last executing test programs: 1m31.118273823s ago: executing program 1 (id=727): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000) (async) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000) creat(&(0x7f0000000bc0)='./file0\x00', 0xecf86c37d53049cc) (async) lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) (async) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff}) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x989c46, 0x0) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000006b40)={0x2020}, 0x2020) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r3, &(0x7f0000000040), 0xffc1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c0000000190001000000000000000000e00000020000000000000000000000002001000000000000000000000000000100000000000000000a00002087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000ffffffffffffff7f00000000000000000000010000000000000000000000000000000000000000000000000000000000fbfffffffbffffff000000000000000200000000000000000000000000000000000103020000000008001f000200"/120], 0xc0}}, 0x2c000010) (async) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xf1f, 0x0, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0xfffc, 0xa, 0x10, 0x0, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x100, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) (async) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) (async) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x4000}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r5, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/21, 0x15}], 0x1, &(0x7f0000000280)=""/150, 0x96}}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000000340)=""/79, 0x4f}, {&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000002000)=""/13, 0xd}, {&(0x7f0000002040)=""/8, 0x8}, {&(0x7f0000002080)=""/242, 0xf2}], 0x5, &(0x7f0000002200)=""/7, 0x7}, 0xa}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000002240)=""/187, 0xbb}, {&(0x7f0000002300)}, {&(0x7f0000002340)=""/92, 0x5c}, {&(0x7f00000023c0)=""/252, 0xfc}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/1, 0x1}, {&(0x7f0000003500)=""/50, 0x32}, {&(0x7f0000003540)=""/18, 0x12}], 0x8, &(0x7f0000003600)=""/112, 0x70}, 0x2}, {{&(0x7f0000003680)=@xdp, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/15, 0xf}, {&(0x7f0000004740)=""/28, 0x1c}, {&(0x7f0000004780)=""/222, 0xde}, {&(0x7f0000004880)=""/179, 0xb3}, {&(0x7f0000004940)=""/65, 0x41}], 0x6, &(0x7f0000004a40)=""/103, 0x67}, 0x1}], 0x4, 0x200, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) 1m31.052546645s ago: executing program 1 (id=728): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) readv(r1, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/217, 0xd9}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x80840) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, 0x0) syz_usb_disconnect(r6) r7 = syz_usb_connect(0x4, 0x24, &(0x7f0000000200)=ANY=[], 0x0) ioctl$EVIOCRMFF(r6, 0xc0085508, &(0x7f0000000080)=0x6) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x20182, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r8, &(0x7f00000008c0)=[{&(0x7f00000001c0)="2e8b3d0007e03dd65193dfb6c575963f886411", 0x13}, {&(0x7f0000000000)='\n\x00Y`}f\"', 0x7}], 0x4e) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x24040891}, 0x40000) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)=ANY=[@ANYRESOCT, @ANYRESOCT, @ANYRES8=r6, @ANYRESOCT=r8, @ANYRES32=r1, @ANYRESDEC=r8, @ANYRES16=r7, @ANYRES32=r8, @ANYRES16, @ANYRES16=r5, @ANYBLOB="5c9d1ebf4083bf220800485747e9000797b78d9265ee1ee5342052c739a996fc27b89fac3bfa768ad17de2268947ded9ae1b539e794552d89524e876a9", @ANYRES32=r0, @ANYRESDEC=r2], 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6c4) close(r10) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write(r9, &(0x7f00000002c0)="7b2d73c47e1afa7e795a7a04509cf76c3ad9e90a6e03444ba714efa039e7124b93e2c634af4069979c470f0e3a6fb816912ca75598f738c69c85cec8ac29423754b511e97add09c333f01004fc705686ace5658a597b244561c1e227c19f88f5baacaa5e361e845c211f56de06968c61a2840ff24622d6957e92f39bb75df1cd00e747c23a98506f1216c4beb5dbbf8d1d645ab45969d11cb4c60c11c0c8be251ee267ed67dea93062f8dbb9bcd2348f112ad84c8118b608e1fa667199d66f2e58049ae7abd02624655618f53ca0", 0xce) read$FUSE(r9, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000000200)={0x50, 0xffffffffffffffda, r11, {0x7, 0x1f, 0xe0000000, 0x54480439, 0x400b, 0xd6af, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r9, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) 1m28.074325859s ago: executing program 1 (id=758): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_usb_connect$midi(0x4, 0x70, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES8=r1], 0x0) syz_usb_control_io(r2, &(0x7f0000000280)={0x2c, &(0x7f0000000080)={0x0, 0x6, 0x25, {0x25, 0x31, "841ba4354a1986de90b4126bb6fdbe6b18e2faa961a045ae71616d2a4a2d4c46faf3b4"}}, &(0x7f00000000c0)={0x0, 0x3, 0xcf, @string={0xcf, 0x3, "93a93eed012849044b42b26ab50d9f35e6912eaead0671ebe9300ac8fea696576af954755b754e06e34c866f44f3718c66185985ccd30a9b75e64e4b4734d8dc5a735de604b8f8553dcd2665e79a7a54909503a9006990361af34d17d66a21c525c3538b72f751265fe1bb5709bcf58e7318c5b95de6021006d7dff3adf8c2fed5916efd3cfc5dcca94187aaa73bdcd1c6e2d1bc2fb07f2adcecd94a122108e070acc4b4ddb23a5195ac884ba1e154874b0e07728fde6d5773a322b305ceb832b8828d093fcb898ecda64c7084"}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x3, 0x8, 0xf5, "13410700", "72e49a05"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x10, 0x1, 0x1d, 0x6, 0x6, 0x9}}}, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x20, 0xb, 0xf5, "2aae0b822b9fd737d645d10b02f052446ececa892c81d40e190b1f8f8b4123a0ffb5b2ee7a55ea3ff542c1015e9521e97f3d8d9bdc861cb28c5d2a6289bc76781ca9722727bc5cbc1727e5a1cd44b80f9d3aa296e26be82f08525183d9f9e7695169fa600a3c7f4b1e3a5efed3655783ce53736173b6599d98c76deeb2709d90cd25e6b831c959742331098326f5c8cde325e1a3c322945f4ed28d32d3ceaf565d7b20472dffc618216f6f37a38c736f45eb8d75a56dceecc05b8a58f42efef162af1574ed2d0e3f35753987f4dbda4198c349654d3efcdb91df5601ea49df99eef1e25370c06d00e86013a1be1e393981b4b51da1"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0xe0, 0x20, [0x0]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0xe}, &(0x7f0000000540)={0x40, 0xb, 0x2, "5eba"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0xfffb}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, &(0x7f0000000600)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000640)={0x40, 0x19, 0x2, "c942"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x4}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0xd}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x9}}) (async, rerun: 32) syz_usb_control_io$cdc_ecm(r2, 0xfffffffffffffffc, &(0x7f00000009c0)={0x1c, &(0x7f0000000840)={0x20, 0x6, 0xe0, "d28efde5efe54486b9c564e6620c984dc11199e36e03057a20e32d5b5c7bc0a7cbd3a7bb92860df2f3bbe5ebfd50df64816f2ecbfe23fef642c206669c5cb689fc9872d3c5d39a163f7c97be5781b012dbd897dc77137d4cb5169c7f2f51d0f1bf15bc2dd1537f45b2456844a8c7af6154fd9bb66b45ec5267915a11d36f8fc26f9ac947bfe88d6cbc887335e67492a4f448165b80a4931c90e4a10f3fb31afdb9f4fd10bcd39227880671d2b577e9a07ff11b2313cf3f7e5435a8aac57e4eb35829a2f7176dfe12a71ad67439307e7ae448a74237c60bddc48b80f0bfb6d182"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0xfd}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x6}}) (async, rerun: 32) unshare(0x6020400) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) (async, rerun: 32) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) (rerun: 32) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 1m27.472164548s ago: executing program 1 (id=764): sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x40814) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000107d1eb42d00000000000109022400010000002209040000010300020009210000000122040009058103"], 0x0) unshare(0x60000600) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "49531c24"}]}}, 0x0}, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x4) 1m26.880405857s ago: executing program 1 (id=772): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f0000000000)='./file0\x00', 0xb) r2 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r2, 0x3, &(0x7f0000000000)={{r3, r4+10000000}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(r2, 0x0) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x80000003}}, 0x50) 1m26.625589165s ago: executing program 1 (id=774): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r0, 0x4140aecd, &(0x7f0000000000)={{0xffffffff, 0x4000, 0xf, 0x3, 0xd, 0x7, 0x0, 0x10, 0xff, 0x5, 0x8, 0x6}, {0x26000, 0x8080000, 0xb, 0xa5, 0x2, 0xa, 0x2, 0x0, 0xa4, 0x6, 0x4}, {0xdddd0000, 0x100000, 0xc, 0x6, 0x5, 0x6, 0xa, 0x3, 0x0, 0x4, 0xfc, 0x6}, {0xf000, 0x80a0000, 0x10, 0x2, 0xf, 0x3, 0x10, 0xd2, 0x8, 0x6, 0x7, 0x3}, {0x70000, 0xeeef0000, 0xc, 0x8, 0xa7, 0x5, 0x3, 0x48, 0x37, 0x87, 0xb, 0x2}, {0xd000, 0xeeee8000, 0x14, 0x2, 0x4, 0x0, 0x9, 0x0, 0x0, 0x40, 0x0, 0x1}, {0x5000, 0xeeee0000, 0x3, 0x2, 0x5, 0x9, 0x8a, 0xf7, 0x1, 0xef, 0x9, 0x4}, {0xfec00000, 0x4000, 0x0, 0x9, 0x3, 0x73, 0x70, 0x5, 0xda, 0x2, 0x8, 0xe4}, {0x60000, 0x3ff}, {0x54000}, 0x20000002, 0x0, 0xb000, 0x200, 0x8, 0x4001, 0x5000, 0x0, [0xa, 0xffffffff, 0x0, 0x9]}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) fcntl$setstatus(r1, 0x4, 0x400) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000140)={[0x200, 0x3, 0x4, 0x40, 0x9, 0xffffffffffffffff, 0x2, 0x100000000, 0x2219, 0x6, 0x2, 0x5, 0x7fffffffffffffff, 0x3, 0x4, 0xa812], 0x200000}) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200), 0x600000, 0x0) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @local, 0x2}, 0x1c) r3 = dup(r2) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x706}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x400a0}, 0xc050) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @ioapic={0x80a0000, 0x9, 0xa, 0x800, 0x0, [{0x6, 0x5, 0x1, '\x00', 0xb}, {0x2, 0x8, 0x50}, {0x10, 0x7, 0xd, '\x00', 0x8}, {0x9, 0x6, 0x4, '\x00', 0xc2}, {0x4, 0x3, 0x6, '\x00', 0x1}, {0x2, 0xf9, 0x2, '\x00', 0xf4}, {0x5, 0x4c, 0x20, '\x00', 0x6}, {0x1, 0x7, 0x4, '\x00', 0x3}, {0x0, 0xa3, 0x8, '\x00', 0x5}, {0x81, 0x1, 0x2, '\x00', 0x8}, {0x0, 0x7f, 0x80, '\x00', 0x4}, {0xf4, 0xe, 0x9, '\x00', 0x23}, {0x2, 0x1, 0xb, '\x00', 0x9}, {0x81, 0xf3, 0x7d, '\x00', 0x80}, {0x23, 0x57, 0x1, '\x00', 0x3}, {0x7, 0x0, 0x20, '\x00', 0x7c}, {0xd, 0x4f, 0x84, '\x00', 0x6}, {0x91, 0x5, 0x4, '\x00', 0x3}, {0x88, 0xa, 0x8e, '\x00', 0x9f}, {0xb5, 0xee, 0x9, '\x00', 0x4}, {0x6f, 0x2, 0x2, '\x00', 0x80}, {0x8, 0xd, 0x9, '\x00', 0x8}, {0x40, 0x5, 0x6, '\x00', 0x1}, {0x3, 0x8, 0x5, '\x00', 0x57}]}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r4, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x11) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000740)={{0x0, 0xa, 0x4, 0x2, 0x46ce, 0x4, 0xc, 0x1, 0x9, 0xffffffff, 0x7, 0x9, 0x5, 0x81, 0x5}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000800)={{r6, 0xfffffffffffffe00, 0x6, 0x6, 0x6, 0x9, 0x6, 0x1, 0x0, 0x9, 0x7fff, 0x0, 0x7, 0x40, 0x8000000000000000}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f00000008c0), 0x101000, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r4, 0x506, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8000, 0xd}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r3) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x44, r8, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r9 = fsmount(r2, 0x0, 0x1) fcntl$getownex(r9, 0x10, &(0x7f0000000b80)) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c00)={0x148, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4a7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf8a4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc45}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x21716c3d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4b0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x26c}]}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4040}, 0x20000800) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000e00)='syz0\x00', &(0x7f0000000e40)='./file0\x00', 0xffffffffffffff9c) ioctl$BTRFS_IOC_RM_DEV(r7, 0x5000940b, &(0x7f0000000e80)={{r1}, "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"}) syz_open_pts(r9, 0x0) read$FUSE(r2, &(0x7f0000001e80)={0x2020}, 0x2020) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000003ec0)={0x904, r9}, 0x0) r10 = creat(&(0x7f0000003f00)='./file0\x00', 0x28) ioctl$NILFS_IOCTL_GET_SUINFO(r10, 0x80186e84, &(0x7f0000003f80)={&(0x7f0000003f40)=[{0x9, 0x9, 0x1}], 0x1, 0x10, 0x4, 0x1}) ioctl$BLKCRYPTOIMPORTKEY(r2, 0xc0401289, &(0x7f0000004040)={&(0x7f0000003fc0)="104cbb416e296ea4339eeb2c6b63db40e0bf95baac01d344f3d5700238c7fd49a7aafadcd89e2ab5", 0x28, &(0x7f0000004000)=""/30, 0x1e}) 1m26.586110426s ago: executing program 32 (id=774): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r0, 0x4140aecd, &(0x7f0000000000)={{0xffffffff, 0x4000, 0xf, 0x3, 0xd, 0x7, 0x0, 0x10, 0xff, 0x5, 0x8, 0x6}, {0x26000, 0x8080000, 0xb, 0xa5, 0x2, 0xa, 0x2, 0x0, 0xa4, 0x6, 0x4}, {0xdddd0000, 0x100000, 0xc, 0x6, 0x5, 0x6, 0xa, 0x3, 0x0, 0x4, 0xfc, 0x6}, {0xf000, 0x80a0000, 0x10, 0x2, 0xf, 0x3, 0x10, 0xd2, 0x8, 0x6, 0x7, 0x3}, {0x70000, 0xeeef0000, 0xc, 0x8, 0xa7, 0x5, 0x3, 0x48, 0x37, 0x87, 0xb, 0x2}, {0xd000, 0xeeee8000, 0x14, 0x2, 0x4, 0x0, 0x9, 0x0, 0x0, 0x40, 0x0, 0x1}, {0x5000, 0xeeee0000, 0x3, 0x2, 0x5, 0x9, 0x8a, 0xf7, 0x1, 0xef, 0x9, 0x4}, {0xfec00000, 0x4000, 0x0, 0x9, 0x3, 0x73, 0x70, 0x5, 0xda, 0x2, 0x8, 0xe4}, {0x60000, 0x3ff}, {0x54000}, 0x20000002, 0x0, 0xb000, 0x200, 0x8, 0x4001, 0x5000, 0x0, [0xa, 0xffffffff, 0x0, 0x9]}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) fcntl$setstatus(r1, 0x4, 0x400) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000140)={[0x200, 0x3, 0x4, 0x40, 0x9, 0xffffffffffffffff, 0x2, 0x100000000, 0x2219, 0x6, 0x2, 0x5, 0x7fffffffffffffff, 0x3, 0x4, 0xa812], 0x200000}) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200), 0x600000, 0x0) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @local, 0x2}, 0x1c) r3 = dup(r2) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x706}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x400a0}, 0xc050) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @ioapic={0x80a0000, 0x9, 0xa, 0x800, 0x0, [{0x6, 0x5, 0x1, '\x00', 0xb}, {0x2, 0x8, 0x50}, {0x10, 0x7, 0xd, '\x00', 0x8}, {0x9, 0x6, 0x4, '\x00', 0xc2}, {0x4, 0x3, 0x6, '\x00', 0x1}, {0x2, 0xf9, 0x2, '\x00', 0xf4}, {0x5, 0x4c, 0x20, '\x00', 0x6}, {0x1, 0x7, 0x4, '\x00', 0x3}, {0x0, 0xa3, 0x8, '\x00', 0x5}, {0x81, 0x1, 0x2, '\x00', 0x8}, {0x0, 0x7f, 0x80, '\x00', 0x4}, {0xf4, 0xe, 0x9, '\x00', 0x23}, {0x2, 0x1, 0xb, '\x00', 0x9}, {0x81, 0xf3, 0x7d, '\x00', 0x80}, {0x23, 0x57, 0x1, '\x00', 0x3}, {0x7, 0x0, 0x20, '\x00', 0x7c}, {0xd, 0x4f, 0x84, '\x00', 0x6}, {0x91, 0x5, 0x4, '\x00', 0x3}, {0x88, 0xa, 0x8e, '\x00', 0x9f}, {0xb5, 0xee, 0x9, '\x00', 0x4}, {0x6f, 0x2, 0x2, '\x00', 0x80}, {0x8, 0xd, 0x9, '\x00', 0x8}, {0x40, 0x5, 0x6, '\x00', 0x1}, {0x3, 0x8, 0x5, '\x00', 0x57}]}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r4, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x11) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000740)={{0x0, 0xa, 0x4, 0x2, 0x46ce, 0x4, 0xc, 0x1, 0x9, 0xffffffff, 0x7, 0x9, 0x5, 0x81, 0x5}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000800)={{r6, 0xfffffffffffffe00, 0x6, 0x6, 0x6, 0x9, 0x6, 0x1, 0x0, 0x9, 0x7fff, 0x0, 0x7, 0x40, 0x8000000000000000}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f00000008c0), 0x101000, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r4, 0x506, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8000, 0xd}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r3) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x44, r8, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r9 = fsmount(r2, 0x0, 0x1) fcntl$getownex(r9, 0x10, &(0x7f0000000b80)) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c00)={0x148, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4a7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf8a4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc45}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x21716c3d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4b0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x26c}]}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4040}, 0x20000800) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000e00)='syz0\x00', &(0x7f0000000e40)='./file0\x00', 0xffffffffffffff9c) ioctl$BTRFS_IOC_RM_DEV(r7, 0x5000940b, &(0x7f0000000e80)={{r1}, "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"}) syz_open_pts(r9, 0x0) read$FUSE(r2, &(0x7f0000001e80)={0x2020}, 0x2020) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000003ec0)={0x904, r9}, 0x0) r10 = creat(&(0x7f0000003f00)='./file0\x00', 0x28) ioctl$NILFS_IOCTL_GET_SUINFO(r10, 0x80186e84, &(0x7f0000003f80)={&(0x7f0000003f40)=[{0x9, 0x9, 0x1}], 0x1, 0x10, 0x4, 0x1}) ioctl$BLKCRYPTOIMPORTKEY(r2, 0xc0401289, &(0x7f0000004040)={&(0x7f0000003fc0)="104cbb416e296ea4339eeb2c6b63db40e0bf95baac01d344f3d5700238c7fd49a7aafadcd89e2ab5", 0x28, &(0x7f0000004000)=""/30, 0x1e}) 21.567619436s ago: executing program 2 (id=1282): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, &(0x7f0000000240)={0x40ab}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000810000000800450000300068409a7a0fb45500070190780000001cac1414aa0b019078007f00001d0004ac14141f00"/71], 0x42) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = open(&(0x7f0000000000)='./file0\x00', 0xc00, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r4, 0x40186e8d, &(0x7f0000000280)={&(0x7f0000000040)=[{0x6, 0x1, 0x0, {0x1, 0xe1, 0x2}}, {0x7, 0x2, 0x0, {0x5, 0x4, 0x2}}, {0x1, 0x2, 0x0, {0xfffffffffffffffe, 0x5, 0x2}}], 0x3, 0x20, 0x2, 0x62}) 21.424550001s ago: executing program 2 (id=1288): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) (async) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) (async) ioprio_set$pid(0x2, 0x0, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)) (async) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)=0x0) timer_settime(r2, 0x1, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) gettid() (async) r4 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(r4, 0x7) (async) tkill(r4, 0x7) close_range(r3, 0xffffffffffffffff, 0x0) sync() (async) sync() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f00000000c0)={0x0, 0x1, 0x5, 0x4}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r7, &(0x7f0000000140)="ed420bb083", 0x5, 0x100400c1, &(0x7f0000000200)={0x11, 0x8100, r8, 0x1, 0x87, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) (async) sendto$packet(r7, &(0x7f0000000140)="ed420bb083", 0x5, 0x100400c1, &(0x7f0000000200)={0x11, 0x8100, r8, 0x1, 0x87, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21.405971001s ago: executing program 2 (id=1291): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000080)=0x100, 0x4) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r1, 0xc004ae0a, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) 21.348464173s ago: executing program 2 (id=1293): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="97950bf1263a626a512cc8545f34af8f44f14e83493d2ed4494dbd07f46a6c423ddd17eecb3f3e84ae3742f6c6bcf8d8796df5c2f9f7e51558503a6f64699009eab79a0a7b169de2e80328909984a4767c50ea033528b3567d4817ee16e32ca6bfcdedf77d0675e22dfbe037ad238c7f4ec2866727c449c91f2d2cf6b75004b9ff2c184fd05c6b1d28df792eb2f54308cfdc7ccebda993b39a98ea48ae1e34c296a9e11bc7e78b275ec1b5127ca091b62f1056debad70dc8d301fe79c41e0527bfb2025582ab2fbced2246bd652275600cb90d2a5c74bdf958214d8f734b632e1331ca30c06c3761e3c457be"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000600)={0x20, 0x10, 0x6, "ae2964eb4fe2"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000e80)={0x1c, &(0x7f0000000100)={0x0, 0x5, 0x2, "af0b"}, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81d}}}, &(0x7f0000000740)={0x44, &(0x7f0000000440)={0x0, 0xc, 0x5, "f5b93e8070"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r0, &(0x7f0000000900)={0x14, &(0x7f00000007c0)={0x0, 0xc, 0xb4, {0xb4, 0x4, "78ac38deaa91ffdc4b5d31e36d3d6206d9bb804be3729d055babe7a46475cc44c8ebdc00292bbd98410ce408be6bdeca381beb8fd58f6d649079b9fbdc70e88df9514919ce5416284801356a58a261f81082687ff109f1f4eb072fbc57357d761b9848ff41a22acd83afdf962ac01743c3fbe1421bf50c56c811c4cf3e989af41ebc1fb25d6be66a8165266b87355c30d36db16ad5be06ce6d0cf90793ec3605f4afa2a1f661170e7ba04190f94e9d85075a"}}, &(0x7f0000000880)={0x0, 0x3, 0x4d, @string={0x4d, 0x3, "3c32f7a28ff024858e40957823e07eeaac66a2a50d172cd29e965adbad2cf05bec8e22918ef79328197a570a072b57375374ba5830e798376cab2b4d333de2da8a289a4851d776133b2414"}}}, &(0x7f0000000b00)={0x2c, &(0x7f0000000940)={0x40, 0x10, 0x78, "dceafdb58e6188ea4454b116e5ddf7c950cee8194576cfb22bacb24510df2069b0f9191b6544889ef4705455f3169ca41d37748ca1fe785056c0f2b8b1f0732b089a016f90a70a2ef314df97405b7eddc46362af30d3503ea0842ff97d3fa172ab4a65e60506350d960fc08cf684f5ff55c871332338e1b2"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x89}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0xa0}, &(0x7f0000000a80)={0xc0, 0x5, 0x5, "1cc176024c"}, &(0x7f0000000ac0)={0x40, 0x5, 0x2, "d9fa"}}) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) (async) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) (async) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) (async) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='.