last executing test programs: 10.060730514s ago: executing program 0 (id=556): pipe(&(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x80) mount(&(0x7f0000000140)=@filename='./dev/sda1\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000200)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './dev/sda1/file0'}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda1\x00', 0x1ff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, &(0x7f0000000300)="0bd7a9aa883113510d5d127d9d6ce9eae8ea74138f8dca13fcc840775db47e579bfea716b34392916a63fc4424fa20c8557098e75d507fafc338fee9ce364d8a9da9fc39eca912f197b7da482f239d8adf243f239d3ac6b0c50e8a59dcc4372acd5a64ecb31f15d3e4cc0b842916238369b8f37e1930faa23f9e1b862a54be370179cb9fcb9026b7512fd3e10a5d05eb3aee6f46348dfedd76d328d88ef3c185fbaedd768322a038b22e9178f4cc4b517e214a1fd1c5bca81ca950540a90c11099c9aee989201b83bbf0d206fe70d65e7ad92f2b254c4322d543ab789f35a2ebec281dbfdf29da7221f3", 0xea, 0x1, &(0x7f0000000400)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) socket$inet(0x2, 0x80000, 0x262) 10.00417879s ago: executing program 0 (id=557): memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_', 0x3) pipe2(&(0x7f0000000380), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x149040, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40042, 0x13) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) r2 = syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendto$inet_nvme_pdu(r1, &(0x7f00000003c0)=@icreq={{0x0, 0xf, 0x80, 0x2}, 0x0, 0x0, 0x2, 0x4}, 0x80, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000440)={"a669dae6e6e740e23ed2ec9d551b987a7f3059773a5f6045ad799ee4269f06225ed57a5ad801a1cda59b86d9f710f8b0a414d6867d9e77dd7bba32166364598e1865d481db21c2b7020f6b74c03c549ece4ee30ba60753e2f286ac2d5f8f4eeecdad44cefed50cf6dbf2ddb90d5f3124149cf72325bae3e3248da062ba2abdd9b0f9aa765656e2593dfe69092490ab5f7dda183550dcc29f78520dd2ffb8a5e40829009f6601c1ffe819bb1f9c8b4b2e2cd0fa97024591ca8b4051fe424ce2cc5eca7878d0e6b6be3c5482ec43422ef08d209d1404aa04e203014f4d5e0126ed04253b089fb18af0ae3e475e4674b166ae8d99f2af4e4d72c96c5c75e46c82671458f7ddbf4565160c86104a0cfefe346c2f0aa72f8484a275ceb99cac8cf831db8a8ee7a48010f373f4c60985802b50d33bfe6fb48df35d29cdea24013723c1202d4dd3163195bfcc6ee43a4fa21630d4c000a277aecfbf6ee679127c3e735ea2df3068c04daebbeb4daa178730236a6a1b2c5e7b74b46666d3904b83da48b0ef021450812e1c7f85e7c96c8788be079e86592633d26925f301458143d2df5ecb39fb9f62429734308278ff0db16c5442452f2bba782f29216d6e605c4a716ae1c817607dd3d36d9dc413b62d56168395ad42ad1029b9190ece8a229452950979c3a4edcb71feb2629ae85fb23f562c32bbba5eaf8dab5805eb70e69917d6e49b5403719847c59d650e4b9d5ac796a8f514181683a0db50af952461d54cc7b55589377f3c5dbdf2d2e58965f445981c7bf09e139538df043cc2af0d77afd633b0e3518d20a0e1200257113b5460d30d84d9f5e69b5a23866ed3cc522a9a19bd9aaea6e78ab8910d915a83ce2e15b9f28ffc576ac721935b348932d1b78d53823fe57604601c425901ecac875c7c8aedc5c68891eff80c983ab7fe2cd1e116d76c72083448f5896c345e7605bd9870adacaf45a1a6b62489bbdcafd78f5c9f3a0287142e00c76e0b1bff267bbf8d6f8506d8ec3c1a60b7f8fa3d26cde0ea30c77d40239803f383f71777d7afb240b112e392f9f4c98d1176056f6de81858245f56335b2060718c9371c10b0d72e54602b496eb06b72a1150ddb60c8de93d93f5736e8de8fd395e18a4318168a3033c54d5f39d3b294140c1f42132e7661a339d41b7f93ec51f288d428321f682281585c04ad601db6d13ab8d5fcdf6a7d6c7e8657cb7b42c00702f0d7f1ed95029cf85eca556d66b0e5a06dc4bf7305a2646947d1ee3fbead7140650fb93b851e2dd27bd3e542b9153796c27ec10aebf803eaa1a13999ec385b7d8061ff24dcfe711ea976d1580e317b4f852ae71f24430f6138ddd1705ef55710fd765f33608b3c609562ee58fa2b42dd5deac4baa55083e5e871b296d6b37e03cdfc3aaad559ff2ce4ed667566b6c1876f95cf81b82929e7c"}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) sendmsg$netlink(r4, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r7, @ANYBLOB='\a'], 0x0) 8.650047459s ago: executing program 0 (id=567): socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xd8}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone3(&(0x7f0000000540)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x61) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f00000005c0), 0x10) listen(r5, 0x4) connect$vsock_stream(r4, &(0x7f0000000600)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r4, &(0x7f0000000640)=[{{0x0, 0xffffffc2, &(0x7f0000000680)=[{&(0x7f00000006c0)="1b", 0x40000}], 0x1}}], 0x51, 0x0) accept4$unix(r5, 0x0, 0x0, 0x800) 7.629038864s ago: executing program 0 (id=578): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000240)='./bus\x00') mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='27', 0x2) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f00000003c0)={0x100028, 0x100000, 0x100000, {r0}}, 0x20) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x210c, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing\x00', 0x1ff) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x7000001) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x401, 0x4) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x43, 0x2, 0x5e, 0x20, 0x1a0a, 0x108, 0xf2cf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xa4, 0x20, 0x1, "", [{{0x9, 0x4, 0x4, 0x3, 0x0, 0x89, 0x1d, 0x7e, 0x4}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) chdir(&(0x7f0000000240)='./bus\x00') (async) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) write(r0, &(0x7f0000000340)='27', 0x2) (async) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x0) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f00000003c0)={0x100028, 0x100000, 0x100000, {r0}}, 0x20) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x210c, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing\x00', 0x1ff) (async) pipe(&(0x7f0000000000)) (async) fcntl$setpipe(r1, 0x407, 0x7000001) (async) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x401, 0x4) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x43, 0x2, 0x5e, 0x20, 0x1a0a, 0x108, 0xf2cf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xa4, 0x20, 0x1, "", [{{0x9, 0x4, 0x4, 0x3, 0x0, 0x89, 0x1d, 0x7e, 0x4}}]}}]}}, 0x0) (async) 6.392046292s ago: executing program 0 (id=581): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a40), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001a80)={'syzkaller0\x00', 0x4801}) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) close(r2) (async) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001b00)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001b00)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000001b40)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001b80), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000001c00)={'syzkaller0\x00', @remote}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000001c00)={'syzkaller0\x00', @remote}) close(0x3) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x2, 0xe6c, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x1ca}}}, &(0x7f0000000c00)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r5) (async) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x2e, 0x8, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) r7 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x2, 0x1}, 0x18) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000400)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r8, 0x0, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4706, 0x1, 0x3, 0x1e0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffde, 0x2000, 0x0, 0x2a8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6d, 0x6449, 0xfffffffe, 0xfffffefa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbfcb, 0x800, 0x40000002, 0x1ec}}], 0x1, 0x0, 0x0) (async) syz_ublk_setup_queues(0xffffffffffffffff, r8, 0x0, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4706, 0x1, 0x3, 0x1e0}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffde, 0x2000, 0x0, 0x2a8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6d, 0x6449, 0xfffffffe, 0xfffffefa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbfcb, 0x800, 0x40000002, 0x1ec}}], 0x1, 0x0, 0x0) r10 = openat$selinux_policy(0xffffff9c, &(0x7f00000006c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r10, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000700)={r0, 0x7, 0xd941, 0xb64}) r11 = syz_io_uring_setup(0x12ca, &(0x7f0000000740)={0x0, 0x200600, 0x400, 0x2, 0xcb, 0x0, r3}, &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)) r12 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x0, 0x8c) r13 = openat$incfs(r12, &(0x7f0000000b40)='.log\x00', 0x0, 0x1fc) ppoll(&(0x7f0000000b80)=[{r13, 0x1000}], 0x1, &(0x7f0000000bc0)={0x0, 0x989680}, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r4, &(0x7f00000002c0)={0x0, 0x6120, 0x8a7f34665aebff17, 0x1, 0x103, 0x0, r7}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8276, 0x1, 0xddd8, 0x3c6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6bff, 0x2000, 0x3, 0x2bf, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x62cc, 0x80, 0x3, 0x3e7, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcd43, 0x4000, 0x0, 0x132, 0x0, r11}}], 0x4, &(0x7f0000002c40)={0x2e, 0x10, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x7fff}, 0x0, 0x0, '\x00', {0x3, 0x22c, 0x0, &(0x7f0000001c40)=@buf_max_buf="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"}}, &(0x7f0000002cc0)) (async) syz_ublk_setup_queues(0xffffffffffffffff, r4, &(0x7f00000002c0)={0x0, 0x6120, 0x8a7f34665aebff17, 0x1, 0x103, 0x0, r7}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8276, 0x1, 0xddd8, 0x3c6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6bff, 0x2000, 0x3, 0x2bf, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x62cc, 0x80, 0x3, 0x3e7, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcd43, 0x4000, 0x0, 0x132, 0x0, r11}}], 0x4, &(0x7f0000002c40)={0x2e, 0x10, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x7fff}, 0x0, 0x0, '\x00', {0x3, 0x22c, 0x0, &(0x7f0000001c40)=@buf_max_buf="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"}}, &(0x7f0000002cc0)) 6.339480947s ago: executing program 0 (id=582): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000440)={0x0, 'ip_vti0\x00', {0x1}, 0x3}) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000200)=0x1, 0x4) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) sendto$inet(r2, 0x0, 0x0, 0x4008084, &(0x7f0000000400)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$sock_proto_private(r1, 0x89e9, &(0x7f0000000280)="39227b3a6d1280c27c7de72271fd7c2e4f9434279764df749e0b4a079cbe155eb04bc32439000a4e085d99706a6aad1141b538266c7b394fb9c9728d0b495aa1f2dd045c691f0f728a53f6e1dc58dbabb82215819542b4afc187a86a1ee859d58b1fd24e5067eeaa0064d531a3b081d203b130633e8f458d") r4 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x2ce, 0x0, 0x4, r4, 0x11}) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f0000000300)="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", 0xfc) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r4}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r6) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000480), 0x181000, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f00000004c0)={'caif0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}) 6.30853105s ago: executing program 32 (id=582): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000440)={0x0, 'ip_vti0\x00', {0x1}, 0x3}) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000200)=0x1, 0x4) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) sendto$inet(r2, 0x0, 0x0, 0x4008084, &(0x7f0000000400)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$sock_proto_private(r1, 0x89e9, &(0x7f0000000280)="39227b3a6d1280c27c7de72271fd7c2e4f9434279764df749e0b4a079cbe155eb04bc32439000a4e085d99706a6aad1141b538266c7b394fb9c9728d0b495aa1f2dd045c691f0f728a53f6e1dc58dbabb82215819542b4afc187a86a1ee859d58b1fd24e5067eeaa0064d531a3b081d203b130633e8f458d") r4 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x2ce, 0x0, 0x4, r4, 0x11}) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f0000000300)="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", 0xfc) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r4}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r6) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000480), 0x181000, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f00000004c0)={'caif0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}) 5.04863988s ago: executing program 3 (id=601): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$netlink(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)={0x10, 0x29, 0xebf41102170aaebe, 0x70bd29, 0x25dfdbfe}, 0x10}], 0x1, 0x0, 0x0, 0x24048084}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000002c0)=@ccm_128={{0x304}, "ab624f6011dc5562", "21004bb854986b0b74c0152fbf338bad", "270689dd", "2969c92218294513"}, 0x28) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000003c0)=0x4ce9c3a7) (async) accept$nfc_llcp(r1, &(0x7f0000000300), &(0x7f0000000380)=0x60) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = fsopen(&(0x7f0000000580)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x143142, 0x61) pread64$ublk_ch(r5, &(0x7f0000000600)=@buf_max_buf, 0x1000, 0x42) (async) r6 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r7 = syz_open_dev$usbfs(&(0x7f0000000500), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000540)={0x82, 0x0, 0x81, 0xec, 0x0, 0x1, 0x0}) (async) ptrace(0x10, r6) (async) ptrace$getregset(0x4204, r6, 0x2, &(0x7f0000000400)={&(0x7f0000000440)=""/128, 0x80}) r8 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f00000004c0)={0x16, 0x5}, 0x8) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x3}, {0x6}]}, 0x10) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f0000000100)=""/2, &(0x7f0000000140)=0x2) 4.976130228s ago: executing program 3 (id=603): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000080904000001020d00000524060001052400be450d240f0100000000000000000006241a0000280905812100020000fe0904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) setns(0xc9, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000cc0)="120000001200e7ef00341618a585107b462e", 0x12, 0x10, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000d80)=""/69, 0x45}, {&(0x7f0000000e00)=""/187, 0xbb}, {&(0x7f0000000ec0)=""/4096, 0x1000}], 0x3}, 0xc8cd}], 0x1, 0x2020, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100000000019183936924"], 0x14}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) r4 = syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x60, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2}}}}}]}}, 0x0) syz_usb_control_io$uac3(r4, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180a}}}, 0x0) syz_usb_control_io$rtl8150(r4, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$uac3(r4, &(0x7f00000008c0)={0x14, &(0x7f0000000780)={0x40, 0x9, 0xcc, {0xcc, 0x5, "c8ddd65c8b0002def1f0d37d628a6c414bd90c6b9179ebac965fda5842a771a769212d29e6142a169ff152bf77a896763301d85e29ffd11f57ebded95267a5a16b764578c05aa5f992f0b4e1799901afee06b8d53686fea92a5664a6cba64c91c5356198645de33384e904d05b82e0676fc34723cf9dca9558b33295902b7967e697cbe7e7dc9d62b26dec74f712f67b6747c429f6c752ed4b0b3a7a2a8a61fa6a76a564b8792370d1921532ad741d8cd2310e2ed98793ebb760a8546b9b660f42f0361813740c58593c"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44d}}}, &(0x7f0000000b40)={0x44, &(0x7f0000000900)={0x20, 0xa, 0x65, "2ba7fc78f9f788d271a812b3c1386f67a03ecd24999759543f81d5c8844214fa7c7e207ff03ba263d74286f4daed7461fa39281841f95f7a941c9d557d8601a0009654455e1b68d491e01d5238858172dcdba4bdb19a61db3715deda85103f0c33674ba7c4"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000a00)={0x20, 0x81, 0x2, "d352"}, &(0x7f0000000a40)={0x20, 0x82, 0x3, "b490d6"}, &(0x7f0000000a80)={0x20, 0x83, 0x1, ':'}, &(0x7f0000000ac0)={0x20, 0x84, 0x1, "f3"}, &(0x7f0000000b00)={0x20, 0x85, 0x3, "f9a811"}}) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x103080, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) capset(&(0x7f0000000680)={0x20071026}, &(0x7f0000000c00)={0x0, 0x2}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000c40), 0x28100, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000c80)=0x2) ioctl$KVM_SET_CLOCK(r6, 0x4188aec6, &(0x7f0000000740)={0x1, 0x0, 0x0, 0x20000000000005, 0x1004}) syz_usb_control_io$printer(r4, &(0x7f0000000300)={0x14, &(0x7f0000000200)={0x40, 0x8, 0x8e, {0x8e, 0x1, "af8fb5eee00460b1d1d29c7ee98ea5774df58e96294525757fa70424c42d68d2502f5dd692c3aaabc3d24342f949572539c59c197358b5643e35bbb4f57fc000e6b880c8942cfb891d1833fd93c7a0f9474d79b9e762dfca01c2abe0cea4f26b45f2b55c1e750d8e965ac39964924d5b43d2d82ccefc2f244458eacf704a41e56e5e78b62aac8100247733bf"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x302f}}}, &(0x7f0000000600)={0x34, &(0x7f0000000340)={0x20, 0x31, 0x9a, "313114ff788792eb3b78ba6e5da1fb12f868186b7c00ae5df75a53c334e0d95ba2f48ca6298b53dc6b878abd13f13a44df2b6c22cc63239291d0ae62735db689f31d9f58e0960ca3d56fb450a4e0ef8506645955bc114a991cb8ba8a2ec0b7a77ef83689341a64330663b28497a68d33f1458b7e32d8644b8e66e43373c95ef24065d10bcd805bb6f3f31a865a8b51c4bad82629b4d0b5c99142"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xfa}, &(0x7f00000004c0)={0x20, 0x0, 0x3a, {0x38, "8d17bf402b2ee13a69cf0d38f57588ae6ce0c50737648de0cee5a9c0d893ccfff6ecc0ed3a47bc40c8efd35d45bb8a3d60c7b70895abb601"}}, &(0x7f0000000500)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000540)={0x20, 0x0, 0x1, 0xb}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0x4, 0x3, 0xd, 0x1, 0x7, 0x7, 0x3313, 0xfd, 0x4, 0x0, 0x33, 0xc}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.874848878s ago: executing program 1 (id=605): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000200)={[{0x4, 0x200, 0x8, 0x84, 0x0, 0x7, 0xc4, 0x1, 0x0, 0x9, 0xf, 0x8, 0x4000000000009}, {0x8, 0xaef3, 0xa, 0x7, 0xc, 0x1, 0x9, 0x3, 0x4, 0x13, 0x1, 0x20, 0x12005}, {0x2, 0x7, 0xa, 0xf, 0x1, 0x14, 0x0, 0xfb, 0x72, 0xfb, 0x1, 0x3, 0x2}], 0x9}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[0x1, 0x6, 0x7, 0x0, 0x8000000000010004, 0xfffffffffffffffd, 0x4002004c3, 0x1000, 0x0, 0xfff, 0x10, 0x4, 0x0, 0x0, 0x8, 0x3], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_connect$uac1(0x0, 0x81, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRES32=r5, @ANYRES16=r0, @ANYRES16=r1, @ANYRES8=r1, @ANYRES16=r5, @ANYRES64=r1], 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='\\\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6400) 3.478665192s ago: executing program 4 (id=610): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f000001e180), 0x42, 0x0) mount$fuse(0x0, &(0x7f000001e1c0)='./file0\x00', &(0x7f000001e200), 0x0, &(0x7f000001e240)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x8) chmod(&(0x7f0000000100)='./file0\x00', 0x104) 3.478399752s ago: executing program 4 (id=611): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x301841, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, &(0x7f0000000200)="b9800000c00f3235010000000f3065f30fc735570000003ef23ef33e2e3e0f35f30f097700440f20c0350a000000440f22c026430f22440f3acc4efbd126d1a3fdffffff0f07", 0x46}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.420194588s ago: executing program 4 (id=612): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x0, 0xe5) write(r0, &(0x7f0000000340)='100', 0x3) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000a40)=0x11) 3.373881613s ago: executing program 4 (id=613): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3c5093, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x201027, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00') syz_usb_connect(0x0, 0x64, &(0x7f0000001e00)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a2401000000020102052404"], 0x0) 2.961003705s ago: executing program 3 (id=616): memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_', 0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x149040, 0x80) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40042, 0x13) r0 = syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$netlink(r2, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12140, 0x0) mount$incfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x41) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000480)='.\x00', &(0x7f00000004c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540), 0x40, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000005c0)='./bus\x00') truncate(&(0x7f0000000640)='./file1/file0\x00', 0x6) unlinkat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x200) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r4, @ANYBLOB='\a'], 0x0) 2.021188852s ago: executing program 4 (id=619): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'none'}, 0xa) r1 = gettid() timer_create(0x0, &(0x7f0000004580)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f00000045c0)=0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000002140), 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) read$FUSE(r3, &(0x7f00000000c0)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f0000006640)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000021c0)='./sys\x00', &(0x7f0000002200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000002240)='./sys/kernel/reboot/type\x00', 0x2, 0x0) setuid(0xee01) write(r4, &(0x7f0000002280)='k', 0x1) timer_settime(r2, 0x1, &(0x7f00000066c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 1.94130325s ago: executing program 4 (id=620): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000100)="64670feea1096f00003e660f38054c880f323e26640fb9a9c94f660fc7b27f1a360f09366764f4660fdd40e69a3a00e300baa000b0e5ee", 0x37}], 0x1, 0x6, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000180)=0x80000000, 0x4) syz_usb_connect$uac3(0x5, 0x97, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x8ae, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x1, 0xc0, 0x10, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0xc4, 0x800, 0x400, 0x1002, 0x0, 0xbc, 0x81, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x40, 0xd4, 0x84, {0xa, 0x25, 0x25, 0x0, 0x1, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x210, 0xfa, 0xa, 0x81, {0xa, 0x25, 0x25, 0x80000000, 0x5, 0x9}}}}}}}}]}}, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f00000001c0)=0x3, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect$midi(0x3, 0x44, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x47f, 0xc010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x1, 0x1, 0x9, 0x30, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x0, [@midi_in_jack={0x6, 0x24, 0x2, 0x6, 0x7, 0x9}], [{{0x9, 0x5, 0x80, 0x0, 0x400, 0x1, 0x9, 0x0, {0x11, 0x25, 0x1, 0xd, "b1a13f6fa2b140dc8361bf81a1"}}}]}}}}}]}}, 0x0) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000200)=ANY=[@ANYRES64], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000340)="f30f1272320ffec2dd8dac00b7f80e0cb88eb3d88466efbafc0ced0f59f80fcf66b91703000066b8ff90451a66ba000000000f30f6c40002430066edf326f08151026100", 0x7}], 0x1, 0x10, 0x0, 0x0) r4 = syz_usb_connect(0x2, 0x68, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, &(0x7f0000000500)={0x14, &(0x7f0000000440)={0x20, 0xa, 0x2a, {0x2a, 0xc, "924071648a16fb439443dd32476de10614ec25e9b1008e7d847c40d6bd2efef689a86fd27e1e9b0d"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000800)={0x34, &(0x7f0000000540)={0x40, 0xb, 0x76, "0c43fe9397673ae9c47e2aaf1c8057110c08a8fa0cc43f1885800bf35340065fb5c937556a279bfe80ab0d5db227c8ffeca323296e7f153df291536b9037bf1211f6bfd493333216a8ba65371fe6fca0bc40bf3ecfec42601eb210b87837d3182d8a8a8efb06cefdd222184ce2cce4a5f432171227ea"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000640)={0x20, 0x0, 0xfd, {0xfb, "bfd5f817bdb4dc9d61025ce4b418d18824775e49b683b90865713544636db685647d4a174c9a6aaf8b89a9addd6ec53616ebd84876cc6bb1beebb0f1db096b81de5257e0e69e808c665f99728d3fd3f6addf53e5cfb2fd38c62ca56562af3b265cec91a2fe49ae80527ff02c4ce621c189601750c21f2ae723f668d3c1a0cfe9ec16813cbc8a4b0b75724b3286ac4355b3fe9d717419c28ba4afd7149ec23ffa0b79795614925e761939cab6ad79c6b9793892ef504ce2a55374b2db68d794e52816e679cea39adf8145af200dcc9e2ae3aa0f7f25dcd35ce782ac6f16ceba311b93ae00b03e3e25a27320da5c96e46da80a1a4a040d625c1f2e8b"}}, &(0x7f0000000780)={0x20, 