last executing test programs: 58.896216794s ago: executing program 0 (id=1335): r0 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0x7, 0x80000006, 0x30, @empty, @empty, 0x40, 0x20, 0x0, 0xa7a}}) r1 = socket(0x10, 0x3, 0x0) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x2, @private=0xa010101}}, 0x1e) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x2, {0x3, 0xffffffffffffffff, 0x0, 0x5, 0x80000000, 0xffffffff, {0x0, 0x0, 0x20, 0xfffffffffffffffd, 0xf5, 0x4, 0x0, 0x0, 0x5, 0x2000, 0x2, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=""/10, 0xa) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000140001b66fb1b313ba36db000a0000000400000014000100fd010000000000000000000000000001150006"], 0x44}, 0x1, 0x0, 0x0, 0x4018}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005c3f6b200304a4bc23d7010203010902120001000000000904"], 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') 58.317757354s ago: executing program 0 (id=1350): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x43400078, 0x1000000000, 0x5, 0x41, 0x3000000, 0x3, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2, 0x0, 0x3], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x1000, 0xe000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x8, 0x6, 0x40}, {0x25000, 0x10000, 0x3, 0xff, 0xff, 0x0, 0x0, 0x0, 0x7, 0xff, 0x10}, {0x1, 0x30000, 0xc, 0x5, 0x4, 0xc4, 0x0, 0xf0, 0x6a, 0x3, 0x0, 0xfc}, {0x1, 0xeeee8000, 0x6, 0x0, 0x81, 0x0, 0x9, 0x0, 0x8, 0x2, 0x6}, {0x6000, 0xfffa1000, 0xf, 0x0, 0x0, 0x4, 0x7, 0x0, 0x1, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x40, 0x2, 0x0, 0x40, 0xfe, 0x5, 0x4}, {0x4, 0xa000, 0xd, 0x3, 0x3, 0x2, 0xa1, 0x20, 0x0, 0x3}, {0x10000, 0x54000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0xdddd0000, 0x3}, {0x30000, 0xfffe}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0x0, 0x0, 0xd000, [0x3, 0x0, 0x40000000001]}) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r0, 0x4018aee2, &(0x7f00000002c0)=@attr_other={0x0, 0x1000, 0xffffffff, &(0x7f0000000280)}) 58.302502695s ago: executing program 0 (id=1351): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0x7, 0x0, 0xc, 0xe7}, 0x18, [0x6aee, 0x1, 0x2, 0x157b, 0x244b, 0xf384, 0x9, 0x8000, 0x0, 0x6ab7, 0x7fff, 0x3ff, 0x7, 0x2, 0xfff, 0xff, 0xc, 0x400, 0x6, 0x7fff, 0x1, 0x1, 0x2, 0x2, 0x2, 0x4, 0x40, 0x4, 0x8, 0x4, 0x2, 0x0, 0x1, 0x7747, 0xffff, 0xd, 0x40, 0x8, 0xccc0, 0x8, 0xfffffffc, 0x9, 0x4, 0x2, 0x8000, 0x2, 0x1, 0x7, 0x10001, 0x8b1e, 0x8, 0x3, 0x8, 0x3, 0x6, 0x4, 0x9f, 0x1, 0x2, 0x4, 0x81, 0x31c, 0x0, 0x28d0], [0x9, 0x81, 0x80000001, 0x6, 0x3, 0x10000, 0x9, 0x6a155b35, 0x80000000, 0x5, 0x9, 0xffff8000, 0x4, 0x4, 0x8, 0x6, 0x2, 0x8, 0x7, 0xb3, 0x658ca304, 0x6, 0x10000, 0x1, 0x7, 0x2, 0x5d, 0x6, 0x1, 0x6, 0x1, 0x80, 0x400, 0x2, 0xe, 0x4, 0xd4, 0x8, 0x0, 0xd8a, 0x9, 0x7, 0x1, 0xfffff800, 0x80000000, 0x7, 0xd100, 0x4, 0xff, 0x8001, 0x81, 0x8, 0x5fcd, 0x4, 0x5, 0x1, 0x3, 0x4aa, 0xf, 0x7, 0xd, 0x5f58, 0x8, 0x3], [0x0, 0x6, 0x200, 0x5, 0x2, 0x1, 0x24000000, 0x6f5, 0xfff, 0x9, 0x8000, 0x40, 0x7, 0xfffffff9, 0x24, 0x3, 0x5, 0x10, 0x2, 0x6, 0x6547, 0x1, 0x8001, 0x7, 0x5, 0x0, 0x7, 0x6, 0x32ac, 0x10, 0x80000001, 0x80000000, 0x5, 0x8, 0x0, 0xfa, 0x1, 0x5, 0x6, 0x80000, 0xb35b, 0x7, 0x1000, 0x5, 0xb, 0x712ddf6, 0x2, 0x2d3a4071, 0x6, 0x0, 0x3, 0xff, 0x379d0000, 0x1, 0x4, 0x101, 0x3, 0x10, 0x6, 0x7, 0x10000, 0x7ff, 0x401, 0x101], [0x5, 0x0, 0x1, 0xb01, 0x1, 0xffff, 0x8, 0x0, 0x9de0, 0x8, 0xf4000000, 0xf07, 0x0, 0x1, 0x100, 0x1, 0x10, 0x2, 0x3f8000, 0x4, 0x800, 0x6, 0x3, 0xaafa, 0x9, 0x3, 0xe, 0x4, 0x8, 0x10000, 0x2b80c23c, 0x1, 0xf20c, 0x6, 0x7f2, 0x5, 0xa860, 0x2, 0x101, 0xfffff41f, 0x5, 0x8, 0xa670, 0x6, 0xf, 0x5, 0x80000, 0x8a, 0x6, 0xff, 0x2, 0x7, 0xaeb3, 0x6, 0x0, 0x8, 0x200, 0x4, 0x957, 0xf08a, 0x3, 0x6, 0x5, 0xcf]}, 0x45c) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) (async, rerun: 64) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000540)={{r1}, "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"}) (async, rerun: 64) ioctl$TIOCCONS(r0, 0x541d) (async, rerun: 64) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001540)='/sys/power/sync_on_suspend', 0x101000, 0x26) (rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000001580)) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f00000015c0)) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000001600)={0x80000000, 0x0, 0x800}) r3 = openat2(r2, &(0x7f0000001640)='./file0\x00', &(0x7f0000001680)={0x529200, 0x0, 0x29}, 0x18) getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000016c0), &(0x7f0000001700)=0x4) (async) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001740), 0x8800, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r4, 0x541c, &(0x7f0000001780)) (async) readv(r3, &(0x7f0000001800)=[{&(0x7f00000017c0)}], 0x1) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000001880)={0x9, &(0x7f0000001840)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001900), r2) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x24, r5, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x101}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x4000) fchdir(r0) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000001b00)={r1, &(0x7f0000001a00)='/dev/uinput\x00', 0x111600, &(0x7f0000001a40)={@_ha_fsid={[0x2, 0xff]}, {0x8001, 0x6, 0x7, 0x1}}, 0x5, &(0x7f0000001a80), &(0x7f0000001ac0)=0x6}) (async) fcntl$getownex(r2, 0x10, &(0x7f0000001b40)={0x0, 0x0}) ptrace$cont(0x18, r6, 0x3ea, 0xfffffffffffffff8) (async) mkdir(&(0x7f0000001b80)='./file0\x00', 0x40) r7 = accept$inet6(r2, 0x0, &(0x7f0000003480)) sendmmsg$sock(r3, &(0x7f00000051c0)=[{{&(0x7f0000001bc0)=@pppoe={0x18, 0x0, {0x2, @empty, 'veth1_to_bond\x00'}}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001c40)="b699d7b03fc9b58ec493e15cbdd23737e572a7711c50f4f6b591bd22f6125b01b22c6ad3e98dff953841449c777e8ee911b5fe55d5f6d2a87a751e2405c52410a1d91e2f3d5e97b4c45395dd0a19640bb08c89cbd55a1a03773d11b5", 0x5c}, {&(0x7f0000001cc0)="df682425b40bbcec51145d7d79c12b5c1a92607c751bdbcae67fad53385eff583f902216974889682e9bf9394153c63242481112f86af9462e15fe3326ff141ab98fdff3c98ad6f413bf83523d5aa9c98ded22653078e8d879ed7873b2a864a47229f16fdfc31932cbfa19423709489f3e9edc67c5dbb8fa", 0x78}, {&(0x7f0000001d40)="3d96920fca810f44fc1e6769869843459ae4dcf4aa50c21a1ae7e1adff8483abae7766d2d9afb53aeab5ac2d313a058c5c05d0c0d89e4a1f545a8e4a47d9efc48404b1b725903a22343a68471b9b721912273ff771aa5ff212016f3473160813af56c7fac82390b752c2b8e0a3302d900fde6baa844faacfa479ab83509163430c7f49d0f010b0db153313", 0x8b}, {&(0x7f0000001e00)="c577f03c24de43574840ae453972d89fd776d1824fadc838976a690341ed1b51ec508d02f0a5d263409f55f7c6665be70c0a35d6de43b71cc35885c70d6abc0c924fd385aa84c883aa39a20b2f2cb3e3bf6f0224456a7eda74052fe7b13cc0ed311a9b85e23876009e10cefdf4df27d5297f71110fd6ce059fc7142552c1aea516952b74f51c36f241eac88b7d1addef77319bd442c4eaa07f1075b4f725e9750d2b99115b22f2d04b77e32dac1c057fde1f21220b1a1370", 0xb8}], 0x4, &(0x7f0000001f00)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x2c86d4f9}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x60}}, {{&(0x7f0000001f80)=@phonet={0x23, 0x6, 0x7f, 0x5}, 0x80, &(0x7f0000003180)=[{&(0x7f0000002000)="528ce457e9bbe8d46d3de424063ae88280e34261111524459fca518108d682574d3184073dc2498299e64e7fdff584b31497d3390811e11c124901de97d9ed96bf3ffa139596c70a74", 0x49}, {&(0x7f0000002080)="b5743c5fce93555e1b203aa2e73ff0424e67a94c", 0x14}, {&(0x7f00000020c0)="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", 0x1000}, {&(0x7f00000030c0)="4995aa8274bb8c44a2ba664ed001aa8c684be49644ce92f69f1f1db6fffd365801c16bad74552f5d1e1971fbd255f3730a794b878ff8187fbb1ec41943e69873f38f1ff0f8427dbabb92577ad927d6dab0db3bdac1674564bb22c54b3b2a89903b1c5c39919873a0bb575c0886605ba67d4236ac332cce3723", 0x79}, {&(0x7f0000003140)="4ca304658f87808a93a64ea2bc22abc87236e8dd01b494850cb9d57e32c2abb31f0daf1a", 0x24}], 0x5, &(0x7f0000003200)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x400080}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0xc2}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0xd8}}, {{&(0x7f0000003300)=@in6={0xa, 0x4e23, 0x400, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfff}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003380)="1fb3e81bc810841c27dfe9fd089ac80a91dcf720e481c6c8a9eff59f18497e476fd1183ebee887c74fab3d2ff7b557f90b58b51de92f4be49bfdb30a741ecf4c9ec5fad4bf", 0x45}], 0x1, &(0x7f0000003440)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x30}}, {{&(0x7f00000034c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x4, 0x2, 0x2, 0x4, {0xa, 0x4e23, 0x1, @remote, 0x6}}}, 0x80, &(0x7f0000003680)=[{&(0x7f0000003540)="97d66a4c1bb4f2402df21bb79d0a8c13ef73f50b2e088aec5ac43f45ec3b439093db626f6ca89a22ef914a3613da0960f9c71b8f2500b3c8be7a5347c27b14dc4c15ab7f918c0ad92e9fd67eaf654ae9e8c869394374827007bc7e", 0x5b}, {&(0x7f00000035c0)="35822f312999842e9aa5c725a6f49750e0b62207776106511b31706a8498404307a4ff17711af1c43fda257a184663bc89dfb9587a0af7e912334fc4b83f3d3e477f821ce2d4fd58dc5e870b7b761f7d3adf25be76a4be1eb8d4f3afe94235b575df11d3fe3f27ad403f55d23bf32f272cb8b9c51e15dc925995034541f7b40d256041f0fc7f0099d0722100d887640b7a22b1e7910d50e52edc01397b790e68349f309bc4c5221cb04965bc9ca19061848e9e149126de732fcb6803cdcc93", 0xbf}], 0x2, &(0x7f00000036c0)=[@txtime={{0x18, 0x1, 0x3d, 0x599}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x60}}, {{&(0x7f0000003740)=@nl=@kern={0x10, 0x0, 0x0, 0x8}, 0x80, &(0x7f0000004b00)=[{&(0x7f00000037c0)="006bc2dfe3cf4306a7839ab768a23c557d10167dd73344eb56a2be479bfbef27a17eb6d7c2", 0x25}, {&(0x7f0000003800)="d257d53c154869f08ac1e657cb5e00ce82dd0007ce0b0dc3cd7e25266e76bf24a4c34dbd44c1144d9b82b2fd6f5b7313ecd5f6d9ae9a8615554c17ab50ac043e358491ebf128f99fec33271594667ecc193a732775e9ddd1a1efbcbf6d5f5c955edd1a6dc74ab889375f3a5401bbd9162257d20e", 0x74}, {&(0x7f0000003880)="6371d3c12dc8bf03b9628f39a653790bf1858f0a30236b00082e2d26066159efab28b1c10d1bd2127a2a7d3e4bd1d164daaa0b0f57194bd360bd691136bd31a375c980f76cf65baf4c4353", 0x4b}, {&(0x7f0000003900)="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", 0x1000}, {&(0x7f0000004900)="a5b6c86316b6f29d14", 0x9}, {&(0x7f0000004940)="64d9be9d080a556c0e6cf83e38c6f9afa84e87f67014f0a0f6321cf54188ec8df641b65bfd24e38e7c52240b96e239d9f595d123b9", 0x35}, {&(0x7f0000004980)="1d0b1503c28af6bafbe2cc6ce2aafa457fb9d4a42fac", 0x16}, {&(0x7f00000049c0)="48094ae79b5c470abc4b6fcdda971daa9b7336beb44f4fd576d281a8d111f7e898c9eb690bc9bfb381cf2d5e043424ea576362da172341ac3c5627ccb5498a63b492b76874449eb9691a3217816ac3c2224760888baa163e1dbbdad6c0c74952751d84f41de3292bc7cec82b1d8b07dc024e8ac860a14c5f28f1976fd1317c5e96ba45a8c6d6c16d1233cac0b0b8c97a5e8231688107039a7a821b7c6d745b9b8d54d8bc7f4e47339e0ad386939b8e4b94c7e8adeb09403f7c", 0xb9}, {&(0x7f0000004a80)="b84caece1981b18ded513514913ba55bcc4179ed51c2e7ff550fa5480686705f2f8c32be4cf9681bee9cd1fe6c", 0x2d}, {&(0x7f0000004ac0)}], 0xa, &(0x7f0000004bc0)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x81}}], 0x60}}, {{&(0x7f0000004c40)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @empty}, 0x1, 0x0, 0x0, 0x1}}, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000004cc0)="778631df2ca3855ad6f41e3bb4478b37045778e9a0aa4f412d34d6e0d4decdafb6cee8a2da712b255680183e6106b733bbc732176359168f310693bd2f005ab905fb1ea721e67d6a3f86accff228527318fc5188ef9ea9688dd4d62b2880f58fb27e678ba934e30a414bb0a985bf77c8790088a5a75036ba", 0x78}, {&(0x7f0000004d40)="79294ef41d401a3ff83600d7d6f66b8a008f6b487742418e4d66cb1a4a57d7ad759da9380c72bfa2b294a132d272a8f84f2c57b5ed2c6ba7168dbb67a6d780c58313c75227552f2c25d4e9d2c14a1f9936cfa52e52567eaf4214c07818", 0x5d}], 0x2}}, {{&(0x7f0000004e00)=@nfc_llcp={0x27, 0x0, 0x1, 0x4, 0xf4, 0x9, "b8201576df1f34c28e2c44370f3ee4f8bf718d7b48bbd5e69f682742d6c836fac6440ba9862520dc63984a771b713c1be98afa269cc239f71bc6998c3fcd8d", 0x13}, 0x80, &(0x7f0000005100)=[{&(0x7f0000004e80)="6f9e87eeb4db89335a23db45d0d4cda261c3f334d48fc940c807d27a", 0x1c}, {&(0x7f0000004ec0)="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", 0xfb}, {&(0x7f0000004fc0)="a6c9ebde160b7e6bd9e6422968b121bb2f92d12512293e76f02d92876f5921924d866ae036430bcfb95cb56b3ba28480d3b26a01dd7bb70c7fb70ab0674300a81d60d1502612f54fe36db9629ffe294bb786dbc8a8f541edc9c9a6c828884e685ddc054d963acef86b30f8ed8f65c1a315ae58296693c6783b0b7221ecc098382cd212345cef898727ec7a431232a90de66948315d4631bb28bdabba6b70aa8f", 0xa0}, {&(0x7f0000005080)="85692ae9a799a65532d1fd9b35a3c0bb59000c6bfedd55d1af4a0c159098c3b9fb0df686d3b21ebb132594482d3c68be6ae2ac9564c67d10b437b17fe7f1e8227faec3e259", 0x45}], 0x4, &(0x7f0000005140)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xa9cf}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x78}}], 0x7, 0x801) (async, rerun: 32) r8 = openat(r4, &(0x7f0000005380)='./file0\x00', 0x400040, 0xad) (rerun: 32) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) socket$nl_audit(0x10, 0x3, 0x9) 58.285865485s ago: executing program 0 (id=1352): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000244e0000", 0x58}], 0x1) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e24, 0x9, @empty, 0x5}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x108}, 0x1c) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000640)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, &(0x7f0000000040)={0x0, 0x22, 0x2b, {0x2b, 0x23, "a087b5fff8ab935dcbbdec1e8905578198b2cce088e1b2c0da405004f310054b7edd3f054624fee587"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}, &(0x7f00000001c0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x6, 0x1, {0x22, 0xa17}}}}, &(0x7f0000000600)={0x2c, &(0x7f00000003c0)={0x0, 0x18, 0x3b, "fe0ea752769be9eeadd6ea6ba2844dc89846c37d4b0724ef30093935b5ff58f2b14a4b98ef322d0adcf0261974dccf862da13f61f80221f2543294"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000480)={0x0, 0x8, 0x1}, &(0x7f0000000540)={0x20, 0x1, 0x4a, "b1ba9c7bad0d8686742edc8329ec546e1c5f040667c77be8e66e5d4dd827d52ad3c32a897dce044f5d789aabefdc17cd8ba76691719b063c855b02512224da106c09971cbb699fc7fae5"}, &(0x7f00000005c0)={0x20, 0x3, 0x1}}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100e2"], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2, 0x11, r3, 0x0) socket(0x26, 0x6, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000e80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000980)={0x4bc, 0x0, 0x5, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [{{0x254, 0x1, {{0x1, 0x80}, 0xb0, 0xca, 0x4, 0x3, 0x1d, 'syz0\x00', "d970249b194a28a4b9a2c1b172ed8e099d0a5af950e067fda4e047b3351f9058", "af6ddabb1dcf5d6b41d34e85ff306150c7553f4e0806402be8c7aac31a719ffd", [{0x8001, 0x1}, {0x8001, 0x3, {0x2, 0x3}}, {0x8, 0x8, {0x2, 0xff33}}, {0x6, 0xc4, {0x1, 0xffff}}, {0xa, 0x9, {0x3, 0x5}}, {0x1, 0xc, {0x3, 0x6}}, {0x9, 0x2e, {0x3, 0x7}}, {0x7, 0x0, {0x3}}, {0x3, 0x5, {0x0, 0x7}}, {0xfcf, 0x5, {0x1, 0x3}}, {0x8001, 0xd, {0x1, 0x2}}, {0x3, 0x1, {0x3, 0x2}}, {0x4, 0x6, {0x3, 0x5}}, {0x4, 0x6, {0x3, 0x1e000000}}, {0x9, 0x5, {0x0, 0x1}}, {0x6, 0x2, {0x0, 0x2}}, {0x9, 0x0, {0x3, 0x3}}, {0xf2c8, 0x2, {0x1, 0xf0}}, {0xff1c, 0x5, {0x2, 0x3}}, {0x5, 0x400, {0x0, 0x1}}, {0xc, 0x4, {0x3}}, {0xfff, 0x46, {0x1, 0x8}}, {0xd6, 0xad, {0x0, 0x4}}, {0x3, 0xffff, {0x1, 0x9}}, {0xfffa, 0xff81, {0x2, 0x3}}, {0x4, 0x100, {0x2, 0x100}}, {0x3, 0xf771, {0x0, 0x100}}, {0x6, 0x1, {0x0, 0x6}}, {0x7, 0x2, {0x1, 0x5}}, {0xc1a1, 0x6, {0x0, 0x7}}, {0x2, 0x9, {0x0, 0x3}}, {0x0, 0xb36, {0x3, 0x6}}, {0x7f, 0xd504, {0x3, 0x101}}, {0xa4a, 0x5, {0x2, 0x2}}, {0x7ff, 0x9}, {0x6, 0x4d, {0x1, 0x1}}, {0x7bfd, 0x5, {0x1, 0x6}}, {0xb, 0x1aad, {0x0, 0xd665}}, {0x4, 0x9640, {0x3, 0x9}}, {0x4, 0xffff, {0x3, 0x4}}]}}}, {{0x254, 0x1, {{0x0, 0x7}, 0x5, 0x2, 0x5, 0x8001, 0x18, 'syz1\x00', "99abc32e46b813cc6f937bb4e3ca3ff2a0b65d4f27f624558854122001ae7628", "4b2f2daf95bad5a0bf1bf0180a4e451f09aed742f138f8f0b5a587f9ccb203c2", [{0x0, 0xbd, {0x3, 0x8}}, {0x4, 0x8, {0x2, 0x8}}, {0xd, 0x401, {0x3, 0x101}}, {0xda2, 0x7fff, {0x1, 0x4}}, {0x1, 0x4, {0x1, 0x80000000}}, {0x8, 0x5, {0x2, 0xfffffffe}}, {0xa1f, 0x8, {0x3, 0x4}}, {0xff, 0x675, {0x1, 0x8000}}, {0x6, 0x1ff, {0x1}}, {0x7, 0x0, {0x3, 0xeb}}, {0x8001, 0x5, {0x1, 0x2}}, {0x800, 0x5, {0x2, 0x100000}}, {0x2, 0x100, {0x2, 0x81}}, {0x8000, 0xb, {0x0, 0x3}}, {0x2, 0xb62e, {0x2, 0xfffffff8}}, {0x1ff, 0x0, {0x2}}, {0x46, 0x3, {0x2, 0x9}}, {0x7, 0xb, {0x3, 0x8}}, {0x5, 0x5, {0x6, 0x4}}, {0xf, 0x2, {0x3, 0x3}}, {0x72ff, 0x6, {0x2, 0x7fffffff}}, {0x8, 0x7, {0x2, 0x3}}, {0x4, 0x2, {0x2, 0xfffffff8}}, {0x0, 0x0, {0x0, 0x8e7b}}, {0x3, 0x7, {0x0, 0xb}}, {0x1000, 0x5, {0x1, 0x1}}, {0x2, 0x4, {0x1, 0x100}}, {0x4, 0xff, {0x3, 0xf}}, {0xc, 0xd000, {0x0, 0x3}}, {0x5, 0x80a9, {0x1, 0x9}}, {0xe6, 0x8001, {0x2, 0x9f}}, {0x400, 0x9, {0x1, 0x8000}}, {0x78, 0x7ff, {0xff6de73584bef0db, 0x9}}, {0x6, 0x7f, {0x2}}, {0xd58d, 0xff01, {0x0, 0x2}}, {0x2, 0x2, {0x0, 0xb99}}, {0xd, 0x5, {0x0, 0x3}}, {0x1, 0x7fff, {0x0, 0x8}}, {0x5, 0x1, {0x3, 0x6}}, {0x9, 0x3ff, {0x3, 0x3}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x4000}, 0x40801) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) 58.234871677s ago: executing program 0 (id=1353): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008811}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x400000c}, 0x4000000) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40814) r4 = memfd_secret(0x80000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r5, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x69}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ftruncate(r4, 0x7) write$char_usb(r4, &(0x7f0000000580)="a31f4ca02b917985d908c2afa7abb796d6e2f26fe49d1faa6dc2dc2cd2cbb910e632e5c23cf6ad29a254c042f195c2571d8960b3668a59d9a4d7b727d0561b8da157ed9175b3f5dd763bf5944c45b7562b621a8d6dde9511e198aced6d2316eb393a590044550496cb1412e435b0035761f1dc6eec6c1f7a4bdcfec18cd6848daf07d7ae83c26e21ab4934edb6", 0x8d) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xe8, r5, 0x0, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffc, 0x37}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xfff9}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xa0, 0xbe, "df91af1290a8e4e4d74434b1868b05b95407c17f5900d521d3d58d8ad6b0a09ccb3ef99698f1adb9065f9868fb2758b99c63e22057b8c7700a8b47cbf28e1647f6e57ff97404eb957f522a55bd94d2182e8f253f93ecef5b3b3e90b23a3082e8df3072bcc0c212b1faad018ae654b921fe9f61c9474997944bc507593598f69f9a20882c8e9a1fa141c3b26e995a905eef863735c48cf438cef6b39b"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}]}, 0xe8}}, 0x4008011) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$addseals(r6, 0x409, 0x2) ioctl$BTRFS_IOC_QGROUP_LIMIT(r4, 0x8030942b, &(0x7f0000000840)={0x10, {0x4345acd9873b00e2, 0x1, 0x1, 0x7, 0x4}}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r1) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, r8, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4080) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x110, r6, 0x95a8c000) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xe0, r5, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x8, 0x2, 0xffffffff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x0]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x42b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x35a}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x277}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}]}, @NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x7, 0x4, 0x800, 0x3, 0x1, 0x2, 0x2]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x58}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x439}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1ff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x603}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x44080}, 0x24028040) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r4, 0x80083313, &(0x7f0000000b80)) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c00), r4) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x7c, r9, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x81}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x100}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x50}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x52d}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000d40)={{{@in6=@private1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000000e40)=0xe8) quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000802, r10, &(0x7f0000000e80)={0xfffffffffffffc00, 0x2e, 0x8, 0x0, 0x4, 0x7fffffff, 0x2, 0x4, 0x6}) syz_genetlink_get_family_id$nfc(&(0x7f0000000f00), r1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000f80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x5c, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x42}}}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1c4}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x109}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r11}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r4) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x40, r12, 0x500, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_FAMILY={0x5, 0xd, 0x2b}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_PEER_ADDR6={0x14, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000004}, 0x4000041) 58.234333377s ago: executing program 0 (id=1354): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) setitimer(0x2, &(0x7f0000000b40)={{}, {0x0, 0x2710}}, &(0x7f0000000b80)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 41.778783029s ago: executing program 32 (id=1354): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) setitimer(0x2, &(0x7f0000000b40)={{}, {0x0, 0x2710}}, &(0x7f0000000b80)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 11.960861214s ago: executing program 3 (id=1632): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0xa000000, 0x4) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x10, 0x10, 0x7fffffff, 0x4, {{0xb, 0x4, 0x2, 0x7, 0x2c, 0x64, 0x0, 0x10, 0x2f, 0x0, @multicast1, @broadcast, {[@ra={0x94, 0x4}, @rr={0x7, 0xb, 0xd, [@empty, @private=0xa010102]}, @generic={0x0, 0x8, "58d25eb213f6"}]}}}}}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f031c00030014000600050089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab050900d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x29, 0x3, 0x7, 0x9, 0x0, @loopback, @private2, 0x1, 0x8, 0x4a}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000c80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c40)={&(0x7f0000001700)=ANY=[@ANYBLOB="e8040000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="14000a006873723000000000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="080003000200000008000100", @ANYRES32=r6, @ANYBLOB="0c0002800800020008000000480001801400020073797a5f74756e000000000000000000080003000000000008000300020000000800030001000000080003000000000008000100", @ANYRES32=r7, @ANYBLOB="0847f17b4b638d6a38def5915cbf41e7f703fa904623614e9215aeb75d066ded88f201422cb82276df965ddac5976547cf739b786b6f82d33d01cf50f026b4450e3c549640455f0d4cec1547edfb3125d68fb80970741a42", @ANYRES32=r8, @ANYBLOB="3800018008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020070696d7265673000000000000000000008000300020000000800030002000000380002802f000500c01370e0fc497d5738e390dac53030cbf1aa990eb309654570159aa0ed8b880de0ef44c847a994353c637b00040001001400018008000100", @ANYRES32=r9, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB], 0x4e8}, 0x1, 0x0, 0x0, 0x884c}, 0x20000040) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) ioprio_get$pid(0x2, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000040)) r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000140)={'ip6_vti0\x00', 0x1}) ioctl$TUNSETSNDBUF(r11, 0x400454d4, &(0x7f0000000000)=0x4) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x4000, 0xfffffff6, 0xac, 0xfffefef7, 0x0, [{0x6, 0xa8, 0x1, '\x00', 0x9}, {0x8, 0xff, 0xad, '\x00', 0x8}, {0x3e, 0x3, 0xb, '\x00', 0x4}, {0x3, 0x64, 0xf8, '\x00', 0xf0}, {0x6, 0x5, 0x27, '\x00', 0x7}, {0xfb, 0x8, 0x0, '\x00', 0x1b}, {0x9, 0x3, 0xa, '\x00', 0xe6}, {0x0, 0xcf, 0x3d, '\x00', 0xb}, {0x80, 0xf, 0x40}, {0xd, 0xd, 0x5, '\x00', 0x3d}, {0x3, 0xa, 0x20, '\x00', 0x5}, {0x7, 0xa, 0x0, '\x00', 0x4}, {0x53, 0xc0, 0x5, '\x00', 0x4}, {0x4, 0x2, 0x8, '\x00', 0xb}, {0xc, 0xf, 0x9, '\x00', 0xb9}, {0x0, 0x4, 0x8, '\x00', 0x2d}, {0x2, 0x5, 0x81, '\x00', 0xe}, {0xf9, 0x0, 0x1, '\x00', 0x8}, {0x1, 0x4, 0xff, '\x00', 0x27}, {0xd, 0x11, 0x80, '\x00', 0xff}, {0xa, 0x2, 0x4, '\x00', 0xff}, {0x4, 0x1, 0x8, '\x00', 0x8d}, {0x1, 0xf, 0x6, '\x00', 0x26}, {0xf, 0x4, 0x9, '\x00', 0x6}]}}) 11.059009475s ago: executing program 3 (id=1636): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x313) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) 10.92795059s ago: executing program 3 (id=1637): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000000000)={0x34, r0, 0x1, 0x70bd2a, 0x25dfdbfa, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}]}, 0x34}}, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r2, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x10880, &(0x7f00000001c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000009, 0x32, 0xffffffffffffffff, 0x261c5000) syz_fuse_handle_req(r5, &(0x7f000000bb40)="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", 