bdb3aa974c4b51faaa8cc60c987684ac2dbd33db66a24b1a5efd7c58e6791d783e7bd2814af292601c78e84f6bd3ae704bae966d2371247397ff555d0d907677d59e339ad893f23130fc813c2f3424f698f6a5942224eb89c4495d76", 0xaf, 0x1}, {&(0x7f0000001440)="02470b5079177b06e8fbd30fd32004afcb406ddd8b5352e9c9186afb8e6802d346e25ff63ee9450a1ac1c1f6b862634c758472d62c3c417e46476fd25ce562fb96e9095b29ea300b2b5c35c8dc0e4edde0245445b97608afc8097809ecee42bfe0d36b3e4ea7fa2d17d0ae05fd07fc2f16074df990c93d183d11466b4e0fcdc139a40e9c7605717dccfd3c5e928ca7da550a1eb1fe63470cd35cd3d125e5bf95c82586bdb56481a0110a6f3c0f9f6cf79b296b7ab22170", 0xb7, 0x2}, {&(0x7f0000001500)="85920e81f2aeb85e408e81d574c48690c35ccfd89cf9fd62", 0x18, 0x1}, {&(0x7f0000001540)="00fc901af41e5d485b88c085a5b92b647489ba7fc8f467d825843b5631f24b1f14a41126b20c46223656d043e08b22e24a2d014334d159838e217d1001300e52dab0359d88df0f08b6b993813b2a5f4491ba129cbd1efaddf55229b64f9f3fc881ccc63270eb24f153ff1e02d2d43d6f5a55e1cd91bab997224215ae91b05bcc606246cadc419b8973385ae3b7b31daa665cb8da2b3cbebb329275dfa9e5e567c828232062584512550d4c7fe014d1ab2b149ce0ec7c8d0074ee853e4cc7ce8a3d96f8fa6bca6c18f0c6c77e61d28f15ec02f34c3a2a312fa4ed0be7e54207b0f49eb6be4b27d9209d6477797ff9c034f41199648638f2ac86b3", 0xfa, 0x2}, {&(0x7f0000001640)="d0e6ea82137a4c03d2ddd6f9a8c6a8b943c58c6aa89a55324c4bb251a2e820b778b3a35b09233fe239d28ad8c53d8ce38df8345638b59673492c30f7f690ba79afd9a1f4cba801b87c655e3e9ec95185d4d122b8a2fae8ea8f03785a93688753084252401fc87e167214c593d9747ad9f982756195760a01660e234e54eb603ddca0a18ed99bd20d561b6e3cae1f4a2b5e34d7d0038c467f3d43aef207ef70777a9c22f4201f7f07fa527f1121a9466f6a8f35b52b7550a335893b3dbbdb3740f915b4589b4f51cea99392814592ec5e017274b65b5aafa69beaa02036101919c3fb3f28392bd4041334dfd2d0", 0xed, 0x3}, {&(0x7f0000001740)="1b881c6fc6a572de96a1e5ca7e54610905e7d418ca9eef934aa4b80f68d2101528589b8c5d2a66bac4b2019c0a1491f05bb8c6657212724af84773be78c43bc57548547c877d9ccc710ecea91bbf4659cf1804ccf1f3f34cdd4045eb5227e2e771b42c583e9a596c7af22e6b132bba6d8f492fdcce1d23071bfda92a65a404d548655fe5a77e85a08c05c99797ec474ee2f231059982eca372adf9251c", 0x9d, 0x2}]}, 0x7, 0x3, 0x1800ce87c148eba5}, 0x1) ioctl$INCFS_IOC_PERMIT_FILL(r6, 0x40046721, &(0x7f0000001840)={r11}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x4c, r3, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8000050) getsockopt$SO_COOKIE(r11, 0x1, 0x39, &(0x7f00000019c0), &(0x7f0000001a00)=0x8) openat(r12, &(0x7f0000001a40)='./file0\x00', 0x480, 0x48) 120.396897ms ago: executing program 0 (id=948): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4002}) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 111.399747ms ago: executing program 4 (id=949): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}, 0xa0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 55.396769ms ago: executing program 0 (id=950): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f0000000340)={&(0x7f0000000300)=[{&(0x7f0000000080)="4d51498d8731e971ab74cef97a41837157368477e500120e826bb44b48b9a8d7af93bd8d2ca95d09edfd7180e7d37cecea3fcd0e4785877695107359a5bd0cfd78d68d0969e0f0b76a05a0bd45163baba6dd5ee8da913b458a56cb4462fc51100d25d253af1fe7129f0e399809ff3606629fa436c93040f7729daba2cffe89aa95e668b6f68c04f459a9fc7ac9711ee1eb522d08c3e5b879051786951b95cd4d3bee180ba9ae370b", 0xa8}, {&(0x7f0000000200)="c6d15bbd113405dbdfa1d246ea6d72bbc36e0f5bceda73f46cf7f5a02937a92ab9ee05d8108f42cd7962607b2bd16453aa588f5dff90eb439d9b06028365a7d89e36ad8e2dc89859f19ada117593f3c4d9aee35ebbcbeb158e62e909344a1818a0e786131c693d1050650dbe2c60fc8ebf6baa3838360b1adc33fe16b2f00ad608a55ce6cf74395d34ce0b4af39a8499a681bf610c221e411f86718d5f4791ff567bd418b0cd1e951722f5bc7a9aa4f693f4cc310b9c6671024c24287848ceef22c1bfae1fb8dc15a9b80f2ad7056bc3900c4257d43ca5181414a9a991080268eda50c9d0bbe0632af79d1a3b4c624fe7c4e485f5650ab979cdc2880d9f2c4", 0xff}], 0x2, 0x3ff, 0x0, 0xffffffffffffffff, 0x48, 0x6a, 0x6, 0x34e5eb3c}) prctl$PR_GET_SPECULATION_CTRL(0x23, 0x4, 0x7fffffffefff) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000580)={r1, &(0x7f00000003c0)="a1c52547206ff657dfd403355767f8efa4e37168e32f99d1eca398722952a6b752a0d14a6502288109d738ec15891e57471e891c6b1e7472ae3da12d1218eca993e013afa2f8c858599e386ed181ab28fe55149e01921742c7ed04d5b4c5bce5da81731d2b01dd7cadf9fd01a967b5d5a40fcf73705a4fecb8a20f737c650216ab1c490b6767ef689d71d5783d894220dd56025f33abe4fc1938db6a975db275694253161818", &(0x7f0000000480)=""/235}, 0x20) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x2, 0x2, 0xfc4355b635b5a78e, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x37}]}, 0x24}}, 0x20008804) 42.626069ms ago: executing program 6 (id=875): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x5b9, &(0x7f0000000680)="$eJzs3W2IHHcdB/Df7N6mebiaNLZqa2xOQ20gdPdyuYREfGGJD7UmtaL4IhTCkdvuhezdnrkN9LaCLb4pCiL4RgShYl9YEQ3kTaXU9kWLbxSU+kClxoAKIhStFERQV2YfrmszaYr3MHjz+cDc/ec/c/v/7y3fndmd/8wEUFgT6Y8kYjwiLkXEzv7sf68w0f/VOXRxLp2S6HY//Zekt97soYtzw1WHf7cj/TEWsTUidh9PYl/l6naXljvnZprN+vnBfK09v1hbWu7cdXZ+plFv1BcOH50+NnVk+uj02j3XyZ9uv+WPd9x35Ynn//7Pb/76yPfT/o4Plo0+j7UyEROD/0klbhqpH0si7l3rxnJS7r/UccdIXTKWY4d4y7rd3d9LX7+3R8S+Xv53Rjn6L95LTz/wt53xy3vy7iOwfrpD2Ytf7QKbVqm3D5yUqhHRL5dK1Wp/H/7m2F5qtpbaBx5sXViY7e8r74pK6cGzzfrk4LPCrqgk6fzBXvn1+ak3zB+K6O0DP1be1puvnmk1Zzf6zQ7oGY+4fOlzZ7bseEP+/1Tu5x/YvNL8/+KFp55Ny6+V8+4NsJHS/H/3tflPhPxD4cg/FJf8Q3HJPxSX/ENxyT8Ul/xDcck/FJf8Q3HJPxTXMP/3nzwZ95882e0Mzn9faDXOnptbPDY1WZ2/cKZ6pnV+sdpotRq9M3bmr/+4zVZr8eBUXHio1q4vtWtLy53T860LC+3TvfP6T9czLgUA5ODUla333rT3uZeSiHjkA9t6U2rLYLmswubW7SaR9znIQD589Ificqk2KC6f8YHkOsu3XmtBc+37AmyMUt4dAHJz562O/0FR+f4fisv3/1Bc9vEB3/9D8fj+H4pr/Br3/7px5N5dkxHxtoj4Sblyw/BeX8D/r/GIy5e//dnayn24FRQUFFYKeb9DAevt9dDn3RMgL7OHLs4Np41q85nGRrUEZHnl7v4goDT3ncHUXzK2cmygsk7jhF5+LGIifvjbx/fPldMpBu9D69AUkOGRRyPiXVnb/6R3bGDXYL3d/dXi5oi4JSLeERHvXGXbX/9Umv8X6qN18g8b563m/9aIuD0ibouId0fEnoh4zyrb/vmlNP+/2jZaJ/9QDJ9/Pu8eAHn5+FN59wDIyyljDKCwvvNw3j0A8vL0D/LuAZCXr7yYdw+g2J67OyIms47/lXrH+4cqg+sC3jC4FsC2iNgeETsG5xDeODhHcOfIMcPrOf3JiIm4/UejdY7/wcYZjv/rXDX+r7Qy/q8cEXtX0cYzHxz/clb9zJ40/088PBz/l05p+8OxgMD6euXRiNsy85+sjPlNIs1pxHv/xzYmvnDlyaz6F+9LH7fyM/mHfHS/FfH+yM7/UFqqtecXa0vLnbt69/Fu1BcOH50+NnVk+uh0rXeJkNrwQiEZTvz11QNZ9S9Ppfn/xmH5h3yk2//t18j/6P7/+1bRxvGvfelUVv3479P873n2zfNf+vOW5DO9+eF9CR6aabfPH4zYkpy4un5qFR2FTW6YkWGG0vzv35f9+X/34G/S7f/xiPhwur8QEf+KiH9HxEci4qMR8bGIuOdN2vzqnY0rWfW/ezLN/+PnbP8hH2n+Z6+z/U9//2MVbRzY/+MvZtV/aG+a/+pv/nDigbF0kn8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtbe03Dk302zWz69jIe/nCAAAAAAAAEXxnwAAAP//xOQ08g==") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bda7, 0x2, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040854}, 0x4008000) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) r5 = dup(r3) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000005700)={0x0, 0x1, 0x6, @remote}, 0x10) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, 0x0) 0s ago: executing program 0 (id=951): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}, 0xa0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r5], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): 74554][ T412] usb 5-1: 1:1 : format type 0 is detected, processed as PCM [ 101.882465][ T412] usb 5-1: 1:1 : sample bitwidth 177 in over sample bytes 2 [ 101.890302][ T412] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 101.960439][ T412] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 101.984155][ T412] usb 5-1: USB disconnect, device number 10 [ 102.073966][ T30] audit: type=1400 audit(1788375486.827:334): avc: denied { read } for pid=2024 comm="syz.3.503" path="socket:[26202]" dev="sockfs" ino=26202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.355573][ T290] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 102.441729][ T540] udevd[540]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 102.540440][ T30] audit: type=1400 audit(1788375487.276:335): avc: denied { getopt } for pid=2034 comm="syz.4.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 102.612201][ T290] usb 6-1: Using ep0 maxpacket: 8 [ 103.061247][ T290] usb 6-1: config 64 has an invalid interface number: 83 but max is 0 [ 103.080449][ T290] usb 6-1: config 64 has no interface number 0 [ 103.087162][ T2047] capability: warning: `syz.3.509' uses 32-bit capabilities (legacy support in use) [ 103.264294][ T290] usb 6-1: New USB device found, idVendor=0586, idProduct=401a, bcdDevice=4d.8c [ 103.273516][ T290] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.281816][ T290] usb 6-1: Product: syz [ 103.286211][ T290] usb 6-1: Manufacturer: syz [ 103.290844][ T290] usb 6-1: SerialNumber: syz [ 103.424777][ T306] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 103.576896][ T2025] netlink: 8 bytes leftover after parsing attributes in process `syz.5.502'. [ 103.593455][ T2070] overlayfs: empty lowerdir [ 103.605195][ T1685] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 103.750308][ T540] udevd[540]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 103.787807][ T2072] device sit0 entered promiscuous mode [ 103.794214][ T306] usb 4-1: Using ep0 maxpacket: 32 [ 103.805794][ T2072] netlink: 'syz.5.502': attribute type 1 has an invalid length. [ 103.815622][ T2072] netlink: 1 bytes leftover after parsing attributes in process `syz.5.502'. [ 103.948782][ T290] rtl8150 6-1:64.83: couldn't find required endpoints [ 103.955911][ T290] rtl8150: probe of 6-1:64.83 failed with error -5 [ 103.969854][ T306] usb 4-1: unable to get BOS descriptor or descriptor too short [ 103.979489][ T290] usb 6-1: USB disconnect, device number 3 [ 104.012640][ T1685] usb 1-1: device descriptor read/64, error -71 [ 104.055395][ T306] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.247973][ T306] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 104.257172][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.265453][ T306] usb 4-1: Product: и [ 104.269764][ T306] usb 4-1: Manufacturer: 噲^ﵿ鹀襩﯌挜깱 [ 104.277273][ T306] usb 4-1: SerialNumber: ꦋ皊憤橩墇竗禯횂ⷲ킣虜椎ߥ鴱낸捁ꓙ꾿꠮䂅搷爖뷾턕㆝閰磫٣ᶤ៲匉⡃牡⬉ﳿ㔴뢣뤍豖쒻骫棐x撗僥ଢ଼ரꔣ톆왓ᕝ捒듉㣡ꏦڦ䗸렩軶Ὂ [ 104.440277][ T1685] usb 1-1: device descriptor read/64, error -71 [ 104.491683][ T2082] overlayfs: empty lowerdir [ 104.543797][ T1271] udevd[1271]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 104.761028][ T306] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 104.782362][ T306] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 104.803781][ T26] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 104.814803][ T306] usb 4-1: USB disconnect, device number 8 [ 104.846747][ T1685] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 105.039418][ T540] udevd[540]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 105.060281][ T26] usb 6-1: Using ep0 maxpacket: 32 [ 105.135357][ T1685] usb 1-1: device descriptor read/64, error -71 [ 105.189946][ T26] usb 6-1: config 0 has no interfaces? [ 105.198580][ T26] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 105.208258][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.220951][ T26] usb 6-1: config 0 descriptor?? [ 105.286831][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 105.286847][ T30] audit: type=1400 audit(1788375489.849:337): avc: denied { mount } for pid=2091 comm="syz.1.520" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 105.520000][ T306] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 105.552092][ T1685] usb 1-1: device descriptor read/64, error -71 [ 105.626892][ T26] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 105.680430][ T1685] usb usb1-port1: attempt power cycle [ 105.883565][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 105.915563][ T306] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 105.925686][ T306] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 105.935771][ T306] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 106.011806][ T26] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.021981][ T26] usb 2-1: config 1 interface 0 altsetting 82 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 106.035446][ T26] usb 2-1: config 1 interface 0 has no altsetting 0 [ 106.073987][ T290] usb 6-1: USB disconnect, device number 4 [ 106.090846][ T2095] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2095 comm=syz.5.521 [ 106.118750][ T306] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 106.128005][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.136448][ T26] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.145679][ T1685] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 106.153686][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 106.161765][ T26] usb 2-1: SerialNumber: syz [ 106.166900][ T306] usb 4-1: Product: syz [ 106.171094][ T306] usb 4-1: Manufacturer: syz [ 106.179323][ T306] usb 4-1: SerialNumber: syz [ 106.204245][ T2089] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 106.226247][ T306] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 106.238210][ T306] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 106.249180][ T306] usbserial_generic 4-1:1.0: generic converter detected [ 106.257476][ T306] usb 4-1: generic converter now attached to ttyUSB0 [ 106.442884][ T2089] futex_wake_op: syz.3.519 tries to shift op by 144; fix this program [ 106.452609][ T2089] overlayfs: unrecognized mount option "=00000" or missing value [ 106.461431][ T30] audit: type=1326 audit(1788375490.943:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2088 comm="syz.3.519" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783bc9e159 code=0x7ffc0000 [ 106.473497][ T26] cdc_ether 2-1:1.0: invalid descriptor buffer length [ 106.503571][ T1685] usb 1-1: device descriptor read/8, error -71 [ 106.504696][ T413] usb 4-1: USB disconnect, device number 9 [ 106.515772][ T290] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 106.524508][ T26] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 106.531241][ T30] audit: type=1326 audit(1788375490.971:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2088 comm="syz.3.519" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f783bc9e159 code=0x7ffc0000 [ 106.556061][ T26] usb 2-1: USB disconnect, device number 9 [ 106.562493][ T413] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 106.579156][ T413] usbserial_generic 4-1:1.0: device disconnected [ 106.583324][ T30] audit: type=1326 audit(1788375490.971:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2088 comm="syz.3.519" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783bc9e159 code=0x7ffc0000 [ 106.611353][ T30] audit: type=1326 audit(1788375490.971:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2088 comm="syz.3.519" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f783bc9e159 code=0x7ffc0000 [ 106.637461][ T30] audit: type=1326 audit(1788375490.971:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2088 comm="syz.3.519" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783bc9e159 code=0x7ffc0000 [ 106.665447][ T30] audit: type=1326 audit(1788375490.971:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2088 comm="syz.3.519" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783bc9e159 code=0x7ffc0000 [ 106.690659][ T30] audit: type=1400 audit(1788375491.055:344): avc: denied { wake_alarm } for pid=2098 comm="syz.0.523" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 106.766976][ T30] audit: type=1400 audit(1788375491.224:345): avc: denied { getopt } for pid=2102 comm="syz.0.