0x1, 0x1, 0x9}, &(0x7f00000007c0)={0x20, 0x0, 0x1, 0x6}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000004c0)={0x1, 0x0, [{0xa, 0x6, 0x4, 0x34e7, 0x13, 0x5, 0x6299181b}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.725997093s ago: executing program 1 (id=621): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x7, 0x0, 0x184, 0x671, 0x10, 0x6, 0x100000001, 0x1, 0x5, 0x7, 0x5, 0x0, 0xfffffffffffffffe, 0x0, 0xbd9], 0xb000, 0x53901}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7f, 0x68ff, 0x0, 0x8000000009, 0x803, 0x26c00, 0x9, 0x2], 0xeeee8000, 0x102280}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0x3, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x7f}, {0x5000, 0x3000, 0x3, 0x0, 0x0, 0x5, 0x75, 0x6, 0x36, 0xe, 0x2, 0x87}, {0x0, 0x5000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x4, 0x6, 0x2, 0x7e, 0xb, 0xff, 0x8, 0x7, 0xe, 0x3}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x87, 0xab, 0x8, 0x9, 0x9, 0xf8, 0x97}, {0xeeefa000, 0x0, 0xe, 0x0, 0xb1, 0x8, 0x1, 0xa3, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x18227000, 0xe, 0x5, 0x7, 0x5, 0x7, 0x43, 0x8, 0x81, 0x42, 0x70}, {0xdddd0000, 0xa000, 0xa, 0x5, 0xd1, 0x7, 0x9, 0x9, 0x2, 0xc, 0xb0, 0x91}, {0xeeee0000, 0x2}, {0x8000000, 0x7}, 0x1, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)='1', 0x1}], 0x1, 0x0, 0x0, 0x40044}}], 0x1, 0x4) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000380)=0x8001, 0x4) write$binfmt_elf64(r4, &(0x7f0000000480)=ANY=[], 0x78) splice(r3, 0x0, r5, 0x0, 0x39000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.703137015s ago: executing program 3 (id=622): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) (async) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000007c0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0xfffffffa, 0x100002, 0x2, 0x5d6, 0x8000, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0x1002, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x6, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa775, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x0, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000004c90020029"]) socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000080)=0xf3f, 0x4) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="04002dbd7800fddbdf250400000007e14100030000000ce12f040c77c00c510def1fa59607c5f7e085752e187f5f931f3c83cd83cd80d76fb97ec8823ca2719434c721493bf36c0a2e2553397cab6f14b068d2b30766cd6e14cca2285d36fe756211a87b31a662900ee984bc2dd8c4c8beca795b22ce"], 0x1c}}, 0x0) sendto$packet(r4, &(0x7f0000000d00)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd132746a7063c577526b38560b9c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46dcf0a5c242b0f7e894c6ad53a7b9eb360114ac168103a5fe65af1135bd0441d3e709b83856b5b067dba89400725eaeb28daf58885f000000000000", 0x8e, 0x0, &(0x7f0000000140)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @random="4bbf005f2620"}, 0x14) (async) sendto$packet(r4, &(0x7f0000000d00)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd132746a7063c577526b38560b9c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46dcf0a5c242b0f7e894c6ad53a7b9eb360114ac168103a5fe65af1135bd0441d3e709b83856b5b067dba89400725eaeb28daf58885f000000000000", 0x8e, 0x0, &(0x7f0000000140)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @random="4bbf005f2620"}, 0x14) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000cc0)={0x0, &(0x7f0000000240)}) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000cc0)={0x0, &(0x7f0000000240)}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000ec0)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xb, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000fc0)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001000)=[@text32={0x20, &(0x7f0000001040)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001000)=[@text32={0x20, &(0x7f0000001040)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r10) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001080)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4008090}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fedbdf250500000008000a005c2f2c230c008969c22800000000000075465f54c5655d554599fd46ef2c5400cb37d44cf09fffd98e22d5f9956ef9768fef9e53df54af0dfb89e46d1b938d76e7f099110c29256d746ff3696e2f0a9cebb7b82fef90e5daa6738f3af0a8137ff9a1c32f31c59bf6ba8da9712eca35f410e9ecba881c63725988049071df72067ba9403327df3e5d703508fa88548fc3eb7a6cfb9007938cfe27aedebc39ab8de338f4a90db38e04c4e0b16a4daa230cb926de6859"], 0xfd09}, 0x1, 0x0, 0x0, 0x4044000}, 0x4004884) 1.681087557s ago: executing program 1 (id=623): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'gretap0\x00', 0xc201}) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1fe) mount(0x0, &(0x7f0000000740)='./sys\x00', &(0x7f0000000780)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys/class/net/bridge0/brif/bridge_slave_0/multicast_router\x00', 0x82041, 0x102) write$binfmt_script(r1, &(0x7f0000000800)={'#! ', './sys'}, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./mnt\x00', 0x0, 0x21) r3 = add_key$fscrypt_v1(&(0x7f0000000880), &(0x7f00000008c0)={'fscrypt:', @desc2}, &(0x7f0000000900)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ff01000000000000c96197953f135600000000000000020000000000002b00", 0x13}, 0x48, 0xffffffffffffffff) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000980)={@id={0x2, 0x0, @b}, 0x0, r3}) r4 = dup(r2) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044091}, 0x40) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000400)=[@enter_looper], 0x100, 0x0, &(0x7f0000000440)=@reply}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000580)=[@enter_looper], 0x100, 0x0, &(0x7f00000005c0)}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020d000014000000000000000000000005000500000000000a00000000000000f65e0190536134fc010000000000000000000000000000000000000000000005000500000000000a001000000000000000000000000000000000000000000000000000000000000800120002000200ff"], 0xa0}}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r6, 0x29, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269d47147"], 0xd0060) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x6, 0x38, 0x1400, 0x0, 0x7e, 0x1, 0x0, @private=0xa0100fd, @local}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x2, 0x3ff, {0x5, 0x4, 0x0, 0x7, 0x4, 0x65, 0x81, 0x7b, 0xff, 0x6, @dev={0xac, 0x14, 0x14, 0x27}, @remote}, "01000000ffffffff"}}}, 0x46) clock_gettime(0x4, &(0x7f00000006c0)) 1.46376144s ago: executing program 3 (id=624): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001280)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300), 0x0, &(0x7f0000001340)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000001380)='./file0/file1\x00', 0x2441, 0x83) fcntl$setstatus(r4, 0x4, 0x4c000) write(r4, &(0x7f00000013c0)="2580ae31", 0x4) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d01, 0x0, 0xdf}]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000240)={{r2}, 0x0, 0x2, @unused=[0x7, 0x10001, 0x5eb7, 0x6], @name="395d220d70877f23fb88baffe7342c50a2386b499c05c59c932862b47bc67581bb07b2c397662c48cee975c53f331fa1b493e7bba044d26546640b9d7df06a4a7225d79707c50590ce5c62ec7b90693234f60952a4456070ecc24dc2041fae168464ebef304b2584e987cf45669ef7f3da59dac1bda5ecbd934b8bd31c9fe56e63462fd7df03393f86c79f1aec6a875879eea8c8e99b287eb337ddfd61fc5f6dbf73eacd31c41b71faf23ab0003f0094965ba9dbe7cabb19853b9a6986291649166f9015f2fe7beba62f2201ec74b9a95f71a004a9c1deae3a5208eae9dc5efe684e3e55e01d5afc467ed2c01b4075d2c0e46a9b12bba7132319b7db90983eafad05df8f6874771f56d6d178c6e1fc89279dcb5b6183d4784fc8f7d4cd900f068b629d7ab3bc70391638274ab546e57d45554ffe70f26001ba607779ee4a66377f1fe454d6bd976490871e84f2113a20d4d71b4d90c362f805bcf31b9782ae93edff54568babc3eb951f7ab06f3261fff43b5d2b15ba7582e5ec1ab9e8b42cdb273e269a8dc656a0f1d65779d9c9c3e03e86efcbd5fbbebffd37f8529eed8c29744f078ca503c6fd0c946098c7bae942955ae09ac998ec89902bc4524a83d5be777aee663f946d76292b99a3dd35e6234f0d6849f2cd05fee47b7cbfff6f3dcb28f82dc731ef4813aa4f5f59661b4474136f677ba834d958cfcca138298f55282befb3aa38d4e477a0e39832de0e548d3bf68ef36829a9c489c7e58472baaadcbc04b1328595f4a410301fd936fecfb99c8cf1cfc4927eede32b0acb1d197480ee482a2e87c0867088ce4df6cb8db1f15c9b177e4026ce899de842224ff881747df7e58bd510e75e80c0bcdb4fc3d251cb5948f05b51485614f7d4f677e4b31d06a6fff4924102446b5bb25aec0856e16e0ffac6df602b9c04fc73d56a43133505161df790da8c8c1b5f2474e30720c0207ea1abd10574b2bf595765b875d06da6814911e5ee1cd5105f702bf04276af17513cab0b2c5200c2b5ffb643c2a449697fe4484d2c0d8bc58495692987c7b6b9d1c017625a6efc4b884cc056c68803e7fd3d983fc3a6d34a097ca1772a24ec84d5cb9a75f4ee69b33a4c1e5cf5586afdcc0b80f2e41550f4acc9d1f92b630a4d5d085bf363442ff6191b09b694fc3807dae2d1ed1e8ec56bb5ec260c92ec346458e43de92fd3aa893fa9de8f0a3d5ef63c2a7ff2b74625606e6008044b81a9124952460fa98936277794896b5fca5eb369d4fcaccc8b5f8f3c42893c5c62f87255a56fe7f242bda4e2d5a0a4533fd5005264d08477c5bb24238066e6a464e70d2163aebaf3d291490f7abbf6919a0ebf74d42d5794f10ad23a09c6971975c4a903ac5ecb5b7102c22b1859e01c1d9eee3eecca7161cc43d61a2fd87f06a3e3cf584ab9440beb0ac2bdd73456b6b13c06c15d661a28587a90ac21137a40091e5dc89806312c4d36ff0f5bc7254de99b67723c0a2fe26a18954dde2a544318a7786616fe4ef7e2facc706bc94136f68c027b243a4b3b77ef7e55728225fa0910a76f558a06c6775d910dee15b562ba182417031c12cda7738e227288ede3987855842f93a99c7cd0ed45f3d2c2ae273eadc47bd8dc034e99674751ca883b1866eaa439988e2bba6e8a99085fa3b1dc50419c842d306e62cb8bf2d9a12e55449c7117d0a4f7520162a36645cf5e6819e1def3ad39bfa152535105ebca7fc9e266680864307ea0eb0601a73081ab4b367c6ba9f83fa0ce9fdc5e7485056237fe8caee805cc2b9cfed14049ef991c923ca8f9ed50db94d098076ae731bb3b7776d2baa76d2e6c8fda17d4e811d9894aaeaf9fa7d97ef54e025e96703b4c099bfd01eca31d473781e22dcd940421edf98c81275caf642b5b82a77f61d9955109edb05dc3928695b938c277cb16c949adfef00ee408954eac9ac1670dae6540da4e3eedefb2791000375baeda40cf7d454e954561042177beed707cb617ecfd26b9759bb61f6f3c203244b28351075f85742041cd7626b71df0252476c014f190e541a925da6e5c0319ec0b35d169ac6cb43ad89c96c35c3e7761d0036e491be0112b2a3139bce349d87acae68f572a492796cf3c0511fd0aff7a4243316ddd0d44a9d21019df31e38b44bf33152a58a20dfedf12b98943f05722f4c0afd63e807a4aca5d9c0bce6762e217e5a3284cd68536468fd5c5c35d99ac52deafa9f3ff0f58b34b05a4d96650c489afc91b69273aeb3fd96e8ea904c4b947fc6d832890dc5cda7116f36f166545655796304b0245f371ba29adaeed34c86f99df900a52cc5cb9a7eb39c29be399d1c3d4d4b22975b5b129fae25b7b18cca88c04951296edc6fc5b6053185ab8b9e1e7805923f4b2bbf0c0f16baab30fb19a2505760168951b8f97587ced2e7b8232128c7577aca80a59ad41ec3b0377a70e7dbebe4c44e40abe08303f5fd80e64a7c4d531f8431ebfefa60a15c031e240c11bb0189243b0123b09d5943db77889144aa3d51eba5e8545563d494d94ae173798d544809d3e7e16afb7b0dc4452fb893a900e3e5762593d77975cad21bab4e702af23f12f3dee3eabc05465ae639b53825f5af52a7b7a01ab8ba6727943af390fb42c5367b4e8d445a5992ba8d5050337958a166539d64a2a4cabc3081ed02c9712d1a8c2d5ff9bdfe8953c890409b1807269dbb8016b039225e187c4fa7a090c0fde70af2a6259ce7131633ea8e560acaef18e9f171423abbf8bae9b01381bbb7dd16211a40f7e82478625e376877db0ef4f240059a400972ca62988f0e28fe177cd50c5ea96f90c2652ec725f25814f4d3c039bda2a6cc32aa8fe4c488a1abfb1d358b1b8ba760f154636f37695c313230f9d0663f1dfb1308cb12edd9d00d45f946503fb08ab1fc49a4d6780ba4d080181b035d7171bad7313ee53a623fef884abee50828d8b76347aa5859b859a7759da6c18c60d2a44bdbd5e6429a6df85ef3d6839d34d8b1a8abc89febd02e34e3a0dce606693fa8dcfe88983cbcac5b20dd40b91af0333e6361b1225ea36b5cfbf5fa82ef81b8f71a4abf3d63656e8602a6568ea10b5b70937fe47d8888429d3287806aa9b6a3bc85d1b3628f7f0e2ce30d7816afbf2853a9e2fa214e0678fb1ebc8d4a70416c9a830f6745aabe5205d41f9a1f05c124becd1ee420d22c1a664b62af6c57b9cbff4ee82ce043e07b286e45fd2f062d686cd164302b7052a729b18d4c70a6da97b677ac0fa45a411bbc98924783222f388372e1dba2db010af8d4ad6400d0d55b6ed0c009ec40e8f380bc64ec5953f96204bedd2ebfdb74ee7d4297def0d107234958cf4ac87c65da14b8fec1d1d2a0216ffd8fb74d7ee3df0825a0ef7c7be19a3c863d8503815f49bb892baaa0ddf7c42b23eab2ddc7e540556c14c2b6deaed7bcb42e33ccddad23965f2b08fe61c37c74fc5095a57718ad947ba1f8fe464116042afa9778b87c193deff7ce0ba936fb0e06188c40c2dfb277858473cbb41451dd2e56238c1e40cfea183948aa9a7a0f5b23d6c7f78635d6692c71cb2a35b5fa570cd58b33c872cceb64326da2127d56b312652c176ea9fb4617872feea0485824658c5de04ef21e5ef6c7be56c1aec2bc2eea0a370cc22c1aa18ad25d1d7238ab5de57a6aa1040f2275a9a9c2ba30761dc3ff872fdea90de8548cae9a0bfac5a4af3eb1f3487d20d98a7812fa7c8868149dcc2e7221d8970c45b2cf3800f0ab3468b89295274ef125016bf11f3cf69396863b03fd1f263fd9d3942f08225fa29b6c52dffd3ff7d4c8902b09daefb7663af45e769d752744a933f5fc855f3467b850c246d83fd500fc98423586331ef2bebfe38a8358d6a10ceeccedc464d8efd7fc9eb0b8fd6f3ad344c63d8ecbe752c53edf78822f79adcbd002bc283c53611995e3042b6cf4bbd91f82f07c2581368dc6f15303bc1b100f72e49d0758c639ec84d5c7bb967cd6ee539faddfadc8abf2075fbd9be6b7fd2d1b84122ea83e3945bb862fa4f56ec8003a4ba9e81e3220f5ca42164c86cb6a5a851516018c763fb505f0dfdb1059d16c2e41aba4b764579718df5a3255ffa6e266d6f8c9c5043eefc0ad6088c33d853f9e9d35f15739841e26446b6d962237c5c2657cc1f488657456801754e602a6ec3ebffd72f1845451788b12ab722e7517607f1bdad202f0bf0a3f26f2f35f4bfd97f5d7df3570a46538081fb5cc1eed269d77cea177cd5b88fc34f70be2a2923a28997dbbcc390403b2bf7c78ae4dc496f8177d0c2d939406e3629c562f531ffcf6e8f12deba8d85d7a3b887b440a99378b088136bd4b8551886e6a0b8fd548f00740f0464e53c4300511168a8b48e45c62c75b51e3ffa5ca583aebcbecb6a20556542ebca8a7996d1c838db5eacbd7f4720565dfae08893ddb4575eecf53b6ce8ce2b7388ed329521a22084e851baff8e34e304bfd1f98bd1366cfa934644e9daa153dca6887c06dc9cad47d4aef5836ca70ea43738fe4d203a0af1c719544ad7f7c2837026aa62963ddbff60de3eafb68ed59f97db73903903a8e6b28a2f80f9f836988634a179e8b38a148db9a5b81a0673dd8cfd0b50d2dda9d46f4bd33ee928e96fba81b53d1b3f0321622127c65ce5791901b6ec4605682acbc70731654b1f1e26cc393de985569f0118d73fc43f2e36e50525351292fb113c85045073189b09eb455b00a354502e1c2e220d237cce505551f2e2bb0deb5da03e9c62c29129046273936c4e4a9c0bd0b458a828218127c6b0009c13f4020beeabaa6a4e78772719b60d496502f3e5931f9df5339b329fa100eb8cfbe27d1edaebb5bf9f388812dde14a911a01cd0f2b66121815a21cc43e608a1cd8bf3f97fd9dc12ff82826468f885a485af2419fd35e7dbefd9c2957da4bd322fac2a43b8d04fdf50194d1482116dd55e41e2fa6cd45acf856ee6984d3e9ca239e83bebb1648660c9ea2ee668851243fedb51894833693c8306441f508b840d8faa51db552818c90ebb25cbca93246fc04cfb793e1edaf59a76d3cddcc46fb452d8c78c6cf360c9718449cac2a3d0f6b899314f66dfe73d7b94a958520671a148f67a4c1ed465746b0ac13aa0c18e1321de704b3e7851be5d14409fac73badd3db8473626ec5e6587796b19306803e8673b6ad8abf2f543de2fe008b93ed6e6261ebe9939d90742df5a7aa3603863c2e8c4cf3e5c68e79fa86cbad3d311ddca7369daf8acef6d0336e7ae5078ec9d920eea1f71af5aa5a4176197e84407011ed250f499f8bc99aeaa7cbc89de0c87e68439de32923dfbefc833677d608f30f69261a8a2939148996d3f841462a5b66d0ff3b310590c53ee97946b0929dc150725f28c00a5b9c8bdea02827c4652f62a36f38811c1530c03c477987fc5485a5d73607779d456b1d3053a0a3d56300e8742de1178d5388dbc4b11fb77a382748603e663ce866b8d2b1c0e2330440a21d5730ce6bc5240e6e1da295262cabc30528388611cf7befb68031f1622fc6007897593124757a4504aa97a6cd97992cb650186ec7ea0fc47fc7567d07ebd0eeed12b6b21a05c2c09e97a9c3f80087f668f83c77aa942463f03c8bafcf10b1c4892af1d3a9803f269ff854efa2abb88f65ec15f1ace5c5a014a9b9ed40983a4db976f019f5ddbe29bece85d96b699dcb54794bc1bbbd14d89f5e"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001240)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001280)='./file2\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300), 0x0, &(0x7f0000001340)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000001380)='./file0/file1\x00', 0x2441, 0x83) (async) fcntl$setstatus(r4, 0x4, 0x4c000) (async) write(r4, &(0x7f00000013c0)="2580ae31", 0x4) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) (async) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d01, 0x0, 0xdf}]}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000240)={{r2}, 0x0, 0x2, @unused=[0x7, 0x10001, 0x5eb7, 0x6], @name="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"}) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001240)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) 1.400760686s ago: executing program 1 (id=625): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xff70) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) r1 = timerfd_create(0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0x1}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x9]}, 0x8, 0x0) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000200)=0xeff6) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xfffffffffffffff9) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) unshare(0x22020600) unshare(0x20020480) openat$fuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) pselect6(0x900, 0x0, 0x0, &(0x7f0000000780)={0x1f}, &(0x7f00000007c0)={0x0, 0x3938700}, 0x0) 1.222529464s ago: executing program 3 (id=626): mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001900)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46a, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x6, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x10, 0x3, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x608, 0xfd, 0x0, 0x2}}}}}]}}]}}, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f00000019c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001a00)={0x24, 0x0, 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="002218"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newsa={0xf0, 0x10, 0x401, 0x0, 0x0, {{@in6=@mcast2, @in6=@loopback, 0x1234, 0x9a, 0x0, 0xfffd, 0xa}, {@in6=@loopback, 0x4d2, 0x33}, @in6=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5b57, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x4000800) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x10, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="b8000000190001000000000000000100e000000200000000000000000000000000000000000000000000000000000000000000104e2400000a0020006200000023b5b7733b6eb73033e23cadbc85eb1ddc537e432ca13ed8f08a3d247075f7f16d843860d3a7cd31959b6488752497b0a94315e94e970981c7c4b635", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0700000000000000100000000000000002000000010000000000000000000000ff0f00000000000073b4ffffffffffffffffffffffffffff0000000000000000000000001000000003000000000000200200000000000000fffffffffffffffffeffffff000000000000000300000000"], 0xb8}}, 0x4004) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x800, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c821}, 0x0) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/sys/kernel/hostname\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="180000006a00150000000008ffffff2e00000097"], 0x18}], 0x1}, 0x8000) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000300)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r7 = socket(0xf, 0x4, 0x100) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000340)=@req={0x3fc}, 0x10) recvmmsg$unix(r6, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r6, &(0x7f00000017c0), 0x0, 0x10121, 0x0) close(r7) ppoll(&(0x7f0000000440)=[{r4, 0x2012}], 0x1, &(0x7f0000000480)={0x0, 0x3938700}, 0x0, 0x0) creat(&(0x7f0000000000)='.\x00', 0x10) 761.601872ms ago: executing program 2 (id=627): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_cache\x00') read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000480)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000500)={[0x4, 0x8, 0x3, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x200200000006, 0x3, 0x100, 0xfffffffffffffffe, 0x100000000, 0x200000000000001, 0x40000000009, 0x8000000000005, 0x800040068], 0x54000, 0x547d1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 741.732064ms ago: executing program 2 (id=628): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x7, 0x6, 0x7}) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x2, 0x2000) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x5, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x91}, 0x880) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x6d47}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x6}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0xc841}, 0x4000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, r3, 0x420, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x76}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4cbc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9d0}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf094}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xaf1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x79c8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x101, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2d6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffff8}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x27e}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @loopback, 0x81a}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf6c}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3e5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50950d4a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x8840}, 0x80) ioctl$USBDEVFS_RESET(r1, 0x5514) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000700)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) setsockopt$sock_int(r1, 0x1, 0x54, &(0x7f0000000b00)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x28, r2, 0x420, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xffffffc8, 0x17}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x14) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000c80)={r0, 0x0, 0x6, 0x100000001, 0x6, 0x4}) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000cc0)={0x9, "751259d46d79a2ce34b6be7dc0a9772c49f914b48bc6c9f786f4174a1b9ea1287cd4015b015abc4f99ddc8c7d291b7967ac1395eb52bf66cca7cefbb8944357d7edc1f9ce874c23ee189a59b24f2bcfb705027c5336e8e987ba6462886b991f0b624fdc59a98ff7f3b23de47aeadf7494f0d195c7377c97320708ac21822ec9bce2fb5e853b3e49b26329ed3ce27fd70e1721e800db0de5d343537f10e393f71dae0b3b9fa1cdfcdf7c62bc46b09b9b32337f89b9e2c544ab97746170c5e48299169d34373560ab2a83b7bb4c176af1b72a39a7ddd8d6b8c48169172e008194de3766d66ebfae0858e2025589b62176aa6d31e737271d0251d1873688d0182485d0101813c590759519698b18f7586c8da3833656e47ed70ffa0876e9adbc36b40737f588bfb9572ee92a03916831082b472f201c0baea5507212e2672329887076f6fc36aad3819ba8d4e874577d1392f5ea67a2478519ce4a1723d71cddd19cac01d5b3d066d2f0344dce794098ce8a96e5480d1cfe65d90fbcf906eb81f2fe785c286904d29e452a8d486ce6d7d22b3e5b6569caa162a0d93810c08657414213c2948aa9b8cd86720ac3cda7dc1a7e3af21e3d5743bcdbd2d9000bb35aaf9b5457b2a5027defe554422c0f4d97d3d5efbd2c9297ed84612e2249e8b380d5b5bb332c02e567c08bed99436dc72e0abf73fef5057e9f6af9e6f22098a44e8ab"}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000f40), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000001140)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001100)={&(0x7f0000000f80)={0x14c, r5, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffe1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20040080}, 0x20008001) r6 = syz_open_dev$ublk_bdev(&(0x7f0000001180), 0x0, 0x8000) fchmod(r6, 0x0) r7 = accept4$packet(r1, 0x0, &(0x7f00000011c0), 0x0) setsockopt$packet_int(r7, 0x107, 0x11, &(0x7f0000001200)=0x2, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r1) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x50, r8, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$BTRFS_IOC_BALANCE(r7, 0x5000940c, 0x0) mount(&(0x7f00000013c0)=@rnullb={'/dev/syzrnull', 0x0}, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)='rootfs\x00', 0x880, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000014c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x54, r8, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x59e}]}, 0x54}, 0x1, 0x0, 0x0, 0x60000895}, 0x40890) r10 = syz_usb_connect$cdc_ncm(0x4, 0x148, &(0x7f0000001600)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x136, 0x2, 0x1, 0x18, 0x40, 0xb, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '\f'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xfffffff7, 0xe784, 0x8, 0xa}, {0x6, 0x24, 0x1a, 0x7fff, 0x6}, [@acm={0x4, 0x24, 0x2, 0x2}, @mdlm_detail={0xc9, 0x24, 0x13, 0x6, "6203e42b83f4701109ab194acba50db9cfa7bff6c4175f99d502e315924d32a86ca94cdd30c40731385b01610893301622a5a4c72781726680e0a8a082401bcd7cbf4e9f50a77fceb2cb5406bf6f3d8703b7cf82d75d693807b69e71336ab166ef5b6b4111f7b479ce15afb8a6495bda50d9872611cb63169960e5c483b86bb79e81474fc05ff758ab65a491b00b24f36cd5d691b63a723f4585a8380dd1278bc4449a54fd85767a815740a5233fe358cbc17df2a63e72b866a64a953378a08189babd0ca2"}, @dmm={0x7, 0x24, 0x14, 0x7, 0x400}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xfc, 0x4, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x6, 0x5, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x8, 0x2, 0x2}}}}}}}]}}, &(0x7f0000001a00)={0xa, &(0x7f0000001780)={0xa, 0x6, 0x110, 0x8, 0x0, 0x4, 0xff, 0x5}, 0x19, &(0x7f00000017c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "870c9c3798494b17acb2f060c7beb3b7"}]}, 0x4, [{0x47, &(0x7f0000001800)=@string={0x47, 0x3, "13cd8a4af1c5b9fe6091bb45c4e0555139bb58c7e1e5eed6aff18b8f007687f8ae3ec7b45377b09d5346618ac938f227f7df6aa2ee849e51efdfad7eb119b60d9a29147b0a"}}, {0x4, &(0x7f0000001880)=@lang_id={0x4, 0x3, 0x408}}, {0xdd, &(0x7f00000018c0)=@string={0xdd, 0x3, "4e44b4c519877b87ac582e9b4ed8e18384a5c960a0b74e0ede583c5ae674c21257ac58b448fbf57285a85ec187f1b8918c208726bfd5cd31cf1d0402810e083685cd832bfa6f9f7f2a81a810a1e5ad3f67dc66ecd22f17e5baa1546d0e849ec7efe4cf936cfefa16e1a2a20b4d845360d5969f5abfb4ec05c6a95421acf0c6c1e54492c893daae769c0faeb95a130f38c430d1dd8259e07d2f8c3ec2c266716d4e61bc38c0b7a087d085b6d86a18ecae9496d6bf0d250bc5daecab1828887f5e2f082e073d9b549ddf03c9069f74156ca04c16511bf19ce3c90369"}}, {0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x3c0a}}]}) syz_usb_control_io(r10, &(0x7f0000001c00)={0x2c, &(0x7f0000001a80)={0x20, 0x5, 0x3a, {0x3a, 0xe, "4e7851d023cf2d3fd42ffa7bfa7168555e41a9e22ed61a3c36d680af4cb06cd11b122e528e32251e8c994db5c73deec5b6c015198563bd97"}}, &(0x7f0000001ac0)={0x0, 0x3, 0x47, @string={0x47, 0x3, "9b997dbe24185e9556574a2c162d3f9039d9dce1e71e178033d660cd0f27757bde0d1684bd9e3ab42427628f7a372daaf2dabcd9ec624db16e2660c59350674f5f44e28a0e"}}, &(0x7f0000001b40)={0x0, 0xf, 0x20, {0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0xd, 0x5, 0xfff2}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "ecce33800f31e19f4fa082fc3a138cd6"}]}}, &(0x7f0000001b80)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd, 0x1, 0x8, 0x80, "7f3249a4", "0ce8ed17"}}, &(0x7f0000001bc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x1, 0x9, 0x9, 0x7f, 0x1ff, 0x5}}}, &(0x7f00000020c0)={0x84, &(0x7f0000001c40)={0x40, 0x2, 0xaf, "23e88c9ba8e7d47bcdf11c4590a102a68d74d90f377c08d51018284d2c4f359d047e746991360110dd60107ff8b7c2915c29c707e334a74629d995df5847477305f56329ddb7a93da3f5592012ca22c2db9e4519c1617d56fedd5219b02e97a31d79a3b15b8fc762baab081279a70c9d97d20afb98eb4abf385e0c64619a2ea509f721e593a89665ec43678fc6db6ab9acf3f86450776c4ac90380d02c350fe7fb0410b7355b2451a7211075fae58e"}, &(0x7f0000001d00)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001d40)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001d80)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000001dc0)={0x20, 0x0, 0x4}, &(0x7f0000001e00)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000001e40)={0x40, 0x9, 0x1}, &(0x7f0000001e80)={0x40, 0xb, 0x2, 'M\v'}, &(0x7f0000001ec0)={0x40, 0xf, 0x2}, &(0x7f0000001f00)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, &(0x7f0000001f40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000001f80)={0x40, 0x19, 0x2, "b740"}, &(0x7f0000001fc0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000002000)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000002040)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000002080)={0x40, 0x21, 0x1, 0x8}}) ioctl$AUTOFS_IOC_CATATONIC(r7, 0x9362, 0x0) 557.023853ms ago: executing program 1 (id=629): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setuid(0xee01) unshare(0x28000600) syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) 173.920402ms ago: executing program 2 (id=630): r0 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000080)="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", 0x559, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000600)={r0, 0x300, 0x2e}, &(0x7f0000001a00)=ANY=[@ANYBLOB='enc=pkcs1', @ANYRES8=r0], 0x0, &(0x7f0000000680)) r1 = add_key$keyring(&(0x7f00000016c0), &(0x7f0000001700)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000001740)='asymmetric\x00', &(0x7f0000001780)=@secondary) add_key(&(0x7f00000017c0)='asymmetric\x00', 0x0, &(0x7f0000001800)="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", 0x1d8, r1) add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000680)={'syz', 0x3}, &(0x7f00000006c0)="246fbd846057a9e56d7ca55d0be55dbb6d1ec457f45c92c76fa86f7dc0dd072411e2e25cb21aa4924fcb00117e6fe3670dc7c22bdd2f1c5643db91725c3f3c4c7cf2c360d866fe17869272fdf4c2ebc784c0552f4b373cc58d8c9600cb19be8e37e29a319a690e2a3ea0c99a6721b6e7f1fb9843bbf6aefea18e2a8d78f39b526f465735e04dbbba2a54b415ca89e42e024f068134e016b9937123133fc7217a95f5a8e1fc8168a46ddf3bb01e70a08edffe1ee4c285787af2ce22922341625b129906706b30236bb9f24790d5eb6899d7278ca40e4419bb280e597eac1d58e0796b599d1bcf43aeb2f3946f447c3c377fb1246ac6fd6f6ea538ed0359f9b5ff3120d1580c0ef68e0f4f321c52fa56654091eacb3651dfdfa9d65978f4faec64a3c955611ec9f7370f383b70b464cec39c6a16742278de150ebab9af096e73316ae31372de60307ccd66a3253a9c86404347a0ae7913b7e48ec782cbbb234b47cd174a35af14ce615fe036bcf48b01e9976be774ec316103064a2e30f7151dda70f4b007c789067588dd85ddd65d940db3a2d429e3eb49ba4f23ca4860eee24f7113c332d70c4d0ec9343d991b6aef4af8401e5670cfae8a3a59e0225e9a6c88a11ff949c1bae026b96572af228fab3d49414a05ce13bf240b132d869379442467f947903d667321c5bdc1a1ae855308d6e077b7efc7713d4c88aa7e5e7ecb04c8b2b9c01ba70ec0837de15f25e8eb1647b72b8c8478b3e3466e0033bc8b2614d49cd2cc99ea01a7c6432845f11b5177435abcef4c5812d81c24e5108c005ef76b22cb8c5deec2b9fc961ed76265c945927552ab4aa1da93f640b13b6b9528aab000cc010522f9256133248db119deb965926e3f9142dc3e09ce5ef799fbb013cc7ac7998e90c3b0ce075cad9fda7d2ba233208d36e4df49501a4fe11d13a910007702ac8fe203cf4cc121bf0b4bb6660fc7430e6914d1da9b5f3409b3daf9262c9272b8c07ffaed2a03f4474414825d843a63b5406fb982b4e4f2eaa3bee11a83a0772a538acee979bf28f70f77a747746d7b7c7054200793e9d10168d000e9fd7fc27438576bdf1c8739c9eefe0dab02e7967b459421018fa60f05a18743feaf4e2797bda8e46cd68dfed51f2424fe3b6140e111b3a52ab620c1d46349fccae39cf7d7be8f07c4cbb194298dc838dda88f8c918acd5d67f1e99977d11764fa6663ce5eba4030eae2285c0435c1fb683c9acb0252e502a3fbbbac19889d7e8282bbf38d08897aeb76453f135b68bf4c7ee3eeea116ca5d26a88b6651c130ce70eb5a5ffee6760adb0f4408a7ea353ec58a1257bc047c79196cf8ddce25692847e5afcf323387530bbd21c2994b4c3909213065ee9218301385934eb5d61eff25234412a3e46e4416039c2c94738cb95bd57ca5b169c441d0d430788e6f2c7195b38a05388be63e93bd082ed6c581af8291cd63343e7e2a638fcaa97635b86afcbfc30583626badb66015631944dc58d3ffa53f6aa7dccef800314924f64498cf883f17e4784d46be878c17059b752d3ab5b53e79f30cc534d762ff2a859cd018f6250a839998de0e5d249bf5fbd2dacb292f053d66d247658e35c19905cd6d0040e6764ec548cc8e623019d34d915c1dd3eab40e51b6197105b56cc14b95f2b6f496f4cd9d325a168885f19cbe6599e5d6061f0a0c9fb56ee622fab20a64e04ed24a22b9eba6c29c4bb5d3ef6c10ff816ed998e35ff777eff19c9b62444c8900b5aad94eeadd152089406d3c6da8c912573c2780e1d90355bb01adfdcf149cc0cbf04593d196b91de2f0313d49d58d6e09e4709675a98fe4970d935c7657f478a9bd497b33ed40caa2d44eface6b90ae92eb171c7efa96fc058ecf9f07668482db724a780786746aea8fb2409f6abbdf973ff62d3688c6754b979294159a050536dcf8b3f0b0fe9db863f1ef0b504d0e826dd953c5a9a1c86f4d8eb47a3bbddfbda29aefcbadafa0457b87b3db45a113145f07817927e43e8a8f764e631a4f85dd4166ad0eddf2d48a485e3954c9708bafcdbfa19363b178b02ff303030e0bf022cbe1b31d0b3de7f4a66656d1c0e8a9fb926f510a15d67e570d4e5dc744492b3097aa217b0ebedc43e2c251ee4914673f944be01937f3cdabffa23e7d2c29a47cb72b0df6fcb41299c3b988230dea16d323bc4a105ab02606c0ce6696721d731dd916b42dd8a54d065996eea8bf6115b91f9beb8363f0c66de18a1509cd80c3f2a59efb8ac3109a882223332bb0b269ff7123a43c5957589b631e116d01006f69ac788203652c738d7a6e5825b52ca6c29a1137221b247e6851ea3797764cfcc197e14bcf736001edc266c380c30fbd74fd0d32bc9a95afe19e908e08740539422c437fdecfd67bbaa19511b38045053b0bcb69a9d402ca478962d3c624d276a0ba51493a71620e9d4c15eee5edc9351f280958956470cc1db64f7c143ec1299061e134a9d69448ae60e09bef13621d05f4a60bd7947fc491a0b40df7e0f008fe2461d922735e8c439d8c509417120fba8bb127adac5b9a359475b3fd034cbc5105dda7e0d2e70bdbdaa02a8795f37c4cb6bc76bb95b8a6d9a1bbeb2b21b026b0825e86c8a8848a16db2df7bdd2dfe7f01a2680d48e18cb9c361ff257b8818e5a3515054ae5674a48dc9057e6fa7f0a53da32ee3b9359b38120c6e4b02a3dd6641c05451462e5c742a74cb8933824efe7e8a46036566f6590ad616e3a1545db2fcf6504b930f5803f93df3fe8c453ac6948597a08a54522034d45aabbc8858be233cfbc1a9861cb3e49687e24133364d48a0e26f2dc49d15c1c00802a93cd86d7ba07c5064514b647a57a1ab1c541d57897f35a6c9e052ec824bf53a63ea93f6e7c91a4d9da78fa0cefda08d7687cafc6add5f54ce3ec0eac46a09f5ea00734cbac4ede32eb844040abeb5784d5bd385ec066d7bdc7413e092a28777ed0b13413f6e827756a720c99abf3aa344f98efcb0c7277becc663079b9099b23e7874caf2b282d7d9890b29f45ce42f031df64a2168f255ffb0b7e0b073336ca046d9cd36a8e60b6d0e0501d180f7f94213fe6e6000798a9153943a8dccc567623fc178576e42f2346e0f797b3d08d2eec7f455c5373916e009990e34db54c40f923bd48e1ca6cef2518c29c71a56b5fe87f5825f36ae1c73f06ca1d28710fe4710004fcc5c5dd9a52ee27a3c2ef81532a413273d4ecc45fabf4f654e823728ec6fe9401bc17d22a4309bfc05d4662d3fb33e44b29d63b78eca4b0837fb3a03da9df2d5a17f71066bef2895ac225868d27d5265cc4f4e432a3a7a20680180f96460f5daa300500ae520fffaef9b6179ad0edc728b9f2cfbbf52f03ad4db9fb9b345887142ce594eb1d58b9de0609adb235e731d85052c5d9c922d6470509bb564cfe206a7fce7ff846f6e748ab31cadccd80ba439fe139f67f87ca01d9033aa15457f0694486c0413d9f401ed6c48a29561bec31bbf7b8bd4c128d3da7a63845b06ad98a7158be76c54ad26d83a5ac46b00387878bc0060038e8a9f3636665859dbed3643b387f54bd06597169d114380950f7eda135fc2409c87ec5153119a6a90560f1d8e9a605452c248a34181c36e27367dc6b3610776f651d0d0607f23b697716180ae5e0c3eaa7e2f9ebede7b3611eb3a7683ee9eca0804ea55b52402a4aaebce0649a0b294769ff4770aad9c4d82b77f5ad9a619ea380d8145e4d6c5634105c33ba5edc9a24ff3bf37746815407e42f34fa122278c71bf4f08ea5684db96aa2de172e85b16e197372326c8e9113854cf0d1577c37498500017122a09b9df194a12bb766a4687c11660573378a3a3412fcdbbc459ca76e18f91871e861b092bb1759e965415dfea1d30beaa66a15151cf009a6b8b9823355e9a0ca7fa0a44ce6e215fc86d6e098f5c202d30a96c57494d36bc3e1949df0bf363dc057482420e66ec1d0594305015032a5a2500625ee51b4656a57a69ed61f623f7059056a9fcc49a6c815459032019eb27167daaac19d0972fcbd2fdaa4c50b7afbc258c3761b797d35d94cdac8341184eca57a6b7d1291cd38e9a71e3dced76af339a0b37c3d341d7fb4a4a86351355ac121578a286b8609f5d7b94ee572abb727843b23253e473c0a88d16b5066c72615228022efc777d2fb6139590010038a31f2d490612f7d05e1f5de373923f9b788bd8179552a5e93eb735bc37c195f1ff11e6bd2c1583fd2709752e5514c1f02b6242e48e27b1b6a2fb33e742445b6dcb730e368458f8cbe79af0fb0698c011b6b973d216e9076d35ff2f66eaa9acec53d845eeeb5ddd96a3c051f23de0f860ac7f9ad541052a2668a9d9555923f07d8dde80070ff78d31d23d12cf17143a317ebb71908e2275809acc84e2e3a2564f52806f5997e25c841f2516a3634263eec8f23dbb9bb63ccaf7969e305498d5942ae834e7fdc7eeb8b633e3ed342c7f2ef773a1c241b58986a3de71419b570673d5cfc8adea030766bfac9b26121df5e899edaf549e6dca68625f72961b9f5c219763f6d3eefc02c11de24a8a3584790ae63f6db001866cd176770a95f0f5d824713eef191d598e4bd6085a84b0f6f90a5a145264ff2064251f4f96e7eea51cab46b03ed88fbc08249ffe11157f7a678136b585468b54650d43aa0e884b06afd23cbf7253ec60fbc2e39f45b72701090420cc7be92f1b2b985afc8bc8d4cd727f7f329aa400f37bc8bdbdbeb93f7653ae27f480d258dff7279d5dd5360475ae46d878c6b55efd43d449083a8d723fc2847ffbecc6a2e51919c2386ef5ae57a63ff33c757fca02a259d08bc6ee4657c22fba2b4b93cd190e445d319dd14e2a50763488c94abe054ff508f8387561b4422d89537974c7bb9b373292a9467263d4a5a5bf7ae6b656049ec5f62c1f195db8aaebee0aaea51719d650b8532d6622fb283e804aa473d5c844ccc1c290ca034a843687b691a0d5ba2da8529c48dbdab16c839dc785b8e39324cdad664bee5a177dfe6fb36cd5073a38dab393a2167fb20ba064ff8b598324c32da18e821b8ba1285d14d708a59149397a185c7d79bdf309150789a8feb31852a2d02be1dc95bd9ee1c11729cbb2a91ec3f1a501fe9ae41f22362a042a51abdfc18d59dccec48765ff4b4bdc9e666a78d3796e25371e2c165cc4e9d824807bbcda142bacd6a6b752be8d12b784f4290b02aae0201236d5500e3b325a8a5a4be1826f00b4e6895cce32a519586d3486eac28cda1c17b70394adf8ac1057243fbb5c48350d89d6519d98e27b159cf221fb34642780b8eff1e29320d5077693d0cf0a33a58759e650f39bdf428c59fd5c6b233e025de8d0771f53fe34a195a73b7ad94478af66d1c24b5a32f266f2834cf684404381eb4a7baee0f542a169d8c8571a243ec927908a994b0d140012c6549b3b37377f77f3af13664d2ef46134dc2042d49c0c7373c84d1e676b89c862d838a139b71986f941034f1f9aa7e5d3d6491cd506247b651b1ad5a77db5598f5fef8ad016a5e27e96c324719e373d9a294e181930962641234ce2d8ae19f34f19d5b965ddff7948263785593112aaffbce6c9c163209666e4fc448e0d8b3a8282e83f58a5052a94cf3446f95b7856b008cff3fd1a4c5bda3c83909abf4ff6703d02f3cb3ee3642f1545d90d6245183f4bf186fb526dd87b1eac0edeb3a22184d82d01a705f3b2a95d847c652a0191a9f364645bb363112afe0073cc73fb5c31de6e0c838aeb123b76670ad418a8bcf7", 0x1000, r1) 173.512253ms ago: executing program 2 (id=631): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r1, 0x0, 0x27) read(r1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000040)={0x6000, 0x18000}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80a61, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, 0x0) read(r0, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$input_event(r4, &(0x7f0000000100)={{r5, r6/1000+60000}, 0x5, 0x3dc1, 0x1}, 0x18) 123.660918ms ago: executing program 2 (id=632): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f000001e180), 0x42, 0x0) mount$fuse(0x0, &(0x7f000001e1c0)='./file0\x00', &(0x7f000001e200), 0x0, &(0x7f000001e240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) write$cgroup_netprio_ifpriomap(r0, 0x0, 0x8) chmod(0x0, 0x104) 114.452719ms ago: executing program 2 (id=633): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x41, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000001640)={0x2020}, 0x2020) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000540), 0x80000001, 0x82002) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000580)={0x0, 0x0}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000600), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8905, &(0x7f00000008c0)={'pim6reg0\x00', @remote}) syz_open_dev$usbfs(&(0x7f00000005c0), 0x77, 0x101381) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x80000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000940)={{0x0, 0x2, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x5422) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./dev/sda1\x00', &(0x7f0000000400)={0x202, 0xc, 0xe}, 0x18) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae03, 0xc3) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r7, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000700)={0x20, 0x10, 0x2a, "7c1c64c5c1540d1cadb035900e6f77a60a3aacef2f03d55f0b28d5386fd14f240ce013330261cf98b100"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x1c}, &(0x7f00000007c0)={0xc0, 0xa1, 0x4, 0xc125}, 0x0, &(0x7f0000000800)={0xc0, 0xa2, 0x2f, "ef23e83f813e35f360b568126910e7eaa10cd6d07a8241881184bed1314263f816d351eebdc9c97c3d28b8d3fc6cd9"}}) move_mount(r5, &(0x7f0000000440)='./mnt\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./dev\x00', 0x10) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x3b80ed, &(0x7f0000000300)=ANY=[@ANYBLOB="73697a653d382c696e6f646533322c6e725f696e6f6465733d652c0026558772d60ba6037b9f301cd8622a1370a4584708458a9d87e9dc949491f861374e6d37fc496fc44fb6c46e51178b030bb0dce5e11fcd7270558b635e1fbfdedc4c46ef64d50120eab1f4089d2cf9e78aff284e24fddc3bed37538dc354ced76d59e4107f633a529abbf171d8af4f6beabe6d2cde1d45d66796db8c97fbb1767a676346c4c530b6b71f60a1201de7a7ba2b6940702ff56513bbd54bb5b8835492afcb847710bf25e8e74bec2d74ee23f5e61ccbe0f007"]) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) setxattr$security_selinux(&(0x7f00000002c0)='./mnt\x00', &(0x7f0000000040), &(0x7f0000000000)='system_u:object_r:inetd_exec_t:s0\x00', 0x22, 0x2) 0s ago: executing program 1 (id=634): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4c}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2a4b01, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capget(&(0x7f0000000080), 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000140)={&(0x7f0000000180), 0x6, &(0x7f00000001c0)={&(0x7f0000000200)={0x1, 0x0, 0x0, {}, {0x77359400}, {0x1, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x1}, 0x44, 0x3, 0x0, 0x0, "1c85128a6dc5838fccdcf876f17902b597ff963282d93746dce3b253c784316002f00ed9163e63029a73ca60276523bb8b95a71a50684440c09dfc7fd43b5988"}}, 0x80}, 0x1, 0x0, 0x0, 0x44}, 0xa4) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$inet6(r1, 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x3a, 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x6) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4000) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000300)={0x0, 0x12, 0xc2, "e76fc4e8dd27ab820763a85974811f96543d2611d39921c14e32303e788424293a38c6d8b07ddb92f8a4b0be520a474e9e8c9645a37e4f065f9cfb8f6ed56b483c7115400d9d347a4766ae80d9eb42a9463d5c87db373fc938c3730a1cd57018e492a4aa86e5ee307d98986a62618d8ef67ad2d2e75cb07ba0b2088deb13a27ce9a0b481304a4fe49df6c39ceaa692331910fa70702bcaa6d9604f392e3747742af158cd53a1378a5fa00e8a20af790bbc534102d81acfc7e68799a0d193b8c4316f"}, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x20, 0x82, 0x1, "05"}, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01000d000000fbdbdf251b0000000700210030"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000890) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000000c40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000c80)={0x204, r4, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x157, 0x2a, [@peer_mgmt={0x75, 0x6, {0x0, 0x4, @val=0x81, @void, @void}}, @fast_bss_trans={0x37, 0x124, {0x8, 0xa, "a057e4cc8fd1243c783832a558ef2073", "bff83a47a9bc091084018b389f641fbd334c860788b30da7f6c1b245e4e34153", "9752d390fdb423832a95e29be777c1b7f1f24e8c8c8505e91ada11adc1e34959", [{0x1, 0x16, "5e2e206259f910424cf9cd867f4f05dbad2b3fb5e581"}, {0x4, 0x23, "16c4163e86bb68dff526adecbfb3b47b69568c1156276b6f8cf2fa0122b1419343e54c"}, {0x4, 0x1, 'N'}, {0x2, 0xb, "f9d13e7f5d4eef2fee93a2"}, {0x1, 0x1f, "9e9e5ea8795c0172f2eed5a023b8b99c453a170ffb442015f1cd973720198e"}, {0x1, 0xb, "8d5173d78140d7bc6c0532"}, {0x2}, {0x2, 0x5, "05f9f4b7ef"}, {0x2, 0x25, "77dc8d814005df0818a0c6e44ba693f4764713fe3b2bd3a556c8bdf88a2af3b6c0c10d8dc3"}, {0x3, 0x25, "814a79e026750ab834459e3e0eb7d2f98bb883a13f466f780c19b1b8227e607782ea5fd6e7"}]}}, @link_id={0x65, 0x12, {@random="01e859d75094", @device_a, @device_b}}, @perr={0x84, 0xf, {0x8, 0x1, [{{}, @device_a, 0x2, @void, 0x27}]}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x56}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x28}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2c}, @NL80211_ATTR_IE={0x60, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @prep={0x83, 0x1f, {{}, 0x6, 0x6, @device_b, 0x401, @void, 0x9, 0x2, @device_b, 0xffffffff}}, @mic={0x8c, 0x18, {0x7c5, "ab3bea32ab2a", @long="1438b4cb43b4feaa5cebbebdc9dcd3c0"}}, @mesh_chsw={0x76, 0x6, {0x35, 0xfb, 0xb, 0x8}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4, 0xc, 0x1}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @dsss={0x3, 0x1, 0xad}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x204}, 0x1, 0x0, 0x0, 0x24000801}, 0x801) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 479][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.190218][ T789] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 59.240231][ T352] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 59.340217][ T789] usb 4-1: Using ep0 maxpacket: 8 [ 59.346511][ T789] usb 4-1: too many endpoints for config 0 interface 0 altsetting 9: 254, using maximum allowed: 30 [ 59.357896][ T789] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 59.371097][ T789] usb 4-1: config 0 interface 0 has no altsetting 0 [ 59.377845][ T789] usb 4-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 59.380221][ T352] usb 2-1: device descriptor read/64, error -71 [ 59.387133][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.401851][ T789] usb 4-1: config 0 descriptor?? [ 59.604316][ T36] audit: type=1400 audit(1793164980.976:322): avc: denied { create } for pid=1262 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 59.640241][ T352] usb 2-1: device descriptor read/64, error -71 [ 59.645887][ T1271] overlayfs: missing 'lowerdir' [ 59.679596][ T36] audit: type=1400 audit(1793164981.039:323): avc: denied { mounton } for pid=1270 comm="syz.0.303" path="/86/file0" dev="incremental-fs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.703325][ T36] audit: type=1400 audit(1793164981.039:324): avc: denied { getattr } for pid=1270 comm="syz.0.303" name="/" dev="incremental-fs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 59.830545][ T789] uclogic 0003:2179:0077.0009: interface is invalid, ignoring [ 59.851392][ T1278] fuse: Bad value for 'user_id' [ 59.856267][ T1278] fuse: Bad value for 'user_id' [ 59.880314][ T352] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 60.010298][ T352] usb 2-1: device descriptor read/64, error -71 [ 60.033391][ T1261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.041960][ T1261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.051038][ T890] usb 4-1: USB disconnect, device number 20 [ 60.250227][ T352] usb 2-1: device descriptor read/64, error -71 [ 60.360310][ T352] usb usb2-port1: attempt power cycle [ 60.576006][ T1305] FAULT_INJECTION: forcing a failure. [ 60.576006][ T1305] name failslab, interval 1, probability 0, space 0, times 0 [ 60.588791][ T1305] CPU: 1 UID: 0 PID: 1305 Comm: syz.3.313 Not tainted syzkaller #0 7512b07cb8b2b81a08448db7682669b21f09f733 [ 60.588818][ T1305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 60.588826][ T1305] Call Trace: [ 60.588831][ T1305] [ 60.588835][ T1305] __dump_stack+0x21/0x30 [ 60.588857][ T1305] dump_stack_lvl+0x140/0x1c0 [ 60.588872][ T1305] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.588887][ T1305] ? __kasan_kmalloc+0x96/0xb0 [ 60.588899][ T1305] dump_stack+0x19/0x20 [ 60.588913][ T1305] should_fail_ex+0x3c2/0x510 [ 60.588923][ T1305] should_failslab+0xac/0x100 [ 60.588933][ T1305] __kmalloc_node_noprof+0x69/0x500 [ 60.588946][ T1305] ? __kvmalloc_node_noprof+0x128/0x300 [ 60.588959][ T1305] __kvmalloc_node_noprof+0x128/0x300 [ 60.588971][ T1305] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 60.588982][ T1305] ? __kasan_check_write+0x18/0x20 [ 60.588996][ T1305] ? _raw_spin_lock+0x92/0x120 [ 60.589007][ T1305] ? __cfi__raw_spin_lock+0x10/0x10 [ 60.589017][ T1305] simple_xattr_alloc+0x67/0x140 [ 60.589031][ T1305] shmem_initxattrs+0x24f/0x530 [ 60.589042][ T1305] ? security_inode_init_security+0x11c/0x600 [ 60.589055][ T1305] security_inode_init_security+0x434/0x600 [ 60.589067][ T1305] ? __cfi_shmem_initxattrs+0x10/0x10 [ 60.589078][ T1305] ? __cfi_security_inode_init_security+0x10/0x10 [ 60.589089][ T1305] ? set_cached_acl+0xe1/0x1a0 [ 60.589101][ T1305] ? simple_acl_create+0x190/0x1c0 [ 60.589114][ T1305] shmem_mknod+0xd5/0x200 [ 60.589125][ T1305] shmem_mkdir+0x3b/0x80 [ 60.589135][ T1305] vfs_mkdir+0x58e/0x810 [ 60.589146][ T1305] do_mkdirat+0x240/0x530 [ 60.589156][ T1305] ? strncpy_from_user+0x14f/0x280 [ 60.589181][ T1305] ? __cfi_do_mkdirat+0x10/0x10 [ 60.589222][ T1305] ? getname_flags+0x203/0x6b0 [ 60.589238][ T1305] __x64_sys_mkdir+0x70/0x80 [ 60.589250][ T1305] x64_sys_call+0x26c8/0x2ee0 [ 60.589260][ T1305] do_syscall_64+0x57/0xf0 [ 60.589272][ T1305] ? clear_bhb_loop+0x50/0xa0 [ 60.589287][ T1305] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.589301][ T1305] RIP: 0033:0x7f60b019f559 [ 60.589311][ T1305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.589320][ T1305] RSP: 002b:00007f60b107d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 60.589338][ T1305] RAX: ffffffffffffffda RBX: 00007f60b0425fa0 RCX: 00007f60b019f559 [ 60.589353][ T1305] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000003080 [ 60.589364][ T1305] RBP: 00007f60b0236b20 R08: 0000000000000000 R09: 0000000000000000 [ 60.589376][ T1305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.589386][ T1305] R13: 00007f60b0426038 R14: 00007f60b0425fa0 R15: 00007ffc7ff17bd8 [ 60.589402][ T1305] [ 60.650244][ T789] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 60.720197][ T352] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 60.881213][ T789] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.901442][ T352] usb 2-1: device descriptor read/8, error -71 [ 60.907497][ T1308] syz.3.314 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 60.917957][ T789] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 60.929216][ T789] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 60.941473][ T789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 60.948945][ T1312] fuse: Bad value for 'user_id' [ 60.949565][ T789] usb 1-1: SerialNumber: syz [ 60.954406][ T1312] fuse: Bad value for 'user_id' [ 61.040683][ T352] usb 2-1: device descriptor read/8, error -71 [ 61.167014][ T789] usb 1-1: 0:2 : does not exist [ 61.173479][ T789] usb 1-1: unit 5 not found! [ 61.183444][ T789] usb 1-1: USB disconnect, device number 17 [ 61.280279][ T352] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 61.301494][ T352] usb 2-1: device descriptor read/8, error -71 [ 61.431447][ T352] usb 2-1: device descriptor read/8, error -71 [ 61.540327][ T352] usb usb2-port1: unable to enumerate USB device [ 61.743190][ T1339] syzkaller0: entered promiscuous mode [ 61.748725][ T1339] syzkaller0: entered allmulticast mode [ 61.846857][ T1349] fuse: Bad value for 'fd' [ 61.905610][ T1354] overlayfs: missing 'lowerdir' [ 62.430222][ T789] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 62.560245][ T789] usb 1-1: device descriptor read/64, error -71 [ 62.650612][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 62.650628][ T36] audit: type=1400 audit(1793164984.019:334): avc: denied { mounton } for pid=1362 comm="syz.2.331" path="/71/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 62.810258][ T789] usb 1-1: device descriptor read/64, error -71 [ 62.835063][ T1379] fuse: Bad value for 'fd' [ 62.847328][ T1381] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 62.897871][ T36] audit: type=1400 audit(1793164984.259:335): avc: denied { read } for pid=1382 comm="syz.2.337" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 62.921020][ T36] audit: type=1400 audit(1793164984.259:336): avc: denied { open } for pid=1382 comm="syz.2.337" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 62.991217][ T1383] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1775007430 (3550014860 ns) > initial count (824786394 ns). Using initial count to start timer. [ 63.037853][ T36] audit: type=1400 audit(1793164984.399:337): avc: denied { mount } for pid=1382 comm="syz.2.337" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 63.064979][ T789] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 63.117794][ T36] audit: type=1400 audit(1793164984.479:338): avc: denied { getopt } for pid=1390 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.151945][ T1396] netlink: 'syz.2.341': attribute type 27 has an invalid length. [ 63.200298][ T789] usb 1-1: device descriptor read/64, error -71 [ 63.220018][ T36] audit: type=1400 audit(1793164984.579:339): avc: denied { mounton } for pid=1397 comm="syz.1.342" path="/69/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 63.286575][ T36] audit: type=1400 audit(1793164984.649:340): avc: denied { create } for pid=1397 comm="syz.1.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 63.321047][ T1407] fuse: Bad value for 'fd' [ 63.434611][ T36] audit: type=1400 audit(1793164984.799:341): avc: denied { mounton } for pid=1412 comm="syz.1.347" path="/71/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=sock_file permissive=1 [ 63.478113][ T1418] 9pnet_fd: Insufficient options for proto=fd [ 63.485177][ T36] audit: type=1400 audit(1793164984.849:342): avc: denied { write } for pid=1417 comm="syz.1.349" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 63.508266][ T1418] random: crng reseeded on system resumption [ 63.623633][ T36] audit: type=1400 audit(1793164984.989:343): avc: denied { read } for pid=1421 comm="syz.1.350" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.710219][ T789] usb 1-1: device descriptor read/64, error -71 [ 63.820388][ T789] usb usb1-port1: attempt power cycle [ 64.160536][ T789] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 64.181290][ T789] usb 1-1: device descriptor read/8, error -71 [ 64.311245][ T789] usb 1-1: device descriptor read/8, error -71 [ 64.401085][ T1431] capability: warning: `syz.1.352' uses 32-bit capabilities (legacy support in use) [ 64.458121][ T1436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'. [ 64.467528][ T1436] veth1_macvtap: left promiscuous mode [ 64.550248][ T789] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 64.567039][ T1439] fuse: Bad value for 'fd' [ 64.581956][ T789] usb 1-1: device descriptor read/8, error -71 [ 64.711247][ T789] usb 1-1: device descriptor read/8, error -71 [ 64.821192][ T789] usb usb1-port1: unable to enumerate USB device [ 65.119832][ T1468] fuse: Bad value for 'fd' [ 65.226057][ T1473] netlink: 156 bytes leftover after parsing attributes in process `syz.2.366'. [ 65.269127][ T1479] IPv4: Oversized IP packet from 127.202.26.0 [ 65.291621][ T1482] netlink: 'syz.2.369': attribute type 63 has an invalid length. [ 65.299415][ T1482] netlink: 5 bytes leftover after parsing attributes in process `syz.2.369'. [ 65.370320][ T789] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 65.386784][ T1487] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 65.417328][ T1493] netlink: 'syz.0.370': attribute type 4 has an invalid length. [ 65.425147][ T1493] netlink: 17 bytes leftover after parsing attributes in process `syz.0.370'. [ 65.467943][ T352] rust_binder: 1491: undelivered TRANSACTION_ERROR: 29189 [ 65.493206][ T1496] fuse: Bad value for 'fd' [ 65.530924][ T789] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 65.539979][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.560197][ T789] usb 2-1: Product: syz [ 65.564459][ T789] usb 2-1: Manufacturer: syz [ 65.569097][ T789] usb 2-1: SerialNumber: syz [ 65.576512][ T789] ums-karma 2-1:1.0: USB Mass Storage device detected [ 65.584852][ T789] ums-karma 2-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 65.584852][ T789] Please send a copy of this message to and [ 65.760285][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 65.791460][ T789] ums-karma 2-1:1.0: probe with driver ums-karma failed with error -5 [ 65.921635][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 65.930140][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.940528][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 65.949540][ T9] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 65.960637][ T9] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 65.973971][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 65.978613][ T352] usb 2-1: USB disconnect, device number 25 [ 65.985006][ T9] usb 3-1: config 1 interface 1 has no altsetting 0 [ 66.002859][ T9] usb 3-1: string descriptor 0 read error: -22 [ 66.009137][ T9] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 66.030197][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.374680][ T1414] overlayfs: statfs failed on './file0' [ 66.450230][ T352] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 66.600288][ T352] usb 1-1: Using ep0 maxpacket: 16 [ 66.612545][ T352] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.623817][ T352] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.634214][ T352] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.647663][ T352] usb 1-1: config 0 interface 0 has no altsetting 0 [ 66.655258][ T352] usb 1-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 66.664597][ T352] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.674785][ T352] usb 1-1: config 0 descriptor?? [ 66.689156][ T1513] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1513 comm=syz.1.379 [ 66.780200][ T45] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 66.950218][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 66.956367][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.966534][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.976691][ T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 66.985806][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.993858][ T45] usb 4-1: Product: syz [ 66.998095][ T45] usb 4-1: Manufacturer: syz [ 67.002773][ T45] usb 4-1: SerialNumber: syz [ 67.048838][ T1498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.057452][ T1498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.083559][ T1504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.092320][ T1504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.103868][ T352] usbhid 1-1:0.0: can't add hid device: -71 [ 67.109918][ T352] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 67.118798][ T352] usb 1-1: USB disconnect, device number 22 [ 67.211477][ T45] usb 4-1: 0:2 : does not exist [ 67.218051][ T45] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 67.228951][ T45] usb 4-1: USB disconnect, device number 21 [ 67.240093][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 67.701675][ T1530] fuse: Invalid rootmode [ 67.720631][ T1532] ./dev/sda1: Can't lookup blockdev [ 67.827071][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 67.827088][ T36] audit: type=1400 audit(1793164989.189:357): avc: denied { mount } for pid=1538 comm="syz.3.385" name="/" dev="configfs" ino=1124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 67.868370][ T36] audit: type=1400 audit(1793164989.219:358): avc: denied { search } for pid=1538 comm="syz.3.385" name="/" dev="configfs" ino=1124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 67.890683][ T36] audit: type=1400 audit(1793164989.229:359): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 67.915376][ T1542] FAULT_INJECTION: forcing a failure. [ 67.915376][ T1542] name fail_futex, interval 1, probability 0, space 0, times 1 [ 67.940214][ T1542] CPU: 1 UID: 0 PID: 1542 Comm: syz.3.386 Not tainted syzkaller #0 7512b07cb8b2b81a08448db7682669b21f09f733 [ 67.940249][ T1542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 67.940261][ T1542] Call Trace: [ 67.940267][ T1542] [ 67.940275][ T1542] __dump_stack+0x21/0x30 [ 67.940304][ T1542] dump_stack_lvl+0x140/0x1c0 [ 67.940336][ T1542] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.940362][ T1542] dump_stack+0x19/0x20 [ 67.940385][ T1542] should_fail_ex+0x3c2/0x510 [ 67.940404][ T1542] should_fail+0xf/0x20 [ 67.940419][ T1542] get_futex_key+0x178/0x940 [ 67.940438][ T1542] ? __cfi_get_futex_key+0x10/0x10 [ 67.940453][ T1542] ? preempt_schedule_common+0x2d/0x60 [ 67.940475][ T1542] ? preempt_schedule+0xc5/0xe0 [ 67.940494][ T1542] ? __cfi_preempt_schedule+0x10/0x10 [ 67.940514][ T1542] futex_wait_setup+0xae/0x260 [ 67.940534][ T1542] ? preempt_schedule_thunk+0x1a/0x40 [ 67.940554][ T1542] ? __cfi_futex_wait_setup+0x10/0x10 [ 67.940575][ T1542] ? __asan_memcpy+0x5a/0x80 [ 67.940598][ T1542] __futex_wait+0x12c/0x3d0 [ 67.940618][ T1542] ? __cfi___futex_wait+0x10/0x10 [ 67.940639][ T1542] ? __cfi_futex_wake_mark+0x10/0x10 [ 67.940659][ T1542] ? futex_wake+0x666/0x950 [ 67.940680][ T1542] futex_wait+0x128/0x7c0 [ 67.940700][ T1542] ? __cfi_futex_wait+0x10/0x10 [ 67.940722][ T1542] do_futex+0x32a/0x510 [ 67.940744][ T1542] ? __cfi_do_futex+0x10/0x10 [ 67.940763][ T1542] __se_sys_futex+0x13c/0x320 [ 67.940781][ T1542] ? __x64_sys_futex+0x110/0x110 [ 67.940800][ T1542] ? __kasan_check_write+0x18/0x20 [ 67.940822][ T1542] __x64_sys_futex+0xe9/0x110 [ 67.940839][ T1542] x64_sys_call+0x227f/0x2ee0 [ 67.940857][ T1542] do_syscall_64+0x57/0xf0 [ 67.940874][ T1542] ? clear_bhb_loop+0x50/0xa0 [ 67.940897][ T1542] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.940918][ T1542] RIP: 0033:0x7f60b019f559 [ 67.940934][ T1542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.940948][ T1542] RSP: 002b:00007f60b105c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 67.940968][ T1542] RAX: ffffffffffffffda RBX: 00007f60b0426098 RCX: 00007f60b019f559 [ 67.940981][ T1542] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f60b0426098 [ 67.940992][ T1542] RBP: 00007f60b0426090 R08: 0000000000000000 R09: 0000000000000000 [ 67.941004][ T1542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.941014][ T1542] R13: 00007f60b0426128 R14: 00007ffc7ff17af0 R15: 00007ffc7ff17bd8 [ 67.941029][ T1542] [ 68.234521][ T1551] overlayfs: failed to resolve './file0': -2 [ 68.241014][ T1551] overlayfs: failed to resolve './file0': -2 [ 68.247397][ T1551] overlayfs: failed to resolve './file0': -2 [ 68.254501][ T1551] overlayfs: failed to resolve './file0': -2 [ 68.261039][ T1551] overlayfs: failed to resolve './file0': -2 [ 68.267592][ T1551] overlayfs: failed to resolve './file0': -2 [ 68.274246][ T1551] overlayfs: failed to resolve './file0': -2 [ 68.280877][ T1551] overlayfs: failed to resolve './file0': -2 [ 68.287715][ T1551] overlayfs: failed to resolve './file0': -2 [ 68.340895][ T36] audit: type=1400 audit(1793164989.699:360): avc: denied { cmd } for pid=1554 comm="iou-wrk-1555" path="socket:[18426]" dev="sockfs" ino=18426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 68.381387][ T1563] fuse: Invalid rootmode [ 68.526921][ T789] usb 3-1: USB disconnect, device number 17 [ 68.710205][ T66] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 68.870224][ T66] usb 2-1: Using ep0 maxpacket: 16 [ 68.880695][ T1617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.887661][ T66] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.897973][ T1617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.912783][ T66] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.924854][ T1617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.933316][ T66] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 68.945812][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.946222][ T1617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.963210][ T66] usb 2-1: Product: syz [ 68.971843][ T66] usb 2-1: Manufacturer: syz [ 68.976464][ T66] usb 2-1: SerialNumber: syz [ 69.113478][ T1623] fuse: Invalid rootmode [ 69.120214][ T45] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 69.197063][ T66] usb 2-1: 0:2 : does not exist [ 69.225104][ T1632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.402'. [ 69.225613][ T66] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 69.241168][ T36] audit: type=1400 audit(1793164990.609:361): avc: denied { append } for pid=1630 comm="syz.2.402" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 69.254837][ T66] usb 2-1: USB disconnect, device number 26 [ 69.269235][ T45] usb 1-1: device descriptor read/64, error -71 [ 69.288607][ T1631] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 69.296827][ T1631] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 69.301174][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 69.418591][ T1650] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 69.451464][ T1650] kvm: pic: non byte read [ 69.456610][ T1650] kvm: pic: level sensitive irq not supported [ 69.456669][ T1650] kvm: pic: non byte read [ 69.469933][ T1650] kvm: pic: level sensitive irq not supported [ 69.470018][ T1650] kvm: pic: non byte read [ 69.481694][ T1650] kvm: pic: level sensitive irq not supported [ 69.481831][ T1650] kvm: pic: non byte read [ 69.493519][ T1650] kvm: pic: level sensitive irq not supported [ 69.493585][ T1650] kvm: pic: non byte read [ 69.504548][ T1650] kvm: pic: level sensitive irq not supported [ 69.504618][ T1650] kvm: pic: non byte read [ 69.516085][ T1650] kvm: pic: level sensitive irq not supported [ 69.516251][ T1650] kvm: pic: non byte read [ 69.533339][ T1650] kvm: pic: level sensitive irq not supported [ 69.533477][ T1650] kvm: pic: non byte read [ 69.544151][ T45] usb 1-1: device descriptor read/64, error -71 [ 69.556020][ T1650] kvm: pic: level sensitive irq not supported [ 69.556120][ T1650] kvm: pic: non byte read [ 69.575526][ T1650] kvm: pic: level sensitive irq not supported [ 69.575653][ T1650] kvm: pic: non byte read [ 69.587890][ T1650] kvm: pic: level sensitive irq not supported [ 69.780605][ T1691] input: syz0 as /devices/virtual/input/input11 [ 69.810219][ T45] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 69.894080][ T1693] kvm: kvm [1692]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 69.902695][ T1693] kvm: kvm [1692]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 69.915123][ T1693] kvm: kvm [1692]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x817f [ 69.923858][ T1693] kvm: kvm [1692]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x817e [ 69.940318][ T45] usb 1-1: device descriptor read/64, error -71 [ 69.941784][ T36] audit: type=1400 audit(1793164991.309:362): avc: denied { append } for pid=1692 comm="syz.1.409" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 69.969709][ T66] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 69.991935][ T36] audit: type=1326 audit(1793164991.359:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1692 comm="syz.1.409" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd322b9f559 code=0x0 [ 70.141380][ T66] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 70.153912][ T66] usb 4-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 70.163006][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.171396][ T66] usb 4-1: Product: syz [ 70.175550][ T66] usb 4-1: Manufacturer: syz [ 70.180425][ T66] usb 4-1: SerialNumber: syz [ 70.190211][ T45] usb 1-1: device descriptor read/64, error -71 [ 70.300337][ T45] usb usb1-port1: attempt power cycle [ 70.389292][ T66] usb 4-1: 6:0: failed to get current value for ch 0 (-71) [ 70.398589][ T66] usb 4-1: unit 0 not found! [ 70.408573][ T66] usb 4-1: USB disconnect, device number 22 [ 70.421081][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 70.503823][ T1697] fuse: Bad value for 'rootmode' [ 70.516773][ T1699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.411'. [ 70.544813][ T1704] netlink: 224 bytes leftover after parsing attributes in process `syz.2.413'. [ 70.640250][ T45] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 70.661271][ T45] usb 1-1: device descriptor read/8, error -71 [ 70.791232][ T45] usb 1-1: device descriptor read/8, error -71 [ 70.820233][ T9] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 70.971694][ T9] usb 3-1: No LPM exit latency info found, disabling LPM. [ 70.979680][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 70.990483][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 71.000586][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 71.060208][ T45] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 71.081192][ T45] usb 1-1: device descriptor read/8, error -71 [ 71.130196][ T66] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 71.160205][ T352] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 71.211264][ T45] usb 1-1: device descriptor read/8, error -71 [ 71.280616][ T66] usb 2-1: Using ep0 maxpacket: 16 [ 71.286742][ T66] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.296953][ T66] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.307282][ T66] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 71.316365][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.321560][ T352] usb 4-1: unable to get BOS descriptor or descriptor too short [ 71.324580][ T66] usb 2-1: Product: syz [ 71.332434][ T45] usb usb1-port1: unable to enumerate USB device [ 71.336366][ T66] usb 2-1: Manufacturer: syz [ 71.343666][ T352] usb 4-1: not running at top speed; connect to a high speed hub [ 71.347366][ T66] usb 2-1: SerialNumber: syz [ 71.355991][ T352] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 71.372240][ T352] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 71.381367][ T352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.389360][ T352] usb 4-1: Product: syz [ 71.393587][ T352] usb 4-1: Manufacturer: syz [ 71.398178][ T352] usb 4-1: SerialNumber: syz [ 71.570893][ T66] usb 2-1: 0:2 : does not exist [ 71.579540][ T66] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 71.593250][ T66] usb 2-1: USB disconnect, device number 27 [ 71.606330][ T1721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.616486][ T1721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.627906][ T1720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.636543][ T1720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.806667][ T352] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 71.813672][ T352] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 71.822128][ T352] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 71.830271][ T352] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 71.843889][ T352] usb 4-1: USB disconnect, device number 23 [ 71.856253][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 72.010538][ T1733] fuse: Bad value for 'rootmode' [ 72.025025][ T1735] netlink: 'syz.0.421': attribute type 2 has an invalid length. [ 72.109692][ T36] audit: type=1400 audit(137.093:364): avc: denied { setattr } for pid=1742 comm="syz.0.423" name="softnet_stat" dev="proc" ino=4026532556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 72.190181][ T36] audit: type=1400 audit(137.173:365): avc: denied { append } for pid=1745 comm="syz.1.424" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.221056][ T36] audit: type=1400 audit(137.213:366): avc: denied { map } for pid=1745 comm="syz.1.424" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.501271][ T1758] rust_binder: Write failure EINVAL in pid:350 [ 73.052245][ T1764] tmpfs: Unknown parameter 'noinode32' [ 73.057811][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 73.057825][ T36] audit: type=1400 audit(138.043:368): avc: denied { read } for pid=1763 comm="syz.0.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.190677][ T1766] fuse: Bad value for 'rootmode' [ 73.261180][ T1768] netlink: 72 bytes leftover after parsing attributes in process `syz.3.430'. [ 73.270077][ T1768] netlink: 48 bytes leftover after parsing attributes in process `syz.3.430'. [ 73.280211][ T352] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 73.320293][ T789] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 73.402641][ T1774] logitech-hidpp-device 0005:046D:B012.000A: received hid++ report of bad size (20) [ 73.413437][ T890] logitech-hidpp-device 0005:046D:B012.000A: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 73.429654][ T1776] fido_id[1776]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 73.450234][ T352] usb 2-1: Using ep0 maxpacket: 32 [ 73.459532][ T352] usb 2-1: config 0 has an invalid interface number: 33 but max is 0 [ 73.467862][ T352] usb 2-1: config 0 has no interface number 0 [ 73.471580][ T789] usb 1-1: unable to get BOS descriptor or descriptor too short [ 73.473984][ T352] usb 2-1: config 0 interface 33 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.482707][ T789] usb 1-1: config 1 has an invalid descriptor of length 120, skipping remainder of the config [ 73.492726][ T352] usb 2-1: config 0 interface 33 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 73.492759][ T352] usb 2-1: config 0 interface 33 has no altsetting 0 [ 73.492789][ T352] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 73.503539][ T789] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x82 has an invalid bInterval 91, changing to 7 [ 73.516101][ T352] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.523144][ T789] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid maxpacket 50237, setting to 1024 [ 73.550581][ T352] usb 2-1: config 0 descriptor?? [ 73.552381][ T789] usb 1-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 73.580244][ T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.588420][ T789] usb 1-1: Product: syz [ 73.592759][ T789] usb 1-1: Manufacturer: syz [ 73.597453][ T789] usb 1-1: SerialNumber: syz [ 73.602230][ T36] audit: type=1400 audit(138.583:369): avc: denied { create } for pid=1779 comm="syz.2.