0x2000, &(0x7f0000000680)={&(0x7f0000006400)={0x50, 0x0, 0x8000000001ff, {0x7, 0x29, 0x2000f4, 0x4135ed2f1bdbbd72, 0xdcf, 0x6, 0xb, 0x800, 0x0, 0x0, 0x10, 0xfffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_fuse_handle_req(r5, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x7, {0x5, 0xffffffff, 0x0, {0x5, 0x5, 0x40100000002, 0x80000003, 0x27, 0x7, 0x9eb, 0x2, 0x809, 0x2000, 0xd, 0x0, 0x0, 0x2, 0xf}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x31) preadv(r6, &(0x7f0000000440)=[{&(0x7f0000000680)=""/96, 0x60}], 0x1, 0x7, 0x6) sendto$inet6(r3, &(0x7f0000000240)="c4", 0xffffffffffffff95, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x5}, 0x1c) 10.852223163s ago: executing program 3 (id=1641): mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) r0 = socket$inet(0x2, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x68, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x34, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x0, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x84}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @mcast2}, {0x0, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x3e, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x4048801) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x0, 0x0, 0x31}, 0x18) r2 = socket$inet6(0xa, 0x800000000000002, 0x6) setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x1, @empty}, 0x1c) write(r2, 0x0, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, &(0x7f0000000040)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x4}}, 0x24, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0), 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="4c000000dc83895d98bcd46d145c577dae5aa6dd437b2fb17093f3efa021b820e3d4de2f4178a1245efb3b6696d98a08984d5a18751c39891f897071dc718efb4f6da9ab0a2c53eccd287bc06d0d1e79ef0e7af294794c04082888eabf7756991ae884ed44f96e4a8c8645df19b2fbaadaf00ecd54089affdbe8ee61f7df8fa8572b86d18b3e", @ANYRES16=r6, @ANYBLOB="01002abd7000ffdbdf2521000000050020000000000009001f0070687932000000000c000500000000000000000009001f0070687931000000000a0001007770616e30000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r7, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="000827bd7000810000000800000008000c00030000000800020005000000"], 0x24}, 0x1, 0x0, 0x0, 0x8000000}, 0x20) r9 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r9, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x41) socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r10, &(0x7f00000012c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r10, 0x0) 10.807863704s ago: executing program 3 (id=1643): r0 = fsopen(&(0x7f0000000200)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001840), 0x3b, 0x0) 10.65413609s ago: executing program 3 (id=1644): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f6, 0x400, 0x70bd2b, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) syz_clone(0x80048080, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)="ab4c56950c1eb380bcf7337d3dd0517a73b53cee33fc7c6c0f85afec0e429afdd3d657719088f8f76f37c6d777a7e18adb7c32d970cdb836063275b98582c26a3e25f755ede3382c8a88470ca4095a303dbcc131474cc6bb6d1202fe873debc1a3e6241da1f99cafa7060c716156b1e51a525f87ed2799c50d063603c2a34dc8205b71e291f3737d612fcc1654dec5f16b2c33a6b5f1cea6ddd017dc4da8a0") r2 = socket(0x10, 0x3, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) r3 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r3) syz_usb_connect$midi(0x3, 0x59, &(0x7f0000003140)=ANY=[@ANYBLOB="12011003000000208205560441000102030109024700010102400709040000020103004a09240300ff018108090724010600070006240200015309050600000409fcc00425010009050a03ff03059d0e09250112"], &(0x7f0000003500)={0x0, 0x0, 0x0, 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r5, 0x84, 0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, &(0x7f0000000500)={{0x3, 0x3, 0x0, 0x3, 0xfffffffd, 0x80000001}, 0x27d, [0xc0000000, 0x5, 0x4, 0x1, 0x80, 0x9, 0xfffffff7, 0x26f1, 0x7fff, 0x5, 0x8000, 0x9, 0x5, 0x400, 0x5, 0x5, 0x6, 0x7ff, 0x1, 0x7, 0x2, 0x2, 0x3, 0x3, 0x80000000, 0x6, 0x7e, 0x4, 0x2, 0x5, 0x1, 0x4, 0x1000, 0x4, 0x8001, 0x301cf14a, 0x7fff, 0x157e, 0x5, 0x3, 0xfffffffe, 0x7, 0x4, 0x3c2, 0xffff3acb, 0x80000000, 0x2, 0x5, 0x7, 0x6, 0x9, 0x4, 0x2581c5db, 0x5, 0x0, 0x7fffffff, 0x4, 0x3, 0x10001, 0x7ff, 0x4, 0x2, 0x101, 0x9, 0x3, 0x2, 0x38, 0xe, 0x94e, 0x2, 0xabd, 0x5, 0x9, 0x1, 0xff, 0x81, 0x9, 0x30b7, 0xa5, 0x6, 0x200, 0x4, 0x6, 0x506b8113, 0x8, 0x1, 0xd, 0xd36, 0xd, 0x3, 0x3, 0x6, 0x9, 0x7fffffff, 0xf, 0xe, 0xe0c, 0x40, 0xe1, 0x8, 0x7, 0x1, 0x7, 0x2, 0x7fff, 0xf4, 0x0, 0x10000, 0x0, 0xe, 0x8, 0x800, 0x7, 0x6, 0x0, 0x7, 0xfffffffe, 0x700, 0x0, 0x2, 0x1, 0x96, 0x8, 0x5, 0x4, 0x2f, 0x200, 0x9, 0x7270, 0x8, 0x9, 0x2, 0x4, 0x400, 0x1, 0x4, 0x40, 0x0, 0x4, 0x8, 0xd4, 0x400, 0x6, 0xfff, 0x4, 0x4, 0xcca8, 0x3, 0xf77, 0x9, 0x8, 0x7e2ae413, 0xcb, 0x800, 0x3, 0x2, 0x9, 0x4, 0x7, 0x4, 0x1, 0x5, 0x20000, 0x559, 0x2, 0x80000001, 0x9, 0x0, 0x1, 0x0, 0x403, 0x20, 0x2c, 0x0, 0xffff, 0xb628, 0x9, 0x10a, 0x5, 0x2, 0x4, 0x5, 0x1ff, 0xffffff84, 0x9, 0x401, 0x5, 0xfffffff9, 0x6, 0x4, 0x9, 0x4f, 0x401, 0x2, 0x60c000, 0x6, 0x4, 0xd, 0xfffffff8, 0x1, 0x6a59, 0x6, 0x5c2, 0x0, 0x3, 0xfffffffc, 0x81, 0x5, 0x364, 0xa3c8, 0xfffffff5, 0x4, 0x8, 0x7, 0x8, 0x80, 0xc2, 0x774, 0x200, 0xffffffff, 0x63, 0x1, 0x1508, 0x8, 0x6, 0x75e9, 0x3ff0000, 0xe, 0x7fffffff, 0x4fd3bde3, 0x5, 0x6, 0x401, 0x10003, 0x3e1fd14f, 0x9, 0x6, 0x7ff, 0xfffffff3, 0x101, 0x1, 0x5, 0x0, 0x9, 0x4, 0x401, 0x6, 0x2, 0x6, 0x5, 0xe042, 0x1000, 0xcc, 0xb, 0x1c, 0x88ace974, 0x7, 0x30, 0x9, 0x0, 0x1, 0xffff6fce, 0x400, 0xffffffff, 0xffff, 0x8000, 0xffff, 0x8, 0x6, 0x3, 0x784, 0xe0, 0xf35e, 0x8, 0x5, 0x0, 0x8, 0x8, 0x87e, 0xffffff81, 0x2, 0x4, 0x2, 0x0, 0x800, 0x1, 0xc374, 0x9, 0x3, 0x1, 0x1000, 0x1, 0x81, 0x7f, 0x7ff, 0x400, 0x5, 0x80000001, 0x9, 0x0, 0x66c3, 0x9, 0x23f, 0xfffffffb, 0x2, 0x3, 0x9, 0xe5b, 0x3ff, 0x9, 0x8, 0x2, 0x7, 0x7, 0x8, 0xfffffff8, 0x36, 0x1ff, 0x1, 0xfffffffd, 0x8001, 0x101, 0x7ff, 0xe, 0x1, 0xfffffffb, 0x9, 0x80000000, 0x8000, 0xe863, 0x0, 0x2, 0x67, 0x40, 0x0, 0x5a36, 0x7, 0x100, 0x6, 0x2, 0x2, 0x7fff, 0xff, 0xdaa, 0x58ec9a35, 0x0, 0x2, 0x20000000, 0x2, 0x8, 0xe, 0x4, 0x6, 0x5, 0x1, 0x3, 0x8, 0xffff6649, 0xfffffff9, 0x80000000, 0xe7af, 0xfff, 0xfe3e, 0x9, 0x800, 0x4, 0xfffffbff, 0x1, 0x4a, 0x81, 0x8, 0x9, 0xfffffffe, 0x9, 0x400, 0x7, 0x7, 0xeab, 0x5, 0x5, 0x0, 0x8, 0x1000000, 0x6, 0x2, 0xb6, 0x0, 0x6, 0x2, 0x7, 0x1000, 0x1, 0x3, 0x8, 0x1, 0x2, 0x0, 0x16e9, 0x4, 0x8, 0x8de5, 0x9, 0x9, 0x10001, 0x1, 0x8, 0x2, 0x0, 0xe, 0x9, 0xcfcc, 0x5, 0x4, 0x5d5, 0x53, 0x8, 0x1, 0x4, 0x8, 0x0, 0x8000, 0x1, 0x80, 0x1, 0x7, 0x10, 0x4, 0xf68, 0x7, 0x53, 0x4, 0x10, 0x4, 0xfffffffb, 0x9, 0xcb, 0x7f, 0xfff, 0x1, 0x3, 0x7f, 0x80, 0x5, 0x0, 0x40, 0x10000, 0x80000001, 0xffffffb4, 0xb8, 0xfffff1e7, 0x0, 0x0, 0x8, 0x0, 0x101, 0x0, 0x8, 0x3, 0x8, 0x2, 0x5, 0x7f, 0x7, 0x4, 0x9, 0x1f758fd2, 0x0, 0xfffffe3a, 0x4, 0x3, 0x8001, 0x9, 0x101, 0x7b5af8bf, 0xfffff000, 0x1, 0x7, 0xc, 0x6, 0x4800000, 0x0, 0xe, 0x7, 0x4, 0xd89, 0x0, 0x7, 0x9, 0x8, 0x1, 0x8, 0x8000, 0x1, 0x6, 0x0, 0x97, 0x15, 0x5, 0x40, 0x5, 0x5, 0x400, 0x8, 0xd, 0xa, 0x7f, 0x401, 0x0, 0x2, 0x6, 0x958, 0x7f, 0x0, 0x1, 0xffff, 0x101, 0x4, 0x7, 0x3ff, 0x0, 0x8, 0x8, 0x8, 0xfff, 0xb, 0x10, 0x8, 0x0, 0x8, 0x9, 0x7, 0x5, 0xcae, 0x5, 0xfff, 0x48000000, 0x2, 0x4, 0x80000001, 0xcf, 0x2, 0x9, 0xe4d, 0x274, 0x2, 0x8, 0x245e, 0x3, 0x7ef, 0x2, 0x3d11, 0x0, 0x34, 0xd, 0x400, 0x54, 0x7, 0x3, 0xfe5, 0x3, 0x2, 0x5, 0x4, 0x7, 0x4, 0x6, 0x0, 0x5, 0x8001, 0x3, 0x0, 0x6, 0x8, 0x5, 0x0, 0x3, 0x1, 0x0, 0x6, 0x4, 0x3, 0x2, 0x10000, 0x8000, 0xe, 0x8, 0xadb7, 0x8, 0x1, 0x0, 0x9, 0x80000000, 0x6, 0x8, 0x1, 0xb, 0x24f, 0x1, 0x3b, 0x507, 0x9, 0xa, 0x5, 0x0, 0x7, 0xffffffff, 0x6, 0x2, 0xffff3260, 0x3, 0x6, 0x80, 0x1, 0xe, 0x7a, 0x9, 0x8000, 0xfffffffc, 0x2, 0x891, 0x6, 0x8, 0x7fffffff, 0x5, 0x5, 0x2, 0x0, 0x4, 0x9, 0x2, 0xffff, 0x5, 0x2c4, 0x6, 0x4, 0x2, 0x8, 0x3, 0x7, 0x7ff, 0x7, 0x1, 0x4cb, 0x7, 0x800005, 0x6, 0x3, 0x8, 0x40, 0x5, 0x0, 0x5, 0xa4, 0xfffffff7, 0x1ff, 0x5, 0x7ff, 0x1abd, 0x610a92c3, 0x0, 0x2, 0x4, 0x2, 0x3, 0xe, 0x7fff, 0xa6de, 0x1, 0x7fffffff, 0x0, 0xdac, 0x4, 0x8, 0x1, 0x1, 0x80000000, 0x2, 0x55, 0xfffff001, 0x10001, 0x8, 0x2, 0x2, 0xa, 0x1, 0x4, 0x9, 0x4f, 0x101, 0x6, 0xffff, 0x0, 0x3, 0x9, 0x5, 0x1, 0x2, 0x4, 0x9, 0x3ff, 0x100, 0x0, 0x5, 0xf33, 0x3, 0x6, 0xc92, 0x1, 0x5, 0x7ff, 0x0, 0x7, 0x6, 0x800, 0xc, 0x6, 0x2, 0x8, 0x6, 0x100, 0x7, 0x2, 0x1df5, 0x1, 0xffffffff, 0xf0, 0x6, 0x7, 0x8, 0x1ff, 0x1, 0x1f50b2ce, 0x2, 0x1, 0x6, 0x0, 0x5, 0x6, 0x7f, 0x7, 0x2, 0xffffff6e, 0x101, 0x42ba, 0x9, 0x4, 0x5, 0x1, 0x9, 0x5, 0x4, 0x7fffffff, 0xb, 0xfffffffe, 0xffffffff, 0x9, 0x1, 0x58, 0x16c5, 0x3, 0x9, 0x10000, 0x82, 0x6, 0x1000, 0x8, 0x1, 0x2, 0x8000, 0x44, 0x15, 0x3, 0x7, 0x5, 0x7, 0x9, 0x0, 0x7fff, 0x10001, 0x0, 0x0, 0x7f, 0x9, 0x7, 0x8, 0xfffffffc, 0x2, 0x24, 0x401, 0x6, 0x9, 0x1ff, 0xe, 0x35, 0x4, 0x7, 0x5, 0xfa6c, 0xffffffc0, 0x0, 0xfffff801, 0x4, 0x47c, 0x3, 0x7, 0xf0, 0xffffffff, 0x9, 0x5, 0x86cb, 0x4, 0x200, 0x9, 0x7fffffff, 0x2, 0x1, 0x8001, 0x4, 0xfffffff2, 0x9, 0x6, 0x2f8, 0x7, 0xb, 0x9, 0xfffffffe, 0x8, 0x7, 0x6, 0xdd, 0x6688, 0x1, 0x2d, 0x2, 0x401, 0xe8f, 0x6, 0x1000, 0xfffffff9, 0xc, 0x6, 0x101, 0x6, 0x1, 0x400, 0x0, 0x800, 0x7850, 0x0, 0x4, 0x80000000, 0x2, 0x2, 0x0, 0xd, 0xc, 0x9, 0x539, 0x6, 0x2, 0xfffffffe, 0xffffffff, 0x9, 0x1, 0x8, 0x7, 0x7, 0x2, 0x0, 0x8000, 0xffff, 0x10000, 0x8, 0x5103, 0x9, 0x9, 0x0, 0x2, 0x7fffffff, 0x7, 0x52f, 0x0, 0x7, 0x8, 0x1, 0x7, 0x7c2, 0xd, 0xfff, 0x0, 0x8, 0x9, 0x3, 0x8, 0x8, 0x3, 0x1, 0x0, 0xd, 0xec, 0xa, 0x9, 0x4, 0x7f, 0x2, 0x1, 0x4, 0x4, 0x10000, 0x0, 0x4, 0x2, 0x9, 0x6, 0x2, 0x7, 0x7, 0x1ff, 0xfffffeff, 0x8, 0x0, 0x8, 0x3bee, 0x23, 0xe6ac, 0x4, 0x24000000, 0x0, 0x5, 0x40, 0x1, 0x59, 0x10001, 0x0, 0x800, 0x3e, 0xd77, 0x2, 0x0, 0x3, 0x2, 0x3, 0xffffffc0, 0x5, 0x40, 0x295, 0xb0, 0x6, 0x1, 0x400, 0x8, 0xe, 0x1000, 0xc38, 0x10, 0x9, 0x2, 0x1, 0xffff, 0x38000000, 0x7, 0x8, 0x0, 0x5, 0x9, 0x0, 0x6, 0x9, 0x7, 0x81, 0x8, 0x8, 0x8, 0xff, 0x7, 0x8000, 0x8, 0x6, 0xffff, 0x5, 0x1, 0x8, 0x8, 0x1, 0x6000, 0x4, 0xb6e, 0x8, 0xff000000, 0x80, 0xc0, 0x80000000, 0x20000000, 0xd, 0x8, 0x1, 0x3ff, 0x3, 0x8, 0x10, 0x1, 0x6, 0x4, 0x0, 0x401, 0x5, 0x3, 0xfffffffe, 0x8c, 0x4, 0x8, 0x0, 0x4, 0x9, 0x10, 0x10001, 0xde4, 0xfff, 0x7, 0x2, 0x7, 0x9, 0x1, 0xb]}) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x400000a, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000160071827efde4be701161000a04"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1, 0x0, 0xfffc}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x182, 0x2, 0x1, 0x7, 0xdf5, 0x5}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a00000002100010027bd7000fefffffffc020000000000000000000000000000e00000010000000000000000000000004e", @ANYRES32=0x0, @ANYRES32=0x0], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_open_dev$hiddev(&(0x7f0000000180), 0x3, 0x28640) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 10.62746937s ago: executing program 33 (id=1644): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f6, 0x400, 0x70bd2b, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) syz_clone(0x80048080, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)="ab4c56950c1eb380bcf7337d3dd0517a73b53cee33fc7c6c0f85afec0e429afdd3d657719088f8f76f37c6d777a7e18adb7c32d970cdb836063275b98582c26a3e25f755ede3382c8a88470ca4095a303dbcc131474cc6bb6d1202fe873debc1a3e6241da1f99cafa7060c716156b1e51a525f87ed2799c50d063603c2a34dc8205b71e291f3737d612fcc1654dec5f16b2c33a6b5f1cea6ddd017dc4da8a0") r2 = socket(0x10, 0x3, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) r3 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r3) syz_usb_connect$midi(0x3, 0x59, &(0x7f0000003140)=ANY=[@ANYBLOB="12011003000000208205560441000102030109024700010102400709040000020103004a09240300ff018108090724010600070006240200015309050600000409fcc00425010009050a03ff03059d0e09250112"], &(0x7f0000003500)={0x0, 0x0, 0x0, 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r5, 0x84, 0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, &(0x7f0000000500)={{0x3, 0x3, 0x0, 0x3, 0xfffffffd, 0x80000001}, 0x27d, [0xc0000000, 0x5, 0x4, 0x1, 0x80, 0x9, 0xfffffff7, 0x26f1, 0x7fff, 0x5, 0x8000, 0x9, 0x5, 0x400, 0x5, 0x5, 0x6, 0x7ff, 0x1, 0x7, 0x2, 0x2, 0x3, 0x3, 0x80000000, 0x6, 0x7e, 0x4, 0x2, 0x5, 0x1, 0x4, 0x1000, 0x4, 0x8001, 0x301cf14a, 0x7fff, 0x157e, 0x5, 0x3, 0xfffffffe, 0x7, 0x4, 0x3c2, 0xffff3acb, 0x80000000, 0x2, 0x5, 0x7, 0x6, 0x9, 0x4, 0x2581c5db, 0x5, 0x0, 0x7fffffff, 0x4, 0x3, 0x10001, 0x7ff, 0x4, 0x2, 0x101, 0x9, 0x3, 0x2, 0x38, 0xe, 0x94e, 0x2, 0xabd, 0x5, 0x9, 0x1, 0xff, 0x81, 0x9, 0x30b7, 0xa5, 0x6, 0x200, 0x4, 0x6, 0x506b8113, 0x8, 0x1, 0xd, 0xd36, 0xd, 0x3, 0x3, 0x6, 0x9, 0x7fffffff, 0xf, 0xe, 0xe0c, 0x40, 0xe1, 0x8, 0x7, 0x1, 0x7, 0x2, 0x7fff, 0xf4, 0x0, 0x10000, 0x0, 0xe, 0x8, 0x800, 0x7, 0x6, 0x0, 0x7, 0xfffffffe, 0x700, 0x0, 0x2, 0x1, 0x96, 0x8, 0x5, 0x4, 0x2f, 0x200, 0x9, 0x7270, 0x8, 0x9, 0x2, 0x4, 0x400, 0x1, 0x4, 0x40, 0x0, 0x4, 0x8, 0xd4, 0x400, 0x6, 0xfff, 0x4, 0x4, 0xcca8, 0x3, 0xf77, 0x9, 0x8, 0x7e2ae413, 0xcb, 0x800, 0x3, 0x2, 0x9, 0x4, 0x7, 0x4, 0x1, 0x5, 0x20000, 0x559, 0x2, 0x80000001, 0x9, 0x0, 0x1, 0x0, 0x403, 0x20, 0x2c, 0x0, 0xffff, 0xb628, 0x9, 0x10a, 0x5, 0x2, 0x4, 0x5, 0x1ff, 0xffffff84, 0x9, 0x401, 0x5, 0xfffffff9, 0x6, 0x4, 0x9, 0x4f, 0x401, 0x2, 0x60c000, 0x6, 0x4, 0xd, 0xfffffff8, 0x1, 0x6a59, 0x6, 0x5c2, 0x0, 0x3, 0xfffffffc, 0x81, 0x5, 0x364, 0xa3c8, 0xfffffff5, 0x4, 0x8, 0x7, 0x8, 0x80, 0xc2, 0x774, 0x200, 0xffffffff, 0x63, 0x1, 0x1508, 0x8, 0x6, 0x75e9, 0x3ff0000, 0xe, 0x7fffffff, 0x4fd3bde3, 0x5, 0x6, 0x401, 0x10003, 0x3e1fd14f, 0x9, 0x6, 0x7ff, 0xfffffff3, 0x101, 0x1, 0x5, 0x0, 0x9, 0x4, 0x401, 0x6, 0x2, 0x6, 0x5, 0xe042, 0x1000, 0xcc, 0xb, 0x1c, 0x88ace974, 0x7, 0x30, 0x9, 0x0, 0x1, 0xffff6fce, 0x400, 0xffffffff, 0xffff, 0x8000, 0xffff, 0x8, 0x6, 0x3, 0x784, 0xe0, 0xf35e, 0x8, 0x5, 0x0, 0x8, 0x8, 0x87e, 0xffffff81, 0x2, 0x4, 0x2, 0x0, 0x800, 0x1, 0xc374, 0x9, 0x3, 0x1, 0x1000, 0x1, 0x81, 0x7f, 0x7ff, 0x400, 0x5, 0x80000001, 0x9, 0x0, 0x66c3, 0x9, 0x23f, 0xfffffffb, 0x2, 0x3, 0x9, 0xe5b, 0x3ff, 0x9, 0x8, 0x2, 0x7, 0x7, 0x8, 0xfffffff8, 0x36, 0x1ff, 0x1, 0xfffffffd, 0x8001, 0x101, 0x7ff, 0xe, 0x1, 0xfffffffb, 0x9, 0x80000000, 0x8000, 0xe863, 0x0, 0x2, 0x67, 0x40, 0x0, 0x5a36, 0x7, 0x100, 0x6, 0x2, 0x2, 0x7fff, 0xff, 0xdaa, 0x58ec9a35, 0x0, 0x2, 0x20000000, 0x2, 0x8, 0xe, 0x4, 0x6, 0x5, 0x1, 0x3, 0x8, 0xffff6649, 0xfffffff9, 0x80000000, 0xe7af, 0xfff, 0xfe3e, 0x9, 0x800, 0x4, 0xfffffbff, 0x1, 0x4a, 0x81, 0x8, 0x9, 0xfffffffe, 0x9, 0x400, 0x7, 0x7, 0xeab, 0x5, 0x5, 0x0, 0x8, 0x1000000, 0x6, 0x2, 0xb6, 0x0, 0x6, 0x2, 0x7, 0x1000, 0x1, 0x3, 0x8, 0x1, 0x2, 0x0, 0x16e9, 0x4, 0x8, 0x8de5, 0x9, 0x9, 0x10001, 0x1, 0x8, 0x2, 0x0, 0xe, 0x9, 0xcfcc, 0x5, 0x4, 0x5d5, 0x53, 0x8, 0x1, 0x4, 0x8, 0x0, 0x8000, 0x1, 0x80, 0x1, 0x7, 0x10, 0x4, 0xf68, 0x7, 0x53, 0x4, 0x10, 0x4, 0xfffffffb, 0x9, 0xcb, 0x7f, 0xfff, 0x1, 0x3, 0x7f, 0x80, 0x5, 0x0, 0x40, 0x10000, 0x80000001, 0xffffffb4, 0xb8, 0xfffff1e7, 0x0, 0x0, 0x8, 0x0, 0x101, 0x0, 0x8, 0x3, 0x8, 0x2, 0x5, 0x7f, 0x7, 0x4, 0x9, 0x1f758fd2, 0x0, 0xfffffe3a, 0x4, 0x3, 0x8001, 0x9, 0x101, 0x7b5af8bf, 0xfffff000, 0x1, 0x7, 0xc, 0x6, 0x4800000, 0x0, 0xe, 0x7, 0x4, 0xd89, 0x0, 0x7, 0x9, 0x8, 0x1, 0x8, 0x8000, 0x1, 0x6, 0x0, 0x97, 0x15, 0x5, 0x40, 0x5, 0x5, 0x400, 0x8, 0xd, 0xa, 0x7f, 0x401, 0x0, 0x2, 0x6, 0x958, 0x7f, 0x0, 0x1, 0xffff, 0x101, 0x4, 0x7, 0x3ff, 0x0, 0x8, 0x8, 0x8, 0xfff, 0xb, 0x10, 0x8, 0x0, 0x8, 0x9, 0x7, 0x5, 0xcae, 0x5, 0xfff, 0x48000000, 0x2, 0x4, 0x80000001, 0xcf, 0x2, 0x9, 0xe4d, 0x274, 0x2, 0x8, 0x245e, 0x3, 0x7ef, 0x2, 0x3d11, 0x0, 0x34, 0xd, 0x400, 0x54, 0x7, 0x3, 0xfe5, 0x3, 0x2, 0x5, 0x4, 0x7, 0x4, 0x6, 0x0, 0x5, 0x8001, 0x3, 0x0, 0x6, 0x8, 0x5, 0x0, 0x3, 0x1, 0x0, 0x6, 0x4, 0x3, 0x2, 0x10000, 0x8000, 0xe, 0x8, 0xadb7, 0x8, 0x1, 0x0, 0x9, 0x80000000, 0x6, 0x8, 0x1, 0xb, 0x24f, 0x1, 0x3b, 0x507, 0x9, 0xa, 0x5, 0x0, 0x7, 0xffffffff, 0x6, 0x2, 0xffff3260, 0x3, 0x6, 0x80, 0x1, 0xe, 0x7a, 0x9, 0x8000, 0xfffffffc, 0x2, 0x891, 0x6, 0x8, 0x7fffffff, 0x5, 0x5, 0x2, 0x0, 0x4, 0x9, 0x2, 0xffff, 0x5, 0x2c4, 0x6, 0x4, 0x2, 0x8, 0x3, 0x7, 0x7ff, 0x7, 0x1, 0x4cb, 0x7, 0x800005, 0x6, 0x3, 0x8, 0x40, 0x5, 0x0, 0x5, 0xa4, 0xfffffff7, 0x1ff, 0x5, 0x7ff, 0x1abd, 0x610a92c3, 0x0, 0x2, 0x4, 0x2, 0x3, 0xe, 0x7fff, 0xa6de, 0x1, 0x7fffffff, 0x0, 0xdac, 0x4, 0x8, 0x1, 0x1, 0x80000000, 0x2, 0x55, 0xfffff001, 0x10001, 0x8, 0x2, 0x2, 0xa, 0x1, 0x4, 0x9, 0x4f, 0x101, 0x6, 0xffff, 0x0, 0x3, 0x9, 0x5, 0x1, 0x2, 0x4, 0x9, 0x3ff, 0x100, 0x0, 0x5, 0xf33, 0x3, 0x6, 0xc92, 0x1, 0x5, 0x7ff, 0x0, 0x7, 0x6, 0x800, 0xc, 0x6, 0x2, 0x8, 0x6, 0x100, 0x7, 0x2, 0x1df5, 0x1, 0xffffffff, 0xf0, 0x6, 0x7, 0x8, 0x1ff, 0x1, 0x1f50b2ce, 0x2, 0x1, 0x6, 0x0, 0x5, 0x6, 0x7f, 0x7, 0x2, 0xffffff6e, 0x101, 0x42ba, 0x9, 0x4, 0x5, 0x1, 0x9, 0x5, 0x4, 0x7fffffff, 0xb, 0xfffffffe, 0xffffffff, 0x9, 0x1, 0x58, 0x16c5, 0x3, 0x9, 0x10000, 0x82, 0x6, 0x1000, 0x8, 0x1, 0x2, 0x8000, 0x44, 0x15, 0x3, 0x7, 0x5, 0x7, 0x9, 0x0, 0x7fff, 0x10001, 0x0, 0x0, 0x7f, 0x9, 0x7, 0x8, 0xfffffffc, 0x2, 0x24, 0x401, 0x6, 0x9, 0x1ff, 0xe, 0x35, 0x4, 0x7, 0x5, 0xfa6c, 0xffffffc0, 0x0, 0xfffff801, 0x4, 0x47c, 0x3, 0x7, 0xf0, 0xffffffff, 0x9, 0x5, 0x86cb, 0x4, 0x200, 0x9, 0x7fffffff, 0x2, 0x1, 0x8001, 0x4, 0xfffffff2, 0x9, 0x6, 0x2f8, 0x7, 0xb, 0x9, 0xfffffffe, 0x8, 0x7, 0x6, 0xdd, 0x6688, 0x1, 0x2d, 0x2, 0x401, 0xe8f, 0x6, 0x1000, 0xfffffff9, 0xc, 0x6, 0x101, 0x6, 0x1, 0x400, 0x0, 0x800, 0x7850, 0x0, 0x4, 0x80000000, 0x2, 0x2, 0x0, 0xd, 0xc, 0x9, 0x539, 0x6, 0x2, 0xfffffffe, 0xffffffff, 0x9, 0x1, 0x8, 0x7, 0x7, 0x2, 0x0, 0x8000, 0xffff, 0x10000, 0x8, 0x5103, 0x9, 0x9, 0x0, 0x2, 0x7fffffff, 0x7, 0x52f, 0x0, 0x7, 0x8, 0x1, 0x7, 0x7c2, 0xd, 0xfff, 0x0, 0x8, 0x9, 0x3, 0x8, 0x8, 0x3, 0x1, 0x0, 0xd, 0xec, 0xa, 0x9, 0x4, 0x7f, 0x2, 0x1, 0x4, 0x4, 0x10000, 0x0, 0x4, 0x2, 0x9, 0x6, 0x2, 0x7, 0x7, 0x1ff, 0xfffffeff, 0x8, 0x0, 0x8, 0x3bee, 0x23, 0xe6ac, 0x4, 0x24000000, 0x0, 0x5, 0x40, 0x1, 0x59, 0x10001, 0x0, 0x800, 0x3e, 0xd77, 0x2, 0x0, 0x3, 0x2, 0x3, 0xffffffc0, 0x5, 0x40, 0x295, 0xb0, 0x6, 0x1, 0x400, 0x8, 0xe, 0x1000, 0xc38, 0x10, 0x9, 0x2, 0x1, 0xffff, 0x38000000, 0x7, 0x8, 0x0, 0x5, 0x9, 0x0, 0x6, 0x9, 0x7, 0x81, 0x8, 0x8, 0x8, 0xff, 0x7, 0x8000, 0x8, 0x6, 0xffff, 0x5, 0x1, 0x8, 0x8, 0x1, 0x6000, 0x4, 0xb6e, 0x8, 0xff000000, 0x80, 0xc0, 0x80000000, 0x20000000, 0xd, 0x8, 0x1, 0x3ff, 0x3, 0x8, 0x10, 0x1, 0x6, 0x4, 0x0, 0x401, 0x5, 0x3, 0xfffffffe, 0x8c, 0x4, 0x8, 0x0, 0x4, 0x9, 0x10, 0x10001, 0xde4, 0xfff, 0x7, 0x2, 0x7, 0x9, 0x1, 0xb]}) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x400000a, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000160071827efde4be701161000a04"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1, 0x0, 0xfffc}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x182, 0x2, 0x1, 0x7, 0xdf5, 0x5}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a00000002100010027bd7000fefffffffc020000000000000000000000000000e00000010000000000000000000000004e", @ANYRES32=0x0, @ANYRES32=0x0], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_open_dev$hiddev(&(0x7f0000000180), 0x3, 0x28640) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 9.847787768s ago: executing program 4 (id=1651): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x184, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@typed={0x49, 0x121, 0x0, 0x0, @binary="c9a7befe6f6d645a1a11b81b2c4b10fb4f5fdaf9331c7510e19feecb90ee6bb49fdb1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296774f1fe35663c0d236fde58b"}]}, @nested={0x120, 0x6, 0x0, 0x1, [@nested={0x11c, 0xce, 0x0, 0x1, [@nested={0x118, 0x13e, 0x0, 0x1, [@nested={0x114, 0xa0, 0x0, 0x1, [@nested={0x110, 0x61, 0x0, 0x1, [@nested={0x10c, 0x9d, 0x0, 0x1, [@nested={0x108, 0x63, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @uid}, @nested={0x4, 0x90}, @nested={0xa9, 0x70, 0x0, 0x1, [@generic="579e823010f4e6ac20a78bb6b50faa7c5c339cb6544db84836e423b0db24282e91f0866c5dedd8cc749969da17b87507fcfe34fe57719566dad4e0d6a5c6716642875d58706fe6ee1ff2cffa44ad14e71b97d48e629ee4c73500b16d25949c079ffde0a1a6e12ef08170071432658e725bcb3af48aaa4fb1dd4bf5cca271c12088a3d85ed1ec85620cc3cc3241b26969c0ac1ce7320cadd51929f2f16622e00f3f7d0ca580"]}, @typed={0x8, 0x11c, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x12e, 0x0, 0x0, @fd=r0}, @nested={0x3c, 0xde, 0x0, 0x1, [@nested={0x38, 0xf7, 0x0, 0x1, [@nested={0x31, 0xae, 0x0, 0x1, [@generic="92d62371a5818be28a7e649867e74648111f7c3d4fa084672b646a2252f25512f8d67e38a029361d98c5533ff4"]}]}]}]}]}]}]}]}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setpriority(0x2, 0xff, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="18000000320001022cbd7000fedbdf250800db80040004"], 0x18}], 0x1}, 0x80) 8.954426428s ago: executing program 4 (id=1658): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000760001"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0xb522f000) keyctl$reject(0x13, 0x0, 0x0, 0x200, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYRES16=r6, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a3100002200440004", @ANYBLOB='l\x00\x00\x00', @ANYRESDEC=r3], 0x6c}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x214002, 0xc0) syz_clone(0x2002000, &(0x7f00000000c0), 0x0, 0x0, 0x0, &(0x7f0000000200)="e1ced3") r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x313) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 8.9096142s ago: executing program 4 (id=1659): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x501000, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') (async) r2 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) (async) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x91baaa24d96f8283, 0x80) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x4c, 0x13, 0x2, 0x70bd2b, 0x25dfdbfb, {0x10, 0xf8, 0x2, 0x6, {0x4e23, 0x4e24, [0x9, 0x6, 0x5, 0x7], [0x5, 0xe94, 0x10, 0x2], 0x0, [0x2, 0x6]}, 0x8, 0x1000}}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x20000084) (async) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r4, &(0x7f0000000080), 0x2000011a) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x20) (async) recvmsg$unix(r3, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1}, 0x2a4d70375d8666a1) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x3e81, @none, 0x7}, 0x6) (async) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000180)=ANY=[@ANYBLOB="0800000000000000050000000000000041"]) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x60020, &(0x7f00000001c0)={[{@huge_never}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0xdc535b22ffc8250c, 0x64, 0x63, 0x62, 0xf, 0x61, 0x30], 0x2d, [0x63, 0x38, 0x63, 0x31], 0x2d, [0x64, 0x31, 0x37, 0xeb693ae7c72f06f4], 0x2d, [0xb, 0x37, 0x38, 0x39], 0x2d, [0x38, 0x37, 0x0, 0x31, 0x38, 0x39, 0x62, 0x64]}}}]}) (async) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r8, 0xc00c55ca, &(0x7f00000000c0)={0x10, 0x80000000, 0x6140}) (async) openat2(r0, &(0x7f0000000080)='./cgroup/../file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x10}, 0x18) 8.831967293s ago: executing program 4 (id=1660): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (rerun: 64) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140) (async) pwritev2(r2, &(0x7f0000000000)=[{&(0x7f0000000500)='E.E', 0x3}], 0x1, 0x400003, 0x8080400, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0xc, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121542, 0x60) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x801063, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000003580)=""/4084, 0xff4}, {&(0x7f0000000200)=""/196, 0xc4}, {&(0x7f0000000000)=""/83, 0x53}, {&(0x7f0000000600)=""/87, 0x57}, {&(0x7f0000004580)=""/4094, 0xffe}, {&(0x7f0000000100)=""/246, 0xf6}, {&(0x7f0000000480)=""/244, 0xf4}, {&(0x7f0000000080)=""/85, 0x55}, {&(0x7f0000000580)=""/65, 0x41}, {&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f0000000300)=""/103, 0x67}], 0xb}, 0x5e}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x90ce}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x4}], 0x8, 0x0, 0x0) (rerun: 64) 8.695928008s ago: executing program 4 (id=1662): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x27) ioctl$KVM_CAP_PTP_KVM(r1, 0x4068aea3, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x52, &(0x7f0000000140)=[@vmwrite={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x41}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.423951717s ago: executing program 4 (id=1663): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setfsuid(0xee00) (async) setfsuid(0xee01) (async) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x104, 0x1a, 0x7, 0x70bd26, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@broadcast, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x3c}, @in6=@private0, {0x300, 0x3, 0x2, 0xfeffff7f00000000, 0x0, 0x1}, {0x0, 0x200000, 0x7, 0x2}, {0x40000, 0x0, 0x9}, 0x800, 0x0, 0xa, 0x2, 0x0, 0x50}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0xb1, 0x0, 0xfe, 0xfffff00c}, {0x6, 0x0, 0x1}]}, 0x10) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x140, 0x10, 0x1, 0xf7fffffe, 0x25dfdbfc, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@multicast1, 0xffff, 0x714, 0x4e23, 