last executing test programs: 2m36.30633264s ago: executing program 0 (id=6): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x5, 0x2, 0x21, @empty, @empty, 0x8000, 0x1, 0x100, 0x7}}) r2 = fsopen(&(0x7f0000000180)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='rootcontext\xf3\xa0n\xaa\xa5m\xb5\xc6\x9f\x9f\x17\xac\x962v\xf2\x02a\xcc\x06\x00\x00\x00\xe4\x95\xf5\r\xe3c\x19\x18\v*\x88\x84\xf8[\xa97\xe7\'@\xb0\xdbbJ\x0f\xa9\xd9\x91\x9d\x85~7M\xe2\xde\xcb\xb1$\xfa\xba\xc7\x84\xcb\x95\xb7\b\xde\x9c\x8e\tv\x1dRa4\xda\xbb\xe6f*\xe8\x19\x02+\xa4kg\xa0\x1c\x06\r\xa0\x02C\xce5\xf5\x15\x8a\x88\xd4\xd3\xcf\xb8\x1e\x8c\x1dyO\x8a\x02\x02\x00\x00\x00\x00\x00\x00\x00\x99!\xf1\xb7S\xdb\xcd\xc7\n\xa0g\x18`z\x04\xcf\x80]6\xafL\x13fy\xad#8\x9c\xae\xc4\x00\x01\xed\x04^m%M\x9d\xed\x10\xa8\x1c\xbc_\xd1}=s\xd5\xc2\x92\xdd\xed\x11\xd5', &(0x7f0000000100)='E\x00\x03\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='.\x00', &(0x7f0000000340)='\x00', 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x401, 0x12) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000e36000/0x4000)=nil, &(0x7f000044d000/0x3000)=nil, 0x4000, 0x3}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x401, 0x0, 0x1ff}) mprotect(&(0x7f0000478000/0x4000)=nil, 0x4000, 0x2000001) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000224e0000", 0x58}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r7) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$unix(r8, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet_tcp_int(r8, 0x6, 0x19, &(0x7f00000001c0)=0x3, 0x4) ppoll(&(0x7f0000000100)=[{r8, 0x5082}], 0x1, 0x0, 0x0, 0x0) 2m36.123993749s ago: executing program 0 (id=11): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) keyctl$invalidate(0x15, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_expedited', 0x169a82, 0x109) fsconfig$FSCONFIG_SET_PATH(r1, 0x9c, 0x0, 0x0, r1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x185200, 0x0) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000180)=0x7) keyctl$invalidate(0x15, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, &(0x7f0000000040)) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f00000012c0)={{r0}, "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"}) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r3) r4 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'veth0\x00', {0x2, 0x4e20, @rand_addr=0xdffffc00}}) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mysys/bus/pci/devices/0000:00:01.0/enable\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='1', 0x1) write$make_it_fail(r5, &(0x7f0000000040)='0\x00', 0x2) keyctl$read(0xb, r3, &(0x7f00000002c0)=""/4096, 0x1000) keyctl$search(0xa, r3, &(0x7f0000000080)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, r3) 2m36.120603599s ago: executing program 0 (id=12): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="01031e0003001400060066f7cb6e00140601fc000000000000088000000000000001ff020000000000000000000000000001"], 0x46) 2m36.077390801s ago: executing program 0 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) unshare(0x6c000600) syz_clone3(&(0x7f0000000340)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x40) pidfd_send_signal(r0, 0x5, &(0x7f00000000c0)={0x5, 0x8, 0xffffffc4}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f000000b640)='./file1\x00', &(0x7f000000b680), 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) (async) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (async) unshare(0x6c000600) (async) syz_clone3(&(0x7f0000000340)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) pidfd_send_signal(r0, 0x5, &(0x7f00000000c0)={0x5, 0x8, 0xffffffc4}, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f000000b640)='./file1\x00', &(0x7f000000b680), 0x4000) (async) 2m36.059197542s ago: executing program 0 (id=14): r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000540)=ANY=[@ANYBLOB="120100020000002082052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a00000b7f00090401efff01022000090401010101022000090501"], 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000e00)={0x44, &(0x7f0000000bc0)={0x40, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m35.943285577s ago: executing program 0 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) (async) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x8, @local, 0x22}, 0x1c) (async) setsockopt$inet6_int(r3, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) setresuid(0xee01, 0xffffffffffffffff, r4) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8000, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './cgroup'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async) r5 = socket$nl_route(0x10, 0x3, 0x0) write(r5, &(0x7f0000000080)="2c0000001a000100000000000000000002200000000000000000000008000160e00000010800030001000000", 0x2c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) (async) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140200003400100029bd7000fedbdf250c00000051b066dbd8f45b7d05b76a9ef28119fe90fa30acc5e1184c2a11088ee107eb4b9aff03a6b23ba53b239589a1ef8a09b9f061b241d1dbd914b759eafa55aeddf45be92d63dbb06824c00c1a9d9c5956c45426a8c20ff3630b90ceabe1a7d730dfc18a96e39c39101287572c50ec9c08c6588b88108f715b217bf9aa281b435c01bd5a69eb2c072c3709345447854d2da65333f20ced4575f22019c8c9f70793a0161617fd39b490e2010193544a72907fcf67e466b5f7dfcd9224405ce55c9536b2c27c37a972f531080073000200000005000d0000000000f9ff70cacc59f4db6f88d147c998e04d1d728bdf21ccb56488eba7e5758d4a58923e3a0801bf72e4cad0fc61f65a23d13943d3432c221f7215a4697301d63bafc52ff7c82081128aa1c436eadd14bc4da67a589e4dd110cd8d318419b54a7c96016dab8a10437bd9e1ff6c1df9d457fa043ccd93e547335d1c3dd73798ab2ba8800f8957349720e8f33457244108009a001c00000061813b901d46a97887e0c1ac8ee05c0b4cb78c86e51d37c768ad7c863017b9d24e9684d85c5f8078c34557f94f74b17aded08b725fce6894564c49e179e6fb30b1c3ce224351f9066de52e345018a8fafe8a4100fc6faa6fee6578ca67a5808329d0af6c2f5848a9692dd622682d0b29addfc7cd5967f31c11062fbea93c16703c25d20fe097a459a1895991d8be45852c00005f8f267d622a2936a81d085ab77da75af6a3af54d986df4d5c"], 0x214}}, 0x10) (async) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x2) (async) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001100)='cgroup.controllers\x00', 0x275a, 0x0) 2m35.902605909s ago: executing program 32 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) (async) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x8, @local, 0x22}, 0x1c) (async) setsockopt$inet6_int(r3, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) setresuid(0xee01, 0xffffffffffffffff, r4) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8000, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './cgroup'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async) r5 = socket$nl_route(0x10, 0x3, 0x0) write(r5, &(0x7f0000000080)="2c0000001a000100000000000000000002200000000000000000000008000160e00000010800030001000000", 0x2c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) (async) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140200003400100029bd7000fedbdf250c00000051b066dbd8f45b7d05b76a9ef28119fe90fa30acc5e1184c2a11088ee107eb4b9aff03a6b23ba53b239589a1ef8a09b9f061b241d1dbd914b759eafa55aeddf45be92d63dbb06824c00c1a9d9c5956c45426a8c20ff3630b90ceabe1a7d730dfc18a96e39c39101287572c50ec9c08c6588b88108f715b217bf9aa281b435c01bd5a69eb2c072c3709345447854d2da65333f20ced4575f22019c8c9f70793a0161617fd39b490e2010193544a72907fcf67e466b5f7dfcd9224405ce55c9536b2c27c37a972f531080073000200000005000d0000000000f9ff70cacc59f4db6f88d147c998e04d1d728bdf21ccb56488eba7e5758d4a58923e3a0801bf72e4cad0fc61f65a23d13943d3432c221f7215a4697301d63bafc52ff7c82081128aa1c436eadd14bc4da67a589e4dd110cd8d318419b54a7c96016dab8a10437bd9e1ff6c1df9d457fa043ccd93e547335d1c3dd73798ab2ba8800f8957349720e8f33457244108009a001c00000061813b901d46a97887e0c1ac8ee05c0b4cb78c86e51d37c768ad7c863017b9d24e9684d85c5f8078c34557f94f74b17aded08b725fce6894564c49e179e6fb30b1c3ce224351f9066de52e345018a8fafe8a4100fc6faa6fee6578ca67a5808329d0af6c2f5848a9692dd622682d0b29addfc7cd5967f31c11062fbea93c16703c25d20fe097a459a1895991d8be45852c00005f8f267d622a2936a81d085ab77da75af6a3af54d986df4d5c"], 0x214}}, 0x10) (async) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x2) (async) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001100)='cgroup.controllers\x00', 0x275a, 0x0) 2m13.244218979s ago: executing program 1 (id=217): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x33, 0x65, 0x36, 0x65, 0x66, 0x34, 0x63, 0x64, 0x31, 0x1d, 0x38, 0x37, 0x38, 0x0, 0x36, 0x33]}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x3d}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x30, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x37, 0x0, 0x30, 0x32, 0x34, 0x64, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x35, 0x38, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x63, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000800)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566768899aabbccddeeff001122c6445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x31, 0x34, 0x30, 0x38, 0x34, 0x32, 0x62, 0x30, 0x63, 0x66, 0x31, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x34, 0x65, 0x30, 0x65, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) futex(0x0, 0x3, 0x80000001, 0x0, 0x0, 0x100001) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2c", 0x9a}], 0x1}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0xea}, 0x0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x36, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x67, 0x63, 0x66, 0x30, 0x64, 0x31, 0x30, 0x66]}, &(0x7f0000000780)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aaaabbccddeeff00", 0x10}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) fsopen(&(0x7f0000000000)='vfat\x00', 0x0) 2m13.221091551s ago: executing program 1 (id=218): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="01031e0003001400060066f7cb6e00140601fc0000f5ffffff000000000000000001ff020000000000000000000000000001"], 0x46) 2m13.100032886s ago: executing program 1 (id=219): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 2m11.556087919s ago: executing program 1 (id=226): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='debugfs\x00', 0xc00, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x80303d, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) fsopen(&(0x7f0000000000)='vfat\x00', 0x0) 2m11.529523131s ago: executing program 1 (id=227): r0 = socket$tipc(0x1e, 0x5, 0x0) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) connect$tipc(r1, &(0x7f0000000180)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x2}}, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, r2, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8088}, 0x4044010) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x40043, 0x0, 0x3, 0x3}, 0x10) (async) landlock_create_ruleset(0x0, 0x0, 0x2) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x1, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48001}, 0x20044095) 2m11.415567406s ago: executing program 1 (id=229): syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000280)=""/200, 0xc8}], 0x1, 0x3, 0x0) (async) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000280)=""/200, 0xc8}], 0x1, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r1, @ANYBLOB="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"], 0xc4}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) (async) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r5 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0240000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0xffffff79, 0x0, 0x0, 0x0}) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x4, 0x800000000004, @tid=r6}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_control_io$sierra_net(r5, 0x0, 0x0) (async) syz_usb_control_io$sierra_net(r5, 0x0, 0x0) listen(r4, 0x3) ppoll(&(0x7f0000000080)=[{r0, 0x210}], 0x1, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="ff00a800d96143d0d45ee436d339d082183011be5e29859838bbc05404962708e6b8386819dcd026dcaad84297ae35326be7afe9b6b5ea46761c9b2b1bd42a8fa34d3096885b081cc97befc00668c20c363d4601833bb83b41bcc4062325fb7a7a82a23518df4e35d08eb83754d0f305df2690065ad4f4f6956c616c3110831024f1fcfab4cd551dc4a761d3cf0022f069ace315c6bcb9cfd54b876358f5f50c1f", @ANYRES16=r7, @ANYBLOB="010425bd7000ffdbdf2509000000180001801400020076657468315f746f5f7465616d000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000080) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) close_range(r2, 0xffffffffffffffff, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r8, 0x0, &(0x7f0000000080)) readlink(0x0, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket(0x10, 0x803, 0x0) (async) socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000180)="12fff026b100e7ef0000000000e1a0", 0xf, 0x0, 0x0, 0x0) 2m11.371223388s ago: executing program 33 (id=229): syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000280)=""/200, 0xc8}], 0x1, 0x3, 0x0) (async) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000280)=""/200, 0xc8}], 