last executing test programs: 11.083977946s ago: executing program 0 (id=84): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'batadv_slave_1\x00', &(0x7f0000000140)=@ethtool_cmd={0x4a, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, [0x0, 0xffffffff]}}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x103) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000400)="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", 0x2000, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002540)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xc}}], 0x2, 0x20000040) (async) sendmmsg$unix(r0, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002540)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xc}}], 0x2, 0x20000040) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/3\x00') (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r3, &(0x7f00000000c0), 0x8) sendto(r2, &(0x7f0000000380)="540000001800010400000000000000000a400000fe040001000000001400010020010db800000000000000000000000014000500fe80000000000000000000000000000108000420010000000800060064000000", 0x54, 0x0, 0x0, 0x0) (async) sendto(r2, &(0x7f0000000380)="540000001800010400000000000000000a400000fe040001000000001400010020010db800000000000000000000000014000500fe80000000000000000000000000000108000420010000000800060064000000", 0x54, 0x0, 0x0, 0x0) 10.981854526s ago: executing program 0 (id=87): r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a0000057f00090401000001022000090401010101022000090501"], 0x0) syz_usb_control_io$uac2(r0, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x4d, 0x0, &(0x7f0000000080)) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.934056344s ago: executing program 0 (id=98): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x197) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x207) (async) capset(&(0x7f0000000180)={0x19980330}, &(0x7f0000000500)={0x200003, 0x400, 0x800, 0x80000001, 0x7}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x3, &(0x7f0000000540)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}, {0x2c, 0x2, 0x1, 0x3}, {0x6, 0xd5, 0x9, 0x5}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file2'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./file2\x00', &(0x7f0000000340), 0x30800c, &(0x7f0000000380)={[{@redirect_dir_nofollow}, {@nfs_export_on}, {@metacopy_on, 0x3a}], [], 0x2f}) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = open$dir(&(0x7f0000000040)='./file2\x00', 0x30140, 0xe1) (async) mount$bind(&(0x7f0000000300)='./file2\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800002, 0x0) mknodat$loop(r1, &(0x7f0000000080)='./file2\x00', 0x2, 0x1) chdir(&(0x7f00000005c0)='./file0\x00') (async) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) (async) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000003b0021000000000000006807ebfe1ab2697bfabf5168142bed3f8ee1a6b4669a7d3f2f896a3524aee03e599bca29e3fe57e384e19318b30e151d8b31590d3acf0d0b6df7d3150f918b507fea37c4a5c8329e3f248127e9d0989f99e45f1265df4f63f4e31dece814cbd80e0002632d281a1cbe741ab82f4d5bdd712d0c6c2e542e1c20e4af865f7634333e8e0397c827be73414c4800"/170], 0xa0}}, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file2\x00', 0x440, 0x6a) 8.933350914s ago: executing program 0 (id=99): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000001340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001300)={&(0x7f0000000040)={0x129c, 0x14, 0x100, 0x70bd27, 0x25dfdbff, {0x2c, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x3e, 0x1, "4de7329faf0eb76369573240935cfa8c48b0a18e9abf46f9a67c6370f618333d3f51aed6f0d26450ac4848d3a3f5bf026df90dbf3000118ea4f2"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xc7, 0x1, "9b6040fa0bae8b70c332ae0093d02384714d44ff6a67cd8361f3acf832a37929bae0cc774e359bfb830421ac94dd66b814dd5971bace9c366ab7df648d231be35ddac1f421ec12c2cf3c69283a7b6ad1e195181d87b8443b1dfc6b4952a92d54ea9eff2f80d6ad0f6548fc760f22a8f9f2d94c87f5959cb22f1c17df27e3b52a2613bfd367a07d24d43a8be5f36c683f505658026a1532ab1d8a626e36f150dfa854069d028363989674ab19aeb29e2931fb67f9f8fc348dc8f871896289cf9a375b85"}, @INET_DIAG_REQ_BYTECODE={0xe9, 0x1, "ee2033c177763168ed6c2be276385847dbc57999d782d0aac84be79011d9db18378bc40385bc4072f41a827733f2c788332b01b2c5b2a8f65a67f968eaf35e74d91ece0a91030b9b81d5efc58d78d18b4288eb41ffd89e6a95b11fa392facf0997015724e30968d93ce2bd525b38be8083558e4c4683c4d092a91df9615fdfca35ff11bdd3b6d0a9fe8e43f8e1e897ea1d00953ccea36109a3d8b12b41b88b7387b2e3aa349edf91c5c430a95a190412f0c2acb340caa25542905a13832c3b453f098ccb9a07d96dc7811bb067f9a24d71c072dd4cc77651c6abdeb85838f9bc84e47fc47d"}, @INET_DIAG_REQ_BYTECODE={0x53, 0x1, "353e9de375f3965b09f26fed8126c0556efbb47184bcf5dbb7bcc869a78b7e4e48c3659238d2b37b075551ed1489c02f5c28b694136c8e3c78f8b32a1d7c7653fd9b4373efaf11426529eafd631cb1"}, @INET_DIAG_REQ_BYTECODE={0x3a, 0x1, "e21e8a2053e04b67328afdaaa8c5237feef7b21a1c41ba87aa93716bba8287bfd55de63e7d18111e182b6fa0a42616257c5449dcc36d"}]}, 0x129c}, 0x1, 0x0, 0x0, 0x40}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x14, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x18) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x2c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004010}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000015c0), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001680)={'gre0\x00', &(0x7f0000001600)={'syztnl1\x00', 0x0, 0x20, 0x40, 0x9, 0x2, {{0x9, 0x4, 0x2, 0x1, 0x24, 0x68, 0x0, 0x8, 0x4, 0x0, @remote, @private=0xa010102, {[@lsrr={0x83, 0xf, 0xb1, [@multicast1, @local, @private=0xa010100]}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000016c0)={0x0, @dev, @initdev}, &(0x7f0000001700)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000001840)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001800)={&(0x7f0000001740)={0x88, r3, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r6 = socket(0x11, 0x5, 0x261fd7a1) r7 = signalfd(r2, &(0x7f0000001880)={[0x4]}, 0x8) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000018c0)={0x2, {0x2, 0x0, 0x3, 0x1d8d, 0x0, 0x2}}) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000001900)={0x1, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f0000001c80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001c40)={&(0x7f00000019c0)={0x24c, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xe, 0x2b}}}}, [@NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="949045a938e027d4ef58a25172f3ae3a"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="8272a089d377b248ed458824dc1059f2514c22e24117d37db72639209014f9f9"}]}, @NL80211_ATTR_REKEY_DATA={0x74, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9dc7b8a1f06f0a905461390f8ba2429024cbd5fb020c2a659b61d8e1356c0499"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="c8cc698e59c8955d8c9ed50ab71fe8aa"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="23990854a7d75045659fa79f776e51f0"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b2656c3db1db5fe88c73539a0244f683"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "94c563eab297d73b"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="6b69a3aa9b108d20f6505548d9348ced"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="316507f134d952b9e436fc47cf081987"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="dced2e4bfa99fd4d5679e3b718a999fe"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2c4d2a9a3e035e8e"}]}, @NL80211_ATTR_REKEY_DATA={0x14, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x62}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "92d919666a5e3b57"}]}, @NL80211_ATTR_REKEY_DATA={0x84, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d137f25b09d67881d27d135913ced10c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5a94aff98fa3b7007a02a8800aa2366d53008ad14c9ca817"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="8ed7cb142d9efa42cdda162178fc5b1fe5dfa52d2e481598d45fe279fe21b4a9"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="7945d3ea1474d928d69033df5282d112d9df89fac8635ed22c77922f6e7988a4"}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="0e2211f3642f94aebea367d8b1f442b3"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="71bc521f50f3698aefd0a4a69be52a6cec84a2908d1a05785f224653707efbf2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f7eb70ea195760fb165338a09bec516d5dddae94fda063d0"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7ff}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}]}, @NL80211_ATTR_REKEY_DATA={0x4}]}, 0x24c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001d00)={0x4, &(0x7f0000001cc0)=[{0x1, 0xf, 0x7, 0x3}, {0x3, 0x7}, {0x6, 0x0, 0x4, 0xffff}, {0x9, 0x3, 0x8, 0x800}]}, 0x10) r9 = dup(r7) ioctl$XFS_IOC_READLINK_BY_HANDLE(r2, 0xc038586c, &(0x7f0000001e40)={r9, &(0x7f0000001d40)='mptcp_pm\x00', 0x0, &(0x7f0000001d80)={@align=0xaa, {0x2, 0x7fff, 0xf0000000}}, 0xe0b9, &(0x7f0000001dc0), &(0x7f0000001e00)=0x3ff}) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0xb) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r2) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r6, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x28, r11, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0x4d}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x815) ioctl$FITRIM(r9, 0xc0185879, &(0x7f0000001fc0)={0x1000, 0x800, 0x498e}) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000002000)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010100, 0x4e21, 0x8, 0x4e22, 0x8, 0xa, 0xa0, 0xa0, 0x2c, r5, 0xee01}, {0xa, 0xfff, 0x1, 0x2, 0x9, 0x0, 0x4, 0x7fff}, {0x9, 0x0, 0xd636}, 0x6, 0x6e6bb2, 0x1}, {{@in6=@remote, 0x4d5, 0xff}, 0x2, @in=@loopback, 0x3501, 0x4, 0x1, 0x4, 0xfffffffc, 0x9, 0x1}}, 0xe8) ioctl$ASHMEM_GET_NAME(r9, 0x81007702, &(0x7f0000002100)=""/4096) ioctl$PTP_CLOCK_GETCAPS(r7, 0x80503d01, &(0x7f0000003100)) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, &(0x7f0000003180)={{0x1, @broadcast, 0x4e22, 0x1, 'lc\x00', 0x2, 0x6, 0x30}, {@multicast1, 0x4e21, 0x0, 0x3c, 0x8, 0xfffffffd}}, 0x44) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r12, &(0x7f0000003300)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000032c0)={&(0x7f0000003280)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0xd1) 8.927260074s ago: executing program 0 (id=100): r0 = socket$packet(0x11, 0xa, 0x300) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x2, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/core/rps_default_mask\x00', 0x380, 0x0) pread64$ublk_bdev(r1, 0x0, 0x0, 0x3) mount(&(0x7f0000000140)=@filename='./dev/sda1\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000200)='./mnt\x00') (async) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40106614, &(0x7f0000000240)={0xb8, 0xffffffffffffffff, 0x61, 0x0, 0xd, 0x1}) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000280)=0xffffffe9, 0x4) (async) recvmsg(r0, 0x0, 0x2) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mysys\x00', 0x8ec5d82ac9a81a9c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, 0x0, &(0x7f0000000400)) r3 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r3, 0x0, 0x0) (async) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async) mount(0x0, &(0x7f0000000340)='./mysys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) (async) openat$dm_control(0xffffffffffffff9c, 0x0, 0x20000, 0x0) (async) ioctl$DM_DEV_CREATE(0xffffffffffffffff, 0xc138fd03, 0x0) (async) syz_ublk_setup_queues(r1, 0x0, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x404, 0x1, 0x0, 0xef}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x73ba, 0x1, 0x0, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b3ea, 0x10000, 0x1, 0x146, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x226d, 0xc008, 0x1, 0x26d, 0x0, r1}}], 0x1, 0x0, 0x0) (async) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x6) (async) mknodat$dm(0xffffffffffffff9c, &(0x7f00000003c0)='./dm0\x00', 0x6180, 0x0) (async) mknod(0x0, 0x8001420, 0x1) (async) ioperm(0x4, 0x8, 0x5) (async) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) (async) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) 8.916272526s ago: executing program 0 (id=101): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f0000000480)="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", 0x111, r0) 3.462042429s ago: executing program 3 (id=147): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(&(0x7f0000000540)='ext3\x00', 0x0) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x128}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa0}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000c00)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000c40)={'syzkaller1\x00', 0x1}) write$tun(0xffffffffffffffff, &(0x7f0000000c80)={@void, @val={0x0, 0x0, 0x5, 0xde6, 0x9, 0x401}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x33, 0x3c, 0x67, 0x0, 0xbd, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "946e8ae0e4e8b0e45499f8d6f4d68b73724035d2a58696dcf25a11074cd8a56ab4f77358fa406b78"}}, 0x46) 2.607180986s ago: executing program 3 (id=151): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)={0x1, 0x0, [{0x97defb495c47ee1c, 0x1000, &(0x7f0000001dc0)=""/4096}]}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000002dc0)=0x304000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000002e00)=0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) mknodat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x81c0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000000c0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) syz_clone3(&(0x7f0000000340)={0x38161100, 0x0, 0x0, &(0x7f00000003c0), {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.413132915s ago: executing program 3 (id=152): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1f7) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000100)='7', 0x1) ppoll(&(0x7f0000000140)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000b80), 0xffffffffffffff02, 