0x2, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xff}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x1, 0xfffffffc}, 0x70bd2a, 0x3507, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @etimer_thresh={0x8, 0xc, 0x7ff}]}, 0x140}, 0x1, 0x0, 0x0, 0x1400c0d1}, 0x0) (async) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x5d, r7}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioprio_set$pid(0x2, 0x0, 0x0) (async) r10 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) (async) r11 = fsmount(r10, 0x0, 0x0) r12 = openat(r11, &(0x7f00000003c0)='./file0\x00', 0x42, 0x0) sendfile(r12, r12, 0x0, 0xe3aa6ea) setreuid(r9, r9) ioprio_set$uid(0x3, r9, 0x4000) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in=@multicast2, 0x4e23, 0x1, 0x4e20, 0x0, 0xa, 0x20, 0x20, 0x1, r7, r9}, {0x4293, 0x8000000000000001, 0x831, 0xffffffffffff256a, 0x0, 0x7, 0x2, 0x800}, {0xe, 0xffff, 0x8000000000000001, 0x6}, 0x6, 0x6e6bb5, 0x3, 0x0, 0x7, 0x2}, {{@in=@local, 0x4d2, 0x5b}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x2, 0x3, 0x3, 0x2, 0x5, 0x3}}, 0xe8) 8.400378718s ago: executing program 34 (id=1663): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setfsuid(0xee00) (async) setfsuid(0xee01) (async) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x104, 0x1a, 0x7, 0x70bd26, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@broadcast, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x3c}, @in6=@private0, {0x300, 0x3, 0x2, 0xfeffff7f00000000, 0x0, 0x1}, {0x0, 0x200000, 0x7, 0x2}, {0x40000, 0x0, 0x9}, 0x800, 0x0, 0xa, 0x2, 0x0, 0x50}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0xb1, 0x0, 0xfe, 0xfffff00c}, {0x6, 0x0, 0x1}]}, 0x10) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x140, 0x10, 0x1, 0xf7fffffe, 0x25dfdbfc, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@multicast1, 0xffff, 0x714, 0x4e23, 0x2, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xff}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x1, 0xfffffffc}, 0x70bd2a, 0x3507, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @etimer_thresh={0x8, 0xc, 0x7ff}]}, 0x140}, 0x1, 0x0, 0x0, 0x1400c0d1}, 0x0) (async) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x5d, r7}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioprio_set$pid(0x2, 0x0, 0x0) (async) r10 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) (async) r11 = fsmount(r10, 0x0, 0x0) r12 = openat(r11, &(0x7f00000003c0)='./file0\x00', 0x42, 0x0) sendfile(r12, r12, 0x0, 0xe3aa6ea) setreuid(r9, r9) ioprio_set$uid(0x3, r9, 0x4000) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in=@multicast2, 0x4e23, 0x1, 0x4e20, 0x0, 0xa, 0x20, 0x20, 0x1, r7, r9}, {0x4293, 0x8000000000000001, 0x831, 0xffffffffffff256a, 0x0, 0x7, 0x2, 0x800}, {0xe, 0xffff, 0x8000000000000001, 0x6}, 0x6, 0x6e6bb5, 0x3, 0x0, 0x7, 0x2}, {{@in=@local, 0x4d2, 0x5b}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x2, 0x3, 0x3, 0x2, 0x5, 0x3}}, 0xe8) 3.483964028s ago: executing program 6 (id=1697): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r0, &(0x7f00000046c0)=""/4096, 0x1000) getdents64(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r1, 0x4018aee2, &(0x7f00000002c0)=@attr_other={0x0, 0x1000, 0xffffffff, 0x0}) 3.42793609s ago: executing program 6 (id=1698): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x11}, 0xb00}], 0x1, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r3, &(0x7f0000000300)=ANY=[], 0x53) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f00000001c0)=0x5, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) r6 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) (async) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_wakeup_irq', 0x20940, 0x1e2) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000140)={r7, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x5, 0xc, "c44ef9682a689185ff07ec0f9eddd770e010a8b62022fd106fa715e63fee8ab07f3c19ed0c04afcaba06f6d9584488da0162d4cc7030ec4f7b9ab89b3e192e4a", "8bc975aabbbbe9e4cbb0e98d43a12e12538b330e6fe3bce73919393417abdc6c58f0abd4f0c29b3c71757f74bc429c808f46e9cda4584203143a0b9705fb16b6", "666f1d5f5c43005b310134ce9a6d0369862b72c1f9f4980a2346c4dd62ad8050", [0x6, 0x61fe]}}) (async) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r7) (async) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r2, 0x0, 0xd, &(0x7f0000000180)=0xfff, 0x4) (async) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x3b, 0x6, 0x6}, {0x400, 0x40, 0xe6, 0xc}, {0x1, 0x91, 0xc, 0xd2800000}, {0x9, 0x7, 0x8}, {0x4, 0x24, 0x0, 0x100}, {0x1274, 0x1, 0x3, 0x101}, {0x8, 0x3, 0x7e, 0x8}]}, 0x10) (async) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x30, 0x1, 0x70bd29, 0x25dfdbfa, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x4, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) 3.298097355s ago: executing program 6 (id=1701): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x20) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.127961406s ago: executing program 6 (id=1706): mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x48, &(0x7f0000000600)=0xdfa, 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000006c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) connect$802154_dgram(r3, &(0x7f00000000c0)={0x24, @none={0x0, 0x3}}, 0x14) syz_fuse_handle_req(r1, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x1) lseek(r7, 0x0, 0x2) syz_usb_connect$midi(0x1, 0x44, &(0x7f0000000000)=ANY=[], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r8, 0x4018aee2, &(0x7f00000002c0)=@attr_other={0x0, 0x1000, 0xffffffff, 0x0}) 1.881198244s ago: executing program 2 (id=1708): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) setns(r1, 0x80) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0xffffffffffffffff}, 0x6) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r4 = syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r5, 0x80000001, 0x4) write$cgroup_pid(r4, &(0x7f0000000040)=r5, 0x12) ioctl$TCFLSH(r2, 0x400455c8, 0x0) 1.744112069s ago: executing program 2 (id=1710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x313) r2 = dup(r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x62, 0x0, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0x2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 1.43390799s ago: executing program 5 (id=1711): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x313) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8910, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 1.360151152s ago: executing program 6 (id=1712): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x0) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) prctl$PR_GET_SPECULATION_CTRL(0x53564d41, 0x0, 0x4) (async, rerun: 64) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x8001) r4 = getpgid(0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000140)={0x1, r4}) (async) syz_io_uring_setup(0x702, &(0x7f0000000500)={0x0, 0xfffffffc, 0x8, 0x7, 0x1e6}, 0x0, 0x0, &(0x7f0000000000)) (async) syz_open_procfs(r4, &(0x7f0000000000)='auxv\x00') (async) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0xfffffffd}, 0x24) (async) write(r5, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000000002000008000f40fe00000e", 0x24) (async) sendmsg$nl_route_sched_retired(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtaction={0x18, 0x31, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async, rerun: 64) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) (rerun: 64) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a44a9, &(0x7f0000000140)={[{@inode32}]}) (async, rerun: 32) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000001c0)) (rerun: 32) 1.295936214s ago: executing program 5 (id=1713): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x40000, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xa1) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f0000000600)=0x1801, 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00') exit(0x0) readv(r3, &(0x7f0000000040)=[{&(0x7f0000000100)=""/222, 0xde}], 0x1) write(r0, &(0x7f0000000000)="240000005a001f001007f4b9002304000a04f51108000500020100020800038005004000", 0x24) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x20040040}, 0x4040) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0x7, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r5, 0x4, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x80014) syslog(0x0, 0x0, 0x0) r6 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r6, 0x10000) fcntl$addseals(r6, 0x409, 0x7) write(r2, &(0x7f0000000640)="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", 0x163) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xd, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x8040) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x29}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x11) sched_rr_get_interval(0x0, &(0x7f0000000380)) 1.295668834s ago: executing program 6 (id=1714): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x24, {[@global=@item_4={0x3, 0x1, 0x7, "3190a783"}, @main=@item_012={0x2, 0x0, 0x9, '{|'}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x2, 0x1, 0x3, "dff4"}, @local=@item_4={0x3, 0x2, 0x2, "eb212189"}, @main=@item_4={0x3, 0x0, 0xb, "bf0700"}, @main=@item_4={0x3, 0x0, 0x9, "cdd2f361"}, @local=@item_4]}}, 0x0}, 0x0) 1.295504415s ago: executing program 2 (id=1715): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x84) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 442.289164ms ago: executing program 5 (id=1719): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) capset(&(0x7f0000a31000)={0x20080522}, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0xfffffffffffffffe, 0x6040000}) 423.553295ms ago: executing program 5 (id=1720): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x600c82, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f0000000080)={0x2, 0x1, 0xfef, 0x3, 0x0, 0x6}) (async, rerun: 64) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) (rerun: 64) r2 = fcntl$dupfd(r1, 0x406, r1) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000140)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000180)) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000001c0)={'geneve1\x00', @multicast}) (async, rerun: 64) fallocate(r2, 0x1, 0x0, 0x6) (async) ioctl$USBDEVFS_WAIT_FOR_RESUME(r2, 0x5523) (async, rerun: 64) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000200)=0xf, 0x4) (async, rerun: 64) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000240)=""/182, &(0x7f0000000300)=0xb6) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) landlock_restrict_self(r2, 0x8) (async) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000540)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f0000000640)=0xe8) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x10811, &(0x7f0000000680)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1400}}, {}, {@blksize}], [{@uid_lt={'uid<', r5}}, {@obj_type={'obj_type', 0x3d, 'geneve1\x00'}}, {@measure}, {@smackfsdef={'smackfsdef', 0x3d, 'geneve1\x00'}}]}}) (async, rerun: 32) ioctl$RTC_PIE_ON(r1, 0x7005) (rerun: 32) sendmsg(r1, &(0x7f0000000a40)={&(0x7f00000007c0)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x1ff, @empty, 0x7fffffff}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000840)="f7b7157051f8def921917bb1629762e8a2e0407886a52f91d1646480c982ad827f9307910f44bb4e410b144bd3271d2d6505650433f19880e4c649f974a799286e7b7e799b7952b9a0a8f9f793e71f9e042119270eaea9379a78ea4c66c92516c266fb343e9db75a38ebaa404a47c816abbeec9bbee8f1b806cf73727e9926a93b9c0f2de1d42d34019b634b680875b28e7c06576d4564bc92766e0a624b1d94c4c396ae25977c4fa8496366675e742668c6cba63b8695d48e0ede929bb7de99ed132e9a1f0636723fa20dc259659bef402ca82de030", 0xd6}, {&(0x7f0000000940)="db29d64b66a7d36484653f1703b9d59e2daa93ce8a07705b981aabf2bccbba72b9e029f817fca57e86616a3e170a9f0b137dc369a1b71eabeebac1278d9c5487c51ddfdbedd90964440d5065c90eb3e4861b80e35f3cf6bb335fe8c4884560a5acca05d4cad7a2884949396168e243d52f10eaa50afe92f622fc028d370f8a46209d16519e5c166cb56399143a4028c103b2856176e044b3ff30cc834a8fc33bcae7", 0xa2}], 0x2}, 0x8845) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000a80)={0xaa, 0x3}) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000bc0)={&(0x7f0000000ac0)=""/203, 0x1000000, 0x0, 0x800000, 0x2}, 0x20) r6 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c40), r1) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000f00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000c80)={0x230, r7, 0x200, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x230}, 0x1, 0x0, 0x0, 0x4040810}, 0x44000) (async) io_setup(0x6, &(0x7f0000000f40)=0x0) io_submit(r8, 0x7, &(0x7f0000001600)=[&(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0xff, r6, &(0x7f0000000f80)="227301d6cc64f9401973af46e1b7f2b110f3d10b66cf655cc98664d4ac9859118473b1567456c31d3f97f5b96ec220", 0x2f, 0x4, 0x0, 0x1, r1}, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x3, 0x7b22, r1, &(0x7f0000001000)="04fe93b24df7b099a9a767dc4405b49337a354c8559f3d7d9956ea85a1b4a6ee6763c73cfb45641a977676f9fad586234bdd302d31025f04ef9d1e7c78b75cd53bed77", 0x43, 0x9, 0x0, 0x2, r2}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x400, r1, &(0x7f00000010c0)="e0007266c48e8eca90901f2b757f8d924ab3b6c2f7cf86eb1ff26a8c3ec2947dede109d10a1d503ff1695f9a5d3c28bd1a1d9edf316b17e267279eb672", 0x3d, 0x9, 0x0, 0x2, r2}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000001140)="9d4607b0610548b1162e415200df8afd132d9829e33c52b50e3048a25bad67b7f4e9e08e48074f3cf0e0cac0cb96b1c06b418c8d0d4ab6c336eacc89b4b539c93fe5cce00f00addd1726a4c1ce2192f6ba9eeb82fe5aea9abad1d9598d3bb9c69311b60f165a41a382be01119811365e1bd9f01f93b799d89b5d611e20d6ef4cd30377ae0903252cbc3746f39a8acf75d42d1754982ce1825c426bd67527211d7aa3f6695d1a102816bebfadb59681527f7101c1", 0xb4, 0x40, 0x0, 0x3, r1}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x5, 0x7, 0xffffffffffffffff, &(0x7f0000001240)="89703ac7dc8ce4494f13b6b70708a289787eeb95bb07329592d9650806ae9d8c32b6427598f441cfa89c18907b61b5b4c4eb03931468a27ca95933af55a0ffbef74ea25b5074940b3781de02ccb9ebd5cb8968fc1f92ead5aa0fec34cc6c7e256582a501bc91987a289bdd7d86c0a099a441956673d45976713729347f78064c7dbc2b19f413585cdb4c16f406f2f034e11d52cbf00532efdc4b1a5a8f7377fedf65d5246072746f5b165757c284dcd491eebbb30797d879b4e7df9c41f1abb9d9e1ab8c3b80a9d8fb80e870cb12a7bf2f4ae5d1c0e14d235b22d9452c0d7a4d54f8250c1e97b1e245077a614e60da", 0xef, 0x9, 0x0, 0x3}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f0000001380)="bbb97079d8490d44e9a3fbde437a248697c2b5be4fe49698f95143f5ad11fc8313333935dada24f94f97be96f520e353590bdb43b670d712bb1c5cd67f0d7232dcbbaaedf46d37b727ce8c7aa03ee23f8724075904a138581778bb99c3f5b849aa0d2732ac652c3a5ee7a055a29baf25eb88b8c43808be7d8c33e5a7a0676caa2189a57ea8c45cbee7d9157065591a2cf512b99c17b00c50deb88b6d721fda23a85f3ce5ca0d918bc3c1a171febb60e5affe1d75b5012f37ac49a45cdf0576d63b7ab1550d242992a6b9763e60401264630b246cbaeb7b8a29543e738bdca6f6330f43632851509a33de9998a0abef31", 0xf0, 0x9, 0x0, 0x2, r6}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x5, 0x9, r6, &(0x7f00000014c0)="60c45aa4bd1fabffd5c84038276f914240ca3324d20c071176abe52944a97c5a90af6716380d999e3fd633bdbb9087401102458d979e5c9a577b2bcf61a5fc75da409f4d780f5b4515d519fd6d620a4fd5e5492efd0e5ce9f91853a93fc228c7e2ef22d2a3e8b70452a294e1ec738da9bd3b83828703f0dc00b6590b8380747e4794b2627d6d85eb0502a022a6d0e31d8a76433b306e2fb0729ed1fb1a6251ce3124680236d87290ba5c203647a9357935842a06d076d419cf3216c7c74a14161ac688d6c80950454453", 0xca, 0x0, 0x0, 0x0, r6}]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000016c0)={&(0x7f00007fd000/0x800000)=nil, &(0x7f0000ea5000/0x2000)=nil, &(0x7f0000d87000/0x4000)=nil, &(0x7f0000cd5000/0x2000)=nil, &(0x7f0000fc5000/0x1000)=nil, &(0x7f0000ee9000/0x1000)=nil, &(0x7f000090b000/0x14000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000831000/0x1000)=nil, &(0x7f0000c9c000/0x2000)=nil, &(0x7f00008bd000/0x2000)=nil, &(0x7f0000001640)="b1b70e48b388bef21d62b4cacd9c12d97c25392b25a28be40eb3e35c3254f75ac7356032800130c0979e3c02b20d764c5610eca5a8aab3405f7d3c7d90f233e2dcd78b", 0x43, r1}, 0x68) (async) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000001740)) 368.088047ms ago: executing program 1 (id=1721): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2f, 0xa, 0x6, 0x7, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x7800, 0xd1c2, 0x20d7}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', r2, 0x2f, 0x4, 0xe, 0x6, 0x2, @remote, @private1, 0x10, 0x7800, 0x3, 0x1}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x109200, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0xfffffffffffffffc, 0x200000, 0x1000}, 0x31) 367.843007ms ago: executing program 5 (id=1722): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='ns\x00') getdents64(r1, &(0x7f0000000040)=""/27, 0x1b) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000280)={r1, &(0x7f00000000c0)='ns\x00', 0x418803, &(0x7f0000000140)={@_ha_fsid={[0x51679884, 0x1ff]}, {0xfffb, 0x2, 0x0, 0x5}}, 0xdeaf, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000240)=0xa}) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000380)={{[0x1, 0x8, 0x1, 0x4]}, 0x0, 0x2, 0x81, 0x0, &(0x7f0000000700)=[{{@_ha_fsid={[0x7, 0x3b2]}, {0x2, 0xffff, 0xfffffffc, 0x8}}, 0x2, 0x0, '\xe1\xac\xe9\xee\xe1SJ\x98f\x9e\x01\xb8W\x8d\x86v*\xdc\xf3\xdf2\xeb\r\xcb\xf2\x8a;\x86\xe7\r\x8f\xd1\xc2\xce\x86\xda\xb5ax\xe2\x00\x00\x00\x00\x1e\xc4\x00\x00\x00\x00\x00\x8fk\x8b\xba\x06E\xe84\xfcV\xd8\b\xc8\xbd\xea\x92L<\xbf\xf5\xbaw\xaa\x8e~~\\\xdft3\xf3\xb1.^n\x04\x0e\x9a\x03\xa8\x8dL\x91\nUj\x0fe\x1b\xf0\x96\x82\xb3\x8f\xd4]5\xef\xac\xa6\xd3\x93\x96\xfd\xa6\\\x89\f\xeb+\x06\v\x133\xeeB+7\xd7\xcf.\xf6\xaa\xd0\xa7\xc0\xd0h\xeed\xf9-\xce\xf4\xc8M\x02l\xae\xb0\x00'/166}, {{@_ha_fsid={[0x1, 0x80000000]}, {0xe4, 0x223, 0x4, 0x8}}, 0x0, 0x0, 't|s\x83\xdeY\xd4r\xdf\xf1\xe2\x13SM\xe5\xc2:Y\xbbu\xa7\xf8*#\xe2\xa0+\xd1S\xc1\xa2\x87|3Y\xbdA\x15\x1c}\xfd\x1cz\x1dy\x9f\xe1\x19\xdcO\xb64A\x12\xf5\xaa\xc0\xf6\x107\xfd\xab\xf9}\xb9\x89\x0f\xd3\xad\x88tk\xe1S\x03\x12\x14\xbb#6~\xf0\x03-\xd8\b\xe2X\x16\xdea'}]}) r3 = socket$inet6(0xa, 0x80002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080), 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b44380100", '\x00\t\x00', "066580001e00"}, 0x38) writev(r2, &(0x7f0000000100)=[{&(0x7f0000001180)="cad495092f9f89a5d61021e97305de3fe8d6827e61796b0228694dd1b09dcbea25d512797567a0eb1264ced64728544b93ca70e2b4e568e9347745bfcc7140f40be46b4762bc8b464c4801dda4edec7976d58cde03534eab8649cc67ca3308b7ed6bbf954062e6f83aa52464845c14e4be1454e04eb47afa55efed4d2e0a4b06d0d80318b9945820e7f12a1eddefad93d979f4f9a273982e357636c677bbac959027ae9051cc235421038c34d7980fcf4a8c96e642e64e8637b74c45443d49064424c40fb18c5a1371fb64069cd5764f87b018373b54f07eccca59f9dfefc811c09c1ff1f28e5b2c4cffc4fd199497e96b1f31a3f831239d38e0e8482e27145a38f6fd919ca99055ae1ed80a64a5e3696660a07c6526996832f8ca78a71d262e67ffce11f6e332b3d4ad1255325322533a73b470aca4781a558aeef22efd8fe3c672957cb7b559f10025b18e963b4d52bb36aa732b2e95847434a5d0d88508e8804f2f28a5d7851783b5d34876369283298bb035bacb47be1ef5b597535d31ed5228efe5079c1a0930a028564d798dd5bc7e9fd8b0c17d996a5c4c04739f0a8aaf3b31dc914b75046a7a6b613e387b69415f090cbe9cbfd097c17f7660b3b48a26a6dc95ad63ee7c1b0114b9ee3ee0126af86c329c518735a4c702237bc943cd477a0004fe541116d3e3441a53d2aa1b623da606e8a01a0c3c08c9845ad1b56c03a547e4e2b7284ef0b4f452f6bce08a2d5239ad651361b71bd2f190bc5355f6f7db77758f0ba40310ed300f156c24e52e22d81cc09fa90f7065a5e08d36a00d4d99669f004b3ca4ed54a25f6f184bf10c018260a38009871ea253046281ba18275040d912b5d36c95961d19d6b7c4f0be03cd90a110daae80d18784e54220b7593c05269c5ab75a23eccbfcc0a8a8c4b8c30ba3cb70854f80765ff5c88d6d98b927c502943b08c9e16c3af0f15f18815f3c1a342fe0f6fc4d37e2369446f069d500f44a6fa494f976bc2604d37497729e7b872a4a285d436b094e43c33945b1ea6e1026c6f5716e27cee5e012285c1d473c73a3789783468d09aabbd500683a4310cef8d30bf43b0fc83da11c69a100f9998c89ca303e60063df939903fc324aef261ea39bf27d2b27fd88d6532a3dca61013b3ca7f8970cd6ae60ffede7ee4824e14caaa1cccf60f3463bf7524200c2c7e3c5ed123e97585d59cd086847284e70a931e0933d5b7a5f7acb7aa46ea2178c7cda500ab1e06655f0ec536fde62bf08d14c473d4c4af5b9326b9d708955b2a0dacb2ca15750ce511dff9fa508b6f364d3fc359246185753204f63015e029cf639af1302ac07dfd873d1376f94899d08e64bf0cb4f77ab1217f596c26ca1af58636ae15b762b2ef2b547a610462ea9b8d618ec765328ee3945f9cbc510e01308a46c0e8438edccb73d3597f1db20c59781804eeed9bedc0f86be9f45169a99a4c1d8c9493dc8bfd8f3f9e55d1f4c8a6d52f3aedb8ad59611af7e77770522d1d1b24fe3bc0f4cb99b5a25356a9ffeb56a7151107db965c5311843ae2a9fae0222855fd6ac52908ffd9b8bd912a9023b273631e15f972d9297928928d660ea0d620b7f8326aeaf18a9788680bff3ce2fcf03d5db0a4ae2ff3956f24315ae2154ec8a9d5631de434140174b4f07716e2f490adacfd07ba626187704f1245419871b9ade34462ac8028c8376777eb2d087a0f3daca6039755131aa013ca3aea079c9d1f06d0e663784c38a6659b8dde2356faacd309cc12869fba2815220ac81aada7312cfe4cb4b3044289282a2ae9c828f68cdbfcf00c70480564c4b9989e124873ad48e5e5e9e925a32eff30e4ba3eaa8e978c31288d524824931212ec4393432d007a634bfc1963b05dba21bc223d9c2e41eaf4ad2f1c9a7f95b57cb3c74627c94a8da88a212466fecd5a3a4be43df0f02129095e0039d03d7bd527322a89bd3efd2d4f5359781622b2b8d2508bbc92380af1b75a3c9d716225ed9aaedce3f310a308dd39147c99daa56d02b03f6564639254f12f13f46977c0e9d81084426130ee7fd0e67c3f38fd58f7d384c929a204d8b7161a195278d480e1ad610ca6d048b43e58c50afcb522dfd710b166db94b16192db9496be0c73f27d6e30e8093103ac77e97fd9f7977eb42265ae7aff", 0x600}], 0x1) getdents(r1, &(0x7f0000001f80)=""/4096, 0x1000) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r0, 0x4018aee2, &(0x7f0000000080)=@attr_pvtime_ipa={0x0, 0x1, 0x1, 0x7fffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f00000005c0)) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r5 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) keyctl$restrict_keyring(0x3, r5, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x26) r6 = ioctl$USERFAULTFD_IOC_NEW(r1, 0xaa00) ioctl$XFS_IOC_GET_RESBLKS(r6, 0x80105873, &(0x7f0000000000)) 367.078617ms ago: executing program 1 (id=1723): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x313) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8918, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 366.693947ms ago: executing program 2 (id=1724): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0xca320, 0x0) r0 = syz_io_uring_complete(0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) 354.062237ms ago: executing program 5 (id=1725): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000880)=0xfbf, 0x4) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000040)={0xa, 0x4e20, 0x3e8, @empty, 0x6}, 0x1c) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000051aae040030478fa79ab010203010902120001040020000904"], 0x0) 338.915568ms ago: executing program 2 (id=1726): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x313) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (fail_nth: 7) 284.10203ms ago: executing program 1 (id=1727): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 283.95792ms ago: executing program 2 (id=1728): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000225000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/79, 0x4f, 0x0, &(0x7f0000000180)=""/139, 0x8b}, &(0x7f00000003c0)=0x40) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 151.063474ms ago: executing program 1 (id=1729): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) capset(&(0x7f0000a31000)={0x20080522}, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x60400fe}) 124.931335ms ago: executing program 1 (id=1730): setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000000)=0x4, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000040)={0x0, r0, r0, 0x6, 0x0, '\x00', {0x0, 0x7ff, 0xfffe, 0x10000, 0x40, 0x1, 0x7, 0x8, {0x8, 0x6}, {0x4722, 0xd}, {0x4, 0x100}, 0x0, 0x1, 0x2, 0xd, 0x8, 0x7, 0x3a95, 0x3, 0x14b, 0x4, '\x00', 0x7f, 0x23, 0x800, 0x5}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x403000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000140)={'ipvlan0\x00', @random="97b6ddc52107"}) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x3) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @ioapic={0x100000, 0x9, 0x1, 0x5, 0x0, [{0x4, 0x5, 0x4, '\x00', 0x8}, {0xc, 0x5, 0x4, '\x00', 0x7}, {0x6, 0x6, 0x1, '\x00', 0x50}, {0x3, 0x0, 0x5, '\x00', 0x9}, {0x1, 0xd3, 0x48, '\x00', 0x6}, {0x5, 0x4f, 0xff}, {0x9, 0x6, 0x6, '\x00', 0x6}, {0xcc, 0x5, 0xb, '\x00', 0x4}, {0x10, 0x30, 0x6, '\x00', 0x9}, {0x1, 0x5, 0xbb, '\x00', 0x1}, {0x24, 0x4, 0xa, '\x00', 0x7}, {0x81, 0x5, 0x6, '\x00', 0xff}, {0x1, 0x3, 0xf2, '\x00', 0xe4}, {0x9, 0x31, 0x10, '\x00', 0x3}, {0xb, 0x4, 0xd, '\x00', 0xe}, {0xab, 0x54, 0x2, '\x00', 0x9}, {0x2, 0x9, 0x4, '\x00', 0x3}, {0xf5, 0x0, 0x5, '\x00', 0x10}, {0xb9, 0x2, 0x2, '\x00', 0x9}, {0x9, 0x1, 0x7, '\x00', 0x4}, {0x5, 0x5, 0x5, '\x00', 0x3}, {0xd1, 0x0, 0x1, '\x00', 0x1}, {0x8, 0x3, 0x9, '\x00', 0x1}, {0x9, 0x7, 0x1, '\x00', 0x4}]}}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000440)=0x72f08559, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000480)) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f00000004c0)={{0x2, 0x4e24, @broadcast}, {0x6, @broadcast}, 0x10, {0x2, 0x4e24, @multicast2}, 