0x1, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r1, @ANYBLOB="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"], 0xc4}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) (async) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r5 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0240000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0xffffff79, 0x0, 0x0, 0x0}) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x4, 0x800000000004, @tid=r6}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_control_io$sierra_net(r5, 0x0, 0x0) (async) syz_usb_control_io$sierra_net(r5, 0x0, 0x0) listen(r4, 0x3) ppoll(&(0x7f0000000080)=[{r0, 0x210}], 0x1, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="ff00a800d96143d0d45ee436d339d082183011be5e29859838bbc05404962708e6b8386819dcd026dcaad84297ae35326be7afe9b6b5ea46761c9b2b1bd42a8fa34d3096885b081cc97befc00668c20c363d4601833bb83b41bcc4062325fb7a7a82a23518df4e35d08eb83754d0f305df2690065ad4f4f6956c616c3110831024f1fcfab4cd551dc4a761d3cf0022f069ace315c6bcb9cfd54b876358f5f50c1f", @ANYRES16=r7, @ANYBLOB="010425bd7000ffdbdf2509000000180001801400020076657468315f746f5f7465616d000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000080) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) close_range(r2, 0xffffffffffffffff, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r8, 0x0, &(0x7f0000000080)) readlink(0x0, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket(0x10, 0x803, 0x0) (async) socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000180)="12fff026b100e7ef0000000000e1a0", 0xf, 0x0, 0x0, 0x0) 1m19.2558579s ago: executing program 4 (id=667): mlockall(0x11ebf303bc655224) r0 = socket(0x10, 0x3, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@dev, 0x0}, &(0x7f0000000040)=0x14) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x101}, {0xa, 0x4e22, 0x80, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x8}, 0x0, {[0x401, 0x6, 0x7, 0x65c, 0x0, 0x9, 0x7, 0x5]}}, 0x5c) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, 0xf7, 0x5, 0x9, 0x500, 0xa, 0x40000, r1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="30de0000000101040002000000240001801400018008000100e000000108000200e096e5d145cedc8b67ccd64c752c59260000010c000280050001000000008d15c53656db00040018801ca1e4adf7f5e4291ebdd30f55000f80080003400000000908000140000000090800024000000080d953a2401e92956444ff65f20058f1e9021699903f93d769b1aa067b"], 0x58}, 0x1, 0x0, 0x0, 0x2408c843}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000500)={'ip_vti0\x00', 0x0, 0x40, 0x700, 0xffffffff, 0x5, {{0x17, 0x4, 0x0, 0x37, 0x5c, 0x64, 0x0, 0x7, 0x29, 0x0, @local, @remote, {[@cipso={0x86, 0x15, 0x0, [{0xe6a8090a5dcf396a, 0xf, "048f0027dc6b4179f0972cf315"}]}, @rr={0x7, 0x27, 0xa, [@local, @private=0xa010100, @rand_addr=0x64010101, @multicast2, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @timestamp_addr={0x44, 0xc, 0xa0, 0x1, 0x9, [{@loopback, 0x1ff}]}]}}}}}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000000)="c8050000200019", 0x7}], 0x45) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r5 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f0000001280)={{0x12, 0x1, 0x310, 0xfa, 0x2a, 0xbe, 0x8, 0x4e6, 0xb, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x2, 0x3, 0x6, 0x40, 0x3, "", [{{0x9, 0x4, 0x45, 0x1, 0x2, 0x9, 0xd4, 0x7b, 0x6, [], [{{0x9, 0x5, 0xd, 0x529b73d16fdd1da, 0x20, 0x1, 0x0, 0x7}}, {{0x9, 0x5, 0x8, 0x2, 0x20, 0x9, 0x6, 0x5}}]}}, {{0x9, 0x4, 0x8, 0x3, 0x0, 0xf8, 0x25, 0xd6, 0x3}}]}}]}}, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0}) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600c31d7ffc3c15038704000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) dup2(r5, r3) 1m17.985667189s ago: executing program 4 (id=674): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) r1 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0) 1m16.773696987s ago: executing program 4 (id=689): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="01031e0003001400060066f7cb6e00140601fc000000000008800000000000000001ff020000000000000000000000000001"], 0x46) 1m16.685410061s ago: executing program 4 (id=690): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00') unshare(0x60000600) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x9, 0x4, 0x0, @empty, @broadcast}}}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000), 0x4) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x804, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/200, 0xc8}, {&(0x7f0000001980)=""/285, 0x11d}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f0000000600)=""/225, 0xe1}, {&(0x7f00000003c0)=""/92, 0x5c}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f0000000080)=""/89, 0x59}], 0x9}, 0x1207}], 0x3, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_names\x00') r4 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) sendfile(r4, r4, 0x0, 0x3) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f0000000100)={0x8, r4, 'id1\x00'}) 1m16.616068114s ago: executing program 4 (id=691): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x92000000) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x449) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') 1m16.584278766s ago: executing program 4 (id=693): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0) pread64(r0, &(0x7f0000000040)=""/150, 0x96, 0x7f) pwrite64(r0, &(0x7f0000001000)="fc", 0x1, 0x1000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0xcc) syz_io_uring_setup(0x574b, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0xffffffff, 0x2b7, 0x0, r5}, &(0x7f0000000080), &(0x7f0000000180)=0x0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000300)='./dev/ram0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRES16=r6, @ANYRESOCT=r2, @ANYRES8=r0, @ANYRES32, @ANYRES16=r2]) r7 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000003440)={'tunl0\x00', &(0x7f00000033c0)={'sit0\x00', 0x0, 0x40, 0x8000, 0xf3, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x200, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @loopback}}}}) writev(r8, &(0x7f0000002f00)=[{&(0x7f0000000180)="ac0dfc69", 0x4}], 0x1) close_range(r7, r9, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xf00, 0x0) ioctl$TIOCSETD(r12, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r12, 0x400455c8, 0x1000000000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'ip6tnl0\x00', {}, 0x5}) ioctl$sock_bt_hci(r11, 0x800448f0, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000500)={[0xec8, 0xfffffffffffffffe, 0xe9b, 0xffff, 0x3, 0x45, 0x44237, 0x8400000000000009, 0x84, 0x9c3, 0x200000ffff, 0xbc, 0x8, 0x6, 0x1, 0xfffffdfffffffffd], 0x200000, 0x43712}) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) read$FUSE(r5, &(0x7f0000003480)={0x2020}, 0x2020) 1m16.50025857s ago: executing program 34 (id=693): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0) pread64(r0, &(0x7f0000000040)=""/150, 0x96, 0x7f) pwrite64(r0, &(0x7f0000001000)="fc", 0x1, 0x1000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0xcc) syz_io_uring_setup(0x574b, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0xffffffff, 0x2b7, 0x0, r5}, &(0x7f0000000080), &(0x7f0000000180)=0x0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000300)='./dev/ram0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRES16=r6, @ANYRESOCT=r2, @ANYRES8=r0, @ANYRES32, @ANYRES16=r2]) r7 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000003440)={'tunl0\x00', &(0x7f00000033c0)={'sit0\x00', 0x0, 0x40, 0x8000, 0xf3, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x200, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @loopback}}}}) writev(r8, &(0x7f0000002f00)=[{&(0x7f0000000180)="ac0dfc69", 0x4}], 0x1) close_range(r7, r9, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xf00, 0x0) ioctl$TIOCSETD(r12, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r12, 0x400455c8, 0x1000000000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'ip6tnl0\x00', {}, 0x5}) ioctl$sock_bt_hci(r11, 0x800448f0, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000500)={[0xec8, 0xfffffffffffffffe, 0xe9b, 0xffff, 0x3, 0x45, 0x44237, 0x8400000000000009, 0x84, 0x9c3, 0x200000ffff, 0xbc, 0x8, 0x6, 0x1, 0xfffffdfffffffffd], 0x200000, 0x43712}) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) read$FUSE(r5, &(0x7f0000003480)={0x2020}, 0x2020) 34.880760585s ago: executing program 3 (id=1104): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)="306663353a3132323704", 0xa) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x7fff, 0x5, "00620400064a8db42b21c8e5ff1a00"}) (async) syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d0423084839010203010902"], 0x0) (async) r3 = syz_open_pts(r2, 0xc0000) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x11) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r5, 0x29, 0xd0, 0x0, 0x0) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x1}, 0x4) (async) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) (async) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 33.978973417s ago: executing program 3 (id=1117): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x3d}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x30, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x37, 0x0, 0x30, 0x32, 0x34, 0x64, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x35, 0x38, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x63, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000800)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566768899aabbccddeeff001122c6445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x31, 0x34, 0x30, 0x38, 0x34, 0x32, 0x62, 0x30, 0x63, 0x66, 0x31, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x34, 0x65, 0x30, 0x65, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x36, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x67, 0x63, 0x66, 0x30, 0x64, 0x31, 0x30, 0x66]}, &(0x7f0000000780)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aaaabbccddeeff00", 0x10}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 33.960589928s ago: executing program 3 (id=1119): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="2400000064001f03000000000000000008000000ffffffff"], 0x24}], 0x1}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000100)={0x8000000000000000, 0x1, 0x1, 0x2, 0x0, [0xdde, 0x1, 0x7a, 0xc2]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/cpu_dma_latency\x00', 0x20c01, 0x0) writev(r4, &(0x7f0000000700)=[{&(0x7f0000001180)='\x00~Y#\t\x00', 0x6}], 0x1) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x101, 0x0) syz_io_uring_complete(0x0, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) r6 = fcntl$dupfd(r3, 0x406, r0) statx(r5, &(0x7f0000000180)='./dev\x00', 0x1000, 0x800, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAOFF(r6, 0xffffffff80000301, r7, 0x0) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f00000000c0)="f5c89e1e", 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x3e, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e25, 0x4, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x2}, 0x1c) 33.908124761s ago: executing program 3 (id=1120): mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 33.904101051s ago: executing program 3 (id=1121): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000240)={0x2, 0x4e23, @loopback}, 0x1, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000000000000000000000700000083039c000000000079e13fa256494ff9b19cbc3e08c6e24406656f017582cd9837d6f21a698ec91de049c41d81b4b356292f7e27e9ebf05dc18bf22b6fe8e80af1e3551ca6a638b6704ae55816034a53f262e77e3ae8511186bfbc86eff61f2b3bcfca93e924dbe2fe71a08423e1791282bea82707089ffa59023f4e1f8c547bd893e867195f9cd7ae9f3465e0125034d9cb63d0875f563fc8c1e4e2b4ede17f8b56d07068"], 0x18}}], 0x2, 0x0) getpeername(r0, 0x0, &(0x7f00000000c0)) r3 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f00000000c0)=0x6, 0x4) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=ANY=[@ANYRES16=r3], 0x1c}], 0x1}, 0x4) r4 = syz_socket_connect_nvme_tcp() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) add_key(0x0, 0x0, &(0x7f0000000200)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232", 0x88, 0xfffffffffffffffd) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) write$cgroup_netprio_ifpriomap(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='wl'], 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x0, 0x4, 0x3, @mcast2, @rand_addr=' \x01\x00', 0x1, 0x40, 0x7ff, 0x2}}) r7 = getuid() setns(0xc9, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r8) sendmsg$nl_xfrm(r3, &(0x7f0000001480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001440)={&(0x7f0000000300)=@migrate={0x1120, 0x21, 0x1, 0x70bd2b, 0x25dfdbff, {{@in6=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e24, 0x9, 0xf000, 0x3, 0x2, 0x10, 0xa0, 0x32, r6, r7}, 0x6e6bbe, 0x2}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @algo_aead={0x104c, 0x12, {{'morus1280-avx2\x00'}, 0x8000, 0x80, "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"}}, @user_kmaddress={0x2c, 0x13, {@in6=@private1, @in=@private=0xa010100, 