0xa242) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000bc0)=0x3) dup3(r1, r2, 0x0) 1.766598111s ago: executing program 1 (id=156): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, 0xfffffffffffffffd, 0x4044014) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x18, 0x1d, 0x20, 0x70bd29, 0x25dfdbfd, "", [@XFRMA_SET_MARK={0x8, 0x1d, 0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x8050}, 0x4c000) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r2) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x208, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x80000001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x519}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2564000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x51000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0e0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x16a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x20044000}, 0x24008000) (async) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0xe, 0x6, 0x700, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, r5, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xa, 0x55}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}]]}, 0x58}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) r7 = syz_io_uring_setup(0x4a5c, &(0x7f0000000740)={0x0, 0xa6d7, 0x8, 0x1, 0x234}, &(0x7f00000007c0)=0x0, &(0x7f0000000800), &(0x7f0000000840)) (async) r9 = mmap$IORING_OFF_CQ_RING(0x0, 0x6, 0x1000001, 0x20010, 0xffffffffffffffff, 0x8000000) syz_io_uring_modify_offsets$flags(r8, r9, 0x68, 0x1) fstat(r7, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000300, r10, 0x0) (async) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r5, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x56}, @val={0x8, 0x3, r6}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48894}, 0x20000000) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000001640)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001600)={&(0x7f0000000a40)={0xbb8, 0x0, 0x5, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [{{0x254, 0x1, {{0x3, 0x5}, 0x5, 0x40, 0x1, 0x4, 0x7, 'syz1\x00', "aa689c820f122f8fafdaa654c29a6195208bd727a9976f0a084c94eca37650e7", "1ca873129762e59be6ffb5e75d031862f8e5e34f36183cc1daaf668b06b19aeb", [{0x1, 0x3, {0xaf97c3272b604d3e, 0x401}}, {0x4, 0x7, {0x3, 0x4}}, {0x9, 0x5, {0x3, 0x1}}, {0x3, 0xd, {0x0, 0x3}}, {0x3, 0x8, {0x1, 0x7}}, {0x9, 0x4}, {0x5, 0xff, {0x2, 0x7ff}}, {0x200, 0x7, {0x2, 0x80000001}}, {0x8, 0x6, {0x0, 0x9}}, {0x1, 0xf3d7, {0x3, 0x3}}, {0x2, 0x5, {0x0, 0x82}}, {0xd35, 0x1000, {0x2, 0x2f}}, {0x1, 0x2b, {0x3, 0xfffffff8}}, {0x7, 0x5, {0x0, 0x6}}, {0x2, 0x6, {0x0, 0x7fffffff}}, {0x5, 0x1ff, {0x2, 0x3}}, {0x1, 0x0, {0x1, 0xc000}}, {0x8001, 0x0, {0x0, 0x9}}, {0x8, 0x81, {0x1, 0x80000001}}, {0x0, 0x1, {0x1, 0x5}}, {0x5, 0xef, {0x3, 0x2}}, {0xf38f, 0x88d6, {0x1, 0x1ff}}, {0x2, 0x0, {0x3, 0x9}}, {0x800, 0x6, {0x0, 0xeb2}}, {0xff, 0x7, {0x0, 0xc0}}, {0x1, 0x1ff, {0x2, 0x4}}, {0x4, 0x8, {0x1, 0x7}}, {0x1ff, 0x9, {0x2, 0x5}}, {0x4, 0x5, {0x20a6dab5516f416f, 0x3}}, {0x6, 0x7fff, {0x2, 0x4}}, {0x0, 0x34b6, {0x0, 0x6}}, {0x3, 0x1, {0x1, 0x4}}, {0x4, 0x5, {0x1, 0x1}}, {0x5, 0xa98, {0x1, 0xfffffffc}}, {0x3, 0x5e9, {0x1, 0x5}}, {0x9, 0xa398, {0x1, 0x5}}, {0x1, 0x9, {0x2, 0xfffffe00}}, {0x8, 0x1}, {0xb9c, 0x2, {0x3, 0x2}}, {0x2, 0xf, {0x1, 0x5}}]}}}, {{0x254, 0x1, {{0x0, 0x4830}, 0xf7, 0x40, 0x7b, 0x0, 0x25, 'syz1\x00', "02aa20bbbba20b89557b7ec558eb4a5a5337c25e59e976f291568e440be51240", "532ea6c3d7d2fee3d48b7e3051dfc197c743b6645c7f04006f82de3cd5295067", [{0x2, 0x4, {0x1, 0x3}}, {0x4b, 0xfffd, {0x0, 0x4c12}}, {0x4, 0x6, {0x3, 0x9}}, {0x1, 0x4, {0x2, 0xa}}, {0x2, 0x5e, {0x1, 0x40}}, {0x2, 0x8, {0xe38bbb3254f01f79, 0xff2}}, {0x8, 0x3, {0x1}}, {0x1000, 0x2, {0x2, 0xf}}, {0x3, 0xfff, {0x0, 0x5}}, {0xd, 0x0, {0x3, 0xfffffff7}}, {0x9b, 0x1, {0x1, 0x34}}, {0xf, 0x9, {0xd7c19a732a27c57c, 0x3}}, {0x9, 0x1, {0x3, 0x5}}, {0x3, 0x0, {0x2, 0x8}}, {0x222, 0x3000, {0x0, 0x80}}, {0x5, 0x3b24, {0x1, 0x1e3}}, {0x4e, 0x7, {0x1, 0x7}}, {0x5, 0x1ac2, {0x0, 0x4}}, {0x10, 0xc0, {0x2, 0x3e2}}, {0x1, 0x6, {0x2, 0x10000}}, {0x800, 0x0, {0x2, 0x101}}, {0x27f, 0xfffc, {0x0, 0x7f}}, {0xa, 0x5, {0x0, 0xfffffa6b}}, {0x2, 0xfea, {0x3, 0x8}}, {0x0, 0x2, {0x2, 0x10001}}, {0xee65, 0x80, {0x0, 0x3}}, {0x7, 0x1314, {0x2, 0x1}}, {0x1, 0x9}, {0x7, 0x5, {0x2, 0x7}}, {0x652a, 0x6, {0x1, 0x5}}, {0x1, 0x1, {0x3, 0x3}}, {0x100, 0x8, {0x2, 0xa}}, {0x2, 0x5, {0x1, 0x5f87}}, {0x40, 0x3, {0x1, 0x3}}, {0x8, 0x2, {0x0, 0xffffffff}}, {0x5, 0x6, {0x1, 0xfff}}, {0x0, 0xbe, {0x3, 0x72}}, {0x5, 0xfff7, {0x0, 0xffffffff}}, {0x4, 0x2, {0x0, 0x4be}}, {0x6, 0xfc3b, {0x3, 0x4}}]}}}, {{0x254, 0x1, {{0x1, 0x6}, 0xb, 0x0, 0x119, 0x7, 0x16, 'syz1\x00', "1dc4c4a92b3f38a34429579d3ea79e7ccbdf5d49d83ab8e94d80656713b319d5", "2049f8f2e6a241944b23f3a13a687b32f098ab8eb5cadd1b2773d3c1ea1bb73e", [{0x0, 0xe, {0x2, 0x40000000}}, {0x100, 0x5, {0x1, 0xd6a}}, {0x3, 0x2, {0x1, 0x80000001}}, {0x2, 0x800, {0x1, 0x200}}, {0x0, 0x5f8, {0x1, 0x7}}, {0x6db, 0x7, {0x2, 0x101}}, {0x1, 0x6, {0x2, 0xd}}, {0x6, 0x8, {0x2, 0x1}}, {0x7d36, 0x2, {0x0, 0x1}}, {0x7, 0xfffd, {0x3, 0x7}}, {0xad, 0x0, {0x3}}, {0x2, 0xff, {0x0, 0x200}}, {0x19, 0xb, {0x2, 0x352}}, {0xb, 0x6, {0x0, 0xcba4}}, {0x9650, 0x6, {0x1, 0x6}}, {0x1, 0x1, {0x1, 0x2}}, {0xd, 0x0, {0x1, 0x3}}, {0x7fff, 0xff03, {0x1, 0xe}}, {0x7f, 0x7, {0x3, 0x6}}, {0x100, 0x2, {0x1, 0x6}}, {0x7, 0x3, {0x1, 0x7f}}, {0xa, 0x0, {0x1, 0xcd}}, {0x40, 0x7, {0x3, 0x1}}, {0x1895, 0x9, {0x1, 0x6}}, {0xb, 0x0, {0x1, 0x7}}, {0x4, 0xba9, {0x2, 0x1}}, {0xf5b3, 0xfff7, {0x2, 0x10000}}, {0x4, 0x28, {0x3, 0x10001}}, {0xaef, 0x4, {0x3, 0x6}}, {0x7, 0x6068, {0x1, 0x1000}}, {0x400, 0x8, {0x1, 0x9}}, {0x9, 0x0, {0x2, 0x4}}, {0x6, 0x96e9, {0x1, 0x5}}, {0x800, 0x2, {0x3, 0x1ff}}, {0xfff9, 0x9, {0x2, 0xffffffff}}, {0x7, 0x8f8, {0x3, 0x3}}, {0x5, 0x9, {0x0, 0xfffffffe}}, {0x5, 0x30, {0x0, 0x26e7}}, {0x1, 0x35d, {0x0, 0x200}}, {0x0, 0x1ff, {0x0, 0x172799d6}}]}}}, {{0x254, 0x1, {{0x1, 0x479}, 0x7, 0x8c, 0x40, 0x6, 0x1b, 'syz1\x00', "9e1b79f47e8fdc18296b179f9545a7bb45f7f9afe6aa2d1816e35e0d3d4903f2", "3f184d8827619d436f4c42ad7b8a8e5a2f19dbaddcd158d68e6dd9de1b34df5b", [{0x8000, 0x800, {0x0, 0x69}}, {0xc, 0x1, {0x0, 0x8}}, {0xfff7, 0xff, {0x3, 0x9664}}, {0x401, 0x99, {0x2, 0xff}}, {0x2, 0x6, {0x2, 0x7}}, {0x0, 0x85e9, {0x3, 0x1}}, {0xae0, 0x7, {0x2, 0x4}}, {0x79c2, 0xa, {0x0, 0x1}}, {0x8, 0x7fff, {0x1, 0x2}}, {0x9, 0x1ff, {0x1}}, {0x9, 0xe4ec, {0x1, 0x7}}, {0xffff, 0x8, {0x3, 0x58}}, {0x1ff, 0x2, {0x1, 0x6}}, {0x8, 0x8, {0x0, 0x2}}, {0x9, 0x8, {0x3, 0x10000}}, {0x0, 0x18a, {0x3, 0x9}}, {0x100, 0x6, {0x3, 0x2}}, {0x2, 0x6, {0x2, 0x2}}, {0x2, 0x7f, {0x258f29c4abb28c31, 0x4}}, {0x8, 0xd00, {0x1, 0xfffffff8}}, {0x6, 0x33e, {0x2}}, {0x4, 0x1, {0x3, 0xfffffff8}}, {0x2, 0x6, {0x2, 0x3f2b0dba}}, {0x29b, 0x9576, {0x2, 0x7}}, {0x7fff, 0xfff8, {0x1, 0x10}}, {0x2, 0xe6, {0x1, 0x100}}, {0x20e3, 0x0, {0x3, 0x8}}, {0x8e0, 0x5, {0x1, 0x5}}, {0x2, 0x0, {0x1, 0x1}}, {0x203f, 0x8001, {0x0, 0x5}}, {0x401, 0x2, {0x3, 0x82}}, {0x4, 0x81, {0x2, 0x1}}, {0xb, 0x4, {0x2, 0x5}}, {0x6, 0x9, {0x0, 0x4}}, {0x9, 0x70, {0x0, 0xa000000}}, {0x6, 0x8, {0x0, 0x4}}, {0x8c, 0xf, {0x3, 0x6}}, {0x3, 0x8, {0x2, 0xfb}}, {0xd9c, 0xff, {0x1, 0x7}}, {0xfffc, 0x930, {0x1}}]}}}, {{0x254, 0x1, {{0x2, 0x3}, 0xfe, 0x0, 0x2, 0x7, 0x1b, 'syz0\x00', "973f4f0e628069176eb0ae0709298f47933a67d0ff1555b0c40dd46d63a3e8b1", "d9fa6ef7a287617a2cf58e7955c29a682233085ab4bd449dd609c833907652d9", [{0xb, 0x9, {0x1, 0x7}}, {0xd5df, 0x9, {0x0, 0x3}}, {0x5, 0xaf, {0x0, 0x5c000000}}, {0x6, 0x5, {0x2, 0x7}}, {0x6, 0x9, {0x1, 0x6}}, {0x2, 0x8001, {0x2, 0xfffffff1}}, {0xea00, 0xc, {0x2, 0x60000000}}, {0x430, 0x5, {0x2, 0xf85}}, {0x9, 0xfffa, {0x3, 0x68}}, {0xf, 0x7, {0x1}}, {0xbe7, 0x0, {0x0, 0x3}}, {0x0, 0xc440}, {0x8, 0x8, {0x0, 0x9}}, {0x5e6, 0xda8, {0x3, 0x4}}, {0x6, 0x793, {0x3, 0x3}}, {0x8000, 0x7, {0x0, 0x3}}, {0x0, 0x2, {0x0, 0x3ff}}, {0x2, 0x7, {0x3, 0x7}}, {0x4, 0xe2, {0x1, 0x88}}, {0x4, 0xa0aa, {0x0, 0x7fff}}, {0x7fff, 0xbbb}, {0x4, 0x1ff, {0x0, 0x6}}, {0x5, 0x7fff, {0x3, 0x30d9}}, {0x38, 0x8001, {0x0, 0xffff9e8e}}, {0x52, 0x8, {0x0, 0x8}}, {0xa83e, 0x5, {0x1, 0x1}}, {0x80, 0x8, {0x1, 0x5}}, {0x0, 0xb91, {0x3, 0x2800000}}, {0x9, 0x3b, {0x3, 0x3}}, {0x6, 0x9, {0x3, 0x80000001}}, {0x0, 0x7f, {0x1, 0xf}}, {0x3, 0x1200, {0x2, 0x8}}, {0x4, 0x1bf, {0x0, 0x6}}, {0x0, 0x5, {0x3}}, {0x3554, 0x2000, {0x3, 0x1000}}, {0x8, 0x3ff, {0x1, 0x54}}, {0x7cb, 0xfffe, {0x1, 0x3ff}}, {0x3, 0x7fff, {0x0, 0x5}}, {0x7, 0x10, {0x2, 0x8000}}, {0x0, 0x40, {0x2, 0x42}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x1}, 0x44811) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001700)={'erspan0\x00', &(0x7f00000016c0)={'sit0\x00', 0x0, 0x40, 0x20, 0xabf0, 0x5, {{0x6, 0x4, 0x1, 0x15, 0x18, 0x67, 0x0, 0x3e, 0x2f, 0x0, @multicast1, @multicast2, {[@end]}}}}}) sendmsg$nl_xfrm(r1, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)=@delpolicy={0x58, 0x14, 0x200, 0x70bd27, 0x25dfdbfe, {{@in=@empty, @in=@loopback, 0x4e21, 0x0, 0x4e21, 0x0, 0xa, 0x20, 0x0, 0x3b, r11, r10}, 0x6e6bb7, 0x2}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r12, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x14, r5, 0x800, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001940)={0x3c, 0x5, '\x00', [@pad1, @hao={0xc9, 0x10, @private1}, @pad1, @pad1, @hao={0xc9, 0x10, @mcast1}]}, 0x38) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001c00)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001bc0)={&(0x7f00000019c0)={0x1cc, r4, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x180000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0x104, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x90}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x312c}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2240}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x675}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x40801}, 0x44010) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x60, 0x3, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_STATUS={0x8}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001dc0), r3) sendmsg$TIPC_NL_NODE_GET(r12, &(0x7f0000001f80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001e00)={0x12c, r13, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x45c25738}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeab}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6d5a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7b}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x769}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40}, 0x2004c000) (async) sendmsg$nl_generic(r3, &(0x7f0000003440)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003400)={&(0x7f0000002000)={0x13e8, 0x12, 0x200, 0x70bd26, 0x25dfdbfb, {0x8}, [@typed={0x8, 0xed, 0x0, 0x0, @u32=0x7}, @nested={0x157, 0x8, 0x0, 0x1, [@typed={0x8, 0xce, 0x0, 0x0, @uid=r10}, @typed={0x14, 0x88, 0x0, 0x0, @ipv6=@private0}, @nested={0x4, 0x49}, @generic="049ce5f583e8efd3ee6582e46736a6a010c12bd8d72f9e8d1fe061944c8223dc1f39cfd6f1486ca5b4", @typed={0xc, 0xe3, 0x0, 0x0, @u64=0x80000001}, @generic="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"]}, @nested={0xf3, 0x9a, 0x0, 0x1, [@generic="816302a564ce3db5923d9609279509172bdb8f2e01d5eeaaf8588a7a1f4f6536ab21c70049df306226fb7aa6eec3f254bd8f9f35949c12c0a0982caa83533ae2108331d8b43c681a1f371dd2d7f445da4ac107cff6f9a8d142940950c1751c984546d60264b3dc082834b1b93d054386d2c336f6fea7e502d9cf44d1e0bd0e3006d04b099af198fba269fc1c850216b9f96276a089020ef37ffd45b901a7a9600a12dc5a9c93b49613a3b5aa1206bb85a455b866368468ee9e3db1aed56a5476b1d18a78f220d76e8c4c61615dfb8209d6728f326faee3e392b67ec27954a006992969ed91d05c", @nested={0x4, 0x152}, @nested={0x4, 0x6}]}, @nested={0x115b, 0x9, 0x0, 0x1, [@nested={0x4, 0x7e}, @generic="d3d99b88c17ef8fb836e9a1042c5d5a2e5afd6d02fb919ac6f4698406e4a2325fe6a32fcedc212937822441d1ec9ca2650a6726f62aedcec9143eb3d828357446db8f7753c2f41d2984b7c3456e6dc9983f388ef5d29db019966bfbc3f7c89050a9dd63d1696c6b3e4e451473ba0a0bf636bfe5ba8688bf86930f54eff67085ecd867cdf0aff43b8a013864fc8aa", @generic="ca6b7873f6e79e876b24ff5afc58466f620a537d99db26eac7aea568c7091ce81ca0d66e8d7b9218899befa34b018a81f965e2603c43eb1e0f73b795ec49856a9d7ab95e3f083658a5b81c051da0d9ce6808bcc80771cb72ad059788aa03b850d442b7830a038430791def22fe2b3192c67d631d831258ab74167811214a5baa43ea20edda5149dad732fcb13a237194d35e0dd6a898414713f9e214cc5c2fb84a620547f6247da1b95f54cbf6294629227efee97ce441d412a7eee3e7", @typed={0x4, 0xca}, @generic="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", @typed={0x4, 0x3f, 0x0, 0x0, @binary}]}, @nested={0x21, 0xf0, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @uid=r10}, @generic="4df88bc710a39190acd8f881e2", @nested={0x4, 0x9f}, @nested={0x4, 0x141}]}]}, 0x13e8}, 0x1, 0x0, 0x0, 0x40004}, 0x20008800) 1.712777866s ago: executing program 1 (id=159): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(&(0x7f0000000540)='ext3\x00', 0x0) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x128}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa0}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000c00)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000c40)={'syzkaller1\x00', 0x1}) write$tun(0xffffffffffffffff, &(0x7f0000000c80)={@void, @val={0x0, 0x0, 0x5, 0xde6, 0x9, 0x401}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x33, 0x3c, 0x67, 0x0, 0xbd, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "946e8ae0e4e8b0e45499f8d6f4d68b73724035d2a58696dcf25a11074cd8a56ab4f77358fa406b78"}}, 0x46) 1.620682106s ago: executing program 2 (id=164): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@updpolicy={0x17c, 0x19, 0x1, 0xfffffffd, 0x25dfdbff, {{@in6=@mcast1, @in=@remote, 0x4e20, 0x0, 0xf7ff, 0x3, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffff5, 0x0, 0xffffffffffffffff, 0x1000, 0x0, 0xf}, {0x3, 0x6, 0x80}, 0x9, 0x0, 0x1, 0x0, 0x3}, [@tmpl={0xc4, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in6=@mcast2, 0x80003502, 0x0, 