'ip6erspan0\x00'}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000540)={0x81}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000580)=0x0) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f00000005c0)={r5}) ioctl$USBDEVFS_RESETEP(r4, 0x80045503, &(0x7f0000000600)={0x5}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000640)={{0xb81a7f89729730cc, 0x1, 0x71de77ea, 0x2}, 0x5d11, 0x3, 'id0\x00', 'timer0\x00', 0x0, 0x4, 0x3, 0x10, 0x1}) sendmsg$sock(r0, &(0x7f0000000880)={&(0x7f0000000740)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, &(0x7f0000000800)=[{&(0x7f00000007c0)="3ee9b1efa6c43d84c138652df816", 0xe}], 0x1, &(0x7f0000000840)=[@mark={{0x14, 0x1, 0x24, 0x1}}], 0x18}, 0x44) write$cgroup_subtree(r4, &(0x7f00000008c0)={[{0x2b, 'pids'}, {0x2b, 'hugetlb'}]}, 0xf) getsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000900), &(0x7f0000000940)=0x4) statx(r4, &(0x7f00000009c0)='./file0\x00', 0x800, 0x20, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000c00)=0xe8) read$FUSE(r4, &(0x7f0000000c40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f0000002c80)='./file0\x00', &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002d40)='./file0\x00', &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r4, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000002e80)='./file0\x00', &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) r13 = getgid() fsetxattr$system_posix_acl(r3, &(0x7f0000000980)='system.posix_acl_access\x00', &(0x7f0000003100)={{}, {0x1, 0x3}, [{0x2, 0x0, r6}, {0x2, 0x5, r7}, {0x2, 0x2, r8}, {0x2, 0x3}, {0x2, 0x1, 0xee00}], {}, [{0x8, 0xe, r9}, {0x8, 0x3, r10}, {0x8, 0x1, r11}, {0x8, 0x0, 0xee00}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x5, r12}, {0x8, 0x2, r13}, {0x8, 0x2}, {}, {0x8, 0x6}], {0x10, 0x3}, {0x20, 0x5}}, 0x9c, 0x0) 0s ago: executing program 1 (id=1731): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsopen(&(0x7f0000000100)='bpf\x00', 0x0) (async) r1 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x4c, 0x13, 0x2, 0x70bd2b, 0x25dfdbfb, {0x10, 0xf8, 0x2, 0x6, {0x4e23, 0x4e24, [0x9, 0x6, 0x5, 0x7], [0x5, 0xe94, 0x10, 0x2], 0x0, [0x2, 0x6]}, 0x8, 0x1000}}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x20000084) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r2, &(0x7f0000000080), 0x2000011a) recvmsg$unix(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1}, 0x2a4d70375d8666a1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81800) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81800) statx(r3, &(0x7f00000012c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x800, 0x0) (async) statx(r3, &(0x7f00000012c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x800, 0x0) r4 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00') clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) unlinkat(r4, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) unlinkat(r4, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000300)={0x4, 0xa, 0x4, 0x0, 0x2}) syz_usb_connect(0x5, 0x4f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102fcfc9008b80421054a150102030109023d00010002c00009047abb04930a9607090582ffffff0703060915000000020ae13309050c1020000f6800070595be474b7409050602"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x64, &(0x7f00000000c0)=@string={0x64, 0x3, "d3bc39f9ba2d64c92d9605f5d5d18d6a8cd34bf5f048fc53a779c969f5838164dd9c430bf18ec48f4340cf623ea2e7aeeaefbfe1c10bffff000082c1275077315b0b2fd94dd060a71def9ad34cebccca0e654d25cdd279925b6d4838ddee90297dbd"}}, {0x10, &(0x7f0000000140)=@string={0x10, 0x3, "a03b0d0fc9533077ec1d3ae3f573"}}, {0xffffffffffffff6b, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180c}}]}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): , different from the interface descriptor's value: 21 [ 179.352680][ T4191] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1254'. [ 179.353105][ T726] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 179.361894][ T4191] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1254'. [ 179.371234][ T726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.381899][ T4191] netlink: 'syz.0.1254': attribute type 5 has an invalid length. [ 179.392149][ T726] usb 4-1: config 0 descriptor?? [ 179.400682][ T4191] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1254'. [ 179.792294][ T4199] netlink: 'syz.1.1257': attribute type 4 has an invalid length. [ 179.800200][ T4199] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1257'. [ 179.812376][ T726] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 179.820545][ T726] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 179.828252][ T726] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 179.836020][ T726] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 179.843485][ T726] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 179.851078][ T726] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 179.859060][ T726] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 179.866525][ T726] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 179.874098][ T726] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 179.881622][ T726] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 179.889121][ T726] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 179.896867][ T726] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 179.904621][ T726] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 179.912228][ T726] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 179.919663][ T726] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 179.927279][ T726] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 179.938220][ T4207] tmpfs: Bad value for 'nr_blocks' [ 179.949660][ T726] plantronics 0003:047F:FFFF.0014: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 180.219015][ T4150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.227666][ T4150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.488553][ T4243] tmpfs: Bad value for 'nr_blocks' [ 180.579370][ T726] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 180.727815][ T4252] : renamed from vlan0 (while UP) [ 180.745491][ T726] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 180.772431][ T726] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 180.783297][ T726] usb 2-1: config 220 has no interface number 2 [ 180.790396][ T726] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 180.803946][ T726] usb 2-1: config 220 interface 0 has no altsetting 0 [ 180.811708][ T4257] overlayfs: failed to clone upperpath [ 180.817970][ T726] usb 2-1: config 220 interface 76 has no altsetting 0 [ 180.825106][ T726] usb 2-1: config 220 interface 1 has no altsetting 0 [ 180.834493][ T726] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 180.843762][ T726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.855313][ T726] usb 2-1: Product: syz [ 180.871209][ T726] usb 2-1: Manufacturer: syz [ 180.878258][ T726] usb 2-1: SerialNumber: syz [ 180.885864][ T4260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1276'. [ 181.020761][ T726] usb 2-1: selecting invalid altsetting 0 [ 181.026738][ T726] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 181.033128][ T726] usb 2-1: No valid video chain found. [ 181.040777][ T726] usb 2-1: USB disconnect, device number 81 [ 181.377462][ T4268] tmpfs: Bad value for 'nr_blocks' [ 181.427726][ T4270] fuse: Invalid gid '00000000000037777777777' [ 181.900447][ T36] audit: type=1400 audit(2000000013.554:25542): avc: denied { create } for pid=4288 comm="syz.3.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 181.900603][ T4289] : renamed from vlan0 (while UP) [ 181.979478][ T308] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 181.996700][ T4291] tmpfs: Bad value for 'nr_blocks' [ 182.022462][ T4293] overlayfs: missing 'lowerdir' [ 182.029125][ T36] audit: type=1400 audit(2000000013.676:25543): avc: denied { getopt } for pid=4292 comm="syz.3.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 182.151412][ T308] usb 2-1: unable to get BOS descriptor or descriptor too short [ 182.160077][ T308] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 182.169019][ T308] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 182.183341][ T308] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 182.192402][ T308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.200463][ T308] usb 2-1: Product: syz [ 182.204663][ T308] usb 2-1: Manufacturer: syz [ 182.209265][ T308] usb 2-1: SerialNumber: syz [ 182.427068][ T726] usb 4-1: reset high-speed USB device number 92 using dummy_hcd [ 182.437510][ T308] cdc_ncm 2-1:1.0: skipping garbage [ 182.443311][ T308] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 182.450386][ T308] cdc_ncm 2-1:1.0: bind() failure [ 182.456646][ T308] usb 2-1: USB disconnect, device number 82 [ 182.587298][ T726] usb 4-1: device firmware changed [ 182.592833][ T9] usb 4-1: USB disconnect, device number 92 [ 182.736119][ T9] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 182.897299][ T9] usb 4-1: config 2 has an invalid interface number: 184 but max is 0 [ 182.905648][ T9] usb 4-1: config 2 has no interface number 0 [ 182.911810][ T9] usb 4-1: config 2 interface 184 has no altsetting 0 [ 182.920166][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice= c.2f [ 182.929256][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.937267][ T9] usb 4-1: Product: syz [ 182.941452][ T9] usb 4-1: Manufacturer: syz [ 182.946081][ T9] usb 4-1: SerialNumber: syz [ 183.166491][ T4296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.175227][ T4296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.185842][ T9] usb 4-1: unknown interface protocol 0xd0, assuming v1 [ 183.192836][ T9] usb 4-1: cannot find UAC_HEADER [ 183.200364][ T9] snd-usb-audio 4-1:2.184: probe with driver snd-usb-audio failed with error -22 [ 183.212565][ T9] usb 4-1: USB disconnect, device number 93 [ 183.223254][ T1016] udevd[1016]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.184/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 183.258400][ T308] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 183.419388][ T308] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 183.427924][ T308] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 183.436603][ T308] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 183.445618][ T308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 183.455298][ T308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 183.466198][ T308] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 183.479263][ T308] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 183.488330][ T308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.497090][ T308] usb 2-1: config 0 descriptor?? [ 183.502304][ T4311] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 183.771991][ T308] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 83 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 183.784099][ T308] usb 2-1: USB disconnect, device number 83 [ 183.790776][ T308] usblp0: removed [ 183.909911][ T4318] tmpfs: Bad value for 'nr_blocks' [ 183.983022][ T726] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 184.142859][ T726] usb 4-1: Using ep0 maxpacket: 32 [ 184.152158][ T726] usb 4-1: unable to get BOS descriptor or descriptor too short [ 184.160859][ T726] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.161430][ T4324] fuseblk: Bad value for 'source' [ 184.171269][ T726] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 184.187284][ T726] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 184.196814][ T726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.204902][ T726] usb 4-1: Product: syz [ 184.209275][ T726] usb 4-1: Manufacturer: syz [ 184.213888][ T726] usb 4-1: SerialNumber: syz [ 184.428175][ T4324] netlink: 'syz.2.1302': attribute type 12 has an invalid length. [ 184.475663][ T726] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 184.485763][ T726] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 184.498103][ T726] usb 4-1: USB disconnect, device number 94 [ 184.502181][ T1016] udevd[1016]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 184.579845][ T307] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 184.739677][ T307] usb 2-1: Using ep0 maxpacket: 16 [ 184.745892][ T307] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.756414][ T307] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.766940][ T307] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 184.776043][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.784178][ T307] usb 2-1: Product: syz [ 184.788443][ T307] usb 2-1: Manufacturer: syz [ 184.793904][ T307] usb 2-1: SerialNumber: syz [ 184.990996][ T4335] __nla_validate_parse: 4 callbacks suppressed [ 184.991021][ T4335] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1306'. [ 185.007125][ T4335] gretap0: entered promiscuous mode [ 185.026880][ T307] usb 2-1: cannot find UAC_HEADER [ 185.040611][ T307] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 185.053348][ T307] usb 2-1: USB disconnect, device number 84 [ 185.066296][ T1016] udevd[1016]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 185.092333][ T4345] netlink: 'syz.2.1309': attribute type 27 has an invalid length. [ 185.411139][ T726] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 185.432479][ T36] audit: type=1326 audit(2000000016.876:25544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4358 comm="syz.0.1313" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff14af9c819 code=0x0 [ 185.572176][ T726] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 185.580604][ T726] usb 4-1: config 0 has no interface number 0 [ 185.587347][ T726] usb 4-1: config 0 interface 41 has no altsetting 0 [ 185.596003][ T726] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 185.605512][ T726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.613834][ T726] usb 4-1: Product: syz [ 185.618295][ T726] usb 4-1: Manufacturer: syz [ 185.622987][ T726] usb 4-1: SerialNumber: syz [ 185.628820][ T726] usb 4-1: config 0 descriptor?? [ 185.734530][ T4364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1314'. [ 185.786973][ T4363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4363 comm=syz.1.1314 [ 185.799885][ T4364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=4364 comm=syz.1.1314 [ 185.812610][ T4364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1314'. [ 186.500224][ T726] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 186.730906][ T4355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.754258][ T4355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.772280][ T726] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 186.783482][ T4382] netlink: 'syz.2.1321': attribute type 15 has an invalid length. [ 186.791534][ T726] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 186.802084][ T4382] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1321'. [ 186.812350][ T4382] netlink: 'syz.2.1321': attribute type 1 has an invalid length. [ 186.820450][ T726] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 186.829135][ T4382] netlink: 'syz.2.1321': attribute type 2 has an invalid length. [ 186.838224][ T726] usb 4-1: USB disconnect, device number 95 [ 187.360564][ T4394] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1326'. [ 187.521307][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 187.606645][ T726] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 187.778513][ T726] usb 4-1: unable to get BOS descriptor or descriptor too short [ 187.786819][ T726] usb 4-1: not running at top speed; connect to a high speed hub [ 187.795772][ T726] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.806274][ T726] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 187.818135][ T726] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 288, setting to 64 [ 187.830951][ T726] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 187.840211][ T726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.848737][ T726] usb 4-1: Product: syz [ 187.853585][ T726] usb 4-1: Manufacturer: syz [ 187.858271][ T726] usb 4-1: SerialNumber: syz [ 187.865005][ T4388] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 188.096476][ T726] usb 4-1: USB disconnect, device number 96 [ 188.828660][ T36] audit: type=1400 audit(2000000020.057:25545): avc: denied { mounton } for pid=4420 comm="syz.1.1336" path="/267/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 188.917444][ T9] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 188.987307][ T4437] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 189.046386][ T4440] netlink: 'syz.1.1342': attribute type 16 has an invalid length. [ 189.077400][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 189.083582][ T4445] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1344'. [ 189.092749][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.093027][ T4445] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1344'. [ 189.103041][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.112271][ T4445] netlink: 'syz.1.1344': attribute type 5 has an invalid length. [ 189.123859][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 189.128817][ T4445] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1344'. [ 189.138086][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.155060][ T9] usb 4-1: Product: syz [ 189.159308][ T9] usb 4-1: Manufacturer: syz [ 189.164261][ T9] usb 4-1: SerialNumber: syz [ 189.209660][ T4452] overlayfs: failed to resolve './bus': -2 [ 189.322954][ T36] audit: type=1400 audit(2000000020.526:25546): avc: denied { map } for pid=4471 comm="syz.0.1353" path="socket:[24933]" dev="sockfs" ino=24933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 189.356699][ T36] audit: type=1400 audit(2000000020.554:25547): avc: denied { map } for pid=4476 comm="syz.1.1355" path="pipe:[24951]" dev="pipefs" ino=24951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 189.357027][ T4477] 9p: Unknown Cache mode or invalid value read)ahead [ 189.387747][ T9] usb 4-1: 0:2 : does not exist [ 189.394759][ T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 189.407013][ T9] usb 4-1: USB disconnect, device number 97 [ 189.415535][ T1016] udevd[1016]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 189.530370][ T4479] usb usb8: usbfs: process 4479 (syz.1.1356) did not claim interface 0 before use [ 189.675420][ T4489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1358'. [ 191.123449][ T9] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 191.180971][ T4525] SELinux: Context ϧ-):E2٭ؾ)đJu36ޢ{@m[ is not valid (left unmapped). [ 191.293969][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 191.300465][ T9] usb 2-1: config 3 has an invalid interface number: 255 but max is 0 [ 191.309019][ T9] usb 2-1: config 3 has no interface number 0 [ 191.315458][ T9] usb 2-1: config 3 interface 255 altsetting 243 bulk endpoint 0x6 has invalid maxpacket 32 [ 191.325627][ T9] usb 2-1: config 3 interface 255 has no altsetting 0 [ 191.334611][ T9] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=95.29 [ 191.344196][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.352483][ T9] usb 2-1: Product: syz [ 191.356834][ T9] usb 2-1: Manufacturer: syz [ 191.361862][ T9] usb 2-1: SerialNumber: syz [ 191.368226][ T4511] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 191.592512][ T9] usbserial_generic 2-1:3.255: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 191.615223][ T9] usbserial_generic 2-1:3.255: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 191.626468][ T9] usbserial_generic 2-1:3.255: generic converter detected [ 191.635369][ T9] usb 2-1: generic converter now attached to ttyUSB0 [ 191.645200][ T9] usb 2-1: USB disconnect, device number 85 [ 191.659378][ T9] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 191.671223][ T9] usbserial_generic 2-1:3.255: device disconnected [ 192.138342][ T2183] Bluetooth: hci0: Frame reassembly failed (-84) [ 192.141156][ T4534] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1373'. [ 192.466670][ T726] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 192.626102][ T726] usb 2-1: Using ep0 maxpacket: 32 [ 192.632399][ T726] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 192.641444][ T726] usb 2-1: config 0 has no interface number 0 [ 192.647814][ T726] usb 2-1: config 0 interface 184 has no altsetting 0 [ 192.656080][ T726] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 192.665170][ T726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.673226][ T726] usb 2-1: Product: syz [ 192.677543][ T726] usb 2-1: Manufacturer: syz [ 192.682227][ T726] usb 2-1: SerialNumber: syz [ 192.687816][ T726] usb 2-1: config 0 descriptor?? [ 192.693769][ T726] smsc75xx v1.0.0 [ 192.913098][ T726] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 192.924034][ T726] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 192.933431][ T726] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 192.944285][ T726] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 192.953985][ T726] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 192.964366][ T726] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 192.974132][ T726] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 192.983938][ T726] usb 2-1: USB disconnect, device number 86 [ 193.297538][ T726] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 193.457375][ T726] usb 2-1: Using ep0 maxpacket: 8 [ 193.464270][ T726] usb 2-1: unable to get BOS descriptor or descriptor too short [ 193.473050][ T726] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.483481][ T726] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 248, changing to 7 [ 193.494504][ T726] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 193.507460][ T726] usb 2-1: config 1 interface 0 has no altsetting 0 [ 193.515685][ T726] usb 2-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 193.524824][ T726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.532845][ T726] usb 2-1: Product: syz [ 193.537017][ T726] usb 2-1: Manufacturer: syz [ 193.541612][ T726] usb 2-1: SerialNumber: syz [ 193.549148][ T726] usb 2-1: selecting invalid altsetting 0 [ 193.767701][ T726] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 193.779179][ T726] usb 2-1: selecting invalid altsetting 0 [ 193.785442][ T726] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 193.795202][ T726] usb 2-1: selecting invalid altsetting 0 [ 193.803883][ T726] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 193.814019][ T726] usb 2-1: USB disconnect, device number 87 [ 193.825438][ T1582] udevd[1582]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 194.341967][ T452] Bluetooth: hci0: command 0x1003 tx timeout [ 194.342330][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 194.704279][ T581] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 194.864131][ T581] usb 2-1: Using ep0 maxpacket: 8 [ 194.870559][ T581] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 194.878748][ T581] usb 2-1: config 0 has no interface number 0 [ 194.886480][ T581] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 194.895822][ T581] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.903893][ T581] usb 2-1: Product: syz [ 194.908365][ T581] usb 2-1: Manufacturer: syz [ 194.912977][ T581] usb 2-1: SerialNumber: syz [ 194.918367][ T581] usb 2-1: config 0 descriptor?? [ 195.684783][ T9] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 195.845929][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 195.854476][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.864663][ T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 195.875319][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 195.884578][ T9] usb 4-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 195.893062][ T9] usb 4-1: Product: syz [ 195.897244][ T9] usb 4-1: Manufacturer: syz [ 195.901883][ T9] usb 4-1: SerialNumber: syz [ 196.126438][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 196.138847][ T9] usb 4-1: USB disconnect, device number 98 [ 196.149970][ T1583] udevd[1583]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 196.673845][ T36] audit: type=1400 audit(2000000027.413:25548): avc: denied { connect } for pid=4572 comm="syz.3.