0x0, 0x2}}, @iptfs_pkt_size={0x8, 0x29, 0xb1}, @replay_esn_val={0x40, 0x17, {0x9, 0x70bd26, 0x70bd25, 0x70bd2a, 0x70bd2b, 0x8, [0xb5f3, 0x7f, 0xfff, 0x1, 0x6d3a2164, 0x0, 0x2, 0x9, 0xffff]}}, @iptfs_reorder_window={0x6, 0x25, 0xba}]}, 0x1120}, 0x1, 0x0, 0x0, 0x44800}, 0x8000001) recvfrom$inet_nvme(r4, &(0x7f0000000000)=""/109, 0x6d, 0x20, &(0x7f0000000100)=@llc={0x1a, 0x1c, 0xe, 0x4, 0x8, 0x81, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x80) 33.890924422s ago: executing program 3 (id=1122): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x2, 0x3, 0x200000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c616e616d653d73696c656e742c001b8c7f67c183ecce170381ff131e4e7cde7ad758058566c976d028b7327266188d5e13e46c3cd22c3f66a9c5748b97123f37f1ad176fb52068414636dfccad8576b1d3fdb3e12b6a5806f04998e652e7bbce43c1432624f6bdd34e096cb698d77c57fb6281143801a6e1ad1320ac0e960416b7777684deb74c60be693bbc8d88f38be1043119bdbbb2817ebc095244584961085b7c7d5f8cbcaf9fcc9cecebf41a65932b479785fc9ad50ccf2fec1fa119c017eebfcf49e25a0f46fb856e70c90e"]) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c616e616d653d73696c656e742c001b8c7f67c183ecce170381ff131e4e7cde7ad758058566c976d028b7327266188d5e13e46c3cd22c3f66a9c5748b97123f37f1ad176fb52068414636dfccad8576b1d3fdb3e12b6a5806f04998e652e7bbce43c1432624f6bdd34e096cb698d77c57fb6281143801a6e1ad1320ac0e960416b7777684deb74c60be693bbc8d88f38be1043119bdbbb2817ebc095244584961085b7c7d5f8cbcaf9fcc9cecebf41a65932b479785fc9ad50ccf2fec1fa119c017eebfcf49e25a0f46fb856e70c90e"]) 18.840777881s ago: executing program 35 (id=1122): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x2, 0x3, 0x200000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c616e616d653d73696c656e742c001b8c7f67c183ecce170381ff131e4e7cde7ad758058566c976d028b7327266188d5e13e46c3cd22c3f66a9c5748b97123f37f1ad176fb52068414636dfccad8576b1d3fdb3e12b6a5806f04998e652e7bbce43c1432624f6bdd34e096cb698d77c57fb6281143801a6e1ad1320ac0e960416b7777684deb74c60be693bbc8d88f38be1043119bdbbb2817ebc095244584961085b7c7d5f8cbcaf9fcc9cecebf41a65932b479785fc9ad50ccf2fec1fa119c017eebfcf49e25a0f46fb856e70c90e"]) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c616e616d653d73696c656e742c001b8c7f67c183ecce170381ff131e4e7cde7ad758058566c976d028b7327266188d5e13e46c3cd22c3f66a9c5748b97123f37f1ad176fb52068414636dfccad8576b1d3fdb3e12b6a5806f04998e652e7bbce43c1432624f6bdd34e096cb698d77c57fb6281143801a6e1ad1320ac0e960416b7777684deb74c60be693bbc8d88f38be1043119bdbbb2817ebc095244584961085b7c7d5f8cbcaf9fcc9cecebf41a65932b479785fc9ad50ccf2fec1fa119c017eebfcf49e25a0f46fb856e70c90e"]) 6.647037256s ago: executing program 7 (id=1377): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x56e, 0xfd, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xfd, 0x40, 0x80, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x1, 0xa4, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0xe8c}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x7ef, 0xf9, 0x6, 0x8}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x3, 0x3, 0x7, 0x10, 0x1}, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x6e, 0x2, 0x0, 0x0, 0x5, [0xffff00, 0x0]}]}, 0x7, [{0x5f, &(0x7f00000000c0)=@string={0x5f, 0x3, "12b3648a904f9885e25db7594b1c8d1d2b9e20cf7adb4c6c78bf22b5b1c5f1b071d545c3ce58598a17c7ead4a278b33ebe8532d095e529702837715952c5ad15d503e3dd80c29c53ecbf36496b33727ff41fa02f9ec8f93e6fef77624a"}}, {0x7c, &(0x7f0000000140)=@string={0x7c, 0x3, "6e4a0f787585200e3e5a110def5242d65ff503627ba1cb130d73833b41794c3419723dc4872ba895e78d95e7f5690dcd45c62b5b8b4d641bc0c3104f52928799cd45063ca13cf2ba1f916f61296593c322db787c127dc764e89ea41ad39be8c555926aa825aba419eb8b9aa7ff801e9278bb40ab347ba127151c"}}, {0xce, &(0x7f00000001c0)=@string={0xce, 0x3, "127f18ffa4629ac64bb0420d64214c023609193c09845c8a18b8d33eaf45039cfdc7ce6219c80d983aac16543e165ff01d8b6f9084c607339b692ea21955cb824919b28b486411cc54add31c478376889312e81e05e464a770301f15aff843c4c7cc274ad1b50e25778aee1cdeb0d22d1ede4f407abef52423dd351291545a72f9cab05c13bbd879f8acebbbb06ca796c664ec6fb8199aa43f88f9068a961a0f77bfa695253ef07430b393ad47e2706c3be4d68679f9b1c2716437a940248e26985913a4e99ebcd3a8c22345"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x300a}}, {0x64, &(0x7f0000000300)=@string={0x64, 0x3, "d15040db10ddb392c96d5dc1b484d333e325401898334cb95f1169de4f7cdfb1eac93582cca8f2fcb5abb656f52e469f992814ad7920b1cd802fc5aed138a768f4b9d54ed9f6cc86cda30e0e1935da92a06561cca32c23ec7153861e3c94f9c201bc"}}, {0xa, &(0x7f0000000380)=@string={0xa, 0x3, "bd553aed3fee372e"}}, {0x9, &(0x7f00000003c0)=@string={0x9, 0x3, "ed676da66e6017"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, &(0x7f0000000480)={0x40, 0x4, 0x32, {0x32, 0x31, "fe01b6ff3440b329e915cdc4f6be121fedc21ec4d0d7ec80021d79197340d243dad1c9567b0780958f5eaee2779e98ea"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x420}}, &(0x7f0000000500)={0x0, 0x22, 0x14, {[@global=@item_012={0x1, 0x1, 0x3, '>'}, @local=@item_4={0x3, 0x2, 0xa, "c8b3063c"}, @main=@item_4={0x3, 0x0, 0x8, "0d1ab8fa"}, @global=@item_4={0x3, 0x1, 0x2, "906a380d"}, @local=@item_012={0x2, 0x2, 0x66af219f3f128697, "e80f"}]}}, &(0x7f0000000540)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x40, 0x1, {0x22, 0x5b7}}}}, &(0x7f0000000780)={0x2c, &(0x7f00000005c0)={0x0, 0x17, 0xcc, "56cb69c21100c9fa71e1b2817baabb59eb24fccbb239664e74cceb73759922144b45af035c5f4af07e868b2cb3a1f7880306e677c70bb1c6e5f1c7613f9edcec48d8d7213fdbe7b2a9809a6baa1af66d99bf31e67880e030d3233e06c5f5c84104aebf47bb5839d47d84825d4118ed14f2d92f1869c2bd8c7439b6d0b7fe7dee41bf197d6937feb062c7a0d9fcf2e53623afe529302c91502332e4e7bb5cf1c5d41624e2fef06aefbaae94a2b8e356da1b23c6ecc71225f547c32c3930dfeb8b84049dd23aaf64917f4272fc"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x79}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0xbb}, 0xffffffffffffffff, &(0x7f0000000740)={0x20, 0x3, 0x1, 0x5}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000880)={0x14, &(0x7f00000007c0)={0x20, 0x22, 0x77, {0x77, 0x1, "5652d99edfa7c445e87ec5fefda0549a19ec7e7b97eff8e8aa5add9f5a806e54246cde9e064e3b67728ff6c55466be4d46e963ef5b22639626cda7b1330b5e5f96c637a19b3a3330271d1aa5356da6132a67126e1580c91df4869e099eaee00b43430a1a12dfe3b4f9b0a5dfa55ce56ebaaf9e90de"}}, &(0x7f0000000840)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b40)={0x44, &(0x7f00000008c0)={0x20, 0x16, 0xb4, "e095055204da1543abb0ceaf93b8bbbb1d627ed6d2a3253e9e99f519a7536ed39e9056538a48ff102b90318effbb533c62d0d04611b931e5edbb6594d7f99680c430f08be2862445e30ae2f00a07cb6b8ea27db6457a81a86b510bc977693a7974a1dbb7e68528c14beafd07601c4977cebf604f8f089b1a80dc6a2bafb565efafbf39335cdda4a886e993077441be78c69eec384a86274678043a365a494986ff900b860503625520e30b186997bba6642f7087"}, &(0x7f0000000980)={0x0, 0xa, 0x1}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000a00)={0x20, 0x80, 0x1c, {0x2, 0x8, 0x7, 0x1, 0xff97, 0x80, 0x1c, 0x8, 0x9, 0x40, 0x4540, 0xab97}}, &(0x7f0000000a40)={0x20, 0x85, 0x4, 0x200}, &(0x7f0000000a80)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000ac0)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000b00)={0x20, 0x89, 0x2}}) r1 = open$dir(&(0x7f0000000bc0)='./file0\x00', 0x400801, 0x111) fstat(r1, &(0x7f0000000c00)) (async) syz_usb_control_io(r0, &(0x7f0000000e80)={0x2c, &(0x7f0000000c80)={0x20, 0x1ed9792ab013cf13, 0x4b, {0x4b, 0x9, "0c2a08bb5c9f5d2959cb0ce378d54cf430d2b96352e11e8df3a15e40faf855c9157e230e0590811276ab014582d2eb6cb323c3e65fcd437c647126e7af17a689eb009cf03e2e8db3d4"}}, &(0x7f0000000d00)={0x0, 0x3, 0x8b, @string={0x8b, 0x3, "76631ffe35a911c50e9056667186ba1c3f894e3fa3e62f166ccb9edb6af8100f0eb9a7e908885080273fa4babbd04be39e9e629ca72e19d97855ccd1c03c25c48f52002a744ef8a53b347d524604ac110d79d889651868f5bd5705a37828b9bf2baedacc2303c41f0c1d8ffb3df47ad0472fa2182539b581141a13bfa1b338595f6c6c1a10e377a8dc"}}, &(0x7f0000000dc0)={0x0, 0xf, 0x26, {0x5, 0xf, 0x26, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x4, 0x89, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x1, 0xf8, 0x6}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x9, 0x2, 0x5281}]}}, &(0x7f0000000e00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x7, 0x49, "9f1a6160", "f38994ce"}}, &(0x7f0000000e40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xd1, 0x80, 0x5, 0xc, 0x40, 0x2, 0x400}}}, &(0x7f0000001300)={0x84, &(0x7f0000000ec0)={0x40, 0x9, 0x76, "5d18940c0a9e096aa5059b92a6dca6c2245f3c9a6efdab95b257fd7778eac700120cc9c98b231c029376c85c941b928f3cb8468036725fedf1a58989a230d81a8c97a5d680a5d7f4f803cf460fa982239162cd967f2f4acd19929afd8e1661de0a8fcbf2f5ac69b52c2ca403d65d19305b5c96def7b0"}, &(0x7f0000000f40)={0x0, 0xa, 0x1, 0xb1}, &(0x7f0000000f80)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000fc0)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000001000)={0x20, 0x0, 0x8, {0x140, 0x2, [0xfff0]}}, &(0x7f0000001040)={0x40, 0x7, 0x2, 0xfffe}, &(0x7f0000001080)={0x40, 0x9, 0x1, 0x5}, &(0x7f00000010c0)={0x40, 0xb, 0x2, "c78f"}, &(0x7f0000001100)={0x40, 0xf, 0x2, 0xd}, &(0x7f0000001140)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001180)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f00000011c0)={0x40, 0x19, 0x2, "3411"}, &(0x7f0000001200)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000001240)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000001280)={0x40, 0x1e, 0x1, 0x80}, &(0x7f00000012c0)={0x40, 0x21, 0x1, 0x5}}) (async) syz_ublk_setup_io_uring(0x3327, &(0x7f00000013c0)={0x0, 0xa7e3, 0x200, 0x2, 0xe2}, &(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001500), 0x50000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001540)={'veth1_to_bond\x00', 0x323}) (async) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001580), 0x2, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x3b) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x2e, &(0x7f00000015c0)=0x2, 0x4) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0xd) (async) r5 = syz_open_dev$usbfs(&(0x7f0000001600), 0x6, 0x600102) ioctl$USBDEVFS_RESETEP(r5, 0x80045503, &(0x7f0000001640)={0xe}) (async) r6 = syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000001680)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r6, &(0x7f00000017c0)={0x14, &(0x7f00000016c0)={0x40, 0x31, 0xad, {0xad, 0x30, "2b0ddd96b1fd1c7ab6eec234e337efcdaa52ac753e2bcfe6b62f65e72006c88fad2a4b015a6ff121928a7806cd1ba965ecc71d7ff01d4864dce291788e9cc1903ea79dd5938f23d45f0131b8287f9576802933a4e0f1d90def3c8627805ae2d0ad57fedf47bbe991ea3236d239a66e09343f84bad74773f71db32e045d6f79c7b43b66acca748e02cbbebff9bb8f511ebd98df5bda45c3696a77efee44378ed827b15348c0b1860e4da74c"}}, &(0x7f0000001780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, &(0x7f0000001980)={0x2c, &(0x7f0000001800)={0x40, 0x6, 0x75, "344c68102b89a8f02e1d32efcede2206b0a64cfebf994c330f6417cdc6eedeb22d11bc09a4bbdcd74fa1ff51b8e0065e98210e7a1aaeb3a2b10b615e5b887a928f942884c81f505e81fe9d067f75761ed0e9c078d56cb84f6ef11e3fd1bf2f7ea64e1c37e6f7a958b5801ac746ed5770ecb80124c8"}, &(0x7f0000001880)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000018c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000001900), &(0x7f0000001940)={0x40, 0x5, 0x1, "06"}}) (async) syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f00000019c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async) syz_usb_control_io$lan78xx(r6, &(0x7f0000001b40)={0x14, &(0x7f0000001a00)={0x40, 0x22, 0xec, {0xec, 0x21, "f3a5f2dc8d42cf16eec1abb68d07e7f55bd8ad5aee5b7a86ebb76e71006cef1ab8a0db2a61e527524435823e0a2f44d4aff5b72cbc9a8a2e9b3df25805a7474d2c9fa18d7e3956f69181e68b531f869de6d22a867a7d3fb9b8a6b72119ad8c4c6db7df1ce07d1119faae6fc934e2e238f37454a6c7a3fe99c2f6f25d0bb125e386d2e901313a7bad9918c32441a681d05cb78f99c1f672351ef66e89ed6856420222ac490af500b7346a7f6df9356ca0a102afe6f6c093c8bbae7ad9458958ad95598da828624adef1f44460b4e54ff46355e3ddf990eed765049ed48c84c77375e39583cf48b6993815"}}, &(0x7f0000001b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x813}}}, &(0x7f0000001e00)={0x34, &(0x7f0000001b80)={0x0, 0x15, 0xfb, "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"}, &(0x7f0000001cc0)={0x0, 0xa, 0x1}, &(0x7f0000001d00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001d40)={0xc0, 0xa1, 0x4, 0x2}, &(0x7f0000001d80)={0x40, 0xa0, 0x4, 0xa}, &(0x7f0000001dc0)={0xc0, 0xa2, 0x2f, "ba3cf29c70aa9bcf513b593215d6d6c2f4d31f9710f886ebfa25d2f98b36920455761f456af42c5596ed8630d7aa6f"}}) (async, rerun: 64) r7 = syz_usb_connect$cdc_ecm(0x3, 0x64, &(0x7f0000001e40)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x52, 0x1, 0x1, 0x7, 0x58, 0x9, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x94, {{0x7, 0x24, 0x6, 0x0, 0x0, "32e2"}, {0x5, 0x24, 0x0, 0x13}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x401, 0x7, 0x80}, [@mbim={0xc, 0x24, 0x1b, 0x48c, 0xec0d, 0x7, 0x51, 0x3, 0xfa}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x5, 0xb9}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x6, 0x3, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x32, 0x93, 0xf7}}}}}]}}]}}, &(0x7f0000001fc0)={0xa, &(0x7f0000001ec0)={0xa, 0x6, 0x300, 0x35, 0x1, 0x2, 0xff, 0x61}, 