\x02\x00', 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) syz_usb_control_io$uac3(r0, 0x0, 0x0) (async) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000200)={0x14, &(0x7f0000000040)={0x40, 0xe, 0x47, {0x47, 0xf, "37c28eafa40fae81e4dfaf6d25e812ea7a0caa181500cd2729886b1dfc24cd9258f9fd0499f9eb85a1f3e1441cc9e5dbfb2a26c3ce717de6fa4b22adf56bac66d31cebd601"}}, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79}) 20.880212798s ago: executing program 2 (id=1299): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) shutdown(r0, 0x1) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) socket$unix(0x1, 0x1, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x0, 0x0, 0x401, 0x0, 0x101, 0xe3]}}, 0x5c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x8}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) 20.768659622s ago: executing program 2 (id=1300): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r0, 0x0, 0x0) link(&(0x7f0000000000)='./cgroup/../file0\x00', &(0x7f0000000080)='./cgroup/../file0/file0\x00') 20.759974992s ago: executing program 33 (id=1300): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r0, 0x0, 0x0) link(&(0x7f0000000000)='./cgroup/../file0\x00', &(0x7f0000000080)='./cgroup/../file0/file0\x00') 10.647883282s ago: executing program 3 (id=1332): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async, rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/40, 0x0}) (rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x10000001) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)={0x2}) exit(0x1ff) (async) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 9.117288051s ago: executing program 4 (id=1334): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xc0, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20008000}, 0x8840) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000340), &(0x7f0000000380)=0x8) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000003c0), &(0x7f0000000400)=0x8) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000440)=0x1, 0x4) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r5, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x40, @bearer=@udp='udp:syz2\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0xc090) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r1, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ab}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, 0x0, 0x4000000) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x5, &(0x7f0000000700), 0x4) r8 = syz_open_pts(r7, 0x42041) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r7) sendmsg$BATADV_CMD_GET_HARDIF(r9, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r10, 0x800, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x50) sendmsg$NL80211_CMD_DEAUTHENTICATE(r9, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, r1, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x37}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="87c5cbf1c082"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x68}}, 0x40000) syz_open_dev$ttys(0xc, 0x2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), r11) ioctl$TIOCSWINSZ(r8, 0x5414, &(0x7f0000000a00)={0x0, 0x8, 0x5, 0x9}) sendmsg$AUDIT_USER(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xb0, 0x3ed, 0x8, 0x70bd25, 0x25dfdbfd, "fcf7a88c05e7da56be8f0d9f8f8b7588ab76c2ef401f57b093c52c007d13228e4164f77e878415458c5e2aa4afc97512195274224fe2bc3bdc2da542681aeabc3919a91c7c5de0c42cb55210228dcd38ae874bf3ef099ef8d803e06f96065654cd3b506adc4dde8e3926de6226c584954e1fe24092ea6d8840ecefe2877cc0a83dafb4076f56db91914a72f1e6d681dae72e15fefaa8052058421fe66b6773", [""]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r9) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r12, &(0x7f0000000f00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x12016}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000c40)={0x26c, r13, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0xce, 0x2a, [@random={0x0, 0x9f, "0f96e2d4087fe84643df80f62d6cf2f4f5f2c1d262bc3171cdc97c342ec9266dc80e99f6116e889776bbf8dda4fe35399d2f84ad95b34ddb029179fdd24dbd7b7891a4aac2bbd7d5e6efc27c6a88b6b2122956406b05edb321fe411ec7e36577ecd273bdc57055da5f54f684e5fa2e7fddbd7b4e62a83a890a4d0e290f3f18d3b49fc441f13d04a7691e5dbac45f70e621bdbe4b63d342429df2be8c2b81f3"}, @gcr_ga={0xbd, 0x6}, @mesh_chsw={0x76, 0x6, {0x8, 0x1, 0xf}}, @channel_switch={0x25, 0x3, {0x1, 0xa5, 0xd}}, @gcr_ga={0xbd, 0x6, @device_b}, @ibss={0x6, 0x2, 0x8}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_IE={0x174, 0x2a, [@link_id={0x65, 0x12, {@initial, @device_b, @device_b}}, @mesh_id={0x72, 0x6}, @gcr_ga={0xbd, 0x6, @broadcast}, @preq={0x82, 0x62, {{0x0, 0x1, 0x1, 0x0, 0x1}, 0x31, 0x80, 0x5, @device_a, 0xf, @value, 0x80000001, 0x585, 0x6, [{{0x1}, @device_a, 0xd28}, {{0x0, 0x0, 0x1}, @broadcast, 0x9}, {{0x0, 0x0, 0x1}, @device_a, 0x1}, {{0x1, 0x0, 0x1}, @device_b, 0x2}, {{0x0, 0x0, 0x1}, @device_a, 0x6}, {{0x0, 0x0, 0x1}, @broadcast, 0x495}]}}, @chsw_timing={0x68, 0x4, {0x8, 0x5}}, @ht={0x2d, 0x1a, {0xc, 0x0, 0x1, 0x0, {0x7, 0x1, 0x0, 0x4, 0x0, 0x0, 0x1, 0x2}, 0x1, 0x8, 0x81}}, @fast_bss_trans={0x37, 0xc4, {0xf, 0x4, "44330fb924a4da0e2bbf1740ab51606c", "3a0b4ffed9b7df2604dec7ae519582a172af7fd99a574fe48cac579dbbccd4e3", "c15f8c3fcc2489f2d28c9e4251da051f5a96ef55fde324d2e3dad4a1192c7a65", [{0x2, 0x20, "acebd8e7a3046ca1de7eb93bd404af9d5ae50bacd4fd4f51cc1a56ee5f21d382"}, {0x3, 0xb, "b83b38aa1cdca8c3229474"}, {0x2, 0x28, "06aab813eff0f64571b92389ccbac1ba9d410f86f5265c23ec8e6e1709005598e0b8f97104589588"}, {0x4, 0x17, "8f3a54f22b186dd4d86080109215650934d01d4b9451f7"}]}}]}, @NL80211_ATTR_IE={0x9, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0xb7, 0x3}}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 9.117072201s ago: executing program 3 (id=1335): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300120018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) write$uinput_user_dev(r1, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x7, 0x1}, 0x4a, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x1, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x1, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xd11, 0x0, 0x1ab9, 0x0, 0x2, 0x0, 0xfffffffb, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0xc50, 0x6, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x21, 0x20000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0xffffffff, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0xc, 0x0, &(0x7f0000000000)) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000240)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000a40)={[0xa, 0x6, 0xb, 0x7, 0x464, 0x8000040000000001, 0xb3, 0x8, 0x4b1d, 0x4000000000000008, 0xfff, 0x2081, 0x7, 0x1ff, 0xe6, 0xb286], 0x4, 0x40410}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x14, 0x301, 0x70bd24, 0xfffffffc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d2}, 0x4040000) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.503724292s ago: executing program 0 (id=1336): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) munmap(&(0x7f00001f6000/0x4000)=nil, 0x4000) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f00006d4000/0x1000)=nil, 0x1000, 0x200000d, 0x40010, r0, 0x80000000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000054e000/0x400000)=nil) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x18, r3, 0x325, 0xfffffffe, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000a86000/0x2000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x2000, 0x2, 0x2}) 7.503094122s ago: executing program 4 (id=1337): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000140)=0x80, 0x8) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0100001000070000000000feffffffff020000000000000000000000000001e00000020000000000000000000000004e280000000000421cc25c003c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000002b000000fe8000000000000000000000000000bb00000000000000000000000000000000020000000000000000000000000000000000001000000400ffffffffffffffff0000000000000000ffffffffffffffff000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a00020034000000000000004c001400637263333263000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000"], 0x13c}}, 0x0) renameat2(r0, &(0x7f00000006c0)='./cgroup\x00', r0, &(0x7f00000003c0)='./mnt\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYBLOB="010026bd7000000000000a0000001800048013000100a11b40210a6f62726f616463617374", @ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYRESDEC=r3], 0x2c}}, 0x0) openat(r0, &(0x7f0000000100)='./cgroup\x00', 0x1493c2, 0x40) 7.502734442s ago: executing program 3 (id=1338): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x20044045}, 0x20000880) 5.752702347s ago: executing program 0 (id=1339): r0 = socket$pppl2tp(0x18, 0x1, 0x1) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) accept4$vsock_stream(r0, 0x0, 0x0, 0x80000) 5.752233637s ago: executing program 4 (id=1340): fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x20009, 0x2, 0x18, 0x5, 0x2, 0x403, 0x80000000, 0x0, 0x20000008, 0x0, 0x20000006, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0xffff, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0xfffffffe, 0x400, 0xe, 0x4, 0xffffffff, 0x7f, 0x8, 0x2000009, 0x1, 0x199d, 0x6, 0x1, 0x9, 0xffffffff, 0x4, 0x1, 0x1000, 0x5, 0x35, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x200025, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x5, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0xffffffff, 0x3fc, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x68, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0x9, 0x2, 0x0, 0x200, 0x401, 0xc, 0x2, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x5, 0x7, 0xd159, 0x3], [0x401, 0x8000c584, 0x5, 0xcc3, 0x7, 0x9, 0x404, 0x4, 0x4008, 0xa, 0x6, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1ff, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x6, 0x5, 0x80, 0x9, 0x5, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0xfffffffc, 0x8, 0x3, 0x3ff, 0x20000006, 0x9, 0x95e, 0xffffffff, 0x3ff, 0x1000, 0x5, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x200003, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x10002, 0x1, 0x3, 0x88, 0x2, 0x3, 0x4, 0x40050, 0xae9, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7c, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x6, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xfffff734, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0xffffffff, 0x44, 0x409, 0x3, 0x6, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x6, 0x3, 0x200, 0x7, 0xfa6, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0x1f, 0x136, 0x6]}, 0x45c) capset(&(0x7f0000001440)={0x19980330}, &(0x7f0000001400)={0x0, 0x2}) r1 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x770a, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x9) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x88140, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae03, 0x37) r3 = syz_clone(0x6040000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = syz_open_procfs$pagemap(r3, &(0x7f0000000040)) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000031c0), 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) read$FUSE(r6, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$FICLONE(r8, 0x40049409, r4) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x32) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, 0x0) 5.751967917s ago: executing program 3 (id=1341): socketpair(0x25, 0x80000, 0x200, &(0x7f0000000040)) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x4, 0x0, {0x9, 0x21, 0x20, 0x0, 0x1, {0x22, 0x24}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xff, 0x8, 0xc5}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000e00)={0x2c, &(0x7f0000000ac0)=ANY=[@ANYBLOB="40062400000024113125417fa88240a93ace11364bad05adfc"], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.751621297s ago: executing program 0 (id=1342): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000080), 0x4) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, &(0x7f0000000140)=0xa) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) (rerun: 64) accept$inet6(r0, &(0x7f0000001600)={0xa, 0x0, 0x0, @empty}, &(0x7f0000001640)=0x1c) (async) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) (async, rerun: 32) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000180)='A') (async, rerun: 32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000005b582d"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r3, 0x3309) (async, rerun: 32) r4 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async, rerun: 32) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000008c0)={0xe8d, 0x6, 0x4, 0xffffffff, 0x7}) (async, rerun: 64) pwritev2(r4, &(0x7f0000002a40)=[{&(0x7f0000002880)='3>', 0x2}], 0x1, 0x1, 0x3, 0x4) (async, rerun: 64) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x20040050) (async) tee(r2, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x1000084, &(0x7f00000001c0)={[{@verity_off}, {@redirect_dir_on}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir_on}, {@index_off}, {@metacopy_off}, {@volatile}]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000100)={0x3, 0x0, 0x9000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x4, 0x2b, 0x5, 0x3, 0xd, 0x13, 0xfd, 0xd, 0x4, [0x800, 0x6, 0x8, 0x8, 0x80000001, 0x5, 0x2, 0xf]}}) (async) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000080)=""/74) 3.953650744s ago: executing program 0 (id=1343): r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x8, &(0x7f0000000200), 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000040)={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x14) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000500)={'bridge0\x00', &(0x7f0000000140)=@ethtool_cmd={0xb, 0x0, 0x10000c, 0x4, 0x5, 0xd, 0x8, 0x7, 0x4, 0xd0, 0x101, 0xfffffff9, 0x222, 0x0, 0xa, 0xb701, [0xcf, 0x59c]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='attr\x00') getdents64(r5, &(0x7f0000000040)=""/53, 0x35) r6 = open(&(0x7f0000000100)='./file0\x00', 0x440, 0x104) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000140)={&(0x7f000043d000/0x4000)=nil, &(0x7f000018d000/0x1000)=nil, 0x4000, 0x1}) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x891d, &(0x7f0000001b00)={'ip_vti0\x00', 0x0}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000000c0)) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000406307812040000102030109026e0003017f6006080b0002012030230904000000010130000a2401100a00090000000904010000010230000904010101010230000905010960002503050a2525010400000500000c0402"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 3.951289224s ago: executing program 4 (id=1344): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x30) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000100)=0x46c, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d", 0x8c}], 0x1}}], 0x1, 0x4000000) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000440)={{{@in=@remote, @in6=@mcast1, 0x4e20, 0x5, 0x4e23, 0xffff, 0x2, 0x80, 0x0, 0x6, 0x0, 0xee01}, {0x2, 0x6df91a2, 0x26e, 0x7, 0x10000, 0x100000001, 0x9, 0x5d40a470}, {0x0, 0x25, 0x7, 0x136d1c0c}, 0x0, 0x6e6bb0, 0x2, 0x0, 0x1, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x4d4, 0x32}, 0x2, @in=@broadcast, 0x0, 0x0, 0x1, 0x8, 0x1, 0x8, 0x5}}, 0xe8) r4 = fsopen(&(0x7f0000000080)='pstore\x00', 0x1) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000001100)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x46, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x2}}) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000400)='rootcontext', &(0x7f0000000300)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd970x0}, 0x2020) write$FUSE_POLL(r2, &(0x7f00000024c0)={0x18, 0x0, r3, {0x10001}}, 0x18) r4 = dup(r1) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)={0x68, 0x26, 0x603, 0x70bd28, 0x25dfdbfe, "", [@nested={0x58, 0xce, 0x0, 0x1, [@typed={0x51, 0xe9, 0x0, 0x0, @str='cmdline\x00\xa9\x1c\xe7\xdc\x85:\xd6\x87\xf4Q\xa7X$i\xb6\xa4G\xb7j\xcc\xa4\xadB`F\xd3_{\xd0\xd2\xa8b\xa0V\xf0\xe1\xa2\t\x04=\xd0w\xef\x1a\xcf\xc3<-\xe0\xfc\x81\xfcp\x8eQ\xdd(\x82\xbe\xc8\v\x11#J\xfa\x0e\x9a\x12/'}]}]}, 0x68}], 0x1, 0x0, 0x0, 0x4000000}, 0x40) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x100000000040008}}}}}}}, 0x3e) 2.038130635s ago: executing program 3 (id=1348): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x7, 0x10, 0xa, 0x1, {{0x1a, 0x4, 0x0, 0x7, 0x68, 0x65, 0x0, 0x43, 0x29, 0x0, @rand_addr=0x64010102, @multicast1, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0x29, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0x7, "8862482695"}, {0x1, 0xd, "2906f1a1020be4922da038"}, {0x0, 0x11, "d1d1de84b70c21e42e8973f25fba6d"}]}, @generic={0x7, 0xf, "640bd02443fed636b4d008ea19"}]}}}}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', r1, 0x29, 0x10, 0x4, 0x5, 0x41, @rand_addr=' \x01\x00', @mcast2, 0x40, 0xcd8b1908ad54041f, 0x2, 0x9}}) 2.723ms ago: executing program 0 (id=1349): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip6gre0\x00', 0x10) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000340)={0xfffffffe, 0x2, 0x6}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x34, r2, 0x1, 0x70bd2a, 0x25dfdbfa, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4) dup(r3) syz_usb_connect$uac1(0x2, 0xaa, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYBLOB='\n', @ANYBLOB="4c92900a4a6799a15d56df2c760a4e8c88f1517a06418de3b417263307e5a6bff253aa93934cbf442c720174cdfbd574fa883623138a9c33895a9483338fc32cae24ad6e66190a0bd6693971db61443dca1e410f61713bb58bffce"], 0x0) 0s ago: executing program 4 (id=1350): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000500)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x12, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r1 = syz_open_pts(r0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = dup3(r1, r0, 0x0) syz_open_pts(r2, 0x4181) read$FUSE(r2, &(0x7f0000003f80)={0x2020}, 0x2020) prctl$PR_GET_IO_FLUSHER(0x3a) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2008820, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f00000000c0)=0x5) read$watch_queue(r2, &(0x7f0000000340)=""/133, 0x85) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x400, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400004c}, 0x8001) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r9, 0xae9a) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x4, 0x7, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x6, 0x7, 0x0, 0x4, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x80200}) ioctl$KVM_RUN(r9, 0xae80, 0x0) kernel console output (not intermixed with test programs): 9054047.312:16761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3326 comm="syz.4.885" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f119ce59 code=0x7ffc0000 [ 163.547378][ T36] audit: type=1326 audit(1779054047.312:16762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3326 comm="syz.4.885" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fc3f119ce59 code=0x7ffc0000 [ 163.573286][ T36] audit: type=1326 audit(1779054047.312:16763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3326 comm="syz.4.885" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f119ce59 code=0x7ffc0000 [ 163.598928][ T36] audit: type=1326 audit(1779054047.312:16764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3326 comm="syz.4.885" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fc3f119ce59 code=0x7ffc0000 [ 163.624726][ T36] audit: type=1326 audit(1779054047.312:16765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3326 comm="syz.4.885" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f119ce59 code=0x7ffc0000 [ 163.650977][ T36] audit: type=1326 audit(1779054047.312:16766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3326 comm="syz.4.885" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3f119ce59 code=0x7ffc0000 [ 163.653804][ T363] usb 4-1: unable to get BOS descriptor or descriptor too short [ 163.689568][ T313] usb 3-1: unit 4 not found! [ 163.694819][ T363] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 163.702614][ T363] usb 4-1: can't read configurations, error -71 [ 163.741044][ T313] usb 3-1: USB disconnect, device number 86 [ 163.765525][ T2711] udevd[2711]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 163.910240][ T3345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.918893][ T3345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.149407][ T388] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 164.208865][ T3351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.218491][ T3351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.299283][ T388] usb 5-1: Using ep0 maxpacket: 16 [ 164.305663][ T388] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 164.314121][ T388] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.324732][ T388] usb 5-1: config 0 has no interface number 0 [ 164.333635][ T388] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 164.342902][ T388] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.351193][ T388] usb 5-1: Product: syz [ 164.355366][ T388] usb 5-1: Manufacturer: syz [ 164.360825][ T388] usb 5-1: SerialNumber: syz [ 164.367155][ T388] usb 5-1: config 0 descriptor?? [ 164.374219][ T388] uvcvideo 5-1:0.105: Found Unit with invalid ID 0 [ 164.381261][ T388] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 164.387631][ T388] usb 5-1: No valid video chain found. [ 164.484584][ T341] usb 1-1: USB disconnect, device number 78 [ 164.519289][ T31] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 164.573274][ T313] usb 5-1: USB disconnect, device number 9 [ 164.669365][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 164.682675][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 164.700146][ T31] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 228, changing to 7 [ 164.712935][ T31] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice= 0.40 [ 164.722145][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.730249][ T31] usb 3-1: Product: syz [ 164.734648][ T31] usb 3-1: Manufacturer: syz [ 164.741348][ T31] usb 3-1: SerialNumber: syz [ 164.763830][ T36] audit: type=1326 audit(1779054048.582:16767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3382 comm="syz.0.902" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba1819ce59 code=0x0 [ 164.788687][ T36] audit: type=1326 audit(1779054048.582:16768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3382 comm="syz.0.902" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba1819ce59 code=0x0 [ 164.825910][ T3390] netlink: 'syz.0.903': attribute type 10 has an invalid length. [ 164.833817][ T3390] netlink: 40 bytes leftover after parsing attributes in process `syz.0.903'. [ 164.842796][ T3390] veth1: entered promiscuous mode [ 164.848859][ T3391] netlink: 'syz.0.903': attribute type 10 has an invalid length. [ 164.856769][ T3391] netlink: 40 bytes leftover after parsing attributes in process `syz.0.903'. [ 164.947792][ T3349] SELinux: Context system_u:object_r:udev_exec_t:s0 is not valid (left unmapped). [ 164.947796][ T36] audit: type=1400 audit(1779054048.762:16769): avc: denied { relabelfrom } for pid=3347 comm="syz.2.893" name="UNIX" dev="sockfs" ino=29086 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 165.007118][ T31] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 165.014077][ T31] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 165.024341][ T31] usb 3-1: USB disconnect, device number 87 [ 165.159396][ T865] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 165.289332][ T363] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 165.310400][ T865] usb 4-1: config 0 interface 0 altsetting 149 endpoint 0x81 has an invalid bInterval 24, changing to 8 [ 165.321659][ T865] usb 4-1: config 0 interface 0 altsetting 149 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.334675][ T865] usb 4-1: config 0 interface 0 has no altsetting 0 [ 165.341340][ T865] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 165.350504][ T865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.359046][ T865] usb 4-1: config 0 descriptor?? [ 165.429380][ T363] usb 1-1: device descriptor read/64, error -71 [ 165.449327][ T313] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 165.580512][ T3419] netlink: 'syz.2.912': attribute type 1 has an invalid length. [ 165.588282][ T3419] netlink: 1 bytes leftover after parsing attributes in process `syz.2.912'. [ 165.603419][ T313] usb 5-1: unable to get BOS descriptor or descriptor too short [ 165.612164][ T313] usb 5-1: config 1 has an invalid interface number: 204 but max is 2 [ 165.620725][ T313] usb 5-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 165.629922][ T313] usb 5-1: config 1 has no interface number 3 [ 165.636059][ T313] usb 5-1: config 1 interface 204 altsetting 135 has 0 endpoint descriptors, different from the interface descriptor's value: 19 [ 165.649772][ T313] usb 5-1: config 1 interface 204 has no altsetting 0 [ 165.656586][ T313] usb 5-1: config 1 interface 2 has no altsetting 0 [ 165.657306][ T3422] netlink: 'syz.2.913': attribute type 33 has an invalid length. [ 165.664989][ T313] usb 5-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 165.680137][ T363] usb 1-1: device descriptor read/64, error -71 [ 165.686454][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.694497][ T313] usb 5-1: Product: syz [ 165.698684][ T313] usb 5-1: Manufacturer: syz [ 165.703356][ T313] usb 5-1: SerialNumber: syz [ 165.711321][ T313] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 165.768228][ T865] lenovo 0003:17EF:6067.0027: unknown main item tag 0xe [ 165.775309][ T865] lenovo 0003:17EF:6067.0027: item fetching failed at offset 17/40 [ 165.783462][ T865] lenovo 0003:17EF:6067.0027: hid_parse failed [ 165.789709][ T865] lenovo 0003:17EF:6067.0027: probe with driver lenovo failed with error -22 [ 165.931098][ T363] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 165.939720][ T313] usb 5-1: USB disconnect, device number 10 [ 165.953714][ T3332] udevd[3332]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 165.959308][ T341] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 165.973136][ T865] usb 4-1: USB disconnect, device number 89 [ 166.040656][ T45] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 166.048969][ T45] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 166.069359][ T363] usb 1-1: device descriptor read/64, error -71 [ 166.139319][ T341] usb 3-1: Using ep0 maxpacket: 16 [ 166.145633][ T341] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.156033][ T341] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.168954][ T341] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 166.178047][ T341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.187518][ T341] usb 3-1: Product: syz [ 166.192000][ T341] usb 3-1: Manufacturer: syz [ 166.196646][ T341] usb 3-1: SerialNumber: syz [ 166.329279][ T363] usb 1-1: device descriptor read/64, error -71 [ 166.439456][ T363] usb usb1-port1: attempt power cycle [ 166.739382][ T865] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 166.779575][ T363] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 166.800444][ T363] usb 1-1: device descriptor read/8, error -71 [ 166.889284][ T865] usb 4-1: Using ep0 maxpacket: 32 [ 166.895604][ T865] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.906612][ T865] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.919571][ T865] usb 4-1: config 0 interface 0 has no altsetting 0 [ 166.926207][ T865] usb 4-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 166.935339][ T865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.944185][ T865] usb 4-1: config 0 descriptor?? [ 166.951438][ T363] usb 1-1: device descriptor read/8, error -71 [ 167.189343][ T363] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 167.210465][ T363] usb 1-1: device descriptor read/8, error -71 [ 167.340350][ T363] usb 1-1: device descriptor read/8, error -71 [ 167.351833][ T3438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.360447][ T3438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.380119][ T3438] syzkaller1: entered promiscuous mode [ 167.385690][ T3438] syzkaller1: entered allmulticast mode [ 167.394917][ T865] lg-g15 0003:046D:0A07.0029: unknown main item tag 0x0 [ 167.402103][ T865] lg-g15 0003:046D:0A07.0029: unknown main item tag 0x0 [ 167.409080][ T865] lg-g15 0003:046D:0A07.0029: unknown main item tag 0x0 [ 167.416201][ T865] lg-g15 0003:046D:0A07.0029: unknown main item tag 0x0 [ 167.423224][ T865] lg-g15 0003:046D:0A07.0029: unknown main item tag 0x0 [ 167.430245][ T865] lg-g15 0003:046D:0A07.0029: unknown main item tag 0x0 [ 167.437233][ T865] lg-g15 0003:046D:0A07.0029: unknown main item tag 0x0 [ 167.445231][ T865] lg-g15 0003:046D:0A07.0029: hidraw0: USB HID v1.01 Device [HID 046d:0a07] on usb-dummy_hcd.3-1/input0 [ 167.449448][ T363] usb usb1-port1: unable to enumerate USB device [ 167.620648][ T865] usb 4-1: USB disconnect, device number 90 [ 168.370418][ T3458] overlayfs: lower data-only dirs require metacopy support. [ 168.389301][ T45] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 168.539284][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 168.545710][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.556155][ T45] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 168.569379][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 168.576011][ T45] usb 1-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 168.585104][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.593796][ T45] usb 1-1: config 0 descriptor?? [ 168.599872][ T45] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 168.624613][ T341] usb 3-1: 0:2 : does not exist [ 168.632874][ T341] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 168.644091][ T341] usb 3-1: USB disconnect, device number 88 [ 168.651902][ T2711] udevd[2711]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 168.669321][ T313] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 168.820716][ T313] usb 4-1: unable to get BOS descriptor or descriptor too short [ 168.829057][ T313] usb 4-1: not running at top speed; connect to a high speed hub [ 168.839624][ T313] usb 4-1: config 129 has an invalid interface number: 80 but max is 0 [ 168.847926][ T313] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 168.856196][ T313] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 168.865658][ T313] usb 4-1: config 129 has no interface number 0 [ 168.872226][ T313] usb 4-1: config 129 has no interface number 1 [ 168.878695][ T313] usb 4-1: config 129 interface 80 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 168.891962][ T313] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 168.902965][ T313] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 168.916113][ T313] usb 4-1: config 129 interface 80 has no altsetting 0 [ 168.923004][ T313] usb 4-1: config 129 interface 5 has no altsetting 0 [ 168.931224][ T313] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 168.940469][ T313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.948448][ T313] usb 4-1: Product: syz [ 168.952829][ T313] usb 4-1: Manufacturer: syz [ 168.957434][ T313] usb 4-1: SerialNumber: syz [ 168.999342][ T341] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 169.150367][ T341] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 171, changing to 7 [ 169.162912][ T341] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 169.172101][ T341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.180852][ T341] usb 3-1: Product: syz [ 169.186367][ T313] usb 4-1: MIDIStreaming interface descriptor not found [ 169.193475][ T341] usb 3-1: Manufacturer: syz [ 169.198335][ T341] usb 3-1: SerialNumber: syz [ 169.209414][ T313] usb 4-1: USB disconnect, device number 91 [ 169.230890][ T2754] udevd[2754]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:129.5/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 169.413004][ T341] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 169.420038][ T341] usb 3-1: unit 6 not found! [ 169.424638][ T341] usb 3-1: unit 8 not found! [ 169.432651][ T341] usb 3-1: USB disconnect, device number 89 [ 169.444364][ T2711] udevd[2711]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 169.683490][ T3480] cgroup: noprefix used incorrectly [ 170.305392][ T3507] random: crng reseeded on system resumption [ 170.327874][ T3507] fuse: Bad value for 'fd' [ 170.579318][ T341] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 170.612319][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 170.612340][ T36] audit: type=1400 audit(1779054054.432:16776): avc: denied { setopt } for pid=3515 comm="syz.3.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 170.612412][ T3516] netlink: 72 bytes leftover after parsing attributes in process `syz.3.943'. [ 170.661035][ T3518] rust_binder: 691: no such ref 0 [ 170.666157][ T3518] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 170.666176][ T3518] rust_binder: Read failure Err(EFAULT) in pid:691 [ 170.675233][ T3518] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 170.681892][ T3518] rust_binder: Read failure Err(EFAULT) in pid:691 [ 170.690323][ T3518] rust_binder: 3517:3518 transaction to 0 failed: EINVAL [ 170.699014][ T3518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.944'. [ 170.720211][ T3520] input input32: cannot allocate more than FF_MAX_EFFECTS effects [ 170.753137][ T341] usb 5-1: Using ep0 maxpacket: 32 [ 170.760640][ T341] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 170.773746][ T341] usb 5-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 170.782912][ T341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.792340][ T341] usb 5-1: config 0 descriptor?? [ 170.823605][ T36] audit: type=1400 audit(1779054054.642:16777): avc: denied { read } for pid=3524 comm="syz.3.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 170.969338][ T865] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 171.039412][ T10] usb 1-1: USB disconnect, device number 83 [ 171.058451][ T3527] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 171.066044][ T45] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 171.119332][ T865] usb 3-1: Using ep0 maxpacket: 32 [ 171.141725][ T865] usb 3-1: unable to get BOS descriptor or descriptor too short [ 171.150146][ T865] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.160571][ T865] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 48 [ 171.171457][ T865] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.186191][ T865] usb 3-1: New USB device found, idVendor=0499, idProduct=1053, bcdDevice= 0.40 [ 171.195658][ T865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.205751][ T865] usb 3-1: Product: syz [ 171.219284][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 171.224945][ T865] usb 3-1: Manufacturer: syz [ 171.230086][ T865] usb 3-1: SerialNumber: syz [ 171.235363][ T45] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 171.249263][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.268830][ T3520] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 171.276373][ T45] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 171.287946][ T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 171.297341][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.305751][ T45] usb 4-1: Product: syz [ 171.306120][ T341] hid (null): bogus close delimiter [ 171.310268][ T45] usb 4-1: Manufacturer: syz [ 171.320141][ T45] usb 4-1: SerialNumber: syz [ 171.326267][ T341] elecom 0003:056E:00E6.002A: unknown main item tag 0x2 [ 171.333350][ T341] elecom 0003:056E:00E6.002A: bogus close delimiter [ 171.340093][ T341] elecom 0003:056E:00E6.002A: item 0 0 2 10 parsing failed [ 171.347555][ T341] elecom 0003:056E:00E6.002A: probe with driver elecom failed with error -22 [ 171.418739][ T36] audit: type=1400 audit(1779054055.232:16778): avc: denied { read } for pid=3536 comm="syz.0.