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 106.786996][ T1685] usb 1-1: device descriptor read/8, error -71 [ 106.802918][ T290] usb 6-1: Using ep0 maxpacket: 16 [ 106.931158][ T290] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 106.942781][ T290] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 106.955801][ T290] usb 6-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 106.965801][ T290] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.988638][ T290] usb 6-1: config 0 descriptor?? [ 107.012319][ T30] audit: type=1400 audit(1788375491.458:346): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 107.052035][ T2125] xt_hashlimit: size too large, truncated to 1048576 [ 107.100768][ T2129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2129 comm=syz.1.530 [ 107.316255][ T1685] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 107.412281][ T1685] usb 1-1: Using ep0 maxpacket: 32 [ 107.476667][ T2095] UDC core: couldn't find an available UDC or it's busy: -16 [ 107.487873][ T2095] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 107.520254][ T290] betop 0003:11C2:2208.000C: unknown global tag 0xe [ 107.526934][ T290] betop 0003:11C2:2208.000C: item 0 0 1 14 parsing failed [ 107.543625][ T290] betop 0003:11C2:2208.000C: parse failed [ 107.549594][ T290] betop: probe of 0003:11C2:2208.000C failed with error -22 [ 107.583285][ T1685] usb 1-1: unable to get BOS descriptor or descriptor too short [ 107.668895][ T1685] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 107.735268][ T425] usb 6-1: USB disconnect, device number 5 [ 107.850605][ T1685] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 107.860502][ T1685] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.868927][ T1685] usb 1-1: Product: и [ 107.873876][ T1685] usb 1-1: Manufacturer: 噲^ﵿ鹀襩﯌挜깱㐷嘯臄锺쟐 [ 107.883500][ T1685] usb 1-1: SerialNumber: ꦋ皊憤橩墇竗禯횂ⷲ킣虜椎ߥ鴱낸捁ꓙ꾿꠮䂅搷爖뷾턕㆝閰磫٣ᶤ៲匉⡃牡⬉ﳿ㔴뢣뤍豖쒻骫棐x撗僥ଢ଼ரꔣ톆왓ᕝ捒듉㣡ꏦڦ䗸렩軶Ὂ [ 108.288906][ T1685] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 108.310817][ T1685] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 108.347459][ T1685] usb 1-1: USB disconnect, device number 15 [ 108.551093][ T2159] netlink: 'syz.5.540': attribute type 5 has an invalid length. [ 108.756359][ T2167] FAULT_INJECTION: forcing a failure. [ 108.756359][ T2167] name failslab, interval 1, probability 0, space 0, times 0 [ 108.769416][ T413] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 108.777252][ T2167] CPU: 0 PID: 2167 Comm: syz.5.545 Not tainted syzkaller #0 [ 108.784574][ T2167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.794656][ T2167] Call Trace: [ 108.797955][ T2167] [ 108.800913][ T2167] __dump_stack+0x21/0x30 [ 108.805282][ T2167] dump_stack_lvl+0x110/0x170 [ 108.810522][ T2167] ? show_regs_print_info+0x20/0x20 [ 108.815854][ T2167] dump_stack+0x15/0x20 [ 108.820047][ T2167] should_fail+0x3ab/0x500 [ 108.824503][ T2167] ? netlink_dump+0x1c7/0xdf0 [ 108.829213][ T2167] __should_failslab+0xa4/0xe0 [ 108.834016][ T2167] should_failslab+0x9/0x20 [ 108.838546][ T2167] slab_pre_alloc_hook+0x39/0xd0 [ 108.843514][ T2167] ? netlink_dump+0x1c7/0xdf0 [ 108.848223][ T2167] ? netlink_dump+0x1c7/0xdf0 [ 108.852928][ T2167] __kmalloc_track_caller+0x6c/0x2c0 [ 108.858244][ T2167] ? netlink_dump+0x1c7/0xdf0 [ 108.862952][ T2167] ? netlink_dump+0x1c7/0xdf0 [ 108.867658][ T2167] __alloc_skb+0x210/0x730 [ 108.872129][ T2167] netlink_dump+0x1c7/0xdf0 [ 108.876667][ T2167] ? 0xffffffffa0028000 [ 108.880848][ T2167] ? is_bpf_text_address+0x177/0x190 [ 108.886161][ T2167] ? refcount_inc+0x80/0x80 [ 108.890695][ T2167] ? wait_for_completion_killable_timeout+0x10/0x10 [ 108.897320][ T2167] ? __netlink_lookup+0x387/0x3b0 [ 108.902381][ T2167] __netlink_dump_start+0x558/0x760 [ 108.907710][ T2167] rtnetlink_rcv_msg+0xb75/0xcb0 [ 108.912682][ T2167] ? rtnl_dellink+0x790/0x790 [ 108.917398][ T2167] ? rtnetlink_bind+0x80/0x80 [ 108.922188][ T2167] ? avc_has_perm_noaudit+0x390/0x490 [ 108.928220][ T2167] ? memcpy+0x56/0x70 [ 108.932252][ T2167] ? avc_has_perm_noaudit+0x30a/0x490 [ 108.937654][ T2167] ? arch_stack_walk+0xee/0x140 [ 108.942554][ T2167] ? avc_denied+0x1b0/0x1b0 [ 108.947117][ T2167] ? stack_trace_save+0xa6/0xf0 [ 108.951997][ T2167] ? avc_has_perm+0x163/0x250 [ 108.956702][ T2167] ? avc_has_perm_noaudit+0x490/0x490 [ 108.962092][ T2167] ? x64_sys_call+0x4b/0x9a0 [ 108.966705][ T2167] ? rtnl_dellink+0x790/0x790 [ 108.971496][ T2167] netlink_rcv_skb+0x1e9/0x430 [ 108.976317][ T2167] ? rtnetlink_bind+0x80/0x80 [ 108.981142][ T2167] ? netlink_ack+0xb10/0xb10 [ 108.985763][ T2167] ? _copy_from_iter+0x4a4/0x10a0 [ 108.990894][ T2167] ? __netlink_lookup+0x387/0x3b0 [ 108.995947][ T2167] rtnetlink_rcv+0x1c/0x20 [ 109.000380][ T2167] netlink_unicast+0x86c/0xa30 [ 109.005158][ T2167] netlink_sendmsg+0x879/0xb80 [ 109.010108][ T2167] ? netlink_getsockopt+0x530/0x530 [ 109.015321][ T2167] ? kasan_set_track+0x4a/0x70 [ 109.020100][ T2167] ? security_socket_sendmsg+0x82/0xa0 [ 109.025568][ T2167] ? netlink_getsockopt+0x530/0x530 [ 109.030779][ T2167] ____sys_sendmsg+0x5be/0x8f0 [ 109.035555][ T2167] ? __sys_sendmsg_sock+0x40/0x40 [ 109.040597][ T2167] ? import_iovec+0x7c/0xb0 [ 109.045121][ T2167] ___sys_sendmsg+0x236/0x2e0 [ 109.049820][ T2167] ? __sys_sendmsg+0x280/0x280 [ 109.054626][ T2167] ? __fdget+0x1a1/0x230 [ 109.058988][ T2167] __x64_sys_sendmsg+0x201/0x2d0 [ 109.063961][ T2167] ? ___sys_sendmsg+0x2e0/0x2e0 [ 109.068912][ T2167] ? ksys_write+0x1fa/0x260 [ 109.073680][ T2167] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 109.079877][ T2167] x64_sys_call+0x4b/0x9a0 [ 109.084630][ T2167] do_syscall_64+0x4c/0xa0 [ 109.089166][ T2167] ? clear_bhb_loop+0x50/0xa0 [ 109.093855][ T2167] ? clear_bhb_loop+0x50/0xa0 [ 109.098539][ T2167] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.104446][ T2167] RIP: 0033:0x7f638d4f4159 [ 109.108870][ T2167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.128512][ T2167] RSP: 002b:00007f638bf4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.136945][ T2167] RAX: ffffffffffffffda RBX: 00007f638d77bfa0 RCX: 00007f638d4f4159 [ 109.145123][ T2167] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 109.153106][ T2167] RBP: 00007f638bf4d090 R08: 0000000000000000 R09: 0000000000000000 [ 109.161093][ T2167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.169089][ T2167] R13: 00007f638d77c038 R14: 00007f638d77bfa0 R15: 00007fff1aa2f368 [ 109.177080][ T2167] [ 109.293057][ T2174] FAULT_INJECTION: forcing a failure. [ 109.293057][ T2174] name fail_futex, interval 1, probability 0, space 0, times 0 [ 109.306217][ T2174] CPU: 1 PID: 2174 Comm: syz.3.547 Not tainted syzkaller #0 [ 109.313549][ T2174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.323714][ T2174] Call Trace: [ 109.327042][ T2174] [ 109.329996][ T2174] __dump_stack+0x21/0x30 [ 109.334352][ T2174] dump_stack_lvl+0x110/0x170 [ 109.339049][ T2174] ? show_regs_print_info+0x20/0x20 [ 109.344290][ T2174] dump_stack+0x15/0x20 [ 109.348466][ T2174] should_fail+0x3ab/0x500 [ 109.352908][ T2174] get_futex_key+0x6ee/0xb60 [ 109.357533][ T2174] ? futex_wait_restart+0x250/0x250 [ 109.362805][ T2174] futex_requeue+0x24b/0x18f0 [ 109.367506][ T2174] ? __kernel_text_address+0xa0/0x100 [ 109.372908][ T2174] ? arch_stack_walk+0xee/0x140 [ 109.377783][ T2174] ? futex_wake+0x8f0/0x8f0 [ 109.382307][ T2174] ? stack_trace_save+0xa6/0xf0 [ 109.387185][ T2174] ? __stack_depot_save+0x34/0x480 [ 109.392319][ T2174] ? path_openat+0x284f/0x2f80 [ 109.397105][ T2174] do_futex+0xcc6/0x27f0 [ 109.401565][ T2174] ? kasan_set_track+0x4a/0x70 [ 109.406349][ T2174] ? kmem_cache_free+0x100/0x320 [ 109.411313][ T2174] ? do_sys_openat2+0x6df/0x7f0 [ 109.416189][ T2174] ? x64_sys_call+0x219/0x9a0 [ 109.420894][ T2174] ? do_syscall_64+0x4c/0xa0 [ 109.425600][ T2174] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.431810][ T2174] ? _kstrtoull+0x3bb/0x4c0 [ 109.432874][ T413] usb 2-1: Using ep0 maxpacket: 32 [ 109.436333][ T2174] ? futex_exit_release+0x1e0/0x1e0 [ 109.446839][ T2174] ? kstrtouint_from_user+0x1c4/0x220 [ 109.452237][ T2174] ? kstrtol_from_user+0x2a0/0x2a0 [ 109.457407][ T2174] ? __kasan_check_write+0x14/0x20 [ 109.462569][ T2174] ? proc_fail_nth_write+0x180/0x200 [ 109.467883][ T2174] ? proc_fail_nth_read+0x220/0x220 [ 109.473135][ T2174] ? security_file_permission+0x79/0xa0 [ 109.478708][ T2174] ? vfs_write+0xc72/0xfd0 [ 109.483152][ T2174] ? file_end_write+0x1b0/0x1b0 [ 109.488025][ T2174] ? __kasan_check_write+0x14/0x20 [ 109.493161][ T2174] ? mutex_unlock+0x8f/0x230 [ 109.497779][ T2174] __se_sys_futex+0x135/0x330 [ 109.502485][ T2174] ? __kasan_check_write+0x14/0x20 [ 109.507662][ T2174] ? __x64_sys_futex+0x100/0x100 [ 109.512631][ T2174] ? ksys_write+0x1fa/0x260 [ 109.517159][ T2174] ? __ia32_sys_read+0x90/0x90 [ 109.521963][ T2174] ? sched_clock_cpu+0x18/0x3d0 [ 109.527063][ T2174] __x64_sys_futex+0xe5/0x100 [ 109.531780][ T2174] x64_sys_call+0x251/0x9a0 [ 109.536400][ T2174] do_syscall_64+0x4c/0xa0 [ 109.540852][ T2174] ? clear_bhb_loop+0x50/0xa0 [ 109.545557][ T2174] ? clear_bhb_loop+0x50/0xa0 [ 109.550261][ T2174] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.556295][ T2174] RIP: 0033:0x7f783bc9e159 [ 109.560736][ T2174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.580453][ T2174] RSP: 002b:00007f783a6d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 109.588896][ T2174] RAX: ffffffffffffffda RBX: 00007f783bf26090 RCX: 00007f783bc9e159 [ 109.597044][ T2174] RDX: 0000000000000001 RSI: 000000000000000c RDI: 000020000000cffc [ 109.605049][ T2174] RBP: 00007f783a6d6090 R08: 0000200000048000 R09: 0000000000000000 [ 109.613243][ T2174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.621523][ T2174] R13: 00007f783bf26128 R14: 00007f783bf26090 R15: 00007ffe7c4930a8 [ 109.629551][ T2174] [ 109.632713][ T413] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 109.646581][ T413] usb 2-1: config 0 has no interface number 0 [ 109.657268][ T413] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 109.678634][ T413] usb 2-1: config 0 interface 196 has no altsetting 0 [ 109.849790][ T413] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 109.859348][ T413] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.867513][ T413] usb 2-1: Product: syz [ 109.871939][ T413] usb 2-1: Manufacturer: syz [ 109.877267][ T413] usb 2-1: SerialNumber: syz [ 109.886660][ T413] usb 2-1: config 0 descriptor?? [ 109.903170][ T2163] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 110.122237][ T2190] netlink: 'syz.5.552': attribute type 1 has an invalid length. [ 110.143010][ T2192] netlink: 100 bytes leftover after parsing attributes in process `syz.3.553'. [ 110.152279][ T2192] netlink: 40 bytes leftover after parsing attributes in process `syz.3.553'. [ 110.161444][ T2192] netlink: 40 bytes leftover after parsing attributes in process `syz.3.553'. [ 110.169070][ T2194] binder: 2193:2194 ioctl 400c620e 0 returned -14 [ 110.171287][ T2192] netlink: 40 bytes leftover after parsing attributes in process `syz.3.553'. [ 110.330759][ T1685] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 110.491214][ T26] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 110.541347][ T2204] overlayfs: empty lowerdir [ 110.685106][ T2204] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.950934][ T1685] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 110.961382][ T1685] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 111.079132][ T26] usb 6-1: Using ep0 maxpacket: 32 [ 111.084674][ T1685] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.094023][ T1685] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 111.102709][ T1685] usb 5-1: SerialNumber: syz [ 111.132811][ T2184] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 111.292961][ T26] usb 6-1: unable to get BOS descriptor or descriptor too short [ 111.381425][ T2184] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 111.393757][ T2210] bridge0: port 3(veth0_macvtap) entered blocking state [ 111.401932][ T2210] bridge0: port 3(veth0_macvtap) entered disabled state [ 111.409582][ T2210] device veth0_macvtap entered promiscuous mode [ 111.417125][ T2210] bridge0: port 3(veth0_macvtap) entered blocking state [ 111.424186][ T2210] bridge0: port 3(veth0_macvtap) entered forwarding state [ 111.431955][ T26] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.613930][ T26] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 111.623145][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.645691][ T26] usb 6-1: Product: и [ 111.649824][ T26] usb 6-1: Manufacturer: 噲^ﵿ鹀襩﯌挜깱㐷嘯臄锺쟐 [ 111.667129][ T26] usb 6-1: SerialNumber: ꦋ皊憤橩墇竗禯횂ⷲ킣虜椎ߥ鴱낸捁ꓙ꾿꠮䂅搷爖뷾턕㆝閰磫٣ᶤ៲匉⡃牡⬉ﳿ㔴뢣뤍豖쒻骫棐x撗僥ଢ଼ரꔣ톆왓ᕝ捒듉㣡ꏦڦ䗸렩軶Ὂ [ 111.742021][ T413] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 111.751956][ T413] ipheth: probe of 2-1:0.196 failed with error -71 [ 111.771387][ T413] usb 2-1: USB disconnect, device number 10 [ 111.797783][ T2222] FAULT_INJECTION: forcing a failure. [ 111.797783][ T2222] name failslab, interval 1, probability 0, space 0, times 0 [ 111.821884][ T2222] CPU: 0 PID: 2222 Comm: syz.1.563 Not tainted syzkaller #0 [ 111.829263][ T2222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.839371][ T2222] Call Trace: [ 111.842682][ T2222] [ 111.845638][ T2222] __dump_stack+0x21/0x30 [ 111.850011][ T2222] dump_stack_lvl+0x110/0x170 [ 111.854724][ T2222] ? show_regs_print_info+0x20/0x20 [ 111.859966][ T2222] dump_stack+0x15/0x20 [ 111.864158][ T2222] should_fail+0x3ab/0x500 [ 111.868609][ T2222] ? netlink_dump+0x1c7/0xdf0 [ 111.873332][ T2222] __should_failslab+0xa4/0xe0 [ 111.878142][ T2222] should_failslab+0x9/0x20 [ 111.883116][ T2222] slab_pre_alloc_hook+0x39/0xd0 [ 111.888222][ T2222] ? netlink_dump+0x1c7/0xdf0 [ 111.892958][ T2222] ? netlink_dump+0x1c7/0xdf0 [ 111.897670][ T2222] __kmalloc_track_caller+0x6c/0x2c0 [ 111.903006][ T2222] ? netlink_dump+0x1c7/0xdf0 [ 111.907732][ T2222] ? netlink_dump+0x1c7/0xdf0 [ 111.912466][ T2222] __alloc_skb+0x210/0x730 [ 111.917046][ T2222] netlink_dump+0x1c7/0xdf0 [ 111.921591][ T2222] ? security_capable+0x87/0xb0 [ 111.926571][ T2222] ? ns_capable+0x8c/0xf0 [ 111.930937][ T2222] ? refcount_inc+0x80/0x80 [ 111.935458][ T2222] ? netlink_net_capable+0x125/0x160 [ 111.940846][ T2222] ? __inet_diag_dump_start+0x817/0x980 [ 111.946408][ T2222] __netlink_dump_start+0x558/0x760 [ 111.951627][ T2222] inet_diag_handler_cmd+0x1cd/0x2a0 [ 111.956921][ T2222] ? inet_diag_rcv_msg_compat+0x420/0x420 [ 111.962657][ T2222] ? inet_diag_handler_get_info+0xb70/0xb70 [ 111.969391][ T2222] ? inet_diag_dump_start+0x20/0x20 [ 111.974618][ T2222] ? inet_diag_dump+0x50/0x50 [ 111.979309][ T2222] ? wait_for_completion_killable_timeout+0x10/0x10 [ 111.985921][ T2222] ? selinux_nlmsg_lookup+0x277/0x440 [ 111.991336][ T2222] ? inet_diag_rcv_msg_compat+0x420/0x420 [ 111.997103][ T2222] sock_diag_rcv_msg+0x159/0x3e0 [ 112.002238][ T2222] netlink_rcv_skb+0x1e9/0x430 [ 112.007036][ T2222] ? sock_diag_bind+0xa0/0xa0 [ 112.011943][ T2222] ? netlink_ack+0xb10/0xb10 [ 112.016571][ T2222] ? wait_for_completion_killable_timeout+0x10/0x10 [ 112.023182][ T2222] ? __netlink_lookup+0x387/0x3b0 [ 112.028264][ T2222] sock_diag_rcv+0x28/0x40 [ 112.032696][ T2222] netlink_unicast+0x86c/0xa30 [ 112.037562][ T2222] netlink_sendmsg+0x879/0xb80 [ 112.042342][ T2222] ? avc_denied+0x1b0/0x1b0 [ 112.046867][ T2222] ? netlink_getsockopt+0x530/0x530 [ 112.052079][ T2222] ? security_socket_sendmsg+0x82/0xa0 [ 112.057552][ T2222] sock_write_iter+0x2a6/0x3a0 [ 112.062604][ T2222] ? sock_read_iter+0x380/0x380 [ 112.067484][ T2222] ? file_has_perm+0x52d/0x700 [ 112.072272][ T2222] do_iter_readv_writev+0x477/0x5f0 [ 112.077591][ T2222] ? _kstrtoull+0x3bb/0x4c0 [ 112.082115][ T2222] ? generic_file_rw_checks+0x2a0/0x2a0 [ 112.087681][ T2222] ? fsnotify_perm+0x67/0x5b0 [ 112.092636][ T2222] ? security_file_permission+0x79/0xa0 [ 112.098374][ T2222] ? security_file_permission+0x83/0xa0 [ 112.104043][ T2222] do_iter_write+0x207/0x7b0 [ 112.108669][ T2222] vfs_writev+0x2df/0x570 [ 112.113022][ T2222] ? do_writev+0x2c0/0x2c0 [ 112.117462][ T2222] ? __fget_files+0x2e1/0x340 [ 112.122157][ T2222] ? __fdget_pos+0x1f7/0x380 [ 112.126765][ T2222] ? do_writev+0x76/0x2c0 [ 112.131111][ T2222] do_writev+0x14e/0x2c0 [ 112.135371][ T2222] ? do_readv+0x450/0x450 [ 112.139711][ T2222] ? debug_smp_processor_id+0x17/0x20 [ 112.145098][ T2222] __x64_sys_writev+0x7d/0x90 [ 112.149790][ T2222] x64_sys_call+0x974/0x9a0 [ 112.154309][ T2222] do_syscall_64+0x4c/0xa0 [ 112.158744][ T2222] ? clear_bhb_loop+0x50/0xa0 [ 112.163526][ T2222] ? clear_bhb_loop+0x50/0xa0 [ 112.168220][ T2222] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.174221][ T2222] RIP: 0033:0x7f6b564ed159 [ 112.178650][ T2222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.198458][ T2222] RSP: 002b:00007f6b54f46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 112.207065][ T2222] RAX: ffffffffffffffda RBX: 00007f6b56774fa0 RCX: 00007f6b564ed159 [ 112.215225][ T2222] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 112.223217][ T2222] RBP: 00007f6b54f46090 R08: 0000000000000000 R09: 0000000000000000 [ 112.231302][ T2222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.239290][ T2222] R13: 00007f6b56775038 R14: 00007f6b56774fa0 R15: 00007ffc2b6a6e98 [ 112.247327][ T2222] [ 112.270724][ T1685] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 112.288801][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 112.288817][ T30] audit: type=1400 audit(1788375496.396:367): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 112.324836][ T30] audit: type=1400 audit(1788375496.424:368): avc: denied { search } for pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.352179][ T30] audit: type=1400 audit(1788375496.424:369): avc: denied { read } for pid=140 comm="dhcpcd" name="n15" dev="tmpfs" ino=1463 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.374321][ T30] audit: type=1400 audit(1788375496.424:370): avc: denied { open } for pid=140 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1463 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.399925][ T26] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 112.419017][ T30] audit: type=1400 audit(1788375496.424:371): avc: denied { getattr } for pid=140 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1463 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.442615][ T26] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 112.460836][ T30] audit: type=1400 audit(1788375496.546:372): avc: denied { read } for pid=2236 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.485441][ T413] usb 5-1: USB disconnect, device number 11 [ 112.492754][ T413] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 112.513147][ T2240] xt_time: unknown flags 0xc [ 112.522592][ T26] usb 6-1: USB disconnect, device number 6 [ 112.533145][ T30] audit: type=1400 audit(1788375496.546:373): avc: denied { open } for pid=2236 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.583152][ T30] audit: type=1400 audit(1788375496.546:374): avc: denied { getattr } for pid=2236 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.616977][ T2248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3088 sclass=netlink_route_socket pid=2248 comm=syz.0.566 [ 112.644223][ T30] audit: type=1400 audit(1788375496.724:375): avc: denied { write } for pid=2235 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.693537][ T30] audit: type=1400 audit(1788375496.724:376): avc: denied { add_name } for pid=2235 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.059523][ T2287] netlink: 32 bytes leftover after parsing attributes in process `syz.5.576'. [ 113.296982][ T2294] overlayfs: empty lowerdir [ 113.463054][ T362] udevd[362]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 113.634130][ T413] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 113.996329][ T2318] netlink: 28 bytes leftover after parsing attributes in process `syz.4.588'. [ 114.029722][ T413] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 114.038416][ T413] usb 6-1: config 220 descriptor has 1 excess byte, ignoring [ 114.046137][ T413] usb 6-1: config 220 has no interface number 2 [ 114.052789][ T290] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 114.060493][ T413] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 114.074352][ T413] usb 6-1: config 220 interface 0 has no altsetting 0 [ 114.099434][ T413] usb 6-1: config 220 interface 76 has no altsetting 0 [ 114.106822][ T413] usb 6-1: config 220 interface 1 has no altsetting 0 [ 114.242627][ T2324] overlayfs: empty lowerdir [ 114.410174][ T413] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 114.419591][ T413] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.428012][ T413] usb 6-1: Product: syz [ 114.432209][ T413] usb 6-1: Manufacturer: syz [ 114.438360][ T413] usb 6-1: SerialNumber: syz [ 114.607141][ T290] usb 4-1: unable to get BOS descriptor or descriptor too short [ 114.635171][ T2354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.602'. [ 114.692555][ T290] usb 4-1: config 129 has an invalid interface number: 223 but max is 0 [ 114.700972][ T290] usb 4-1: config 129 has no interface number 0 [ 114.821062][ T413] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 114.827702][ T413] usb 6-1: No valid video chain found. [ 114.833678][ T413] usb 6-1: selecting invalid altsetting 0 [ 114.895706][ T290] usb 4-1: New USB device found, idVendor=0421, idProduct=0475, bcdDevice=8a.80 [ 114.905322][ T290] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.913690][ T290] usb 4-1: Product: syz [ 114.919706][ T413] usb 6-1: USB disconnect, device number 7 [ 114.928984][ T290] usb 4-1: Manufacturer: syz [ 114.936267][ T290] usb 4-1: SerialNumber: syz [ 115.281646][ T290] usb 4-1: bad CDC descriptors [ 115.301948][ T290] usb 4-1: USB disconnect, device number 10 [ 115.434794][ T2371] overlayfs: empty lowerdir [ 115.751971][ T2377] tipc: Can't bind to reserved service type 0 [ 116.496250][ T2368] cgroup: fork rejected by pids controller in /syz1 [ 116.627758][ T2516] netlink: 16 bytes leftover after parsing attributes in process `syz.1.619'. [ 116.649632][ T2518] FAULT_INJECTION: forcing a failure. [ 116.649632][ T2518] name failslab, interval 1, probability 0, space 0, times 0 [ 116.670639][ T2518] CPU: 0 PID: 2518 Comm: syz.5.621 Not tainted syzkaller #0 [ 116.677992][ T2518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.688099][ T2518] Call Trace: [ 116.691413][ T2518] [ 116.694377][ T2518] __dump_stack+0x21/0x30 [ 116.698744][ T2518] dump_stack_lvl+0x110/0x170 [ 116.703449][ T2518] ? show_regs_print_info+0x20/0x20 [ 116.708679][ T2518] dump_stack+0x15/0x20 [ 116.712861][ T2518] should_fail+0x3ab/0x500 [ 116.717314][ T2518] __should_failslab+0xa4/0xe0 [ 116.722108][ T2518] should_failslab+0x9/0x20 [ 116.726798][ T2518] slab_pre_alloc_hook+0x39/0xd0 [ 116.731881][ T2518] ? security_file_alloc+0x33/0x120 [ 116.737208][ T2518] kmem_cache_alloc+0x44/0x260 [ 116.742028][ T2518] security_file_alloc+0x33/0x120 [ 116.747109][ T2518] __alloc_file+0xb5/0x2a0 [ 116.751574][ T2518] alloc_empty_file+0x97/0x180 [ 116.756392][ T2518] path_openat+0xf4/0x2f80 [ 116.760860][ T2518] ? __stack_depot_save+0x34/0x480 [ 116.766022][ T2518] ? __kasan_slab_alloc+0xc9/0xe0 [ 116.771088][ T2518] ? __kasan_slab_alloc+0xb7/0xe0 [ 116.776171][ T2518] ? slab_post_alloc_hook+0x4f/0x2b0 [ 116.781524][ T2518] ? kmem_cache_alloc+0xf7/0x260 [ 116.786503][ T2518] ? getname_flags+0xba/0x510 [ 116.791386][ T2518] ? getname+0x19/0x20 [ 116.795500][ T2518] ? do_sys_openat2+0xeb/0x7f0 [ 116.800299][ T2518] ? __x64_sys_openat+0x136/0x160 [ 116.805368][ T2518] ? x64_sys_call+0x219/0x9a0 [ 116.810091][ T2518] ? do_syscall_64+0x4c/0xa0 [ 116.814718][ T2518] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.820927][ T2518] ? do_filp_open+0x400/0x400 [ 116.825650][ T2518] do_filp_open+0x1df/0x400 [ 116.830191][ T2518] ? vfs_tmpfile+0x2d0/0x2d0 [ 116.834828][ T2518] do_sys_openat2+0x15e/0x7f0 [ 116.839545][ T2518] ? fput_many+0x15a/0x1a0 [ 116.844034][ T2518] ? do_sys_open+0xe0/0xe0 [ 116.848489][ T2518] ? fput+0x1a/0x20 [ 116.852334][ T2518] ? ksys_write+0x1fa/0x260 [ 116.856878][ T2518] ? __ia32_sys_read+0x90/0x90 [ 116.861671][ T2518] __x64_sys_openat+0x136/0x160 [ 116.866640][ T2518] x64_sys_call+0x219/0x9a0 [ 116.871173][ T2518] do_syscall_64+0x4c/0xa0 [ 116.875624][ T2518] ? clear_bhb_loop+0x50/0xa0 [ 116.880331][ T2518] ? clear_bhb_loop+0x50/0xa0 [ 116.885159][ T2518] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.891089][ T2518] RIP: 0033:0x7f638d4f4159 [ 116.895540][ T2518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.915179][ T2518] RSP: 002b:00007f638bf4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 116.923634][ T2518] RAX: ffffffffffffffda RBX: 00007f638d77bfa0 RCX: 00007f638d4f4159 [ 116.931633][ T2518] RDX: 000000000000275a RSI: 0000200000000280 RDI: ffffffffffffff9c [ 116.939634][ T2518] RBP: 00007f638bf4d090 R08: 0000000000000000 R09: 0000000000000000 [ 116.947637][ T2518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.955637][ T2518] R13: 00007f638d77c038 R14: 00007f638d77bfa0 R15: 00007fff1aa2f368 [ 116.963665][ T2518] [ 118.396584][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 118.396601][ T30] audit: type=1400 audit(1788375502.102:395): avc: denied { listen } for pid=2540 comm="syz.5.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 118.424407][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 118.733570][ T290] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 118.752533][ T2552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.629'. [ 119.000835][ T412] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 119.118483][ T290] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 119.130924][ T290] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.145969][ T30] audit: type=1326 audit(1788375502.804:396): auid=4294967295 uid=3305727 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2555 comm="syz.0.633" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf80809159 code=0x0 [ 119.171662][ T290] usb 6-1: config 0 has no interface number 0 [ 119.257500][ T412] usb 5-1: Using ep0 maxpacket: 32 [ 119.343018][ T290] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 119.352243][ T290] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.360790][ T290] usb 6-1: Product: syz [ 119.365749][ T290] usb 6-1: Manufacturer: syz [ 119.370491][ T290] usb 6-1: SerialNumber: syz [ 119.380000][ T290] usb 6-1: config 0 descriptor?? [ 119.418449][ T290] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 119.424872][ T290] usb 6-1: No valid video chain found. [ 119.439170][ T412] usb 5-1: unable to get BOS descriptor or descriptor too short [ 119.524744][ T412] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.584461][ T2565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.636'. [ 119.634546][ T290] usb 6-1: USB disconnect, device number 8 [ 119.654012][ T2568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.637'. [ 119.706517][ T412] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 119.715866][ T412] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.724242][ T412] usb 5-1: Product: и [ 119.728594][ T412] usb 5-1: Manufacturer: 噲^ﵿ鹀襩﯌挜깱㐷嘯臄锺쟐켣 [ 119.738348][ T412] usb 5-1: SerialNumber: ꦋ皊憤橩墇竗禯횂ⷲ킣虜椎ߥ鴱낸捁ꓙ꾿꠮䂅搷爖뷾턕㆝閰磫٣ᶤ៲匉⡃牡⬉ﳿ㔴뢣뤍豖쒻骫棐x撗僥ଢ଼ரꔣ톆왓ᕝ捒듉㣡ꏦڦ䗸렩軶Ὂ [ 120.092898][ T2573] netlink: 16 bytes leftover after parsing attributes in process `syz.0.639'. [ 120.144715][ T1685] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 120.155486][ T412] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 120.176854][ T412] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 120.205172][ T2575] netlink: 28 bytes leftover after parsing attributes in process `syz.1.640'. [ 120.214717][ T412] usb 5-1: USB disconnect, device number 12 [ 120.220690][ T2585] netlink: 28 bytes leftover after parsing attributes in process `syz.1.640'. [ 120.551030][ T1685] usb 4-1: config 0 has no interfaces? [ 120.572372][ T26] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 120.593859][ T306] Bluetooth: hci0: command 0x1003 tx timeout [ 120.600128][ T2543] Bluetooth: hci0: sending frame failed (-49) [ 120.732800][ T1685] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.744334][ T1685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.752444][ T1685] usb 4-1: Product: syz [ 120.756940][ T1685] usb 4-1: Manufacturer: syz [ 120.761839][ T1685] usb 4-1: SerialNumber: syz [ 121.537533][ T1685] usb 4-1: config 0 descriptor?? [ 121.908706][ T26] usb 2-1: unable to get BOS descriptor or descriptor too short [ 121.994354][ T26] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 122.175984][ T26] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 122.185183][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.218888][ T26] usb 2-1: Product: syz [ 122.223146][ T26] usb 2-1: Manufacturer: syz [ 122.227783][ T26] usb 2-1: SerialNumber: syz [ 122.391855][ T1685] usb 4-1: USB disconnect, device number 11 [ 122.529678][ T26] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 122.764013][ T26] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 122.777182][ T26] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 122.817346][ T1685] Bluetooth: hci0: command 0x1001 tx timeout [ 122.825520][ T2543] Bluetooth: hci0: sending frame failed (-49) [ 124.068237][ T26] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 124.078742][ T1685] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 124.105504][ T26] usb 2-1: USB disconnect, device number 11 [ 124.117502][ T540] udevd[540]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 124.134041][ T2632] 9pnet: Insufficient options for proto=fd [ 124.134041][ T2631] 9pnet: Insufficient options for proto=fd [ 124.517214][ T26] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 124.549447][ T1685] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 124.561171][ T1685] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.572639][ T1685] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 124.584973][ T1685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.702477][ T1685] usb 1-1: config 0 descriptor?? [ 124.880789][ T26] usb 2-1: Using ep0 maxpacket: 32 [ 125.041060][ T306] Bluetooth: hci0: command 0x1009 tx timeout [ 125.052037][ T26] usb 2-1: unable to get BOS descriptor or descriptor too short [ 125.505614][ T26] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.516946][ T2647] mmap: syz.4.660 (2647): VmData 167485440 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 126.752940][ T1685] usbhid 1-1:0.0: can't add hid device: -71 [ 126.760456][ T1685] usbhid: probe of 1-1:0.0 failed with error -71 [ 126.773345][ T26] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 126.801435][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.943706][ T1685] usb 1-1: USB disconnect, device number 16 [ 126.950471][ T26] usb 2-1: Product: и [ 126.955143][ T26] usb 2-1: Manufacturer: 噲^ﵿ鹀襩﯌挜깱㐷嘯臄锺쟐켣 [ 126.964550][ T26] usb 2-1: SerialNumber: ꦋ皊憤橩墇竗禯횂ⷲ킣虜椎ߥ鴱낸捁ꓙ꾿꠮䂅搷爖뷾턕㆝閰磫٣ᶤ៲匉⡃牡⬉ﳿ㔴뢣뤍豖쒻骫棐x撗僥ଢ଼ரꔣ톆왓ᕝ捒듉㣡ꏦڦ䗸렩軶Ὂ [ 127.254476][ T2662] overlayfs: empty lowerdir [ 127.507429][ T1271] udevd[1271]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 127.638958][ T26] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 127.660304][ T26] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 127.685796][ T26] usb 2-1: USB disconnect, device number 12 [ 127.890429][ T2672] overlayfs: empty lowerdir [ 127.909063][ T540] udevd[540]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 128.416434][ T2679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.668'. [ 128.426963][ T30] audit: type=1400 audit(1788375511.484:397): avc: denied { bind } for pid=2678 comm="syz.1.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 128.470367][ T2688] loop0: detected capacity change from 0 to 256 [ 128.497263][ T30] audit: type=1400 audit(1788375511.559:398): avc: denied { mount } for pid=2687 comm="syz.0.671" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 128.621810][ T30] audit: type=1400 audit(1788375511.662:399): avc: denied { setattr } for pid=2696 comm="syz.1.674" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 130.151789][ T30] audit: type=1400 audit(1788375513.093:400): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 130.317450][ T2709] overlayfs: empty lowerdir [ 130.331215][ T2711] overlayfs: empty lowerdir [ 130.546061][ T310] udevd[310]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 130.559463][ T540] udevd[540]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 130.888759][ T306] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 131.030893][ T30] audit: type=1400 audit(1788375513.926:401): avc: denied { nnp_transition nosuid_transition } for pid=2715 comm="syz.5.680" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 131.089347][ T30] audit: type=1400 audit(1788375513.945:402): avc: denied { transition } for pid=2715 comm="syz.5.680" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 131.156032][ T306] usb 1-1: Using ep0 maxpacket: 32 [ 131.166878][ T30] audit: type=1400 audit(1788375513.945:403): avc: denied { entrypoint } for pid=2715 comm="syz.5.680" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=149 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 131.241236][ T30] audit: type=1400 audit(1788375513.945:404): avc: denied { share } for pid=2715 comm="syz.5.680" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 131.305796][ T30] audit: type=1400 audit(1788375513.945:405): avc: denied { noatsecure } for pid=2715 comm="syz.5.680" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 131.327167][ T306] usb 1-1: unable to get BOS descriptor or descriptor too short [ 131.480080][ T306] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.658993][ T306] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 131.725303][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.891044][ T306] usb 1-1: Product: и [ 131.901959][ T306] usb 1-1: Manufacturer: 噲^ﵿ鹀襩﯌挜깱㐷嘯臄锺쟐켣 [ 131.924835][ T306] usb 1-1: SerialNumber: ꦋ皊憤橩墇竗禯횂ⷲ킣虜椎ߥ鴱낸捁ꓙ꾿꠮䂅搷爖뷾턕㆝閰磫٣ᶤ៲匉⡃牡⬉ﳿ㔴뢣뤍豖쒻骫棐x撗僥ଢ଼ரꔣ톆왓ᕝ捒듉㣡ꏦڦ䗸렩軶Ὂ [ 132.023692][ T2729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.683'. [ 132.349556][ T2752] overlayfs: empty lowerdir [ 132.584507][ T306] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 132.663449][ T306] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 132.695943][ T306] usb 1-1: USB disconnect, device number 17 [ 133.978207][ T2792] device syzkaller0 entered promiscuous mode [ 134.320465][ T413] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 134.438068][ T1777] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 134.621093][ T2806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.706'. [ 134.737522][ T413] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 134.745848][ T413] usb 4-1: config 0 has no interface number 0 [ 134.752202][ T413] usb 4-1: config 0 interface 41 has no altsetting 0 [ 134.887173][ T1777] usb 2-1: unable to get BOS descriptor or descriptor too short [ 134.929943][ T413] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 134.939220][ T1777] usb 2-1: not running at top speed; connect to a high speed hub [ 134.947131][ T413] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.963265][ T413] usb 4-1: Product: syz [ 134.967562][ T413] usb 4-1: Manufacturer: syz [ 134.972457][ T413] usb 4-1: SerialNumber: syz [ 134.983282][ T1685] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 134.994254][ T413] usb 4-1: config 0 descriptor?? [ 135.047499][ T1777] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.058166][ T1777] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 135.067130][ T1777] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 29794, setting to 64 [ 135.207915][ T1777] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 135.217230][ T1777] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 135.225445][ T1777] usb 2-1: Product: syz [ 135.229913][ T1777] usb 2-1: Manufacturer: syz [ 135.239939][ T1685] usb 5-1: Using ep0 maxpacket: 32 [ 135.251049][ T2796] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 135.273171][ T1777] usb 2-1: Found UVC 1.00 device syz (8086:0ad2) [ 135.279630][ T1777] usb 2-1: No streaming interface found for terminal 2. [ 135.294627][ T1777] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input6 [ 135.304483][ T30] audit: type=1400 audit(1788375517.929:406): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=833 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 135.328532][ T30] audit: type=1400 audit(1788375517.929:407): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=833 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 135.358972][ T30] audit: type=1400 audit(1788375517.929:408): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=833 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 135.453724][ T1685] usb 5-1: unable to get BOS descriptor or descriptor too short [ 135.503768][ T2796] overlayfs: missing 'workdir' [ 135.509346][ T1777] usb 2-1: USB disconnect, device number 13 [ 135.537580][ T2812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.708'. [ 135.550081][ T1685] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.753132][ T1685] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 135.762380][ T1685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.770625][ T1685] usb 5-1: Product: и [ 135.785087][ T1685] usb 5-1: Manufacturer: 噲^ﵿ鹀襩﯌挜깱㐷嘯臄锺쟐켣 [ 135.794499][ T1685] usb 5-1: SerialNumber: ꦋ皊憤橩墇竗禯횂ⷲ킣虜椎ߥ鴱낸捁ꓙ꾿꠮䂅搷爖뷾턕㆝閰磫٣ᶤ៲匉⡃牡⬉ﳿ㔴뢣뤍豖쒻骫棐x撗僥ଢ଼ரꔣ톆왓ᕝ捒듉㣡ꏦڦ䗸렩軶Ὂ [ 135.966950][ T413] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 135.999036][ T413] CoreChips: probe of 4-1:0.41 failed with error -71 [ 136.009357][ T413] usb 4-1: USB disconnect, device number 12 [ 136.213170][ T1685] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 136.245144][ T1685] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 136.309803][ T1685] usb 5-1: USB disconnect, device number 13 [ 136.514553][ T2828] bridge0: port 4(dummy0) entered blocking state [ 136.530468][ T2828] bridge0: port 4(dummy0) entered disabled state [ 136.544984][ T2828] device dummy0 entered promiscuous mode [ 136.561817][ T2828] bridge0: port 4(dummy0) entered blocking state [ 136.568366][ T2828] bridge0: port 4(dummy0) entered forwarding state [ 136.673462][ T540] udevd[540]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 136.713369][ T2833] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 136.887755][ T2844] overlayfs: empty lowerdir [ 136.933230][ T362] udevd[362]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 137.169719][ T2852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=2852 comm=syz.0.719 [ 137.891108][ T315] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 138.186745][ T2869] SELinux: Context OPcǙ?s U^tQ`w& m [ 138.186745][ T2869] %Z@L0NrL1X)ْijɒ%ؑfYjwLݍ8 bV:vi is not valid (left unmapped). [ 138.230940][ T30] audit: type=1400 audit(1788375520.661:409): avc: denied { relabelto } for pid=2868 comm="syz.1.727" name="bus" dev="tmpfs" ino=853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=BC1A4F065063D5C799BB9EC5E83F897381DE0C55E2B2C908EC5E74FA169414516077EA189D15260CF2986D0AA4F9A10CD725D35ACAF3AEC7404C141A30F54EEFB572910D4CB231588B0F29D992690186156ACF02C9920125D89110D966CBEDEE7F596A77F5D44CDD8D98BBE338F4C7DD1BB1E10B6216563AB176D3690FFD09 [ 138.346548][ T30] audit: type=1400 audit(1788375520.661:410): avc: denied { associate } for pid=2868 comm="syz.1.727" name="bus" dev="tmpfs" ino=853 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=BC1A4F065063D5C799BB9EC5E83F897381DE0C55E2B2C908EC5E74FA169414516077EA189D15260CF2986D0AA4F9A10CD725D35ACAF3AEC7404C141A30F54EEFB572910D4CB231588B0F29D992690186156ACF02C9920125D89110D966CBEDEE7F596A77F5D44CDD8D98BBE338F4C7DD1BB1E10B6216563AB176D3690FFD09 [ 138.415046][ T315] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 138.423262][ T315] usb 1-1: config 0 has no interface number 0 [ 138.447048][ T315] usb 1-1: config 0 interface 41 has no altsetting 0 [ 138.468499][ T30] audit: type=1400 audit(1788375520.717:411): avc: denied { unlink } for pid=287 comm="syz-executor" name="bus" dev="tmpfs" ino=853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=BC1A4F065063D5C799BB9EC5E83F897381DE0C55E2B2C908EC5E74FA169414516077EA189D15260CF2986D0AA4F9A10CD725D35ACAF3AEC7404C141A30F54EEFB572910D4CB231588B0F29D992690186156ACF02C9920125D89110D966CBEDEE7F596A77F5D44CDD8D98BBE338F4C7DD1BB1E10B6216563AB176D3690FFD09 [ 138.682322][ T315] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 138.697176][ T2879] device syzkaller0 entered promiscuous mode [ 138.703420][ T315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.711737][ T315] usb 1-1: Product: syz [ 138.716287][ T315] usb 1-1: Manufacturer: syz [ 138.720925][ T315] usb 1-1: SerialNumber: syz [ 138.796157][ T2882] overlayfs: empty lowerdir [ 138.841517][ T315] usb 1-1: config 0 descriptor?? [ 138.890674][ T2882] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 138.942895][ T362] udevd[362]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 139.140516][ T2885] netlink: 'syz.1.732': attribute type 29 has an invalid length. [ 139.150335][ T30] audit: type=1400 audit(1788375521.521:412): avc: denied { write } for pid=2884 comm="syz.1.732" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 139.155511][ T2885] [ 139.222668][ T30] audit: type=1400 audit(1788375521.587:413): avc: denied { load_policy } for pid=2888 comm="syz.4.734" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 139.246203][ T2889] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 139.255282][ T2889] SELinux: failed to load policy [ 139.273649][ T30] audit: type=1400 audit(1788375521.634:414): avc: denied { setopt } for pid=2888 comm="syz.4.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 139.433982][ T30] audit: type=1400 audit(1788375521.783:415): avc: denied { read write } for pid=2898 comm="syz.1.746" name="file1" dev="tmpfs" ino=873 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 139.564390][ T2904] netlink: 16 bytes leftover after parsing attributes in process `syz.5.737'. [ 139.736316][ T2911] overlayfs: empty lowerdir [ 139.883239][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.017040][ T540] udevd[540]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 140.029339][ T315] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 140.072064][ T315] CoreChips: probe of 1-1:0.41 failed with error -71 [ 140.080329][ T315] usb 1-1: USB disconnect, device number 18 [ 140.786802][ T2935] netlink: 12 bytes leftover after parsing attributes in process `syz.5.749'. [ 140.831649][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 140.831664][ T30] audit: type=1400 audit(1788375523.093:417): avc: denied { append } for pid=2933 comm="syz.5.749" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 140.863170][ T1685] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 141.014023][ T2940] overlayfs: empty lowerdir [ 141.112198][ T315] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 141.162645][ T1685] usb 4-1: Using ep0 maxpacket: 32 [ 141.237063][ T2954] FAULT_INJECTION: forcing a failure. [ 141.237063][ T2954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.250275][ T2954] CPU: 0 PID: 2954 Comm: syz.1.755 Not tainted syzkaller #0 [ 141.257577][ T2954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 141.267761][ T2954] Call Trace: [ 141.271069][ T2954] [ 141.274154][ T2954] __dump_stack+0x21/0x30 [ 141.278500][ T2954] dump_stack_lvl+0x110/0x170 [ 141.283191][ T2954] ? show_regs_print_info+0x20/0x20 [ 141.288422][ T2954] dump_stack+0x15/0x20 [ 141.292614][ T2954] should_fail+0x3ab/0x500 [ 141.297055][ T2954] should_fail_usercopy+0x1a/0x20 [ 141.302088][ T2954] strncpy_from_user+0x24/0x2d0 [ 141.307071][ T2954] ? kmem_cache_alloc+0xf7/0x260 [ 141.312067][ T2954] getname_flags+0xf5/0x510 [ 141.316601][ T2954] getname_uflags+0x26/0x30 [ 141.321198][ T2954] __x64_sys_execveat+0xb6/0xf0 [ 141.326091][ T2954] x64_sys_call+0x5c3/0x9a0 [ 141.330604][ T2954] do_syscall_64+0x4c/0xa0 [ 141.333865][ T1685] usb 4-1: unable to get BOS descriptor or descriptor too short [ 141.335035][ T2954] ? clear_bhb_loop+0x50/0xa0 [ 141.347380][ T2954] ? clear_bhb_loop+0x50/0xa0 [ 141.352088][ T2954] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.357994][ T2954] RIP: 0033:0x7f6b564ed159 [ 141.362426][ T2954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.382082][ T2954] RSP: 002b:00007f6b54f46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 141.390614][ T2954] RAX: ffffffffffffffda RBX: 00007f6b56774fa0 RCX: 00007f6b564ed159 [ 141.398626][ T2954] RDX: 0000000000000000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 141.406627][ T2954] RBP: 00007f6b54f46090 R08: 0000000000000000 R09: 0000000000000000 [ 141.414698][ T2954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.422686][ T2954] R13: 00007f6b56775038 R14: 00007f6b56774fa0 R15: 00007ffc2b6a6e98 [ 141.430692][ T2954] [ 141.504611][ T315] usb 5-1: config 0 has an invalid interface number: 127 but max is 1 [ 141.562777][ T315] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 162 [ 141.576556][ T315] usb 5-1: config 0 has no interface number 1 [ 141.618488][ T2971] overlayfs: empty lowerdir [ 141.634032][ T315] usb 5-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 141.647711][ T315] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 141.686367][ T1685] usb 4-1: New USB device found, idVendor=0499, idProduct=1057, bcdDevice= 0.40 [ 141.773138][ T1685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.781464][ T1685] usb 4-1: Product: syz [ 141.785965][ T1685] usb 4-1: Manufacturer: syz [ 141.790676][ T1685] usb 4-1: SerialNumber: syz [ 141.887071][ T2979] block device autoloading is deprecated and will be removed. [ 141.894734][ T2979] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 141.900577][ T315] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 141.920597][ T315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.929303][ T315] usb 5-1: Product: syz [ 141.933908][ T315] usb 5-1: Manufacturer: syz [ 141.938548][ T315] usb 5-1: SerialNumber: syz [ 141.948273][ T315] usb 5-1: config 0 descriptor?? [ 141.975127][ T413] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 141.998036][ T315] usb-storage 5-1:0.127: USB Mass Storage device detected [ 142.033112][ T2977] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 142.042227][ T2977] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 142.058097][ T315] usb-storage 5-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 142.096938][ T315] usb-storage 5-1:0.0: USB Mass Storage device detected [ 142.117583][ T2985] UDC core: couldn't find an available UDC or it's busy: -16 [ 142.131697][ T2985] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 142.132558][ T315] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 142.254151][ T413] usb 1-1: Using ep0 maxpacket: 32 [ 142.307025][ T2990] overlayfs: empty lowerdir [ 142.351689][ T2990] device sit0 left promiscuous mode [ 142.669945][ T413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.681229][ T413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.691001][ T413] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 142.700280][ T413] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.709348][ T413] usb 1-1: config 0 descriptor?? [ 142.756343][ T413] hub 1-1:0.0: USB hub found [ 142.905047][ T2974] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 142.990591][ T413] hub 1-1:0.0: 1 port detected [ 143.193662][ T2974] usb 2-1: device descriptor read/64, error -71 [ 143.298094][ T3002] netlink: 4 bytes leftover after parsing attributes in process `syz.5.767'. [ 143.456455][ T3008] overlayfs: empty lowerdir [ 143.506053][ T1271] udevd[1271]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 143.664105][ T2974] usb 2-1: device descriptor read/64, error -71 [ 143.669938][ T413] usb 1-1: USB disconnect, device number 19 [ 143.920934][ T1685] usb 4-1: invalid MIDI out EP 0 [ 143.926322][ T1685] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 143.938788][ T1685] usb 4-1: USB disconnect, device number 13 [ 143.959283][ T3013] FAULT_INJECTION: forcing a failure. [ 143.959283][ T3013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.972861][ T3013] CPU: 0 PID: 3013 Comm: syz.3.770 Not tainted syzkaller #0 [ 143.979416][ T2974] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 143.980437][ T3013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.998068][ T3013] Call Trace: [ 144.001386][ T3013] [ 144.004329][ T3013] __dump_stack+0x21/0x30 [ 144.008685][ T3013] dump_stack_lvl+0x110/0x170 [ 144.013380][ T3013] ? show_regs_print_info+0x20/0x20 [ 144.018689][ T3013] dump_stack+0x15/0x20 [ 144.022863][ T3013] should_fail+0x3ab/0x500 [ 144.027380][ T3013] should_fail_usercopy+0x1a/0x20 [ 144.032417][ T3013] _copy_from_user+0x20/0xd0 [ 144.037033][ T3013] vhost_vsock_dev_ioctl+0x2d9/0xe60 [ 144.042331][ T3013] ? vhost_vsock_chr_poll+0x50/0x50 [ 144.048141][ T3013] ? __fget_files+0x2e1/0x340 [ 144.052850][ T3013] ? security_file_ioctl+0x84/0xa0 [ 144.057995][ T3013] ? vhost_vsock_chr_poll+0x50/0x50 [ 144.063218][ T3013] __se_sys_ioctl+0x121/0x1a0 [ 144.067930][ T3013] __x64_sys_ioctl+0x7b/0x90 [ 144.072581][ T3013] x64_sys_call+0x2f/0x9a0 [ 144.077029][ T3013] do_syscall_64+0x4c/0xa0 [ 144.081473][ T3013] ? clear_bhb_loop+0x50/0xa0 [ 144.086283][ T3013] ? clear_bhb_loop+0x50/0xa0 [ 144.090978][ T3013] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.097086][ T3013] RIP: 0033:0x7f783bc9e159 [ 144.101615][ T3013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.121501][ T3013] RSP: 002b:00007f783a6f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 144.130026][ T3013] RAX: ffffffffffffffda RBX: 00007f783bf25fa0 RCX: 00007f783bc9e159 [ 144.138196][ T3013] RDX: 00002000000016c0 RSI: 000000004008af25 RDI: 0000000000000003 [ 144.146189][ T3013] RBP: 00007f783a6f7090 R08: 0000000000000000 R09: 0000000000000000 [ 144.154649][ T3013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.162694][ T3013] R13: 00007f783bf26038 R14: 00007f783bf25fa0 R15: 00007ffe7c4930a8 [ 144.170732][ T3013] [ 144.183521][ T425] usb 5-1: USB disconnect, device number 14 [ 144.455359][ T2974] usb 2-1: device descriptor read/64, error -71 [ 144.519309][ T315] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 144.594178][ T1685] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 144.775899][ T315] usb 1-1: Using ep0 maxpacket: 32 [ 144.883257][ T2974] usb 2-1: device descriptor read/64, error -71 [ 145.289966][ T3031] overlayfs: empty lowerdir [ 145.303664][ T3034] overlayfs: empty lowerdir [ 145.561246][ T540] udevd[540]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 145.578712][ T315] usb 1-1: unable to get BOS descriptor or descriptor too short [ 145.590372][ T2974] usb usb2-port1: attempt power cycle [ 145.641915][ T1685] usb 4-1: unable to get BOS descriptor or descriptor too short [ 145.673952][ T315] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 145.685115][ T1685] usb 4-1: not running at top speed; connect to a high speed hub [ 145.770319][ T1685] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.780700][ T1685] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 145.789745][ T1685] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 29794, setting to 64 [ 145.849975][ T3047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.783'. [ 145.861019][ T3047] device syz_tun entered promiscuous mode [ 145.872125][ T30] audit: type=1400 audit(1788375527.807:418): avc: denied { map } for pid=3048 comm="syz.5.784" path="socket:[41944]" dev="sockfs" ino=41944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 145.909146][ T1777] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 145.919880][ T1685] usb 4-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 145.935914][ T1685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 145.951354][ T1685] usb 4-1: Product: syz [ 145.957681][ T1685] usb 4-1: Manufacturer: syz [ 145.984075][ T3017] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 145.993391][ T30] audit: type=1400 audit(1788375527.919:419): avc: denied { rmdir } for pid=815 comm="syz-executor" name="proc" dev="sda1" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.007622][ T1685] usb 4-1: Found UVC 1.00 device syz (8086:0ad2) [ 146.024576][ T1685] usb 4-1: No streaming interface found for terminal 2. [ 146.033240][ T1685] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input7 [ 146.069543][ T315] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.082147][ T315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.090310][ T315] usb 1-1: Product: и [ 146.095154][ T315] usb 1-1: SerialNumber: ꦋ皊憤橩墇竗禯횂ⷲ킣虜椎ߥ鴱낸捁ꓙ꾿꠮䂅搷爖뷾턕㆝閰磫٣ᶤ៲匉⡃牡⬉ﳿ㔴뢣뤍豖쒻骫棐x撗僥ଢ଼ரꔣ톆왓ᕝ捒듉㣡ꏦڦ䗸렩軶Ὂ [ 146.187030][ T1777] usb 5-1: Using ep0 maxpacket: 32 [ 146.208740][ T30] audit: type=1400 audit(1788375528.125:420): avc: denied { ioctl } for pid=3040 comm="syz.4.780" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 146.252724][ T3017] overlayfs: missing 'workdir' [ 146.261887][ T2974] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 146.271356][ T413] usb 4-1: USB disconnect, device number 14 [ 146.358141][ T2974] usb 2-1: Using ep0 maxpacket: 8 [ 146.390187][ T1777] usb 5-1: unable to get BOS descriptor or descriptor too short [ 146.475748][ T1777] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 146.486875][ T2974] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 146.498780][ T2974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.507983][ T315] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 146.521857][ T2974] usb 2-1: config 0 descriptor?? [ 146.529198][ T315] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 146.559499][ T315] usb 1-1: USB disconnect, device number 20 [ 146.657495][ T1777] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.666690][ T1777] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.674937][ T1777] usb 5-1: Product: и [ 146.679295][ T1777] usb 5-1: Manufacturer: 噲^ﵿ鹀襩﯌挜깱㐷嘯臄锺쟐켣 [ 146.688708][ T1777] usb 5-1: SerialNumber: ꦋ皊憤橩墇竗禯횂ⷲ킣虜椎ߥ鴱낸捁ꓙ꾿꠮䂅搷爖뷾턕㆝閰磫٣ᶤ៲匉⡃牡⬉ﳿ㔴뢣뤍豖쒻骫棐x撗僥ଢ଼ரꔣ톆왓ᕝ捒듉㣡ꏦڦ䗸렩軶Ὂ [ 146.787937][ T2974] usb 2-1: USB disconnect, device number 16 [ 146.989072][ T30] audit: type=1400 audit(1788375528.836:421): avc: denied { execmem } for pid=3055 comm="syz.0.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 147.095802][ T1777] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 147.149261][ T1777] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 147.184682][ T1777] usb 5-1: USB disconnect, device number 15 [ 147.283713][ T30] audit: type=1400 audit(1788375529.107:422): avc: denied { module_request } for pid=3055 comm="syz.0.787" kmod="netdev-wlan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 147.542289][ T30] audit: type=1400 audit(1788375529.107:423): avc: denied { create } for pid=3055 comm="syz.0.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 147.639526][ T3061] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 147.656497][ T3061] SELinux: failed to load policy [ 148.047085][ T3077] overlayfs: empty lowerdir [ 148.120362][ T30] audit: type=1400 audit(1788375529.902:424): avc: denied { read write } for pid=285 comm="syz-executor" name="loop0" dev="devtmpfs" ino=895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 148.275881][ T3086] loop0: detected capacity change from 0 to 512 [ 148.368401][ T3086] EXT4-fs (loop0): Ignoring removed oldalloc option [ 148.391803][ T3086] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 148.428126][ T3086] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 148.526696][ T3092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=3092 comm=syz.3.797 [ 148.591789][ T3086] EXT4-fs (loop0): 1 orphan inode deleted [ 148.598346][ T3086] EXT4-fs (loop0): 1 truncate cleaned up [ 148.604717][ T3086] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,abort,bsddf,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,grpid,oldalloc,. Quota mode: writeback. [ 148.829467][ T30] audit: type=1400 audit(1788375530.576:425): avc: denied { read write } for pid=3093 comm="syz.3.799" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.891767][ T30] audit: type=1400 audit(1788375530.576:426): avc: denied { open } for pid=3093 comm="syz.3.799" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 149.137648][ T315] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 149.173242][ T30] audit: type=1400 audit(1788375530.894:427): avc: denied { shutdown } for pid=3095 comm="syz.1.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.200001][ T101] udevd[101]: could not touch /run/udev/queue: No such file or directory [ 149.216964][ T3096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.801'. [ 149.237695][ T3096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.801'. [ 149.250676][ T30] audit: type=1400 audit(1788375530.913:428): avc: denied { setattr } for pid=815 comm="syz-executor" path="/142/mnt/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 149.287559][ T3096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.801'. [ 149.296975][ T3096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.801'. [ 149.316801][ T3096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.801'. [ 149.326015][ T30] audit: type=1400 audit(1788375530.922:429): avc: denied { read } for pid=815 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 149.352685][ T3096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.801'. [ 149.361955][ T3100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61780 sclass=netlink_route_socket pid=3100 comm=syz.1.801 [ 149.375338][ T3096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.801'. [ 149.384830][ T3096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.801'. [ 149.394004][ T3096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.801'. [ 149.403643][ T3096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.801'. [ 149.426271][ T315] usb 4-1: Using ep0 maxpacket: 32 [ 149.608074][ T315] usb 4-1: unable to get BOS descriptor or descriptor too short [ 149.652545][ T3111] FAULT_INJECTION: forcing a failure. [ 149.652545][ T3111] name failslab, interval 1, probability 0, space 0, times 0 [ 149.665296][ T3111] CPU: 1 PID: 3111 Comm: syz.1.806 Not tainted syzkaller #0 [ 149.672635][ T3111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.682768][ T3111] Call Trace: [ 149.686440][ T3111] [ 149.689412][ T3111] __dump_stack+0x21/0x30 [ 149.693801][ T3111] dump_stack_lvl+0x110/0x170 [ 149.698528][ T3111] ? show_regs_print_info+0x20/0x20 [ 149.703788][ T3111] dump_stack+0x15/0x20 [ 149.708110][ T3111] should_fail+0x3ab/0x500 [ 149.712569][ T3111] __should_failslab+0xa4/0xe0 [ 149.717382][ T3111] should_failslab+0x9/0x20 [ 149.721921][ T3111] slab_pre_alloc_hook+0x39/0xd0 [ 149.726993][ T3111] ? xas_create+0xed7/0x1560 [ 149.731641][ T3111] kmem_cache_alloc+0x44/0x260 [ 149.736549][ T3111] xas_create+0xed7/0x1560 [ 149.741055][ T3111] ? __stack_depot_save+0x34/0x480 [ 149.746379][ T3111] xas_store+0x91/0x17c0 [ 149.750785][ T3111] __xa_store+0x153/0x470 [ 149.755159][ T3111] ? xa_erase+0x1b0/0x1b0 [ 149.759628][ T3111] ? _raw_spin_lock+0x94/0xf0 [ 149.764343][ T3111] ? _raw_spin_trylock_bh+0x150/0x150 [ 149.769752][ T3111] xa_store+0x33/0x50 [ 149.773777][ T3111] __io_uring_add_tctx_node+0x1cb/0x500 [ 149.779373][ T3111] ? __io_cqring_overflow_flush+0xa80/0xa80 [ 149.785316][ T3111] io_uring_install_fd+0xc0/0xf0 [ 149.790302][ T3111] __se_sys_io_uring_setup+0x23b9/0x2a20 [ 149.795980][ T3111] ? __x64_sys_io_uring_setup+0x70/0x70 [ 149.801572][ T3111] ? __kasan_check_write+0x14/0x20 [ 149.806725][ T3111] ? switch_fpu_return+0x15d/0x2c0 [ 149.812004][ T3111] __x64_sys_io_uring_setup+0x5b/0x70 [ 149.817462][ T3111] x64_sys_call+0x5f4/0x9a0 [ 149.822044][ T3111] do_syscall_64+0x4c/0xa0 [ 149.826495][ T3111] ? clear_bhb_loop+0x50/0xa0 [ 149.831302][ T3111] ? clear_bhb_loop+0x50/0xa0 [ 149.836014][ T3111] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 149.841948][ T3111] RIP: 0033:0x7f6b564ed159 [ 149.846414][ T3111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.866343][ T3111] RSP: 002b:00007f6b54f45fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 149.875020][ T3111] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007f6b564ed159 [ 149.883122][ T3111] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000002b06 [ 149.891140][ T3111] RBP: 00007f6b56584024 R08: 0000000000000000 R09: 0000000000000000 [ 149.899246][ T3111] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 149.907248][ T3111] R13: 0000000000000000 R14: 0000200000ffd000 R15: 00007ffc2b6a6e98 [ 149.915260][ T3111] [ 149.923412][ T3113] FAULT_INJECTION: forcing a failure. [ 149.923412][ T3113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.937718][ T3113] CPU: 1 PID: 3113 Comm: syz.4.807 Not tainted syzkaller #0 [ 149.945053][ T3113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.955149][ T3113] Call Trace: [ 149.958460][ T3113] [ 149.961419][ T3113] __dump_stack+0x21/0x30 [ 149.965961][ T3113] dump_stack_lvl+0x110/0x170 [ 149.971451][ T3113] ? show_regs_print_info+0x20/0x20 [ 149.977473][ T3113] ? vfs_write+0xc72/0xfd0 [ 149.981932][ T3113] dump_stack+0x15/0x20 [ 149.986136][ T3113] should_fail+0x3ab/0x500 [ 149.990694][ T3113] should_fail_usercopy+0x1a/0x20 [ 149.995775][ T3113] _copy_from_user+0x20/0xd0 [ 150.000402][ T3113] __sys_bpf+0x258/0x7d0 [ 150.004684][ T3113] ? bpf_link_show_fdinfo+0x330/0x330 [ 150.010187][ T3113] ? debug_smp_processor_id+0x17/0x20 [ 150.015604][ T3113] __x64_sys_bpf+0x7c/0x90 [ 150.020062][ T3113] x64_sys_call+0x4b9/0x9a0 [ 150.024616][ T3113] do_syscall_64+0x4c/0xa0 [ 150.029155][ T3113] ? clear_bhb_loop+0x50/0xa0 [ 150.034321][ T3113] ? clear_bhb_loop+0x50/0xa0 [ 150.039060][ T3113] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 150.044993][ T3113] RIP: 0033:0x7fada524f159 [ 150.049536][ T3113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.069176][ T3113] RSP: 002b:00007fada3ca8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 150.077632][ T3113] RAX: ffffffffffffffda RBX: 00007fada54d6fa0 RCX: 00007fada524f159 [ 150.085646][ T3113] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 150.093759][ T3113] RBP: 00007fada3ca8090 R08: 0000000000000000 R09: 0000000000000000 [ 150.101855][ T3113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.109948][ T3113] R13: 00007fada54d7038 R14: 00007fada54d6fa0 R15: 00007ffc83328978 [ 150.118051][ T3113] [ 150.142661][ T315] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 150.423642][ T3120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=545 sclass=netlink_route_socket pid=3120 comm=syz.1.810 [ 150.517770][ T315] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.549311][ T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.612378][ T315] usb 4-1: Product: ꦋ皊憤橩墇竗禯횂ⷲ킣虜椎ߥ鴱낸捁ꓙ꾿꠮䂅搷爖뷾턕㆝閰磫٣ᶤ៲匉⡃牡⬉ﳿ㔴뢣뤍豖쒻骫棐x撗僥ଢ଼ரꔣ톆왓ᕝ捒듉㣡ꏦڦ䗸렩軶Ὂ [ 150.645621][ T1685] logitech-hidpp-device 0005:046D:B012.000D: Device not connected [ 150.697430][ T315] usb 4-1: Manufacturer: и [ 150.707679][ T315] usb 4-1: SerialNumber: syz [ 152.163913][ T315] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 152.633907][ T315] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 152.666708][ T315] usb 4-1: USB disconnect, device number 15 [ 152.948183][ T540] udevd[540]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 153.546201][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 153.546220][ T30] audit: type=1400 audit(1788375534.982:433): avc: denied { mounton } for pid=3159 comm="syz.1.820" path="/175/file0" dev="tmpfs" ino=1007 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 154.330296][ T3154] syz.4.819 (3154) used greatest stack depth: 20456 bytes left [ 154.712719][ T3184] overlayfs: empty lowerdir [ 154.730225][ T315] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 154.996219][ T315] usb 5-1: Using ep0 maxpacket: 32 [ 155.024879][ T3192] sch_fq: defrate 1015 ignored. [ 155.114411][ T30] audit: type=1400 audit(2000000000.000:434): avc: denied { map } for pid=3191 comm="syz.1.831" path="socket:[42429]" dev="sockfs" ino=42429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 155.167210][ T315] usb 5-1: unable to get BOS descriptor or descriptor too short [ 155.188587][ T1685] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 155.252793][ T315] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.428406][ T3197] __nla_validate_parse: 16 callbacks suppressed [ 155.428429][ T3197] netlink: 84 bytes leftover after parsing attributes in process `syz.3.832'. [ 155.444108][ T315] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.453535][ T1685] usb 1-1: Using ep0 maxpacket: 32 [ 155.459198][ T315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.470965][ T315] usb 5-1: Product: 噲^ﵿ鹀襩﯌挜깱㐷嘯臄锺쟐켣 [ 155.489923][ T315] usb 5-1: Manufacturer: 魌⚦䬤껨牔廓艐೛幵뙎샻ꌞ䟹̰빡琝ᕗ갛埰麽¶뉝箰쇺东㡺뇔꠭는ﯤ縔涃雞滍벇⠿ᪧ劍鎄஫ᴪ滗啅Ꟁঽா宬崩嗉㍌끐훳喝陊騃﬎⃨邫씯튞ɾ⢧ྈ줄㋓졁镊嗖ῄ།䠵㒕ơ榙Ὸ悊鸦㛈Ṻ쑆╢힄肑敐䈴싌왠쾀 [ 155.520303][ T315] usb 5-1: SerialNumber: и [ 155.690813][ T3201] overlayfs: empty lowerdir [ 155.704332][ T1685] usb 1-1: unable to get BOS descriptor or descriptor too short [ 155.780286][ T1271] udevd[1271]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 155.853021][ T3201] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 156.023253][ T1685] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 156.118813][ T315] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 156.140544][ T315] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 156.177241][ T3206] overlayfs: empty lowerdir [ 156.356303][ T1271] udevd[1271]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 156.373118][ T315] usb 5-1: USB disconnect, device number 16 [ 156.487144][ T1685] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.523419][ T1685] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.534316][ T1685] usb 1-1: Product: ꦋ皊憤橩墇竗禯횂ⷲ킣虜椎ߥ鴱낸捁ꓙ꾿꠮䂅搷爖뷾턕㆝閰磫٣ᶤ៲匉⡃牡⬉ﳿ㔴뢣뤍豖쒻骫棐x撗僥ଢ଼ரꔣ톆왓ᕝ捒듉㣡ꏦڦ䗸렩軶Ὂ [ 156.557582][ T1685] usb 1-1: Manufacturer: и [ 156.563094][ T1685] usb 1-1: SerialNumber: syz [ 156.666322][ T3215] netlink: 64 bytes leftover after parsing attributes in process `syz.3.836'. [ 156.772850][ T540] udevd[540]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 156.952625][ T1685] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 156.974251][ T1685] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 157.006959][ T1685] usb 1-1: USB disconnect, device number 21 [ 157.192811][ T3226] FAULT_INJECTION: forcing a failure. [ 157.192811][ T3226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.206512][ T3226] CPU: 1 PID: 3226 Comm: syz.1.841 Not tainted syzkaller #0 [ 157.213845][ T3226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.223952][ T3226] Call Trace: [ 157.227272][ T3226] [ 157.230225][ T3226] __dump_stack+0x21/0x30 [ 157.234588][ T3226] dump_stack_lvl+0x110/0x170 [ 157.239314][ T3226] ? show_regs_print_info+0x20/0x20 [ 157.244540][ T3226] ? _raw_spin_lock_irq+0x95/0xf0 [ 157.249601][ T3226] dump_stack+0x15/0x20 [ 157.253796][ T3226] should_fail+0x3ab/0x500 [ 157.258260][ T3226] should_fail_usercopy+0x1a/0x20 [ 157.263323][ T3226] copy_page_from_iter_atomic+0x3de/0x1350 [ 157.269259][ T3226] ? pipe_zero+0x370/0x370 [ 157.273716][ T3226] generic_perform_write+0x310/0x690 [ 157.279052][ T3226] ? grab_cache_page_write_begin+0xb0/0xb0 [ 157.284898][ T3226] ? file_remove_privs+0x5c0/0x5c0 [ 157.290080][ T3226] ? rwsem_write_trylock+0x136/0x300 [ 157.295404][ T3226] ? clear_nonspinnable+0x60/0x60 [ 157.300482][ T3226] __generic_file_write_iter+0x268/0x490 [ 157.306242][ T3226] ? generic_write_checks+0x3df/0x480 [ 157.311654][ T3226] generic_file_write_iter+0xa9/0x1d0 [ 157.317170][ T3226] vfs_write+0x831/0xfd0 [ 157.321453][ T3226] ? file_end_write+0x1b0/0x1b0 [ 157.326435][ T3226] ? __fget_files+0x2e1/0x340 [ 157.331143][ T3226] ? __fdget+0x1a1/0x230 [ 157.335415][ T3226] ? __x64_sys_pwrite64+0xf3/0x220 [ 157.340644][ T3226] __x64_sys_pwrite64+0x194/0x220 [ 157.345703][ T3226] ? ksys_pwrite64+0x1b0/0x1b0 [ 157.350516][ T3226] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 157.356898][ T3226] x64_sys_call+0xa6/0x9a0 [ 157.361356][ T3226] do_syscall_64+0x4c/0xa0 [ 157.365810][ T3226] ? clear_bhb_loop+0x50/0xa0 [ 157.370531][ T3226] ? clear_bhb_loop+0x50/0xa0 [ 157.376045][ T3226] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 157.382506][ T3226] RIP: 0033:0x7f6b564ed159 [ 157.387090][ T3226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.406732][ T3226] RSP: 002b:00007f6b54f46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 157.415182][ T3226] RAX: ffffffffffffffda RBX: 00007f6b56774fa0 RCX: 00007f6b564ed159 [ 157.423214][ T3226] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000003 [ 157.431345][ T3226] RBP: 00007f6b54f46090 R08: 0000000000000000 R09: 0000000000000000 [ 157.439355][ T3226] R10: 000000000000fecc R11: 0000000000000246 R12: 0000000000000001 [ 157.447454][ T3226] R13: 00007f6b56775038 R14: 00007f6b56774fa0 R15: 00007ffc2b6a6e98 [ 157.455466][ T3226] [ 157.480567][ T3231] netlink: 'syz.0.843': attribute type 12 has an invalid length. [ 157.511715][ T3231] netlink: 'syz.0.843': attribute type 29 has an invalid length. [ 157.528719][ T3231] netlink: 148 bytes leftover after parsing attributes in process `syz.0.843'. [ 157.548999][ T3231] netlink: 'syz.0.843': attribute type 3 has an invalid length. [ 157.580801][ T30] audit: type=1400 audit(2000000002.291:435): avc: denied { watch } for pid=3232 comm="syz.3.844" path="/159/file1" dev="tmpfs" ino=885 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 157.607661][ T3231] netlink: 'syz.0.843': attribute type 3 has an invalid length. [ 157.727216][ T3242] FAULT_INJECTION: forcing a failure. [ 157.727216][ T3242] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 157.732479][ T3245] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 157.741324][ T3242] CPU: 0 PID: 3242 Comm: syz.0.847 Not tainted syzkaller #0 [ 157.757082][ T3242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.767178][ T3242] Call Trace: [ 157.770499][ T3242] [ 157.773448][ T3242] __dump_stack+0x21/0x30 [ 157.777793][ T3242] dump_stack_lvl+0x110/0x170 [ 157.782503][ T3242] ? show_regs_print_info+0x20/0x20 [ 157.785851][ T3245] overlayfs: missing 'lowerdir' [ 157.787731][ T3242] dump_stack+0x15/0x20 [ 157.787757][ T3242] should_fail+0x3ab/0x500 [ 157.787778][ T3242] should_fail_alloc_page+0x55/0x80 [ 157.806432][ T3242] prepare_alloc_pages+0x13f/0x590 [ 157.811583][ T3242] ? __alloc_pages_bulk+0xab0/0xab0 [ 157.817136][ T3242] ? unwind_get_return_address+0x4d/0x90 [ 157.822792][ T3242] ? stack_trace_save+0xf0/0xf0 [ 157.827692][ T3242] __alloc_pages+0x11d/0x460 [ 157.832606][ T3242] ? prep_new_page+0x110/0x110 [ 157.837422][ T3242] shmem_alloc_and_acct_page+0x4a2/0x8d0 [ 157.843225][ T3242] ? shmem_swapin_page+0x1630/0x1630 [ 157.848557][ T3242] ? xas_load+0x2ea/0x300 [ 157.852924][ T3242] ? pagecache_get_page+0xceb/0xdd0 [ 157.858166][ T3242] ? page_cache_prev_miss+0x290/0x290 [ 157.863591][ T3242] ? _raw_spin_lock_irq+0x95/0xf0 [ 157.868655][ T3242] ? _raw_spin_lock_irqsave+0x130/0x130 [ 157.874583][ T3242] ? __mod_memcg_lruvec_state+0x122/0x1b0 [ 157.880442][ T3242] shmem_getpage_gfp+0x127d/0x2250 [ 157.886078][ T3242] shmem_fault+0x196/0x530 [ 157.890597][ T3242] ? shmem_unused_huge_shrink+0xe60/0xe60 [ 157.896378][ T3242] ? filemap_read_page+0x330/0x330 [ 157.901553][ T3242] ? do_set_pte+0x35c/0x470 [ 157.906109][ T3242] ? _raw_spin_unlock+0x4d/0x70 [ 157.911031][ T3242] __do_fault+0x25f/0x2f0 [ 157.916293][ T3242] handle_pte_fault+0x1bc0/0x2770 [ 157.921550][ T3242] ? fault_around_bytes_set+0xc0/0xc0 [ 157.926965][ T3242] ? __kasan_slab_alloc+0xc9/0xe0 [ 157.932035][ T3242] ? __kasan_slab_alloc+0xb7/0xe0 [ 157.937274][ T3242] ? slab_post_alloc_hook+0x4f/0x2b0 [ 157.942603][ T3242] do_handle_mm_fault+0x1b3b/0x1e30 [ 157.947994][ T3242] ? _raw_spin_unlock+0x4d/0x70 [ 157.952976][ T3242] ? follow_page_pte+0x3b7/0x980 [ 157.958242][ T3242] ? numa_migrate_prep+0xd0/0xd0 [ 157.963945][ T3242] ? follow_page_mask+0x7aa/0xf30 [ 157.969016][ T3242] __get_user_pages+0x80e/0x10c0 [ 157.974299][ T3242] ? up_write+0x7b/0x290 [ 157.978587][ T3242] ? populate_vma_page_range+0xf0/0xf0 [ 157.984093][ T3242] __mm_populate+0x324/0x470 [ 157.988849][ T3242] ? check_vma_flags+0x2d0/0x2d0 [ 157.993852][ T3242] vm_mmap_pgoff+0x245/0x410 [ 157.998522][ T3242] ? account_locked_vm+0x270/0x270 [ 158.003850][ T3242] ksys_mmap_pgoff+0x161/0x1d0 [ 158.008696][ T3242] __x64_sys_mmap+0xfa/0x110 [ 158.013357][ T3242] x64_sys_call+0x83/0x9a0 [ 158.017822][ T3242] do_syscall_64+0x4c/0xa0 [ 158.022280][ T3242] ? clear_bhb_loop+0x50/0xa0 [ 158.026993][ T3242] ? clear_bhb_loop+0x50/0xa0 [ 158.031714][ T3242] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.037663][ T3242] RIP: 0033:0x7fbf80809159 [ 158.042116][ T3242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.061782][ T3242] RSP: 002b:00007fbf7f262028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 158.070257][ T3242] RAX: ffffffffffffffda RBX: 00007fbf80a90fa0 RCX: 00007fbf80809159 [ 158.078277][ T3242] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 158.086289][ T3242] RBP: 00007fbf7f262090 R08: 0000000000000004 R09: 0000000000000000 [ 158.094319][ T3242] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000001 [ 158.102321][ T3242] R13: 00007fbf80a91038 R14: 00007fbf80a90fa0 R15: 00007ffcd88ddc18 [ 158.110550][ T3242] [ 158.240800][ T3257] overlayfs: empty lowerdir [ 158.317440][ T3261] xt_ecn: cannot match TCP bits for non-tcp packets [ 158.358689][ T3263] fuse: Bad value for 'fd' [ 158.402702][ T3265] device sit1 entered promiscuous mode [ 158.462819][ T3268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35661 sclass=netlink_route_socket pid=3268 comm=syz.4.856 [ 158.495913][ T30] audit: type=1400 audit(2000000003.152:436): avc: denied { getopt } for pid=3264 