0x10, &(0x7f0000001f00)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x8, 0x6, 0x3, 0x42}]}, 0x1, [{0x68, &(0x7f0000001f40)=@string={0x68, 0x3, "afc3eee39f39adbd5ae30dcd08986f4015006e923cc8ab22e163c7f002eaf77b9afe7c504c335daaa65ad65000f9e7a7cdda05cdb3e846f0af350843cc92ba73b308a765c7bdd030b54757133ecf26996743dfc5efe624724e4a5e4623b7da6afb714fe8da4d"}}]}) (rerun: 64) syz_usb_control_io$cdc_ecm(r7, &(0x7f0000002180)={0x14, &(0x7f0000002000)={0x20, 0x2, 0x102, {0x102, 0xc, "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"}}, &(0x7f0000002140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002280)={0x1c, &(0x7f00000021c0)={0x20, 0xc, 0xb, "9e6eecda5a480808f2262c"}, &(0x7f0000002200)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002240)={0x0, 0x8, 0x1, 0x4}}) r8 = syz_usb_connect$uac1(0x2, 0xec, &(0x7f00000022c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x4241, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xda, 0x3, 0x1, 0x81, 0x10, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x33}, [@extension_unit={0xd, 0x24, 0x8, 0x3, 0xc6, 0x29, "5af1d8ae24d9"}, @selector_unit={0xa, 0x24, 0x5, 0x5, 0x9, "38a08b05f6"}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x1, "0f"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x2, 0x3, 0x9, 0x200, 0xf9, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x1, 0x2}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0xb, 0xfb, 0x7, 0x40}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x2, 0x1, 0x3, "d2cbd203ad"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x4, 0x2, 0x29, 0x3e, "fbbf04745275d90a"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x7, 0x3, 0x9, 0xaa, "c407"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x4, 0x1, 0x3, 0x5, "26b798c6fc"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9, 0x2, 0x3, {0x7, 0x25, 0x1, 0xc, 0x40, 0x400}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x40, 0xfa, 0xa, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x3fb, 0x2, 0x5b, 0x4, {0x7, 0x25, 0x1, 0x0, 0x3, 0x4}}}}}}}}]}}, &(0x7f0000002500)={0xa, &(0x7f00000023c0)={0xa, 0x6, 0x200, 0x6, 0x6, 0x40, 0x10, 0x51}, 0x49, &(0x7f0000002400)={0x5, 0xf, 0x49, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x50, 0xf, 0x9, 0x7f, 0x7f}, @wireless={0xb, 0x10, 0x1, 0xa, 0x12, 0x94, 0x97, 0x0, 0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x68, 0x6, 0x6, 0xf00, 0x7, [0xff003f, 0x0, 0x3f3f, 0xc000, 0xff000f, 0x30]}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x0, 0xc, 0x7}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000002480)=@lang_id={0x4, 0x3, 0x843}}, {0xa, &(0x7f00000024c0)=@string={0xa, 0x3, "18743a9efcdf0c02"}}]}) syz_usb_ep_read(r8, 0x5, 0xd, &(0x7f0000002540)=""/13) syz_usb_connect$uac3(0x6, 0x150, &(0x7f0000002580)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x7cf, 0x6802, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x13e, 0x3, 0x1, 0x5, 0x0, 0x2, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x77, 0x2}, [@processing_unit={0x1d, 0x24, 0x9, 0x5, 0x2, [0x2, 0x1, 0x1, 0x3, 0x2, 0x1]}, @input_terminal={0x14, 0x24, 0x2, 0x4, 0x202, 0x6, 0x3, 0x67e, 0x9, 0x3, 0x2}, @extension_unit={0x15, 0x24, 0xa, 0x4, 0x2, [0x0, 0x1, 0x2, 0x0]}, @feature_unit={0xd, 0x24, 0x7, 0x1, 0x3, [0x0, 0x839081384b335941]}, @input_terminal={0x14, 0x24, 0x2, 0x1, 0x1ff, 0x6, 0x9, 0xf066, 0x4, 0x8001, 0x0, 0x4}, @cluster_info_segment={0x6, 0x20, 0x1, 0xa1, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xc1, 0x78, 0x4, 0x1, 0x8}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x1, 0x1}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xe4, 0x3, 0xb6, 0x7b, "89d1"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x80, 0x2, 0x3, 0x44}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x6, 0x3, 0x8, {0xa, 0x25, 0x25, 0x0, 0x6, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x6}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x1, 0x3, 0x42, 0x5, "c3"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x4, 0x3, 0x9, "73a0e500788dfb"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x4, 0x80, 0x0, "5508f11fff2041"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x8, 0x56, 0x65, 0xb5}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x4, 0x8, {0xa, 0x25, 0x25, 0x8, 0x1, 0x7f}}}}}}}}]}}, &(0x7f0000002940)={0xa, &(0x7f0000002700)={0xa, 0x6, 0x200, 0xff, 0x6, 0x6, 0x20, 0xd}, 0x31, &(0x7f0000002740)={0x5, 0xf, 0x31, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x401, 0x1100f, 0x9, [0xf, 0x0, 0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "e63914417fa392e9cfbc156d47281241"}]}, 0x2, [{0xa3, &(0x7f0000002780)=@string={0xa3, 0x3, "c0eb1810ab1a855f60c99bf24d698549cfbebe6465f92982b9337c40b1e64b4c78438f791cfedab3905e9a02f94af97c366be776c6e19e396e66aa9cedeb31833e6ed3030e81bcf0e4f8b6b0e20ed439d6f340408d9e2660188f980341013d52186486c7a5877919208f3792d72e1de3275d21017e921c4c96dbe2d69a9a9d6c7cb07924d93303d615f1a76131d440d0a099e8f107bb4fe6e133ad57f4e4a27347"}}, {0xf9, &(0x7f0000002840)=@string={0xf9, 0x3, "45e198f416f30fdad2274c36695f38d72c207e12d774da6ed5f8b4437880891663d1c9c0615c14a8043498300877c73361b82646b828366e99c58c4f842a66742d1c305e7338e87d5a7bcdf0e6c822f4f966bd346d40dd9c5e0686d6e1b5a3f61567b1e39ec9df4387971e92f70678d3e9258252470d71de7da035d08b0d106536d76630a033d0d8a8fe3e6fdf83dd4ed08b7d70af71f01bcfa479d5f49b84c72cc6f9d923fdbedaaee2ab1cf68bb7c3c39884ec4c3fab8479520b7de11aa11b24354bf3df5e468f1bffe4dc5a175acbc63d7cea26a6c524acbe64d5825b204df4d050c44f83bc9a132a681524dafeda42d4772597d0a1"}}]}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000002980)={0x9000000, {{0x2, 0x4e21, @loopback}}, 0x0, 0x8, [{{0x2, 0x4e24, @private=0xa010102}}, {{0x2, 0x4e22, @empty}}, {{0x2, 0x8b01, @remote}}, {{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}}, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e23, @broadcast}}]}, 0x490) (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002e40)={0x0}, &(0x7f0000002e80)=0xc) r11 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000002ec0)={0x1f, 0x0, @none}, &(0x7f0000002f00)=0xe, 0x80800) kcmp(0x0, r10, 0x3, r11, 0xffffffffffffffff) 5.785806517s ago: executing program 6 (id=1384): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x200000180, 0x2, 0x2c, 0xf1, 0x100000001, 0x6, 0x5, 0x0, 0x29, 0x0, 0x3, 0x9, 0xbd9], 0x9000, 0x4f100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) setresgid(0xffffffffffffffff, 0xee01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x40000000002004cb, 0x0, 0xa7c, 0x9, 0x20000008, 0x8000000009, 0x803, 0x0, 0x9, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee3001, 0x8, 0x8, 0x9, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x2000, 0x3, 0x0, 0x3f, 0x5, 0x75, 0x6, 0x36, 0xd, 0x6, 0x89}, {0x0, 0x9000, 0xe, 0x5, 0x3, 0x1, 0x0, 0x9, 0x1, 0xa4, 0x9, 0x5}, {0x60000, 0x8000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xe}, {0x1, 0x8000000, 0xf, 0x3, 0x12, 0x7, 0x4, 0x8, 0xdc, 0x9, 0xf7, 0x97}, {0x200000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0x6, 0x82, 0x9, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0x80a0000, 0x4000, 0xa, 0x5, 0xcd, 0x31, 0xff, 0x9, 0x2, 0x2c, 0xb0, 0x1}, {0xffff1000, 0x30}, {0xf000, 0x7}, 0x80000021, 0x0, 0x50000, 0x2024, 0x2, 0x0, 0xb000, [0x6800000000000000, 0x5, 0x2, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.635813863s ago: executing program 6 (id=1388): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x88500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0xc, 0x0, 0xfec00000, 0x0, &(0x7f0000000000/0x1000)=nil}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@code={0xa, 0x18, {"b80000c0fe3acb80"}}], 0xd3}) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) getpgid(0x0) landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) syz_clone3(&(0x7f0000000180)={0x800000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.857982371s ago: executing program 7 (id=1397): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="0100e5ff00"}) clock_adjtime(0x0, &(0x7f0000000240)={0x10000, 0x6f, 0x4, 0x8000, 0x0, 0x2, 0x4, 0x6, 0x6, 0xffff, 0x3, 0x400, 0x5, 0x5, 0x8001, 0x5, 0x25fcbc0a, 0x2, 0xfffffffffffffffe, 0x4, 0x9, 0x0, 0x1, 0x1000, 0x894, 0x7fffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x1000, &(0x7f000000f000/0x1000)=nil}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000440)={&(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x7, 0x2}]}}}], 0x18}, 0x800) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x1000, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x2000007, 0x80010, r5, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r5, 0x4188aec6, &(0x7f0000003c00)={0x0, [{0x7, 0x218, 0x10001, &(0x7f00000003c0)="1652c4dcd5eba6845dc0621a8a9509c27a02dcb723ed3d40cfafb37b588fb738319426549ae1d24525ee4655e3aa5f147b3595b8e25e119b1d49307026f6061dde9e46"}, {0x3, 0x498, 0x101, &(0x7f0000000480)="05791748b1d94e43780e53ac108160217d93315a1a314e21425d9f67762747251faf12ae30388e576385825e01aeee68335a24b643302d46ae590fcbd0d283e4f764d55bf997539441a9500ea977e8af808f2112b0b32f6939e7c9fc1bebd3091a3c9fb92cff6fa903dfc5f3cc4f00cebe524a010839c13fef881db68be90a2efeeb074564b2d25796e837c205d808c9f33668"}, {0x3, 0x548, 0x19f3, &(0x7f00000005c0)="3fbc766ac0fe924f12735212a003710791584c77930ce2be19409671b5666f60e2fdb533fe4838e142e1f8722fcb27fce957774d985a5ae05617289234f5813189f9cf36368d63a00bbeb31cc710bd62f2f6e7f54bc238db3bafce484de4b5639077d2a5e1075a186034836815f7ad158d99a02343f2c13efbe960f31d66ba84be401ec6c8b8779a7c9bc15ac98569782a355f695e287203b12713c6dc8c2e827644bed8f06329196c"}, {0x1, 0x738, 0x2, &(0x7f0000000680)="5aedac868a7d8fa4baeaae713ecf4fc092e122473b0e8e5edb57fe6aee2ceb70deeb6748934bc79c6078f1b114e5745bcddd7aa6f0b7673d5a19df86371492c5c2c46e3f8ac8ee44ad9aabd2a8bff6c9dea552349c56a26517d05326facc6fd7d6628b73250c9db84f143c7b30e40c107cf777439f3e8d61b43624c7cf037565814001bd23bd00701474a04c94120c790a25697f163651a5c7246df8c4ad6eb0761b0a5f81c4a6746c9bc20bf9fa7be82c5d8622cabef8a20d2a08cf36dc2650d2da19329063435cc0a19cde65778ae5bdca0b07cf0d4f306b144ea325f6f22dec1bfad9ec141f"}, {0x0, 0x630, 0x10001, &(0x7f0000000780)="23c4ec8ff2ce4a3aae647a790792d26b6a1214eb0562da3b90af2f969e417fa4efb7b7c43efdcab67e43c2b34624683d1bdf8fa3cf082c65a7e2d7dc6bff00fe17fcc3b400832a750c9de8ee8f976d97a7a55f606a1c1f0dabd538e351170dc576794c07decdcb5137bcb2eef5b4e6ebb6e76fad394e4f9259fe0295620d3f2e3d0269edcd61b477b030bdce75efdcf9df73d5f31c2a791750ede5e7e6ef552dbe586a88a9b0d0ea0a0c93a55b8b7d777b1f19a858371f71e48cd0902dc9b7b27b14e7330756"}, {0x2, 0x0, 0x8, &(0x7f0000000880)}, {0x1, 0x788, 0x7, &(0x7f00000008c0)="7c7d27cfe0cbb12261fc44efe72fce699be94326d0c98396b4a9c83648922a41f0ce2f39bc99a57f68eb5df2573bb8037c325f8778cf6fc3a2f8025867a7311add40feb83d213c68332a20dd6c34b6f74c7b04f86bbe25464cea3e984500f5d708939b85ab345fd3bb67a76085cbae4cd1471e3b463cb747ab204eda401f3e3fc39450f408f1c2c97b3c8f060b7280d7d72e26c576ce89904dba8085e973744e7487c288ca054d4652658c95a5189c536a82ea97da124d360aff4f6580aaaaaa5d95b88747af36445ba393ca025c8401deb214d1c27ec0298b466bb0fba86690552ad788b29f821b92e580da1652af55a3"}, {0x7, 0x0, 0x3, &(0x7f00000009c0)}, {0x3, 0x0, 0x7, &(0x7f0000000a00)}, {0x0, 0x0, 0x2, 0x0}, {0x0, 0x3b8, 0x80000000, &(0x7f0000001a40)="52f74b61da25f3f26d1278965998f91f0bc9bb6a944f18af51f784ff0c2ef09318d09bb56fa90c86be053bb6de8b6228dfcd61e84c91caa5df3c3347c3c0a24aec90a140b6213d484e15a1a2ec753962e3bf2ef8eef81fe11721a8a7b778c45ef5f3ffe8f114d0532624c8a4e57a7e020e0d633b47e0ed"}, {0x0, 0x4e8, 0x1, &(0x7f0000001ac0)="4383b80f2177dae05138f2d87371fc4fa5aeeb17d67829634c2edb4562c8fcf3551e22f067c8ba5b55071b4b4e8f40e82734c268b4b8e330fddb4a440df062fdebc6ba5c901e2b50e139775ad9f3d6668f222bdfe3f675b71821308901d23da73e075f2be9585d6de0266c854e6e0215aea6f6e6ae78dfa440ffea02ecfd4ea2c6295d9b88b5091efda8ba169a56cc48c7351bef88ccc7d413b6c8980d"}, {0x3, 0x8000, 0x2, &(0x7f0000001b80)="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"}, {0x0, 0xe0, 0xfffffff9, &(0x7f0000002b80)="b109671792d3da7eff1eb57e065066bb347706c0f4d72e4cd63eb77e"}, {0x2, 0x2000, 0x65, &(0x7f0000002bc0)="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"}, {0x2, 0x0, 0x3ff, &(0x7f0000003bc0)}]}) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, 0x0) r7 = syz_usb_connect(0x3, 0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa090400000207010200070581020002"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000240)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/2, 0x2, 0xd000) close_range(r0, 0xffffffffffffffff, 0x0) 4.768952765s ago: executing program 6 (id=1399): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_int(r1, 0x29, 0x100000000001f, &(0x7f00000005c0)=0x1, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x81) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c80)=ANY=[@ANYBLOB="240000002100010000000000000000000a00000000000001016200000800158002"], 0x24}], 0x1}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)={0x5, 0x0, [{0xb8e, 0x0, 0xa1}, {0x0, 0x0, 0x7}, {0x40000d14, 0x0, 0x1}, {0xa94, 0x0, 0x6}, {0x40000072, 0x0, 0x3}]}) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000140)={{0x0, 