0x2, 0x0, 0x0, 0xbd0}, {{@in6=@remote, 0x0, 0x3c}, 0xa, @in=@private=0xa010100, 0xfffffffd, 0x1, 0x2, 0x0, 0x800, 0x800, 0xffffffff}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3c}, 0x0, 0x2b}, 0xa, @in=@rand_addr=0x64010101, 0x3502, 0x1, 0x0, 0x4, 0x8, 0x0, 0xfffffffd}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20002884}, 0x800) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000), 0x4) r2 = syz_open_procfs(0x0, 0x0) inotify_add_watch(r2, &(0x7f00000003c0)='./file0\x00', 0x20002f8) syz_usb_connect$uac3(0x0, 0xa6, &(0x7f0000000100)=ANY=[@ANYBLOB="12010102000000408c0d010240000102030109029400031585b78d00bcea60017fc00808018001010130230904000000010130000a240110300060fa0000132403050504030404878c00000100f4410600132403040204130008030000000600080006000904010000010230000904010101010230000905010960002503020a2525050400000500800904020000010230000904020101010230000905820910007408c00a25"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x6, &(0x7f00000000c0)=ANY=[]}]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) 1.616034027s ago: executing program 3 (id=165): r0 = syz_clone(0x8010091, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x763, 0x2001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x8, 0x1c0, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xbd, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x5, 0x80, 0x8, {0x7, 0x25, 0x1, 0xc, 0xe1, 0xf90b}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x97, 0x40, {0x7, 0x25, 0x1, 0x4, 0x4, 0x4}}}}}}}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff01, 0x0) 909.778558ms ago: executing program 1 (id=166): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_usb_connect$uac2(0x5, 0x9f, &(0x7f0000000400)=ANY=[@ANYBLOB="12010003000000206307032040000102030109028d00030104007f080b0101010a20020904000000010120000924010500061500b20c24030500040a25007f0080090401000001022000090401010101022000082402010403020610240105050001100000050500004001090501090002"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x40, &(0x7f0000000380)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) r2 = syz_usb_connect(0x3, 0x32, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001010080320904000002080650000705810200020007050202"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000340)={0x0, 0x17, 0x2, "25b9"}, 0x0, 0x0, 0x0, 0x0}) getrandom(&(0x7f0000000000)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_usb_control_io(r2, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="4017f10000005f0652011ec77d717b1e6c3371eccf34449a43bf289520a6d4b628aaed08d34cb73aac933f582a7a1713979bc6ae05d7a954aa8e8b7738debcd2b2bba41d67054e3f0216b9c7e6f62d148afeab4840ee53820e2e6ba82e025dfe08874391ebd45df21d2257d2b90f44996bc052d295cbe9422057c80610752c275022004e08381e27eef908d38e003a80732de374e342b0129be14862e65a13748ded49b704b105b914e70d61eea38c364b95ef302e60d2922e32b4afc75650716e3b8d99b0cbf1b19b0df57fa0853c040000002ca20d112cacd8f07d95228128f2144ee20fbb4a2889b5f1def03d4267f1cb1446bb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 428.825517ms ago: executing program 2 (id=167): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{0x18, 0x1, 0x1, 'b'}], 0x18}}], 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) dup(r1) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000001000/0x12000)=nil) fchmod(r1, 0x123) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) 419.546938ms ago: executing program 3 (id=168): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x180) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stack\x00') getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/219, 0xdb) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)='deny', 0x4}], 0x1) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) symlink(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000c00)='./file1\x00') mkdir(&(0x7f0000000c40)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c80)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00), 0x8, &(0x7f0000000d40)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$bind(0x0, &(0x7f0000000d80)='./file0/file1\x00', 0x0, 0x4, 0x0) write(r1, &(0x7f00000003c0)='7', 0x1) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x890c, 0x0) socket(0x28, 0x5, 0x0) 413.475818ms ago: executing program 2 (id=169): r0 = socket$vsock_stream(0x28, 0x1, 0x0) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f00000000c0)={0x4, 0x4, 0x120000}, 0x20) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='qnx4\x00', 0x200400, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='100', 0x3) (async) syz_clone3(&(0x7f00000003c0)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f00000004c0)=[{0x3, 0x6, 0xf8, 0x5d0aebcf}]}, 0x4) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc_mnt/asound/pcm\x00', 0x20440, 0x142) read(r4, &(0x7f0000000280), 0x100) (async) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000000200)) (async) openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x2042, 0x19d) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', r5, &(0x7f00000005c0)='./file1\x00', 0x5) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r6, 0x88, 0x8, 0x0, 0x0) (async) unlinkat(r5, &(0x7f0000000600)='./file0\x00', 0x0) (async) r7 = memfd_secret(0x80000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x0, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000700)=@any_dev={0x1, 0x10f, 0x0, 0x0, 0x1000, 0x7c3}}}, &(0x7f0000000740)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r7, 0x800c6613, &(0x7f0000000780)=@v2={0x2, @adiantum, 0x8, '\x00', @b}) (async) creat(&(0x7f0000000640)='./file0\x00', 0x6a) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000040)=0x23, 0x8) (async) sendmsg$inet6(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x39}, 0x4040083) openat$sysfs(0xffffff9c, &(0x7f0000000180)='/sys/power/wake_unlock', 0x2b8040, 0x102) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r8, 0x29, 0x40, &(0x7f00000001c0)=ANY=[], 0xd0060) mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000140), 0x2010080, &(0x7f0000000080)=ANY=[@ANYBLOB="69874b0a82125d4ad4468d4c8a4d1f0fb1098852606c7de9cf97a9fc29cfb5abca6102d4c02079f020a844a2929fa5471e22", @ANYBLOB=',seclabel,\x00']) 98.339861ms ago: executing program 1 (id=170): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x82001, 0x0) mknod$loop(&(0x7f0000000240)='./file0\x00', 0x6000, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0x6, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004048, &(0x7f0000000200)={0xa, 0x4e20, 0x80000, @remote, 0x4}, 0x1c) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x26) ioctl$BLKTRACESTART(r2, 0x1269, 0x100000000000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_adjtime(0x4, &(0x7f0000000080)={0xb, 0x86, 0xfffffffffffffffe, 0x9, 0x7, 0xb, 0x651, 0xffffffff, 0x5, 0x0, 0x7fffffff, 0x0, 0x0, 0xb, 0x3, 0xcc3, 0x1, 0x1, 0x3, 0x3, 0xfffffffd, 0x8, 0x8, 0xffffffffffffffff, 0x3, 0x6}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x82001, 0x0) (async) mknod$loop(&(0x7f0000000240)='./file0\x00', 0x6000, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0x6, 0x4) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) (async) socket$inet6(0xa, 0x400000000001, 0x0) (async) sendto$inet6(r1, 0x0, 0x0, 0x20004048, &(0x7f0000000200)={0xa, 0x4e20, 0x80000, @remote, 0x4}, 0x1c) (async) creat(&(0x7f0000000280)='./file0\x00', 0x26) (async) ioctl$BLKTRACESTART(r2, 0x1269, 0x100000000000000) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) clock_adjtime(0x4, &(0x7f0000000080)={0xb, 0x86, 0xfffffffffffffffe, 0x9, 0x7, 0xb, 0x651, 0xffffffff, 0x5, 0x0, 0x7fffffff, 0x0, 0x0, 0xb, 0x3, 0xcc3, 0x1, 0x1, 0x3, 0x3, 0xfffffffd, 0x8, 0x8, 0xffffffffffffffff, 0x3, 0x6}) (async) 97.150071ms ago: executing program 2 (id=171): mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./mnt\x00', 0x1ff) mount(&(0x7f0000000780)=@filename='./dev/sda1\x00', &(0x7f00000007c0)='./mnt\x00', 0x0, 0x8410, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) accept(r0, &(0x7f0000000140)=@generic, &(0x7f00000001c0)=0x80) chdir(&(0x7f0000000840)='./mnt\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./mnt\x00', 0x0, 0x21) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffff3) setuid(r2) r4 = fsopen(&(0x7f00000004c0)='pipefs\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x40042, 0x1) close(r5) mount$9p_fd(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) syz_ublk_setup_queues(r5, 0x0, &(0x7f0000000600)={0x0, 0xd57e, 0x4, 0x3, 0x154}, &(0x7f0000000940)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc4c0, 0x22812, 0x2, 0x98, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x86c9, 0x1, 0x3, 0x2e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe859, 0x2000, 0x2, 0xf4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeee7, 0x10010, 0x1, 0x176, 0x0, r1}}], 0x4, &(0x7f0000001bc0)={0x2e, 0x40, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xc}, 0x0, 0x0, '\x00', {0x0, 0xea1, 0x0, &(0x7f0000000bc0)=@buf_4k="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"}}, &(0x7f0000001c40)) prctl$PR_SET_MM_EXE_FILE(0x39, 0xd, 0xffffffffffffffff) setreuid(0xffffffffffffffff, 0xee01) r7 = open(&(0x7f0000000000)='./file2\x00', 0x81, 0x10dd722b6e14c3dd) r8 = creat(&(0x7f0000000200)='./dev/file0\x00', 0x88) r9 = dup2(r7, r8) ioctl$BLKTRACESETUP(r9, 0x40081271, 0x0) ioctl$AUTOFS_IOC_FAIL(r9, 0x9361, 0x7) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000008c0)=@v2={0x2, @aes256, 0x3, '\x00', @auto="5b6470438f31fdddeac2337f8fb6fab6"}) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2) 96.916831ms ago: executing program 1 (id=172): mount$incfs(&(0x7f0000006640)='./file0\x00', &(0x7f0000006680)='./file0\x00', &(0x7f00000066c0), 0x80, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000006700)='./file0\x00', 0x0, 0x8c) openat$cgroup_pressure(r0, &(0x7f0000000500)='memory.pressure\x00', 0x2, 0x0) 96.343391ms ago: executing program 1 (id=173): r0 = syz_io_uring_setup(0x240, &(0x7f0000000000)={0x0, 0xfd35, 0x2, 0x0, 0x307}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x20010, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f00000001c0)="84", 0x1, 0x20008005, &(0x7f0000000200)={0x2, 0x4e20}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000240)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0xa, 0x3c1b, 0x1, 0x24, 0x800000d, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x9, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0xfffffff9, 0x1, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0x3, 0xaff, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x3, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x3, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x7, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0xffff8001, 0x47, 0x31f3, 0x1, 0xfe000000, 0xfffe, 0x202, 0x4, 0x5, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x0, 0x1, 0x5, 0x8, 0x4, 0x5, 0xffffffff, 0x4, 0x1ed, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x802, 0x3, 0x20000008, 0x4004, 0xffffff11, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x3, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x6, 0x3, 0x7ff, 0x12b, 0x4, 0x40000001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x9a09, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x2, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x9, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x5, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x1, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x0, 0x100, 0x9602, 0x7, 0xaf, 0x6fcb, 0x6, 0x1, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1e, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3440, 0xfff]}, 0x45c) ppoll(&(0x7f00000006c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc294, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x20, "", [{{0x9, 0x4, 0x0, 0x15, 0x2, 0x3, 0x0, 0x4, 0x0, {0x9, 0x21, 0x1001, 0xb, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7d, 0x5, 0x9}}}}}]}}]}}, 0x0) 95.699301ms ago: executing program 2 (id=174): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fsync(r1) write(r0, &(0x7f0000000440)='100', 0x3) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="5700000029945428f0c1c1f7d31ed4b2ed6d797e93c659ade3be94e68c7d985971aedd81fb7067d641a71c28ec08dc31f82e8ef1376a0f05b7fcde8e627e1cbb81ea9965ec656c1d85b3bb9ae47345d72207126f4aad414f8361aa46a1ff341e5b8b946060afaf16eca1c40ca324e76a115084d023208284bf2b1f8ab418122377f2f6d497ff48bf304b4746ccc85861316235217175b53665f51e244b515dad1ca689ab3ddebf6f8c771264735d75adc60c1bc87e7be8791c43a7d8e158560725a2bc979995557821eb6f", @ANYRES64=r0], 0x54}, 0x1, 0x0, 0x0, 0x7feba60fbc8b846b}, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000000040)=""/54, 0x7ffff000}, {&(0x7f0000000480)=""/152, 0x98}], 0x2, &(0x7f0000000540)=[{&(0x7f00000005c0)=""/95, 0x7ffff000}], 0x286, 0x0) 95.297141ms ago: executing program 3 (id=175): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x6b, 0xee, 0x38, 0x40, 0x9b98, 0xca47, 0x1987, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0xf0, 0x0, 0x0, 0x2, 0xc, 0x7, 0x2c}}]}}]}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x40, 0x0, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}]}, 0x40}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x5b, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x1, 0x1, 0xa, 0x40, 0x8, "", [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0xcc, {{0x8, 0x24, 0x6, 0x0, 0x0, "2d17c5"}, {0x5, 0x24, 0x0, 0x9a}, {0xd, 0x24, 0xf, 0x1, 0x2355, 0x1, 0xff, 0xb}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0xfd, 0x2}, @acm={0x4, 0x24, 0x2, 0xc}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x3, 0x6, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0x5, 0x7}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x7, 0xd, 0x7, 0x10, 0x9}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x6, [{0x101, &(0x7f0000000140)=@string={0x101, 