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 171.513626][ T3509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.522275][ T3509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.531664][ T3509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.536681][ T45] usb 4-1: USB disconnect, device number 92 [ 171.540545][ T3509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.556606][ T36] audit: type=1400 audit(1779054055.372:16779): avc: denied { watch watch_reads } for pid=3508 comm="syz.4.941" path="/53/file1" dev="tmpfs" ino=301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 171.666176][ T341] usb 5-1: USB disconnect, device number 11 [ 171.689149][ T865] usb 3-1: MIDIStreaming interface descriptor not found [ 171.696256][ T31] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 171.706834][ T865] usb 3-1: USB disconnect, device number 90 [ 171.722665][ T3332] udevd[3332]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 171.849311][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 171.856136][ T31] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 171.864251][ T31] usb 1-1: can't read configurations, error -22 [ 171.999381][ T31] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 172.149326][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 172.156488][ T31] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 172.164502][ T31] usb 1-1: can't read configurations, error -22 [ 172.171201][ T31] usb usb1-port1: attempt power cycle [ 172.299365][ T865] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 172.319970][ T36] audit: type=1400 audit(1779054056.142:16780): avc: denied { setcheckreqprot } for pid=3552 comm="syz.2.956" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 172.439394][ T313] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 172.449301][ T865] usb 4-1: Using ep0 maxpacket: 8 [ 172.456110][ T865] usb 4-1: unable to get BOS descriptor or descriptor too short [ 172.464895][ T865] usb 4-1: config 1 interface 0 altsetting 248 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.476062][ T865] usb 4-1: config 1 interface 0 altsetting 248 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.489091][ T865] usb 4-1: config 1 interface 0 has no altsetting 0 [ 172.497247][ T865] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice=93.40 [ 172.506366][ T865] usb 4-1: New USB device strings: Mfr=34, Product=2, SerialNumber=3 [ 172.514670][ T31] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 172.522290][ T865] usb 4-1: Product: syz [ 172.526477][ T865] usb 4-1: Manufacturer: syz [ 172.531158][ T865] usb 4-1: SerialNumber: syz [ 172.549626][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 172.556194][ T31] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 172.564272][ T31] usb 1-1: can't read configurations, error -22 [ 172.600534][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.611841][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.621635][ T313] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 172.634703][ T313] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 172.644805][ T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.653822][ T313] usb 5-1: config 0 descriptor?? [ 172.699314][ T31] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 172.719638][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 172.726321][ T31] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 172.734480][ T31] usb 1-1: can't read configurations, error -22 [ 172.741002][ T31] usb usb1-port1: unable to enumerate USB device [ 172.750096][ T865] usbhid 4-1:1.0: can't add hid device: -71 [ 172.756092][ T865] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 172.764975][ T865] usb 4-1: USB disconnect, device number 93 [ 173.062297][ T313] plantronics 0003:047F:FFFF.002B: unknown main item tag 0xd [ 173.069998][ T313] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 173.077506][ T313] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 173.084942][ T313] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 173.092378][ T313] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 173.099843][ T313] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 173.107825][ T313] plantronics 0003:047F:FFFF.002B: No inputs registered, leaving [ 173.117048][ T313] plantronics 0003:047F:FFFF.002B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 173.282302][ T31] usb 5-1: USB disconnect, device number 12 [ 173.489381][ T313] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 173.640494][ T313] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 173.648906][ T313] usb 3-1: config 0 has no interface number 0 [ 173.655074][ T313] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 173.667817][ T313] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 173.677113][ T313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.685273][ T313] usb 3-1: Product: syz [ 173.689479][ T313] usb 3-1: Manufacturer: syz [ 173.694085][ T313] usb 3-1: SerialNumber: syz [ 173.699481][ T313] usb 3-1: config 0 descriptor?? [ 173.704719][ T3563] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 173.713951][ T313] plusb 3-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 3e:97:a6:d5:22:60 [ 173.807977][ T3579] netlink: 'syz.4.961': attribute type 25 has an invalid length. [ 173.861084][ T3586] FAULT_INJECTION: forcing a failure. [ 173.861084][ T3586] name failslab, interval 1, probability 0, space 0, times 1 [ 173.874032][ T3586] CPU: 1 UID: 0 PID: 3586 Comm: syz.4.962 Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 173.874055][ T3586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 173.874064][ T3586] Call Trace: [ 173.874068][ T3586] [ 173.874074][ T3586] __dump_stack+0x21/0x30 [ 173.874097][ T3586] dump_stack_lvl+0x140/0x1c0 [ 173.874114][ T3586] ? __cfi_dump_stack_lvl+0x10/0x10 [ 173.874132][ T3586] dump_stack+0x19/0x20 [ 173.874152][ T3586] should_fail_ex+0x3d7/0x530 [ 173.874165][ T3586] should_failslab+0xac/0x100 [ 173.874180][ T3586] __kmalloc_cache_noprof+0x41/0x470 [ 173.874194][ T3586] ? kvm_hv_vcpu_init+0x9c/0xcf0 [ 173.874211][ T3586] ? kasan_save_track+0x3e/0x80 [ 173.874224][ T3586] ? kasan_save_alloc_info+0x40/0x50 [ 173.874240][ T3586] ? __kasan_slab_alloc+0x73/0x90 [ 173.874255][ T3586] ? __kmalloc_node_track_caller_noprof+0x1f9/0x4f0 [ 173.874269][ T3586] kvm_hv_vcpu_init+0x9c/0xcf0 [ 173.874285][ T3586] kvm_hv_set_msr_common+0xed/0x30c0 [ 173.874306][ T3586] ? __cfi_kvm_hv_set_msr_common+0x10/0x10 [ 173.874323][ T3586] kvm_set_msr_common+0x1d63/0x38e0 [ 173.874337][ T3586] vmx_set_msr+0x173d/0x29b0 [ 173.874349][ T3586] ? check_stack_object+0x81/0x150 [ 173.874363][ T3586] ? __virt_addr_valid+0x2a6/0x380 [ 173.874378][ T3586] ? __check_object_size+0x527/0x830 [ 173.874391][ T3586] __kvm_set_msr+0x315/0x5c0 [ 173.874407][ T3586] ? kvm_arch_vcpu_destroy+0x1e0/0x1e0 [ 173.874424][ T3586] ? _copy_from_user+0x87/0xa0 [ 173.874438][ T3586] ? memdup_user+0xb1/0x170 [ 173.874449][ T3586] ? kvm_arch_vcpu_ioctl+0x1367/0x2d90 [ 173.874463][ T3586] kvm_arch_vcpu_ioctl+0x1e3c/0x2d90 [ 173.874476][ T3586] ? kasan_save_alloc_info+0x40/0x50 [ 173.874493][ T3586] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 173.874507][ T3586] ? selinux_file_open+0x46c/0x630 [ 173.874520][ T3586] ? __cfi_selinux_file_open+0x10/0x10 [ 173.874533][ T3586] ? is_bpf_text_address+0x17b/0x1a0 [ 173.874559][ T3586] ? kernel_text_address+0xa9/0xe0 [ 173.874576][ T3586] ? __kernel_text_address+0x11/0x40 [ 173.874592][ T3586] ? __asan_set_shadow_00+0x12/0x20 [ 173.874608][ T3586] ? do_vfs_ioctl+0x182d/0x2010 [ 173.874623][ T3586] ? arch_stack_walk+0x10a/0x170 [ 173.874635][ T3586] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 173.874650][ T3586] ? _parse_integer_limit+0x195/0x1e0 [ 173.874667][ T3586] ? _parse_integer+0x2e/0x40 [ 173.874683][ T3586] ? kstrtoull+0x13b/0x1e0 [ 173.874699][ T3586] ? kstrtouint+0x78/0xf0 [ 173.874715][ T3586] ? ioctl_has_perm+0x1bc/0x500 [ 173.874726][ T3586] ? __asan_memcpy+0x5a/0x80 [ 173.874743][ T3586] ? ioctl_has_perm+0x408/0x500 [ 173.874762][ T3586] ? has_cap_mac_admin+0xd0/0xd0 [ 173.874781][ T3586] ? __kasan_check_write+0x18/0x20 [ 173.874800][ T3586] ? mutex_lock_killable+0x97/0x1d0 [ 173.874827][ T3586] ? __cfi_mutex_lock_killable+0x10/0x10 [ 173.874848][ T3586] ? proc_fail_nth_write+0x184/0x220 [ 173.874864][ T3586] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 173.874881][ T3586] kvm_vcpu_ioctl+0x7da/0x1000 [ 173.874895][ T3586] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 173.874907][ T3586] ? __cfi_vfs_write+0x10/0x10 [ 173.874920][ T3586] ? __kasan_check_write+0x18/0x20 [ 173.874932][ T3586] ? mutex_unlock+0x90/0x240 [ 173.874946][ T3586] ? __cfi_mutex_unlock+0x10/0x10 [ 173.874960][ T3586] ? __fget_files+0x2c5/0x340 [ 173.874975][ T3586] ? __fget_files+0x2c5/0x340 [ 173.874989][ T3586] ? bpf_lsm_file_ioctl+0xd/0x20 [ 173.875004][ T3586] ? security_file_ioctl+0x3e/0x110 [ 173.875021][ T3586] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 173.875033][ T3586] __se_sys_ioctl+0x132/0x1b0 [ 173.875047][ T3586] __x64_sys_ioctl+0x7f/0xa0 [ 173.875061][ T3586] x64_sys_call+0x1878/0x2ee0 [ 173.875073][ T3586] do_syscall_64+0x57/0xf0 [ 173.875085][ T3586] ? clear_bhb_loop+0x50/0xa0 [ 173.875099][ T3586] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 173.875113][ T3586] RIP: 0033:0x7fc3f119ce59 [ 173.875126][ T3586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.875137][ T3586] RSP: 002b:00007fc3f203c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.875152][ T3586] RAX: ffffffffffffffda RBX: 00007fc3f1415fa0 RCX: 00007fc3f119ce59 [ 173.875162][ T3586] RDX: 0000200000000300 RSI: 000000004008ae89 RDI: 0000000000000005 [ 173.875172][ T3586] RBP: 00007fc3f203c090 R08: 0000000000000000 R09: 0000000000000000 [ 173.875180][ T3586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.875188][ T3586] R13: 00007fc3f1416038 R14: 00007fc3f1415fa0 R15: 00007ffef1ad8698 [ 173.875200][ T3586] [ 174.386926][ T3596] fuse: Invalid rootmode [ 174.438100][ T3604] netlink: 'syz.4.968': attribute type 27 has an invalid length. [ 174.455329][ T3604] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.462559][ T3604] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.535237][ T341] usb 3-1: USB disconnect, device number 91 [ 174.549915][ T341] plusb 3-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 174.601718][ T3617] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3177452172 (50839234752 ns) > initial count (7324453424 ns). Using initial count to start timer. [ 174.682882][ T3626] FAULT_INJECTION: forcing a failure. [ 174.682882][ T3626] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 174.699129][ T3626] CPU: 0 UID: 0 PID: 3626 Comm: syz.4.971 Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 174.699164][ T3626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 174.699177][ T3626] Call Trace: [ 174.699193][ T3626] [ 174.699202][ T3626] __dump_stack+0x21/0x30 [ 174.699243][ T3626] dump_stack_lvl+0x140/0x1c0 [ 174.699272][ T3626] ? __cfi_dump_stack_lvl+0x10/0x10 [ 174.699301][ T3626] ? check_stack_object+0x12b/0x150 [ 174.699325][ T3626] dump_stack+0x19/0x20 [ 174.699353][ T3626] should_fail_ex+0x3d7/0x530 [ 174.699374][ T3626] should_fail+0xf/0x20 [ 174.699392][ T3626] should_fail_usercopy+0x1e/0x30 [ 174.699413][ T3626] _copy_to_user+0x24/0xa0 [ 174.699437][ T3626] simple_read_from_buffer+0xed/0x160 [ 174.699464][ T3626] proc_fail_nth_read+0x1aa/0x220 [ 174.699494][ T3626] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 174.699523][ T3626] ? bpf_lsm_file_permission+0xd/0x20 [ 174.699550][ T3626] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 174.699578][ T3626] vfs_read+0x286/0xcb0 [ 174.699600][ T3626] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 174.699622][ T3626] ? __cfi_vfs_read+0x10/0x10 [ 174.699642][ T3626] ? __kasan_check_write+0x18/0x20 [ 174.699663][ T3626] ? mutex_lock+0x97/0x1d0 [ 174.699690][ T3626] ? __cfi_mutex_lock+0x10/0x10 [ 174.699714][ T3626] ? __fget_files+0x2c5/0x340 [ 174.699740][ T3626] ksys_read+0x145/0x260 [ 174.699760][ T3626] ? __cfi_ksys_read+0x10/0x10 [ 174.699782][ T3626] ? __kasan_check_read+0x15/0x20 [ 174.699802][ T3626] __x64_sys_read+0x7f/0x90 [ 174.699824][ T3626] x64_sys_call+0x2638/0x2ee0 [ 174.699844][ T3626] do_syscall_64+0x57/0xf0 [ 174.699865][ T3626] ? clear_bhb_loop+0x50/0xa0 [ 174.699889][ T3626] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 174.699913][ T3626] RIP: 0033:0x7fc3f115d68e [ 174.699931][ T3626] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 174.699949][ T3626] RSP: 002b:00007fc3f203bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 174.699974][ T3626] RAX: ffffffffffffffda RBX: 00007fc3f203c6c0 RCX: 00007fc3f115d68e [ 174.699991][ T3626] RDX: 000000000000000f RSI: 00007fc3f203c0a0 RDI: 0000000000000006 [ 174.700006][ T3626] RBP: 00007fc3f203c090 R08: 0000000000000000 R09: 0000000000000000 [ 174.700021][ T3626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.700035][ T3626] R13: 00007fc3f1416038 R14: 00007fc3f1415fa0 R15: 00007ffef1ad8698 [ 174.700054][ T3626] [ 174.983901][ T36] audit: type=1400 audit(1779054058.802:16781): avc: denied { execute } for pid=3647 comm="syz.0.972" path="/cpuacct.usage_user" dev="ramfs" ino=31551 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 175.047345][ T3653] netlink: 679 bytes leftover after parsing attributes in process `syz.4.974'. [ 175.056595][ T3653] netlink: 679 bytes leftover after parsing attributes in process `syz.4.974'. [ 175.065783][ T3653] netlink: 679 bytes leftover after parsing attributes in process `syz.4.974'. [ 175.074972][ T3653] netlink: 679 bytes leftover after parsing attributes in process `syz.4.974'. [ 175.084249][ T3653] netlink: 679 bytes leftover after parsing attributes in process `syz.4.974'. [ 175.093607][ T3653] netlink: 679 bytes leftover after parsing attributes in process `syz.4.974'. [ 175.102742][ T3653] netlink: 679 bytes leftover after parsing attributes in process `syz.4.974'. [ 175.111929][ T3653] netlink: 679 bytes leftover after parsing attributes in process `syz.4.974'. [ 175.126334][ T36] audit: type=1400 audit(1779054058.942:16782): avc: denied { unmount } for pid=2916 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 175.138160][ T3662] netlink: 'syz.4.976': attribute type 9 has an invalid length. [ 175.154452][ T3662] netlink: 'syz.4.976': attribute type 9 has an invalid length. [ 175.178304][ T3667] netlink: 'syz.4.977': attribute type 1 has an invalid length. [ 175.187382][ T3667] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 175.200910][ T3670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3670 comm=syz.0.978 [ 175.287079][ T3679] input: syz0 as /devices/virtual/input/input34 [ 175.300311][ T3684] overlayfs: conflicting options: nfs_export=on,index=off [ 175.374892][ T36] audit: type=1400 audit(1779054059.192:16783): avc: denied { create } for pid=3693 comm="syz.4.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 175.406817][ T36] audit: type=1400 audit(1779054059.192:16784): avc: denied { write } for pid=3693 comm="syz.4.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 175.609390][ T865] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 175.649336][ T341] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 175.669298][ T31] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 175.761908][ T865] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 175.771155][ T865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.779145][ T865] usb 3-1: Product: syz [ 175.783379][ T865] usb 3-1: Manufacturer: syz [ 175.788070][ T865] usb 3-1: SerialNumber: syz [ 175.799273][ T31] usb 5-1: device descriptor read/64, error -71 [ 175.809400][ T341] usb 1-1: Using ep0 maxpacket: 16 [ 175.815806][ T341] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.826134][ T341] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.836676][ T341] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.845824][ T341] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.853866][ T341] usb 1-1: Product: syz [ 175.858063][ T341] usb 1-1: Manufacturer: syz [ 175.862704][ T341] usb 1-1: SerialNumber: syz [ 176.039287][ T31] usb 5-1: device descriptor read/64, error -71 [ 176.072056][ T341] usb 1-1: 0:2 : does not exist [ 176.077018][ T341] usb 1-1: unit 6 not found! [ 176.091710][ T341] usb 1-1: USB disconnect, device number 88 [ 176.110255][ T2754] udevd[2754]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 176.120416][ T3700] overlayfs: empty lowerdir [ 176.289307][ T31] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 176.379774][ T45] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 176.416721][ T865] rtl8150 3-1:1.0: couldn't reset the device [ 176.422953][ T31] usb 5-1: device descriptor read/64, error -71 [ 176.430014][ T865] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 176.439094][ T865] usb 3-1: USB disconnect, device number 92 [ 176.509345][ T45] usb 4-1: device descriptor read/64, error -71 [ 176.669332][ T31] usb 5-1: device descriptor read/64, error -71 [ 176.749361][ T45] usb 4-1: device descriptor read/64, error -71 [ 176.779430][ T31] usb usb5-port1: attempt power cycle [ 176.849309][ T865] usb 1-1: new low-speed USB device number 89 using dummy_hcd [ 176.989325][ T45] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 177.000738][ T865] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 177.008324][ T865] usb 1-1: can't read configurations, error -61 [ 177.112474][ T3713] __nla_validate_parse: 25 callbacks suppressed [ 177.112491][ T3713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.994'. [ 177.119287][ T31] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 177.135407][ T45] usb 4-1: device descriptor read/64, error -71 [ 177.141764][ T865] usb 1-1: new low-speed USB device number 90 using dummy_hcd [ 177.170338][ T31] usb 5-1: device descriptor read/8, error -71 [ 177.300524][ T31] usb 5-1: device descriptor read/8, error -71 [ 177.307116][ T865] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 177.314731][ T865] usb 1-1: can't read configurations, error -61 [ 177.321257][ T865] usb usb1-port1: attempt power cycle [ 177.379353][ T45] usb 4-1: device descriptor read/64, error -71 [ 177.419914][ T66] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 177.489496][ T45] usb usb4-port1: attempt power cycle [ 177.539384][ T31] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 177.560407][ T31] usb 5-1: device descriptor read/8, error -71 [ 177.569303][ T66] usb 3-1: Using ep0 maxpacket: 8 [ 177.575681][ T66] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 177.584005][ T66] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 177.592582][ T66] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 177.601906][ T66] usb 3-1: config 250 has no interface number 0 [ 177.608178][ T66] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 177.619877][ T66] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 177.630328][ T66] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 177.640601][ T66] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 177.650978][ T66] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 177.664564][ T66] usb 3-1: config 250 interface 228 has no altsetting 0 [ 177.672625][ T66] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 177.681944][ T865] usb 1-1: new low-speed USB device number 91 using dummy_hcd [ 177.689525][ T66] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 177.697856][ T66] usb 3-1: Product: syz [ 177.702129][ T66] usb 3-1: SerialNumber: syz [ 177.707270][ T31] usb 5-1: device descriptor read/8, error -71 [ 177.715376][ T66] hub 3-1:250.228: bad descriptor, ignoring hub [ 177.721761][ T66] hub 3-1:250.228: probe with driver hub failed with error -5 [ 177.729496][ T865] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 177.737053][ T865] usb 1-1: can't read configurations, error -61 [ 177.819431][ T31] usb usb5-port1: unable to enumerate USB device [ 177.829312][ T45] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 177.850322][ T45] usb 4-1: device descriptor read/8, error -71 [ 177.869303][ T865] usb 1-1: new low-speed USB device number 92 using dummy_hcd [ 177.891226][ T865] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 177.898842][ T865] usb 1-1: can't read configurations, error -61 [ 177.905302][ T865] usb usb1-port1: unable to enumerate USB device [ 177.915107][ T36] audit: type=1400 audit(1779054061.732:16785): avc: denied { lock } for pid=3710 comm="syz.2.994" path="socket:[32943]" dev="sockfs" ino=32943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 177.980341][ T45] usb 4-1: device descriptor read/8, error -71 [ 178.219301][ T45] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 178.240596][ T45] usb 4-1: device descriptor read/8, error -71 [ 178.370372][ T45] usb 4-1: device descriptor read/8, error -71 [ 178.479463][ T45] usb usb4-port1: unable to enumerate USB device [ 178.809319][ T865] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 178.960414][ T865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 178.971587][ T865] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 178.984533][ T865] usb 5-1: New USB device found, idVendor=056a, idProduct=00ce, bcdDevice= 0.00 [ 178.993639][ T865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.002472][ T865] usb 5-1: config 0 descriptor?? [ 179.412728][ T865] wacom 0003:056A:00CE.002C: ignoring exceeding usage max [ 179.421891][ T865] wacom 0003:056A:00CE.002C: unknown main item tag 0x0 [ 179.428904][ T865] wacom 0003:056A:00CE.002C: unknown main item tag 0x0 [ 179.435852][ T865] wacom 0003:056A:00CE.002C: unknown main item tag 0x0 [ 179.442835][ T865] wacom 0003:056A:00CE.002C: unknown main item tag 0x0 [ 179.449833][ T865] wacom 0003:056A:00CE.002C: unknown main item tag 0x0 [ 179.456746][ T865] wacom 0003:056A:00CE.002C: unknown main item tag 0x0 [ 179.463923][ T865] wacom 0003:056A:00CE.002C: unknown main item tag 0x0 [ 179.470895][ T865] wacom 0003:056A:00CE.002C: unknown main item tag 0x0 [ 179.480674][ T865] wacom 0003:056A:00CE.002C: hidraw0: USB HID v0.08 Device [HID 056a:00ce] on usb-dummy_hcd.4-1/input0 [ 179.519358][ T313] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 179.615718][ T341] usb 5-1: USB disconnect, device number 17 [ 179.669314][ T313] usb 4-1: Using ep0 maxpacket: 32 [ 179.676337][ T313] usb 4-1: unable to get BOS descriptor or descriptor too short [ 179.686481][ T313] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 179.695653][ T313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.703809][ T313] usb 4-1: Product: syz [ 179.707989][ T313] usb 4-1: Manufacturer: syz [ 179.712833][ T313] usb 4-1: SerialNumber: syz [ 179.920075][ T313] usb 4-1: unit 4 not found! [ 179.924726][ T313] usb 4-1: unit 0 not found! [ 180.097247][ T66] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 93 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 180.127915][ T313] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 180.140727][ T66] usb 3-1: USB disconnect, device number 93 [ 180.145747][ T313] usb 4-1: unit 4 not found! [ 180.159092][ T313] usb 4-1: unit 0 not found! [ 180.160261][ T66] usblp0: removed [ 180.170981][ T313] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 180.198247][ T313] usb 4-1: unit 4 not found! [ 180.207496][ T313] usb 4-1: unit 0 not found! [ 180.217455][ T313] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 180.227854][ T313] usb 4-1: USB disconnect, device number 98 [ 180.241034][ T2709] udevd[2709]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 180.469315][ T10] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 180.619279][ T10] usb 5-1: Invalid ep0 maxpacket: 16 [ 180.722799][ T3737] overlayfs: overlapping lowerdir path [ 180.750961][ T10] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 180.899332][ T10] usb 5-1: Invalid ep0 maxpacket: 16 [ 180.904795][ T10] usb usb5-port1: attempt power cycle [ 180.979322][ T66] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 181.019286][ T313] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 181.109312][ T66] usb 4-1: device descriptor read/64, error -71 [ 181.169275][ T313] usb 3-1: Using ep0 maxpacket: 32 [ 181.175796][ T313] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 181.188335][ T313] usb 3-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 181.197563][ T313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.205722][ T313] usb 3-1: Product: syz [ 181.209943][ T313] usb 3-1: Manufacturer: syz [ 181.214569][ T313] usb 3-1: SerialNumber: syz [ 181.259290][ T10] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 181.279634][ T10] usb 5-1: Invalid ep0 maxpacket: 16 [ 181.349290][ T66] usb 4-1: device descriptor read/64, error -71 [ 181.409299][ T10] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 181.422945][ T313] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 181.430531][ T313] usb 3-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 181.438055][ T10] usb 5-1: Invalid ep0 maxpacket: 16 [ 181.443757][ T10] usb usb5-port1: unable to enumerate USB device [ 181.450797][ T313] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 181.460646][ T313] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 181.468049][ T313] usb 3-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 181.476926][ T313] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 181.486626][ T313] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 181.494043][ T313] usb 3-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 181.504378][ T313] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 181.514264][ T313] usb 3-1: USB disconnect, device number 94 [ 181.524028][ T2754] udevd[2754]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 181.599344][ T66] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 181.729282][ T66] usb 4-1: device descriptor read/64, error -71 [ 181.969327][ T66] usb 4-1: device descriptor read/64, error -71 [ 181.988656][ T3743] syz.2.1005 (3743): attempted to duplicate a private mapping with mremap. This is not supported. [ 182.079441][ T66] usb usb4-port1: attempt power cycle [ 182.239357][ T865] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 182.390408][ T865] usb 3-1: config index 0 descriptor too short (expected 7768, got 18) [ 182.398685][ T865] usb 3-1: config 0 has an invalid interface number: 245 but max is 0 [ 182.406886][ T865] usb 3-1: config 0 has no interface number 0 [ 182.413005][ T865] usb 3-1: too many endpoints for config 0 interface 245 altsetting 50: 119, using maximum allowed: 30 [ 182.424199][ T865] usb 3-1: config 0 interface 245 altsetting 50 has 0 endpoint descriptors, different from the interface descriptor's value: 119 [ 182.437649][ T66] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 182.445382][ T865] usb 3-1: config 0 interface 245 has no altsetting 0 [ 182.452262][ T865] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 182.461325][ T865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.470393][ T66] usb 4-1: device descriptor read/8, error -71 [ 182.476736][ T865] usb 3-1: config 0 descriptor?? [ 182.482867][ T865] ftdi_sio 3-1:0.245: FTDI USB Serial Device converter detected [ 182.490959][ T865] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 182.600648][ T66] usb 4-1: device descriptor read/8, error -71 [ 182.684501][ T313] usb 3-1: USB disconnect, device number 95 [ 182.691187][ T313] ftdi_sio 3-1:0.245: device disconnected [ 182.786573][ T3751] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1008'. [ 182.839312][ T66] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 182.860339][ T66] usb 4-1: device descriptor read/8, error -71 [ 182.990285][ T66] usb 4-1: device descriptor read/8, error -71 [ 183.099412][ T66] usb usb4-port1: unable to enumerate USB device [ 183.429279][ T313] usb 3-1: new low-speed USB device number 96 using dummy_hcd [ 183.579283][ T313] usb 3-1: Invalid ep0 maxpacket: 16 [ 183.629304][ T66] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 183.709326][ T313] usb 3-1: new low-speed USB device number 97 using dummy_hcd [ 183.779285][ T66] usb 5-1: Using ep0 maxpacket: 16 [ 183.785801][ T66] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.796000][ T66] usb 5-1: config 0 interface 0 has no altsetting 0 [ 183.802652][ T66] usb 5-1: New USB device found, idVendor=05ac, idProduct=8102, bcdDevice= 0.00 [ 183.813472][ T66] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.815247][ T3758] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 183.825620][ T66] usb 5-1: config 0 descriptor?? [ 183.845457][ T66] usbhid 5-1:0.0: fixing wrong optional hid class descriptors count [ 183.869264][ T313] usb 3-1: Invalid ep0 maxpacket: 16 [ 183.874822][ T313] usb usb3-port1: attempt power cycle [ 184.045602][ T36] audit: type=1400 audit(1779054067.862:16786): avc: denied { mount } for pid=3754 comm="syz.4.1010" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 184.047566][ T3755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.076663][ T3755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.088667][ T36] audit: type=1400 audit(1779054067.902:16787): avc: denied { remount } for pid=3754 comm="syz.4.1010" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 184.088687][ T3755] debugfs: Invalid uid '0x00000000ffffffff' [ 184.089390][ T3755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.123286][ T3755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.219287][ T313] usb 3-1: new low-speed USB device number 98 using dummy_hcd [ 184.239654][ T313] usb 3-1: Invalid ep0 maxpacket: 16 [ 184.369294][ T313] usb 3-1: new low-speed USB device number 99 using dummy_hcd [ 184.389653][ T313] usb 3-1: Invalid ep0 maxpacket: 16 [ 184.395171][ T313] usb usb3-port1: unable to enumerate USB device [ 184.537202][ T66] usbhid 5-1:0.0: can't add hid device: -71 [ 184.543633][ T66] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 184.552827][ T66] usb 5-1: USB disconnect, device number 22 [ 184.909401][ T313] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 185.045398][ T36] audit: type=1400 audit(1779054068.862:16788): avc: denied { unmount } for pid=2916 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 185.071486][ T313] usb 4-1: Using ep0 maxpacket: 8 [ 185.077696][ T313] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.088927][ T313] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.098989][ T313] usb 4-1: config 0 interface 0 has no altsetting 0 [ 185.105790][ T313] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 185.114934][ T313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.123932][ T313] usb 4-1: config 0 descriptor?? [ 185.539264][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 185.690699][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 185.699164][ T10] usb 5-1: config 1 has an invalid descriptor of length 63, skipping remainder of the config [ 185.709659][ T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 185.718646][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 33, changing to 7 [ 185.732050][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 185.741242][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.749285][ T10] usb 5-1: Product: syz [ 185.753464][ T10] usb 5-1: Manufacturer: syz [ 185.758059][ T10] usb 5-1: SerialNumber: syz [ 185.968529][ T3773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.977125][ T3773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.986827][ T10] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 185.996285][ T10] usb 5-1: USB disconnect, device number 23 [ 186.005353][ T2711] udevd[2711]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 186.205507][ T3786] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1019'. [ 186.215901][ T36] audit: type=1400 audit(1779054070.032:16789): avc: denied { cmd } for pid=3785 comm="syz.2.1019" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 186.311435][ T3795] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1021'. [ 186.438506][ T3807] kvm: kvm [3806]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 186.447417][ T3807] kvm: kvm [3806]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 186.789300][ T865] usb 3-1: new low-speed USB device number 100 using dummy_hcd [ 186.939268][ T865] usb 3-1: device descriptor read/64, error -71 [ 187.082735][ T36] audit: type=1400 audit(1779054070.902:16790): avc: denied { remount } for pid=3825 comm="syz.4.1032" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 187.109544][ T3826] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 187.179306][ T865] usb 3-1: device descriptor read/64, error -71 [ 187.419354][ T865] usb 3-1: new low-speed USB device number 101 using dummy_hcd [ 187.549272][ T865] usb 3-1: device descriptor read/64, error -71 [ 187.742653][ T313] usbhid 4-1:0.0: can't add hid device: -71 [ 187.748719][ T313] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 187.760999][ T313] usb 4-1: USB disconnect, device number 103 [ 187.789382][ T865] usb 3-1: device descriptor read/64, error -71 [ 187.889319][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 187.899523][ T865] usb usb3-port1: attempt power cycle [ 188.049307][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 188.054591][ T313] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 188.063921][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 188.072356][ T10] usb 5-1: config 42 has an invalid interface number: 178 but max is 0 [ 188.080684][ T10] usb 5-1: config 42 has no interface number 0 [ 188.086861][ T10] usb 5-1: config 42 interface 178 has no altsetting 0 [ 188.095330][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=00f8, bcdDevice=e0.e5 [ 188.104437][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.112469][ T10] usb 5-1: Product: syz [ 188.116642][ T10] usb 5-1: Manufacturer: syz [ 188.121281][ T10] usb 5-1: SerialNumber: syz [ 188.210620][ T313] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 188.218875][ T313] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 188.229155][ T313] usb 4-1: config 8 has no interface number 0 [ 188.235323][ T313] usb 4-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 188.249272][ T865] usb 3-1: new low-speed USB device number 102 using dummy_hcd [ 188.249840][ T313] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 188.266337][ T313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.270374][ T865] usb 3-1: device descriptor read/8, error -71 [ 188.274382][ T313] usb 4-1: Product: syz [ 188.284735][ T313] usb 4-1: Manufacturer: syz [ 188.289385][ T313] usb 4-1: SerialNumber: syz [ 188.331867][ T10] uvcvideo 5-1:42.178: Found multiple Units with ID 1 [ 188.339476][ T10] usb 5-1: Found UVC 0.00 device syz (045e:00f8) [ 188.345934][ T10] usb 5-1: No valid video chain found. [ 188.352799][ T10] usb 5-1: USB disconnect, device number 24 [ 188.410856][ T865] usb 3-1: device descriptor read/8, error -71 [ 188.649369][ T865] usb 3-1: new low-speed USB device number 103 using dummy_hcd [ 188.670475][ T865] usb 3-1: device descriptor read/8, error -71 [ 188.702691][ T66] usb 4-1: USB disconnect, device number 104 [ 188.801086][ T865] usb 3-1: device descriptor read/8, error -71 [ 188.909421][ T865] usb usb3-port1: unable to enumerate USB device [ 189.079299][ T31] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 189.229292][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 189.239503][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.251154][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 189.252944][ T3857] can: request_module (can-proto-0) failed. [ 189.265289][ T31] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 189.272011][ T3857] can: request_module (can-proto-0) failed. [ 189.280389][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.285488][ T3857] can: request_module (can-proto-0) failed. [ 189.293975][ T31] usb 5-1: config 0 descriptor?? [ 189.302376][ T3857] can: request_module (can-proto-0) failed. [ 189.310174][ T3857] can: request_module (can-proto-0) failed. [ 189.316182][ T3857] can: request_module (can-proto-0) failed. [ 189.322240][ T3857] can: request_module (can-proto-0) failed. [ 189.328237][ T3857] can: request_module (can-proto-0) failed. [ 189.334317][ T3857] can: request_module (can-proto-0) failed. [ 189.340522][ T3857] can: request_module (can-proto-0) failed. [ 189.491682][ T3860] overlayfs: failed to clone upperpath [ 189.497775][ T3860] overlayfs: failed to clone upperpath [ 189.499287][ T865] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 189.519122][ T36] audit: type=1400 audit(1779054073.332:16791): avc: denied { mounton } for pid=3849 comm="syz.4.1042" path="/file0" dev="ramfs" ino=33593 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 189.669251][ T865] usb 4-1: Using ep0 maxpacket: 16 [ 189.676900][ T865] usb 4-1: config index 0 descriptor too short (expected 52, got 36) [ 189.685137][ T865] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 189.693630][ T865] usb 4-1: config 0 has no interface number 0 [ 189.699939][ T865] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 189.709933][ T865] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 189.721761][ T31] HID 045e:07da: Invalid code 65791 type 1 [ 189.729681][ T3873] SELinux: policydb magic number 0xdc0200f does not match expected magic number 0xf97cff8c [ 189.733991][ T31] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.002D/input/input39 [ 189.751429][ T36] audit: type=1400 audit(1779054073.552:16792): avc: denied { load_policy } for pid=3870 comm="syz.2.1050" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 189.765234][ T3873] SELinux: failed to load policy [ 189.773696][ T865] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 189.786146][ T865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.794432][ T31] microsoft 0003:045E:07DA.002D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 189.807219][ T865] usb 4-1: Product: syz [ 189.811453][ T865] usb 4-1: Manufacturer: syz [ 189.816167][ T865] usb 4-1: SerialNumber: syz [ 189.827945][ T865] usb 4-1: config 0 descriptor?? [ 189.833361][ T3858] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 189.840606][ T3858] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 190.050087][ T3858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.058875][ T3858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.068363][ T3858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.077944][ T3858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.087426][ T3858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.096829][ T3858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.106470][ T3858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.115934][ T3858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.125425][ T3858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.136346][ T3858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.148624][ T3857] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 190.156593][ T3857] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 190.242308][ T865] asix 4-1:0.251: probe with driver asix failed with error -71 [ 190.261528][ T865] usb 4-1: USB disconnect, device number 105 [ 190.535915][ T45] usb 5-1: USB disconnect, device number 25 [ 190.559317][ T865] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 190.589293][ T10] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 190.710658][ T865] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.721731][ T865] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 14129, setting to 64 [ 190.734217][ T865] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 190.740476][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.743397][ T865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.755240][ T10] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 190.762343][ T865] usb 4-1: Product: syz [ 190.770857][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.774823][ T865] usb 4-1: Manufacturer: syz [ 190.783123][ T10] usb 3-1: Product: syz [ 190.787427][ T865] usb 4-1: SerialNumber: syz [ 190.791658][ T10] usb 3-1: Manufacturer: syz [ 190.801081][ T10] usb 3-1: SerialNumber: syz [ 190.806626][ T10] usb 3-1: config 0 descriptor?? [ 190.814185][ T10] dm9601 3-1:0.0: probe with driver dm9601 failed with error -22 [ 191.070031][ T3913] netlink: 'syz.2.1057': attribute type 28 has an invalid length. [ 191.184700][ T31] usb 3-1: USB disconnect, device number 104 [ 191.359258][ T45] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 191.421006][ T3920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1063'. [ 191.489275][ T45] usb 5-1: device descriptor read/64, error -71 [ 191.729283][ T45] usb 5-1: device descriptor read/64, error -71 [ 191.813789][ T865] cdc_ncm 4-1:1.0: bind() failure [ 191.820748][ T865] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 191.829008][ T865] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 191.839750][ T865] usb 4-1: USB disconnect, device number 106 [ 191.969284][ T45] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 191.999353][ T10] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 192.099280][ T45] usb 5-1: device descriptor read/64, error -71 [ 192.149265][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 192.154745][ T10] usb 3-1: no configurations [ 192.159565][ T10] usb 3-1: can't read configurations, error -22 [ 192.289302][ T10] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 192.339339][ T45] usb 5-1: device descriptor read/64, error -71 [ 192.439310][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 192.444882][ T10] usb 3-1: no configurations [ 192.449621][ T10] usb 3-1: can't read configurations, error -22 [ 192.456207][ T10] usb usb3-port1: attempt power cycle [ 192.459648][ T45] usb usb5-port1: attempt power cycle [ 192.473233][ T3930] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1068'. [ 192.569283][ T363] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 192.720540][ T363] usb 4-1: config 1 has an invalid descriptor of length 85, skipping remainder of the config [ 192.730930][ T363] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 192.741886][ T363] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 192.755867][ T363] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 192.765011][ T363] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 192.773086][ T363] usb 4-1: SerialNumber: syz [ 192.809345][ T45] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 192.809352][ T10] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 192.829652][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 192.835153][ T10] usb 3-1: no configurations [ 192.839881][ T10] usb 3-1: can't read configurations, error -22 [ 192.840536][ T45] usb 5-1: device descriptor read/8, error -71 [ 192.969300][ T10] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 192.980504][ T45] usb 5-1: device descriptor read/8, error -71 [ 192.985262][ T363] usb 4-1: USB disconnect, device number 107 [ 192.997367][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 193.007659][ T10] usb 3-1: no configurations [ 193.012394][ T10] usb 3-1: can't read configurations, error -22 [ 193.019389][ T10] usb usb3-port1: unable to enumerate USB device [ 193.219319][ T45] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 193.240449][ T45] usb 5-1: device descriptor read/8, error -71 [ 193.370528][ T45] usb 5-1: device descriptor read/8, error -71 [ 193.479466][ T45] usb usb5-port1: unable to enumerate USB device [ 193.699145][ T3948] overlayfs: failed to set uuid (249/file0, err=-1); falling back to uuid=null. [ 193.708502][ T3948] overlayfs: failed to verify upper root origin [ 193.959304][ T363] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 194.086946][ T3954] fuse: Bad value for 'fd' [ 194.109281][ T363] usb 4-1: Using ep0 maxpacket: 8 [ 194.118394][ T363] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 194.122410][ T3958] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1079'. [ 194.135050][ T363] usb 4-1: config 0 has no interface number 0 [ 194.147586][ T363] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 194.159338][ T363] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.167452][ T363] usb 4-1: Product: syz [ 194.171965][ T363] usb 4-1: Manufacturer: syz [ 194.176659][ T363] usb 4-1: SerialNumber: syz [ 194.183427][ T363] usb 4-1: config 0 descriptor?? [ 194.397376][ T3950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.406334][ T3950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.415919][ T363] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 194.424579][ T363] uvcvideo 4-1:0.31: Entity type for entity Output 6 was not initialized! [ 194.434746][ T363] usb 4-1: USB disconnect, device number 108 [ 194.711259][ T3968] /dev/rnullb0: Can't lookup blockdev [ 194.735655][ T3975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1085'. [ 194.745172][ T3975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1085'. [ 194.937508][ T3979] loop9: detected capacity change from 0 to 91 [ 194.975926][ T36] audit: type=1326 audit(1779054078.792:16793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3981 comm="syz.4.1088" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3f119ce59 code=0x0 [ 195.159289][ T363] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 195.239277][ T341] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 195.268442][ T36] audit: type=1400 audit(1779054079.082:16794): avc: denied { create } for pid=3986 comm="syz.0.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 195.319867][ T363] usb 3-1: too many configurations: 151, using maximum allowed: 8 [ 195.334900][ T363] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 195.344105][ T363] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 195.352405][ T363] usb 3-1: Product: syz [ 195.356645][ T363] usb 3-1: Manufacturer: syz [ 195.361301][ T363] usb 3-1: SerialNumber: syz [ 195.366490][ T363] usb 3-1: config 0 descriptor?? [ 195.399277][ T341] usb 4-1: Using ep0 maxpacket: 32 [ 195.406400][ T341] usb 4-1: config 7 has an invalid interface number: 210 but max is 0 [ 195.414906][ T341] usb 4-1: config 7 has no interface number 0 [ 195.429259][ T341] usb 4-1: config 7 interface 210 has no altsetting 0 [ 195.440370][ T341] usb 4-1: New USB device found, idVendor=10c4, idProduct=851e, bcdDevice=d8.c2 [ 195.449871][ T341] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.457980][ T341] usb 4-1: Product: ⑸ [ 195.462213][ T341] usb 4-1: Manufacturer: Х [ 195.466737][ T341] usb 4-1: SerialNumber: 뾘ꚋꙡ믚킈怱諀뀇譹ᤞ໹ᳱ桂膬鴇ᨛ㽮ꊊ핶⩞ᰓﱇ뚄ႎ䏲㱿랡㔹㓫℈喎㗨៞覛ꆕๅೌỬĤ⦫郿⬅䍒컑Ḓ᳄軩঩䂻ϗ폩菁ꆸ퐪棺唼뫔뱲弓夌㨜ᷦ⺖멸檲쌆刮ӧ킝쟌샊⡾鐅뺮컾롊頭諲ᝬ헋䰕냛倸筜㼨⮪싛躥鷧뎬璂⻍⸏⃘戚ؼᜦ렄熋粫炾徜䫈ⷜ嵈 [ 196.079385][ T363] usb 3-1: USB disconnect, device number 109 [ 196.211388][ T341] usb 4-1: USB disconnect, device number 109 [ 196.220318][ T31] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 196.236398][ T4011] rust_binder: Write failure EINVAL in pid:761 [ 196.236733][ T4011] rust_binder: 761: no such ref 0 [ 196.249101][ T4013] rust_binder: Write failure EINVAL in pid:761 [ 196.379346][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 196.389288][ T363] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 196.391894][ T31] usb 5-1: config 0 has an invalid descriptor of length 116, skipping remainder of the config [ 196.408921][ T31] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 196.418181][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.427018][ T31] usb 5-1: config 0 descriptor?? [ 196.432832][ T31] usb 5-1: bad CDC descriptors [ 196.437742][ T31] cdc_acm 5-1:0.0: Control and data interfaces are not separated! [ 196.445698][ T31] cdc_acm 5-1:0.0: This needs exactly 3 endpoints [ 196.452157][ T31] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 196.549310][ T363] usb 3-1: Using ep0 maxpacket: 16 [ 196.554893][ T363] usb 3-1: too many configurations: 241, using maximum allowed: 8 [ 196.564178][ T363] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 196.571929][ T363] usb 3-1: can't read configurations, error -61 [ 196.599349][ T341] usb 4-1: new low-speed USB device number 110 using dummy_hcd [ 196.650714][ T31] usb 5-1: USB disconnect, device number 31 [ 196.699334][ T363] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 196.729326][ T341] usb 4-1: device descriptor read/64, error -71 [ 196.849297][ T363] usb 3-1: Using ep0 maxpacket: 16 [ 196.854950][ T363] usb 3-1: too many configurations: 241, using maximum allowed: 8 [ 196.864342][ T363] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 196.872124][ T363] usb 3-1: can't read configurations, error -61 [ 196.878518][ T363] usb usb3-port1: attempt power cycle [ 196.969317][ T341] usb 4-1: device descriptor read/64, error -71 [ 197.029305][ T31] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 197.181065][ T31] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 197.192391][ T31] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 57373, setting to 8 [ 197.203377][ T31] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 197.216385][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 197.219286][ T341] usb 4-1: new low-speed USB device number 111 using dummy_hcd [ 197.223063][ T31] usb 5-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 197.230987][ T363] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 197.239676][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.255912][ T31] usb 5-1: config 0 descriptor?? [ 197.259659][ T363] usb 3-1: Using ep0 maxpacket: 16 [ 197.261203][ T4033] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 197.266385][ T363] usb 3-1: too many configurations: 241, using maximum allowed: 8 [ 197.282316][ T363] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 197.289950][ T363] usb 3-1: can't read configurations, error -61 [ 197.369372][ T341] usb 4-1: device descriptor read/64, error -71 [ 197.419348][ T363] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 197.439694][ T363] usb 3-1: Using ep0 maxpacket: 16 [ 197.445249][ T363] usb 3-1: too many configurations: 241, using maximum allowed: 8 [ 197.454404][ T363] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 197.462339][ T363] usb 3-1: can't read configurations, error -61 [ 197.468763][ T363] usb usb3-port1: unable to enumerate USB device [ 197.563788][ T4040] syz.0.1105 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 197.595831][ T36] audit: type=1326 audit(1779054081.412:16795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4043 comm="syz.0.1107" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba1819ce59 code=0x0 [ 197.609310][ T341] usb 4-1: device descriptor read/64, error -71 [ 197.676920][ T31] hid (null): invalid report_size 26545 [ 197.682670][ T31] hid (null): global environment stack underflow [ 197.690719][ T31] waltop 0003:172F:0500.002E: unknown main item tag 0x6 [ 197.697977][ T31] waltop 0003:172F:0500.002E: invalid report_size 26545 [ 197.705036][ T31] waltop 0003:172F:0500.002E: item 0 2 1 7 parsing failed [ 197.712369][ T31] waltop 0003:172F:0500.002E: probe with driver waltop failed with error -22 [ 197.729344][ T341] usb usb4-port1: attempt power cycle [ 197.886891][ T363] usb 5-1: USB disconnect, device number 32 [ 198.069310][ T341] usb 4-1: new low-speed USB device number 112 using dummy_hcd [ 198.090412][ T341] usb 4-1: device descriptor read/8, error -71 [ 198.220367][ T341] usb 4-1: device descriptor read/8, error -71 [ 198.469340][ T341] usb 4-1: new low-speed USB device number 113 using dummy_hcd [ 198.490304][ T341] usb 4-1: device descriptor read/8, error -71 [ 198.621023][ T341] usb 4-1: device descriptor read/8, error -71 [ 198.730053][ T341] usb usb4-port1: unable to enumerate USB device [ 199.389300][ T341] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 199.469293][ T363] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 199.539262][ T341] usb 5-1: Using ep0 maxpacket: 32 [ 199.545663][ T341] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 199.553971][ T341] usb 5-1: config 0 has no interface number 0 [ 199.560129][ T341] usb 5-1: config 0 interface 184 has no altsetting 0 [ 199.568296][ T341] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 199.577413][ T341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.585536][ T341] usb 5-1: Product: syz [ 199.589730][ T341] usb 5-1: Manufacturer: syz [ 199.594688][ T341] usb 5-1: SerialNumber: syz [ 199.600003][ T341] usb 5-1: config 0 descriptor?? [ 199.605671][ T341] smsc75xx v1.0.0 [ 199.619295][ T363] usb 3-1: Using ep0 maxpacket: 8 [ 199.625528][ T363] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 199.635380][ T363] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 199.645170][ T363] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 199.654955][ T363] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.668717][ T363] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 199.677858][ T363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 199.685932][ T363] usb 3-1: SerialNumber: syz [ 199.691679][ T4071] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 199.699689][ T363] cdc_ether 3-1:1.0: skipping garbage [ 199.705203][ T363] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 199.713681][ T363] usb-storage 3-1:1.0: USB Mass Storage device detected [ 199.721847][ T363] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 199.900111][ T363] usb 3-1: USB disconnect, device number 114 [ 200.209598][ T341] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 200.220758][ T341] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 200.369321][ T865] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 200.431009][ T4069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.439802][ T4069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.454050][ T341] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 200.465087][ T341] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 200.477879][ T341] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 200.487366][ T341] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 200.498223][ T341] usb 5-1: USB disconnect, device number 33 [ 200.521405][ T4086] kvm: pic: non byte write [ 200.529252][ T865] usb 4-1: Using ep0 maxpacket: 16 [ 200.539571][ T865] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.549734][ T865] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.559316][ T865] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 200.568623][ T865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 200.576760][ T865] usb 4-1: SerialNumber: syz [ 200.589801][ T865] usb 4-1: 0:2 : does not exist [ 200.652668][ T4096] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 200.659934][ T4096] IPv6: NLM_F_CREATE should be set when creating new route [ 200.667127][ T4096] IPv6: NLM_F_CREATE should be set when creating new route [ 200.998345][ T865] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 201.008134][ T865] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 201.018065][ T865] usb 4-1: USB disconnect, device number 114 [ 201.024322][ T31] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 201.177250][ T4103] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=64 sclass=netlink_xfrm_socket pid=4103 comm=syz.0.1128 [ 201.191074][ T31] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 201.199243][ T31] usb 3-1: config 0 has no interface number 0 [ 201.199658][ T341] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 201.210547][ T31] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.227943][ T31] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.238068][ T31] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.251067][ T31] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 201.260267][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.275227][ T31] usb 3-1: config 0 descriptor?? [ 201.303906][ T36] audit: type=1400 audit(1779054085.122:16796): avc: denied { create } for pid=4116 comm="syz.0.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 201.335099][ T4119] netlink: 'syz.0.1133': attribute type 4 has an invalid length. [ 201.343507][ T4119] netlink: 'syz.0.1133': attribute type 5 has an invalid length. [ 201.351652][ T4119] netlink: 'syz.0.1133': attribute type 1 has an invalid length. [ 201.362418][ T36] audit: type=1400 audit(1779054085.182:16797): avc: denied { sys_module } for pid=4118 comm="syz.0.1133" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 201.383870][ T341] usb 5-1: Using ep0 maxpacket: 16 [ 201.391649][ T341] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 201.401127][ T341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.409149][ T341] usb 5-1: Product: syz [ 201.413559][ T341] usb 5-1: Manufacturer: syz [ 201.418180][ T341] usb 5-1: SerialNumber: syz [ 201.756113][ T4132] netlink: 'syz.3.1136': attribute type 16 has an invalid length. [ 201.893873][ T31] uclogic 0003:28BD:0042.002F: failed retrieving string descriptor #100: -71 [ 201.902910][ T31] uclogic 0003:28BD:0042.002F: failed retrieving pen parameters: -71 [ 201.912669][ T31] uclogic 0003:28BD:0042.002F: pen probing failed: -71 [ 201.919656][ T31] uclogic 0003:28BD:0042.002F: failed probing parameters: -71 [ 201.927215][ T31] uclogic 0003:28BD:0042.002F: probe with driver uclogic failed with error -71 [ 201.937464][ T31] usb 3-1: USB disconnect, device number 115 [ 201.979442][ T36] audit: type=1326 audit(1779054085.802:16798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4140 comm="syz.0.1139" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba1819ce59 code=0x0 [ 202.089273][ T865] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 202.239373][ T865] usb 4-1: Using ep0 maxpacket: 32 [ 202.245827][ T865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.256943][ T865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.267097][ T865] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 202.276268][ T865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.285045][ T865] usb 4-1: config 0 descriptor?? [ 202.291059][ T865] hub 4-1:0.0: USB hub found [ 202.449295][ T36] audit: type=1400 audit(1779054086.252:16799): avc: denied { accept } for pid=4100 comm="syz.4.