0xeeee8000, 0x4, 0xf6, 0x2, 0xf3, 0x43, 0x8, 0x7, 0x1, 0x9, 0x1}, {0x50000, 0xc0a0c0f0f5000ded, 0xd, 0x5, 0x1, 0x8, 0x6, 0x0, 0x80, 0xfc, 0xfc, 0x4}, {0x200000, 0x4000, 0xb, 0x6, 0xff, 0x3, 0x0, 0x6, 0xef, 0x27, 0xd5, 0x2}, {0x4000, 0x6000, 0x9, 0x9, 0x8f, 0x4, 0x81, 0xfc, 0xb, 0x1, 0x9, 0x3}, {0xffffffff, 0x100000, 0x3, 0x2, 0x6, 0x11, 0x9, 0x2, 0x3, 0x3, 0x0, 0xe4}, {0xffff1000, 0x80a0000, 0xf, 0x0, 0x3, 0x0, 0xde, 0x9, 0x3, 0x0, 0x4, 0x7}, {0xdddd0000, 0x9000, 0xc, 0x3, 0x8, 0x3, 0x2, 0x9, 0x91, 0x8, 0x9, 0x88}, {0xeeee0000, 0xeeee0000, 0x10, 0x6, 0xc2, 0x8, 0x6, 0x9, 0x7, 0x3, 0x80, 0x68}, {0xeeefa000, 0x8000}, {0xe9eb89d253be8b8b, 0x9}, 0x50000, 0x0, 0x0, 0x400408, 0x6, 0x8000, 0xeeef0000, [0x6, 0x5, 0x5, 0xe]}) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="340000002e000305000000000000000020000080080000000000000008000000", @ANYRES32, @ANYBLOB="0c000f0000001e39be"], 0x34}], 0x1}, 0x0) ioctl$KVM_CAP_STEAL_TIME(r2, 0x4068aea3, &(0x7f0000000300)) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) 4.683931949s ago: executing program 6 (id=1400): r0 = syz_usb_connect(0x4, 0x32, &(0x7f0000000000)=ANY=[], 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') pread64(r1, &(0x7f0000002180)=""/9, 0xfdc5, 0x4ac) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) r3 = syz_usb_connect$cdc_ecm(0x3, 0x7f, &(0x7f0000000540)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x1, 0x7, 0x70, 0x4f, "", [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xb, 0x24, 0x6, 0x0, 0x0, "c36f6abe41a3"}, {0x5, 0x24, 0x0, 0x1ff}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x800, 0x7f, 0x72}, [@mdlm={0x15, 0x24, 0x12, 0x324}, @country_functional={0xe, 0x24, 0x7, 0x9, 0x1, [0x118, 0x8, 0x3, 0x2d5]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x4, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x450, 0xd9, 0x1, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x1, 0x70}}}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x300, 0x4, 0x9, 0x81, 0x40, 0x6}, 0x55, &(0x7f0000000600)={0x5, 0xf, 0x55, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x2, 0x7, 0x5df}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x9, 0xfc, 0xffff}, @ext_cap={0x7, 0x10, 0x2, 0x3e, 0x4, 0x8, 0x7}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0xb24, 0xf0f, 0x4c7, [0x0, 0xc0f0, 0xff3f0f, 0x30, 0xc0]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4e, "99fd519c53021bf63f98b075284e6f55"}]}, 0x5, [{0x61, &(0x7f0000000680)=@string={0x61, 0x3, "64b8c9af6a5040a5fceee01813ca49acce7c0bee1c23b6a3393ab00c3f7acdade27b07740b01bbdc854622a9882be5d920f791a445f7a2aed04916cd9571348d81ce87c727aa8fb7399ad0cbc5685366a278c5c97ed07746942a87e32b809e"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x40c}}, {0x4d, &(0x7f0000000780)=@string={0x4d, 0x3, "5c23455f4767fc2f21372cc2c101f1cab1b215011e881923c8391ae84d5766e12750338efeb3ba179ffee7bfcb9a0b6cc6266cb94d7b13284272c73296f46b1e7970a62f2bef294fa180f6"}}, {0x2, &(0x7f0000000800)=@string={0x2}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x2454}}]}) syz_usb_ep_write(r3, 0x8d, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000240)={0x14, &(0x7f0000000180)={0x0, 0xd, 0x4c, {0x4c, 0x2, "4ce9eb0119947374920f0a9bef68467a95eda094412117890695ee0b080a4a647d9cb218684ab8b1340667bdf39ab3844c30d81777f58d6d06bc500a554ed6948ebca506add178a6ce93"}}, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000280)={0x0, 0x3, 0x47, "a0efac2b8303f85cbaeccc7b827115b2849ef4c0176c56779596f5d0a90c13badc1ee7d748c73fe14a53647d37f3e82bd74c4dddfd1d75ff19f98f05a2b5c3bf6c5fc214d593c0"}, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x2, 0x8, 0x1, 0x4, 0x7a4, 0x3ff, 0x3, 0xb4b, 0x3b, 0x5, 0x6563, 0x99}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x77c}, &(0x7f0000000400)={0x20, 0x83, 0x2}, &(0x7f0000000440)={0x20, 0x87, 0x2}, &(0x7f0000000480)={0x20, 0x89, 0x2}}) (async) syz_usb_disconnect(r0) 3.950708274s ago: executing program 5 (id=1404): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x33, 0x65, 0x36, 0x65, 0x66, 0x34, 0x63, 0x64, 0x31, 0x1d, 0x38, 0x37, 0x38, 0x0, 0x36, 0x33]}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x3d}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x30, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x37, 0x0, 0x30, 0x32, 0x34, 0x64, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x62]}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x35, 0x38, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x63, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000800)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566768899aabbccddeeff001122c6445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x31, 0x34, 0x30, 0x38, 0x34, 0x32, 0x62, 0x30, 0x63, 0x66, 0x31, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x34, 0x65, 0x30, 0x65, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x36, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x67, 0x63, 0x66, 0x30, 0x64, 0x31, 0x30, 0x66]}, &(0x7f0000000780)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aaaabbccddeeff00", 0x10}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 3.949407254s ago: executing program 5 (id=1405): openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="f2ab0f201e66b9800000c00f326635001000000f30b88d078ee066b9800000c00f326635010000000f30ba4200ed66b8020000000f23d00f21f86635000000080f23f80ffb6000ba2100ec66f30f1eff", 0x50}], 0x1, 0x75, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) 3.887996117s ago: executing program 5 (id=1406): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140)={0x1e3e00, 0x42, 0x4}, 0x18) renameat2(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x1) r1 = socket(0x10, 0x803, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000300)=0x2) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3f}}}) getpeername(r1, 0x0, &(0x7f0000000380)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x49, &(0x7f0000000000)=0x2, 0x4) mount$overlay(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={[{@nfs_export_on}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}, {@metacopy_off}, {@redirect_dir_nofollow}, {@uuid_off}, {@upperdir={'upperdir', 0x3d, './file1'}}], [], 0x2f}) 3.887679557s ago: executing program 5 (id=1407): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x88500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0xc, 0x0, 0xfec00000, 0x0, &(0x7f0000000000/0x1000)=nil}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@code={0xa, 0x18, {"b80000c0fe3acb80"}}], 0xd3}) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) getpgid(0x0) landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) syz_clone3(&(0x7f0000000180)={0x800000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.369468281s ago: executing program 5 (id=1409): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x8008af26, &(0x7f00000001c0)) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x26020480) syz_open_dev$evdev(&(0x7f00000001c0), 0x372, 0x400) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r2, &(0x7f0000000000)='7', 0x1) lsm_set_self_attr(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="000022000000000000000200000000000000cfa70000000000050000007600000000"], 0x22, 0x0) close_range(r0, r1, 0x2) syz_usb_connect$uac2(0x0, 0x87, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xdba, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x6, 0x10, 0x2, {0x8, 0xb, 0x1, 0x0, 0x1, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xff80, 0x7, 0x15, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x304, 0x5, 0x4, 0x0, 0x1ff, 0x1c}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc, 0x2, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0xad, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0xfa, 0xbc, {0x8, 0x25, 0x1, 0x2, 0xfa4024f26d164786, 0x81, 0x9}}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 3.056038196s ago: executing program 6 (id=1410): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.830132173s ago: executing program 7 (id=1421): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x50) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="b800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000ff1608001540"], 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) r1 = fsmount(0xffffffffffffffff, 0x1, 0x4) read$FUSE(r1, &(0x7f0000000240)={0x2020}, 0x2020) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000009b80), 0x149202, 0x0) ioctl$FICLONE(r3, 0x40049409, r3) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r2, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FAMILY={0x5, 0xd, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_MS_ADDR6={0x14, 0xc, @private1}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @local}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000004}, 0x810) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0xfffd, @local}}, 0x1e) connect$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010103}}, 0x1e) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000040)) 1.803806395s ago: executing program 7 (id=1422): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8215, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xb, 0x20, 0x40, {0x8, 0xb, 0x0, 0x1, 0x1, 0x4, 0x20, 0x81}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0xb, 0x9, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x5, 0x5, 0x9, {0x8, 0x25, 0x1, 0x80, 0x12, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x9, 0x3, 0x40, {0x8, 0x25, 0x1, 0x83, 0x6c, 0x4, 0x8a}}}}}}}}]}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmmsg$sock(r1, &(0x7f0000003480)=[{{&(0x7f00000000c0)=@xdp={0x2c, 0x1, r3, 0xe}, 0x80, 0x0, 0x0, &(0x7f0000000300)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x18}}], 0x1, 0x0) r4 = getpid() capget(&(0x7f0000002580)={0x19980330, r4}, &(0x7f00000025c0)={0x4000006, 0x2, 0x0, 0x4, 0x1, 0x101}) close(r0) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r6 = socket(0x10, 0x803, 0x0) splice(r6, 0x0, r5, &(0x7f0000000040)=0x4, 0x100000001, 0x2) r7 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r8, 0x10000000005, 0x0) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/virtio/drivers/virtio_net/uevent\x00', 0x1, 0x0) write(r9, &(0x7f0000000200)='add\x00', 0x4) recvmsg$inet_nvme(r9, &(0x7f0000001740)={&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000340)=""/218, 0xda}, {&(0x7f0000000440)=""/134, 0x86}, {&(0x7f0000000500)=""/84, 0x54}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/8, 0x8}, {&(0x7f00000015c0)=""/171, 0xab}], 0x6, &(0x7f0000001700)=""/44, 0x2c}, 0x22) 554.459554ms ago: executing program 7 (id=1428): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) open$dir(&(0x7f0000000180)='./file0/file0\x00', 0x0, 0x152) setxattr(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000000)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0), 0x8, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 497.204136ms ago: executing program 7 (id=1429): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = socket(0xa, 0x3, 0xff) getsockopt$inet6_int(r1, 0x29, 0x7, 0x0, &(0x7f0000000080)) recvfrom$inet_nvme(r1, &(0x7f0000000600)=""/148, 0x94, 0x20, &(0x7f00000006c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x80) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f00000002c0)={0x80000000, 0x8}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1000, 0x1}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r4}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}, @flat=@weak_handle={0x77682a85, 0x0, 0x3}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 296.052286ms ago: executing program 5 (id=1430): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="0100e5ff00"}) clock_adjtime(0x0, &(0x7f0000000240)={0x10000, 0x6f, 0x4, 0x8000, 0x0, 0x2, 0x4, 0x6, 0x6, 0xffff, 0x3, 0x400, 0x5, 0x5, 0x8001, 0x5, 0x25fcbc0a, 0x2, 0xfffffffffffffffe, 0x4, 0x9, 0x0, 0x1, 0x1000, 0x894, 0x7fffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x1000, &(0x7f000000f000/0x1000)=nil}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000440)={&(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x7, 0x2}]}}}], 0x18}, 0x800) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x1000, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x2000007, 0x80010, r5, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r5, 0x4188aec6, &(0x7f0000003c00)={0x0, [{0x7, 0x218, 0x10001, &(0x7f00000003c0)="1652c4dcd5eba6845dc0621a8a9509c27a02dcb723ed3d40cfafb37b588fb738319426549ae1d24525ee4655e3aa5f147b3595b8e25e119b1d49307026f6061dde9e46"}, {0x3, 0x498, 0x101, &(0x7f0000000480)="05791748b1d94e43780e53ac108160217d93315a1a314e21425d9f67762747251faf12ae30388e576385825e01aeee68335a24b643302d46ae590fcbd0d283e4f764d55bf997539441a9500ea977e8af808f2112b0b32f6939e7c9fc1bebd3091a3c9fb92cff6fa903dfc5f3cc4f00cebe524a010839c13fef881db68be90a2efeeb074564b2d25796e837c205d808c9f33668"}, {0x3, 0x548, 