0x3, "2c4b584f28472487330336058cea52d01b7e547d76eee56f67f539a0676744ed9425c5f63d8413b4798e714bf6b0839f2a63ba91c5af7d469538de5bfc4f8c2c32d08588ed9bdeb3d363759e1758beed46ea96392ddb74f86f425078f3f186aea402f47a0d8211e007831c020410ebe793045b6adb9b53689807b3ab90e9331b08ea1c7c5cc12659a254dec665ac6cbff3a06cd524c678fab3cb59a1ca1c38f8b7a058352944faebc17f735b175513af067fcc311e1e270355269678dc89ee894579886bf79b9d7b6a03d15eb503afa855413c5cce87b88db26778ce6a7e7e46dcbb12312e6c917ab4c28dca3de50e1b8dd172cfdf9fe18b70035d26050687"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x804}}, {0x4d, &(0x7f00000002c0)=@string={0x4d, 0x3, "6d9b4caebafdb9038ed0d8f3c4f37e40390bcf3c7f5fd826c850d7672512bce2f03056837dcb21d6bda0ff66d734a32c901bf89dac9a95cd157e47e69a3e29f4a04618e04d05c11aa9a11d"}}, {0xac, &(0x7f0000000340)=@string={0xac, 0x3, "0d1fd746236f0f7e46c2bd8f23cc469f4c0790f31c6c1d3dea138177321bf98a2bf125a9d80661a5780c4a7a4b4b4557f5652d3321f59ecfa087cb242c9221c48e4be41bbca288e25f4f8209cedbe326cb86946ab566055f3d0810b6a1530b16a9359f623daf243396fa48e32e2cab232cf5b2033753e507e957d6b83f3ae75153e5f1d73cc8f03d07a30b24e51c0dead0befddf1629adab725a572679d142cf038f994c8d194abff4af"}}, {0xdd, &(0x7f0000000400)=@string={0xdd, 0x3, "7a482648bd97868aad7df602961216e6f170a121c8bcdd8fe22c5cee49a98d630d6a08b46c88a5a66e8e201fa46d3c8b0db8b7155296be856b00d2db1f87a1e0726e00804b04b4904d66ba10a71547f5682f2707d5437a511969d1e841e273c49c2a9a0a29173eed64fbbcb0a2fe8ac17f40b36ed5e1b091e2342897952caba96ad521a1a949036a1b373dbcc8c1e08423b3f2b4b96053c624588d22aad8fff69763a6a3a309028c1f1b8c2bf7023e1e349ebf781a185969f9d94a8b2196a9d62818ae468b49d1b37f9d71969b4cc6335fcebcdfe61f403e018445"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x427}}]}) 0s ago: executing program 2 (id=176): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000b40)={0x4, 0x0, 0x0, 0x188, 0x138, 0x1, 0x0, 0x1800, 0x0, 0x0, @by_dev={r1}, [@snapshot={0x0, 0x10, 0x0, 0x50, 'snapshot\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram_num={'1:', 0x0}, 0x20, 'P', 0x20, '8'}}]}) ioctl$DM_DEV_REMOVE(r0, 0xc138fd04, &(0x7f0000000700)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_DEPS(r0, 0xc138fd0b, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x148, 0x138, 0x0, 0x0, 0x81210, 0x0, 0x0, @by_dev={r1}, "97ef39bc8324dbb5f3528b"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.177' (ED25519) to the list of known hosts. [ 21.774074][ T36] audit: type=1400 audit(1794002247.250:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.797024][ T36] audit: type=1400 audit(1794002247.280:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.797895][ T286] cgroup: Unknown subsys name 'net' [ 21.824747][ T36] audit: type=1400 audit(1794002247.300:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.825241][ T286] cgroup: Unknown subsys name 'devices' [ 21.922854][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.928451][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.080632][ T36] audit: type=1400 audit(1794002247.550:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.103833][ T36] audit: type=1400 audit(1794002247.550:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.105837][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.128940][ T36] audit: type=1400 audit(1794002247.550:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.160258][ T36] audit: type=1400 audit(1794002247.620:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.185725][ T36] audit: type=1400 audit(1794002247.620:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.212366][ T36] audit: type=1400 audit(1794002247.690:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.237955][ T36] audit: type=1400 audit(1794002247.690:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.238211][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.939252][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.961194][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.968327][ T293] bridge_slave_0: entered allmulticast mode [ 22.975899][ T293] bridge_slave_0: entered promiscuous mode [ 22.983009][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.990040][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.997137][ T293] bridge_slave_1: entered allmulticast mode [ 23.003394][ T293] bridge_slave_1: entered promiscuous mode [ 23.135837][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.142909][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.150166][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.157199][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.169645][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.176703][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.183889][ T297] bridge_slave_0: entered allmulticast mode [ 23.190000][ T297] bridge_slave_0: entered promiscuous mode [ 23.199177][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.206267][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.213378][ T297] bridge_slave_1: entered allmulticast mode [ 23.219488][ T297] bridge_slave_1: entered promiscuous mode [ 23.230630][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.237675][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.244759][ T298] bridge_slave_0: entered allmulticast mode [ 23.250862][ T298] bridge_slave_0: entered promiscuous mode [ 23.259777][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.266850][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.273997][ T298] bridge_slave_1: entered allmulticast mode [ 23.280118][ T298] bridge_slave_1: entered promiscuous mode [ 23.295072][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.302121][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.309151][ T299] bridge_slave_0: entered allmulticast mode [ 23.315380][ T299] bridge_slave_0: entered promiscuous mode [ 23.324351][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.331393][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.338423][ T299] bridge_slave_1: entered allmulticast mode [ 23.344536][ T299] bridge_slave_1: entered promiscuous mode [ 23.466450][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.473515][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.480766][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.487798][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.504269][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.511326][ T299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.518573][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.525633][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.536263][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.543324][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.550573][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.557612][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.575575][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.583087][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.590359][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.597589][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.604939][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.612191][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.619361][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.626884][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.651780][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.658807][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.666505][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.673530][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.688497][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.695540][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.704432][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.711476][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.723864][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.730891][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.738495][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.745531][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.779024][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.786072][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.793704][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.800736][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.818331][ T298] veth0_vlan: entered promiscuous mode [ 23.838726][ T298] veth1_macvtap: entered promiscuous mode [ 23.849480][ T293] veth0_vlan: entered promiscuous mode [ 23.867563][ T297] veth0_vlan: entered promiscuous mode [ 23.877548][ T293] veth1_macvtap: entered promiscuous mode [ 23.890476][ T297] veth1_macvtap: entered promiscuous mode [ 23.915327][ T298] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.943499][ T299] veth0_vlan: entered promiscuous mode [ 23.969582][ T313] tipc: Started in network mode [ 23.974583][ T313] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 23.982331][ T313] tipc: Enabled bearer , priority 0 [ 23.989749][ T299] veth1_macvtap: entered promiscuous mode [ 24.037899][ T313] tipc: Disabling bearer [ 24.059929][ T321] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.254814][ T333] netlink: 'syz.2.6': attribute type 16 has an invalid length. [ 24.266172][ T340] netlink: 'syz.2.6': attribute type 16 has an invalid length. [ 24.859575][ T348] tipc: Can't bind to reserved service type 1 [ 25.065610][ T356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=76 sclass=netlink_route_socket pid=356 comm=syz.1.11 [ 25.080723][ T356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=76 sclass=netlink_route_socket pid=356 comm=syz.1.11 [ 25.097280][ T356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=76 sclass=netlink_route_socket pid=356 comm=syz.1.11 [ 25.097499][ T367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.109784][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.129125][ T356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=76 sclass=netlink_route_socket pid=356 comm=syz.1.11 [ 25.141794][ T356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=76 sclass=netlink_route_socket pid=356 comm=syz.1.11 [ 25.154968][ T356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=76 sclass=netlink_route_socket pid=356 comm=syz.1.11 [ 25.161228][ T367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.167648][ T356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=76 sclass=netlink_route_socket pid=356 comm=syz.1.11 [ 25.194992][ T356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=76 sclass=netlink_route_socket pid=356 comm=syz.1.11 [ 25.207604][ T356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=76 sclass=netlink_route_socket pid=356 comm=syz.1.11 [ 25.220103][ T356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=76 sclass=netlink_route_socket pid=356 comm=syz.1.11 [ 25.312223][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.344697][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 25.358254][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.374302][ T10] usb 1-1: Product: syz [ 25.383937][ T10] usb 1-1: Manufacturer: syz [ 25.391090][ T10] usb 1-1: SerialNumber: syz [ 25.395970][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.409345][ T10] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 25.416096][ T10] cdc_wdm 1-1:1.0: Unknown control protocol [ 25.416138][ T372] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 25.430053][ T372] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 25.541339][ T45] usb 3-1: device descriptor read/64, error -71 [ 25.689608][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 25.689698][ T310] usb 1-1: USB disconnect, device number 2 [ 25.696232][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 25.696251][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 25.696955][ T344] cdc_wdm 1-1:1.0: Tx URB error: -19 [ 25.791068][ T45] usb 3-1: device descriptor read/64, error -71 [ 25.976450][ T382] block device autoloading is deprecated and will be removed. [ 26.031284][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 26.161087][ T45] usb 3-1: device descriptor read/64, error -71 [ 26.259149][ T391] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 26.267387][ T392] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 26.421087][ T45] usb 3-1: device descriptor read/64, error -71 [ 26.531561][ T45] usb usb3-port1: attempt power cycle [ 26.701096][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.847347][ T36] kauditd_printk_skb: 86 callbacks suppressed [ 26.847363][ T36] audit: type=1400 audit(1794002252.320:160): avc: denied { getopt } for pid=409 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 26.856169][ T412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27'. [ 26.880454][ T36] audit: type=1400 audit(1794002252.340:161): avc: denied { bind } for pid=411 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.881607][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 26.902530][ T36] audit: type=1400 audit(1794002252.340:162): avc: denied { setopt } for pid=411 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.931302][ T36] audit: type=1400 audit(1794002252.350:163): avc: denied { mount } for pid=409 comm="syz.0.26" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 26.954764][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.964180][ T36] audit: type=1400 audit(1794002252.350:164): avc: denied { read } for pid=409 comm="syz.0.26" dev="nsfs" ino=4026532297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.967987][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 26.986657][ T36] audit: type=1400 audit(1794002252.350:165): avc: denied { open } for pid=409 comm="syz.0.26" path="net:[4026532297]" dev="nsfs" ino=4026532297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.996282][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.018900][ T36] audit: type=1400 audit(1794002252.350:166): avc: denied { create } for pid=409 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.048820][ T45] usb 3-1: device descriptor read/8, error -71 [ 27.055984][ T10] usb 4-1: config 0 descriptor?? [ 27.058747][ T36] audit: type=1400 audit(1794002252.350:167): avc: denied { mount } for pid=409 comm="syz.0.26" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.082266][ T36] audit: type=1400 audit(1794002252.380:168): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.108359][ T422] capability: warning: `syz.0.31' uses deprecated v2 capabilities in a way that may be insecure [ 27.111256][ T36] audit: type=1400 audit(1794002252.410:169): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 27.142269][ T426] FAULT_INJECTION: forcing a failure. [ 27.142269][ T426] name failslab, interval 1, probability 0, space 0, times 0 [ 27.154958][ T426] CPU: 1 UID: 0 PID: 426 Comm: syz.0.32 Not tainted syzkaller #0 7b276d656437cde817a152a655ee87c3d6174d21 [ 27.154986][ T426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 27.155005][ T426] Call Trace: [ 27.155011][ T426] [ 27.155019][ T426] __dump_stack+0x21/0x30 [ 27.155043][ T426] dump_stack_lvl+0x140/0x1c0 [ 27.155060][ T426] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.155080][ T426] dump_stack+0x19/0x20 [ 27.155096][ T426] should_fail_ex+0x3c2/0x510 [ 27.155114][ T426] should_failslab+0xac/0x100 [ 27.155134][ T426] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 27.155160][ T426] ? x64_sys_call+0x28d8/0x2ee0 [ 27.155179][ T426] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.155211][ T426] ? sidtab_sid2str_get+0x135/0x360 [ 27.155235][ T426] kmemdup_noprof+0x31/0x80 [ 27.155256][ T426] sidtab_sid2str_get+0x135/0x360 [ 27.155280][ T426] security_sid_to_context_core+0x30d/0x5d0 [ 27.155302][ T426] security_sid_to_context_force+0x31/0x40 [ 27.155325][ T426] selinux_inode_init_security+0x659/0x950 [ 27.155349][ T426] ? __cfi_selinux_inode_init_security+0x10/0x10 [ 27.155373][ T426] ? security_inode_init_security+0x11c/0x600 [ 27.155395][ T426] ? __cfi_shmem_initxattrs+0x10/0x10 [ 27.155416][ T426] ? __cfi_shmem_initxattrs+0x10/0x10 [ 27.155437][ T426] security_inode_init_security+0x1a8/0x600 [ 27.155459][ T426] ? __cfi_security_inode_init_security+0x10/0x10 [ 27.155480][ T426] ? shmem_get_inode+0x812/0xc10 [ 27.155501][ T426] shmem_symlink+0xe4/0x4e0 [ 27.155522][ T426] ? selinux_inode_symlink+0x26/0x30 [ 27.155545][ T426] vfs_symlink+0x3f7/0x620 [ 27.155568][ T426] do_symlinkat+0x1ba/0x400 [ 27.155590][ T426] ? __cfi_do_symlinkat+0x10/0x10 [ 27.155615][ T426] ? getname_flags+0x203/0x6b0 [ 27.155632][ T426] __x64_sys_symlink+0x7e/0x90 [ 27.155656][ T426] x64_sys_call+0x28d8/0x2ee0 [ 27.155675][ T426] do_syscall_64+0x57/0xf0 [ 27.155693][ T426] ? clear_bhb_loop+0x50/0xa0 [ 27.155715][ T426] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.155738][ T426] RIP: 0033:0x7fd44a79fb19 [ 27.155761][ T426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.155776][ T426] RSP: 002b:00007fd44b656028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 27.155802][ T426] RAX: ffffffffffffffda RBX: 00007fd44aa25fa0 RCX: 00007fd44a79fb19 [ 27.155816][ T426] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 00002000000002c0 [ 27.155828][ T426] RBP: 00007fd44a837b70 R08: 0000000000000000 R09: 0000000000000000 [ 27.155839][ T426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.155850][ T426] R13: 00007fd44aa26038 R14: 00007fd44aa25fa0 R15: 00007ffc593438d8 [ 27.155866][ T426] [ 27.160230][ T426] rust_binder: 425:426 error while translating object: EINVAL [ 27.202052][ T45] usb 3-1: device descriptor read/8, error -71 [ 27.202353][ T426] rust_binder: 425:426 transaction async to 425:0 failed EINVAL, code 0 size 72-24 line thread.rs:867 [ 27.451082][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 27.459372][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 27.472031][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 27.479899][ T31] rust_binder: 425: undelivered TRANSACTION_COMPLETE [ 27.482333][ T10] usb 4-1: USB disconnect, device number 2 [ 27.488991][ T31] rust_binder: 425: undelivered TRANSACTION_ERROR: 29201 [ 27.497517][ T9] rust_binder: 425: undelivered transaction 2, process died [ 27.500332][ T45] usb 3-1: device descriptor read/8, error -71 [ 27.563584][ T435] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 27.642593][ T45] usb 3-1: device descriptor read/8, error -71 [ 27.651874][ T447] netlink: 68 bytes leftover after parsing attributes in process `syz.1.38'. [ 27.751606][ T45] usb usb3-port1: unable to enumerate USB device [ 27.791104][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.804486][ T455] Zero length message leads to an empty skb [ 27.931122][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.952160][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.965646][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 27.974756][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.983511][ T10] usb 4-1: config 0 descriptor?? [ 28.081074][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 28.087258][ T9] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.098238][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 28.104872][ T9] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 28.114297][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.123074][ T9] usb 2-1: config 0 descriptor?? [ 28.329841][ T452] syz.1.40 uses obsolete (PF_INET,SOCK_PACKET) [ 28.390143][ T10] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 28.399701][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0001/input/input4 [ 28.484329][ T10] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 28.540083][ T9] uclogic 0003:5543:0064.0002: collection stack underflow [ 28.547287][ T9] uclogic 0003:5543:0064.0002: item 0 0 0 12 parsing failed [ 28.554949][ T9] uclogic 0003:5543:0064.0002: parse failed [ 28.560866][ T9] uclogic 0003:5543:0064.0002: probe with driver uclogic failed with error -22 [ 28.571142][ T45] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 28.721067][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 28.727280][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.738225][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.747979][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 28.751787][ T452] ======================================================= [ 28.751787][ T452] WARNING: The mand mount option has been deprecated and [ 28.751787][ T452] and is ignored by this kernel. Remove the mand [ 28.751787][ T452] option from the mount to silence this warning. [ 28.751787][ T452] ======================================================= [ 28.762179][ T45] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 28.796226][ T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 28.811404][ T408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.815099][ T452] overlayfs: failed to resolve './file1': -2 [ 28.820869][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.843801][ T45] usb 3-1: config 0 descriptor?? [ 28.843848][ T9] usb 2-1: USB disconnect, device number 2 [ 28.855728][ T408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.922096][ T353] usb 4-1: USB disconnect, device number 3 [ 28.972843][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 28.980885][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 28.989376][ T10] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 28.999691][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 29.009349][ T10] usb 1-1: too many endpoints for config 1 interface 2 altsetting 1: 255, using maximum allowed: 30 [ 29.020615][ T10] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 29.035165][ T10] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 29.044250][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.052318][ T10] usb 1-1: Product: syz [ 29.056491][ T10] usb 1-1: Manufacturer: syz [ 29.061137][ T10] usb 1-1: SerialNumber: syz [ 29.062738][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 29.071971][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 29.090734][ T45] usb 3-1: USB disconnect, device number 6 [ 29.312689][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 29.322784][ T10] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 29.335048][ T10] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 29.345886][ T10] usb 1-1: USB disconnect, device number 3 [ 29.385413][ T492] syzkaller1: entered promiscuous mode [ 29.391280][ T492] syzkaller1: entered allmulticast mode [ 29.418464][ T368] udevd[368]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.451355][ T497] FAULT_INJECTION: forcing a failure. [ 29.451355][ T497] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 29.464476][ T497] CPU: 0 UID: 0 PID: 497 Comm: syz.3.52 Not tainted syzkaller #0 7b276d656437cde817a152a655ee87c3d6174d21 [ 29.464503][ T497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 29.464515][ T497] Call Trace: [ 29.464522][ T497] [ 29.464537][ T497] __dump_stack+0x21/0x30 [ 29.464560][ T497] dump_stack_lvl+0x140/0x1c0 [ 29.464577][ T497] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.464594][ T497] ? exc_page_fault+0x65/0xc0 [ 29.464619][ T497] dump_stack+0x19/0x20 [ 29.464636][ T497] should_fail_ex+0x3c2/0x510 [ 29.464654][ T497] should_fail+0xf/0x20 [ 29.464669][ T497] should_fail_usercopy+0x1e/0x30 [ 29.464687][ T497] _copy_to_iter+0x3b6/0x1520 [ 29.464708][ T497] ? __cfi__copy_to_iter+0x10/0x10 [ 29.464727][ T497] ? pin_user_pages_remote+0x177/0x230 [ 29.464749][ T497] ? __cfi_pin_user_pages_remote+0x10/0x10 [ 29.464770][ T497] copy_page_to_iter+0x211/0x2f0 [ 29.464790][ T497] process_vm_rw+0x8aa/0xc70 [ 29.464810][ T497] ? __ia32_sys_process_vm_writev+0x110/0x110 [ 29.464836][ T497] ? __se_sys_futex+0x13c/0x320 [ 29.464856][ T497] ? __kasan_check_write+0x18/0x20 [ 29.464879][ T497] __x64_sys_process_vm_readv+0xeb/0x100 [ 29.464898][ T497] x64_sys_call+0x2df4/0x2ee0 [ 29.464915][ T497] do_syscall_64+0x57/0xf0 [ 29.464928][ T497] ? clear_bhb_loop+0x50/0xa0 [ 29.464941][ T497] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.464954][ T497] RIP: 0033:0x7f382339fb19 [ 29.464964][ T497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.464973][ T497] RSP: 002b:00007f3824258028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 29.464985][ T497] RAX: ffffffffffffffda RBX: 00007f3823625fa0 RCX: 00007f382339fb19 [ 29.464992][ T497] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000026 [ 29.464999][ T497] RBP: 00007f3823437b70 R08: 0000000000000286 R09: 0000000000000000 [ 29.465006][ T497] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000000 [ 29.465012][ T497] R13: 00007f3823626038 R14: 00007f3823625fa0 R15: 00007ffe9ed4bd88 [ 29.465020][ T497] [ 29.731069][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 29.882089][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.893044][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.902803][ T45] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 29.911854][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.920318][ T45] usb 2-1: config 0 descriptor?? [ 30.039979][ T544] overlayfs: missing 'lowerdir' [ 30.045994][ T544] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.296409][ T563] FAULT_INJECTION: forcing a failure. [ 30.296409][ T563] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 30.310364][ T563] CPU: 0 UID: 0 PID: 563 Comm: syz.3.62 Not tainted syzkaller #0 7b276d656437cde817a152a655ee87c3d6174d21 [ 30.310393][ T563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 30.310405][ T563] Call Trace: [ 30.310412][ T563] [ 30.310420][ T563] __dump_stack+0x21/0x30 [ 30.310444][ T563] dump_stack_lvl+0x140/0x1c0 [ 30.310462][ T563] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.310477][ T563] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 30.310492][ T563] dump_stack+0x19/0x20 [ 30.310501][ T563] should_fail_ex+0x3c2/0x510 [ 30.310511][ T563] should_fail_alloc_page+0xec/0x110 [ 30.310522][ T563] __alloc_pages_noprof+0x1c0/0x7e0 [ 30.310535][ T563] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 30.310559][ T563] ? folio_add_lru+0x116/0x400 [ 30.310577][ T563] ? __cfi_folio_add_lru+0x10/0x10 [ 30.310597][ T563] __folio_alloc_noprof+0x14/0x80 [ 30.310618][ T563] folio_prealloc+0x46/0x220 [ 30.310630][ T563] do_wp_page+0x187e/0x2e80 [ 30.310640][ T563] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 30.310654][ T563] ? folio_put+0x90/0x90 [ 30.310663][ T563] ? __cfi__raw_spin_lock+0x10/0x10 [ 30.310674][ T563] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 30.310693][ T563] handle_mm_fault+0x1017/0x1ba0 [ 30.310715][ T563] ? __cfi_handle_mm_fault+0x10/0x10 [ 30.310734][ T563] ? find_vma+0xd3/0x120 [ 30.310758][ T563] ? lock_mm_and_find_vma+0xb8/0x390 [ 30.310771][ T563] do_user_addr_fault+0x4ee/0x1230 [ 30.310783][ T563] exc_page_fault+0x58/0xc0 [ 30.310796][ T563] asm_exc_page_fault+0x2b/0x30 [ 30.310809][ T563] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 30.310824][ T563] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 e9 bf 72 03 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 30.310838][ T563] RSP: 0018:ffffc9000ca07998 EFLAGS: 00050206 [ 30.310856][ T563] RAX: ffffffff82b19e01 RBX: ffff8880093b9000 RCX: 0000000000000a80 [ 30.310870][ T563] RDX: 0000000000000000 RSI: ffff8880093b9580 RDI: 000020000001e000 [ 30.310883][ T563] RBP: ffffc9000ca07ae8 R08: ffff8880093b9fff R09: 1ffff110012773ff [ 30.310906][ T563] R10: dffffc0000000000 R11: ffffed1001277400 R12: 000020000001da80 [ 30.310916][ T563] R13: 000000000001da40 R14: 0000000000001000 R15: ffffc9000ca07e28 [ 30.310924][ T563] ? _copy_to_iter+0x3e1/0x1520 [ 30.310937][ T563] ? _copy_to_iter+0x43f/0x1520 [ 30.310948][ T563] ? __cfi__copy_to_iter+0x10/0x10 [ 30.310959][ T563] ? pin_user_pages_remote+0x177/0x230 [ 30.310974][ T563] ? __cfi_pin_user_pages_remote+0x10/0x10 [ 30.310996][ T563] copy_page_to_iter+0x211/0x2f0 [ 30.311019][ T563] process_vm_rw+0x8aa/0xc70 [ 30.311040][ T563] ? __ia32_sys_process_vm_writev+0x110/0x110 [ 30.311066][ T563] ? __se_sys_futex+0x13c/0x320 [ 30.311086][ T563] ? __kasan_check_write+0x18/0x20 [ 30.311102][ T563] __x64_sys_process_vm_readv+0xeb/0x100 [ 30.311113][ T563] x64_sys_call+0x2df4/0x2ee0 [ 30.311130][ T563] do_syscall_64+0x57/0xf0 [ 30.311147][ T563] ? clear_bhb_loop+0x50/0xa0 [ 30.311169][ T563] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.311189][ T563] RIP: 0033:0x7f382339fb19 [ 30.311204][ T563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.311219][ T563] RSP: 002b:00007f3824258028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 30.311237][ T563] RAX: ffffffffffffffda RBX: 00007f3823625fa0 RCX: 00007f382339fb19 [ 30.311250][ T563] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000036 [ 30.311257][ T563] RBP: 00007f3823437b70 R08: 0000000000000286 R09: 0000000000000000 [ 30.311264][ T563] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000000 [ 30.311270][ T563] R13: 00007f3823626038 R14: 00007f3823625fa0 R15: 00007ffe9ed4bd88 [ 30.311280][ T563] [ 30.328120][ T45] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 30.695364][ T45] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 30.702797][ T45] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 30.710791][ T45] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 30.718250][ T45] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 30.727018][ T45] playstation 0003:054C:0DF2.0003: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 30.783701][ T565] capability: warning: `syz.3.63' uses 32-bit capabilities (legacy support in use) [ 30.793364][ T45] playstation 0003:054C:0DF2.0003: Failed to retrieve feature with reportID 9: -71 [ 30.793715][ T565] overlay: Unknown parameter ' ' [ 30.802702][ T45] playstation 0003:054C:0DF2.0003: Failed to retrieve DualSense pairing info: -71 [ 30.802733][ T45] playstation 0003:054C:0DF2.0003: Failed to get MAC address from DualSense [ 30.825581][ T45] playstation 0003:054C:0DF2.0003: Failed to create dualsense. [ 30.834501][ T45] playstation 0003:054C:0DF2.0003: probe with driver playstation failed with error -71 [ 30.849674][ T45] usb 2-1: USB disconnect, device number 3 [ 30.860800][ T577] selinux_netlink_send: 23 callbacks suppressed [ 30.860816][ T577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=577 comm=syz.3.66 [ 30.871299][ T578] netlink: 80 bytes leftover after parsing attributes in process `syz.3.66'. [ 31.051106][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 31.141074][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 31.161086][ T453] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 31.201084][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 31.207183][ T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 31.215557][ T9] usb 3-1: config 179 has no interface number 0 [ 31.221910][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 31.233031][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 31.244490][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 31.255621][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 31.267009][ T9] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 31.280283][ T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 31.289518][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.299377][ T571] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 31.301073][ T453] usb 1-1: device descriptor read/64, error -71 [ 31.314139][ T353] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 31.324369][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 31.332086][ T10] usb 4-1: can't read configurations, error -61 [ 31.461059][ T353] usb 2-1: device descriptor read/64, error -71 [ 31.467360][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 31.561102][ T453] usb 1-1: device descriptor read/64, error -71 [ 31.632396][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 31.639999][ T10] usb 4-1: can't read configurations, error -61 [ 31.646680][ T10] usb usb4-port1: attempt power cycle [ 31.711068][ T353] usb 2-1: device descriptor read/64, error -71 [ 31.801076][ T453] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 31.931167][ T453] usb 1-1: device descriptor read/64, error -71 [ 31.951084][ T353] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 31.991115][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 32.012696][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 32.020381][ T10] usb 4-1: can't read configurations, error -61 [ 32.081058][ T353] usb 2-1: device descriptor read/64, error -71 [ 32.151080][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 32.171111][ T453] usb 1-1: device descriptor read/64, error -71 [ 32.179015][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 32.186647][ T10] usb 4-1: can't read configurations, error -61 [ 32.193090][ T10] usb usb4-port1: unable to enumerate USB device [ 32.281165][ T453] usb usb1-port1: attempt power cycle [ 32.321091][ T353] usb 2-1: device descriptor read/64, error -71 [ 32.431135][ T353] usb usb2-port1: attempt power cycle [ 32.621081][ T453] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 32.642051][ T453] usb 1-1: device descriptor read/8, error -71 [ 32.771097][ T353] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 32.779527][ T453] usb 1-1: device descriptor read/8, error -71 [ 32.792075][ T353] usb 2-1: device descriptor read/8, error -71 [ 32.922037][ T353] usb 2-1: device descriptor read/8, error -71 [ 33.021075][ T453] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 33.041983][ T453] usb 1-1: device descriptor read/8, error -71 [ 33.161060][ T353] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 33.171995][ T453] usb 1-1: device descriptor read/8, error -71 [ 33.182059][ T353] usb 2-1: device descriptor read/8, error -71 [ 33.291375][ T453] usb usb1-port1: unable to enumerate USB device [ 33.312005][ T353] usb 2-1: device descriptor read/8, error -71 [ 33.421156][ T353] usb usb2-port1: unable to enumerate USB device [ 33.717625][ T45] usb 3-1: USB disconnect, device number 7 [ 33.717637][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 33.717664][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 33.906812][ T604] futex_wake_op: syz.2.74 tries to shift op by 144; fix this program [ 33.915015][ T604] futex_wake_op: syz.2.74 tries to shift op by 144; fix this program [ 33.943969][ T608] tipc: Started in network mode [ 33.948899][ T608] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 33.956231][ T608] tipc: Enabled bearer , priority 0 [ 33.965663][ T36] kauditd_printk_skb: 63 callbacks suppressed [ 33.965675][ T36] audit: type=1400 audit(1794002259.440:233): avc: denied { create } for pid=609 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 33.990931][ T36] audit: type=1400 audit(1794002259.440:234): avc: denied { shutdown } for pid=609 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 34.021152][ T36] audit: type=1400 audit(1794002259.450:235): avc: denied { read } for pid=609 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 34.128424][ T36] audit: type=1400 audit(1794002259.600:236): avc: denied { map } for pid=625 comm="syz.3.83" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 34.198872][ T36] audit: type=1400 audit(1794002259.670:237): avc: denied { create } for pid=633 comm="syz.0.84" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 34.219726][ T36] audit: type=1326 audit(1794002259.670:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=637 comm="syz.1.86" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f60e6b9fb19 code=0x0 [ 34.221163][ T646] mmap: syz.1.86 (646) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.251429][ T36] audit: type=1400 audit(1794002259.730:239): avc: denied { unlink } for pid=293 comm="syz-executor" name="file0" dev="tmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 34.314047][ T36] audit: type=1400 audit(1794002259.780:240): avc: denied { ioctl } for pid=636 comm="syz.2.85" path="socket:[9751]" dev="sockfs" ino=9751 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.370802][ T652] netlink: 'syz.3.88': attribute type 25 has an invalid length. [ 34.398406][ T36] audit: type=1400 audit(1794002259.870:241): avc: denied { read write } for pid=651 comm="syz.3.88" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 34.437883][ T36] audit: type=1400 audit(1794002259.870:242): avc: denied { open } for pid=651 comm="syz.3.88" path="/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 34.491066][ T353] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 34.591059][ T45] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 34.621065][ T353] usb 2-1: device descriptor read/64, error -71 [ 34.741045][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 34.752381][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.762641][ T45] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 34.771653][ T45] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 34.793353][ T45] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 34.802588][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.811657][ T45] usb 1-1: Product: syz [ 34.820215][ T45] usb 1-1: Manufacturer: syz [ 34.828155][ T45] usb 1-1: SerialNumber: syz [ 34.871058][ T353] usb 2-1: device descriptor read/64, error -71 [ 34.881193][ T652] device-mapper: table: 252:0: verity: Data device lookup failed (-ENOENT) [ 34.889844][ T652] device-mapper: ioctl: error adding target to table [ 34.951701][ T663] FAULT_INJECTION: forcing a failure. [ 34.951701][ T663] name failslab, interval 1, probability 0, space 0, times 0 [ 34.964374][ T663] CPU: 1 UID: 0 PID: 663 Comm: syz.3.90 Not tainted syzkaller #0 7b276d656437cde817a152a655ee87c3d6174d21 [ 34.964407][ T663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 34.964419][ T663] Call Trace: [ 34.964426][ T663] [ 34.964433][ T663] __dump_stack+0x21/0x30 [ 34.964450][ T663] dump_stack_lvl+0x140/0x1c0 [ 34.964460][ T663] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.964472][ T663] dump_stack+0x19/0x20 [ 34.964481][ T663] should_fail_ex+0x3c2/0x510 [ 34.964492][ T663] should_failslab+0xac/0x100 [ 34.964503][ T663] __kmalloc_cache_noprof+0x41/0x470 [ 34.964517][ T663] ? alloc_tty_struct+0xb4/0x7e0 [ 34.964533][ T663] alloc_tty_struct+0xb4/0x7e0 [ 34.964547][ T663] ? __cfi_ida_alloc_range+0x10/0x10 [ 34.964565][ T663] ? __cfi_alloc_tty_struct+0x10/0x10 [ 34.964579][ T663] ? __kasan_check_write+0x18/0x20 [ 34.964594][ T663] ? mutex_lock+0x97/0x1d0 [ 34.964607][ T663] ? __cfi_mutex_lock+0x10/0x10 [ 34.964620][ T663] tty_init_dev+0x5d/0x4f0 [ 34.964634][ T663] ? devpts_new_index+0xea/0x160 [ 34.964648][ T663] ptmx_open+0xe1/0x2f0 [ 34.964659][ T663] chrdev_open+0x4e8/0x610 [ 34.964669][ T663] ? __cfi_chrdev_open+0x10/0x10 [ 34.964678][ T663] ? bpf_lsm_file_open+0xd/0x20 [ 34.964690][ T663] ? __cfi_chrdev_open+0x10/0x10 [ 34.964699][ T663] do_dentry_open+0x97c/0x1510 [ 34.964711][ T663] vfs_open+0x86/0x240 [ 34.964722][ T663] ? __cfi_vfs_open+0x10/0x10 [ 34.964734][ T663] ? may_open+0x352/0x430 [ 34.964745][ T663] path_openat+0x2c49/0x35a0 [ 34.964757][ T663] ? kasan_save_alloc_info+0x3a/0x50 [ 34.964769][ T663] ? getname+0x1b/0x30 [ 34.964778][ T663] ? x64_sys_call+0xe69/0x2ee0 [ 34.964788][ T663] ? do_syscall_64+0x57/0xf0 [ 34.964799][ T663] ? do_filp_open+0x440/0x440 [ 34.964811][ T663] do_filp_open+0x1f2/0x440 [ 34.964823][ T663] ? __cfi_do_filp_open+0x10/0x10 [ 34.964835][ T663] ? alloc_fd+0x4c1/0x570 [ 34.964845][ T663] do_sys_openat2+0x134/0x1d0 [ 34.964857][ T663] ? do_sys_open+0x100/0x100 [ 34.964870][ T663] __x64_sys_openat+0x13a/0x170 [ 34.964882][ T663] x64_sys_call+0xe69/0x2ee0 [ 34.964892][ T663] do_syscall_64+0x57/0xf0 [ 34.964902][ T663] ? clear_bhb_loop+0x50/0xa0 [ 34.964916][ T663] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.964928][ T663] RIP: 0033:0x7f382339fb19 [ 34.964938][ T663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.964946][ T663] RSP: 002b:00007f3824258028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 34.964958][ T663] RAX: ffffffffffffffda RBX: 00007f3823625fa0 RCX: 00007f382339fb19 [ 34.964966][ T663] RDX: 0000000000000a82 RSI: 0000200000004b00 RDI: ffffffffffffff9c [ 34.964973][ T663] RBP: 00007f3823437b70 R08: 0000000000000000 R09: 0000000000000000 [ 34.964979][ T663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.964985][ T663] R13: 00007f3823626038 R14: 00007f3823625fa0 R15: 00007ffe9ed4bd88 [ 34.964994][ T663] [ 35.111071][ T353] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 35.111934][ T310] tipc: Node number set to 43690 [ 35.251076][ T353] usb 2-1: device descriptor read/64, error -71 [ 35.333446][ T665] FAULT_INJECTION: forcing a failure. [ 35.333446][ T665] name failslab, interval 1, probability 0, space 0, times 0 [ 35.346152][ T665] CPU: 1 UID: 0 PID: 665 Comm: syz.2.91 Not tainted syzkaller #0 7b276d656437cde817a152a655ee87c3d6174d21 [ 35.346183][ T665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 35.346194][ T665] Call Trace: [ 35.346198][ T665] [ 35.346203][ T665] __dump_stack+0x21/0x30 [ 35.346218][ T665] dump_stack_lvl+0x140/0x1c0 [ 35.346228][ T665] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.346242][ T665] ? check_stack_object+0x81/0x150 [ 35.346258][ T665] dump_stack+0x19/0x20 [ 35.346267][ T665] should_fail_ex+0x3c2/0x510 [ 35.346277][ T665] should_failslab+0xac/0x100 [ 35.346288][ T665] __kmalloc_cache_noprof+0x41/0x470 [ 35.346303][ T665] ? memdup_user+0xb1/0x170 [ 35.346317][ T665] ? __se_sys_mount+0x15f/0x480 [ 35.346327][ T665] __se_sys_mount+0x15f/0x480 [ 35.346336][ T665] ? __x64_sys_mount+0xf0/0xf0 [ 35.346346][ T665] ? __kasan_check_write+0x18/0x20 [ 35.346360][ T665] ? fpregs_restore_userregs+0x11c/0x260 [ 35.346374][ T665] __x64_sys_mount+0xc3/0xf0 [ 35.346383][ T665] x64_sys_call+0x2021/0x2ee0 [ 35.346393][ T665] do_syscall_64+0x57/0xf0 [ 35.346404][ T665] ? clear_bhb_loop+0x50/0xa0 [ 35.346418][ T665] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.346431][ T665] RIP: 0033:0x7f1c7c79fb19 [ 35.346441][ T665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.346450][ T665] RSP: 002b:00007f1c7d686028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 35.346468][ T665] RAX: ffffffffffffffda RBX: 00007f1c7ca25fa0 RCX: 00007f1c7c79fb19 [ 35.346476][ T665] RDX: 0000200000000640 RSI: 0000000000000000 RDI: 0000200000000600 [ 35.346484][ T665] RBP: 00007f1c7c837b70 R08: 0000200000000680 R09: 0000000000000000 [ 35.346491][ T665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.346497][ T665] R13: 00007f1c7ca26038 R14: 00007f1c7ca25fa0 R15: 00007fff6d3ae678 [ 35.346505][ T665] [ 35.347544][ T665] fuse: blksize only supported for fuseblk [ 35.522162][ T45] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 35.557171][ T45] usb 1-1: clock source 0 is not valid, cannot use [ 35.651069][ T353] usb 2-1: device descriptor read/64, error -71 [ 35.713830][ T673] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 35.761150][ T353] usb usb2-port1: attempt power cycle [ 35.766339][ T45] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 35.787766][ T45] usb 1-1: USB disconnect, device number 8 [ 35.798532][ T368] udevd[368]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.871160][ T310] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 35.968671][ T682] No source specified [ 36.023335][ T310] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 36.032417][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.040383][ T310] usb 4-1: Product: syz [ 36.044550][ T310] usb 4-1: Manufacturer: syz [ 36.049158][ T310] usb 4-1: SerialNumber: syz [ 36.101071][ T353] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 36.122108][ T353] usb 2-1: device descriptor read/8, error -71 [ 36.221066][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 36.252059][ T353] usb 2-1: device descriptor read/8, error -71 [ 36.285808][ T688] overlayfs: workdir and upperdir must be separate subtrees [ 36.287088][ T689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=689 comm=syz.0.98 [ 36.315151][ T692] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=692 comm=syz.0.99 [ 36.382542][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 36.391095][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.401246][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 36.410188][ T9] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 36.421096][ T9] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 36.434445][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 36.445269][ T9] usb 3-1: config 1 interface 1 has no altsetting 0 [ 36.453772][ T9] usb 3-1: string descriptor 0 read error: -22 [ 36.459995][ T9] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 36.469028][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.491102][ T353] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 36.512026][ T353] usb 2-1: device descriptor read/8, error -71 [ 36.642108][ T353] usb 2-1: device descriptor read/8, error -71 [ 36.675630][ T310] rtl8150 4-1:1.0: couldn't reset the device [ 36.681806][ T310] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 36.690978][ T310] usb 4-1: USB disconnect, device number 8 [ 36.751131][ T353] usb usb2-port1: unable to enumerate USB device [ 37.181915][ T110] udevd[110]: could not touch /run/udev/queue: No such file or directory [ 37.362807][ T9] usb 3-1: 2:0: failed to get current value for ch 1 (-71) [ 37.393517][ T709] No source specified [ 37.403393][ T9] usb 3-1: USB disconnect, device number 8 [ 37.453107][ T719] can: request_module (can-proto-6) failed. [ 37.461341][ T719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.107'. [ 37.470592][ T719] netlink: 188 bytes leftover after parsing attributes in process `syz.3.107'. [ 37.784632][ T742] rust_binder: 741:742 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 37.794282][ T742] rust_binder: 741:742 no such ref 0 [ 37.955227][ T744] No source specified [ 38.465768][ T764] netlink: 'syz.3.121': attribute type 7 has an invalid length. [ 38.474388][ T764] netlink: 'syz.3.121': attribute type 6 has an invalid length. [ 38.851068][ T9] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 38.891065][ T310] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 38.981080][ T9] usb 4-1: device descriptor read/64, error -71 [ 39.081398][ T310] usb 3-1: not running at top speed; connect to a high speed hub [ 39.089909][ T310] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.102927][ T310] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 39.112039][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.125912][ T310] usb 3-1: Found UVC 1.00 device (046d:0825) [ 39.133635][ T310] usb 3-1: No streaming interface found for terminal 2. [ 39.221066][ T9] usb 4-1: device descriptor read/64, error -71 [ 39.335639][ T770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.345888][ T770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.355615][ T310] usb 3-1: USB disconnect, device number 9 [ 39.461071][ T9] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 39.529070][ T36] kauditd_printk_skb: 44 callbacks suppressed [ 39.529084][ T36] audit: type=1400 audit(1794002265.000:287): avc: denied { create } for pid=784 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 39.555720][ T36] audit: type=1400 audit(1794002265.040:288): avc: denied { setopt } for pid=784 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 39.577576][ T36] audit: type=1400 audit(1794002265.060:289): avc: denied { write } for pid=784 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 39.611070][ T9] usb 4-1: device descriptor read/64, error -71 [ 39.618457][ T36] audit: type=1400 audit(1794002265.090:290): avc: denied { relabelfrom } for pid=787 comm="syz.1.129" name="TCPv6" dev="sockfs" ino=10130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 39.618474][ T788] SELinux: Context system_u:object_r:fonts_t:s0 is not valid (left unmapped). [ 39.651623][ T36] audit: type=1400 audit(1794002265.090:291): avc: denied { relabelto } for pid=787 comm="syz.1.129" name="TCPv6" dev="sockfs" ino=10130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tcp_socket permissive=1 trawcon="system_u:object_r:fonts_t:s0" [ 39.679845][ T36] audit: type=1400 audit(1794002265.100:292): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 39.705619][ T790] process 'syz.1.130' launched './file0' with NULL argv: empty string added [ 39.714506][ T36] audit: type=1400 audit(1794002265.180:293): avc: denied { bind } for pid=789 comm="syz.1.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 39.736104][ T36] audit: type=1400 audit(1794002265.180:294): avc: denied { execute } for pid=789 comm="syz.1.130" name="file0" dev="tmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.736198][ T790] Invalid argument reading file caps for ./file0 [ 39.758693][ T36] audit: type=1400 audit(1794002265.220:295): avc: denied { execute_no_trans } for pid=789 comm="syz.1.130" path="/31/file0" dev="tmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.891061][ T9] usb 4-1: device descriptor read/64, error -71 [ 39.926252][ T36] audit: type=1400 audit(1794002265.400:296): avc: denied { append } for pid=800 comm="syz.2.133" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 40.001160][ T9] usb usb4-port1: attempt power cycle [ 40.314563][ T812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.327257][ T812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.336636][ T812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.345964][ T812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.353994][ T9] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 40.361985][ T812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.372495][ T812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.381325][ T812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.390446][ T812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.399525][ T9] usb 4-1: device descriptor read/8, error -71 [ 40.406216][ T812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.415493][ T812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.557437][ T9] usb 4-1: device descriptor read/8, error -71 [ 40.563688][ T64] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 40.742188][ T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.753458][ T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.763589][ T64] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 40.772905][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.782302][ T64] usb 2-1: config 0 descriptor?? [ 40.821058][ T9] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 40.851072][ T9] usb 4-1: device descriptor read/8, error -71 [ 40.992439][ T64] usbhid 2-1:0.0: can't add hid device: -71 [ 40.998423][ T64] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 41.009225][ T64] usb 2-1: USB disconnect, device number 12 [ 41.015690][ T9] usb 4-1: device descriptor read/8, error -71 [ 41.131143][ T9] usb usb4-port1: unable to enumerate USB device [ 41.341075][ T353] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 41.492540][ T353] usb 3-1: unable to get BOS descriptor or descriptor too short [ 41.505745][ T353] usb 3-1: not running at top speed; connect to a high speed hub [ 41.521929][ T353] usb 3-1: config 254 has an invalid interface number: 103 but max is 0 [ 41.530321][ T353] usb 3-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 41.550767][ T353] usb 3-1: config 254 has no interface number 0 [ 41.557246][ T353] usb 3-1: config 254 interface 103 has no altsetting 0 [ 41.565880][ T353] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=64.5b [ 41.575264][ T353] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.583875][ T353] usb 3-1: Product: syz [ 41.588130][ T353] usb 3-1: Manufacturer: syz [ 41.592785][ T353] usb 3-1: SerialNumber: syz [ 41.602866][ T828] netlink: 188 bytes leftover after parsing attributes in process `syz.1.143'. [ 41.619698][ T829] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 41.633602][ T829] rust_binder: Read failure Err(EFAULT) in pid:114 [ 41.640766][ T828] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.647795][ T830] rust_binder: 827:830 got transaction to invalid handle 1 [ 41.655403][ T830] rust_binder: 827:830 transaction call to 0:0 failed ENOENT, code 0 size 0-0 line process.rs:958 [ 41.667139][ T31] rust_binder: 827: undelivered TRANSACTION_ERROR: 29201 [ 41.783277][ T836] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 41.813184][ T353] usbserial_generic 3-1:254.103: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 41.829769][ T353] usbserial_generic 3-1:254.103: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 41.851067][ T353] usbserial_generic 3-1:254.103: device has no bulk endpoints [ 41.869441][ T353] usb 3-1: USB disconnect, device number 10 [ 42.105782][ T847] device-mapper: table: 252:1: verity: Data device lookup failed (-ENOENT) [ 42.114564][ T847] device-mapper: ioctl: error adding target to table [ 42.411078][ T353] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 42.567541][ T353] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 42.580170][ T353] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 42.589689][ T353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.597921][ T353] usb 2-1: Product: syz [ 42.602438][ T353] usb 2-1: Manufacturer: syz [ 42.607091][ T353] usb 2-1: SerialNumber: syz [ 42.817061][ T850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.825571][ T850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.839512][ T850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.862952][ T850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.879445][ T873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.891157][ T870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.907246][ T873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.916085][ T850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.924737][ T870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.943361][ T850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.841097][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 43.901095][ T310] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 43.992485][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 44.001251][ T9] usb 3-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 44.011734][ T9] usb 3-1: config 21 has 0 interfaces, different from the descriptor's value: 3 [ 44.023141][ T9] usb 3-1: language id specifier not provided by device, defaulting to English [ 44.033327][ T9] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 44.042753][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.050801][ T9] usb 3-1: Product: syz [ 44.055317][ T9] usb 3-1: Manufacturer: syz [ 44.059983][ T9] usb 3-1: SerialNumber: syz [ 44.071061][ T310] usb 4-1: Using ep0 maxpacket: 8 [ 44.079413][ T310] usb 4-1: unable to get BOS descriptor or descriptor too short [ 44.089637][ T310] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 44.099405][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.107609][ T310] usb 4-1: Product: syz [ 44.112049][ T310] usb 4-1: Manufacturer: syz [ 44.116694][ T310] usb 4-1: SerialNumber: syz [ 44.275583][ T9] usb 3-1: USB disconnect, device number 11 [ 44.327627][ T310] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 44.334789][ T310] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 44.359886][ T310] usb 4-1: USB disconnect, device number 13 [ 44.386933][ T912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.396222][ T912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.406501][ T912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.415589][ T912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.797619][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 44.797635][ T36] audit: type=1400 audit(1794002270.270:310): avc: denied { setattr } for pid=913 comm="syz.2.167" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.865507][ T36] audit: type=1400 audit(1794002270.340:311): avc: denied { setopt } for pid=916 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.871967][ T917] FAULT_INJECTION: forcing a failure. [ 44.871967][ T917] name failslab, interval 1, probability 0, space 0, times 0 [ 44.897560][ T917] CPU: 0 UID: 0 PID: 917 Comm: syz.3.168 Not tainted syzkaller #0 7b276d656437cde817a152a655ee87c3d6174d21 [ 44.897591][ T917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 44.897603][ T917] Call Trace: [ 44.897610][ T917] [ 44.897617][ T917] __dump_stack+0x21/0x30 [ 44.897641][ T917] dump_stack_lvl+0x140/0x1c0 [ 44.897660][ T917] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.897680][ T917] dump_stack+0x19/0x20 [ 44.897697][ T917] should_fail_ex+0x3c2/0x510 [ 44.897715][ T917] should_failslab+0xac/0x100 [ 44.897734][ T917] kmem_cache_alloc_noprof+0x42/0x410 [ 44.897759][ T917] ? __kasan_slab_alloc+0x73/0x90 [ 44.897787][ T917] ? sk_prot_alloc+0x69/0x3a0 [ 44.897811][ T917] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 44.897837][ T917] sk_prot_alloc+0x69/0x3a0 [ 44.897860][ T917] sk_alloc+0x40/0x590 [ 44.897881][ T917] __vsock_create+0x3e/0x950 [ 44.897900][ T917] vsock_create+0x13e/0x460 [ 44.897920][ T917] __sock_create+0x3a5/0x810 [ 44.897941][ T917] __sys_socket+0xe1/0x1c0 [ 44.897960][ T917] __x64_sys_socket+0x7e/0x90 [ 44.897981][ T917] x64_sys_call+0x2608/0x2ee0 [ 44.898014][ T917] do_syscall_64+0x57/0xf0 [ 44.898034][ T917] ? clear_bhb_loop+0x50/0xa0 [ 44.898060][ T917] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.898085][ T917] RIP: 0033:0x7f382339fb19 [ 44.898114][ T917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.898130][ T917] RSP: 002b:00007f3824258028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 44.898151][ T917] RAX: ffffffffffffffda RBX: 00007f3823625fa0 RCX: 00007f382339fb19 [ 44.898165][ T917] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000028 [ 44.898176][ T917] RBP: 00007f3823437b70 R08: 0000000000000000 R09: 0000000000000000 [ 44.898189][ T917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.898200][ T917] R13: 00007f3823626038 R14: 00007f3823625fa0 R15: 00007ffe9ed4bd88 [ 44.898216][ T917] [ 45.173169][ T36] audit: type=1400 audit(1794002270.650:312): avc: denied { sqpoll } for pid=937 comm="syz.1.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 45.202308][ T942] FAULT_INJECTION: forcing a failure. [ 45.202308][ T942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.215535][ T942] CPU: 0 UID: 0 PID: 942 Comm: syz.2.174 Not tainted syzkaller #0 7b276d656437cde817a152a655ee87c3d6174d21 [ 45.215567][ T942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 45.215579][ T942] Call Trace: [ 45.215585][ T942] [ 45.215592][ T942] __dump_stack+0x21/0x30 [ 45.215615][ T942] dump_stack_lvl+0x140/0x1c0 [ 45.215633][ T942] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.215651][ T942] ? exc_page_fault+0x65/0xc0 [ 45.215678][ T942] dump_stack+0x19/0x20 [ 45.215694][ T942] should_fail_ex+0x3c2/0x510 [ 45.215713][ T942] should_fail+0xf/0x20 [ 45.215728][ T942] should_fail_usercopy+0x1e/0x30 [ 45.215754][ T942] _copy_to_iter+0x3b6/0x1520 [ 45.215776][ T942] ? __cfi__copy_to_iter+0x10/0x10 [ 45.215797][ T942] ? pin_user_pages_remote+0x177/0x230 [ 45.215820][ T942] ? __cfi_pin_user_pages_remote+0x10/0x10 [ 45.215843][ T942] copy_page_to_iter+0x211/0x2f0 [ 45.215863][ T942] process_vm_rw+0x8aa/0xc70 [ 45.215881][ T942] ? __ia32_sys_process_vm_writev+0x110/0x110 [ 45.215907][ T942] ? __se_sys_futex+0x13c/0x320 [ 45.215929][ T942] ? __kasan_check_write+0x18/0x20 [ 45.215954][ T942] __x64_sys_process_vm_readv+0xeb/0x100 [ 45.215973][ T942] x64_sys_call+0x2df4/0x2ee0 [ 45.215992][ T942] do_syscall_64+0x57/0xf0 [ 45.216010][ T942] ? clear_bhb_loop+0x50/0xa0 [ 45.216034][ T942] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.216057][ T942] RIP: 0033:0x7f1c7c79fb19 [ 45.216073][ T942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.216088][ T942] RSP: 002b:00007f1c7d686028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 45.216107][ T942] RAX: ffffffffffffffda RBX: 00007f1c7ca25fa0 RCX: 00007f1c7c79fb19 [ 45.216122][ T942] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 000000000000009f [ 45.216134][ T942] RBP: 00007f1c7c837b70 R08: 0000000000000286 R09: 0000000000000000 [ 45.216147][ T942] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000000 [ 45.216159][ T942] R13: 00007f1c7ca26038 R14: 00007f1c7ca25fa0 R15: 00007fff6d3ae678 [ 45.216174][ T942] [ 45.221147][ T36] audit: type=1400 audit(1794002270.670:313): avc: denied { execute } for pid=937 comm="syz.1.173" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 45.441637][ T944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.473591][ T946] ================================================================== [ 45.481692][ T946] BUG: KASAN: slab-use-after-free in snapshot_ctr+0x586/0x1350 [ 45.489261][ T946] Read of size 8 at addr ffff88810d7e9798 by task syz.2.176/946 [ 45.491245][ T944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.496888][ T946] [ 45.496897][ T946] CPU: 1 UID: 0 PID: 946 Comm: syz.2.176 Not tainted syzkaller #0 7b276d656437cde817a152a655ee87c3d6174d21 [ 45.496922][ T946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 45.496934][ T946] Call Trace: [ 45.496940][ T946] [ 45.496948][ T946] __dump_stack+0x21/0x30 [ 45.496971][ T946] dump_stack_lvl+0x140/0x1c0 [ 45.496989][ T946] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.497007][ T946] ? __cfi__printk+0x10/0x10 [ 45.497032][ T946] print_address_description+0x71/0x210 [ 45.497050][ T946] print_report+0x4a/0x70 [ 45.497065][ T946] kasan_report+0x162/0x1a0 [ 45.497084][ T946] ? snapshot_ctr+0x586/0x1350 [ 45.497105][ T946] ? snapshot_ctr+0x586/0x1350 [ 45.497124][ T946] __asan_report_load8_noabort+0x18/0x20 [ 45.497147][ T946] snapshot_ctr+0x586/0x1350 [ 45.497166][ T946] ? dm_split_args+0xa1/0x740 [ 45.497183][ T946] ? __cfi_snapshot_ctr+0x10/0x10 [ 45.497202][ T946] ? dm_split_args+0x5d0/0x740 [ 45.497225][ T946] dm_table_add_target+0x59f/0xcb0 [ 45.497244][ T946] table_load+0x2eb/0x7d0 [ 45.497266][ T946] ? __check_object_size+0x99/0x870 [ 45.497291][ T946] ? __cfi_table_load+0x10/0x10 [ 45.497313][ T946] ? __kasan_check_write+0x18/0x20 [ 45.497336][ T946] ? __cfi_table_load+0x10/0x10 [ 45.497358][ T946] dm_ctl_ioctl+0x8f0/0xde0 [ 45.497381][ T946] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 45.497406][ T946] ? __fget_files+0x2bc/0x330 [ 45.497424][ T946] ? bpf_lsm_file_ioctl+0xd/0x20 [ 45.497444][ T946] ? security_file_ioctl+0x3e/0x110 [ 45.497468][ T946] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 45.497489][ T946] __se_sys_ioctl+0x123/0x1b0 [ 45.497508][ T946] __x64_sys_ioctl+0x7f/0xa0 [ 45.497527][ T946] x64_sys_call+0x1878/0x2ee0 [ 45.497546][ T946] do_syscall_64+0x57/0xf0 [ 45.497565][ T946] ? clear_bhb_loop+0x50/0xa0 [ 45.497587][ T946] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.497608][ T946] RIP: 0033:0x7f1c7c79fb19 [ 45.497625][ T946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.497639][ T946] RSP: 002b:00007f1c7d686028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 45.497658][ T946] RAX: ffffffffffffffda RBX: 00007f1c7ca25fa0 RCX: 00007f1c7c79fb19 [ 45.497672][ T946] RDX: 0000200000000b40 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 45.497684][ T946] RBP: 00007f1c7c837b70 R08: 0000000000000000 R09: 0000000000000000 [ 45.497696][ T946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.497706][ T946] R13: 00007f1c7ca26038 R14: 00007f1c7ca25fa0 R15: 00007fff6d3ae678 [ 45.497721][ T946] [ 45.497727][ T946] [ 45.766572][ T946] Allocated by task 946: [ 45.770811][ T946] kasan_save_track+0x3e/0x80 [ 45.775496][ T946] kasan_save_alloc_info+0x3a/0x50 [ 45.780709][ T946] __kasan_kmalloc+0x96/0xb0 [ 45.785309][ T946] __kmalloc_cache_node_noprof+0x225/0x430 [ 45.791131][ T946] dm_get_table_device+0x1e3/0x6c0 [ 45.796250][ T946] dm_get_device+0x32b/0x7f0 [ 45.800842][ T946] snapshot_ctr+0x292/0x1350 [ 45.805443][ T946] dm_table_add_target+0x59f/0xcb0 [ 45.810575][ T946] table_load+0x2eb/0x7d0 [ 45.814919][ T946] dm_ctl_ioctl+0x8f0/0xde0 [ 45.819468][ T946] __se_sys_ioctl+0x123/0x1b0 [ 45.824152][ T946] __x64_sys_ioctl+0x7f/0xa0 [ 45.828739][ T946] x64_sys_call+0x1878/0x2ee0 [ 45.833409][ T946] do_syscall_64+0x57/0xf0 [ 45.837827][ T946] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.843736][ T946] [ 45.846053][ T946] Freed by task 946: [ 45.849961][ T946] kasan_save_track+0x3e/0x80 [ 45.854636][ T946] kasan_save_free_info+0x44/0x50 [ 45.859674][ T946] __kasan_slab_free+0x5f/0x80 [ 45.864428][ T946] kfree+0x158/0x440 [ 45.868321][ T946] dm_put_table_device+0x298/0x2e0 [ 45.873434][ T946] dm_get_device+0x571/0x7f0 [ 45.878009][ T946] snapshot_ctr+0x435/0x1350 [ 45.882604][ T946] dm_table_add_target+0x59f/0xcb0 [ 45.887755][ T946] table_load+0x2eb/0x7d0 [ 45.892105][ T946] dm_ctl_ioctl+0x8f0/0xde0 [ 45.896633][ T946] __se_sys_ioctl+0x123/0x1b0 [ 45.901307][ T946] __x64_sys_ioctl+0x7f/0xa0 [ 45.905892][ T946] x64_sys_call+0x1878/0x2ee0 [ 45.910565][ T946] do_syscall_64+0x57/0xf0 [ 45.914984][ T946] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.920887][ T946] [ 45.923211][ T946] The buggy address belongs to the object at ffff88810d7e9780 [ 45.923211][ T946] which belongs to the cache kmalloc-96 of size 96 [ 45.937091][ T946] The buggy address is located 24 bytes inside of [ 45.937091][ T946] freed 96-byte region [ffff88810d7e9780, ffff88810d7e97e0) [ 45.950718][ T946] [ 45.953028][ T946] The buggy address belongs to the physical page: [ 45.959437][ T946] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10d7e9 [ 45.968271][ T946] anon flags: 0x4000000000000000(zone=1) [ 45.973886][ T946] page_type: f5(slab) [ 45.977864][ T946] raw: 4000000000000000 ffff888100041280 0000000000000000 dead000000000001 [ 45.986438][ T946] raw: 0000000000000000 0000000080200020 00000001f5000000 0000000000000000 [ 45.995013][ T946] page dumped because: kasan: bad access detected [ 46.001427][ T946] page_owner tracks the page as allocated [ 46.007133][ T946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 109, tgid 109 (udevd), ts 4105409772, free_ts 4002369916 [ 46.025286][ T946] post_alloc_hook+0x37d/0x3b0 [ 46.030083][ T946] prep_new_page+0x2d/0x180 [ 46.034582][ T946] get_page_from_freelist+0x4aea/0x4ba0 [ 46.040138][ T946] __alloc_pages_noprof+0x35a/0x7e0 [ 46.045336][ T946] alloc_slab_page+0x6b/0x1e0 [ 46.049998][ T946] allocate_slab+0x69/0x430 [ 46.054535][ T946] ___slab_alloc+0x591/0x8c0 [ 46.059137][ T946] __kmalloc_noprof+0x2fc/0x510 [ 46.064000][ T946] ext4_find_extent+0x1f5/0xd80 [ 46.068861][ T946] ext4_ext_map_blocks+0x212/0x6080 [ 46.074077][ T946] ext4_map_query_blocks+0x9c/0x2d0 [ 46.079296][ T946] ext4_map_blocks+0x318/0x17f0 [ 46.084145][ T946] ext4_getblk+0x1c9/0x7c0 [ 46.088572][ T946] ext4_bread_batch+0x6a/0x4a0 [ 46.093352][ T946] __ext4_find_entry+0x1035/0x1b80 [ 46.098452][ T946] ext4_lookup+0x17c/0x710 [ 46.102889][ T946] page last free pid 20 tgid 20 stack trace: [ 46.108865][ T946] free_unref_page+0xb99/0xf50 [ 46.113617][ T946] __free_pages+0x6b/0x3b0 [ 46.118035][ T946] tlb_remove_table_rcu+0x2b2/0x3d0 [ 46.123226][ T946] rcu_do_batch+0x56a/0xcb0 [ 46.127734][ T946] rcu_nocb_cb_kthread+0x533/0xb60 [ 46.132838][ T946] kthread+0x2c7/0x360 [ 46.136901][ T946] ret_from_fork+0x64/0xa0 [ 46.141318][ T946] ret_from_fork_asm+0x1a/0x30 [ 46.146086][ T946] [ 46.148397][ T946] Memory state around the buggy address: [ 46.154008][ T946] ffff88810d7e9680: 00 00 00 00 00 00 00 00 03 fc fc fc fc fc fc fc [ 46.162051][ T946] ffff88810d7e9700: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 46.170100][ T946] >ffff88810d7e9780: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 46.178153][ T946] ^ [ 46.182995][ T946] ffff88810d7e9800: 00 00 00 00 00 00 00 00 03 fc fc fc fc fc fc fc [ 46.191053][ T946] ffff88810d7e9880: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 46.199109][ T946] ================================================================== [ 46.208924][ T946] Disabling lock debugging due to kernel taint [ 46.215157][ T946] device-mapper: table: 252:2: device 1:4 not in table devices list [ 46.224010][ T946] device-mapper: table: 252:2: snapshot: COW device cannot be the same as origin device (-EINVAL) [ 46.234618][ T946] device-mapper: ioctl: error adding target to table Nov 6 21:57:51 [ 46.241573][ T946] device-mapper: table: 252:2: dm_table_destroy: dm_put_device call missing for 1:4 syzkaller kern.alert kernel: [ 46.001427][ T946] page_owner tracks the page as allocated Nov 6 21:57:51 [ 46.261081][ T31] usb 4-1: new full-speed USB device number 14 using dummy_hcd syzkaller kern.alert kernel: [ 46.007133][ T946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 109, tgid 109 (udevd), ts 4105409772, free_ts 4002369916 Nov 6 21:57:51 syzkaller kern.alert kernel: [ 46.102889][ T946] page last free pid 20 tgid 20 stack trace: [ 46.422123][ T31] usb 4-1: config 127 has an invalid interface number: 240 but max is 0 [ 46.430589][ T31] usb 4-1: config 127 has no interface number 0 [ 46.438409][ T31] usb 4-1: New USB device found, idVendor=9b98, idProduct=ca47, bcdDevice=19.87 [ 46.447558][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.455815][ T31] usb 4-1: Product: syz [ 46.460055][ T31] usb 4-1: Manufacturer: syz [ 46.465175][ T31] usb 4-1: SerialNumber: syz [ 46.675775][ T31] cdc_eem 4-1:127.240: probe with driver cdc_eem failed with error -22 [ 46.686564][ T31] usb 4-1: USB disconnect, device number 14 [ 47.678127][ T353] usb 2-1: Can't get UAC3 power state for id 10 [ 47.686710][ T353] usb 2-1: 2:0: failed to get current value for ch 0 (-32) [ 47.718750][ T353] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2)