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 202.475530][ T4144] overlayfs: failed to resolve './file1': -2 [ 202.749509][ T865] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 202.815078][ T4152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.823734][ T4152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.944284][ T865] usbhid 4-1:0.0: can't add hid device: -71 [ 202.950624][ T865] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 202.969589][ T865] usb 4-1: USB disconnect, device number 115 [ 203.148233][ T4154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.156846][ T4154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.167544][ T4154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.176197][ T4154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.439321][ T865] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 203.542317][ T36] audit: type=1400 audit(1779054087.362:16800): avc: denied { map } for pid=4164 comm="syz.3.1147" path="/dev/usbmon3" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 203.599269][ T865] usb 3-1: Using ep0 maxpacket: 16 [ 203.605914][ T865] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 203.617389][ T865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.628414][ T865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.638519][ T865] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 203.651616][ T865] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 203.660758][ T865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.661184][ T4167] cgroup2: Unknown parameter 'pids_localevents' [ 203.675542][ T865] usb 3-1: config 0 descriptor?? [ 203.730887][ T4174] netlink: 'syz.4.1151': attribute type 1 has an invalid length. [ 203.738983][ T4174] netlink: 'syz.4.1151': attribute type 3 has an invalid length. [ 203.747491][ T4174] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1151'. [ 203.765295][ T4174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.778195][ T4174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.086622][ T4158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1144'. [ 204.100453][ T865] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0030/input/input41 [ 204.113495][ T865] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0030/input/input42 [ 204.134884][ T865] kye 0003:0458:5013.0030: input,hiddev96,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 204.209270][ T313] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 204.351446][ T4187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.361733][ T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 204.371723][ T4187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.385483][ T313] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 204.395716][ T4191] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1155'. [ 204.401672][ T10] usb 3-1: USB disconnect, device number 116 [ 204.415193][ T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 204.430076][ T313] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 204.451969][ T313] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 204.466038][ T313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.484685][ T313] usb 4-1: Product: syz [ 204.489596][ T313] usb 4-1: Manufacturer: syz [ 204.494278][ T313] usb 4-1: SerialNumber: syz [ 204.500551][ T313] usb 4-1: config 0 descriptor?? [ 204.506594][ T313] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 204.586140][ T4199] kvm: user requested TSC rate below hardware speed [ 204.706641][ T313] scsi host1: usb-storage 4-1:0.0 [ 204.715928][ T313] usb 4-1: USB disconnect, device number 116 [ 204.759327][ T10] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 204.920406][ T10] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 204.928665][ T10] usb 3-1: config 0 has no interface number 0 [ 204.935183][ T10] usb 3-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 204.946900][ T10] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0 [ 204.956862][ T10] usb 3-1: config 0 interface 200 has no altsetting 0 [ 204.965387][ T10] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 204.974576][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.982609][ T10] usb 3-1: Product: syz [ 204.986812][ T10] usb 3-1: Manufacturer: syz [ 204.991477][ T10] usb 3-1: SerialNumber: syz [ 204.997279][ T10] usb 3-1: config 0 descriptor?? [ 205.009131][ T4212] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1160'. [ 205.021034][ T4212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4212 comm=syz.0.1160 [ 205.058325][ T4210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.067566][ T4210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.204652][ T4223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.217208][ T4223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.235220][ T10] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input43 [ 205.253911][ T10] usb 3-1: USB disconnect, device number 117 [ 205.489312][ T31] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 205.598199][ T4229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.606904][ T4229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.639343][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 205.645858][ T31] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.657086][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 205.664165][ T31] usb 4-1: New USB device found, idVendor=1b96, idProduct=0001, bcdDevice= 0.00 [ 205.673427][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.682877][ T31] usb 4-1: config 0 descriptor?? [ 206.097355][ T4226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.106095][ T4226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.117023][ T4226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.125712][ T4226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.138844][ T4250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.148253][ T4250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.163737][ T4226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.177324][ T4226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.233305][ T36] audit: type=1326 audit(1779054090.052:16801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.3.1174" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc501b9ce59 code=0x0 [ 206.295322][ T4260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.309403][ T4260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.543984][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 206.550191][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 206.559017][ T31] usb 4-1: USB disconnect, device number 117 [ 206.569277][ T865] usb 3-1: new low-speed USB device number 118 using dummy_hcd [ 206.730757][ T865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 206.742168][ T865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 206.753236][ T865] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 206.766089][ T865] usb 3-1: New USB device found, idVendor=056a, idProduct=0301, bcdDevice= 0.00 [ 206.775263][ T865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.784245][ T865] usb 3-1: config 0 descriptor?? [ 206.789674][ T4267] raw-gadget.6 gadget.2: fail, usb_ep_enable returned -22 [ 206.857193][ T4285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.866356][ T4285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.999556][ T4267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.008226][ T4267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.017034][ T4267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.025760][ T4267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.096654][ T4288] netlink: 484 bytes leftover after parsing attributes in process `syz.3.1184'. [ 207.238976][ T865] usbhid 3-1:0.0: can't add hid device: -71 [ 207.245270][ T865] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 207.255442][ T865] usb 3-1: USB disconnect, device number 118 [ 207.359253][ T10] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 207.407846][ T4297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4297 comm=syz.0.1187 [ 207.499447][ T341] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -110 [ 207.510305][ T10] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 207.523374][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 207.532555][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.542431][ T10] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 207.549391][ T10] usb 4-1: No valid video chain found. [ 207.744874][ T36] audit: type=1400 audit(1779054091.562:16802): avc: denied { view } for pid=4289 comm="syz.3.1185" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 207.749023][ T4305] cgroup: Unknown subsys name 'measure' [ 207.764590][ T4306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.778460][ T4306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.786638][ T4306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.795195][ T4306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.803369][ T4306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.811868][ T4306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.820113][ T4306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.829411][ T4306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.839654][ T4306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.848226][ T4306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.857157][ T4308] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1191'. [ 207.867932][ T10] usb 4-1: USB disconnect, device number 118 [ 208.169172][ T341] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 208.247578][ T4315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.256322][ T4315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.299180][ T341] usb 3-1: device descriptor read/64, error -71 [ 208.466519][ T4315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.475104][ T4315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.489531][ T4315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.499245][ T4315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.501316][ T4319] netlink: 'syz.0.1196': attribute type 12 has an invalid length. [ 208.515745][ T4315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1194'. [ 208.529033][ T4315] netlink: 'syz.4.1194': attribute type 4 has an invalid length. [ 208.537223][ T4315] netlink: 'syz.4.1194': attribute type 21 has an invalid length. [ 208.548719][ T341] usb 3-1: device descriptor read/64, error -71 [ 208.555173][ T4315] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1194'. [ 208.628984][ T865] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 208.780238][ T865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 208.791297][ T865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 208.802211][ T865] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 208.808894][ T341] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 208.815068][ T865] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 208.831828][ T865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.840774][ T865] usb 4-1: config 0 descriptor?? [ 208.846214][ T4317] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 208.948872][ T341] usb 3-1: device descriptor read/64, error -71 [ 209.188808][ T341] usb 3-1: device descriptor read/64, error -71 [ 209.212012][ T4332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.221070][ T4332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.256303][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.263478][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.270568][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.277643][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.284766][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.291902][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.299036][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.306090][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.313199][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.318794][ T341] usb usb3-port1: attempt power cycle [ 209.320389][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.332817][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.339975][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.347733][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.354890][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.361992][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.369079][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.376181][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.383300][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.390394][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.397445][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.404602][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.411804][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.418886][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.425948][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.433043][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.440159][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.447303][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.454416][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.461521][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.468990][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.476067][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.483326][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.490461][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.497589][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.504704][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.511789][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.518997][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.526048][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.533199][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.540286][ T865] cypress 0003:04B4:07B1.0031: unknown main item tag 0x0 [ 209.548106][ T865] cypress 0003:04B4:07B1.0031: hidraw0: USB HID v0.08 Device [HID 04b4:07b1] on usb-dummy_hcd.3-1/input0 [ 209.562002][ T865] usb 4-1: USB disconnect, device number 119 [ 209.658482][ T341] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 209.679700][ T341] usb 3-1: device descriptor read/8, error -71 [ 209.795868][ T4346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.804498][ T4346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.814767][ T341] usb 3-1: device descriptor read/8, error -71 [ 210.036782][ T4353] syzkaller1: entered promiscuous mode [ 210.042475][ T4353] syzkaller1: entered allmulticast mode [ 210.068242][ T341] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 210.097759][ T341] usb 3-1: device descriptor read/8, error -71 [ 210.121367][ T4364] overlayfs: failed to clone upperpath [ 210.229369][ T341] usb 3-1: device descriptor read/8, error -71 [ 210.338209][ T341] usb usb3-port1: unable to enumerate USB device [ 210.644019][ T36] audit: type=1400 audit(1779054094.463:16803): avc: denied { setattr } for pid=4372 comm="syz.0.1213" name="/" dev="configfs" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 210.967783][ T341] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 211.117823][ T341] usb 4-1: Using ep0 maxpacket: 8 [ 211.127336][ T341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.138953][ T341] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 211.151933][ T341] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 211.161055][ T341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.169984][ T341] usb 4-1: config 0 descriptor?? [ 211.282216][ T4393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.290851][ T4393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.299741][ T4393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.308329][ T4393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.357588][ T865] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 211.487503][ T865] usb 3-1: device descriptor read/64, error -71 [ 211.590030][ T341] hid (null): unknown global tag 0xa3 [ 211.595502][ T341] hid (null): unknown global tag 0xc [ 211.600913][ T341] hid (null): unknown global tag 0xd [ 211.607212][ T341] itetech 0003:06CB:73F4.0032: unexpected long global item [ 211.614671][ T341] itetech 0003:06CB:73F4.0032: probe with driver itetech failed with error -22 [ 211.727401][ T865] usb 3-1: device descriptor read/64, error -71 [ 211.829090][ T66] usb 4-1: USB disconnect, device number 120 [ 211.910919][ T36] audit: type=1400 audit(1779054095.734:16804): avc: denied { write } for pid=4413 comm="syz.4.1226" name="/" dev="incremental-fs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 211.918029][ T4414] overlayfs: workdir and upperdir must reside under the same mount [ 211.933845][ T36] audit: type=1400 audit(1779054095.734:16805): avc: denied { add_name } for pid=4413 comm="syz.4.1226" name="file1" dev="incremental-fs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 211.965476][ T36] audit: type=1400 audit(1779054095.734:16806): avc: denied { link } for pid=4413 comm="syz.4.1226" name="file1" dev="incremental-fs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 211.971156][ T4414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.989147][ T865] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 211.997537][ T4414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.016874][ T36] audit: type=1400 audit(1779054095.834:16807): avc: denied { create } for pid=4413 comm="syz.4.1226" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 212.038803][ T36] audit: type=1400 audit(1779054095.834:16808): avc: denied { associate } for pid=4413 comm="syz.4.1226" name="cgroup.controllers" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 212.127219][ T865] usb 3-1: device descriptor read/64, error -71 [ 212.170858][ T4433] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1232'. [ 212.369499][ T865] usb 3-1: device descriptor read/64, error -71 [ 212.401928][ T4440] netlink: 'syz.3.1235': attribute type 1 has an invalid length. [ 212.487162][ T865] usb usb3-port1: attempt power cycle [ 212.563813][ T36] audit: type=1400 audit(1779054096.384:16809): avc: denied { getopt } for pid=4445 comm="syz.4.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 212.617576][ T4453] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1239'. [ 212.617587][ T36] audit: type=1400 audit(1779054096.444:16810): avc: denied { nlmsg_read } for pid=4451 comm="syz.4.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 212.659026][ T4455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.668141][ T4455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.708987][ T4465] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 212.718032][ T4465] binder: Unknown parameter 'fsuuid' [ 212.724556][ T4469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=4469 comm=syz.0.1245 [ 212.725000][ T4465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.747284][ T4465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.761696][ T4472] overlayfs: failed to clone upperpath [ 212.836875][ T865] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 212.846816][ T341] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 212.863765][ T865] usb 3-1: device descriptor read/8, error -71 [ 212.997304][ T341] usb 4-1: no configurations [ 213.002097][ T341] usb 4-1: can't read configurations, error -22 [ 213.002490][ T865] usb 3-1: device descriptor read/8, error -71 [ 213.136689][ T341] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 213.246672][ T865] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 213.272923][ T865] usb 3-1: device descriptor read/8, error -71 [ 213.287672][ T341] usb 4-1: no configurations [ 213.291986][ T4490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.294172][ T341] usb 4-1: can't read configurations, error -22 [ 213.304256][ T4490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.308084][ T341] usb usb4-port1: attempt power cycle [ 213.407631][ T865] usb 3-1: device descriptor read/8, error -71 [ 213.516560][ T865] usb usb3-port1: unable to enumerate USB device [ 213.656614][ T341] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 213.677185][ T341] usb 4-1: no configurations [ 213.681902][ T341] usb 4-1: can't read configurations, error -22 [ 213.816460][ T341] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 213.837096][ T341] usb 4-1: no configurations [ 213.841747][ T341] usb 4-1: can't read configurations, error -22 [ 213.848966][ T341] usb usb4-port1: unable to enumerate USB device [ 213.858681][ T4506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.867260][ T4506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.978083][ T36] audit: type=1404 audit(1779054097.805:16811): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 214.014534][ T36] audit: type=1400 audit(1779054097.835:16812): avc: denied { read write } for pid=2916 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 214.040836][ T36] audit: type=1400 audit(1779054097.865:16813): avc: denied { relabelfrom } for pid=4519 comm="syz.4.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=0 [ 214.067656][ T36] audit: type=1400 audit(1779054097.895:16814): avc: denied { read write } for pid=2916 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 214.092051][ T36] audit: type=1400 audit(1779054097.905:16815): avc: denied { wake_alarm } for pid=4521 comm="syz.4.1262" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 214.113466][ T36] audit: type=1400 audit(1779054097.925:16816): avc: denied { read write } for pid=2916 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 214.146238][ T36] audit: type=1400 audit(1779054097.935:16817): avc: denied { create } for pid=4526 comm="syz.4.