0x19f3, &(0x7f00000005c0)="3fbc766ac0fe924f12735212a003710791584c77930ce2be19409671b5666f60e2fdb533fe4838e142e1f8722fcb27fce957774d985a5ae05617289234f5813189f9cf36368d63a00bbeb31cc710bd62f2f6e7f54bc238db3bafce484de4b5639077d2a5e1075a186034836815f7ad158d99a02343f2c13efbe960f31d66ba84be401ec6c8b8779a7c9bc15ac98569782a355f695e287203b12713c6dc8c2e827644bed8f06329196c"}, {0x1, 0x738, 0x2, &(0x7f0000000680)="5aedac868a7d8fa4baeaae713ecf4fc092e122473b0e8e5edb57fe6aee2ceb70deeb6748934bc79c6078f1b114e5745bcddd7aa6f0b7673d5a19df86371492c5c2c46e3f8ac8ee44ad9aabd2a8bff6c9dea552349c56a26517d05326facc6fd7d6628b73250c9db84f143c7b30e40c107cf777439f3e8d61b43624c7cf037565814001bd23bd00701474a04c94120c790a25697f163651a5c7246df8c4ad6eb0761b0a5f81c4a6746c9bc20bf9fa7be82c5d8622cabef8a20d2a08cf36dc2650d2da19329063435cc0a19cde65778ae5bdca0b07cf0d4f306b144ea325f6f22dec1bfad9ec141f"}, {0x0, 0x630, 0x10001, &(0x7f0000000780)="23c4ec8ff2ce4a3aae647a790792d26b6a1214eb0562da3b90af2f969e417fa4efb7b7c43efdcab67e43c2b34624683d1bdf8fa3cf082c65a7e2d7dc6bff00fe17fcc3b400832a750c9de8ee8f976d97a7a55f606a1c1f0dabd538e351170dc576794c07decdcb5137bcb2eef5b4e6ebb6e76fad394e4f9259fe0295620d3f2e3d0269edcd61b477b030bdce75efdcf9df73d5f31c2a791750ede5e7e6ef552dbe586a88a9b0d0ea0a0c93a55b8b7d777b1f19a858371f71e48cd0902dc9b7b27b14e7330756"}, {0x2, 0x0, 0x8, &(0x7f0000000880)}, {0x1, 0x788, 0x7, &(0x7f00000008c0)="7c7d27cfe0cbb12261fc44efe72fce699be94326d0c98396b4a9c83648922a41f0ce2f39bc99a57f68eb5df2573bb8037c325f8778cf6fc3a2f8025867a7311add40feb83d213c68332a20dd6c34b6f74c7b04f86bbe25464cea3e984500f5d708939b85ab345fd3bb67a76085cbae4cd1471e3b463cb747ab204eda401f3e3fc39450f408f1c2c97b3c8f060b7280d7d72e26c576ce89904dba8085e973744e7487c288ca054d4652658c95a5189c536a82ea97da124d360aff4f6580aaaaaa5d95b88747af36445ba393ca025c8401deb214d1c27ec0298b466bb0fba86690552ad788b29f821b92e580da1652af55a3"}, {0x7, 0x0, 0x3, &(0x7f00000009c0)}, {0x3, 0x0, 0x7, &(0x7f0000000a00)}, {0x0, 0x0, 0x2, 0x0}, {0x0, 0x3b8, 0x80000000, &(0x7f0000001a40)="52f74b61da25f3f26d1278965998f91f0bc9bb6a944f18af51f784ff0c2ef09318d09bb56fa90c86be053bb6de8b6228dfcd61e84c91caa5df3c3347c3c0a24aec90a140b6213d484e15a1a2ec753962e3bf2ef8eef81fe11721a8a7b778c45ef5f3ffe8f114d0532624c8a4e57a7e020e0d633b47e0ed"}, {0x0, 0x4e8, 0x1, &(0x7f0000001ac0)="4383b80f2177dae05138f2d87371fc4fa5aeeb17d67829634c2edb4562c8fcf3551e22f067c8ba5b55071b4b4e8f40e82734c268b4b8e330fddb4a440df062fdebc6ba5c901e2b50e139775ad9f3d6668f222bdfe3f675b71821308901d23da73e075f2be9585d6de0266c854e6e0215aea6f6e6ae78dfa440ffea02ecfd4ea2c6295d9b88b5091efda8ba169a56cc48c7351bef88ccc7d413b6c8980d"}, {0x3, 0x8000, 0x2, &(0x7f0000001b80)="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"}, {0x0, 0xe0, 0xfffffff9, &(0x7f0000002b80)="b109671792d3da7eff1eb57e065066bb347706c0f4d72e4cd63eb77e"}, {0x2, 0x2000, 0x65, &(0x7f0000002bc0)="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"}, {0x2, 0x0, 0x3ff, &(0x7f0000003bc0)}]}) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, 0x0) r7 = syz_usb_connect(0x3, 0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa090400000207010200070581020002"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000240)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/2, 0x2, 0xd000) close_range(r0, 0xffffffffffffffff, 0x0) 262.738007ms ago: executing program 6 (id=1431): syz_usb_connect$uac3(0x0, 0x9f, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x0) 127.989044ms ago: executing program 2 (id=1436): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x88500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0xc, 0x0, 0xfec00000, 0x0, &(0x7f0000000000/0x1000)=nil}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@code={0xa, 0x18, {"b80000c0fe3acb80"}}], 0xd3}) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) getpgid(0x0) landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) syz_clone3(&(0x7f0000000180)={0x800000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 127.773894ms ago: executing program 2 (id=1437): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000000)=0xfffffffd, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f00000010c0)=""/219, 0xdb}], 0x1, 0xfff, 0x20002000) getsockopt$inet6_tcp_buf(r1, 0x6, 0x8, 0x0, &(0x7f0000001040)) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0xb) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000040)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000000)=0xfffffffd, 0x4) (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/udp\x00') (async) preadv(r2, &(0x7f0000000080)=[{&(0x7f00000010c0)=""/219, 0xdb}], 0x1, 0xfff, 0x20002000) (async) getsockopt$inet6_tcp_buf(r1, 0x6, 0x8, 0x0, &(0x7f0000001040)) (async) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0xb) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000040)) (async) 125.848384ms ago: executing program 2 (id=1438): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42042, 0x180) sendfile(r0, r0, 0x0, 0x1200000000000) socket$xdp(0x2c, 0x3, 0x0) 81.776336ms ago: executing program 2 (id=1439): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_usb_control_io$hid(r0, 0x0, 0x0) 70.209006ms ago: executing program 2 (id=1440): r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@private0, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3b}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@private=0xa010100, {0x0, 0x9, 0x6, 0xfffb, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x6, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='dummy0\x00', 0x10) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newsa={0x138, 0x1a, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x60, 0x73}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, {0x0, 0x4, 0x6, 0x800000ffff, 0x8251c, 0x2, 0x9}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0x3dca}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 0s ago: executing program 2 (id=1441): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c090003042402"], 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) dup2(r0, r0) (async) r1 = dup2(r0, r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@remote, @private0, @local, 0x42003, 0x40, 0x5, 0x100, 0x0, 0x7c000f, r2}) (async) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@remote, @private0, @local, 0x42003, 0x40, 0x5, 0x100, 0x0, 0x7c000f, r2}) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120001a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) kernel console output (not intermixed with test programs): te } for pid=3159 comm="syz.3.803" name="usb_gadget" dev="configfs" ino=1142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.229500][ T373] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 116.241036][ T36] audit: type=1400 audit(1700006402.608:461): avc: denied { add_name } for pid=3159 comm="syz.3.803" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.390670][ T373] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 116.400474][ T373] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 116.411769][ T373] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 116.429258][ T373] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.444751][ T373] usb 7-1: Product: syz [ 116.448959][ T373] usb 7-1: Manufacturer: syz [ 116.454557][ T373] usb 7-1: SerialNumber: syz [ 116.666469][ T373] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 116.678715][ T373] usb 7-1: USB disconnect, device number 6 [ 116.689862][ T373] usblp0: removed [ 117.089941][ T373] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 117.250734][ T373] usb 6-1: not running at top speed; connect to a high speed hub [ 117.264957][ T373] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.285034][ T3200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3200 comm=syz.6.817 [ 117.286116][ T373] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 117.306806][ T373] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.322215][ T373] usb 6-1: Found UVC 1.00 device (0000:0000) [ 117.371143][ T3210] device-mapper: ioctl: Unable to rename non-existent device, to .2\.jDH [ 117.525518][ T3183] fuseblk: Unknown parameter 'measure' [ 117.562829][ T373] usb 6-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 117.572484][ T373] uvcvideo 6-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 117.581358][ T373] uvcvideo 6-1:1.1: Failed to initialize the device (-71). [ 117.590989][ T373] usb 6-1: USB disconnect, device number 37 [ 117.610653][ T3222] overlayfs: failed to clone upperpath [ 117.617607][ T3226] overlayfs: failed to clone upperpath [ 117.623164][ T65] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 117.642966][ T3218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.651820][ T3218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.660716][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 117.660729][ T36] audit: type=1400 audit(1700006404.077:469): avc: denied { write } for pid=3216 comm="syz.6.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 117.781604][ T65] usb 4-1: unable to get BOS descriptor or descriptor too short [ 117.795866][ T65] usb 4-1: not running at top speed; connect to a high speed hub [ 117.806271][ T65] usb 4-1: string descriptor 0 read error: -22 [ 117.812521][ T65] usb 4-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 117.821583][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.831902][ T65] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 117.880292][ T9] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 118.030387][ T9] usb 7-1: Invalid ep0 maxpacket: 64 [ 118.036164][ T65] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 118.062883][ T65] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 118.064804][ T1714] udevd[1714]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 118.076717][ T65] usb 4-1: USB disconnect, device number 56 [ 118.160867][ T9] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 118.310516][ T9] usb 7-1: Invalid ep0 maxpacket: 64 [ 118.315931][ T9] usb usb7-port1: attempt power cycle [ 118.660308][ T36] audit: type=1400 audit(1700006405.066:470): avc: denied { connect } for pid=3241 comm="syz.3.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 118.680180][ T9] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 118.711049][ T9] usb 7-1: Invalid ep0 maxpacket: 64 [ 118.751528][ T3252] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 118.759544][ T3252] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 118.772533][ T3252] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 118.780579][ T3252] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 118.834175][ T3259] rust_binder: 3258:3259 got reply transaction with no transaction stack [ 118.840777][ T9] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 118.842760][ T3259] rust_binder: 3258:3259 transaction reply to 0:0 failed EINVAL, code 0 size 0-0 [ 118.860781][ T3261] 9pnet_fd: Insufficient options for proto=fd [ 118.862970][ T65] rust_binder: 3258: undelivered TRANSACTION_ERROR: 29201 [ 118.874419][ T9] usb 7-1: Invalid ep0 maxpacket: 64 [ 118.880113][ T9] usb usb7-port1: unable to enumerate USB device [ 118.904636][ T36] audit: type=1400 audit(1700006405.316:471): avc: denied { bind } for pid=3266 comm="syz.5.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 118.925192][ T3267] netlink: 72 bytes leftover after parsing attributes in process `syz.5.837'. [ 118.934250][ T36] audit: type=1400 audit(1700006405.336:472): avc: denied { setopt } for pid=3266 comm="syz.5.