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 73.621327][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 73.630258][ T36] audit: type=1400 audit(138.583:370): avc: denied { connect } for pid=1779 comm="syz.2.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 73.631362][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.660610][ T9] usb 3-1: can't set config #1, error -71 [ 73.672882][ T9] usb 3-1: USB disconnect, device number 18 [ 73.710239][ T66] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 73.765700][ T352] input: HID 1b1c:1b34 Consumer Control as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.33/0003:1B1C:1B34.000B/input/input12 [ 73.784465][ T352] hid-generic 0003:1B1C:1B34.000B: input,hiddev96,hidraw0: USB HID v0.07 Device [HID 1b1c:1b34] on usb-dummy_hcd.1-1/input33 [ 73.870196][ T66] usb 4-1: Using ep0 maxpacket: 16 [ 73.876406][ T66] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.886561][ T66] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.896862][ T66] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 73.905955][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.913961][ T66] usb 4-1: Product: syz [ 73.918139][ T66] usb 4-1: Manufacturer: syz [ 73.922752][ T66] usb 4-1: SerialNumber: syz [ 73.964075][ T1761] Invalid argument reading file caps for ./file0 [ 73.971304][ T352] usb 2-1: USB disconnect, device number 28 [ 74.132129][ T66] usb 4-1: 0:2 : does not exist [ 74.138994][ T66] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 74.150008][ T66] usb 4-1: USB disconnect, device number 24 [ 74.157799][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.336063][ T789] usb 1-1: 0:1 : UAC_AS_GENERAL descriptor not found [ 74.346745][ T789] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 74.356664][ T789] usb 1-1: 0:1 : UAC_AS_GENERAL descriptor not found [ 74.367292][ T789] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 74.376978][ T789] usb 1-1: 0:1 : UAC_AS_GENERAL descriptor not found [ 74.386127][ T789] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 74.397618][ T789] usb 1-1: USB disconnect, device number 27 [ 74.407444][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.479394][ T36] audit: type=1400 audit(139.464:371): avc: denied { map } for pid=1795 comm="syz.1.437" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 74.686562][ T1807] fuse: Unknown parameter 'use00000000000000000000' [ 74.713636][ T1809] kvm: kvm [1808]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 74.749950][ T890] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 74.779841][ T66] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 74.899774][ T890] usb 3-1: Using ep0 maxpacket: 16 [ 74.905910][ T36] audit: type=1400 audit(139.894:372): avc: denied { create } for pid=1811 comm="syz.3.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 74.925645][ T890] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 74.933671][ T890] usb 3-1: config 0 has no interface number 0 [ 74.939785][ T890] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.950128][ T66] usb 2-1: too many configurations: 173, using maximum allowed: 8 [ 74.950692][ T890] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.966760][ T66] usb 2-1: string descriptor 0 read error: -71 [ 74.968370][ T890] usb 3-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.978355][ T66] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 74.987818][ T890] usb 3-1: config 0 interface 1 has no altsetting 0 [ 74.997141][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.003260][ T890] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 75.016800][ T66] usb 2-1: can't set config #1, error -71 [ 75.020738][ T890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.030383][ T66] usb 2-1: USB disconnect, device number 29 [ 75.040637][ T890] usb 3-1: config 0 descriptor?? [ 75.046870][ T890] usbhid 3-1:0.1: fixing wrong optional hid class descriptors count [ 75.283279][ T890] usbhid 3-1:0.1: can't add hid device: -71 [ 75.289313][ T890] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 75.298308][ T890] usb 3-1: USB disconnect, device number 19 [ 75.498106][ T1838] fuse: Unknown parameter 'use00000000000000000000' [ 75.527505][ T36] audit: type=1400 audit(140.514:373): avc: denied { accept } for pid=1839 comm="syz.1.449" path="socket:[21998]" dev="sockfs" ino=21998 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.702177][ T36] audit: type=1400 audit(140.694:374): avc: denied { read } for pid=1846 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.729418][ T66] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 75.750206][ T36] audit: type=1400 audit(140.694:375): avc: denied { relabelfrom } for pid=1846 comm="syz.3.450" name="NETLINK" dev="sockfs" ino=20426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.773842][ T36] audit: type=1400 audit(140.694:376): avc: denied { relabelto } for pid=1846 comm="syz.3.450" name="NETLINK" dev="sockfs" ino=20426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 75.798285][ T36] audit: type=1400 audit(140.714:377): avc: denied { watch } for pid=1848 comm="syz.3.451" path="/121/file1" dev="tmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 75.879319][ T789] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 75.899300][ T66] usb 1-1: Using ep0 maxpacket: 16 [ 75.905519][ T66] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.916145][ T66] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.933944][ T66] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 75.943045][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.951724][ T66] usb 1-1: Product: syz [ 75.955912][ T66] usb 1-1: Manufacturer: syz [ 75.960560][ T66] usb 1-1: SerialNumber: syz [ 75.969247][ T352] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 76.009243][ T789] usb 2-1: device descriptor read/64, error -71 [ 76.121154][ T352] usb 4-1: unable to get BOS descriptor or descriptor too short [ 76.130087][ T352] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 76.137655][ T352] usb 4-1: can't read configurations, error -71 [ 76.167330][ T66] usb 1-1: 0:2 : does not exist [ 76.174556][ T66] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 76.186210][ T66] usb 1-1: USB disconnect, device number 28 [ 76.196961][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 76.249147][ T789] usb 2-1: device descriptor read/64, error -71 [ 76.319236][ T317] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 76.469019][ T317] usb 3-1: Using ep0 maxpacket: 32 [ 76.475555][ T317] usb 3-1: unable to get BOS descriptor or descriptor too short [ 76.484064][ T317] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 76.492817][ T789] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 76.500335][ T317] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.510481][ T317] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.521417][ T317] usb 3-1: string descriptor 0 read error: -22 [ 76.527617][ T317] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 76.536671][ T317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.547902][ T317] usb 3-1: 0:2 : does not exist [ 76.647602][ T1863] fuse: Unknown parameter 'use00000000000000000000' [ 76.654287][ T789] usb 2-1: device descriptor read/64, error -71 [ 76.748979][ T1859] fuse: Bad value for 'group_id' [ 76.753958][ T1859] fuse: Bad value for 'group_id' [ 76.820987][ T890] usb 3-1: USB disconnect, device number 20 [ 76.898810][ T789] usb 2-1: device descriptor read/64, error -71 [ 77.008857][ T789] usb usb2-port1: attempt power cycle [ 77.188687][ T352] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 77.345186][ T1871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.353647][ T789] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 77.359103][ T1871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.373716][ T352] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 77.382651][ T352] usb 4-1: can't read configurations, error -71 [ 77.394516][ T789] usb 2-1: device descriptor read/8, error -71 [ 77.394960][ T352] usb usb4-port1: attempt power cycle [ 77.412036][ T1887] fuse: Unknown parameter 'user_i00000000000000000000' [ 77.466460][ T1896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.475597][ T1896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.529456][ T789] usb 2-1: device descriptor read/8, error -71 [ 77.678439][ T890] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 77.698420][ T317] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 77.768382][ T789] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 77.789355][ T789] usb 2-1: device descriptor read/8, error -71 [ 77.828344][ T890] usb 1-1: Using ep0 maxpacket: 16 [ 77.834708][ T890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.845628][ T890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.849456][ T317] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 77.855543][ T890] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 77.869709][ T317] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.881396][ T890] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 77.881424][ T890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.890899][ T317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 77.909846][ T890] usb 1-1: config 0 descriptor?? [ 77.916217][ T317] usb 3-1: SerialNumber: syz [ 77.929271][ T789] usb 2-1: device descriptor read/8, error -71 [ 77.957059][ T1900] size and base must be multiples of 4 kiB [ 77.962955][ T1900] CPU: 1 UID: 0 PID: 1900 Comm: syz.3.470 Not tainted syzkaller #0 7512b07cb8b2b81a08448db7682669b21f09f733 [ 77.962986][ T1900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 77.962998][ T1900] Call Trace: [ 77.963004][ T1900] [ 77.963012][ T1900] __dump_stack+0x21/0x30 [ 77.963040][ T1900] dump_stack_lvl+0x140/0x1c0 [ 77.963060][ T1900] ? __cfi_dump_stack_lvl+0x10/0x10 [ 77.963077][ T1900] ? __cfi_futex_wait+0x10/0x10 [ 77.963093][ T1900] dump_stack+0x19/0x20 [ 77.963116][ T1900] mtrr_add+0xd8/0x100 [ 77.963136][ T1900] mtrr_ioctl+0xbd8/0x1170 [ 77.963157][ T1900] ? do_futex+0x32a/0x510 [ 77.963173][ T1900] ? __cfi_mtrr_ioctl+0x10/0x10 [ 77.963186][ T1900] ? __fget_files+0x2bc/0x330 [ 77.963196][ T1900] ? __cfi_mtrr_ioctl+0x10/0x10 [ 77.963208][ T1900] proc_reg_unlocked_ioctl+0x1f6/0x2f0 [ 77.963226][ T1900] ? __cfi_proc_reg_unlocked_ioctl+0x10/0x10 [ 77.963244][ T1900] __se_sys_ioctl+0x123/0x1b0 [ 77.963262][ T1900] __x64_sys_ioctl+0x7f/0xa0 [ 77.963279][ T1900] x64_sys_call+0x1878/0x2ee0 [ 77.963296][ T1900] do_syscall_64+0x57/0xf0 [ 77.963315][ T1900] ? clear_bhb_loop+0x50/0xa0 [ 77.963338][ T1900] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.963359][ T1900] RIP: 0033:0x7f60b019f559 [ 77.963374][ T1900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.963389][ T1900] RSP: 002b:00007f60b107d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.963410][ T1900] RAX: ffffffffffffffda RBX: 00007f60b0425fa0 RCX: 00007f60b019f559 [ 77.963424][ T1900] RDX: 0000200000000100 RSI: 0000000040104d01 RDI: 0000000000000006 [ 77.963435][ T1900] RBP: 00007f60b0236b20 R08: 0000000000000000 R09: 0000000000000000 [ 77.963447][ T1900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.963456][ T1900] R13: 00007f60b0426038 R14: 00007f60b0425fa0 R15: 00007ffc7ff17bd8 [ 77.963464][ T1900] [ 78.038329][ T789] usb usb2-port1: unable to enumerate USB device [ 78.168931][ T317] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 78.182461][ T317] usb 3-1: USB disconnect, device number 21 [ 78.308141][ T352] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 78.328475][ T352] usb 4-1: Using ep0 maxpacket: 8 [ 78.335305][ T352] usb 4-1: unable to get BOS descriptor or descriptor too short [ 78.343832][ T352] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 88, changing to 7 [ 78.355847][ T890] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 78.363547][ T890] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 78.370875][ T890] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 78.378217][ T890] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 78.385473][ T890] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 78.392771][ T352] usb 4-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40 [ 78.401861][ T890] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 78.409086][ T352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.417087][ T352] usb 4-1: Product: syz [ 78.421303][ T890] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 78.428547][ T352] usb 4-1: Manufacturer: syz [ 78.433126][ T352] usb 4-1: SerialNumber: syz [ 78.438031][ T890] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 78.445272][ T890] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 78.452855][ T890] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 78.460152][ T890] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 78.467677][ T890] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 78.474976][ T890] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 78.482247][ T890] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 78.489500][ T890] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 78.496720][ T890] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 78.504003][ T890] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 78.511240][ T890] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 78.518493][ T890] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 78.525745][ T890] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 78.533010][ T890] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 78.540269][ T890] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 78.547482][ T890] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 78.554748][ T890] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 78.555603][ T1894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.562007][ T890] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 78.577601][ T890] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 78.585340][ T890] microsoft 0003:045E:07DA.000C: No inputs registered, leaving [ 78.591037][ T1894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.601944][ T890] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 78.622171][ T890] microsoft 0003:045E:07DA.000C: no inputs found [ 78.632705][ T890] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway [ 78.669486][ T352] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 78.681581][ T352] usb 4-1: USB disconnect, device number 27 [ 78.927822][ T789] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 78.987830][ T317] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 79.087756][ T789] usb 3-1: Using ep0 maxpacket: 32 [ 79.094015][ T789] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.105137][ T789] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 79.118730][ T789] usb 3-1: config 0 interface 0 has no altsetting 0 [ 79.125365][ T789] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 79.134535][ T789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.143101][ T789] usb 3-1: config 0 descriptor?? [ 79.159050][ T317] usb 2-1: unable to get BOS descriptor or descriptor too short [ 79.167105][ T317] usb 2-1: not running at top speed; connect to a high speed hub [ 79.176758][ T317] usb 2-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 79.185846][ T317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.193888][ T317] usb 2-1: Product: syz [ 79.198074][ T317] usb 2-1: Manufacturer: syz [ 79.202745][ T317] usb 2-1: SerialNumber: syz [ 79.231291][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 79.231307][ T36] audit: type=1400 audit(144.226:383): avc: denied { create } for pid=1911 comm="syz.3.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 79.262775][ T1914] fuse: Unknown parameter 'user_i00000000000000000000' [ 79.331972][ T1917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=1917 comm=syz.3.476 [ 79.349832][ T1906] netlink: 'syz.2.471': attribute type 3 has an invalid length. [ 79.358174][ T1906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.366712][ T1906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.461119][ T36] audit: type=1400 audit(144.456:384): avc: denied { ioctl } for pid=1919 comm="syz.3.477" path="socket:[22823]" dev="sockfs" ino=22823 ioctlcmd=0x5840 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 79.578214][ T789] konepure 0003:1E7D:2DB4.000D: unknown main item tag 0x0 [ 79.585414][ T789] konepure 0003:1E7D:2DB4.000D: unknown main item tag 0x0 [ 79.592589][ T789] konepure 0003:1E7D:2DB4.000D: unknown main item tag 0x0 [ 79.599838][ T789] konepure 0003:1E7D:2DB4.000D: unknown main item tag 0x0 [ 79.607337][ T789] konepure 0003:1E7D:2DB4.000D: unknown main item tag 0x0 [ 79.614513][ T789] konepure 0003:1E7D:2DB4.000D: unknown main item tag 0x0 [ 79.622200][ T789] konepure 0003:1E7D:2DB4.000D: unknown main item tag 0x0 [ 79.629406][ T789] konepure 0003:1E7D:2DB4.000D: unknown main item tag 0x0 [ 79.636629][ T789] konepure 0003:1E7D:2DB4.000D: unknown main item tag 0x0 [ 79.643811][ T789] konepure 0003:1E7D:2DB4.000D: unknown main item tag 0x0 [ 79.650998][ T789] konepure 0003:1E7D:2DB4.000D: unknown main item tag 0x0 [ 79.658147][ T789] konepure 0003:1E7D:2DB4.000D: unknown main item tag 0x0 [ 79.665677][ T789] konepure 0003:1E7D:2DB4.000D: unknown main item tag 0x0 [ 79.672873][ T789] konepure 0003:1E7D:2DB4.000D: unknown main item tag 0x0 [ 79.680024][ T789] konepure 0003:1E7D:2DB4.000D: unknown main item tag 0x0 [ 79.687187][ T789] konepure 0003:1E7D:2DB4.000D: unknown main item tag 0x0 [ 79.694417][ T789] konepure 0003:1E7D:2DB4.000D: unknown main item tag 0x0 [ 79.701577][ T789] konepure 0003:1E7D:2DB4.000D: unknown main item tag 0x0 [ 79.709283][ T789] konepure 0003:1E7D:2DB4.000D: unknown main item tag 0x0 [ 79.716428][ T789] konepure 0003:1E7D:2DB4.000D: unknown main item tag 0x0 [ 79.723587][ T789] konepure 0003:1E7D:2DB4.000D: unknown main item tag 0x0 [ 79.730739][ T789] konepure 0003:1E7D:2DB4.000D: unknown main item tag 0x0 [ 79.737889][ T789] konepure 0003:1E7D:2DB4.000D: unknown main item tag 0x0 [ 79.745038][ T789] konepure 0003:1E7D:2DB4.000D: unknown main item tag 0x0 [ 79.752889][ T789] konepure 0003:1E7D:2DB4.000D: hidraw1: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.2-1/input0 [ 79.781337][ T789] usb 3-1: USB disconnect, device number 22 [ 80.023056][ T317] usb 2-1: MIDIStreaming interface descriptor not found [ 80.030867][ T1924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.042026][ T1924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.198415][ T36] audit: type=1400 audit(145.196:385): avc: denied { setopt } for pid=1928 comm="syz.3.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.222881][ T36] audit: type=1400 audit(145.216:386): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 80.421040][ T1942] kvm: emulating exchange as write [ 80.487070][ T317] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 80.495873][ T352] usb 1-1: USB disconnect, device number 29 [ 80.515098][ T1950] fuse: Unknown parameter 'user_i00000000000000000000' [ 80.656959][ T317] usb 4-1: Using ep0 maxpacket: 32 [ 80.662628][ T317] usb 4-1: too many configurations: 34, using maximum allowed: 8 [ 80.671573][ T317] usb 4-1: config 0 has an invalid interface number: 16 but max is 8 [ 80.679826][ T317] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.689127][ T317] usb 4-1: config 0 has no interface number 0 [ 80.695325][ T317] usb 4-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.706717][ T317] usb 4-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.716996][ T317] usb 4-1: config 0 interface 16 has no altsetting 0 [ 80.725676][ T317] usb 4-1: config 0 has an invalid interface number: 16 but max is 8 [ 80.734061][ T317] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.742971][ T317] usb 4-1: config 0 has no interface number 0 [ 80.749907][ T317] usb 4-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.761183][ T317] usb 4-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.771407][ T317] usb 4-1: config 0 interface 16 has no altsetting 0 [ 80.778752][ T317] usb 4-1: config 0 has an invalid interface number: 16 but max is 8 [ 80.786920][ T317] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.795816][ T317] usb 4-1: config 0 has no interface number 0 [ 80.802474][ T317] usb 4-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.813760][ T317] usb 4-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.823945][ T317] usb 4-1: config 0 interface 16 has no altsetting 0 [ 80.831348][ T317] usb 4-1: config 0 has an invalid interface number: 16 but max is 8 [ 80.839559][ T317] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.848445][ T317] usb 4-1: config 0 has no interface number 0 [ 80.854634][ T317] usb 4-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.865869][ T317] usb 4-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.876148][ T317] usb 4-1: config 0 interface 16 has no altsetting 0 [ 80.877217][ T352] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 80.883565][ T317] usb 4-1: config 0 has an invalid interface number: 16 but max is 8 [ 80.906736][ T317] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 80.915931][ T36] audit: type=1400 audit(145.917:387): avc: denied { create } for pid=1959 comm="syz.2.487" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 80.916052][ T317] usb 4-1: config 0 has no interface number 0 [ 80.942096][ T317] usb 4-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.953460][ T36] audit: type=1400 audit(145.947:388): avc: denied { mounton } for pid=1959 comm="syz.2.487" path="/123/file0" dev="tmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 80.954248][ T317] usb 4-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.986257][ T317] usb 4-1: config 0 interface 16 has no altsetting 0 [ 80.993613][ T317] usb 4-1: config 0 has an invalid interface number: 16 but max is 8 [ 81.001747][ T317] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.010619][ T317] usb 4-1: config 0 has no interface number 0 [ 81.016782][ T317] usb 4-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.028105][ T317] usb 4-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.038167][ T317] usb 4-1: config 0 interface 16 has no altsetting 0 [ 81.045544][ T317] usb 4-1: config 0 has an invalid interface number: 16 but max is 8 [ 81.053729][ T317] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.057915][ T352] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 138, changing to 4 [ 81.062732][ T317] usb 4-1: config 0 has no interface number 0 [ 81.073875][ T352] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 81.079793][ T317] usb 4-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.092471][ T352] usb 