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=0 [ 214.153491][ T4530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1264'. [ 214.166428][ T36] audit: type=1400 audit(1779054097.935:16818): avc: denied { remount } for pid=4526 comm="syz.4.1263" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=0 [ 214.181826][ T4530] bridge0: port 3(batadv_slave_0) entered blocking state [ 214.195061][ T36] audit: type=1400 audit(1779054097.935:16819): avc: denied { create } for pid=4526 comm="syz.4.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 214.207851][ T4530] bridge0: port 3(batadv_slave_0) entered disabled state [ 214.225463][ T36] audit: type=1400 audit(1779054097.935:16820): avc: denied { create } for pid=4526 comm="syz.4.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=0 [ 214.230382][ T4530] batadv_slave_0: entered allmulticast mode [ 214.258489][ T4530] batadv_slave_0: entered promiscuous mode [ 214.270493][ T4530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16265 sclass=netlink_route_socket pid=4530 comm=syz.4.1264 [ 214.296132][ T4538] netlink: 'syz.4.1267': attribute type 9 has an invalid length. [ 214.304213][ T4538] netlink: 'syz.4.1267': attribute type 2 has an invalid length. [ 214.775201][ T4570] netlink: 1072 bytes leftover after parsing attributes in process `syz.2.1277'. [ 214.784558][ T4570] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1277'. [ 215.317103][ T4581] syzkaller1: entered promiscuous mode [ 215.322651][ T4581] syzkaller1: entered allmulticast mode [ 215.408334][ T4597] netlink: 'syz.0.1287': attribute type 4 has an invalid length. [ 215.416435][ T4597] netlink: 'syz.0.1287': attribute type 2 has an invalid length. [ 215.424178][ T4597] netlink: 3613 bytes leftover after parsing attributes in process `syz.0.1287'. [ 215.454915][ T4610] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=4610 comm=syz.0.1290 [ 215.746359][ T4634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1297'. [ 215.800019][ T4634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1297'. [ 215.809062][ T4634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1297'. [ 215.818150][ T4634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1297'. [ 216.078450][ T2419] bridge_slave_1: left allmulticast mode [ 216.084355][ T2419] bridge_slave_1: left promiscuous mode [ 216.090243][ T2419] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.098473][ T2419] bridge_slave_0: left allmulticast mode [ 216.104349][ T2419] bridge_slave_0: left promiscuous mode [ 216.110366][ T2419] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.257103][ T2419] tipc: Disabling bearer [ 216.262572][ T2419] tipc: Left network mode [ 219.238482][ T36] kauditd_printk_skb: 193 callbacks suppressed [ 219.238503][ T36] audit: type=1400 audit(1779054103.057:17014): avc: denied { execmem } for pid=4672 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 219.264237][ T36] audit: type=1400 audit(1779054103.057:17015): avc: denied { sys_module } for pid=4675 comm="syz.0.1314" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 219.285644][ T36] audit: type=1400 audit(1779054103.057:17016): avc: denied { execute } for pid=4675 comm="syz.0.1314" dev="tmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 219.307171][ T36] audit: type=1400 audit(1779054103.077:17017): avc: denied { read write } for pid=2916 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 219.331482][ T36] audit: type=1400 audit(1779054103.077:17018): avc: denied { read write } for pid=4674 comm="syz.3.1316" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 219.766396][ T36] audit: type=1400 audit(1779054103.588:17019): avc: denied { read write } for pid=294 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 220.149326][ T36] audit: type=1400 audit(1779054103.968:17020): avc: denied { execmem } for pid=4679 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 220.171364][ T36] audit: type=1400 audit(1779054103.988:17021): avc: denied { read write } for pid=4680 comm="syz.4.1318" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 220.193581][ T4684] netlink: 'syz.3.1319': attribute type 4 has an invalid length. [ 220.200989][ T36] audit: type=1400 audit(1779054103.988:17022): avc: denied { read } for pid=4682 comm="syz.3.1319" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 220.203493][ T4684] netlink: 'syz.3.1319': attribute type 5 has an invalid length. [ 220.226453][ T36] audit: type=1400 audit(1779054104.028:17023): avc: denied { read write } for pid=2916 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 220.234039][ T4684] __nla_validate_parse: 61 callbacks suppressed [ 220.234054][ T4684] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1319'. [ 224.825249][ T36] kauditd_printk_skb: 64 callbacks suppressed [ 224.825270][ T36] audit: type=1400 audit(1779054108.650:17088): avc: denied { execmem } for pid=4714 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 224.828799][ T4717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1328'. [ 224.832255][ T36] audit: type=1400 audit(1779054108.650:17089): avc: denied { read write } for pid=4716 comm="syz.4.1329" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 224.883358][ T36] audit: type=1400 audit(1779054108.680:17090): avc: denied { read write } for pid=4716 comm="syz.4.1329" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 225.313887][ T36] audit: type=1400 audit(1779054109.140:17091): avc: denied { read write } for pid=294 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 225.364843][ T36] audit: type=1400 audit(1779054109.190:17092): avc: denied { read write } for pid=2916 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 226.235236][ T36] audit: type=1400 audit(1779054110.061:17093): avc: denied { execmem } for pid=4719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 226.257650][ T36] audit: type=1400 audit(1779054110.091:17094): avc: denied { read write } for pid=4722 comm="syz.3.1332" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 226.282095][ T36] audit: type=1400 audit(1779054110.091:17095): avc: denied { name_bind } for pid=4721 comm="syz.0.1330" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 226.304117][ T36] audit: type=1400 audit(1779054110.091:17096): avc: denied { name_bind } for pid=4720 comm="syz.4.1331" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 226.331456][ T36] audit: type=1400 audit(1779054110.091:17097): avc: denied { name_bind } for pid=4721 comm="syz.0.1330" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 227.771558][ T4735] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1335'. [ 231.090367][ T36] kauditd_printk_skb: 32 callbacks suppressed [ 231.090389][ T36] audit: type=1400 audit(1779054114.923:17130): avc: denied { create } for pid=4748 comm="syz.0.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 231.122429][ T36] audit: type=1400 audit(1779054114.923:17131): avc: denied { read write } for pid=4749 comm="syz.4.1340" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 231.146328][ T36] audit: type=1400 audit(1779054114.923:17132): avc: denied { mounton } for pid=4748 comm="syz.0.1339" path="/378/file0" dev="tmpfs" ino=2124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 231.169128][ T36] audit: type=1400 audit(1779054114.923:17133): avc: denied { read } for pid=4749 comm="syz.4.1340" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 231.191927][ T36] audit: type=1400 audit(1779054114.923:17134): avc: denied { mounton } for pid=4748 comm="syz.0.1339" path="/378/bus/file0" dev="tmpfs" ino=2127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 231.215069][ T36] audit: type=1400 audit(1779054114.953:17135): avc: denied { relabelfrom } for pid=4749 comm="syz.4.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=0 [ 231.235036][ T36] audit: type=1400 audit(1779054114.953:17136): avc: denied { execmem } for pid=4746 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 231.254623][ T36] audit: type=1400 audit(1779054114.953:17137): avc: denied { create } for pid=4747 comm="syz.3.1341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=0 [ 231.274375][ T36] audit: type=1400 audit(1779054114.953:17138): avc: denied { read write } for pid=4747 comm="syz.3.1341" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 231.298297][ T36] audit: type=1400 audit(1779054114.953:17139): avc: denied { read write } for pid=2916 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 234.849933][ T4770] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1347'. [ 236.864951][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 236.864970][ T36] audit: type=1400 audit(1779054120.706:17159): avc: denied { execmem } for pid=4774 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 236.941864][ T36] audit: type=1400 audit(1779054120.706:17160): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[3083]" dev="pipefs" ino=3083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 236.984546][ T36] audit: type=1400 audit(1779054120.706:17161): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[3083]" dev="pipefs" ino=3083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 237.010169][ T36] audit: type=1400 audit(1779054120.706:17162): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[3083]" dev="pipefs" ino=3083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 237.044692][ T36] audit: type=1400 audit(1779054120.706:17163): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[3083]" dev="pipefs" ino=3083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 237.084783][ T36] audit: type=1400 audit(1779054120.706:17164): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[3083]" dev="pipefs" ino=3083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 237.144692][ T36] audit: type=1400 audit(1779054120.736:17165): avc: denied { create } for pid=4775 comm="syz.0.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 237.185810][ T36] audit: type=1400 audit(1779054120.736:17166): avc: denied { create } for pid=4775 comm="syz.0.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 237.302643][ T31] usb 5-1: USB disconnect, device number 34 [ 237.397890][ T2376] bridge_slave_1: left allmulticast mode [ 237.403690][ T2376] bridge_slave_1: left promiscuous mode [ 237.434632][ T2376] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.451967][ T2376] bridge_slave_0: left allmulticast mode [ 237.457844][ T2376] bridge_slave_0: left promiscuous mode [ 237.463635][ T2376] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.605861][ T2376] tipc: Left network mode [ 237.825677][ T2376] ------------[ cut here ]------------ [ 237.831251][ T2376] WARNING: CPU: 1 PID: 2376 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 237.841387][ T2376] Modules linked in: [ 237.845414][ T2376] CPU: 1 UID: 0 PID: 2376 Comm: kworker/u8:13 Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 237.857435][ T2376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 237.867539][ T2376] Workqueue: netns cleanup_net [ 237.872337][ T2376] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 237.878346][ T2376] Code: e8 81 fa d2 fc 4b 83 3c 3e 00 75 19 e8 b5 6e 7a fc 49 81 ff f8 07 00 00 74 1b e8 a7 6e 7a fc 49 83 c7 08 eb c9 e8 9c 6e 7a fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 237.898004][ T2376] RSP: 0018:ffffc9000f6dfb90 EFLAGS: 00010293 [ 237.904092][ T2376] RAX: ffffffff850d5504 RBX: ffff8881224311c0 RCX: ffff888136bc3900 [ 237.912189][ T2376] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888104710598 [ 237.920207][ T2376] RBP: ffffc9000f6dfbb0 R08: ffffffff87d49147 R09: 1ffffffff0fa9228 [ 237.928204][ T2376] R10: dffffc0000000000 R11: fffffbfff0fa9229 R12: dffffc0000000000 [ 237.936208][ T2376] R13: dffffc0000000000 R14: ffff888104710000 R15: 0000000000000598 [ 237.944307][ T2376] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 237.953249][ T2376] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.959856][ T2376] CR2: 0000561e2d62bd58 CR3: 000000010c7f2000 CR4: 00000000003526b0 [ 237.967882][ T2376] Call Trace: [ 237.971163][ T2376] [ 237.974108][ T2376] cleanup_net+0x6c0/0xc90 [ 237.978568][ T2376] ? __cfi_cleanup_net+0x10/0x10 [ 237.983525][ T2376] process_scheduled_works+0x7d4/0x1020 [ 237.989099][ T2376] worker_thread+0xc51/0x1370 [ 237.993801][ T2376] kthread+0x2c9/0x370 [ 237.997902][ T2376] ? __cfi_worker_thread+0x10/0x10 [ 238.003116][ T2376] ? __cfi_kthread+0x10/0x10 [ 238.007738][ T2376] ret_from_fork+0x67/0xa0 [ 238.012168][ T2376] ? __cfi_kthread+0x10/0x10 [ 238.016795][ T2376] ret_from_fork_asm+0x1a/0x30 [ 238.021588][ T2376] [ 238.024638][ T2376] ---[ end trace 0000000000000000 ]--- [ 238.030336][ T2376] ------------[ cut here ]------------ [ 238.035821][ T2376] WARNING: CPU: 1 PID: 2376 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 238.046057][ T2376] Modules linked in: [ 238.050087][ T2376] CPU: 1 UID: 0 PID: 2376 Comm: kworker/u8:13 Tainted: G W syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 238.063473][ T2376] Tainted: [W]=WARN [ 238.067314][ T2376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 238.077409][ T2376] Workqueue: netns cleanup_net [ 238.082211][ T2376] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 238.088339][ T2376] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 60 6e 7a fc 49 81 ff f8 07 00 00 74 1b e8 52 6e 7a fc 49 83 c7 08 eb c5 e8 47 6e 7a fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 37 6e 7a fc 5b 41 5c 41 5e 41 [ 238.107994][ T2376] RSP: 0018:ffffc9000f6dfb90 EFLAGS: 00010293 [ 238.114180][ T2376] RAX: ffffffff850d5559 RBX: ffff888104710800 RCX: ffff888136bc3900 [ 238.122179][ T2376] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888104710808 [ 238.130272][ T2376] RBP: ffffc9000f6dfbb0 R08: ffffffff87d49147 R09: 1ffffffff0fa9228 [ 238.138415][ T2376] R10: dffffc0000000000 R11: fffffbfff0fa9229 R12: dffffc0000000000 [ 238.146437][ T2376] R13: dffffc0000000000 R14: ffff888104710000 R15: 0000000000000008 [ 238.154458][ T2376] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 238.163391][ T2376] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 238.170129][ T2376] CR2: 0000561e2d62bd58 CR3: 000000010c7f2000 CR4: 00000000003526b0 [ 238.178166][ T2376] Call Trace: [ 238.181453][ T2376] [ 238.184415][ T2376] cleanup_net+0x6c0/0xc90 [ 238.188855][ T2376] ? __cfi_cleanup_net+0x10/0x10 [ 238.193810][ T2376] process_scheduled_works+0x7d4/0x1020 [ 238.199393][ T2376] worker_thread+0xc51/0x1370 [ 238.204207][ T2376] kthread+0x2c9/0x370 [ 238.208282][ T2376] ? __cfi_worker_thread+0x10/0x10 [ 238.213379][ T2376] ? __cfi_kthread+0x10/0x10 [ 238.218002][ T2376] ret_from_fork+0x67/0xa0 [ 238.222438][ T2376] ? __cfi_kthread+0x10/0x10 [ 238.227087][ T2376] ret_from_fork_asm+0x1a/0x30 [ 238.231860][ T2376] [ 238.234892][ T2376] ---[ end trace 0000000000000000 ]--- [ 238.242962][ T2376] ------------[ cut here ]------------ [ 238.248460][ T2376] WARNING: CPU: 0 PID: 2376 at net/xfrm/xfrm_state.c:3216 xfrm_state_fini+0x2be/0x310 [ 238.258108][ T2376] Modules linked in: [ 238.263155][ T2376] CPU: 0 UID: 0 PID: 2376 Comm: kworker/u8:13 Tainted: G W syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 238.276694][ T2376] Tainted: [W]=WARN [ 238.280511][ T2376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 238.290620][ T2376] Workqueue: netns cleanup_net [ 238.295445][ T2376] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 238.301049][ T2376] Code: 3c 20 00 74 08 48 89 df e8 ef c6 ed fc 48 8b 3b e8 b7 ce d8 fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 eb b7 00 cc e8 12 3b 95 fc <0f> 0b e9 b0 fd ff ff e8 06 3b 95 fc 0f 0b e9 18 fe ff ff e8 fa 3a [ 238.320803][ T2376] RSP: 0018:ffffc9000f6dfb70 EFLAGS: 00010293 [ 238.326927][ T2376] RAX: ffffffff84f2888e RBX: ffff8881224311c0 RCX: ffff888136bc3900 [ 238.334936][ T2376] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888136bc3900 [ 238.343023][ T2376] RBP: ffffc9000f6dfb98 R08: ffffffff87d49147 R09: 1ffffffff0fa9228 [ 238.351027][ T2376] R10: dffffc0000000000 R11: fffffbfff0fa9229 R12: 1ffffffff0fa8f78 [ 238.359039][ T2376] R13: dffffc0000000000 R14: ffff888122431dc0 R15: dffffc0000000000 [ 238.367074][ T2376] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 238.376083][ T2376] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 238.382945][ T2376] CR2: 00007ffed8099ff8 CR3: 000000010c7f2000 CR4: 00000000003526b0 [ 238.390994][ T2376] Call Trace: [ 238.394313][ T2376] [ 238.397250][ T2376] xfrm_net_exit+0x31/0x80 [ 238.401669][ T2376] cleanup_net+0x6c0/0xc90 [ 238.406253][ T2376] ? __cfi_cleanup_net+0x10/0x10 [ 238.411230][ T2376] process_scheduled_works+0x7d4/0x1020 [ 238.416828][ T2376] worker_thread+0xc51/0x1370 [ 238.421519][ T2376] kthread+0x2c9/0x370 [ 238.425619][ T2376] ? __cfi_worker_thread+0x10/0x10 [ 238.430753][ T2376] ? __cfi_kthread+0x10/0x10 [ 238.435395][ T2376] ret_from_fork+0x67/0xa0 [ 238.439823][ T2376] ? __cfi_kthread+0x10/0x10 [ 238.444438][ T2376] ret_from_fork_asm+0x1a/0x30 [ 238.449219][ T2376] [ 238.452226][ T2376] ---[ end trace 0000000000000000 ]--- [ 238.491243][ T36] audit: type=1400 audit(1779054122.317:17167): avc: denied { search } for pid=4782 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 238.519785][ T36] audit: type=1400 audit(1779054122.317:17168): avc: denied { search } for pid=4783 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 238.558090][ T2376] tipc: Left network mode [ 238.563389][ T2376] veth1_macvtap: left promiscuous mode [ 238.569359][ T2376] veth0_vlan: left promiscuous mode [ 241.872329][ T36] kauditd_printk_skb: 30850 callbacks suppressed [ 241.872352][ T36] audit: type=1400 audit(1779054125.699:48019): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 241.901212][ T36] audit: type=1400 audit(1779054125.709:48020): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 241.922751][ T36] audit: type=1400 audit(1779054125.709:48021): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 241.925621][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 241.944034][ T36] audit: type=1400 audit(1779054125.709:48022): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 241.950474][ T149] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 241.971700][ T36] audit: type=1400 audit(1779054125.709:48023): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 241.979208][ T149] audit: backlog limit exceeded [ 242.000573][ T36] audit: type=1400 audit(1779054125.709:48024): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 242.005822][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 246.879825][ T36] kauditd_printk_skb: 47690 callbacks suppressed [ 246.879846][ T36] audit: type=1400 audit(1779054130.721:95146): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 246.887277][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 246.907581][ T36] audit: type=1400 audit(1779054130.721:95147): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 246.914015][ T149] audit: audit_lost=192 audit_rate_limit=0 audit_backlog_limit=64 [ 246.935224][ T36] audit: type=1400 audit(1779054130.721:95148): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 246.943029][ T149] audit: backlog limit exceeded [ 246.964280][ T36] audit: type=1400 audit(1779054130.721:95149): avc: denied { read } for pid=149 comm="dhcpcd" scontext=sys