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 196.953029][ T9] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 197.112820][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 197.119257][ T9] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 197.127700][ T9] usb 4-1: config 0 has no interface number 0 [ 197.133846][ T9] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 197.145617][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 197.154726][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.162816][ T9] usb 4-1: Product: syz [ 197.167075][ T9] usb 4-1: Manufacturer: syz [ 197.171697][ T9] usb 4-1: SerialNumber: syz [ 197.177195][ T9] usb 4-1: config 0 descriptor?? [ 197.182540][ T4575] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 197.403756][ T4575] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 197.589024][ T4587] netlink: 'syz.2.1391': attribute type 13 has an invalid length. [ 197.598100][ T4587] erspan0: refused to change device tx_queue_len [ 197.602759][ T581] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 197.613240][ T581] usb 2-1: No valid video chain found. [ 197.625305][ T581] usb 2-1: USB disconnect, device number 88 [ 198.029366][ T581] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 198.110712][ T9] asix 4-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 198.190469][ T581] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 198.198941][ T581] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 198.207590][ T581] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 198.216693][ T581] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 198.226484][ T581] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 198.237335][ T581] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 198.250353][ T581] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 198.259550][ T581] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.268407][ T581] usb 2-1: config 0 descriptor?? [ 198.273789][ T4603] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 198.324284][ T9] asix 4-1:0.188 (unnamed net_device) (uninitialized): invalid PHY address: 36 [ 198.552285][ T581] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 89 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 198.566372][ T307] usb 4-1: USB disconnect, device number 99 [ 199.152140][ T4615] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 199.302116][ T36] audit: type=1400 audit(2000000029.891:25549): avc: denied { shutdown } for pid=4626 comm="syz.3.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 200.120192][ T4658] netlink: 'syz.2.1408': attribute type 4 has an invalid length. [ 200.128146][ T4658] netlink: 'syz.2.1408': attribute type 2 has an invalid length. [ 200.136626][ T4658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=4658 comm=syz.2.1408 [ 200.136890][ T4660] overlayfs: failed to clone upperpath [ 200.149665][ T4658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=4658 comm=syz.2.1408 [ 200.192689][ T36] audit: type=1400 audit(2000000030.716:25550): avc: denied { watch } for pid=4664 comm="syz.2.1410" path="/516/file1" dev="tmpfs" ino=2831 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 200.215502][ T36] audit: type=1400 audit(2000000030.726:25551): avc: denied { mount } for pid=4664 comm="syz.2.1410" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 200.260377][ T4671] 9pnet_fd: Insufficient options for proto=fd [ 200.297482][ T4675] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1414'. [ 200.309537][ T4675] tipc: Invalid UDP bearer configuration [ 200.309562][ T4675] tipc: Enabling of bearer rejected, failed to enable media [ 200.417150][ T4677] rtc_cmos 00:00: Alarms can be up to one day in the future [ 200.683032][ T307] usb 4-1: new low-speed USB device number 100 using dummy_hcd [ 200.822053][ T307] usb 4-1: device descriptor read/64, error -71 [ 200.836963][ T726] usb 2-1: USB disconnect, device number 89 [ 200.845662][ T726] usblp0: removed [ 201.077356][ T307] usb 4-1: device descriptor read/64, error -71 [ 201.194677][ T726] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 201.333190][ T307] usb 4-1: new low-speed USB device number 101 using dummy_hcd [ 201.354440][ T726] usb 2-1: Using ep0 maxpacket: 8 [ 201.361177][ T726] usb 2-1: unable to get BOS descriptor or descriptor too short [ 201.369929][ T726] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.380091][ T726] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 248, changing to 7 [ 201.391272][ T726] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 201.404313][ T726] usb 2-1: config 1 interface 0 has no altsetting 0 [ 201.412704][ T726] usb 2-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 201.421882][ T726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.429947][ T726] usb 2-1: Product: syz [ 201.434156][ T726] usb 2-1: Manufacturer: syz [ 201.438733][ T726] usb 2-1: SerialNumber: syz [ 201.445404][ T726] usb 2-1: selecting invalid altsetting 0 [ 201.471682][ T307] usb 4-1: device descriptor read/64, error -71 [ 201.660428][ T726] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 201.670919][ T726] usb 2-1: selecting invalid altsetting 0 [ 201.677139][ T726] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 201.686762][ T726] usb 2-1: selecting invalid altsetting 0 [ 201.699340][ T726] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 201.710155][ T726] usb 2-1: USB disconnect, device number 90 [ 201.725151][ T1583] udevd[1583]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 201.727493][ T307] usb 4-1: device descriptor read/64, error -71 [ 201.757429][ T4695] veth0_to_team: entered promiscuous mode [ 201.855439][ T307] usb usb4-port1: attempt power cycle [ 202.217689][ T307] usb 4-1: new low-speed USB device number 102 using dummy_hcd [ 202.240141][ T307] usb 4-1: device descriptor read/8, error -71 [ 202.378713][ T307] usb 4-1: device descriptor read/8, error -71 [ 202.558728][ T726] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 202.633336][ T307] usb 4-1: new low-speed USB device number 103 using dummy_hcd [ 202.655747][ T307] usb 4-1: device descriptor read/8, error -71 [ 202.718610][ T726] usb 2-1: Using ep0 maxpacket: 8 [ 202.724964][ T726] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 221, changing to 11 [ 202.736199][ T726] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 202.745978][ T726] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 202.755736][ T726] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 202.766851][ T726] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 202.775980][ T726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.784065][ T726] usb 2-1: Product: syz [ 202.788235][ T726] usb 2-1: Manufacturer: syz [ 202.792858][ T726] usb 2-1: SerialNumber: syz [ 202.800666][ T307] usb 4-1: device descriptor read/8, error -71 [ 202.921316][ T307] usb usb4-port1: unable to enumerate USB device [ 203.602160][ T726] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 203.611629][ T726] cdc_ncm 2-1:1.0: bind() failure [ 203.617576][ T726] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 203.624427][ T726] cdc_ncm 2-1:1.1: bind() failure [ 203.630870][ T726] usb 2-1: USB disconnect, device number 91 [ 204.796774][ T308] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 204.956634][ T308] usb 2-1: Using ep0 maxpacket: 8 [ 204.956641][ T291] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 204.970790][ T308] usb 2-1: unable to get BOS descriptor or descriptor too short [ 204.979376][ T308] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.989531][ T308] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 248, changing to 7 [ 205.000602][ T308] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 205.013716][ T308] usb 2-1: config 1 interface 0 has no altsetting 0 [ 205.021772][ T308] usb 2-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 205.031013][ T308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.039096][ T308] usb 2-1: Product: syz [ 205.043311][ T308] usb 2-1: Manufacturer: syz [ 205.048121][ T308] usb 2-1: SerialNumber: syz [ 205.055275][ T308] usb 2-1: selecting invalid altsetting 0 [ 205.117851][ T291] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 205.126293][ T291] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 205.135097][ T291] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 205.144191][ T291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 205.154055][ T291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 205.164945][ T291] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 205.178100][ T291] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 205.187268][ T291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.196224][ T291] usb 4-1: config 0 descriptor?? [ 205.201935][ T4738] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 205.270491][ T308] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 205.280915][ T308] usb 2-1: selecting invalid altsetting 0 [ 205.288041][ T308] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 205.298033][ T308] usb 2-1: selecting invalid altsetting 0 [ 205.306824][ T308] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 205.316819][ T308] usb 2-1: USB disconnect, device number 92 [ 205.326305][ T1583] udevd[1583]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 205.537362][ T291] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 104 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 205.768805][ T308] usb 4-1: USB disconnect, device number 104 [ 205.776586][ T308] usblp0: removed [ 205.863431][ T36] audit: type=1400 audit(2000000036.046:25552): avc: denied { create } for pid=4746 comm="syz.2.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 205.916121][ T36] audit: type=1400 audit(2000000036.093:25553): avc: denied { mounton } for pid=4751 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 205.963329][ T4761] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1444'. [ 205.981487][ T4761] veth0_virt_wifi: entered allmulticast mode [ 206.058490][ T4751] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.065639][ T4751] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.072766][ T4751] bridge_slave_0: entered allmulticast mode [ 206.079237][ T4751] bridge_slave_0: entered promiscuous mode [ 206.085673][ T4760] veth0_virt_wifi: left allmulticast mode [ 206.091602][ T4751] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.099053][ T4751] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.106154][ T4751] bridge_slave_1: entered allmulticast mode [ 206.112679][ T4751] bridge_slave_1: entered promiscuous mode [ 206.152237][ T4751] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.159337][ T4751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.166652][ T4751] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.173715][ T4751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.192905][ T307] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 206.218590][ T4751] veth0_vlan: entered promiscuous mode [ 206.229438][ T4751] veth1_macvtap: entered promiscuous mode [ 206.250075][ T36] audit: type=1400 audit(2000000036.402:25554): avc: denied { mounton } for pid=4751 comm="syz-executor" path="/root/syzkaller.J7JpZe/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 206.290156][ T4771] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1439'. [ 206.364845][ T307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.376188][ T307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.386464][ T307] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 206.395633][ T307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.404284][ T307] usb 2-1: config 0 descriptor?? [ 206.587203][ T308] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 206.619269][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 206.748326][ T308] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 206.759501][ T308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.770708][ T308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.780695][ T308] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 206.794823][ T308] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 206.804081][ T308] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 206.812423][ T308] usb 4-1: Manufacturer: syz [ 206.817806][ T308] usb 4-1: config 0 descriptor?? [ 207.022044][ T4787] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1451'. [ 207.055474][ T307] hid-led 0003:27B8:01ED.0015: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 207.068845][ T307] hid-led 0003:27B8:01ED.0015: ThingM blink(1) v1 initialized [ 207.250961][ T308] appleir 0003:05AC:8243.0016: unknown main item tag 0x0 [ 207.258177][ T308] appleir 0003:05AC:8243.0016: No inputs registered, leaving [ 207.266852][ T308] appleir 0003:05AC:8243.0016: hiddev96,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 207.598981][ T4796] VFS: Mount too revealing [ 207.795445][ T308] usb 4-1: USB disconnect, device number 105 [ 207.854564][ T4803] netlink: 'syz.3.1455': attribute type 32 has an invalid length. [ 207.862565][ T4803] netlink: 'syz.3.1455': attribute type 32 has an invalid length. [ 207.876728][ T4804] netlink: 'syz.3.1455': attribute type 32 has an invalid length. [ 207.884568][ T4804] netlink: 'syz.3.1455': attribute type 32 has an invalid length. [ 208.617094][ T4814] overlayfs: regular lower layers cannot follow data lower layers [ 208.709212][ T4820] 8021q: VLANs not supported on lo [ 209.017171][ T581] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 209.139296][ T308] usb 2-1: USB disconnect, device number 93 [ 209.158668][ T581] usb 4-1: device descriptor read/64, error -71 [ 209.180592][ T4825] SELinux: failed to load policy [ 209.411384][ T581] usb 4-1: device descriptor read/64, error -71 [ 209.635192][ T291] usb 2-1: new low-speed USB device number 94 using dummy_hcd [ 209.667208][ T581] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 209.796673][ T291] usb 2-1: unable to get BOS descriptor or descriptor too short [ 209.805219][ T291] usb 2-1: too many endpoints for config 1 interface 0 altsetting 128: 253, using maximum allowed: 30 [ 209.816266][ T291] usb 2-1: config 1 interface 0 altsetting 128 endpoint 0x82 is Bulk; changing to Interrupt [ 209.816358][ T581] usb 4-1: device descriptor read/64, error -71 [ 209.826394][ T291] usb 2-1: config 1 interface 0 altsetting 128 endpoint 0x3 is Bulk; changing to Interrupt [ 209.826424][ T291] usb 2-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 209.855976][ T291] usb 2-1: config 1 interface 0 has no altsetting 0 [ 209.864910][ T291] usb 2-1: string descriptor 0 read error: -22 [ 209.871297][ T291] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 209.880364][ T291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.889270][ T4832] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 209.896599][ T4832] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 209.905093][ T291] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 210.082881][ T581] usb 4-1: device descriptor read/64, error -71 [ 210.200703][ T581] usb usb4-port1: attempt power cycle [ 210.562412][ T581] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 210.584797][ T581] usb 4-1: device descriptor read/8, error -71 [ 210.597955][ T4842] overlayfs: failed to clone upperpath [ 210.603958][ T4842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1468'. [ 210.692064][ T4854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=4854 comm=syz.2.1472 [ 210.723498][ T581] usb 4-1: device descriptor read/8, error -71 [ 210.978079][ T581] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 211.000701][ T581] usb 4-1: device descriptor read/8, error -71 [ 211.138979][ T581] usb 4-1: device descriptor read/8, error -71 [ 211.255233][ T581] usb usb4-port1: unable to enumerate USB device [ 212.342148][ T307] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 212.503583][ T307] usb 4-1: unable to get BOS descriptor or descriptor too short [ 212.511813][ T307] usb 4-1: not running at top speed; connect to a high speed hub [ 212.520662][ T307] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.529909][ T581] usb 2-1: USB disconnect, device number 94 [ 212.531454][ T307] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 212.547598][ T307] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 212.567336][ T307] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 212.576477][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.584716][ T307] usb 4-1: Product: syz [ 212.589505][ T307] usb 4-1: Manufacturer: syz [ 212.594417][ T307] usb 4-1: SerialNumber: syz [ 212.600640][ T307] usb 4-1: config 0 descriptor?? [ 212.614711][ T307] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 212.629248][ T1583] udevd[1583]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 212.820312][ T4883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.828848][ T4883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.837687][ T308] usb 4-1: USB disconnect, device number 110 [ 212.920126][ T36] audit: type=1400 audit(2000000042.670:25555): avc: denied { map } for pid=4885 comm="syz.4.1485" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 212.949851][ T581] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 213.109497][ T581] usb 2-1: Using ep0 maxpacket: 8 [ 213.116026][ T581] usb 2-1: unable to get BOS descriptor or descriptor too short [ 213.124566][ T581] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.134874][ T581] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 248, changing to 7 [ 213.145910][ T581] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.158870][ T581] usb 2-1: config 1 interface 0 has no altsetting 0 [ 213.167231][ T581] usb 2-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 213.176564][ T581] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.184677][ T581] usb 2-1: Product: syz [ 213.188905][ T581] usb 2-1: Manufacturer: syz [ 213.193529][ T581] usb 2-1: SerialNumber: syz [ 213.200505][ T581] usb 2-1: selecting invalid altsetting 0 [ 213.415787][ T581] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 213.426047][ T581] usb 2-1: selecting invalid altsetting 0 [ 213.432562][ T581] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 213.442656][ T581] usb 2-1: selecting invalid altsetting 0 [ 213.451597][ T581] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 213.461764][ T581] usb 2-1: USB disconnect, device number 95 [ 213.471252][ T1583] udevd[1583]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 213.642345][ T291] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 213.803709][ T291] usb 4-1: unable to get BOS descriptor or descriptor too short [ 213.811843][ T291] usb 4-1: not running at top speed; connect to a high speed hub [ 213.820449][ T291] usb 4-1: config 1 has an invalid interface number: 252 but max is 2 [ 213.833083][ T291] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.843573][ T291] usb 4-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 213.848395][ T4899] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 213.852807][ T291] usb 4-1: config 1 has no interface number 3 [ 213.862635][ T36] audit: type=1326 audit(2000000043.552:25556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4898 comm="syz.4.1490" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdfd419c819 code=0x0 [ 213.867449][ T291] usb 4-1: too many endpoints for config 1 interface 252 altsetting 255: 255, using maximum allowed: 30 [ 213.901618][ T291] usb 4-1: config 1 interface 252 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 213.915143][ T291] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 213.926370][ T291] usb 4-1: config 1 interface 252 has no altsetting 0 [ 213.933601][ T291] usb 4-1: config 1 interface 1 has no altsetting 0 [ 213.941723][ T291] usb 4-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 213.950775][ T291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.958801][ T291] usb 4-1: Product: syz [ 213.963063][ T291] usb 4-1: Manufacturer: syz [ 213.967918][ T291] usb 4-1: SerialNumber: syz [ 214.191299][ T4895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.200306][ T4895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.210726][ T4895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.219319][ T4895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.231590][ T291] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 214.239322][ T291] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 214.245468][ T291] usb 4-1: selecting invalid altsetting 0 [ 214.251549][ T291] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 214.261714][ T291] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 214.269209][ T291] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 214.275690][ T291] usb 4-1: selecting invalid altsetting 0 [ 214.281586][ T291] snd-usb-audio 4-1:1.252: probe with driver snd-usb-audio failed with error -2 [ 214.292069][ T291] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 214.299703][ T291] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 214.306036][ T291] usb 4-1: selecting invalid altsetting 0 [ 214.311929][ T291] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 214.322507][ T291] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 214.330147][ T291] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 214.336310][ T307] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 214.344410][ T291] usb 4-1: selecting invalid altsetting 0 [ 214.352575][ T291] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 214.363955][ T291] usb 4-1: USB disconnect, device number 111 [ 214.377089][ T1016] udevd[1016]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 214.494914][ T307] usb 2-1: Using ep0 maxpacket: 8 [ 214.501467][ T307] usb 2-1: unable to get BOS descriptor or descriptor too short [ 214.510196][ T307] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 214.523191][ T307] usb 2-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 214.532680][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.540829][ T307] usb 2-1: Product: syz [ 214.545113][ T307] usb 2-1: Manufacturer: syz [ 214.550274][ T307] usb 2-1: SerialNumber: syz [ 214.774039][ T4916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.784731][ T4916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.809890][ T307] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 214.835807][ T307] usb 2-1: USB disconnect, device number 96 [ 215.081139][ T308] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 215.242270][ T308] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 215.250667][ T308] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 215.259508][ T308] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 215.268664][ T308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 215.278467][ T308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 215.289387][ T308] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 215.302574][ T308] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 215.311931][ T308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.324635][ T308] usb 4-1: config 0 descriptor?? [ 215.330297][ T4920] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 215.608035][ T308] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 112 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 215.621702][ C0] usblp0: nonzero read bulk status received: -71 [ 215.914708][ T307] usb 4-1: USB disconnect, device number 112 [ 215.924932][ T307] usblp0: removed [ 216.470323][ T36] audit: type=1400 audit(2000000045.992:25557): avc: denied { map } for pid=4930 comm="syz.3.1500" path="/dev/full" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 217.044808][ T4937] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 217.206095][ T4947] overlayfs: workdir and upperdir must be separate subtrees [ 217.351284][ T4971] rust_binder: Error while translating object. [ 217.351355][ T4971] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 217.351617][ T4972] rust_binder: Error while translating object. [ 217.357613][ T4971] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:780 [ 217.367104][ T4972] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 217.386820][ T4972] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:780 [ 217.396966][ T4971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4971 comm=syz.3.1510 [ 217.439163][ T4977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.448284][ T4977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.468342][ T308] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 217.617557][ T308] usb 2-1: device descriptor read/64, error -71 [ 217.862656][ T291] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 217.873327][ T308] usb 2-1: device descriptor read/64, error -71 [ 218.022540][ T291] usb 4-1: Using ep0 maxpacket: 8 [ 218.029238][ T291] usb 4-1: unable to get BOS descriptor or descriptor too short [ 218.037763][ T291] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.048117][ T291] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 248, changing to 7 [ 218.059460][ T291] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 218.072536][ T291] usb 4-1: config 1 interface 0 has no altsetting 0 [ 218.080769][ T291] usb 4-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 218.089884][ T291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.097918][ T291] usb 4-1: Product: syz [ 218.102487][ T291] usb 4-1: Manufacturer: syz [ 218.107150][ T291] usb 4-1: SerialNumber: syz [ 218.114163][ T291] usb 4-1: selecting invalid altsetting 0 [ 218.129532][ T308] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 218.267650][ T308] usb 2-1: device descriptor read/64, error -71 [ 218.328874][ T291] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 218.339161][ T291] usb 4-1: selecting invalid altsetting 0 [ 218.345545][ T291] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 