comm="syz.1.854" laddr=fe80::f447:15ff:fe29:4d4c lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.611611][ T30] audit: type=1326 audit(8002097164.262:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3278 comm="syz.0.858" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf80809159 code=0x7ffc0000 [ 158.782283][ T3280] netlink: 64 bytes leftover after parsing attributes in process `syz.3.857'. [ 158.958227][ T30] audit: type=1326 audit(8002097164.281:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3278 comm="syz.0.858" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf80809159 code=0x7ffc0000 [ 159.267397][ T30] audit: type=1326 audit(8002097164.281:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3278 comm="syz.0.858" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf80809159 code=0x7ffc0000 [ 159.584393][ T30] audit: type=1326 audit(8002097164.281:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3278 comm="syz.0.858" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf80809159 code=0x7ffc0000 [ 159.727790][ T30] audit: type=1326 audit(8002097164.281:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3278 comm="syz.0.858" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fbf80809159 code=0x7ffc0000 [ 159.791727][ T30] audit: type=1326 audit(8002097164.281:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3278 comm="syz.0.858" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf80809159 code=0x7ffc0000 [ 159.865480][ T30] audit: type=1326 audit(8002097164.281:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3278 comm="syz.0.858" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf80809159 code=0x7ffc0000 [ 159.890329][ T30] audit: type=1326 audit(8002097164.281:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3278 comm="syz.0.858" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf80809159 code=0x7ffc0000 [ 159.917142][ T30] audit: type=1326 audit(8002097164.281:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3278 comm="syz.0.858" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf80809159 code=0x7ffc0000 [ 159.942927][ T30] audit: type=1326 audit(8002097164.281:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3278 comm="syz.0.858" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbf80809159 code=0x7ffc0000 [ 159.969038][ T30] audit: type=1326 audit(8002097164.281:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3278 comm="syz.0.858" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf80809159 code=0x7ffc0000 [ 160.009371][ T1685] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 160.104182][ T3314] FAULT_INJECTION: forcing a failure. [ 160.104182][ T3314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.117977][ T3314] CPU: 1 PID: 3314 Comm: syz.3.868 Not tainted syzkaller #0 [ 160.125303][ T3314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 160.135386][ T3314] Call Trace: [ 160.138725][ T3314] [ 160.141683][ T3314] __dump_stack+0x21/0x30 [ 160.146134][ T3314] dump_stack_lvl+0x110/0x170 [ 160.150838][ T3314] ? show_regs_print_info+0x20/0x20 [ 160.156071][ T3314] dump_stack+0x15/0x20 [ 160.160426][ T3314] should_fail+0x3ab/0x500 [ 160.164869][ T3314] should_fail_usercopy+0x1a/0x20 [ 160.169921][ T3314] _copy_to_user+0x20/0x90 [ 160.174371][ T3314] simple_read_from_buffer+0xe9/0x160 [ 160.179774][ T3314] proc_fail_nth_read+0x1a6/0x220 [ 160.184835][ T3314] ? proc_fault_inject_write+0x310/0x310 [ 160.190630][ T3314] ? security_file_permission+0x83/0xa0 [ 160.196216][ T3314] ? proc_fault_inject_write+0x310/0x310 [ 160.201965][ T3314] vfs_read+0x28c/0xc20 [ 160.206146][ T3314] ? kernel_read+0x1f0/0x1f0 [ 160.210763][ T3314] ? __kasan_check_write+0x14/0x20 [ 160.215902][ T3314] ? mutex_lock+0x9b/0x1c0 [ 160.220353][ T3314] ? wait_for_completion_killable_timeout+0x10/0x10 [ 160.227165][ T3314] ? __fget_files+0x2e1/0x340 [ 160.232110][ T3314] ? __fdget_pos+0x2d2/0x380 [ 160.236807][ T3314] ? ksys_read+0x70/0x260 [ 160.241345][ T3314] ksys_read+0x14a/0x260 [ 160.245619][ T3314] ? vfs_write+0xfd0/0xfd0 [ 160.250083][ T3314] ? debug_smp_processor_id+0x17/0x20 [ 160.255573][ T3314] __x64_sys_read+0x7b/0x90 [ 160.260113][ T3314] x64_sys_call+0x96d/0x9a0 [ 160.264653][ T3314] do_syscall_64+0x4c/0xa0 [ 160.269103][ T3314] ? clear_bhb_loop+0x50/0xa0 [ 160.273852][ T3314] ? clear_bhb_loop+0x50/0xa0 [ 160.278737][ T3314] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.284670][ T3314] RIP: 0033:0x7f783bc5e98e [ 160.289285][ T3314] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 160.308923][ T3314] RSP: 002b:00007f783a6f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 160.317458][ T3314] RAX: ffffffffffffffda RBX: 00007f783a6f76c0 RCX: 00007f783bc5e98e [ 160.325462][ T3314] RDX: 000000000000000f RSI: 00007f783a6f70a0 RDI: 0000000000000004 [ 160.333465][ T3314] RBP: 00007f783a6f7090 R08: 0000000000000000 R09: 0000000000000000 [ 160.342262][ T3314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.350505][ T3314] R13: 00007f783bf26038 R14: 00007f783bf25fa0 R15: 00007ffe7c4930a8 [ 160.358627][ T3314] [ 160.379760][ T3316] netlink: 19 bytes leftover after parsing attributes in process `syz.3.869'. [ 160.522280][ T1685] usb 5-1: device descriptor read/64, error -71 [ 160.660290][ T3320] device bridge0 entered promiscuous mode [ 160.677682][ T3320] device vlan2 entered promiscuous mode [ 160.938788][ T1685] usb 5-1: device descriptor read/64, error -71 [ 160.976347][ T3326] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 161.014744][ T3326] overlayfs: failed to look up (tracing) for ino (-66) [ 161.227283][ T1685] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 161.526507][ T1685] usb 5-1: device descriptor read/64, error -71 [ 161.943183][ T1685] usb 5-1: device descriptor read/64, error -71 [ 162.018000][ T425] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 162.071948][ T1685] usb usb5-port1: attempt power cycle [ 162.274505][ T425] usb 4-1: Using ep0 maxpacket: 16 [ 162.402695][ T425] usb 4-1: config 255 has an invalid interface number: 209 but max is 0 [ 162.411169][ T425] usb 4-1: config 255 has no interface number 0 [ 162.421610][ T425] usb 4-1: config 255 interface 209 altsetting 2 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 162.433311][ T425] usb 4-1: config 255 interface 209 has no altsetting 0 [ 162.509719][ T1685] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 162.531019][ T315] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 162.627137][ T425] usb 4-1: New USB device found, idVendor=0b57, idProduct=dfc7, bcdDevice=1a.f7 [ 162.636243][ T425] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.644509][ T425] usb 4-1: Product: syz [ 162.648828][ T425] usb 4-1: Manufacturer: syz [ 162.653506][ T425] usb 4-1: SerialNumber: syz [ 162.691243][ T1685] usb 5-1: device descriptor read/8, error -71 [ 162.852263][ T45] device veth0_macvtap left promiscuous mode [ 162.858758][ T45] bridge0: port 3(veth0_macvtap) entered disabled state [ 162.866516][ T45] device bridge_slave_1 left promiscuous mode [ 162.873126][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.881454][ T45] device bridge_slave_0 left promiscuous mode [ 162.887919][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.896517][ T45] device veth1_macvtap left promiscuous mode [ 162.902751][ T45] device veth0_vlan left promiscuous mode [ 162.926228][ T315] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.936495][ T315] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 162.946202][ T315] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 162.959231][ T1685] usb 5-1: device descriptor read/8, error -71 [ 163.129277][ T315] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 163.138722][ T315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.147341][ T315] usb 1-1: Product: syz [ 163.153050][ T315] usb 1-1: Manufacturer: syz [ 163.157790][ T315] usb 1-1: SerialNumber: syz [ 163.204601][ T315] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 163.211599][ T315] cdc_ncm 1-1:1.0: bind() failure [ 163.423047][ T3334] UDC core: couldn't find an available UDC or it's busy: -16 [ 163.430549][ T3334] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 164.742620][ T315] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 165.009811][ T315] usb 5-1: Using ep0 maxpacket: 8 [ 165.031971][ T425] usbhid 4-1:255.209: couldn't find an input interrupt endpoint [ 165.040588][ T425] usb 4-1: USB disconnect, device number 16 [ 165.309053][ T315] usb 5-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 165.318625][ T315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.326967][ T315] usb 5-1: Product: syz [ 165.331581][ T315] usb 5-1: Manufacturer: syz [ 165.336286][ T315] usb 5-1: SerialNumber: syz [ 165.456852][ T413] usb 1-1: USB disconnect, device number 22 [ 165.726021][ T315] usb 5-1: unit 0 not found! [ 165.733265][ T315] usb 5-1: USB disconnect, device number 21 [ 165.950694][ T540] udevd[540]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 166.518005][ T3403] fuse: Bad value for 'fd' [ 166.533824][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 166.533890][ T30] audit: type=1400 audit(8002097171.665:482): avc: denied { mounton } for pid=3391 comm="syz.1.891" path="/199/file0" dev="tmpfs" ino=1132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 167.627622][ T413] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 167.969606][ T413] usb 5-1: Using ep0 maxpacket: 32 [ 168.140733][ T413] usb 5-1: unable to get BOS descriptor or descriptor too short [ 168.166594][ T30] audit: type=1400 audit(8002097173.209:483): avc: denied { accept } for pid=3408 comm="syz.3.896" path="socket:[44698]" dev="sockfs" ino=44698 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 168.247410][ T413] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 168.262411][ T30] audit: type=1326 audit(8002097173.294:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3415 comm="syz.3.897" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f783bc9e159 code=0x0 [ 168.428985][ T413] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.438285][ T413] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.446401][ T413] usb 5-1: Product: ꦋ皊憤橩墇竗禯횂ⷲ킣虜椎ߥ鴱낸捁ꓙ꾿꠮䂅搷爖뷾턕㆝閰磫٣ᶤ៲匉⡃牡⬉ﳿ㔴뢣뤍豖쒻骫棐x撗僥ଢ଼ரꔣ톆왓ᕝ捒듉㣡ꏦڦ䗸렩軶Ὂ [ 168.467663][ T413] usb 5-1: Manufacturer: и [ 168.472319][ T413] usb 5-1: SerialNumber: syz [ 168.856422][ T413] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 168.877787][ T413] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 168.904342][ T413] usb 5-1: USB disconnect, device number 22 [ 169.123953][ T540] udevd[540]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 169.368006][ T3421] xt_hashlimit: size too large, truncated to 1048576 [ 170.723380][ T30] audit: type=1400 audit(8002097175.596:485): avc: denied { audit_read } for pid=3438 comm="syz.0.903" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 171.260442][ T413] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 171.516852][ T413] usb 4-1: Using ep0 maxpacket: 32 [ 171.751998][ T413] usb 4-1: unable to get BOS descriptor or descriptor too short [ 172.008459][ T413] usb 4-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 172.017533][ T413] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.025579][ T413] usb 4-1: Product: syz [ 172.029793][ T413] usb 4-1: Manufacturer: syz [ 172.034408][ T413] usb 4-1: SerialNumber: syz [ 172.215837][ T30] audit: type=1326 audit(8002097176.991:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3456 comm="syz.0.908" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf80809159 code=0x7ffc0000 [ 172.240751][ T30] audit: type=1326 audit(8002097176.991:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3456 comm="syz.0.908" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf80809159 code=0x7ffc0000 [ 172.266562][ T30] audit: type=1326 audit(8002097176.991:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3456 comm="syz.0.908" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf80809159 code=0x7ffc0000 [ 172.293736][ T30] audit: type=1326 audit(8002097176.991:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3456 comm="syz.0.908" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf80809159 code=0x7ffc0000 [ 172.300639][ T3441] UDC core: couldn't find an available UDC or it's busy: -16 [ 172.321605][ T30] audit: type=1326 audit(8002097176.991:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3456 comm="syz.0.908" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf807c998e code=0x7ffc0000 [ 172.350353][ T3441] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 172.383779][ T3463] block device autoloading is deprecated and will be removed. [ 172.396697][ T30] audit: type=1326 audit(8002097176.991:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3456 comm="syz.0.908" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf807c998e code=0x7ffc0000 [ 172.425216][ T3463] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 172.437149][ T30] audit: type=1326 audit(8002097176.991:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3456 comm="syz.0.908" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf80809159 code=0x7ffc0000 [ 172.462678][ T30] audit: type=1326 audit(8002097176.991:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3456 comm="syz.0.908" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf80809159 code=0x7ffc0000 [ 172.467338][ T413] usb 4-1: USB disconnect, device number 17 [ 172.493369][ T30] audit: type=1326 audit(8002097176.991:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3456 comm="syz.0.908" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf80809159 code=0x7ffc0000 [ 172.493402][ T30] audit: type=1326 audit(8002097176.991:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3456 comm="syz.0.908" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf80809159 code=0x7ffc0000 [ 172.841792][ T315] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 173.098731][ T315] usb 1-1: Using ep0 maxpacket: 8 [ 173.269376][ T315] usb 1-1: unable to get BOS descriptor or descriptor too short [ 173.355835][ T315] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.536588][ T315] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 173.545821][ T315] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 173.553960][ T315] usb 1-1: Product: syz [ 173.558177][ T315] usb 1-1: Manufacturer: syz [ 173.562775][ T315] usb 1-1: SerialNumber: syz [ 173.568093][ T315] usb 1-1: config 0 descriptor?? [ 173.869187][ T315] usb 1-1: USB disconnect, device number 23 [ 176.904824][ T3497] netlink: 24 bytes leftover after parsing attributes in process `syz.4.920'. [ 176.945626][ T3497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=784 sclass=netlink_route_socket pid=3497 comm=syz.4.920 [ 179.225179][ T30] kauditd_printk_skb: 112 callbacks suppressed [ 179.225195][ T30] audit: type=1400 audit(8002097183.551:608): avc: denied { watch watch_reads } for pid=3526 comm="syz.4.929" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 179.233645][ T3529] incfs: Can't find or create .index dir in ./file0 [ 179.293453][ T30] audit: type=1400 audit(8002097183.561:609): avc: denied { mounton } for pid=3526 comm="syz.4.929" path="/file0" dev="cgroup2" ino=203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 179.337982][ T3529] incfs: mount failed -22 [ 179.463173][ T3528] loop0: detected capacity change from 0 to 40427 [ 179.505750][ T3522] netlink: 16 bytes leftover after parsing attributes in process `syz.1.926'. [ 179.514870][ T3522] netlink: 16 bytes leftover after parsing attributes in process `syz.1.926'. [ 179.524143][ T3528] F2FS-fs (loop0): invalid crc value [ 179.543298][ T3528] F2FS-fs (loop0): Found nat_bits in checkpoint [ 179.584109][ T3528] F2FS-fs (loop0): Start checkpoint disabled! [ 179.601680][ T3528] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 179.643301][ T30] audit: type=1400 audit(8002097183.944:610): avc: denied { create } for pid=3527 comm="syz.0.930" name="pids.current" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 179.664385][ T30] audit: type=1400 audit(8002097183.944:611): avc: denied { read append open } for pid=3527 comm="syz.0.930" path="/184/file0/pids.current" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 179.680278][ T1685] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 179.734339][ T3536] attempt to access beyond end of device [ 179.734339][ T3536] loop0: rw=2049, want=78304, limit=40427 [ 179.764721][ T3537] netlink: 'syz.1.926': attribute type 1 has an invalid length. [ 179.779532][ T3537] netlink: 'syz.1.926': attribute type 2 has an invalid length. [ 179.789850][ T3537] netlink: 252 bytes leftover after parsing attributes in process `syz.1.926'. [ 179.802620][ T3537] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.863143][ T30] audit: type=1400 audit(8002097184.000:612): avc: denied { map } for pid=3527 comm="syz.0.930" path="/184/file0/pids.current" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 180.540191][ T10] attempt to access beyond end of device [ 180.540191][ T10] loop0: rw=2049, want=40976, limit=40427 [ 180.567181][ T1685] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.583414][ T1685] usb 5-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 180.597058][ T30] audit: type=1400 audit(8002097184.000:613): avc: denied { write } for pid=3527 comm="syz.0.930" path="/184/file0/pids.current" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 180.791491][ T1685] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 180.800992][ T1685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.809289][ T1685] usb 5-1: Product: syz [ 180.813814][ T1685] usb 5-1: Manufacturer: syz [ 180.818794][ T1685] usb 5-1: SerialNumber: syz [ 180.866912][ T1685] usb-storage 5-1:1.0: USB Mass Storage device detected [ 180.875455][ T1685] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 180.883631][ T1685] scsi host1: usb-storage 5-1:1.0 [ 181.083150][ T1685] usb 5-1: USB disconnect, device number 23 [ 181.203816][ T3547] tipc: Started in network mode [ 181.210489][ T3547] tipc: Node identity 7f000001, cluster identity 4711 [ 181.217581][ T3547] tipc: New replicast peer: 0.0.0.0 [ 181.223382][ T3547] tipc: Enabled bearer , priority 10 [ 181.344939][ T3547] ------------[ cut here ]------------ [ 181.350883][ T3547] WARNING: CPU: 0 PID: 3547 at crypto/rsa-pkcs1pad.c:538 pkcs1pad_verify+0x50c/0x680 [ 181.360563][ T3547] Modules linked in: [ 181.364698][ T3547] CPU: 1 PID: 3547 Comm: syz.0.931 Not tainted syzkaller #0 [ 181.372465][ T3547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.382851][ T3547] RIP: 0010:pkcs1pad_verify+0x50c/0x680 [ 181.388583][ T3547] Code: 44 89 f6 e8 96 0e 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 82 eb 39 ff 0f 0b b8 ea ff ff ff eb e3 e8 74 eb 39 ff <0f> 0b b8 ea ff ff ff eb d5 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c [ 181.408953][ T3547] RSP: 0018:ffffc9000109f728 EFLAGS: 00010287 [ 181.416262][ T3547] RAX: ffffffff822fd00c RBX: ffff88810e1a4800 RCX: 0000000000080000 [ 181.424617][ T3547] RDX: ffffc9000178c000 RSI: 0000000000000b47 RDI: 0000000000000b48 [ 181.432778][ T3547] RBP: ffffc9000109f770 R08: ffffc9000109f8af R09: ffffc9000109f898 [ 181.440907][ T3547] R10: dffffc0000000000 R11: fffff52000213f16 R12: 0000000000000000 [ 181.448983][ T3547] R13: ffff88811e960600 R14: ffff88810e1a4844 R15: dffffc0000000000 [ 181.457152][ T3547] FS: 00007fbf7f2626c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 181.466579][ T3547] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 181.473424][ T3547] CR2: 00007f783beef2f8 CR3: 000000011af2a000 CR4: 00000000003506a0 [ 181.473767][ T3551] loop0: detected capacity change from 0 to 512 [ 181.481562][ T3547] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 181.496029][ T3547] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 181.504275][ T3547] Call Trace: [ 181.507727][ T3547] [ 181.510658][ T3551] EXT4-fs (loop0): Ignoring removed nobh option [ 181.510687][ T3547] ? sg_init_one+0x93/0x140 [ 181.516960][ T3551] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 181.521750][ T3547] public_key_verify_signature+0x992/0xec0 [ 181.537518][ T3547] ? public_key_free+0x80/0x80 [ 181.542654][ T3547] ? __kasan_kmalloc+0xe6/0x100 [ 181.547657][ T3547] ? __kasan_kmalloc+0xd4/0x100 [ 181.550424][ T3551] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349) [ 181.553803][ T3547] ? __kmalloc_track_caller+0x13c/0x2c0 [ 181.565303][ T3551] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec029, mo2=0002] [ 181.568326][ T3547] ? x64_sys_call+0x648/0x9a0 [ 181.576162][ T3551] System zones: 1-12 [ 181.581621][ T3547] ? do_syscall_64+0x4c/0xa0 [ 181.586905][ T3551] EXT4-fs (loop0): orphan cleanup on readonly fs [ 181.589972][ T3547] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 181.602129][ T3551] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:510: comm syz.0.931: Block bitmap for bg 0 marked uninitialized [ 181.602376][ T3547] ? software_key_eds_op+0xb40/0xb40 [ 181.615861][ T3551] EXT4-fs (loop0): Remounting filesystem read-only [ 181.621634][ T3547] public_key_verify_signature_2+0x43/0x50 [ 181.627433][ T3551] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:510: comm syz.0.931: Block bitmap for bg 0 marked uninitialized [ 181.633847][ T3547] verify_signature+0xd6/0x100 [ 181.646583][ T3551] EXT4-fs (loop0): Remounting filesystem read-only [ 181.657522][ T3551] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:510: comm syz.0.931: Block bitmap for bg 0 marked uninitialized [ 181.668055][ T3547] asymmetric_key_verify_signature+0x171/0x210 [ 181.671867][ T3551] EXT4-fs (loop0): Remounting filesystem read-only [ 181.683392][ T3551] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 181.696712][ T3547] ? asymmetric_lookup_restriction+0x4f0/0x4f0 [ 181.703054][ T3551] EXT4-fs (loop0): 1 truncate cleaned up [ 181.708993][ T3551] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,nobh,. Quota mode: writeback. [ 181.727737][ T3547] ? __kasan_check_write+0x14/0x20 [ 181.733896][ T3547] ? _copy_from_user+0x95/0xd0 [ 181.742820][ T3547] keyctl_pkey_verify+0x40e/0x430 [ 181.748036][ T3547] ? keyctl_pkey_params_get_2+0x490/0x490 [ 181.754278][ T3547] ? debug_smp_processor_id+0x17/0x20 [ 181.759812][ T3547] __se_sys_keyctl+0x764/0xdb0 [ 181.765213][ T3547] ? kfree+0xc4/0x270 [ 181.769265][ T3547] ? __x64_sys_keyctl+0xd0/0xd0 [ 181.774792][ T3547] ? __kasan_slab_free+0x11/0x20 [ 181.780385][ T3547] ? slab_free_freelist_hook+0xc2/0x190 [ 181.786413][ T3547] ? kvfree_sensitive+0x4d/0x60 [ 181.791411][ T3547] ? kvfree_sensitive+0x4d/0x60 [ 181.796557][ T3547] ? __se_sys_futex+0x135/0x330 [ 181.801460][ T3547] ? __x64_sys_futex+0x100/0x100 [ 181.806770][ T3547] ? __kasan_check_write+0x14/0x20 [ 181.811941][ T3547] __x64_sys_keyctl+0xbf/0xd0 [ 181.816636][ T3547] x64_sys_call+0x648/0x9a0 [ 181.821304][ T3547] do_syscall_64+0x4c/0xa0 [ 181.825752][ T3547] ? clear_bhb_loop+0x50/0xa0 [ 181.830549][ T3547] ? clear_bhb_loop+0x50/0xa0 [ 181.835372][ T3547] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 181.841362][ T3547] RIP: 0033:0x7fbf80809159 [ 181.845814][ T3547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.865529][ T3547] RSP: 002b:00007fbf7f262028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 181.874229][ T3547] RAX: ffffffffffffffda RBX: 00007fbf80a90fa0 RCX: 00007fbf80809159 [ 181.882364][ T3547] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 000000000000001c [ 181.890374][ T3547] RBP: 00007fbf808a0024 R08: 0000200000000440 R09: 0000000000000000 [ 181.898500][ T3547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.906647][ T3547] R13: 00007fbf80a91038 R14: 00007fbf80a90fa0 R15: 00007ffcd88ddc18 [ 181.914776][ T3547] [ 181.917823][ T3547] ---[ end trace fd3487d3c6958656 ]--- [ 182.416189][ T1777] tipc: Node number set to 2130706433 [ 183.609530][ T3574] FAULT_INJECTION: forcing a failure. [ 183.609530][ T3574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.633579][ T1685] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 183.666756][ T3574] CPU: 1 PID: 3574 Comm: syz.0.939 Tainted: G W syzkaller #0 [ 183.675942][ T3574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 183.686030][ T3574] Call Trace: [ 183.689335][ T3574] [ 183.692299][ T3574] __dump_stack+0x21/0x30 [ 183.696949][ T3574] dump_stack_lvl+0x110/0x170 [ 183.701668][ T3574] ? show_regs_print_info+0x20/0x20 [ 183.706909][ T3574] ? __kasan_check_write+0x14/0x20 [ 183.712067][ T3574] dump_stack+0x15/0x20 [ 183.716252][ T3574] should_fail+0x3ab/0x500 [ 183.721050][ T3574] should_fail_usercopy+0x1a/0x20 [ 183.726293][ T3574] _copy_from_user+0x20/0xd0 [ 183.730933][ T3574] __sys_sendto+0x2e9/0x620 [ 183.735466][ T3574] ? __ia32_sys_getpeername+0x90/0x90 [ 183.740884][ T3574] ? __ia32_sys_read+0x90/0x90 [ 183.745687][ T3574] __x64_sys_sendto+0xe5/0x100 [ 183.750479][ T3574] x64_sys_call+0x178/0x9a0 [ 183.755021][ T3574] do_syscall_64+0x4c/0xa0 [ 183.759474][ T3574] ? clear_bhb_loop+0x50/0xa0 [ 183.764179][ T3574] ? clear_bhb_loop+0x50/0xa0 [ 183.768884][ T3574] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 183.775167][ T3574] RIP: 0033:0x7fbf80809159 [ 183.779615][ T3574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.799520][ T3574] RSP: 002b:00007fbf7f262028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 183.807971][ T3574] RAX: ffffffffffffffda RBX: 00007fbf80a90fa0 RCX: 00007fbf80809159 [ 183.815985][ T3574] RDX: fffffffffffffe98 RSI: 0000200000000380 RDI: 0000000000000004 [ 183.823996][ T3574] RBP: 00007fbf7f262090 R08: 00002000000001c0 R09: 000000000000001c [ 183.832186][ T3574] R10: 0000000020000045 R11: 0000000000000246 R12: 0000000000000001 [ 183.840290][ T3574] R13: 00007fbf80a91038 R14: 00007fbf80a90fa0 R15: 00007ffcd88ddc18 [ 183.848297][ T3574] [ 184.114359][ T1685] usb 5-1: device descriptor read/64, error -71 [ 184.531063][ T1685] usb 5-1: device descriptor read/64, error -71 [ 184.819595][ T1685] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 185.108998][ T1685] usb 5-1: device descriptor read/64, error -71 [ 185.524765][ T1685] usb 5-1: device descriptor read/64, error -71 [ 185.653084][ T1685] usb usb5-port1: attempt power cycle [ 186.031416][ T3587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.944'. [ 186.091085][ T1685] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 186.283438][ T1685] usb 5-1: device descriptor read/8, error -71 [ 186.336838][ T315] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 186.529176][ T1685] usb 5-1: device descriptor read/8, error -71 [ 186.625321][ T315] usb 4-1: device descriptor read/64, error -71 [ 187.042016][ T315] usb 4-1: device descriptor read/64, error -71 [ 187.330606][ T315] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 187.629857][ T315] usb 4-1: device descriptor read/64, error -71 [ 188.046429][ T315] usb 4-1: device descriptor read/64, error -71 [ 188.174671][ T315] usb usb4-port1: attempt power cycle SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=6 req=875 state=3 status=67 (errno 9: Bad file descriptor) [ 188.345585][ T30] audit: type=1400 audit(8002097192.087:614): avc: denied { write } for pid=277 comm="syz-executor" path="pipe:[14593]" dev="pipefs" ino=14593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 188.644764][ T315] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 188.922650][ T315] usb 4-1: device descriptor read/8, error -71 [ 189.146990][ T315] usb 4-1: device descriptor read/8, error -71 [ 189.532735][ T10] device veth0_macvtap left promiscuous mode [ 189.538842][ T10] bridge0: port 3(veth0_macvtap) entered disabled state [ 189.546375][ T10] device bridge_slave_1 left promiscuous mode [ 189.552561][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.560561][ T10] device bridge_slave_0 left promiscuous mode [ 189.567237][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.575349][ T10] device veth1_macvtap left promiscuous mode [ 189.581541][ T10] device veth0_vlan left promiscuous mode [ 189.937220][ T10] tipc: Disabling bearer [ 189.942727][ T10] tipc: Left network mode [ 190.580429][ T10] device veth0_macvtap left promiscuous mode [ 190.586997][ T10] bridge0: port 3(veth0_macvtap) entered disabled state [ 190.594566][ T10] device bridge_slave_1 left promiscuous mode [ 190.600844][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.608415][ T10] device bridge_slave_0 left promiscuous mode [ 190.614933][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.623107][ T10] device dummy0 left promiscuous mode [ 190.628540][ T10] bridge0: port 4(dummy0) entered disabled state [ 190.635370][ T10] device veth0_macvtap left promiscuous mode [ 190.642139][ T10] bridge0: port 3(veth0_macvtap) entered disabled state [ 190.650273][ T10] device bridge_slave_1 left promiscuous mode [ 190.656498][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.663947][ T10] device bridge_slave_0 left promiscuous mode [ 190.670192][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.678707][ T10] device veth0_macvtap left promiscuous mode [ 190.684741][ T10] bridge0: port 3(veth0_macvtap) entered disabled state [ 190.692394][ T10] device bridge_slave_1 left promiscuous mode [ 190.698583][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.706180][ T10] device bridge_slave_0 left promiscuous mode [ 190.712622][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.721111][ T10] device veth1_macvtap left promiscuous mode [ 190.727124][ T10] device veth0_vlan left promiscuous mode [ 190.733125][ T10] device veth1_macvtap left promiscuous mode [ 190.739515][ T10] device veth0_vlan left promiscuous mode [ 190.745409][ T10] device veth1_macvtap left promiscuous mode [ 190.751475][ T10] device veth0_vlan left promiscuous mode