1-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 81.101946][ T317] usb 4-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.111211][ T352] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.121119][ T317] usb 4-1: config 0 interface 16 has no altsetting 0 [ 81.129220][ T352] usb 1-1: Product: syz [ 81.136829][ T317] usb 4-1: config 0 has an invalid interface number: 16 but max is 8 [ 81.140300][ T352] usb 1-1: Manufacturer: syz [ 81.148484][ T317] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.153166][ T352] usb 1-1: SerialNumber: syz [ 81.161983][ T317] usb 4-1: config 0 has no interface number 0 [ 81.172580][ T317] usb 4-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.183739][ T317] usb 4-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.193748][ T317] usb 4-1: config 0 interface 16 has no altsetting 0 [ 81.200529][ T317] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 81.209618][ T317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.218576][ T317] usb 4-1: config 0 descriptor?? [ 81.372750][ T352] usb 1-1: unit 6 not found! [ 81.377435][ T352] usb 1-1: unit 0 not found! [ 81.394680][ T352] usb 1-1: USB disconnect, device number 30 [ 81.700475][ T317] usb 2-1: USB disconnect, device number 34 [ 81.824857][ T1969] tipc: Enabling of bearer rejected, media not registered [ 81.836765][ T1969] netlink: 104 bytes leftover after parsing attributes in process `syz.2.490'. [ 81.846144][ T1969] netlink: 220 bytes leftover after parsing attributes in process `syz.2.490'. [ 81.867013][ T1971] netlink: 80 bytes leftover after parsing attributes in process `syz.2.491'. [ 81.887627][ T1973] 9pnet_fd: Insufficient options for proto=fd [ 81.906177][ T36] audit: type=1400 audit(146.897:389): avc: denied { ioctl } for pid=1981 comm="syz.2.495" path="socket:[23164]" dev="sockfs" ino=23164 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 81.932936][ T36] audit: type=1400 audit(146.907:390): avc: denied { setattr } for pid=1981 comm="syz.2.495" name="PING" dev="sockfs" ino=23164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 81.937364][ T789] usb 4-1: USB disconnect, device number 28 [ 82.038248][ T317] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 82.104600][ T1993] kvm: kvm [1992]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0xc1) = 0xe50000000000 [ 82.114995][ T1993] kvm: kvm [1992]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0xc2) = 0xe50000000000 [ 82.126617][ T1993] kvm: kvm [1992]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0x11e) = 0xe500be702111 [ 82.138221][ T1993] kvm: kvm [1992]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0x186) = 0xe50000000000 [ 82.148891][ T1993] kvm: kvm [1992]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0x187) = 0xe50000000000 [ 82.206235][ T317] usb 2-1: Using ep0 maxpacket: 32 [ 82.216932][ T317] usb 2-1: config 0 has an invalid interface number: 189 but max is 0 [ 82.225110][ T317] usb 2-1: config 0 has no interface number 0 [ 82.234480][ T317] usb 2-1: config 0 interface 189 altsetting 128 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 82.236224][ T352] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 82.245663][ T317] usb 2-1: config 0 interface 189 altsetting 128 endpoint 0xD has an invalid bInterval 144, changing to 11 [ 82.264704][ T317] usb 2-1: config 0 interface 189 altsetting 128 endpoint 0xD has invalid maxpacket 1853, setting to 1024 [ 82.276201][ T317] usb 2-1: config 0 interface 189 altsetting 128 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 82.289514][ T317] usb 2-1: config 0 interface 189 has no altsetting 0 [ 82.297672][ T317] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0134, bcdDevice=aa.35 [ 82.306778][ T317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.314816][ T317] usb 2-1: Product: syz [ 82.319003][ T317] usb 2-1: Manufacturer: syz [ 82.323635][ T317] usb 2-1: SerialNumber: syz [ 82.329781][ T317] usb 2-1: config 0 descriptor?? [ 82.336337][ T1963] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 82.397478][ T352] usb 1-1: unable to get BOS descriptor or descriptor too short [ 82.406118][ T352] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.416623][ T352] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.427260][ T352] usb 1-1: New USB device found, idVendor=0590, idProduct=004c, bcdDevice= 0.40 [ 82.436548][ T352] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.444610][ T352] usb 1-1: Product: syz [ 82.448790][ T352] usb 1-1: Manufacturer: syz [ 82.453376][ T352] usb 1-1: SerialNumber: syz [ 82.545810][ T317] ftdi_sio 2-1:0.189: FTDI USB Serial Device converter detected [ 82.553886][ T317] ftdi_sio ttyUSB0: unknown device type: 0xaa35 [ 82.565181][ T317] usb 2-1: USB disconnect, device number 35 [ 82.571654][ T317] ftdi_sio 2-1:0.189: device disconnected [ 82.656062][ T789] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 82.669434][ T352] usb 1-1: USB disconnect, device number 31 [ 82.716983][ T890] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 82.817134][ T789] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 82.826912][ T789] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 82.836595][ T789] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.850648][ T789] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 82.859811][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 82.867913][ T789] usb 3-1: Product: syz [ 82.872061][ T789] usb 3-1: Manufacturer: syz [ 82.876691][ T789] usb 3-1: SerialNumber: syz [ 82.877047][ T890] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.891197][ T890] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.904003][ T890] usb 4-1: config 0 interface 0 has no altsetting 0 [ 82.910644][ T890] usb 4-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 82.919713][ T890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.928385][ T890] usb 4-1: config 0 descriptor?? [ 83.090269][ T789] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 83.202790][ T2007] mmap: syz.1.502 (2007) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.292221][ T36] audit: type=1400 audit(148.288:391): avc: denied { read write } for pid=2001 comm="syz.2.500" name="lp0" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 83.316121][ T352] usb 3-1: USB disconnect, device number 23 [ 83.323028][ T352] usblp0: removed [ 83.328540][ T36] audit: type=1400 audit(148.288:392): avc: denied { open } for pid=2001 comm="syz.2.500" path="/dev/usb/lp0" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 83.353331][ T2004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.501'. [ 83.364525][ T890] apple 0003:05AC:027A.000F: unbalanced collection at end of report description [ 83.373806][ T890] apple 0003:05AC:027A.000F: parse failed [ 83.379637][ T890] apple 0003:05AC:027A.000F: probe with driver apple failed with error -22 [ 83.566311][ T317] usb 4-1: USB disconnect, device number 29 [ 83.575919][ T789] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 83.726637][ T789] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 83.734860][ T789] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.744993][ T789] usb 2-1: config 0 has no interface number 0 [ 83.752487][ T789] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 83.761904][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.769986][ T789] usb 2-1: Product: syz [ 83.774158][ T789] usb 2-1: Manufacturer: syz [ 83.778807][ T789] usb 2-1: SerialNumber: syz [ 83.784356][ T789] usb 2-1: config 0 descriptor?? [ 84.006835][ T789] usb 2-1: USB disconnect, device number 36 [ 84.224225][ T2029] tipc: Can't bind to reserved service type 1 [ 84.465131][ T352] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 84.548358][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 84.548366][ T2033] fuse: Bad value for 'fd' [ 84.548372][ T36] audit: type=1400 audit(149.548:395): avc: denied { mounton } for pid=2032 comm="syz.1.511" path="/101/file0" dev="tmpfs" ino=605 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 84.582431][ T2033] netlink: 32 bytes leftover after parsing attributes in process `syz.1.511'. [ 84.595128][ T352] usb 3-1: device descriptor read/64, error -71 [ 84.728497][ T36] audit: type=1400 audit(149.729:396): avc: denied { name_bind } for pid=2042 comm="syz.1.515" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 84.740962][ T2044] FAULT_INJECTION: forcing a failure. [ 84.740962][ T2044] name failslab, interval 1, probability 0, space 0, times 0 [ 84.761631][ T2044] CPU: 0 UID: 0 PID: 2044 Comm: syz.1.515 Not tainted syzkaller #0 7512b07cb8b2b81a08448db7682669b21f09f733 [ 84.761659][ T2044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 84.761671][ T2044] Call Trace: [ 84.761677][ T2044] [ 84.761684][ T2044] __dump_stack+0x21/0x30 [ 84.761715][ T2044] dump_stack_lvl+0x140/0x1c0 [ 84.761735][ T2044] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.761756][ T2044] ? __kasan_check_write+0x18/0x20 [ 84.761777][ T2044] dump_stack+0x19/0x20 [ 84.761798][ T2044] should_fail_ex+0x3c2/0x510 [ 84.761815][ T2044] should_failslab+0xac/0x100 [ 84.761828][ T2044] __kmalloc_cache_noprof+0x41/0x470 [ 84.761846][ T2044] ? __cfi_usb_hcd_poll_rh_status+0x10/0x10 [ 84.761865][ T2044] ? kobject_uevent_env+0x2a3/0x7e0 [ 84.761883][ T2044] kobject_uevent_env+0x2a3/0x7e0 [ 84.761907][ T2044] ? __cfi_dummy_pullup+0x10/0x10 [ 84.761927][ T2044] kobject_uevent+0x21/0x40 [ 84.761943][ T2044] gadget_bind_driver+0x5e2/0x9c0 [ 84.761960][ T2044] ? __cfi_gadget_bind_driver+0x10/0x10 [ 84.761974][ T2044] really_probe+0x2e1/0x8b0 [ 84.761993][ T2044] __driver_probe_device+0x193/0x280 [ 84.762011][ T2044] driver_probe_device+0x54/0x3f0 [ 84.762031][ T2044] __driver_attach+0x422/0x5e0 [ 84.762050][ T2044] bus_for_each_dev+0x249/0x2d0 [ 84.762066][ T2044] ? __cfi___driver_attach+0x10/0x10 [ 84.762087][ T2044] ? __cfi_bus_for_each_dev+0x10/0x10 [ 84.762103][ T2044] ? __kasan_kmalloc+0x96/0xb0 [ 84.762119][ T2044] ? _raw_spin_unlock+0x45/0x60 [ 84.762136][ T2044] ? klist_add_tail+0x1dd/0x220 [ 84.762152][ T2044] driver_attach+0x46/0x50 [ 84.762169][ T2044] bus_add_driver+0x393/0x730 [ 84.762186][ T2044] driver_register+0x2b7/0x3c0 [ 84.762206][ T2044] usb_gadget_register_driver_owner+0xfc/0x270 [ 84.762230][ T2044] raw_ioctl+0x144c/0x37a0 [ 84.762251][ T2044] ? __cfi_raw_ioctl+0x10/0x10 [ 84.762271][ T2044] ? selinux_file_ioctl+0x732/0x1480 [ 84.762292][ T2044] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 84.762314][ T2044] ? __fget_files+0x2bc/0x330 [ 84.762330][ T2044] ? bpf_lsm_file_ioctl+0xd/0x20 [ 84.762365][ T2044] ? security_file_ioctl+0x3e/0x110 [ 84.762385][ T2044] ? __cfi_raw_ioctl+0x10/0x10 [ 84.762403][ T2044] __se_sys_ioctl+0x123/0x1b0 [ 84.762420][ T2044] __x64_sys_ioctl+0x7f/0xa0 [ 84.762436][ T2044] x64_sys_call+0x1878/0x2ee0 [ 84.762455][ T2044] do_syscall_64+0x57/0xf0 [ 84.762473][ T2044] ? clear_bhb_loop+0x50/0xa0 [ 84.762495][ T2044] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.762516][ T2044] RIP: 0033:0x7fd322b9f1eb [ 84.762532][ T2044] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 84.762545][ T2044] RSP: 002b:00007fd3239d7f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.762564][ T2044] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fd322b9f1eb [ 84.762577][ T2044] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 84.762587][ T2044] RBP: 00007fd3239d8fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 84.762599][ T2044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.762610][ T2044] R13: 0000200000000480 R14: 0000000000000001 R15: 0000000000000000 [ 84.762626][ T2044] [ 84.763556][ T36] audit: type=1400 audit(149.759:397): avc: denied { create } for pid=2042 comm="syz.1.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 85.101271][ T36] audit: type=1400 audit(149.759:398): avc: denied { remount } for pid=2042 comm="syz.1.515" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 85.154826][ T352] usb 3-1: device descriptor read/64, error -71 [ 85.344731][ T31] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 85.352387][ T890] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 85.394680][ T352] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 85.505782][ T890] usb 2-1: config 3 has an invalid interface number: 3 but max is 0 [ 85.513845][ T890] usb 2-1: config 3 has no interface number 0 [ 85.519981][ T890] usb 2-1: config 3 interface 3 has no altsetting 0 [ 85.526635][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 85.536303][ T352] usb 3-1: device descriptor read/64, error -71 [ 85.542584][ T31] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 85.553625][ T31] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 85.562889][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.570965][ T31] usb 1-1: Product: syz [ 85.575169][ T31] usb 1-1: Manufacturer: syz [ 85.579809][ T890] usb 2-1: string descriptor 0 read error: -22 [ 85.586041][ T890] usb 2-1: New USB device found, idVendor=09fb, idProduct=6026, bcdDevice=ae.dc [ 85.595096][ T31] usb 1-1: SerialNumber: syz [ 85.599917][ T890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.610177][ T31] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 85.618552][ T890] ftdi_sio 2-1:3.3: FTDI USB Serial Device converter detected [ 85.626655][ T31] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 85.626655][ T31] Please send a copy of this message to and [ 85.652191][ T890] ftdi_sio ttyUSB0: unknown device type: 0xaedc [ 85.784485][ T352] usb 3-1: device descriptor read/64, error -71 [ 85.820380][ T890] usb 2-1: USB disconnect, device number 37 [ 85.826859][ T890] ftdi_sio 2-1:3.3: device disconnected [ 85.894524][ T352] usb usb3-port1: attempt power cycle [ 85.962584][ T2053] incfs_lookup_dentry err:-103 [ 85.967522][ T2053] incfs: Can't find or create .incomplete dir in ./file0 [ 85.975722][ T2053] incfs: mount failed -103 [ 85.989384][ T2065] fuse: Bad value for 'fd' [ 85.995738][ T31] ums-sddr09 1-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 86.007373][ T31] usb 1-1: USB disconnect, device number 32 [ 86.023034][ T36] audit: type=1400 audit(151.009:399): avc: denied { map } for pid=2068 comm="syz.3.521" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 86.125558][ T2081] 8021q: VLANs not supported on lo [ 86.234402][ T352] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 86.265418][ T352] usb 3-1: device descriptor read/8, error -71 [ 86.395226][ T352] usb 3-1: device descriptor read/8, error -71 [ 86.414522][ T2090] fuse: Bad value for 'fd' [ 86.544861][ T2093] netlink: 48 bytes leftover after parsing attributes in process `syz.0.529'. [ 86.634327][ T36] audit: type=1400 audit(151.619:400): avc: denied { mounton } for pid=2091 comm="syz.0.529" path="/139/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 86.656320][ T31] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 86.664046][ T352] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 86.685445][ T352] usb 3-1: device descriptor read/8, error -71 [ 86.815103][ T352] usb 3-1: device descriptor read/8, error -71 [ 86.827917][ T31] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 86.841655][ T31] usb 2-1: config 0 has no interface number 0 [ 86.850625][ T31] usb 2-1: config 0 interface 41 has no altsetting 0 [ 86.859206][ T31] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 86.868688][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.877222][ T31] usb 2-1: Product: syz [ 86.881836][ T31] usb 2-1: Manufacturer: syz [ 86.886686][ T31] usb 2-1: SerialNumber: syz [ 86.896520][ T31] usb 2-1: config 0 descriptor?? [ 86.934102][ T352] usb usb3-port1: unable to enumerate USB device [ 87.083862][ T890] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 87.104524][ T36] audit: type=1326 audit(152.100:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2102 comm="syz.3.532" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60b019f559 code=0x0 [ 87.235415][ T890] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.246379][ T890] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.259240][ T890] usb 1-1: config 0 interface 0 has no altsetting 0 [ 87.265905][ T890] usb 1-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.00 [ 87.274956][ T890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.283835][ T890] usb 1-1: config 0 descriptor?? [ 87.306195][ T31] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 87.492706][ T890] wacom 0003:056A:0303.0010: unknown main item tag 0x0 [ 87.499757][ T890] wacom 0003:056A:0303.0010: unknown main item tag 0x3 [ 87.506983][ T890] wacom 0003:056A:0303.0010: unknown main item tag 0x0 [ 87.514146][ T890] wacom 0003:056A:0303.0010: unknown main item tag 0x0 [ 87.521079][ T890] wacom 0003:056A:0303.0010: unknown main item tag 0x0 [ 87.528484][ T890] wacom 0003:056A:0303.0010: Unknown device_type for 'HID 056a:0303'. Assuming pen. [ 87.538953][ T890] wacom 0003:056A:0303.0010: hidraw0: USB HID v36.2c Joystick [HID 056a:0303] on usb-dummy_hcd.0-1/input0 [ 87.553196][ T890] input: Wacom Intuos PT M Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0303.0010/input/input15 [ 88.066517][ T2118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64599 sclass=netlink_route_socket pid=2118 comm=syz.3.535 [ 88.106469][ T2121] fuse: Unknown parameter '0x0000000000000004' [ 88.343252][ T352] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 88.353238][ T890] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 88.494639][ T352] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.505654][ T352] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.515504][ T352] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 88.524649][ T352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.936057][ T352] hid-picolcd 0003:04D8:C002.0011: unknown main item tag 0x0 [ 88.943676][ T352] hid-picolcd 0003:04D8:C002.0011: unknown main item tag 0x0 [ 88.951093][ T352] hid-picolcd 0003:04D8:C002.0011: unknown main item tag 0x0 [ 88.958561][ T352] hid-picolcd 0003:04D8:C002.0011: unknown main item tag 0x0 [ 89.023435][ T352] input: HID 04d8:c002 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:04D8:C002.0011/input/input18 [ 89.036276][ T352] hid-picolcd 0003:04D8:C002.0011: No report with id 0x94 found [ 89.044023][ T352] hid-picolcd 0003:04D8:C002.0011: failed to configure display [ 89.356128][ T31] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 89.367246][ T31] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 89.377272][ T31] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 89.393046][ T31] usb 2-1: USB disconnect, device number 38 [ 89.397734][ T2137] fuse: Unknown parameter '+—jÔmode' [ 89.408212][ T2137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.541'. [ 89.420376][ T2137] rust_binder: 2136:2137 got transaction to invalid handle 1 [ 89.427894][ T2137] rust_binder: 2136:2137 netlink report failed: ESRCH [ 89.434773][ T2137] rust_binder: 2136:2137 transaction call to 0:0 failed ENOENT, code 0 size 96-24 line process.rs:958 [ 89.852690][ T789] usb 1-1: USB disconnect, device number 33 [ 89.988462][ T2150] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=2150 comm=syz.0.544 [ 90.005835][ T2151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2151 comm=syz.0.544 [ 90.236628][ T31] rust_binder: 2136: undelivered TRANSACTION_ERROR: 29201 [ 90.243839][ T2157] netlink: 16 bytes leftover after parsing attributes in process `syz.1.545'. [ 90.255732][ T2159] fuse: Unknown parameter '0x0000000000000004' [ 90.552175][ T789] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 91.019120][ T36] audit: type=1400 audit(156.012:402): avc: denied { setattr } for pid=2169 comm="syz.0.548" name="trace_marker" dev="tracefs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 91.052372][ T36] audit: type=1400 audit(156.012:403): avc: denied { remount } for pid=2172 comm="syz.0.549" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 91.127695][ T9] usb 3-1: USB disconnect, device number 28 [ 91.129593][ T890] usb 4-1: unable to get BOS descriptor or descriptor too short [ 91.146224][ T890] usb 4-1: no configurations [ 91.160595][ T890] usb 4-1: can't read configurations, error -22 [ 91.184086][ T36] audit: type=1400 audit(156.182:404): avc: denied { setattr } for pid=2181 comm="syz.3.552" name="" dev="pipefs" ino=24702 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 91.206699][ T36] audit: type=1400 audit(156.182:405): avc: denied { accept } for pid=2181 comm="syz.3.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.331798][ T31] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 91.481739][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 91.484240][ T31] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 91.498415][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.506433][ T31] usb 1-1: Product: syz [ 91.510598][ T31] usb 1-1: Manufacturer: syz [ 91.515307][ T31] usb 1-1: SerialNumber: syz [ 91.522361][ T31] usb-storage 1-1:1.0: USB Mass Storage device detected [ 91.530106][ T31] usb-storage 1-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 91.538317][ T31] scsi host1: usb-storage 1-1:1.0 [ 91.571708][ T890] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 91.632686][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.643969][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.653793][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 91.663107][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.672090][ T9] usb 3-1: config 0 descriptor?? [ 91.724854][ T352] usb 1-1: USB disconnect, device number 34 [ 91.731320][ T890] usb 4-1: config 1 has an invalid descriptor of length 58, skipping remainder of the config [ 91.741868][ T890] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.752167][ T890] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 91.761250][ T890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.769392][ T890] usb 4-1: Product: syz [ 91.774238][ T890] usb 4-1: Manufacturer: syz [ 91.778852][ T890] usb 4-1: SerialNumber: syz [ 91.985022][ T2187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.993589][ T2187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.001755][ T2187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.010252][ T2187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.018527][ T2187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.027178][ T2187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.035287][ T2187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.043847][ T2187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.052003][ T2187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.060504][ T2187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.079674][ T9] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 92.091475][ T9] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 92.098512][ T9] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 92.105550][ T9] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 92.112552][ T9] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 92.119543][ T9] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 92.126570][ T9] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 92.134515][ T9] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 92.146200][ T890] usb 4-1: 0:2 : does not exist [ 92.153234][ T890] usb 4-1: unit 9 not found! [ 92.160131][ T890] usb 4-1: 4:0: cannot get min/max values for control 1 (id 4) [ 92.170256][ T890] usb 4-1: 4:0: cannot get min/max values for control 2 (id 4) [ 92.180080][ T890] usb 4-1: 4:0: cannot get min/max values for control 3 (id 4) [ 92.189925][ T890] usb 4-1: 4:0: cannot get min/max values for control 4 (id 4) [ 92.199756][ T890] usb 4-1: 4:0: cannot get min/max values for control 5 (id 4) [ 92.209641][ T890] usb 4-1: 4:0: cannot get min/max values for control 6 (id 4) [ 92.219601][ T890] usb 4-1: 4:0: cannot get min/max values for control 7 (id 4) [ 92.229641][ T890] usb 4-1: 4:0: cannot get min/max values for control 8 (id 4) [ 92.241264][ T890] usb 4-1: 4:0: cannot get min/max values for control 9 (id 4) [ 92.242320][ T2195] fuse: Unknown parameter '0x0000000000000004' [ 92.251790][ T890] usb 4-1: 4:0: cannot get min/max values for control 10 (id 4) [ 92.271440][ T890] usb 4-1: USB disconnect, device number 31 [ 92.281933][ T2184] netlink: 393 bytes leftover after parsing attributes in process `syz.2.553'. [ 92.354501][ T9] cp2112 0003:10C4:EA90.0012: error requesting version [ 92.362106][ T9] cp2112 0003:10C4:EA90.0012: probe with driver cp2112 failed with error -71 [ 92.372774][ T9] usb 3-1: USB disconnect, device number 29 [ 92.531247][ T317] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 92.666133][ T36] audit: type=1400 audit(157.662:406): avc: denied { read write } for pid=2200 comm="syz.3.558" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 92.690018][ T317] usb 1-1: Using ep0 maxpacket: 16 [ 92.691156][ T36] audit: type=1400 audit(157.662:407): avc: denied { open } for pid=2200 comm="syz.3.558" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 92.696366][ T317] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.729090][ T317] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.739261][ T317] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 92.748353][ T317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.756388][ T317] usb 1-1: Product: syz [ 92.760563][ T317] usb 1-1: Manufacturer: syz [ 92.765206][ T317] usb 1-1: SerialNumber: syz [ 92.779937][ T36] audit: type=1400 audit(157.772:408): avc: denied { bind } for pid=2200 comm="syz.3.