218.355616][ T291] usb 4-1: selecting invalid altsetting 0 [ 218.364229][ T291] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 218.374412][ T291] usb 4-1: USB disconnect, device number 113 [ 218.387720][ T1583] udevd[1583]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 218.523409][ T308] usb 2-1: device descriptor read/64, error -71 [ 218.640903][ T308] usb usb2-port1: attempt power cycle [ 219.003003][ T308] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 219.036139][ T308] usb 2-1: device descriptor read/8, error -71 [ 219.174590][ T308] usb 2-1: device descriptor read/8, error -71 [ 219.429279][ T308] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 219.451684][ T308] usb 2-1: device descriptor read/8, error -71 [ 219.590358][ T308] usb 2-1: device descriptor read/8, error -71 [ 219.707106][ T308] usb usb2-port1: unable to enumerate USB device [ 220.413538][ T5050] FAULT_INJECTION: forcing a failure. [ 220.413538][ T5050] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 220.427282][ T5050] CPU: 0 UID: 0 PID: 5050 Comm: syz.1.1539 Not tainted syzkaller #0 43b6d7f3e817ec535415847ac2d00a46ab6e4796 [ 220.427315][ T5050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 220.427327][ T5050] Call Trace: [ 220.427334][ T5050] [ 220.427342][ T5050] __dump_stack+0x21/0x30 [ 220.427372][ T5050] dump_stack_lvl+0x140/0x1c0 [ 220.427396][ T5050] ? __cfi_dump_stack_lvl+0x10/0x10 [ 220.427420][ T5050] ? stack_trace_save+0xaa/0x100 [ 220.427441][ T5050] dump_stack+0x19/0x20 [ 220.427465][ T5050] should_fail_ex+0x3d7/0x530 [ 220.427492][ T5050] should_fail_alloc_page+0xec/0x110 [ 220.427515][ T5050] __alloc_pages_noprof+0x1c0/0x7e0 [ 220.427535][ T5050] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 220.427551][ T5050] ? mas_walk+0x3f7/0x650 [ 220.427565][ T5050] pte_alloc_one+0x92/0x530 [ 220.427577][ T5050] ? __cfi_pte_alloc_one+0x10/0x10 [ 220.427588][ T5050] ? rwsem_read_trylock+0x274/0x5b0 [ 220.427605][ T5050] ? downgrade_write+0x460/0x460 [ 220.427621][ T5050] __pte_alloc+0x79/0x440 [ 220.427636][ T5050] ? down_read+0x7f/0xe0 [ 220.427650][ T5050] ? __cfi___pte_alloc+0x10/0x10 [ 220.427666][ T5050] mfill_atomic_copy+0x830/0xd60 [ 220.427683][ T5050] ? __cfi_mfill_atomic_copy+0x10/0x10 [ 220.427698][ T5050] userfaultfd_ioctl+0x3488/0x4860 [ 220.427717][ T5050] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 220.427730][ T5050] ? __cfi_userfaultfd_ioctl+0x10/0x10 [ 220.427747][ T5050] ? _parse_integer+0x2e/0x40 [ 220.427763][ T5050] ? ioctl_has_perm+0x39a/0x500 [ 220.427779][ T5050] ? has_cap_mac_admin+0xd0/0xd0 [ 220.427795][ T5050] ? selinux_file_ioctl+0x732/0x1480 [ 220.427810][ T5050] ? vfs_write+0x9a4/0xf90 [ 220.427825][ T5050] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 220.427841][ T5050] ? __cfi_vfs_write+0x10/0x10 [ 220.427856][ T5050] ? __kasan_check_write+0x18/0x20 [ 220.427872][ T5050] ? mutex_unlock+0x90/0x240 [ 220.427938][ T5050] ? __cfi_mutex_unlock+0x10/0x10 [ 220.427950][ T5050] ? __fget_files+0x2c5/0x340 [ 220.427963][ T5050] ? __fget_files+0x2c5/0x340 [ 220.427974][ T5050] ? bpf_lsm_file_ioctl+0xd/0x20 [ 220.427988][ T5050] ? security_file_ioctl+0x3e/0x110 [ 220.428003][ T5050] ? __cfi_userfaultfd_ioctl+0x10/0x10 [ 220.428020][ T5050] __se_sys_ioctl+0x132/0x1b0 [ 220.428032][ T5050] __x64_sys_ioctl+0x7f/0xa0 [ 220.428044][ T5050] x64_sys_call+0x1878/0x2ee0 [ 220.428061][ T5050] do_syscall_64+0x57/0xf0 [ 220.428078][ T5050] ? clear_bhb_loop+0x50/0xa0 [ 220.428089][ T5050] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 220.428113][ T5050] RIP: 0033:0x7f856279c819 [ 220.428126][ T5050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.428141][ T5050] RSP: 002b:00007f8563709028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.428156][ T5050] RAX: ffffffffffffffda RBX: 00007f8562a15fa0 RCX: 00007f856279c819 [ 220.428167][ T5050] RDX: 0000200000000080 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 220.428176][ T5050] RBP: 00007f8563709090 R08: 0000000000000000 R09: 0000000000000000 [ 220.428185][ T5050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.428193][ T5050] R13: 00007f8562a16038 R14: 00007f8562a15fa0 R15: 00007ffebbdddd08 [ 220.428204][ T5050] [ 220.762073][ T5053] 9pnet_fd: Insufficient options for proto=fd [ 220.901437][ T5067] syz_tun: entered allmulticast mode [ 220.908249][ T5067] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1544'. [ 220.948136][ T5071] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 220.992368][ T5075] FAULT_INJECTION: forcing a failure. [ 220.992368][ T5075] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 221.012698][ T5075] CPU: 1 UID: 0 PID: 5075 Comm: syz.3.1548 Not tainted syzkaller #0 43b6d7f3e817ec535415847ac2d00a46ab6e4796 [ 221.012761][ T5075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 221.012773][ T5075] Call Trace: [ 221.012781][ T5075] [ 221.012790][ T5075] __dump_stack+0x21/0x30 [ 221.012821][ T5075] dump_stack_lvl+0x140/0x1c0 [ 221.012847][ T5075] ? __cfi_dump_stack_lvl+0x10/0x10 [ 221.012875][ T5075] ? __kasan_check_write+0x18/0x20 [ 221.012903][ T5075] dump_stack+0x19/0x20 [ 221.012927][ T5075] should_fail_ex+0x3d7/0x530 [ 221.012966][ T5075] should_fail_alloc_page+0xec/0x110 [ 221.012988][ T5075] __alloc_pages_noprof+0x1c0/0x7e0 [ 221.013010][ T5075] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 221.013035][ T5075] __folio_alloc_noprof+0x14/0x80 [ 221.013056][ T5075] shmem_mfill_atomic_pte+0x276/0x9e0 [ 221.013087][ T5075] ? __pte_alloc+0x1ae/0x440 [ 221.013112][ T5075] ? __cfi_shmem_mfill_atomic_pte+0x10/0x10 [ 221.013140][ T5075] mfill_atomic_copy+0x6a6/0xd60 [ 221.013166][ T5075] ? __cfi_mfill_atomic_copy+0x10/0x10 [ 221.013193][ T5075] userfaultfd_ioctl+0x3488/0x4860 [ 221.013222][ T5075] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 221.013244][ T5075] ? __cfi_userfaultfd_ioctl+0x10/0x10 [ 221.013274][ T5075] ? _parse_integer+0x2e/0x40 [ 221.013300][ T5075] ? ioctl_has_perm+0x39a/0x500 [ 221.013327][ T5075] ? has_cap_mac_admin+0xd0/0xd0 [ 221.013355][ T5075] ? selinux_file_ioctl+0x732/0x1480 [ 221.013380][ T5075] ? vfs_write+0x9a4/0xf90 [ 221.013407][ T5075] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 221.013433][ T5075] ? __cfi_vfs_write+0x10/0x10 [ 221.013460][ T5075] ? __kasan_check_write+0x18/0x20 [ 221.013486][ T5075] ? mutex_unlock+0x90/0x240 [ 221.013508][ T5075] ? __cfi_mutex_unlock+0x10/0x10 [ 221.013529][ T5075] ? __fget_files+0x2c5/0x340 [ 221.013550][ T5075] ? __fget_files+0x2c5/0x340 [ 221.013570][ T5075] ? bpf_lsm_file_ioctl+0xd/0x20 [ 221.013592][ T5075] ? security_file_ioctl+0x3e/0x110 [ 221.013616][ T5075] ? __cfi_userfaultfd_ioctl+0x10/0x10 [ 221.013644][ T5075] __se_sys_ioctl+0x132/0x1b0 [ 221.013664][ T5075] __x64_sys_ioctl+0x7f/0xa0 [ 221.013683][ T5075] x64_sys_call+0x1878/0x2ee0 [ 221.013711][ T5075] do_syscall_64+0x57/0xf0 [ 221.013740][ T5075] ? clear_bhb_loop+0x50/0xa0 [ 221.013759][ T5075] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 221.013788][ T5075] RIP: 0033:0x7fd522f9c819 [ 221.013807][ T5075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.013825][ T5075] RSP: 002b:00007fd523e17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.013850][ T5075] RAX: ffffffffffffffda RBX: 00007fd523215fa0 RCX: 00007fd522f9c819 [ 221.013867][ T5075] RDX: 0000200000000080 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 221.013882][ T5075] RBP: 00007fd523e17090 R08: 0000000000000000 R09: 0000000000000000 [ 221.013896][ T5075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.013910][ T5075] R13: 00007fd523216038 R14: 00007fd523215fa0 R15: 00007ffe7ca56118 [ 221.013928][ T5075] [ 221.326398][ T581] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 221.390587][ T5081] veth1_to_batadv: mtu greater than device maximum [ 221.487337][ T581] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.498316][ T581] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.508130][ T581] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 221.517585][ T581] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.526300][ T581] usb 2-1: config 0 descriptor?? [ 221.571792][ T291] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 221.731262][ T291] usb 4-1: Using ep0 maxpacket: 8 [ 221.737701][ T291] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 221.746074][ T291] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 221.754580][ T291] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 221.763721][ T291] usb 4-1: config 250 has no interface number 0 [ 221.770066][ T291] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 221.781802][ T291] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 221.792436][ T291] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 28276, setting to 1024 [ 221.804194][ T291] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 221.814791][ T291] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 221.828373][ T291] usb 4-1: config 250 interface 228 has no altsetting 0 [ 221.836515][ T291] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 221.845645][ T291] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 221.854016][ T291] usb 4-1: Product: syz [ 221.858228][ T291] usb 4-1: SerialNumber: syz [ 221.865770][ T291] hub 4-1:250.228: bad descriptor, ignoring hub [ 221.872210][ T291] hub 4-1:250.228: probe with driver hub failed with error -5 [ 221.961965][ T581] hid-led 0003:1D34:000A.0017: unknown main item tag 0x0 [ 221.969460][ T581] hid-led 0003:1D34:000A.0017: unknown main item tag 0x0 [ 221.976579][ T581] hid-led 0003:1D34:000A.0017: item fetching failed at offset 2/3 [ 221.984597][ T581] hid-led 0003:1D34:000A.0017: probe with driver hid-led failed with error -22 [ 222.079854][ T291] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 114 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 222.176144][ T5071] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.176762][ T5071] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 222.183310][ T5071] rust_binder: Read failure Err(EFAULT) in pid:1067 [ 222.191857][ T5071] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1067 [ 222.210275][ T307] usb 2-1: USB disconnect, device number 101 [ 222.264277][ T291] usb 4-1: reset high-speed USB device number 114 using dummy_hcd [ 222.546241][ T36] audit: type=1400 audit(2000000051.697:25558): avc: denied { bind } for pid=5114 comm="syz.2.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 222.760546][ T5119] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.815657][ T5120] rust_binder: Error in use_page_slow: ESRCH [ 222.822149][ T5120] rust_binder: use_range failure ESRCH [ 222.828206][ T5120] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 222.833952][ T5120] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 222.841845][ T5120] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1069 [ 222.851679][ T5120] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 222.861063][ T5120] rust_binder: Read failure Err(EFAULT) in pid:1069 [ 222.978317][ T291] usb 4-1: USB disconnect, device number 114 [ 223.333527][ T5122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5122 comm=syz.2.1567 [ 223.347190][ T5122] GUP no longer grows the stack in syz.2.1567 (5122): 200000005000-200000008000 (200000004000) [ 223.357919][ T5122] CPU: 1 UID: 0 PID: 5122 Comm: syz.2.1567 Not tainted syzkaller #0 43b6d7f3e817ec535415847ac2d00a46ab6e4796 [ 223.357957][ T5122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 223.357972][ T5122] Call Trace: [ 223.357977][ T5122] [ 223.357983][ T5122] __dump_stack+0x21/0x30 [ 223.358006][ T5122] dump_stack_lvl+0x140/0x1c0 [ 223.358022][ T5122] ? __cfi_dump_stack_lvl+0x10/0x10 [ 223.358039][ T5122] ? find_vma+0xd3/0x120 [ 223.358058][ T5122] dump_stack+0x19/0x20 [ 223.358073][ T5122] __get_user_pages+0x1e18/0x22b0 [ 223.358088][ T5122] ? detach_entity_load_avg+0x7b0/0x7b0 [ 223.358109][ T5122] ? __kasan_check_write+0x18/0x20 [ 223.358127][ T5122] ? dequeue_entity+0x809/0x1380 [ 223.358141][ T5122] ? down_read_killable+0x7f/0x100 [ 223.358157][ T5122] ? populate_vma_page_range+0x220/0x220 [ 223.358170][ T5122] ? is_bpf_text_address+0x17b/0x1a0 [ 223.358196][ T5122] __gup_longterm_locked+0xc5a/0x1600 [ 223.358210][ T5122] ? __cfi_update_misfit_status+0x10/0x10 [ 223.358226][ T5122] ? __pte_offset_map+0x1b0/0x230 [ 223.358249][ T5122] gup_fast_fallback+0x12e9/0x14e0 [ 223.358263][ T5122] ? sched_clock_noinstr+0xd/0x30 [ 223.358279][ T5122] ? get_user_pages_fast_only+0xc0/0xc0 [ 223.358293][ T5122] ? __switch_to_asm+0x3d/0x70 [ 223.358310][ T5122] ? __schedule+0x13a1/0x1fa0 [ 223.358322][ T5122] get_user_pages_fast+0x73/0xb0 [ 223.358336][ T5122] get_futex_key+0x25f/0x940 [ 223.358351][ T5122] ? __sched_text_start+0x10/0x10 [ 223.358363][ T5122] ? __cfi_get_futex_key+0x10/0x10 [ 223.358378][ T5122] futex_wait_setup+0xae/0x260 [ 223.358395][ T5122] ? __cfi___futex_queue+0x10/0x10 [ 223.358409][ T5122] ? __cfi_futex_wait_setup+0x10/0x10 [ 223.358427][ T5122] ? __asan_memcpy+0x5a/0x80 [ 223.358444][ T5122] __futex_wait+0x134/0x3e0 [ 223.358461][ T5122] ? __cfi___futex_wait+0x10/0x10 [ 223.358479][ T5122] ? __cfi_futex_wake_mark+0x10/0x10 [ 223.358496][ T5122] ? futex_wake+0x666/0x950 [ 223.358512][ T5122] ? futex_setup_timer+0xb4/0xd0 [ 223.358526][ T5122] futex_wait+0x129/0x7b0 [ 223.358542][ T5122] ? __cfi_futex_wait+0x10/0x10 [ 223.358558][ T5122] ? mas_walk+0x3f7/0x650 [ 223.358572][ T5122] ? __cfi_userfaultfd_unmap_complete+0x10/0x10 [ 223.358590][ T5122] ? mas_find+0x358/0x5f0 [ 223.358604][ T5122] do_futex+0x32a/0x510 [ 223.358617][ T5122] ? do_vmi_munmap+0x245/0x2e0 [ 223.358635][ T5122] ? __cfi_do_futex+0x10/0x10 [ 223.358649][ T5122] ? __vm_munmap+0x2de/0x390 [ 223.358666][ T5122] __se_sys_futex+0x13c/0x320 [ 223.358681][ T5122] ? __x64_sys_futex+0x110/0x110 [ 223.358696][ T5122] ? __kasan_check_write+0x18/0x20 [ 223.358712][ T5122] __x64_sys_futex+0xe9/0x110 [ 223.358727][ T5122] x64_sys_call+0x227f/0x2ee0 [ 223.358747][ T5122] do_syscall_64+0x57/0xf0 [ 223.358775][ T5122] ? clear_bhb_loop+0x50/0xa0 [ 223.358793][ T5122] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 223.358823][ T5122] RIP: 0033:0x7f39c719c819 [ 223.358848][ T5122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.358867][ T5122] RSP: 002b:00007f39c8064028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 223.358892][ T5122] RAX: ffffffffffffffda RBX: 00007f39c7415fa0 RCX: 00007f39c719c819 [ 223.358911][ T5122] RDX: 0000000001000000 RSI: 0000000000000009 RDI: 0000200000004000 [ 223.358927][ T5122] RBP: 00007f39c7232c91 R08: 0000000000000000 R09: 0000000000000001 [ 223.358936][ T5122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.358945][ T5122] R13: 00007f39c7416038 R14: 00007f39c7415fa0 R15: 00007fff7c44f2f8 [ 223.358957][ T5122] [ 223.359939][ T5122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1567'. [ 223.662170][ T5124] 9pnet: Unknown protocol version 9 [ 223.969310][ T307] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 224.129148][ T307] usb 2-1: Using ep0 maxpacket: 16 [ 224.305119][ T307] usb 2-1: unable to get BOS descriptor or descriptor too short [ 224.313378][ T307] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 224.320991][ T307] usb 2-1: can't read configurations, error -71 [ 225.116260][ T5137] 9pnet_fd: Insufficient options for proto=fd [ 225.205634][ T307] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 225.365414][ T307] usb 2-1: Using ep0 maxpacket: 8 [ 225.371966][ T307] usb 2-1: unable to get BOS descriptor or descriptor too short [ 225.380477][ T307] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.390630][ T307] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 225.399708][ T307] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 225.414026][ T307] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 225.423226][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.431345][ T307] usb 2-1: Product: syz [ 225.435507][ T307] usb 2-1: Manufacturer: syz [ 225.440125][ T307] usb 2-1: SerialNumber: syz [ 225.661194][ T307] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 225.668333][ T307] cdc_ncm 2-1:1.0: bind() failure [ 225.677147][ T307] usb 2-1: USB disconnect, device number 103 [ 225.701283][ T5143] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=9232 sclass=netlink_xfrm_socket pid=5143 comm=syz.2.1575 [ 225.833930][ T5148] netlink: 'syz.2.1576': attribute type 11 has an invalid length. [ 225.841814][ T5148] netlink: 'syz.2.1576': attribute type 2 has an invalid length. [ 226.202413][ T291] usblp0: removed [ 226.463132][ T9] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 226.623055][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 226.629682][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.640959][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.650928][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 226.657975][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 226.667349][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.676704][ T9] usb 2-1: config 0 descriptor?? [ 227.113230][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 227.119293][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 227.128469][ T9] usb 2-1: USB disconnect, device number 104 [ 227.253858][ T36] audit: type=1400 audit(2000000056.117:25559): avc: denied { setattr } for pid=5182 comm="syz.2.1591" name="" dev="pipefs" ino=27420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 227.281599][ T36] audit: type=1326 audit(2000000056.135:25560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c719c819 code=0x7ff00000 [ 227.305262][ T36] audit: type=1326 audit(2000000056.135:25561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c719c819 code=0x7ff00000 [ 227.329345][ T36] audit: type=1326 audit(2000000056.135:25562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c719c819 code=0x7ff00000 [ 227.353116][ T36] audit: type=1326 audit(2000000056.135:25563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c719c819 code=0x7ff00000 [ 227.376760][ T36] audit: type=1326 audit(2000000056.135:25564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c719c819 code=0x7ff00000 [ 227.400683][ T36] audit: type=1326 audit(2000000056.135:25565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c719c819 code=0x7ff00000 [ 227.424397][ T36] audit: type=1326 audit(2000000056.135:25566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c719c819 code=0x7ff00000 [ 227.448020][ T36] audit: type=1326 audit(2000000056.135:25567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.2.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c719c819 code=0x7ff00000 [ 227.486196][ T291] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 227.667366][ T291] usb 4-1: Using ep0 maxpacket: 32 [ 227.679545][ T291] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 227.687664][ T291] usb 4-1: config 0 has no interface number 0 [ 227.709779][ T291] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 227.719261][ T291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.729698][ T291] usb 4-1: Product: syz [ 227.734104][ T291] usb 4-1: Manufacturer: syz [ 227.739081][ T291] usb 4-1: SerialNumber: syz [ 227.745077][ T291] usb 4-1: config 0 descriptor?? [ 227.750937][ T291] smsc95xx v2.0.0 [ 228.393002][ T5177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.404262][ T5177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.607335][ T5191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.616446][ T5191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.848807][ T5177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.861143][ T5177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.872127][ T291] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 228.882999][ T291] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 228.967397][ T5203] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 229.151821][ T291] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 229.162828][ T291] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 229.172048][ T291] usb 4-1: USB disconnect, device number 115 [ 229.464424][ T36] kauditd_printk_skb: 64 callbacks suppressed [ 229.464446][ T36] audit: type=1400 audit(2000000058.190:25632): avc: denied { create } for pid=5210 comm="syz.2.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 229.873459][ T291] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 230.033375][ T291] usb 2-1: device descriptor read/64, error -71 [ 230.283848][ T5220] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.290985][ T291] usb 2-1: device descriptor read/64, error -71 [ 230.297300][ T5220] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.304592][ T5220] bridge_slave_0: entered allmulticast mode [ 230.311043][ T5220] bridge_slave_0: entered promiscuous mode [ 230.317913][ T5220] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.326356][ T5220] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.333610][ T5220] bridge_slave_1: entered allmulticast mode [ 230.340024][ T5220] bridge_slave_1: entered promiscuous mode [ 230.468955][ T5220] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.476114][ T5220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.483460][ T5220] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.490510][ T5220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.526344][ T2183] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.534081][ T2183] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.544869][ T291] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 230.553384][ T2183] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.560499][ T2183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.569197][ T2183] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.576275][ T2183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.606244][ T5220] veth0_vlan: entered promiscuous mode [ 230.621005][ T5220] veth1_macvtap: entered promiscuous mode [ 230.657397][ T5225] netlink: 'syz.2.1604': attribute type 4 has an invalid length. [ 230.683420][ T291] usb 2-1: device descriptor read/64, error -71 [ 230.718011][ T5227] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 230.725714][ T5227] SELinux: failed to load policy [ 230.745860][ T5229] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 230.748796][ T36] audit: type=1400 audit(2000000059.382:25633): avc: denied { mount } for pid=5228 comm="syz.2.1606" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 230.754124][ T5233] overlay: Unknown parameter 'obj_user' [ 230.783878][ T36] audit: type=1400 audit(2000000059.382:25634): avc: denied { mounton } for pid=5228 comm="syz.2.1606" path="/1/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 230.869611][ T36] audit: type=1400 audit(2000000059.504:25635): avc: denied { unmount } for pid=5220 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 230.939183][ T291] usb 2-1: device descriptor read/64, error -71 [ 231.056571][ T291] usb usb2-port1: attempt power cycle [ 231.131031][ T307] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 231.292058][ T307] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.302267][ T307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.313385][ T307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.323418][ T307] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 231.337388][ T36] audit: type=1400 audit(2000000059.945:25636): avc: denied { sys_module } for pid=5236 comm="syz.3.1609" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 231.343532][ T307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.377238][ T307] usb 3-1: config 0 descriptor?? [ 231.379375][ T9] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 231.397606][ T9] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 231.429562][ T291] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 231.462822][ T291] usb 2-1: device descriptor read/8, error -71 [ 231.498930][ T5243] overlayfs: conflicting options: userxattr,redirect_dir=on [ 231.601384][ T291] usb 2-1: device descriptor read/8, error -71 [ 231.855813][ T291] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 231.864499][ T307] hid-rmi 0003:0461:4E72.0019: unknown main item tag 0x2 [ 231.873372][ T307] hid-rmi 0003:0461:4E72.0019: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.2-1/input0 [ 231.888895][ T291] usb 2-1: device descriptor read/8, error -71 [ 232.027826][ T291] usb 2-1: device descriptor read/8, error -71 [ 232.134122][ T308] usb 3-1: USB disconnect, device number 7 [ 232.143707][ T291] usb usb2-port1: unable to enumerate USB device [ 232.665720][ T291] usb 4-1: new low-speed USB device number 116 using dummy_hcd [ 232.825544][ T291] usb 4-1: Invalid ep0 maxpacket: 16 [ 232.974737][ T291] usb 4-1: new low-speed USB device number 117 using dummy_hcd [ 233.145290][ T291] usb 4-1: Invalid ep0 maxpacket: 16 [ 233.150888][ T291] usb usb4-port1: attempt power cycle [ 233.262512][ T308] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 233.423510][ T308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 233.434783][ T308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.444648][ T308] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 233.453861][ T308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.462475][ T308] usb 2-1: config 0 descriptor?? [ 233.518291][ T291] usb 4-1: new low-speed USB device number 118 using dummy_hcd [ 233.539983][ T291] usb 4-1: Invalid ep0 maxpacket: 16 [ 233.678277][ T291] usb 4-1: new low-speed USB device number 119 using dummy_hcd [ 233.699881][ T291] usb 4-1: Invalid ep0 maxpacket: 16 [ 233.705913][ T291] usb usb4-port1: unable to enumerate USB device [ 233.897728][ T308] isku 0003:1E7D:319C.001A: unknown main item tag 0x0 [ 233.904822][ T308] isku 0003:1E7D:319C.001A: unknown main item tag 0x0 [ 233.911730][ T308] isku 0003:1E7D:319C.001A: unknown main item tag 0x0 [ 233.918649][ T308] isku 0003:1E7D:319C.001A: unknown main item tag 0x0 [ 233.925721][ T308] isku 0003:1E7D:319C.001A: unknown main item tag 0x0 [ 233.932516][ T308] isku 0003:1E7D:319C.001A: unknown main item tag 0x0 [ 233.939333][ T308] isku 0003:1E7D:319C.001A: unknown main item tag 0x0 [ 233.946772][ T308] isku 0003:1E7D:319C.001A: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 234.061789][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 234.221664][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 234.228331][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 234.237157][ T9] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 234.245170][ T9] usb 3-1: can't read configurations, error -22 [ 234.335215][ T291] usb 2-1: USB disconnect, device number 109 [ 234.381503][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 234.541365][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 234.548296][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 234.557282][ T9] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 234.565536][ T9] usb 3-1: can't read configurations, error -22 [ 234.572013][ T9] usb usb3-port1: attempt power cycle [ 234.936388][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 234.957458][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 234.964504][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 234.973506][ T9] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 234.985793][ T9] usb 3-1: can't read configurations, error -22 [ 235.127580][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 235.149250][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 235.155894][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 235.164871][ T9] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 235.172845][ T9] usb 3-1: can't read configurations, error -22 [ 235.179208][ T9] usb usb3-port1: unable to enumerate USB device [ 235.905505][ T308] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 236.066481][ T308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 236.077628][ T308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.087408][ T308] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 236.096505][ T308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.105209][ T308] usb 2-1: config 0 descriptor?? [ 236.538792][ T308] isku 0003:1E7D:319C.001B: unknown main item tag 0x0 [ 236.546021][ T308] isku 0003:1E7D:319C.001B: unknown main item tag 0x0 [ 236.552832][ T308] isku 0003:1E7D:319C.001B: unknown main item tag 0x0 [ 236.559752][ T308] isku 0003:1E7D:319C.001B: unknown main item tag 0x0 [ 236.566783][ T308] isku 0003:1E7D:319C.001B: unknown main item tag 0x0 [ 236.573557][ T308] isku 0003:1E7D:319C.001B: unknown main item tag 0x0 [ 236.580463][ T308] isku 0003:1E7D:319C.001B: unknown main item tag 0x0 [ 236.588945][ T308] isku 0003:1E7D:319C.