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 118.957019][ T3271] serio: Serial port ptm0 [ 119.799752][ T36] audit: type=1400 audit(1700006406.206:473): avc: denied { write } for pid=3289 comm="syz.5.841" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 119.833059][ T3290] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 119.916182][ T3293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=3293 comm=syz.3.842 [ 120.125497][ T3318] overlay: ./file0 is not a directory [ 120.201482][ T9] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 120.353944][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 120.363094][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.371127][ T9] usb 6-1: Product: syz [ 120.375381][ T9] usb 6-1: Manufacturer: syz [ 120.379968][ T9] usb 6-1: SerialNumber: syz [ 120.483534][ T3331] netlink: 'syz.6.850': attribute type 10 has an invalid length. [ 120.511848][ T36] audit: type=1400 audit(1700006406.926:474): avc: denied { map } for pid=3330 comm="syz.6.850" path="socket:[31468]" dev="sockfs" ino=31468 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 120.536263][ T36] audit: type=1400 audit(1700006406.926:475): avc: denied { accept } for pid=3330 comm="syz.6.850" path="socket:[31468]" dev="sockfs" ino=31468 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 120.660346][ T36] audit: type=1400 audit(1700006407.065:476): avc: denied { mounton } for pid=3345 comm="syz.6.853" path="/44/config" dev="configfs" ino=1141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 120.699286][ T3350] Config c/1 of g1 needs at least one function. [ 120.707614][ T36] audit: type=1400 audit(1700006407.105:477): avc: denied { write } for pid=3345 comm="syz.6.853" name="UDC" dev="configfs" ino=31489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 120.718389][ T3350] udc dummy_udc.0: failed to start g1: -22 [ 120.747876][ T36] audit: type=1400 audit(1700006407.105:478): avc: denied { open } for pid=3345 comm="syz.6.853" path="/44/config/usb_gadget/g1/UDC" dev="configfs" ino=31489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 120.774119][ T3350] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 120.844914][ T3350] UDC core: g1: couldn't find an available UDC or it's busy [ 120.850404][ T3370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.854'. [ 120.861099][ T3370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.854'. [ 120.932539][ T3349] cgroup: fork rejected by pids controller in /syz6 [ 121.311316][ T3397] overlayfs: cannot append lower layer [ 121.640355][ T3401] overlayfs: failed to clone upperpath [ 121.962351][ T310] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 121.999721][ T3412] netlink: 'syz.6.863': attribute type 16 has an invalid length. [ 122.112410][ T310] usb 4-1: Using ep0 maxpacket: 8 [ 122.117879][ T310] usb 4-1: too many configurations: 33, using maximum allowed: 8 [ 122.126581][ T310] usb 4-1: config 1 has no interfaces? [ 122.132865][ T310] usb 4-1: config 1 has no interfaces? [ 122.142238][ T310] usb 4-1: config 1 has no interfaces? [ 122.148606][ T310] usb 4-1: config 1 has no interfaces? [ 122.155267][ T310] usb 4-1: config 1 has no interfaces? [ 122.162950][ T310] usb 4-1: config 1 has no interfaces? [ 122.169189][ T310] usb 4-1: config 1 has no interfaces? [ 122.175881][ T310] usb 4-1: config 1 has no interfaces? [ 122.183006][ T310] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 122.192610][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.201280][ T310] usb 4-1: Product: syz [ 122.205969][ T310] usb 4-1: Manufacturer: syz [ 122.211005][ T310] usb 4-1: SerialNumber: syz [ 122.672875][ T36] kauditd_printk_skb: 6862 callbacks suppressed [ 122.672889][ T36] audit: type=1326 audit(1700006409.074:7342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3411 comm="syz.6.863" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534cf9e159 code=0x50000 [ 122.735813][ T36] audit: type=1326 audit(1700006409.054:7273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3411 comm="syz.6.863" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534cf9e159 code=0x50000 [ 122.781017][ T36] audit: type=1326 audit(1700006409.084:7343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3411 comm="syz.6.863" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534cf9e159 code=0x50000 [ 122.832783][ T36] audit: type=1326 audit(1700006409.084:7344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3411 comm="syz.6.863" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534cf9e159 code=0x50000 [ 122.880284][ T36] audit: type=1326 audit(1700006409.084:7345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3411 comm="syz.6.863" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534cf9e159 code=0x50000 [ 122.935399][ T36] audit: type=1326 audit(1700006409.084:7346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3411 comm="syz.6.863" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534cf9e159 code=0x50000 [ 122.971635][ T65] usb 6-1: USB disconnect, device number 38 [ 122.995432][ T36] audit: type=1326 audit(1700006409.084:7347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3411 comm="syz.6.863" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534cf9e159 code=0x50000 [ 123.054276][ T36] audit: type=1326 audit(1700006409.084:7348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3411 comm="syz.6.863" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534cf9e159 code=0x50000 [ 123.112504][ T36] audit: type=1326 audit(1700006409.084:7349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3411 comm="syz.6.863" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534cf9e159 code=0x50000 [ 123.160193][ T36] audit: type=1326 audit(1700006409.084:7350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3411 comm="syz.6.863" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534cf9e159 code=0x50000 [ 123.267982][ T3460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3460 comm=syz.2.876 [ 123.357583][ T3467] netlink: 'syz.2.878': attribute type 4 has an invalid length. [ 123.372587][ T3467] netlink: 17 bytes leftover after parsing attributes in process `syz.2.878'. [ 124.744431][ T310] usb 4-1: USB disconnect, device number 57 [ 124.925089][ T3500] FAULT_INJECTION: forcing a failure. [ 124.925089][ T3500] name failslab, interval 1, probability 0, space 0, times 0 [ 124.973837][ T3500] CPU: 1 UID: 0 PID: 3500 Comm: syz.3.889 Not tainted syzkaller #0 92ad247b86212872588e4244b63285ac9b5a817e [ 124.973872][ T3500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.973885][ T3500] Call Trace: [ 124.973891][ T3500] [ 124.973899][ T3500] __dump_stack+0x21/0x30 [ 124.973929][ T3500] dump_stack_lvl+0x140/0x1c0 [ 124.973954][ T3500] ? __cfi_dump_stack_lvl+0x10/0x10 [ 124.973978][ T3500] ? mutex_unlock+0x90/0x240 [ 124.973999][ T3500] ? pcpu_alloc_noprof+0x1440/0x1440 [ 124.974022][ T3500] dump_stack+0x19/0x20 [ 124.974046][ T3500] should_fail_ex+0x3c2/0x510 [ 124.974069][ T3500] should_failslab+0xac/0x100 [ 124.974097][ T3500] __kmalloc_cache_noprof+0x41/0x470 [ 124.974120][ T3500] ? percpu_ref_init+0xe3/0x4d0 [ 124.974143][ T3500] percpu_ref_init+0xe3/0x4d0 [ 124.974166][ T3500] ? __cfi_css_release+0x10/0x10 [ 124.974187][ T3500] cgroup_mkdir+0x26f/0x1600 [ 124.974209][ T3500] ? __kasan_check_write+0x18/0x20 [ 124.974229][ T3500] ? __cfi_cgroup_mkdir+0x10/0x10 [ 124.974249][ T3500] kernfs_iop_mkdir+0x1bb/0x2d0 [ 124.974274][ T3500] vfs_mkdir+0x591/0x810 [ 124.974299][ T3500] do_mkdirat+0x240/0x530 [ 124.974322][ T3500] ? __cfi_do_mkdirat+0x10/0x10 [ 124.974346][ T3500] ? __kasan_check_write+0x18/0x20 [ 124.974364][ T3500] ? getname_flags+0x203/0x6b0 [ 124.974383][ T3500] ? __kasan_check_write+0x18/0x20 [ 124.974409][ T3500] __x64_sys_mkdirat+0x8b/0xa0 [ 124.974435][ T3500] x64_sys_call+0x2ba8/0x2ee0 [ 124.974452][ T3500] do_syscall_64+0x57/0xf0 [ 124.974470][ T3500] ? clear_bhb_loop+0x50/0xa0 [ 124.974493][ T3500] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 124.974515][ T3500] RIP: 0033:0x7fecde19e159 [ 124.974531][ T3500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.974546][ T3500] RSP: 002b:00007fecdf118028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 124.974568][ T3500] RAX: ffffffffffffffda RBX: 00007fecde425fa0 RCX: 00007fecde19e159 [ 124.974587][ T3500] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 124.974604][ T3500] RBP: 00007fecde23503b R08: 0000000000000000 R09: 0000000000000000 [ 124.974617][ T3500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.974629][ T3500] R13: 00007fecde426038 R14: 00007fecde425fa0 R15: 00007ffd95151b88 [ 124.974646][ T3500] [ 125.269109][ T3516] 9pnet_fd: Insufficient options for proto=fd [ 125.355762][ T3524] netlink: 'syz.2.897': attribute type 32 has an invalid length. [ 125.484120][ T45] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 125.614207][ T45] usb 4-1: device descriptor read/64, error -71 [ 125.854633][ T45] usb 4-1: device descriptor read/64, error -71 [ 125.870055][ T3563] netlink: 88 bytes leftover after parsing attributes in process `syz.5.907'. [ 126.104417][ T45] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 126.112062][ T310] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 126.244471][ T45] usb 4-1: device descriptor read/64, error -71 [ 126.252007][ T310] usb 6-1: device descriptor read/64, error -71 [ 126.484661][ T45] usb 4-1: device descriptor read/64, error -71 [ 126.494737][ T310] usb 6-1: device descriptor read/64, error -71 [ 126.594765][ T45] usb usb4-port1: attempt power cycle [ 126.734756][ T310] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 126.864826][ T310] usb 6-1: device descriptor read/64, error -71 [ 126.920693][ T3585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=3585 comm=syz.6.914 [ 126.933156][ T3585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=3585 comm=syz.6.914 [ 126.945591][ T45] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 126.945776][ T3585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=3585 comm=syz.6.914 [ 126.965571][ T3585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=3585 comm=syz.6.914 [ 126.965933][ T45] usb 4-1: device descriptor read/8, error -71 [ 127.106079][ T45] usb 4-1: device descriptor read/8, error -71 [ 127.124951][ T310] usb 6-1: device descriptor read/64, error -71 [ 127.235162][ T310] usb usb6-port1: attempt power cycle [ 127.246845][ T3598] netlink: 32 bytes leftover after parsing attributes in process `syz.6.920'. [ 127.346123][ T45] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 127.368094][ T45] usb 4-1: device descriptor read/8, error -71 [ 127.398286][ T3605] netlink: 'syz.6.923': attribute type 3 has an invalid length. [ 127.496083][ T45] usb 4-1: device descriptor read/8, error -71 [ 127.575153][ T310] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 127.596227][ T310] usb 6-1: device descriptor read/8, error -71 [ 127.605287][ T45] usb usb4-port1: unable to enumerate USB device [ 127.690265][ T3620] 9pnet_fd: Insufficient options for proto=fd [ 127.705272][ T373] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 127.736235][ T310] usb 6-1: device descriptor read/8, error -71 [ 127.865289][ T373] usb 7-1: Using ep0 maxpacket: 16 [ 127.871771][ T373] usb 7-1: unable to get BOS descriptor or descriptor too short [ 127.880086][ T373] usb 7-1: config 5 has an invalid interface number: 13 but max is 0 [ 127.888185][ T373] usb 7-1: config 5 has no interface number 0 [ 127.894244][ T373] usb 7-1: config 5 interface 13 altsetting 38 has an invalid endpoint descriptor of length 6, skipping [ 127.905391][ T373] usb 7-1: config 5 interface 13 altsetting 38 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 127.918503][ T373] usb 7-1: config 5 interface 13 has no altsetting 0 [ 127.926707][ T373] usb 7-1: New USB device found, idVendor=9022, idProduct=d650, bcdDevice=35.c8 [ 127.935777][ T373] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.943737][ T373] usb 7-1: Product: syz [ 127.947898][ T373] usb 7-1: Manufacturer: syz [ 127.952480][ T373] usb 7-1: SerialNumber: syz [ 127.958965][ T3610] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 127.975349][ T310] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 127.996321][ T310] usb 6-1: device descriptor read/8, error -71 [ 128.126393][ T310] usb 6-1: device descriptor read/8, error -71 [ 128.169877][ T373] usb 7-1: USB disconnect, device number 11 [ 128.235682][ T310] usb usb6-port1: unable to enumerate USB device [ 128.258890][ T36] kauditd_printk_skb: 14990 callbacks suppressed [ 128.258905][ T36] audit: type=1400 audit(1700006414.662:22341): avc: denied { setattr } for pid=3632 comm="syz.2.934" name="AF_VSOCK" dev="sockfs" ino=34169 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 128.271185][ T3635] netlink: 68 bytes leftover after parsing attributes in process `syz.3.935'. [ 128.291341][ T36] audit: type=1400 audit(1700006414.662:22342): avc: denied { mounton } for pid=3634 comm="syz.3.935" path="/176/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 128.298353][ T3635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.935'. [ 128.331729][ T3635] netlink: 20 bytes leftover after parsing attributes in process `syz.3.935'. [ 128.635675][ T9] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 128.701391][ T3644] device-mapper: ioctl: only supply one of name or uuid, cmd(12) [ 128.727443][ T3644] SELinux: avtab: truncated entry [ 128.745043][ T3644] SELinux: failed to load policy [ 128.786780][ T9] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 128.798028][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 128.805772][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 128.814906][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.828294][ T3648] netlink: 8 bytes leftover after parsing attributes in process `syz.6.941'. [ 128.828867][ T9] usb 4-1: config 0 descriptor?? [ 128.937709][ T3670] netlink: 'syz.2.948': attribute type 4 has an invalid length. [ 128.945427][ T3670] netlink: 'syz.2.948': attribute type 5 has an invalid length. [ 128.953124][ T3670] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.948'. [ 129.003095][ T3678] overlayfs: failed to resolve './cgroup': -2 [ 129.095965][ T373] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 129.246677][ T9] hid (null): invalid report_count 14146 [ 129.247033][ T373] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 129.253649][ T9] wacom 0003:056A:00D0.000A: unknown main item tag 0x2 [ 129.263414][ T373] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.272310][ T9] wacom 0003:056A:00D0.000A: unknown main item tag 0x5 [ 129.280026][ T45] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 129.287107][ T9] wacom 