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 92.798628][ T36] audit: type=1400 audit(157.772:409): avc: denied { name_bind } for pid=2200 comm="syz.3.558" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 92.818837][ T36] audit: type=1400 audit(157.772:410): avc: denied { node_bind } for pid=2200 comm="syz.3.558" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 92.972483][ T317] usb 1-1: 0:2 : does not exist [ 92.980178][ T317] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 92.996228][ T317] usb 1-1: USB disconnect, device number 35 [ 93.008697][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 93.131375][ T36] audit: type=1400 audit(158.133:411): avc: denied { ioctl } for pid=2208 comm="syz.2.560" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 93.293434][ T789] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 93.301071][ T789] usb 2-1: can't read configurations, error -71 [ 93.455887][ T2215] overlay: ./file0 is not a directory [ 93.545317][ T2223] fuse: Unknown parameter '0x0000000000000004' [ 93.871786][ T2241] binder: Unknown parameter 'defcontext01777777777777777777777' [ 93.881650][ T2246] binder: Unknown parameter 'defcontext01777777777777777777777' [ 94.040233][ T2255] can0: slcan on ptm1. [ 94.115281][ T2270] fuse: Unknown parameter '0x0000000000000004' [ 94.280401][ T31] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 94.430328][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 94.437830][ T31] usb 3-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40 [ 94.446960][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.455009][ T31] usb 3-1: Product: syz [ 94.459183][ T31] usb 3-1: Manufacturer: syz [ 94.460306][ T789] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 94.463821][ T31] usb 3-1: SerialNumber: syz [ 94.480304][ T317] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 94.495669][ T2285] FAULT_INJECTION: forcing a failure. [ 94.495669][ T2285] name failslab, interval 1, probability 0, space 0, times 0 [ 94.508321][ T2285] CPU: 1 UID: 0 PID: 2285 Comm: syz.0.578 Not tainted syzkaller #0 7512b07cb8b2b81a08448db7682669b21f09f733 [ 94.508348][ T2285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 94.508358][ T2285] Call Trace: [ 94.508364][ T2285] [ 94.508370][ T2285] __dump_stack+0x21/0x30 [ 94.508399][ T2285] dump_stack_lvl+0x140/0x1c0 [ 94.508416][ T2285] ? __cfi_dump_stack_lvl+0x10/0x10 [ 94.508434][ T2285] dump_stack+0x19/0x20 [ 94.508447][ T2285] should_fail_ex+0x3c2/0x510 [ 94.508458][ T2285] should_failslab+0xac/0x100 [ 94.508468][ T2285] kmem_cache_alloc_noprof+0x42/0x410 [ 94.508483][ T2285] ? security_file_alloc+0x49/0x220 [ 94.508496][ T2285] ? kasan_save_alloc_info+0x3a/0x50 [ 94.508509][ T2285] security_file_alloc+0x49/0x220 [ 94.508521][ T2285] init_file+0x9e/0x210 [ 94.508532][ T2285] alloc_empty_file+0xd9/0x270 [ 94.508542][ T2285] ? _raw_spin_unlock+0x45/0x60 [ 94.508554][ T2285] alloc_file_pseudo+0x142/0x1f0 [ 94.508565][ T2285] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 94.508576][ T2285] ? shmem_get_inode+0x81c/0xc10 [ 94.508586][ T2285] ? __kasan_check_write+0x18/0x20 [ 94.508599][ T2285] ? clear_nlink+0x8e/0xf0 [ 94.508614][ T2285] __shmem_file_setup+0x242/0x2c0 [ 94.508630][ T2285] shmem_zero_setup+0x90/0x130 [ 94.508644][ T2285] mmap_region+0x1659/0x1d10 [ 94.508658][ T2285] ? __cfi_mmap_region+0x10/0x10 [ 94.508672][ T2285] ? __cfi_arch_get_unmapped_area_topdown+0x10/0x10 [ 94.508686][ T2285] ? __kasan_check_read+0x15/0x20 [ 94.508699][ T2285] ? __get_unmapped_area+0x406/0x470 [ 94.508712][ T2285] ? futex_wait+0x2b8/0x7c0 [ 94.508725][ T2285] do_mmap+0xa47/0x1370 [ 94.508738][ T2285] ? __cfi_selinux_mmap_file+0x10/0x10 [ 94.508752][ T2285] ? __cfi_do_mmap+0x10/0x10 [ 94.508764][ T2285] ? __kasan_check_write+0x18/0x20 [ 94.508776][ T2285] ? down_write_killable+0xee/0x2d0 [ 94.508790][ T2285] ? __cfi_down_write_killable+0x10/0x10 [ 94.508804][ T2285] ? do_futex+0x32a/0x510 [ 94.508813][ T2285] vm_mmap_pgoff+0x367/0x4b0 [ 94.508826][ T2285] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 94.508838][ T2285] ? __x64_sys_futex+0x110/0x110 [ 94.508848][ T2285] ksys_mmap_pgoff+0xfa/0x1e0 [ 94.508861][ T2285] ? __kasan_check_write+0x18/0x20 [ 94.508873][ T2285] __x64_sys_mmap+0x121/0x140 [ 94.508883][ T2285] x64_sys_call+0x13bf/0x2ee0 [ 94.508893][ T2285] do_syscall_64+0x57/0xf0 [ 94.508906][ T2285] ? clear_bhb_loop+0x50/0xa0 [ 94.508927][ T2285] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 94.508946][ T2285] RIP: 0033:0x7fe650d9f559 [ 94.508961][ T2285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.508974][ T2285] RSP: 002b:00007fe651c1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 94.508991][ T2285] RAX: ffffffffffffffda RBX: 00007fe651025fa0 RCX: 00007fe650d9f559 [ 94.509003][ T2285] RDX: 0000000002000007 RSI: 000000000000210c RDI: 000000110c230000 [ 94.509013][ T2285] RBP: 00007fe650e36b20 R08: ffffffffffffffff R09: 0000000000000000 [ 94.509019][ T2285] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 94.509026][ T2285] R13: 00007fe651026038 R14: 00007fe651025fa0 R15: 00007ffe8cabe9d8 [ 94.509035][ T2285] [ 94.690253][ T789] usb 2-1: Using ep0 maxpacket: 8 [ 94.699275][ T31] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 94.704817][ T317] usb 4-1: config 1 interface 0 altsetting 81 endpoint 0x3 has invalid wMaxPacketSize 0 [ 94.710699][ T31] usb 3-1: USB disconnect, device number 30 [ 94.718908][ T317] usb 4-1: config 1 interface 0 altsetting 81 bulk endpoint 0x3 has invalid maxpacket 0 [ 94.751652][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 94.763745][ T789] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.893178][ T317] usb 4-1: config 1 interface 0 has no altsetting 0 [ 94.900148][ T789] usb 2-1: config 0 interface 0 has no altsetting 0 [ 94.906919][ T789] usb 2-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 94.918397][ T2254] can0 (unregistered): slcan off ptm1. [ 94.918431][ T789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.930548][ T890] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 94.932214][ T317] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 94.949546][ T317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.958264][ T317] usb 4-1: Product: syz [ 94.965985][ T789] usb 2-1: config 0 descriptor?? [ 94.970988][ T317] usb 4-1: Manufacturer: syz [ 94.975824][ T317] usb 4-1: SerialNumber: syz [ 95.099990][ T890] usb 1-1: Using ep0 maxpacket: 32 [ 95.106199][ T890] usb 1-1: config 6 has an invalid interface number: 4 but max is 0 [ 95.114389][ T890] usb 1-1: config 6 has no interface number 0 [ 95.120508][ T890] usb 1-1: config 6 interface 4 has no altsetting 0 [ 95.128485][ T890] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=f2.cf [ 95.137601][ T890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.145627][ T890] usb 1-1: Product: syz [ 95.149794][ T890] usb 1-1: Manufacturer: syz [ 95.154402][ T890] usb 1-1: SerialNumber: syz [ 95.213950][ T317] usb 4-1: USB disconnect, device number 32 [ 95.362716][ T2317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.371357][ T2317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.381745][ T890] usb_ehset_test 1-1:6.4: probe with driver usb_ehset_test failed with error -32 [ 95.383971][ T2274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.393707][ T890] usb 1-1: USB disconnect, device number 36 [ 95.401201][ T2274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.426250][ T789] kye 0003:0458:5005.0013: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 95.436967][ T789] kye 0003:0458:5005.0013: ignoring exceeding usage max [ 95.448538][ T789] kye 0003:0458:5005.0013: No inputs registered, leaving [ 95.456260][ T789] kye 0003:0458:5005.0013: hidraw0: USB HID v0.06 Joystick [HID 0458:5005] on usb-dummy_hcd.1-1/input0 [ 95.467820][ T789] kye 0003:0458:5005.0013: tablet-enabling feature report not found [ 95.476392][ T789] kye 0003:0458:5005.0013: tablet enabling failed [ 95.488013][ T2319] netlink: 16 bytes leftover after parsing attributes in process `syz.2.579'. [ 95.644367][ T890] usb 2-1: USB disconnect, device number 41 [ 95.725691][ T2325] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(9) [ 95.735388][ T2325] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 95.743544][ T2325] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 95.751650][ T2325] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 95.759733][ T2325] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 95.767770][ T2325] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 95.775843][ T2325] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 95.783873][ T2325] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 95.791904][ T2325] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 95.799944][ T2325] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 95.807917][ T2325] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 95.815962][ T2325] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 95.823972][ T2325] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 95.831994][ T2325] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 95.840021][ T2325] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 95.848004][ T2325] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 95.856415][ T2325] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 95.864432][ T2325] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 95.872442][ T2325] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 95.880445][ T2325] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 95.888434][ T2325] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 95.899229][ T2325] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 95.907308][ T2325] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 95.915356][ T2325] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 95.923417][ T2325] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 95.931529][ T2325] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 95.939588][ T2325] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 95.947615][ T2325] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 95.955674][ T2325] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 95.963728][ T2325] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 95.971782][ T2325] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 95.979852][ T2325] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 95.987885][ T2325] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 96.110693][ T2339] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.117996][ T2339] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.125351][ T2339] bridge_slave_0: entered allmulticast mode [ 96.131808][ T2339] bridge_slave_0: entered promiscuous mode [ 96.145556][ T2339] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.153248][ T2339] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.161005][ T2339] bridge_slave_1: entered allmulticast mode [ 96.174526][ T2339] bridge_slave_1: entered promiscuous mode [ 96.220312][ T2339] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.227361][ T2339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.234682][ T2339] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.241864][ T2339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.250821][ T2348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.587'. [ 96.280991][ T1053] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.288682][ T1053] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.300684][ T1053] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.307748][ T1053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.334955][ T1053] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.337043][ T2360] FAULT_INJECTION: forcing a failure. [ 96.337043][ T2360] name failslab, interval 1, probability 0, space 0, times 0 [ 96.342082][ T1053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.364807][ T2339] veth0_vlan: entered promiscuous mode [ 96.373396][ T2360] CPU: 0 UID: 0 PID: 2360 Comm: syz.3.591 Not tainted syzkaller #0 7512b07cb8b2b81a08448db7682669b21f09f733 [ 96.373419][ T2360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 96.373427][ T2360] Call Trace: [ 96.373431][ T2360] [ 96.373436][ T2360] __dump_stack+0x21/0x30 [ 96.373458][ T2360] dump_stack_lvl+0x140/0x1c0 [ 96.373473][ T2360] ? __cfi_dump_stack_lvl+0x10/0x10 [ 96.373488][ T2360] ? stack_depot_save_flags+0x38/0x800 [ 96.373500][ T2360] dump_stack+0x19/0x20 [ 96.373513][ T2360] should_fail_ex+0x3c2/0x510 [ 96.373538][ T2360] should_failslab+0xac/0x100 [ 96.373558][ T2360] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 96.373584][ T2360] ? alloc_inode+0xa9/0x270 [ 96.373602][ T2360] alloc_inode+0xa9/0x270 [ 96.373619][ T2360] new_inode_pseudo+0x19/0x40 [ 96.373629][ T2360] alloc_anon_inode+0x21/0x340 [ 96.373641][ T2360] anon_inode_make_secure_inode+0x76/0x150 [ 96.373655][ T2360] ? __cfi_anon_inode_make_secure_inode+0x10/0x10 [ 96.373668][ T2360] __anon_inode_getfile+0xd1/0x200 [ 96.373679][ T2360] anon_inode_create_getfile+0x3f/0x50 [ 96.373691][ T2360] new_userfaultfd+0x1f6/0x410 [ 96.373705][ T2360] __x64_sys_userfaultfd+0x89/0xb0 [ 96.373719][ T2360] x64_sys_call+0x2950/0x2ee0 [ 96.373729][ T2360] do_syscall_64+0x57/0xf0 [ 96.373739][ T2360] ? clear_bhb_loop+0x50/0xa0 [ 96.373753][ T2360] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 96.373765][ T2360] RIP: 0033:0x7f60b019f559 [ 96.373775][ T2360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.373784][ T2360] RSP: 002b:00007f60b107d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 96.373796][ T2360] RAX: ffffffffffffffda RBX: 00007f60b0425fa0 RCX: 00007f60b019f559 [ 96.373804][ T2360] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000801 [ 96.373810][ T2360] RBP: 00007f60b0236b20 R08: 0000000000000000 R09: 0000000000000000 [ 96.373817][ T2360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.373823][ T2360] R13: 00007f60b0426038 R14: 00007f60b0425fa0 R15: 00007ffc7ff17bd8 [ 96.373830][ T2360] [ 96.376187][ T2339] veth1_macvtap: entered promiscuous mode [ 96.607450][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 96.607467][ T36] audit: type=1400 audit(161.604:417): avc: denied { mounton } for pid=2339 comm="syz-executor" path="/root/syzkaller.15K9tH/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 96.648921][ T2365] fuse: Unknown parameter '0x0000000000000004' [ 96.663853][ T2367] cgroup: release_agent respecified [ 96.671887][ T551] Bluetooth: hci0: Frame reassembly failed (-84) [ 96.672359][ T2367] cgroup: release_agent respecified [ 97.075818][ T36] audit: type=1400 audit(162.074:418): avc: denied { getopt } for pid=2382 comm="syz.1.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 97.109420][ T2385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2385 comm=syz.1.596 [ 97.159018][ T317] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 97.191280][ T36] audit: type=1400 audit(162.194:419): avc: denied { create } for pid=2391 comm="syz.3.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.263131][ T2401] fuse: Unknown parameter 'fd0x0000000000000004' [ 97.272352][ T36] audit: type=1400 audit(162.275:420): avc: denied { mount } for pid=2402 comm="syz.3.601" name="/" dev="ramfs" ino=25296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 97.309390][ T317] usb 3-1: too many configurations: 231, using maximum allowed: 8 [ 97.318399][ T317] usb 3-1: config index 0 descriptor too short (expected 4257, got 161) [ 97.326935][ T317] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.337801][ T317] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 97.347582][ T317] usb 3-1: config index 1 descriptor too short (expected 4257, got 161) [ 97.348498][ T2414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.604'. [ 97.356522][ T317] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.376593][ T317] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 97.378271][ T36] audit: type=1400 audit(162.385:421): avc: denied { write } for pid=2411 comm="syz.1.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.386386][ T317] usb 3-1: config index 2 descriptor too short (expected 4257, got 161) [ 97.404974][ T36] audit: type=1400 audit(162.385:422): avc: denied { nlmsg_write } for pid=2411 comm="syz.1.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.413708][ T317] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.444134][ T317] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 97.455284][ T317] usb 3-1: config index 3 descriptor too short (expected 4257, got 161) [ 97.463772][ T317] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.474406][ T317] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 97.489247][ T317] usb 3-1: config index 4 descriptor too short (expected 4257, got 161) [ 97.497646][ T317] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.508327][ T317] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 97.520378][ T317] usb 3-1: config index 5 descriptor too short (expected 4257, got 161) [ 97.529282][ T317] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.539421][ T317] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 97.549034][ T317] usb 3-1: config index 6 descriptor too short (expected 4257, got 161) [ 97.557375][ T317] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.567639][ T317] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 97.568818][ T31] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 97.577530][ T317] usb 3-1: config index 7 descriptor too short (expected 4257, got 161) [ 97.592665][ T317] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.602998][ T317] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 97.611928][ T317] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 97.621030][ T317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.728738][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 97.735031][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.745499][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.757965][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.767069][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.775103][ T31] usb 4-1: Product: syz [ 97.779316][ T31] usb 4-1: Manufacturer: syz [ 97.784154][ T31] usb 4-1: SerialNumber: syz [ 97.818692][ T789] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 97.831195][ T317] usb 3-1: string descriptor 0 read error: -71 [ 97.838376][ T317] usb 3-1: Found UVC 0.00 device (046d:0825) [ 97.845901][ T317] usb 3-1: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1). [ 97.854838][ T317] usb 3-1: No streaming interface found for terminal 2. [ 97.865215][ T317] usb 3-1: USB disconnect, device number 31 [ 97.948677][ T789] usb 2-1: device descriptor read/64, error -71 [ 98.188564][ T789] usb 2-1: device descriptor read/64, error -71 [ 98.196734][ T2410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.205305][ T2410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.428432][ T789] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 98.488622][ T36] audit: type=1400 audit(163.495:423): avc: denied { map } for pid=2425 comm="syz.2.607" path="socket:[26438]" dev="sockfs" ino=26438 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.538126][ T2427] futex_wake_op: syz.2.607 tries to shift op by -1; fix this program [ 98.568471][ T789] usb 2-1: device descriptor read/64, error -71 [ 98.708301][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 98.708314][ T2368] Bluetooth: hci0: command 0x1003 tx timeout [ 98.791595][ T2437] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 98.805829][ T2437] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 98.814313][ T789] usb 2-1: device descriptor read/64, error -71 [ 98.834614][ T2439] fuse: Unknown parameter 'fd0x0000000000000004' [ 98.851631][ T31] cdc_ncm 4-1:1.0: bind() failure [ 98.858519][ T31] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 98.865335][ T31] cdc_ncm 4-1:1.1: bind() failure [ 98.869406][ T2444] can0: slcan on ptm0. [ 98.883352][ T31] usb 4-1: USB disconnect, device number 33 [ 98.928265][ T789] usb usb2-port1: attempt power cycle [ 98.938809][ T2442] can0 (unregistered): slcan off ptm0. [ 99.198064][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 99.278047][ T789] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 99.299074][ T789] usb 2-1: device descriptor read/8, error -71 [ 99.332730][ T36] audit: type=1400 audit(164.336:424): avc: denied { ioctl } for pid=2477 comm="syz.2.615" path="socket:[27650]" dev="sockfs" ino=27650 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 99.358283][ T9] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 99.373464][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.377070][ T2485] incfs: Error accessing: ./file0. [ 99.385146][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 99.398006][ T2485] incfs: mount failed -20 [ 99.403953][ T9] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 99.412144][ T36] audit: type=1400 audit(164.406:425): avc: denied { link } for pid=2484 comm="syz.3.616" name="#19" dev="tmpfs" ino=1017 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 99.415447][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.445622][ T9] usb 5-1: Product: syz [ 99.447915][ T36] audit: type=1400 audit(164.406:426): avc: denied { rename } for pid=2484 comm="syz.3.616" name="#1a" dev="tmpfs" ino=1017 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 99.450213][ T9] usb 5-1: Manufacturer: syz [ 99.476080][ T789] usb 2-1: device descriptor read/8, error -71 [ 99.482604][ T9] usb 5-1: SerialNumber: syz [ 99.488196][ T9] usb 5-1: config 0 descriptor?? [ 99.498585][ T9] usb-storage 5-1:0.0: USB Mass Storage device detected [ 99.516509][ T9] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 99.677818][ T31] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 99.714825][ T9] usb 5-1: USB disconnect, device number 2 [ 99.720730][ T789] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 99.758611][ T789] usb 2-1: device descriptor read/8, error -71 [ 99.769460][ T2490] EXT4-fs (sda1): shut down requested (0) [ 99.827920][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 99.834243][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.844557][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.854854][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 99.864143][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.872294][ T31] usb 4-1: Product: syz [ 99.876525][ T31] usb 4-1: Manufacturer: syz [ 99.881191][ T31] usb 4-1: SerialNumber: syz [ 99.889597][ T789] usb 2-1: device descriptor read/8, error -71 [ 100.000599][ T789] usb usb2-port1: unable to enumerate USB device [ 100.089016][ T31] usb 4-1: 0:2 : does not exist [ 100.095659][ T31] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 100.106289][ T31] usb 4-1: USB disconnect, device number 34 [ 100.116065][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 100.147827][ T312] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 100.297700][ T312] usb 3-1: Using ep0 maxpacket: 8 [ 100.304315][ T312] usb 3-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.315535][ T312] usb 3-1: config 0 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.328750][ T312] usb 3-1: config 0 interface 0 has no altsetting 0 [ 100.335374][ T312] usb 3-1: New USB device found, idVendor=05ac, idProduct=0340, bcdDevice= 0.00 [ 100.344514][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.353350][ T312] usb 3-1: config 0 descriptor?? [ 100.589857][ T2500] kvm: requested 183542 ns i8254 timer period limited to 200000 ns [ 100.598149][ T2500] kvm: requested 160076 ns i8254 timer period limited to 200000 ns [ 100.647387][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.763151][ T312] apple 0003:05AC:0340.0014: unknown main item tag 0x0 [ 100.764305][ T2511] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.770217][ T312] apple 0003:05AC:0340.0014: unknown main item tag 0x0 [ 100.788834][ T312] apple 0003:05AC:0340.0014: unknown main item tag 0x0 [ 100.795840][ T312] apple 0003:05AC:0340.0014: unknown main item tag 0x0 [ 100.797273][ T9] usb 5-1: device descriptor read/64, error -71 [ 100.802798][ T312] apple 0003:05AC:0340.0014: unknown main item tag 0x0 [ 100.815917][ T312] apple 0003:05AC:0340.0014: unknown main item tag 0x0 [ 100.822862][ T312] apple 0003:05AC:0340.0014: unknown main item tag 0x0 [ 100.830977][ T312] apple 0003:05AC:0340.0014: unknown main item tag 0x0 [ 100.839274][ T312] apple 0003:05AC:0340.0014: unknown main item tag 0x0 [ 100.846169][ T312] apple 0003:05AC:0340.0014: unknown main item tag 0x0 [ 100.853107][ T312] apple 0003:05AC:0340.0014: unknown main item tag 0x0 [ 100.860248][ T312] apple 0003:05AC:0340.0014: unknown main item tag 0x0 [ 100.867451][ T312] apple 0003:05AC:0340.0014: unknown main item tag 0x0 [ 100.874348][ T312] apple 0003:05AC:0340.0014: unknown main item tag 0x0 [ 100.881300][ T312] apple 0003:05AC:0340.0014: unbalanced collection at end of report description [ 100.890678][ T312] apple 0003:05AC:0340.0014: parse failed [ 100.897715][ T2517] overlay: filesystem on ./file0 not supported as upperdir [ 100.905026][ T312] apple 0003:05AC:0340.0014: probe with driver apple failed with error -22 [ 100.966958][ T400] usb 3-1: USB disconnect, device number 32 [ 101.057288][ T9] usb 5-1: device descriptor read/64, error -71 [ 101.297129][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 101.337039][ T312] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 101.437039][ T9] usb 5-1: device descriptor read/64, error -71 [ 101.488109][ T312] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 101.499333][ T312] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1544, setting to 1024 [ 101.510457][ T312] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.523343][ T312] usb 4-1: config 0 interface 0 has no altsetting 0 [ 101.530131][ T312] usb 4-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 101.539419][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.549643][ T312] usb 4-1: config 0 descriptor?? [ 101.554919][ T2531] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 101.686888][ T9] usb 5-1: device descriptor read/64, error -71 [ 101.796920][ T9] usb usb5-port1: attempt power cycle [ 101.968090][ T312] cherry 0003:046A:0027.0015: unknown main item tag 0x0 [ 101.975949][ T312] cherry 0003:046A:0027.0015: unknown main item tag 0x0 [ 101.982982][ T312] cherry 0003:046A:0027.0015: unknown main item tag 0x0 [ 101.990087][ T312] cherry 0003:046A:0027.0015: unknown main item tag 0x0 [ 101.997101][ T312] cherry 0003:046A:0027.0015: unknown main item tag 0x0 [ 102.004057][ T312] cherry 0003:046A:0027.0015: unknown main item tag 0x0 [ 102.011109][ T312] cherry 0003:046A:0027.0015: unknown main item tag 0x0 [ 102.018155][ T312] cherry 0003:046A:0027.0015: unknown main item tag 0x0 [ 102.025123][ T312] cherry 0003:046A:0027.0015: unknown main item tag 0x0 [ 102.032205][ T312] cherry 0003:046A:0027.0015: unknown main item tag 0x0 [ 102.039192][ T312] cherry 0003:046A:0027.0015: unknown main item tag 0x0 [ 102.046221][ T312] cherry 0003:046A:0027.0015: unknown main item tag 0x0 [ 102.053296][ T312] cherry 0003:046A:0027.0015: unknown main item tag 0x0 [ 102.060294][ T312] cherry 0003:046A:0027.0015: unknown main item tag 0x0 [ 102.067529][ T312] cherry 0003:046A:0027.0015: unknown main item tag 0x0 [ 102.074484][ T312] cherry 0003:046A:0027.0015: unknown main item tag 0x0 [ 102.081610][ T312] cherry 0003:046A:0027.0015: unknown main item tag 0x0 [ 102.088657][ T312] cherry 0003:046A:0027.0015: unknown main item tag 0x0 [ 102.095629][ T312] cherry 0003:046A:0027.0015: unknown main item tag 0x0 [ 102.102623][ T312] cherry 0003:046A:0027.0015: unknown main item tag 0x0 [ 102.109665][ T312] cherry 0003:046A:0027.0015: unknown main item tag 0x0 [ 102.116675][ T312] cherry 0003:046A:0027.0015: unknown main item tag 0x0 [ 102.123651][ T312] cherry 0003:046A:0027.0015: unknown main item tag 0x0 [ 102.130667][ T312] cherry 0003:046A:0027.0015: unknown main item tag 0x0 [ 102.138559][ T312] cherry 0003:046A:0027.0015: hidraw0: USB HID v0.10 Device [HID 046a:0027] on usb-dummy_hcd.3-1/input0 [ 102.143751][ T2544] udevd[2544]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 102.159311][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 102.187749][ T9] usb 5-1: device descriptor read/8, error -71 [ 102.214883][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 102.214899][ T36] audit: type=1400 audit(167.217:435): avc: denied { write } for pid=2547 comm="syz.2.633" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 102.317584][ T9] usb 5-1: device descriptor read/8, error -71 [ 102.516534][ T400] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 102.525292][ T2552] netlink: 104 bytes leftover after parsing attributes in process `syz.3.626'. [ 102.547663][ T1053] bridge_slave_1: left allmulticast mode [ 102.553326][ T1053] bridge_slave_1: left promiscuous mode [ 102.559256][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 102.566532][ T1053] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.574284][ T1053] bridge_slave_0: left allmulticast mode [ 102.580020][ T1053] bridge_slave_0: left promiscuous mode [ 102.580053][ T312] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 102.585809][ T1053] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.602066][ T9] usb 5-1: device descriptor read/8, error -71 [ 102.676409][ T400] usb 3-1: Using ep0 maxpacket: 16 [ 102.682775][ T400] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 102.694143][ T400] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 102.696457][ T1053] veth1_macvtap: left promiscuous mode [ 102.703307][ T400] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.708916][ T1053] veth0_vlan: left promiscuous mode [ 102.717600][ T400] usb 3-1: Product: syz [ 102.726564][ T400] usb 3-1: Manufacturer: syz [ 102.731250][ T400] usb 3-1: SerialNumber: syz [ 102.736909][ T400] usb 3-1: config 0 descriptor?? [ 102.742697][ T9] usb 5-1: device descriptor read/8, error -71 [ 102.751686][ T400] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 102.759829][ T400] usb 3-1: Detected FT232R [ 102.769110][ T312] usb 2-1: unable to get BOS descriptor or descriptor too short [ 102.779519][ T312] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.791911][ T312] usb 2-1: string descriptor 0 read error: -22 [ 102.798188][ T312] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 102.807343][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.856978][ T9] usb usb5-port1: unable to enumerate USB device [ 102.917622][ T1053] ------------[ cut here ]------------ [ 102.923137][ T1053] WARNING: CPU: 0 PID: 1053 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 102.933278][ T1053] Modules linked in: [ 102.937310][ T1053] CPU: 0 UID: 0 PID: 1053 Comm: kworker/u8:14 Not tainted syzkaller #0 7512b07cb8b2b81a08448db7682669b21f09f733 [ 102.949159][ T1053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 102.959254][ T1053] Workqueue: netns cleanup_net [ 102.964085][ T1053] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 102.970133][ T1053] Code: e8 21 83 d4 fc 4b 83 3c 3e 00 75 19 e8 85 f2 7a fc 49 81 ff f8 07 00 00 74 1b e8 77 f2 7a fc 49 83 c7 08 eb c9 e8 6c f2 7a fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 102.989786][ T1053] RSP: 0018:ffffc90010a6fb90 EFLAGS: 00010293 [ 102.995872][ T1053] RAX: ffffffff850e6364 RBX: ffff8881274c58c0 RCX: ffff88810bf4e2c0 [ 103.003880][ T1053] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888104b883f0 [ 103.011996][ T1053] RBP: ffffc90010a6fbb0 R08: ffffffff8854fb07 R09: 1ffffffff10a9f60 [ 103.020019][ T1053] R10: dffffc0000000000 R11: fffffbfff10a9f61 R12: dffffc0000000000 [ 103.028055][ T1053] R13: dffffc0000000000 R14: ffff888104b88000 R15: 00000000000003f0 [ 103.036046][ T1053] FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 103.045157][ T1053] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.052980][ T1053] CR2: 00007fcad61d4df4 CR3: 000000011638c000 CR4: 00000000003526b0 [ 103.061040][ T1053] DR0: 000004000002002c DR1: fffeffffff7fff00 DR2: 0000000080000002 [ 103.069143][ T1053] DR3: 0000000000000003 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 103.077177][ T1053] Call Trace: [ 103.080464][ T1053] [ 103.083417][ T1053] cleanup_net+0x6ba/0xc90 [ 103.087897][ T1053] ? __cfi_cleanup_net+0x10/0x10 [ 103.092848][ T1053] ? kick_pool+0xb9/0x540 [ 103.097249][ T1053] process_scheduled_works+0x7f4/0x1060 [ 103.102818][ T1053] worker_thread+0xc99/0x13f0 [ 103.107590][ T1053] kthread+0x2c4/0x360 [ 103.111684][ T1053] ? __cfi_worker_thread+0x10/0x10 [ 103.116857][ T1053] ? __cfi_kthread+0x10/0x10 [ 103.121463][ T1053] ret_from_fork+0x64/0xa0 [ 103.125903][ T1053] ? __cfi_kthread+0x10/0x10 [ 103.130561][ T1053] ret_from_fork_asm+0x1a/0x30 [ 103.135426][ T1053] [ 103.138505][ T1053] ---[ end trace 0000000000000000 ]--- [ 103.144045][ T400] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 103.151193][ T1053] ------------[ cut here ]------------ [ 103.156728][ T1053] WARNING: CPU: 0 PID: 1053 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 103.166979][ T1053] Modules linked in: [ 103.170893][ T1053] CPU: 0 UID: 0 PID: 1053 Comm: kworker/u8:14 Tainted: G W syzkaller #0 7512b07cb8b2b81a08448db7682669b21f09f733 [ 103.184267][ T1053] Tainted: [W]=WARN [ 103.188107][ T1053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 103.198224][ T1053] Workqueue: netns cleanup_net [ 103.203013][ T1053] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 103.209150][ T1053] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 30 f2 7a fc 49 81 ff f8 07 00 00 74 1b e8 22 f2 7a fc 49 83 c7 08 eb c5 e8 17 f2 7a fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 07 f2 7a fc 5b 41 5c 41 5e 41 [ 103.228819][ T1053] RSP: 0018:ffffc90010a6fb90 EFLAGS: 00010293 [ 103.234927][ T1053] RAX: ffffffff850e63b9 RBX: ffff888104b88800 RCX: ffff88810bf4e2c0 [ 103.242962][ T1053] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888104b88808 [ 103.250976][ T1053] RBP: ffffc90010a6fbb0 R08: ffffffff8854fb07 R09: 1ffffffff10a9f60 [ 103.259061][ T1053] R10: dffffc0000000000 R11: fffffbfff10a9f61 R12: dffffc0000000000 [ 103.267107][ T1053] R13: dffffc0000000000 R14: ffff888104b88000 R15: 0000000000000008 [ 103.275097][ T1053] FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 103.284085][ T1053] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.290731][ T1053] CR2: 00007fcad61d4df4 CR3: 000000011638c000 CR4: 00000000003526b0 [ 103.298767][ T1053] DR0: 000004000002002c DR1: fffeffffff7fff00 DR2: 0000000080000002 [ 103.306776][ T1053] DR3: 0000000000000003 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 103.314768][ T1053] Call Trace: [ 103.318098][ T1053] [ 103.321036][ T1053] cleanup_net+0x6ba/0xc90 [ 103.325473][ T1053] ? __cfi_cleanup_net+0x10/0x10 [ 103.330479][ T1053] ? kick_pool+0xb9/0x540 [ 103.334862][ T1053] process_scheduled_works+0x7f4/0x1060 [ 103.340473][ T1053] worker_thread+0xc99/0x13f0 [ 103.345307][ T1053] kthread+0x2c4/0x360 [ 103.349545][ T1053] ? __cfi_worker_thread+0x10/0x10 [ 103.354680][ T1053] ? __cfi_kthread+0x10/0x10 [ 103.359337][ T1053] ret_from_fork+0x64/0xa0 [ 103.363764][ T1053] ? __cfi_kthread+0x10/0x10 [ 103.368408][ T1053] ret_from_fork_asm+0x1a/0x30 [ 103.373188][ T1053] [ 103.376250][ T1053] ---[ end trace 0000000000000000 ]--- [ 103.383850][ T400] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 103.407658][ T1053] ------------[ cut here ]------------ [ 103.413169][ T1053] WARNING: CPU: 0 PID: 1053 at net/xfrm/xfrm_state.c:3230 xfrm_state_fini+0x2be/0x310 [ 103.422773][ T1053] Modules linked in: [ 103.426711][ T1053] CPU: 0 UID: 0 PID: 1053 Comm: kworker/u8:14 Tainted: G W syzkaller #0 7512b07cb8b2b81a08448db7682669b21f09f733 [ 103.440045][ T1053] Tainted: [W]=WARN [ 103.443853][ T1053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 103.453964][ T1053] Workqueue: netns cleanup_net [ 103.458769][ T1053] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 103.464335][ T1053] Code: 3c 20 00 74 08 48 89 df e8 bf 5f ef fc 48 8b 3b e8 67 4c da fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 12 cf 95 fc <0f> 0b e9 b0 fd ff ff e8 06 cf 95 fc 0f 0b e9 18 fe ff ff e8 fa ce [ 103.483992][ T1053] RSP: 0018:ffffc90010a6fb70 EFLAGS: 00010293 [ 103.490086][ T1053] RAX: ffffffff84f386be RBX: ffff8881274c58c0 RCX: ffff88810bf4e2c0 [ 103.498114][ T1053] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff88810bf4e2c0 [ 103.506147][ T1053] RBP: ffffc90010a6fb98 R08: ffffffff8854fb07 R09: 1ffffffff10a9f60 [ 103.514130][ T1053] R10: dffffc0000000000 R11: fffffbfff10a9f61 R12: 1ffffffff10a9cb4 [ 103.522140][ T1053] R13: dffffc0000000000 R14: ffff8881274c64c0 R15: dffffc0000000000 [ 103.530148][ T1053] FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 103.535610][ T36] audit: type=1400 audit(168.538:436): avc: denied { ioctl } for pid=2550 comm="syz.1.634" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.539129][ T1053] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.539146][ T1053] CR2: 00007fcad61d4df4 CR3: 0000000007caa000 CR4: 00000000003526b0 [ 103.539162][ T1053] DR0: 000004000002002c DR1: fffeffffff7fff00 DR2: 0000000080000002 [ 103.563277][ T312] usb 2-1: current rate 47877 is different from the runtime rate 48000 [ 103.569839][ T1053] DR3: 0000000000000003 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 103.589077][ T2548] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 103.594086][ T1053] Call Trace: [ 103.604176][ T36] audit: type=1400 audit(168.608:437): avc: denied { relabelto } for pid=2547 comm="syz.2.633" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 103.611489][ T1053] [ 103.620228][ T31] usb 3-1: USB disconnect, device number 33 [ 103.639705][ T1053] xfrm_net_exit+0x31/0x80 [ 103.639744][ T1053] cleanup_net+0x6ba/0xc90 [ 103.657421][ T1053] ? __cfi_cleanup_net+0x10/0x10 [ 103.662420][ T1053] ? kick_pool+0xb9/0x540 [ 103.666796][ T1053] process_scheduled_works+0x7f4/0x1060 [ 103.672357][ T1053] worker_thread+0xc99/0x13f0 [ 103.677059][ T1053] kthread+0x2c4/0x360 [ 103.681133][ T1053] ? __cfi_worker_thread+0x10/0x10 [ 103.686282][ T1053] ? __cfi_kthread+0x10/0x10 [ 103.690909][ T1053] ret_from_fork+0x64/0xa0 [ 103.695321][ T1053] ? __cfi_kthread+0x10/0x10 [ 103.700014][ T1053] ret_from_fork_asm+0x1a/0x30 [ 103.704804][ T1053] [ 103.707867][ T1053] ---[ end trace 0000000000000000 ]--- [ 103.713526][ T1053] ------------[ cut here ]------------ [ 103.719058][ T1053] WARNING: CPU: 1 PID: 1053 at net/xfrm/xfrm_state.c:3235 xfrm_state_fini+0x2d6/0x310 [ 103.728849][ T1053] Modules linked in: [ 103.732764][ T1053] CPU: 1 UID: 0 PID: 1053 Comm: kworker/u8:14 Tainted: G W syzkaller #0 7512b07cb8b2b81a08448db7682669b21f09f733 [ 103.746087][ T1053] Tainted: [W]=WARN [ 103.749886][ T1053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 103.759981][ T1053] Workqueue: netns cleanup_net [ 103.764759][ T1053] RIP: 0010:xfrm_state_fini+0x2d6/0x310 [ 103.770337][ T1053] Code: 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 12 cf 95 fc 0f 0b e9 b0 fd ff ff e8 06 cf 95 fc 0f 0b e9 18 fe ff ff e8 fa ce 95 fc <0f> 0b e9 8c fe ff ff e8 ee ce 95 fc 0f 0b e9 f9 fe ff ff e8 e2 ce [ 103.789999][ T1053] RSP: 0018:ffffc90010a6fb70 EFLAGS: 00010293 [ 103.796114][ T1053] RAX: ffffffff84f386d6 RBX: ffff8881274c58c0 RCX: ffff88810bf4e2c0 [ 103.797278][ T9] usb 2-1: USB disconnect, device number 46 [ 103.804131][ T1053] RDX: 0000000000000000 RSI: ffff888102356180 RDI: ffff8881000418c0 [ 103.804152][ T1053] RBP: ffffc90010a6fb98 R08: 000000000171b1db R09: 00000000e17e577c [ 103.804164][ T1053] R10: 000000000000000d R11: ffffffff81778140 R12: ffff888102356280 [ 103.804176][ T1053] R13: 1ffff11024e98c9c R14: 0000000000000040 R15: ffff8881274c64e0 [ 103.804188][ T1053] FS: 0000000000000000(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000 [ 103.851014][ T1053] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.857650][ T1053] CR2: 000056026eabc5f0 CR3: 0000000121c7e000 CR4: 00000000003526b0 [ 103.865627][ T1053] Call Trace: [ 103.868930][ T1053] [ 103.871863][ T1053] xfrm_net_exit+0x31/0x80 [ 103.876327][ T1053] cleanup_net+0x6ba/0xc90 [ 103.880780][ T1053] ? __cfi_cleanup_net+0x10/0x10 [ 103.885705][ T1053] ? kick_pool+0xb9/0x540 [ 103.890061][ T1053] process_scheduled_works+0x7f4/0x1060 [ 103.895609][ T1053] worker_thread+0xc99/0x13f0 [ 103.900335][ T1053] kthread+0x2c4/0x360 [ 103.904445][ T1053] ? __cfi_worker_thread+0x10/0x10 [ 103.909615][ T1053] ? __cfi_kthread+0x10/0x10 [ 103.914244][ T1053] ret_from_fork+0x64/0xa0 [ 103.918698][ T1053] ? __cfi_kthread+0x10/0x10 [ 103.923312][ T1053] ret_from_fork_asm+0x1a/0x30 [ 103.928103][ T1053] [ 103.931143][ T1053] ---[ end trace 0000000000000000 ]--- [ 103.936956][ T1053] ------------[ cut here ]------------ [ 103.942452][ T1053] WARNING: CPU: 0 PID: 1053 at net/xfrm/xfrm_state.c:3237 xfrm_state_fini+0x2e2/0x310 [ 103.952056][ T1053] Modules linked in: [ 103.955963][ T1053] CPU: 0 UID: 0 PID: 1053 Comm: kworker/u8:14 Tainted: G W syzkaller #0 7512b07cb8b2b81a08448db7682669b21f09f733 [ 103.969242][ T1053] Tainted: [W]=WARN [ 103.973025][ T1053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 103.983109][ T1053] Workqueue: netns cleanup_net [ 103.987900][ T1053] RIP: 0010:xfrm_state_fini+0x2e2/0x310 [ 103.993451][ T1053] Code: cc e8 12 cf 95 fc 0f 0b e9 b0 fd ff ff e8 06 cf 95 fc 0f 0b e9 18 fe ff ff e8 fa ce 95 fc 0f 0b e9 8c fe ff ff e8 ee ce 95 fc <0f> 0b e9 f9 fe ff ff e8 e2 ce 95 fc 0f 0b e9 66 ff ff ff 89 f9 80 [ 104.013072][ T1053] RSP: 0018:ffffc90010a6fb70 EFLAGS: 00010293 [ 104.019189][ T1053] RAX: ffffffff84f386e2 RBX: ffff8881274c58c0 RCX: ffff88810bf4e2c0 [ 104.027202][ T1053] RDX: 0000000000000000 RSI: ffff888102356280 RDI: ffff8881000418c0 [ 104.035192][ T1053] RBP: ffffc90010a6fb98 R08: 00000000bbac6b39 R09: 000000009278cbf0 [ 104.043228][ T1053] R10: 000000000000000d R11: ffffffff81778140 R12: ffff888102356e80 [ 104.051229][ T1053] R13: 1ffff11024e98c9b R14: 0000000000000040 R15: ffff8881274c64d8 [ 104.059263][ T1053] FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 104.068272][ T1053] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.074950][ T1053] CR2: 0000001b2f210ff8 CR3: 000000010bf18000 CR4: 00000000003526b0 [ 104.082956][ T1053] DR0: 000004000002002c DR1: fffeffffff7fff00 DR2: 0000000080000002 [ 104.090953][ T1053] DR3: 0000000000000003 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 104.098953][ T1053] Call Trace: [ 104.102227][ T1053] [ 104.105142][ T1053] xfrm_net_exit+0x31/0x80 [ 104.109593][ T1053] cleanup_net+0x6ba/0xc90 [ 104.114024][ T1053] ? __cfi_cleanup_net+0x10/0x10 [ 104.114497][ T312] usb 4-1: USB disconnect, device number 35 [ 104.119020][ T1053] ? kick_pool+0xb9/0x540 [ 104.129256][ T1053] process_scheduled_works+0x7f4/0x1060 [ 104.134805][ T1053] worker_thread+0xc99/0x13f0 [ 104.139590][ T1053] kthread+0x2c4/0x360 [ 104.143682][ T1053] ? __cfi_worker_thread+0x10/0x10 [ 104.148832][ T1053] ? __cfi_kthread+0x10/0x10 [ 104.153437][ T1053] ret_from_fork+0x64/0xa0 [ 104.157903][ T1053] ? __cfi_kthread+0x10/0x10 [ 104.162504][ T1053] ret_from_fork_asm+0x1a/0x30 [ 104.167311][ T1053] [ 104.170332][ T1053] ---[ end trace 0000000000000000 ]--- [ 104.176242][ T1053] ------------[ cut here ]------------ [ 104.181717][ T1053] WARNING: CPU: 0 PID: 1053 at net/xfrm/xfrm_state.c:3239 xfrm_state_fini+0x2ee/0x310 [ 104.191314][ T1053] Modules linked in: [ 104.195209][ T1053] CPU: 0 UID: 0 PID: 1053 Comm: kworker/u8:14 Tainted: G W syzkaller #0 7512b07cb8b2b81a08448db7682669b21f09f733 [ 104.208529][ T1053] Tainted: [W]=WARN [ 104.212329][ T1053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.222418][ T1053] Workqueue: netns cleanup_net [ 104.227217][ T1053] RIP: 0010:xfrm_state_fini+0x2ee/0x310 [ 104.232757][ T1053] Code: ff e8 06 cf 95 fc 0f 0b e9 18 fe ff ff e8 fa ce 95 fc 0f 0b e9 8c fe ff ff e8 ee ce 95 fc 0f 0b e9 f9 fe ff ff e8 e2 ce 95 fc <0f> 0b e9 66 ff ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 8e fd ff [ 104.252393][ T1053] RSP: 0018:ffffc90010a6fb70 EFLAGS: 00010293 [ 104.258524][ T1053] RAX: ffffffff84f386ee RBX: ffff8881274c58c0 RCX: ffff88810bf4e2c0 [ 104.266535][ T1053] RDX: 0000000000000000 RSI: ffff888102356e80 RDI: ffff8881000418c0 [ 104.274514][ T1053] RBP: ffffc90010a6fb98 R08: 0000000010785f8f R09: 000000005a4d27b5 [ 104.282530][ T1053] R10: 000000000000000d R11: ffffffff81778140 R12: ffff888102356900 [ 104.290556][ T1053] R13: 1ffff11024e98c9a R14: 0000000000000040 R15: ffff8881274c64d0 [ 104.298562][ T1053] FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 104.307542][ T1053] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.314139][ T1053] CR2: 0000001b2f210ff8 CR3: 000000010bf18000 CR4: 00000000003526b0 [ 104.322131][ T1053] DR0: 000004000002002c DR1: fffeffffff7fff00 DR2: 0000000080000002 [ 104.330329][ T1053] DR3: 0000000000000003 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 104.338355][ T1053] Call Trace: [ 104.341636][ T1053] [ 104.344608][ T1053] xfrm_net_exit+0x31/0x80 [ 104.349098][ T1053] cleanup_net+0x6ba/0xc90 [ 104.353525][ T1053] ? __cfi_cleanup_net+0x10/0x10 [ 104.358513][ T1053] ? kick_pool+0xb9/0x540 [ 104.362852][ T1053] process_scheduled_works+0x7f4/0x1060 [ 104.368463][ T1053] worker_thread+0xc99/0x13f0 [ 104.373159][ T1053] kthread+0x2c4/0x360 [ 104.377305][ T1053] ? __cfi_worker_thread+0x10/0x10 [ 104.382431][ T1053] ? __cfi_kthread+0x10/0x10 [ 104.387102][ T1053] ret_from_fork+0x64/0xa0 [ 104.391530][ T1053] ? __cfi_kthread+0x10/0x10 [ 104.396165][ T1053] ret_from_fork_asm+0x1a/0x30 [ 104.400944][ T1053] [ 104.403967][ T1053] ---[ end trace 0000000000000000 ]--- [ 104.409589][ T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 104.419307][ T31] ftdi_sio 3-1:0.0: device disconnected