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 236.968780][ T45] usb 2-1: USB disconnect, device number 110 [ 237.076798][ T5337] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.084016][ T5337] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.091262][ T5337] bridge_slave_0: entered allmulticast mode [ 237.097458][ T5337] bridge_slave_0: entered promiscuous mode [ 237.103865][ T5337] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.111017][ T5337] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.118164][ T5337] bridge_slave_1: entered allmulticast mode [ 237.124399][ T5337] bridge_slave_1: entered promiscuous mode [ 237.165146][ T5337] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.172239][ T5337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.179595][ T5337] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.186757][ T5337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.208055][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.215458][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.225654][ T2183] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.232764][ T2183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.242046][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.249192][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.275564][ T5337] veth0_vlan: entered promiscuous mode [ 237.286777][ T5337] veth1_macvtap: entered promiscuous mode [ 237.377435][ T36] audit: type=1326 audit(2000000065.612:25637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5343 comm="syz.5.1647" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f027219c819 code=0x0 [ 237.482853][ T291] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 237.643202][ T291] usb 3-1: Using ep0 maxpacket: 8 [ 237.650205][ T291] usb 3-1: unable to get BOS descriptor or descriptor too short [ 237.660162][ T291] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 237.669276][ T291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.677429][ T291] usb 3-1: Product: 裴쨀팵︻뭋⾂䴟퐟ᰛ歶ຌ㞐뎍푎䘛窤驢═悪 [ 237.686874][ T291] usb 3-1: Manufacturer: 嚏㲝ퟹ籋赔疽喸锍๽ࣼᖆ⁞Ⅿᝡ짆ヌꋯॻ邋뫌㡴彊꫇䋆̳ꩦ騛鸷殮쎭猪 [ 237.701064][ T291] usb 3-1: SerialNumber: ࠖ [ 237.720422][ T36] audit: type=1400 audit(2000000065.941:25638): avc: denied { nlmsg_write } for pid=5349 comm="syz.1.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 237.790473][ T5358] netlink: 'syz.4.1651': attribute type 4 has an invalid length. [ 237.934185][ T291] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 237.943074][ T291] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 237.949172][ T291] usb 3-1: 1:1 : invalid channels 0 [ 237.954738][ T291] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 237.967252][ T291] usb 3-1: USB disconnect, device number 12 [ 238.047623][ T308] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 238.262259][ T308] usb 2-1: unable to get BOS descriptor or descriptor too short [ 238.271537][ T308] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 238.279445][ T308] usb 2-1: can't read configurations, error -71 [ 238.636373][ T5377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1658'. [ 238.648672][ T36] audit: type=1400 audit(2000000066.804:25639): avc: denied { read write } for pid=5376 comm="syz.4.1658" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 238.672611][ T36] audit: type=1400 audit(2000000066.804:25640): avc: denied { open } for pid=5376 comm="syz.4.1658" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 238.703895][ T36] audit: type=1400 audit(2000000066.804:25641): avc: denied { map } for pid=5376 comm="syz.4.1658" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 238.788110][ T5385] cgroup: fork rejected by pids controller in /syz4 [ 238.804396][ T65] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 238.997206][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 239.026339][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.049426][ T65] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 239.058525][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.070428][ T65] usb 3-1: config 0 descriptor?? [ 239.380621][ T5533] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.400325][ T5533] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.408001][ T5533] bridge_slave_0: entered allmulticast mode [ 239.415579][ T5543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.424081][ T5533] bridge_slave_0: entered promiscuous mode [ 239.427442][ T5543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.432047][ T5533] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.444803][ T5533] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.451971][ T5533] bridge_slave_1: entered allmulticast mode [ 239.458594][ T5533] bridge_slave_1: entered promiscuous mode [ 239.503873][ T65] isku 0003:1E7D:319C.001C: unknown main item tag 0x0 [ 239.521558][ T65] isku 0003:1E7D:319C.001C: unknown main item tag 0x0 [ 239.539322][ T65] isku 0003:1E7D:319C.001C: unknown main item tag 0x0 [ 239.548612][ T65] isku 0003:1E7D:319C.001C: unknown main item tag 0x0 [ 239.559779][ T5533] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.566875][ T5533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.574199][ T5533] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.581248][ T5533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.588752][ T65] isku 0003:1E7D:319C.001C: unknown main item tag 0x0 [ 239.595596][ T65] isku 0003:1E7D:319C.001C: unknown main item tag 0x0 [ 239.602433][ T65] isku 0003:1E7D:319C.001C: unknown main item tag 0x0 [ 239.610432][ T65] isku 0003:1E7D:319C.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 239.645844][ T2167] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.654087][ T2167] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.671558][ T2167] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.678656][ T2167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.687556][ T2167] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.694651][ T2167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.730934][ T5533] veth0_vlan: entered promiscuous mode [ 239.748706][ T5533] veth1_macvtap: entered promiscuous mode [ 239.776071][ T45] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 239.787559][ T5546] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1669'. [ 239.805239][ T36] audit: type=1326 audit(2000000067.883:25642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5545 comm="syz.1.1669" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f8562796597 code=0x0 [ 239.839683][ T5549] FAULT_INJECTION: forcing a failure. [ 239.839683][ T5549] name failslab, interval 1, probability 0, space 0, times 0 [ 239.853337][ T5549] CPU: 0 UID: 0 PID: 5549 Comm: syz.6.1664 Not tainted syzkaller #0 43b6d7f3e817ec535415847ac2d00a46ab6e4796 [ 239.853372][ T5549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 239.853384][ T5549] Call Trace: [ 239.853392][ T5549] [ 239.853400][ T5549] __dump_stack+0x21/0x30 [ 239.853432][ T5549] dump_stack_lvl+0x140/0x1c0 [ 239.853457][ T5549] ? __cfi_dump_stack_lvl+0x10/0x10 [ 239.853484][ T5549] dump_stack+0x19/0x20 [ 239.853507][ T5549] should_fail_ex+0x3d7/0x530 [ 239.853534][ T5549] should_failslab+0xac/0x100 [ 239.853554][ T5549] __kmalloc_node_noprof+0x6c/0x4f0 [ 239.853581][ T5549] ? qdisc_alloc+0x90/0x8f0 [ 239.853608][ T5549] ? __cfi_vlan_device_event+0x10/0x10 [ 239.853632][ T5549] ? vlan_device_event+0x400/0x1db0 [ 239.853656][ T5549] qdisc_alloc+0x90/0x8f0 [ 239.853682][ T5549] ? lowpan_event+0x133/0x5b0 [ 239.853714][ T5549] qdisc_create_dflt+0x6f/0x3c0 [ 239.853742][ T5549] ? __cfi__raw_spin_lock+0x10/0x10 [ 239.853771][ T5549] dev_activate+0x306/0x1150 [ 239.853799][ T5549] __dev_open+0x41a/0x530 [ 239.853826][ T5549] ? dev_open+0x270/0x270 [ 239.853852][ T5549] ? _raw_spin_unlock_bh+0x54/0x60 [ 239.853879][ T5549] ? dev_set_rx_mode+0x223/0x2c0 [ 239.853906][ T5549] ? __kasan_check_read+0x15/0x20 [ 239.853932][ T5549] __dev_change_flags+0x21a/0x6c0 [ 239.853961][ T5549] ? __cfi___dev_change_flags+0x10/0x10 [ 239.853989][ T5549] ? ioctl_has_perm+0x39a/0x500 [ 239.854015][ T5549] dev_change_flags+0x89/0x1a0 [ 239.854043][ T5549] dev_ifsioc+0x4ef/0xc10 [ 239.854067][ T5549] dev_ioctl+0x9c1/0x1000 [ 239.854092][ T5549] sock_do_ioctl+0x249/0x330 [ 239.854112][ T5549] ? sock_show_fdinfo+0xd0/0xd0 [ 239.854131][ T5549] ? __cfi_vfs_write+0x10/0x10 [ 239.854157][ T5549] ? __kasan_check_write+0x18/0x20 [ 239.854183][ T5549] ? mutex_unlock+0x90/0x240 [ 239.854204][ T5549] sock_ioctl+0x5b5/0x7f0 [ 239.854223][ T5549] ? __cfi_sock_ioctl+0x10/0x10 [ 239.854240][ T5549] ? __fget_files+0x2c5/0x340 [ 239.854260][ T5549] ? bpf_lsm_file_ioctl+0xd/0x20 [ 239.854282][ T5549] ? security_file_ioctl+0x3e/0x110 [ 239.854306][ T5549] ? __cfi_sock_ioctl+0x10/0x10 [ 239.854323][ T5549] __se_sys_ioctl+0x132/0x1b0 [ 239.854343][ T5549] __x64_sys_ioctl+0x7f/0xa0 [ 239.854368][ T5549] x64_sys_call+0x1878/0x2ee0 [ 239.854395][ T5549] do_syscall_64+0x57/0xf0 [ 239.854423][ T5549] ? clear_bhb_loop+0x50/0xa0 [ 239.854441][ T5549] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 239.854470][ T5549] RIP: 0033:0x7f601a99c819 [ 239.854489][ T5549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.854507][ T5549] RSP: 002b:00007f601b86c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.854531][ T5549] RAX: ffffffffffffffda RBX: 00007f601ac15fa0 RCX: 00007f601a99c819 [ 239.854548][ T5549] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000005 [ 239.854562][ T5549] RBP: 00007f601b86c090 R08: 0000000000000000 R09: 0000000000000000 [ 239.854576][ T5549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.854589][ T5549] R13: 00007f601ac16038 R14: 00007f601ac15fa0 R15: 00007fffd854b9a8 [ 239.854607][ T5549] [ 239.854658][ T5549] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 239.955352][ T45] usb 6-1: device descriptor read/64, error -71 [ 239.966787][ T5550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=5550 comm=syz.1.1669 [ 240.077573][ T307] usb 3-1: USB disconnect, device number 13 [ 240.216585][ T5550] wg0: entered promiscuous mode [ 240.221538][ T5550] wg0: entered allmulticast mode [ 240.360764][ T45] usb 6-1: device descriptor read/64, error -71 [ 240.510055][ T291] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 240.626736][ T45] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 240.670371][ T291] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 240.681649][ T291] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 240.694632][ T291] usb 7-1: config 0 interface 0 has no altsetting 0 [ 240.701356][ T291] usb 7-1: New USB device found, idVendor=056a, idProduct=00df, bcdDevice= 0.00 [ 240.710608][ T291] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.719575][ T291] usb 7-1: config 0 descriptor?? [ 240.725114][ T5554] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 240.750892][ T5560] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1673'. [ 240.775973][ T45] usb 6-1: device descriptor read/64, error -71 [ 240.839849][ T65] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 241.014525][ T65] usb 2-1: unable to get BOS descriptor or descriptor too short [ 241.031762][ T45] usb 6-1: device descriptor read/64, error -71 [ 241.031977][ T65] usb 2-1: not running at top speed; connect to a high speed hub [ 241.049125][ T65] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 241.062247][ T65] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 241.072275][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.081146][ T2174] bridge_slave_1: left allmulticast mode [ 241.087031][ T2174] bridge_slave_1: left promiscuous mode [ 241.092768][ T65] usb 2-1: Product: syz [ 241.097328][ T2174] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.104633][ T65] usb 2-1: Manufacturer: syz [ 241.110237][ T2174] bridge_slave_0: left allmulticast mode [ 241.116043][ T65] usb 2-1: SerialNumber: syz [ 241.121904][ T2174] bridge_slave_0: left promiscuous mode [ 241.128314][ T2174] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.149549][ T45] usb usb6-port1: attempt power cycle [ 241.172945][ T291] wacom 0003:056A:00DF.001D: unknown main item tag 0x0 [ 241.188961][ T291] wacom 0003:056A:00DF.001D: unknown main item tag 0x0 [ 241.200257][ T291] wacom 0003:056A:00DF.001D: unknown main item tag 0x0 [ 241.207730][ T291] wacom 0003:056A:00DF.001D: unknown main item tag 0x0 [ 241.214737][ T291] wacom 0003:056A:00DF.001D: unknown main item tag 0x0 [ 241.221815][ T291] wacom 0003:056A:00DF.001D: unknown main item tag 0x0 [ 241.229164][ T291] wacom 0003:056A:00DF.001D: unknown main item tag 0x0 [ 241.236420][ T291] wacom 0003:056A:00DF.001D: unknown main item tag 0x0 [ 241.243402][ T291] wacom 0003:056A:00DF.001D: unknown main item tag 0x0 [ 241.253803][ T291] wacom 0003:056A:00DF.001D: unknown main item tag 0x0 [ 241.260792][ T291] wacom 0003:056A:00DF.001D: unknown main item tag 0x0 [ 241.268023][ T291] wacom 0003:056A:00DF.001D: unknown main item tag 0x0 [ 241.275000][ T291] wacom 0003:056A:00DF.001D: unknown main item tag 0x0 [ 241.285399][ T291] wacom 0003:056A:00DF.001D: unknown main item tag 0x0 [ 241.292436][ T291] wacom 0003:056A:00DF.001D: unknown main item tag 0x0 [ 241.301274][ T291] wacom 0003:056A:00DF.001D: unknown main item tag 0x0 [ 241.309240][ T2174] veth1_macvtap: left promiscuous mode [ 241.315000][ T2174] veth0_vlan: left promiscuous mode [ 241.325361][ T291] wacom 0003:056A:00DF.001D: unknown main item tag 0x0 [ 241.340796][ T291] wacom 0003:056A:00DF.001D: unknown main item tag 0x0 [ 241.345066][ T65] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 241.356798][ T291] wacom 0003:056A:00DF.001D: unknown main item tag 0x0 [ 241.361747][ T65] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 241.364599][ T291] wacom 0003:056A:00DF.001D: unknown main item tag 0x0 [ 241.375434][ T65] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 241.394123][ T291] wacom 0003:056A:00DF.001D: unknown main item tag 0x0 [ 241.400619][ T65] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 241.411828][ T291] wacom 0003:056A:00DF.001D: unknown main item tag 0x0 [ 241.426043][ T291] wacom 0003:056A:00DF.001D: unknown main item tag 0x0 [ 241.426417][ T65] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 241.440605][ T291] wacom 0003:056A:00DF.001D: unknown main item tag 0x0 [ 241.453207][ T291] wacom 0003:056A:00DF.001D: unknown main item tag 0x0 [ 241.460425][ T291] wacom 0003:056A:00DF.001D: unknown main item tag 0x0 [ 241.467330][ T291] wacom 0003:056A:00DF.001D: unknown main item tag 0x0 [ 241.480890][ T65] usb 2-1: USB disconnect, device number 113 [ 241.489716][ T291] wacom 0003:056A:00DF.001D: unknown main item tag 0x0 [ 241.509339][ T291] wacom 0003:056A:00DF.001D: unknown main item tag 0x0 [ 241.518056][ T45] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 241.527910][ T291] wacom 0003:056A:00DF.001D: unknown main item tag 0x0 [ 241.535099][ T291] wacom 0003:056A:00DF.001D: unknown main item tag 0x0 [ 241.542183][ T291] wacom 0003:056A:00DF.001D: unknown main item tag 0x0 [ 241.549155][ T291] wacom 0003:056A:00DF.001D: unknown main item tag 0x0 [ 241.556820][ T291] wacom 0003:056A:00DF.001D: Unknown device_type for 'HID 056a:00df'. Assuming pen. [ 241.566968][ T45] usb 6-1: device descriptor read/8, error -71 [ 241.572086][ T5554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.573296][ T36] audit: type=1400 audit(2000000069.544:25643): avc: denied { rename } for pid=5553 comm="syz.6.1670" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 241.583171][ T5554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.605236][ T291] wacom 0003:056A:00DF.001D: hidraw0: USB HID v0.20 Device [HID 056a:00df] on usb-dummy_hcd.6-1/input0 [ 241.624149][ T291] input: Wacom Bamboo 16FG 6x8 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:00DF.001D/input/input16 [ 241.658027][ T9] usb 7-1: USB disconnect, device number 2 [ 241.705378][ T45] usb 6-1: device descriptor read/8, error -71 [ 241.908547][ T5594] rust_binder: Write failure EFAULT in pid:1139 [ 241.958932][ T45] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 241.992186][ T45] usb 6-1: device descriptor read/8, error -71 [ 242.130455][ T45] usb 6-1: device descriptor read/8, error -71 [ 242.140081][ T291] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 242.172025][ T307] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 242.246946][ T45] usb usb6-port1: unable to enumerate USB device [ 242.301700][ T291] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.312034][ T291] usb 3-1: too many endpoints for config 1 interface 0 altsetting 93: 251, using maximum allowed: 30 [ 242.322985][ T291] usb 3-1: config 1 interface 0 altsetting 93 has 0 endpoint descriptors, different from the interface descriptor's value: 251 [ 242.336439][ T291] usb 3-1: config 1 interface 0 has no altsetting 0 [ 242.344489][ T307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 242.355767][ T307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.365743][ T307] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 242.374954][ T291] usb 3-1: New USB device found, idVendor=0525, idProduct=bca1, bcdDevice= 0.40 [ 242.384008][ T291] usb 3-1: New USB device strings: Mfr=0, Product=252, SerialNumber=1 [ 242.392535][ T291] usb 3-1: Product: syz [ 242.396778][ T307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.405120][ T291] usb 3-1: SerialNumber: syz [ 242.410995][ T307] usb 2-1: config 0 descriptor?? [ 242.416700][ T291] usb 3-1: bad CDC descriptors [ 242.470431][ T31] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 242.630476][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 242.634577][ T5592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.637116][ T31] usb 7-1: unable to get BOS descriptor or descriptor too short [ 242.644787][ T5592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.653626][ T31] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 242.662864][ T5592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.674140][ T31] usb 7-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 242.679156][ T5592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.689503][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.710566][ T31] usb 7-1: Product: syz [ 242.715058][ T31] usb 7-1: Manufacturer: syz [ 242.716302][ T5592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.720204][ T31] usb 7-1: SerialNumber: syz [ 242.729189][ T5592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.743375][ T65] usb 3-1: USB disconnect, device number 14 [ 242.867384][ T307] isku 0003:1E7D:319C.001E: unknown main item tag 0x0 [ 242.874256][ T307] isku 0003:1E7D:319C.001E: unknown main item tag 0x0 [ 242.881206][ T307] isku 0003:1E7D:319C.001E: unknown main item tag 0x0 [ 242.888440][ T307] isku 0003:1E7D:319C.001E: unknown main item tag 0x0 [ 242.895508][ T307] isku 0003:1E7D:319C.001E: unknown main item tag 0x0 [ 242.902943][ T307] isku 0003:1E7D:319C.001E: unknown main item tag 0x0 [ 242.909826][ T307] isku 0003:1E7D:319C.001E: unknown main item tag 0x0 [ 242.917328][ T307] isku 0003:1E7D:319C.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 243.018347][ T31] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 243.032667][ T31] usb 7-1: USB disconnect, device number 3 [ 243.038358][ T1016] udevd[1016]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 243.300091][ T307] usb 2-1: USB disconnect, device number 114 [ 243.546832][ T31] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 243.640052][ T5620] FAULT_INJECTION: forcing a failure. [ 243.640052][ T5620] name failslab, interval 1, probability 0, space 0, times 0 [ 243.653077][ T5620] CPU: 0 UID: 0 PID: 5620 Comm: syz.6.1692 Not tainted syzkaller #0 43b6d7f3e817ec535415847ac2d00a46ab6e4796 [ 243.653119][ T5620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 243.653132][ T5620] Call Trace: [ 243.653137][ T5620] [ 243.653142][ T5620] __dump_stack+0x21/0x30 [ 243.653163][ T5620] dump_stack_lvl+0x140/0x1c0 [ 243.653179][ T5620] ? __cfi_dump_stack_lvl+0x10/0x10 [ 243.653196][ T5620] dump_stack+0x19/0x20 [ 243.653210][ T5620] should_fail_ex+0x3d7/0x530 [ 243.653233][ T5620] should_failslab+0xac/0x100 [ 243.653246][ T5620] __kmalloc_node_noprof+0x6c/0x4f0 [ 243.653263][ T5620] ? __kvmalloc_node_noprof+0x128/0x300 [ 243.653279][ T5620] __kvmalloc_node_noprof+0x128/0x300 [ 243.653300][ T5620] ? x64_sys_call+0x1878/0x2ee0 [ 243.653317][ T5620] ? do_syscall_64+0x57/0xf0 [ 243.653334][ T5620] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 243.653351][ T5620] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 243.653367][ T5620] pfifo_fast_init+0x27b/0x1090 [ 243.653385][ T5620] qdisc_create_dflt+0x158/0x3c0 [ 243.653402][ T5620] dev_activate+0x306/0x1150 [ 243.653419][ T5620] __dev_open+0x41a/0x530 [ 243.653436][ T5620] ? dev_open+0x270/0x270 [ 243.653451][ T5620] ? _raw_spin_unlock_bh+0x54/0x60 [ 243.653468][ T5620] ? dev_set_rx_mode+0x223/0x2c0 [ 243.653485][ T5620] ? __kasan_check_read+0x15/0x20 [ 243.653502][ T5620] __dev_change_flags+0x21a/0x6c0 [ 243.653519][ T5620] ? __cfi___dev_change_flags+0x10/0x10 [ 243.653536][ T5620] ? ioctl_has_perm+0x39a/0x500 [ 243.653552][ T5620] dev_change_flags+0x89/0x1a0 [ 243.653569][ T5620] dev_ifsioc+0x4ef/0xc10 [ 243.653584][ T5620] dev_ioctl+0x9c1/0x1000 [ 243.653598][ T5620] sock_do_ioctl+0x249/0x330 [ 243.653611][ T5620] ? sock_show_fdinfo+0xd0/0xd0 [ 243.653622][ T5620] ? __cfi_vfs_write+0x10/0x10 [ 243.653639][ T5620] ? __kasan_check_write+0x18/0x20 [ 243.653661][ T5620] ? mutex_unlock+0x90/0x240 [ 243.653673][ T5620] sock_ioctl+0x5b5/0x7f0 [ 243.653687][ T5620] ? __cfi_sock_ioctl+0x10/0x10 [ 243.653706][ T5620] ? __fget_files+0x2c5/0x340 [ 243.653727][ T5620] ? bpf_lsm_file_ioctl+0xd/0x20 [ 243.653749][ T5620] ? security_file_ioctl+0x3e/0x110 [ 243.653775][ T5620] ? __cfi_sock_ioctl+0x10/0x10 [ 243.653789][ T5620] __se_sys_ioctl+0x132/0x1b0 [ 243.653801][ T5620] __x64_sys_ioctl+0x7f/0xa0 [ 243.653813][ T5620] x64_sys_call+0x1878/0x2ee0 [ 243.653829][ T5620] do_syscall_64+0x57/0xf0 [ 243.653845][ T5620] ? clear_bhb_loop+0x50/0xa0 [ 243.653857][ T5620] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 243.653874][ T5620] RIP: 0033:0x7f601a99c819 [ 243.653886][ T5620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.653901][ T5620] RSP: 002b:00007f601b86c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 243.653917][ T5620] RAX: ffffffffffffffda RBX: 00007f601ac15fa0 RCX: 00007f601a99c819 [ 243.653927][ T5620] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000005 [ 243.653936][ T5620] RBP: 00007f601b86c090 R08: 0000000000000000 R09: 0000000000000000 [ 243.653945][ T5620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.653954][ T5620] R13: 00007f601ac16038 R14: 00007f601ac15fa0 R15: 00007fffd854b9a8 [ 243.653965][ T5620] [ 243.813235][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 243.821188][ T5620] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 243.852099][ T31] usb 3-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 243.995257][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.003342][ T31] usb 3-1: Product: syz [ 244.007644][ T31] usb 3-1: Manufacturer: syz [ 244.012376][ T31] usb 3-1: SerialNumber: syz [ 244.111841][ T65] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 244.126139][ T5632] loop6: detected capacity change from 0 to 8 [ 244.134357][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.144611][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 244.153846][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.164165][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 244.172760][ T1583] loop6: unable to read partition table [ 244.180001][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.190229][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 244.198624][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.208893][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 244.220760][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.231041][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 244.243824][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.254087][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 244.262416][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.272634][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 244.299909][ T31] usb 3-1: MIDIStreaming interface descriptor not found [ 244.314132][ T65] usb 6-1: Using ep0 maxpacket: 16 [ 244.316021][ T31] usb 3-1: USB disconnect, device number 15 [ 244.320659][ T65] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.357700][ T65] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.368104][ T65] usb 6-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 244.377549][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.386723][ T65] usb 6-1: config 0 descriptor?? [ 244.827997][ T5622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.836668][ T5622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.845736][ T65] ntrig 0003:1B96:0008.001F: item fetching failed at offset 5/7 [ 244.855591][ T65] ntrig 0003:1B96:0008.001F: parse failed [ 244.861388][ T65] ntrig 0003:1B96:0008.001F: probe with driver ntrig failed with error -22 [ 244.865250][ T5654] SELinux: Context system_u:object_r:tetex_data_t:s0 is not valid (left unmapped). [ 244.879707][ T36] audit: type=1400 audit(2000000072.659:25644): avc: denied { relabelto } for pid=5652 comm=233756F4FDB61A1EA3884E7C6129DD name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:tetex_data_t:s0" [ 244.908312][ T36] audit: type=1400 audit(2000000072.659:25645): avc: denied { associate } for pid=5652 comm=233756F4FDB61A1EA3884E7C6129DD name="ppp" dev="devtmpfs" ino=86 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:tetex_data_t:s0" [ 245.060968][ T5622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.069562][ T5622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.078306][ T65] usb 6-1: USB disconnect, device number 6 [ 245.110865][ T5658] FAULT_INJECTION: forcing a failure. [ 245.110865][ T5658] name failslab, interval 1, probability 0, space 0, times 0 [ 245.123677][ T5658] CPU: 1 UID: 0 PID: 5658 Comm: syz.1.1705 Not tainted syzkaller #0 43b6d7f3e817ec535415847ac2d00a46ab6e4796 [ 245.123711][ T5658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 245.123725][ T5658] Call Trace: [ 245.123732][ T5658] [ 245.123741][ T5658] __dump_stack+0x21/0x30 [ 245.123771][ T5658] dump_stack_lvl+0x140/0x1c0 [ 245.123791][ T5658] ? __cfi_dump_stack_lvl+0x10/0x10 [ 245.123813][ T5658] dump_stack+0x19/0x20 [ 245.123828][ T5658] should_fail_ex+0x3d7/0x530 [ 245.123844][ T5658] should_failslab+0xac/0x100 [ 245.123858][ T5658] __kmalloc_node_noprof+0x6c/0x4f0 [ 245.123881][ T5658] ? __kvmalloc_node_noprof+0x128/0x300 [ 245.123897][ T5658] __kvmalloc_node_noprof+0x128/0x300 [ 245.123912][ T5658] ? x64_sys_call+0x1878/0x2ee0 [ 245.123929][ T5658] ? do_syscall_64+0x57/0xf0 [ 245.123946][ T5658] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 245.123963][ T5658] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 245.123980][ T5658] pfifo_fast_init+0x3d5/0x1090 [ 245.123997][ T5658] qdisc_create_dflt+0x158/0x3c0 [ 245.124021][ T5658] dev_activate+0x306/0x1150 [ 245.124050][ T5658] __dev_open+0x41a/0x530 [ 245.124078][ T5658] ? dev_open+0x270/0x270 [ 245.124105][ T5658] ? _raw_spin_unlock_bh+0x54/0x60 [ 245.124134][ T5658] ? dev_set_rx_mode+0x223/0x2c0 [ 245.124162][ T5658] ? __kasan_check_read+0x15/0x20 [ 245.124179][ T5658] __dev_change_flags+0x21a/0x6c0 [ 245.124196][ T5658] ? __cfi___dev_change_flags+0x10/0x10 [ 245.124213][ T5658] ? ioctl_has_perm+0x39a/0x500 [ 245.124229][ T5658] dev_change_flags+0x89/0x1a0 [ 245.124246][ T5658] dev_ifsioc+0x4ef/0xc10 [ 245.124261][ T5658] dev_ioctl+0x9c1/0x1000 [ 245.124275][ T5658] sock_do_ioctl+0x249/0x330 [ 245.124288][ T5658] ? sock_show_fdinfo+0xd0/0xd0 [ 245.124300][ T5658] ? __cfi_vfs_write+0x10/0x10 [ 245.124316][ T5658] ? __kasan_check_write+0x18/0x20 [ 245.124332][ T5658] ? mutex_unlock+0x90/0x240 [ 245.124345][ T5658] sock_ioctl+0x5b5/0x7f0 [ 245.124356][ T5658] ? __cfi_sock_ioctl+0x10/0x10 [ 245.124368][ T5658] ? __fget_files+0x2c5/0x340 [ 245.124379][ T5658] ? bpf_lsm_file_ioctl+0xd/0x20 [ 245.124393][ T5658] ? security_file_ioctl+0x3e/0x110 [ 245.124408][ T5658] ? __cfi_sock_ioctl+0x10/0x10 [ 245.124419][ T5658] __se_sys_ioctl+0x132/0x1b0 [ 245.124432][ T5658] __x64_sys_ioctl+0x7f/0xa0 [ 245.124443][ T5658] x64_sys_call+0x1878/0x2ee0 [ 245.124460][ T5658] do_syscall_64+0x57/0xf0 [ 245.124476][ T5658] ? clear_bhb_loop+0x50/0xa0 [ 245.124487][ T5658] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 245.124505][ T5658] RIP: 0033:0x7f856279c819 [ 245.124518][ T5658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.124530][ T5658] RSP: 002b:00007f8563709028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.124546][ T5658] RAX: ffffffffffffffda RBX: 00007f8562a15fa0 RCX: 00007f856279c819 [ 245.124557][ T5658] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000005 [ 245.124566][ T5658] RBP: 00007f8563709090 R08: 0000000000000000 R09: 0000000000000000 [ 245.124575][ T5658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.124584][ T5658] R13: 00007f8562a16038 R14: 00007f8562a15fa0 R15: 00007ffebbdddd08 [ 245.124595][ T5658] [ 245.445170][ T5658] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 245.480126][ T36] audit: type=1400 audit(2000000073.213:25646): avc: denied { connect } for pid=5659 comm="syz.6.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 245.675603][ T5664] kvm: emulating exchange as write [ 245.811692][ T2167] Bluetooth: hci0: Frame reassembly failed (-84) [ 246.179677][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 246.302761][ T5694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=5694 comm=syz.5.1713 [ 246.509556][ T65] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 246.662927][ T5697] FAULT_INJECTION: forcing a failure. [ 246.662927][ T5697] name failslab, interval 1, probability 0, space 0, times 0 [ 246.669412][ T65] usb 7-1: Using ep0 maxpacket: 16 [ 246.675846][ T5697] CPU: 1 UID: 0 PID: 5697 Comm: syz.1.1716 Not tainted syzkaller #0 43b6d7f3e817ec535415847ac2d00a46ab6e4796 [ 246.675877][ T5697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 246.675889][ T5697] Call Trace: [ 246.675896][ T5697] [ 246.675905][ T5697] __dump_stack+0x21/0x30 [ 246.675934][ T5697] dump_stack_lvl+0x140/0x1c0 [ 246.675959][ T5697] ? __cfi_dump_stack_lvl+0x10/0x10 [ 246.675982][ T5697] ? __kvmalloc_node_noprof+0x128/0x300 [ 246.676008][ T5697] dump_stack+0x19/0x20 [ 246.676032][ T5697] should_fail_ex+0x3d7/0x530 [ 246.676056][ T5697] should_failslab+0xac/0x100 [ 246.676075][ T5697] kmem_cache_alloc_node_noprof+0x45/0x420 [ 246.676102][ T5697] ? blake2s_update+0x243/0x430 [ 246.676125][ T5697] ? __alloc_skb+0x108/0x370 [ 246.676147][ T5697] __alloc_skb+0x108/0x370 [ 246.676169][ T5697] rtmsg_ifinfo_build_skb+0x85/0x270 [ 246.676197][ T5697] rtmsg_ifinfo+0x91/0x1a0 [ 246.676223][ T5697] __dev_notify_flags+0x100/0x5b0 [ 246.676250][ T5697] ? dev_set_rx_mode+0x223/0x2c0 [ 246.676276][ T5697] ? __cfi___dev_notify_flags+0x10/0x10 [ 246.676303][ T5697] ? __dev_change_flags+0x4e6/0x6c0 [ 246.676329][ T5697] ? __cfi___dev_change_flags+0x10/0x10 [ 246.676357][ T5697] ? ioctl_has_perm+0x39a/0x500 [ 246.676381][ T5697] dev_change_flags+0xe9/0x1a0 [ 246.676409][ T5697] dev_ifsioc+0x4ef/0xc10 [ 246.676432][ T5697] dev_ioctl+0x9c1/0x1000 [ 246.676454][ T5697] sock_do_ioctl+0x249/0x330 [ 246.676474][ T5697] ? sock_show_fdinfo+0xd0/0xd0 [ 246.676493][ T5697] ? __cfi_vfs_write+0x10/0x10 [ 246.676518][ T5697] ? __kasan_check_write+0x18/0x20 [ 246.676543][ T5697] ? mutex_unlock+0x90/0x240 [ 246.676563][ T5697] sock_ioctl+0x5b5/0x7f0 [ 246.676581][ T5697] ? __cfi_sock_ioctl+0x10/0x10 [ 246.676599][ T5697] ? __fget_files+0x2c5/0x340 [ 246.676618][ T5697] ? bpf_lsm_file_ioctl+0xd/0x20 [ 246.676646][ T5697] ? security_file_ioctl+0x3e/0x110 [ 246.676669][ T5697] ? __cfi_sock_ioctl+0x10/0x10 [ 246.676686][ T5697] __se_sys_ioctl+0x132/0x1b0 [ 246.676705][ T5697] __x64_sys_ioctl+0x7f/0xa0 [ 246.676723][ T5697] x64_sys_call+0x1878/0x2ee0 [ 246.676750][ T5697] do_syscall_64+0x57/0xf0 [ 246.676776][ T5697] ? clear_bhb_loop+0x50/0xa0 [ 246.676799][ T5697] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 246.676826][ T5697] RIP: 0033:0x7f856279c819 [ 246.676844][ T5697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.676860][ T5697] RSP: 002b:00007f8563709028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.676882][ T5697] RAX: ffffffffffffffda RBX: 00007f8562a15fa0 RCX: 00007f856279c819 [ 246.676898][ T5697] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000005 [ 246.676912][ T5697] RBP: 00007f8563709090 R08: 0000000000000000 R09: 0000000000000000 [ 246.676926][ T5697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.676938][ T5697] R13: 00007f8562a16038 R14: 00007f8562a15fa0 R15: 00007ffebbdddd08 [ 246.676955][ T5697] [ 246.976152][ T65] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.987128][ T65] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.997046][ T65] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 247.010057][ T65] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 247.019467][ T65] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.028832][ T65] usb 7-1: config 0 descriptor?? [ 247.467929][ T65] microsoft 0003:045E:07DA.0020: invalid report_size -2086170575 [ 247.487463][ T65] microsoft 0003:045E:07DA.0020: item 0 4 1 7 parsing failed [ 247.495110][ T308] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 247.503423][ T65] microsoft 0003:045E:07DA.0020: parse failed [ 247.509871][ T65] microsoft 0003:045E:07DA.0020: probe with driver microsoft failed with error -22 [ 247.554383][ T2167] tipc: Subscription rejected, illegal request [ 247.565290][ T36] audit: type=1400 audit(2000000075.174:25647): avc: denied { mount } for pid=5735 comm="syz.1.1731" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 247.641942][ T5737] ================================================================== [ 247.650110][ T5737] BUG: KASAN: slab-use-after-free in pick_link+0x4f0/0xe80 [ 247.657428][ T5737] Read of size 8 at addr ffff888127788c50 by task syz.1.1731/5737 [ 247.665224][ T5737] [ 247.667563][ T5737] CPU: 1 UID: 0 PID: 5737 Comm: syz.1.1731 Not tainted syzkaller #0 43b6d7f3e817ec535415847ac2d00a46ab6e4796 [ 247.667582][ T5737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 247.667591][ T5737] Call Trace: [ 247.667618][ T5737] [ 247.667624][ T5737] __dump_stack+0x21/0x30 [ 247.667644][ T5737] dump_stack_lvl+0x140/0x1c0 [ 247.667660][ T5737] ? __cfi_dump_stack_lvl+0x10/0x10 [ 247.667675][ T5737] ? __cfi__printk+0x10/0x10 [ 247.667689][ T5737] print_address_description+0x71/0x210 [ 247.667705][ T5737] print_report+0x4a/0x70 [ 247.667719][ T5737] kasan_report+0x162/0x1a0 [ 247.667733][ T5737] ? pick_link+0x4f0/0xe80 [ 247.667749][ T5737] ? pick_link+0x4f0/0xe80 [ 247.667764][ T5737] __asan_report_load8_noabort+0x18/0x20 [ 247.667781][ T5737] pick_link+0x4f0/0xe80 [ 247.667797][ T5737] step_into+0xc68/0xf60 [ 247.667812][ T5737] ? __kasan_check_read+0x15/0x20 [ 247.667828][ T5737] ? read_word_at_a_time+0x1a/0x40 [ 247.667846][ T5737] ? set_root+0x420/0x420 [ 247.667862][ T5737] ? lookup_fast+0x167/0x530 [ 247.667877][ T5737] ? inode_permission+0xf3/0x4c0 [ 247.667895][ T5737] link_path_walk+0x753/0xec0 [ 247.667911][ T5737] ? stack_depot_save_flags+0x38/0x800 [ 247.667928][ T5737] __filename_parentat+0x22a/0x650 [ 247.667941][ T5737] ? x64_sys_call+0x2974/0x2ee0 [ 247.667957][ T5737] ? do_syscall_64+0x57/0xf0 [ 247.667975][ T5737] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 247.667993][ T5737] ? vfs_path_parent_lookup+0x70/0x70 [ 247.668007][ T5737] ? check_stack_object+0x81/0x150 [ 247.668023][ T5737] ? __virt_addr_valid+0x2a6/0x380 [ 247.668037][ T5737] ? __check_object_size+0x527/0x830 [ 247.668053][ T5737] do_unlinkat+0xfe/0x5a0 [ 247.668067][ T5737] ? __cfi_do_unlinkat+0x10/0x10 [ 247.668082][ T5737] ? getname_flags+0x208/0x700 [ 247.668098][ T5737] ? fpregs_restore_userregs+0x11c/0x260 [ 247.668113][ T5737] __x64_sys_unlinkat+0xda/0xf0 [ 247.668127][ T5737] x64_sys_call+0x2974/0x2ee0 [ 247.668144][ T5737] do_syscall_64+0x57/0xf0 [ 247.668160][ T5737] ? clear_bhb_loop+0x50/0xa0 [ 247.668171][ T5737] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 247.668189][ T5737] RIP: 0033:0x7f856279c819 [ 247.668201][ T5737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.668213][ T5737] RSP: 002b:00007f85636e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 247.668228][ T5737] RAX: ffffffffffffffda RBX: 00007f8562a16090 RCX: 00007f856279c819 [ 247.668239][ T5737] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000009 [ 247.668256][ T5737] RBP: 00007f8562832c91 R08: 0000000000000000 R09: 0000000000000000 [ 247.668265][ T5737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.668273][ T5737] R13: 00007f8562a16128 R14: 00007f8562a16090 R15: 00007ffebbdddd08 [ 247.668284][ T5737] [ 247.668290][ T5737] [ 247.674072][ T308] usb 6-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=ab.79 [ 247.679813][ T5737] Allocated by task 5736: [ 247.679832][ T5737] kasan_save_track+0x3e/0x80 [ 247.679869][ T5737] kasan_save_alloc_info+0x40/0x50 [ 247.690340][ T308] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.693205][ T5737] __kasan_slab_alloc+0x73/0x90 [ 247.693231][ T5737] kmem_cache_alloc_lru_noprof+0x1c2/0x410 [ 247.699640][ T308] usb 6-1: Product: syz [ 247.700674][ T5737] alloc_inode+0xa9/0x270 [ 247.705859][ T308] usb 6-1: Manufacturer: syz [ 247.710583][ T5737] new_inode+0x25/0x1e0 [ 247.715758][ T308] usb 6-1: SerialNumber: syz [ 247.720722][ T5737] bpf_symlink+0x65/0x200 [ 247.720753][ T5737] vfs_symlink+0x3f1/0x620 [ 247.771543][ T308] ftdi_sio 6-1:4.0: FTDI USB Serial Device converter detected [ 247.771734][ T5737] do_symlinkat+0x1ba/0x400 [ 247.777474][ T308] ftdi_sio ttyUSB0: unknown device type: 0xab79 [ 247.781346][ T5737] __x64_sys_symlinkat+0x99/0xb0 [ 247.781378][ T5737] x64_sys_call+0x1f79/0x2ee0 [ 247.781408][ T5737] do_syscall_64+0x57/0xf0 [ 247.895015][ T65] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 247.896859][ T5737] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 247.969616][ T452] Bluetooth: hci0: command 0x1003 tx timeout [ 247.973777][ T5737] [ 247.973786][ T5737] Freed by task 5738: [ 247.973798][ T5737] kasan_save_track+0x3e/0x80 [ 247.973833][ T5737] kasan_save_free_info+0x4a/0x60 [ 248.009728][ T308] usb 6-1: USB disconnect, device number 7 [ 248.010035][ T5737] __kasan_slab_free+0x5f/0x80 [ 248.021613][ T308] ftdi_sio 6-1:4.0: device disconnected [ 248.023409][ T5737] kmem_cache_free+0x1bd/0x4f0 [ 248.023448][ T5737] free_inode_nonrcu+0x20/0x30 [ 248.065526][ T65] usb 2-1: Using ep0 maxpacket: 8 [ 248.069483][ T5737] bpf_destroy_inode+0x14e/0x180 [ 248.077744][ T65] usb 2-1: unable to get BOS descriptor or descriptor too short [ 248.077879][ T5737] evict+0x7f2/0xac0 [ 248.082638][ T65] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 248.086529][ T5737] iput+0x635/0x8d0 [ 248.086562][ T5737] do_unlinkat+0x3d2/0x5a0 [ 248.092522][ T65] usb 2-1: config 0 has no interface number 0 [ 248.097388][ T5737] __x64_sys_unlinkat+0xda/0xf0 [ 248.097419][ T5737] x64_sys_call+0x2974/0x2ee0 [ 248.102978][ T65] usb 2-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 248.107894][ T5737] do_syscall_64+0x57/0xf0 [ 248.113038][ T65] usb 2-1: config 0 interface 122 altsetting 187 has an endpoint descriptor with address 0x95, changing to 0x85 [ 248.117523][ T5737] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 248.123043][ T65] usb 2-1: config 0 interface 122 altsetting 187 endpoint 0x85 has invalid maxpacket 19271, setting to 1024 [ 248.127509][ T5737] [ 248.127520][ T5737] The buggy address belongs to the object at ffff8881277889c0 [ 248.127520][ T5737] which belongs to the cache inode_cache of size 704 [ 248.136167][ T65] usb 2-1: config 0 interface 122 altsetting 187 bulk endpoint 0x85 has invalid maxpacket 1024 [ 248.139140][ T5737] The buggy address is located 656 bytes inside of [ 248.139140][ T5737] freed 704-byte region [ffff8881277889c0, ffff888127788c80) [ 248.139169][ T5737] [ 248.148401][ T65] usb 2-1: config 0 interface 122 altsetting 187 endpoint 0x6 has invalid wMaxPacketSize 0 [ 248.151101][ T5737] The buggy address belongs to the physical page: [ 248.151113][ T5737] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x127788 [ 248.151137][ T5737] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 248.179729][ T65] usb 2-1: config 0 interface 122 altsetting 187 bulk endpoint 0x6 has invalid maxpacket 0 [ 248.182899][ T5737] flags: 0x4000000000000040(head|zone=1) [ 248.182921][ T5737] page_type: f5(slab) [ 248.182942][ T5737] raw: 4000000000000040 ffff88810167fa00 dead000000000122 0000000000000000 [ 248.182960][ T5737] raw: 0000000000000000 0000000080130013 00000001f5000000 0000000000000000 [ 248.182981][ T5737] head: 4000000000000040 ffff88810167fa00 dead000000000122 0000000000000000 [ 248.187903][ T65] usb 2-1: config 0 interface 122 has no altsetting 0 [ 248.199279][ T5737] head: 0000000000000000 0000000080130013 00000001f5000000 0000000000000000 [ 248.199302][ T5737] head: 4000000000000002 ffffea00049de201 ffffffffffffffff 0000000000000000 [ 248.199320][ T5737] head: 0000000700000004 0000000000000000 00000000ffffffff 0000000000000000 [ 248.199331][ T5737] page dumped because: kasan: bad access detected [ 248.199342][ T5737] page_owner tracks the page as allocated [ 248.214716][ T36] audit: type=1400 audit(2000000075.774:25648): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 248.216777][ T5737] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0x1d20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 5704, tgid 5703 (syz.1.1718), ts 247075274675, free_ts 221402785944 [ 248.219554][ T36] audit: type=1400 audit(2000000075.774:25649): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.233523][ T5737] post_alloc_hook+0x3b8/0x3f0 [ 248.233556][ T5737] prep_new_page+0x20/0x120 [ 248.233576][ T5737] get_page_from_freelist+0x496e/0x4a20 [ 248.233599][ T5737] __alloc_pages_noprof+0x35f/0x7e0 [ 248.233622][ T5737] alloc_slab_page+0x6b/0x1e0 [ 248.269832][ T65] usb 2-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a [ 248.270166][ T5737] allocate_slab+0x69/0x420 [ 248.276581][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.285412][ T5737] ___slab_alloc+0x5a2/0x8d0 [ 248.285445][ T5737] kmem_cache_alloc_lru_noprof+0x295/0x410 [ 248.285471][ T5737] alloc_inode+0xa9/0x270 [ 248.299248][ T36] audit: type=1400 audit(2000000075.774:25650): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.304011][ T5737] new_inode+0x25/0x1e0 [ 248.304044][ T5737] __debugfs_create_file+0x14c/0x4b0 [ 248.318840][ T36] audit: type=1400 audit(2000000075.774:25651): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.322520][ T5737] debugfs_create_file+0x4e/0x70 [ 248.322564][ T5737] kvm_create_vm_debugfs+0x7b9/0xb50 [ 248.331498][ T65] usb 2-1: Manufacturer: 㮠།叉眰ᷬ珵 [ 248.339849][ T5737] kvm_dev_ioctl+0xb64/0x14d0 [ 248.339888][ T5737] __se_sys_ioctl+0x132/0x1b0 [ 248.339909][ T5737] __x64_sys_ioctl+0x7f/0xa0 [ 248.347073][ T36] audit: type=1400 audit(2000000075.774:25652): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 248.355336][ T5737] page last free pid 110 tgid 110 stack trace: [ 248.355352][ T5737] free_unref_page+0xbcf/0xf80 [ 248.364491][ T65] usb 2-1: SerialNumber: ᠌ [ 248.372710][ T5737] __free_pages+0x6b/0x3b0 [ 248.381012][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 248.384928][ T5737] __free_slab+0xb5/0x110 [ 248.408002][ T36] audit: type=1400 audit(2000000075.774:25653): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 248.431535][ T5737] free_slab+0x18/0xe0 [ 248.431565][ T5737] discard_slab+0x23/0x40 [ 248.431583][ T5737] __slab_free+0x1fd/0x2a0 [ 248.431601][ T5737] ___cache_free+0xc9/0xe0 [ 248.431626][ T5737] qlist_free_all+0xb5/0x130 [ 248.454848][ T65] usb 2-1: config 0 descriptor?? [ 248.457986][ T5737] kasan_quarantine_reduce+0x14f/0x180 [ 248.463020][ T5738] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 248.468015][ T5737] __kasan_slab_alloc+0x28/0x90 [ 248.475415][ T5738] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 248.477887][ T5737] kmem_cache_alloc_noprof+0x1bf/0x410 [ 248.726838][ T5737] getname_flags+0xc5/0x700 [ 248.731366][ T5737] do_readlinkat+0xcd/0x520 [ 248.735878][ T5737] __x64_sys_readlink+0x83/0xa0 [ 248.740822][ T5737] x64_sys_call+0x155b/0x2ee0 [ 248.745601][ T5737] do_syscall_64+0x57/0xf0 [ 248.750116][ T5737] [ 248.752444][ T5737] Memory state around the buggy address: [ 248.758068][ T5737] ffff888127788b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.766127][ T5737] ffff888127788b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.774188][ T5737] >ffff888127788c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.782243][ T5737] ^ [ 248.788912][ T5737] ffff888127788c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 248.796974][ T5737] ffff888127788d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.805032][ T5737] ================================================================== [ 248.820807][ T5737] Disabling lock debugging due to kernel taint [ 248.837974][ T65] pl2303 2-1:0.122: pl2303 converter detected [ 248.843125][ T291] usb 7-1: USB disconnect, device number 4 [ 248.844569][ T65] pl2303 2-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 248.859910][ T65] pl2303 2-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 248.868548][ T65] pl2303 2-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 248.877241][ T65] pl2303 2-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 248.885507][ T65] pl2303 2-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 248.893949][ T65] pl2303 2-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 248.902326][ T65] pl2303 2-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 248.910911][ T65] pl2303 2-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 248.919175][ T65] pl2303 2-1:0.122: pl2303_vendor_write - failed to write [0000]: -71 [ 248.927618][ T65] pl2303 2-1:0.122: pl2303_vendor_write - failed to write [0001]: -71 [ 248.936065][ T65] pl2303 2-1:0.122: pl2303_vendor_write - failed to write [0002]: -71 [ 248.945605][ T65] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 248.956691][ T65] usb 2-1: USB disconnect, device number 115 [ 248.964138][ T65] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 248.972244][ T65] pl2303 2-1:0.122: device disconnected