0003:056A:00D0.000A: unknown main item tag 0xe [ 129.294497][ T373] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.301500][ T9] wacom 0003:056A:00D0.000A: unknown main item tag 0x2 [ 129.314095][ T373] usb 7-1: config 0 interface 0 has no altsetting 0 [ 129.321297][ T9] wacom 0003:056A:00D0.000A: unknown main item tag 0x2 [ 129.327854][ T373] usb 7-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00 [ 129.334814][ T9] wacom 0003:056A:00D0.000A: invalid report_count 14146 [ 129.343567][ T373] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.350718][ T9] wacom 0003:056A:00D0.000A: item 0 4 1 9 parsing failed [ 129.365926][ T9] wacom 0003:056A:00D0.000A: parse failed [ 129.369547][ T373] usb 7-1: config 0 descriptor?? [ 129.371896][ T9] wacom 0003:056A:00D0.000A: probe with driver wacom failed with error -22 [ 129.456531][ T2617] usb 4-1: USB disconnect, device number 62 [ 129.487198][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.498215][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.509018][ T45] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 129.518118][ T45] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 129.526208][ T45] usb 6-1: Manufacturer: syz [ 129.531913][ T45] usb 6-1: config 0 descriptor?? [ 129.579496][ T373] usbhid 7-1:0.0: can't add hid device: -71 [ 129.585538][ T373] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 129.596455][ T373] usb 7-1: USB disconnect, device number 12 [ 129.610683][ T36] audit: type=1400 audit(1700006416.011:22343): avc: denied { checkpoint_restore } for pid=3679 comm="syz.2.953" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 130.141484][ T45] uclogic 0003:256C:006D.000B: failed retrieving string descriptor #200: -71 [ 130.151526][ T45] uclogic 0003:256C:006D.000B: failed retrieving pen parameters: -71 [ 130.159623][ T45] uclogic 0003:256C:006D.000B: failed probing pen v2 parameters: -71 [ 130.168113][ T45] uclogic 0003:256C:006D.000B: failed probing parameters: -71 [ 130.176018][ T45] uclogic 0003:256C:006D.000B: probe with driver uclogic failed with error -71 [ 130.186903][ T45] usb 6-1: USB disconnect, device number 43 [ 130.266485][ T9] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 130.427676][ T9] usb 4-1: config 1 interface 0 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 130.440757][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 130.453858][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 130.463372][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.471685][ T9] usb 4-1: Product: syz [ 130.476027][ T9] usb 4-1: Manufacturer: syz [ 130.480967][ T9] usb 4-1: SerialNumber: syz [ 130.692535][ T9] usb 4-1: bad CDC descriptors [ 130.700909][ T9] usb 4-1: USB disconnect, device number 63 [ 130.830537][ T3758] overlay: ./file0 is not a directory [ 130.874804][ T3760] input: syz1 as /devices/virtual/input/input14 [ 130.904498][ T3765] ./dev/sda1: Can't lookup blockdev [ 130.911761][ T3765] netlink: 148 bytes leftover after parsing attributes in process `syz.5.978'. [ 130.982740][ T3768] mtrr: base(0xc00000) is not aligned on a size(0x0000) boundary [ 130.990535][ T36] audit: type=1400 audit(1700006417.380:22344): avc: denied { ioctl } for pid=3766 comm="syz.5.979" path="/147/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 131.019189][ T3768] mtrr: base(0xc00000) is not aligned on a size(0x0000) boundary [ 131.030715][ T3768] mtrr: base(0xc00000) is not aligned on a size(0x0000) boundary [ 131.045622][ T3768] mtrr: base(0xc00000) is not aligned on a size(0x0000) boundary [ 131.056688][ T3773] overlayfs: conflicting options: userxattr,metacopy=on [ 131.063757][ T3768] mtrr: base(0xc00000) is not aligned on a size(0x0000) boundary [ 131.075667][ T3768] mtrr: base(0xc00000) is not aligned on a size(0x0000) boundary [ 131.084300][ T3768] mtrr: base(0xc00000) is not aligned on a size(0x0000) boundary [ 131.096902][ T3768] mtrr: base(0xc00000) is not aligned on a size(0x0000) boundary [ 131.114815][ T3768] mtrr: base(0xc00000) is not aligned on a size(0x0000) boundary [ 131.130976][ T3768] mtrr: base(0xc00000) is not aligned on a size(0x0000) boundary [ 131.146934][ T3768] mtrr: base(0xc00000) is not aligned on a size(0x0000) boundary [ 131.154974][ T3768] mtrr: base(0xc00000) is not aligned on a size(0x0000) boundary [ 131.165291][ T3768] mtrr: base(0xc00000) is not aligned on a size(0x0000) boundary [ 131.173200][ T3768] mtrr: base(0xc00000) is not aligned on a size(0x0000) boundary [ 131.181215][ T3768] mtrr: base(0xc00000) is not aligned on a size(0x0000) boundary [ 131.189121][ T3768] mtrr: base(0xc00000) is not aligned on a size(0x0000) boundary [ 131.205923][ T3768] mtrr: base(0xc00000) is not aligned on a size(0x0000) boundary [ 131.216190][ T3768] mtrr: base(0xc00000) is not aligned on a size(0x0000) boundary [ 131.229225][ T3768] mtrr: base(0xc00000) is not aligned on a size(0x0000) boundary [ 131.238348][ T3768] mtrr: base(0xc00000) is not aligned on a size(0x0000) boundary [ 131.246765][ T3768] mtrr: base(0xc00000) is not aligned on a size(0x0000) boundary [ 131.254872][ T3768] mtrr: base(0xc00000) is not aligned on a size(0x0000) boundary [ 131.262879][ T3768] mtrr: base(0xc00000) is not aligned on a size(0x0000) boundary [ 131.270918][ T3768] mtrr: base(0xc00000) is not aligned on a size(0x0000) boundary [ 131.279073][ T3768] mtrr: base(0xc00000) is not aligned on a size(0x0000) boundary [ 131.287353][ T3768] mtrr: base(0xc00000) is not aligned on a size(0x0000) boundary [ 131.295369][ T3768] mtrr: base(0xc00000) is not aligned on a size(0x0000) boundary [ 131.303512][ T3768] mtrr: base(0xc00000) is not aligned on a size(0x0000) boundary [ 131.311577][ T3768] mtrr: base(0xc00000) is not aligned on a size(0x0000) boundary [ 131.324213][ T3768] mtrr: base(0xc00000) is not aligned on a size(0x0000) boundary [ 131.333875][ T3768] mtrr: base(0xc00000) is not aligned on a size(0x0000) boundary [ 131.341893][ T3768] mtrr: base(0xc00000) is not aligned on a size(0x0000) boundary [ 131.349831][ T3768] mtrr: base(0xc00000) is not aligned on a size(0x0000) boundary [ 131.633915][ T3801] netlink: 16 bytes leftover after parsing attributes in process `syz.3.988'. [ 132.047376][ T45] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 132.217483][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 132.225963][ T45] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.237569][ T45] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 132.252377][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 132.267510][ T45] usb 4-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 132.286741][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.299292][ T45] usb 4-1: config 0 descriptor?? [ 132.505120][ T3815] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 132.513298][ T3815] SELinux: security_context_str_to_sid (^) failed with errno=-22 [ 132.733467][ T45] input: HID 04b4:bca1 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:04B4:BCA1.000C/input/input15 [ 132.761500][ T45] cypress 0003:04B4:BCA1.000C: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 04b4:bca1] on usb-dummy_hcd.3-1/input0 [ 132.880506][ T3846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=3846 comm=syz.2.1001 [ 132.904055][ T3846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1001'. [ 132.928743][ T3849] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 132.930608][ T3815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.948006][ T3815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.097895][ T45] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 133.268134][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 133.274380][ T45] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.294670][ T45] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 133.305188][ T45] usb 6-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 133.314632][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.323197][ T45] usb 6-1: Product: syz [ 133.333148][ T45] usb 6-1: Manufacturer: syz [ 133.337791][ T45] usb 6-1: SerialNumber: syz [ 133.546857][ T45] usb 6-1: unit 8 not found! [ 133.553858][ T45] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -16 [ 133.563769][ T45] usb 6-1: USB disconnect, device number 44 [ 133.598812][ T36] audit: type=1326 audit(1700006420.009:22345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.2.1006" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014639e159 code=0x50000 [ 133.624079][ T36] audit: type=1326 audit(1700006420.009:22346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.2.1006" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014639e159 code=0x50000 [ 133.649454][ T36] audit: type=1326 audit(1700006420.009:22347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.2.1006" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014639e159 code=0x50000 [ 133.676397][ T36] audit: type=1326 audit(1700006420.009:22348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.2.1006" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014639e159 code=0x50000 [ 133.702021][ T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 133.708222][ T36] audit: type=1326 audit(1700006420.009:22349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.2.1006" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014639e159 code=0x50000 [ 133.734823][ T36] audit: type=1326 audit(1700006420.009:22350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.2.1006" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014639e159 code=0x50000 [ 133.760206][ T36] audit: type=1326 audit(1700006420.009:22351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.2.1006" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014639e159 code=0x50000 [ 133.786202][ T36] audit: type=1326 audit(1700006420.009:22352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.2.1006" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014639e159 code=0x50000 [ 133.811460][ T36] audit: type=1326 audit(1700006420.009:22353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.2.1006" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014639e159 code=0x50000 [ 133.836667][ T36] audit: type=1326 audit(1700006420.009:22354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.2.1006" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014639e159 code=0x50000 [ 133.861856][ T10] usb 7-1: device descriptor read/64, error -71 [ 134.098538][ T10] usb 7-1: device descriptor read/64, error -71 [ 134.240774][ T3879] tipc: Started in network mode [ 134.248497][ T3879] tipc: Node identity ac14140f, cluster identity 4711 [ 134.255348][ T3879] tipc: New replicast peer: 255.255.255.255 [ 134.278802][ T3879] tipc: Enabled bearer , priority 10 [ 134.289276][ T3879] tipc: New replicast peer: fc02:0000:0000:0000:0000:0000:0000:0001 [ 134.338592][ T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 134.498591][ T10] usb 7-1: device descriptor read/64, error -71 [ 134.738705][ T10] usb 7-1: device descriptor read/64, error -71 [ 134.808251][ T45] usb 4-1: USB disconnect, device number 64 [ 134.848874][ T10] usb usb7-port1: attempt power cycle [ 135.188938][ T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 135.219935][ T10] usb 7-1: device descriptor read/8, error -71 [ 135.228996][ T45] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 135.349986][ T10] usb 7-1: device descriptor read/8, error -71 [ 135.390038][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.400198][ T373] tipc: Node number set to 2886997007 [ 135.405754][ T45] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 135.417989][ T45] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 135.440451][ T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 135.449744][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.457765][ T45] usb 4-1: Product: syz [ 135.462179][ T45] usb 4-1: Manufacturer: syz [ 135.466824][ T45] usb 4-1: SerialNumber: syz [ 135.589131][ T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 135.620123][ T10] usb 7-1: device descriptor read/8, error -71 [ 135.698037][ T45] usb 4-1: 1:1 : invalid UAC_AS_GENERAL desc [ 135.708467][ T45] usb 4-1: 0:2 : does not exist [ 135.731045][ T45] usb 4-1: USB disconnect, device number 65 [ 135.750344][ T10] usb 7-1: device descriptor read/8, error -71 [ 135.869349][ T10] usb usb7-port1: unable to enumerate USB device [ 136.552065][ T3917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1020'. [ 136.819769][ T65] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 136.949836][ T65] usb 7-1: device descriptor read/64, error -71 [ 137.189962][ T65] usb 7-1: device descriptor read/64, error -71 [ 137.430082][ T65] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 137.560133][ T65] usb 7-1: device descriptor read/64, error -71 [ 137.800266][ T9] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 137.808078][ T65] usb 7-1: device descriptor read/64, error -71 [ 137.920418][ T65] usb usb7-port1: attempt power cycle [ 137.940343][ T9] usb 6-1: device descriptor read/64, error -71 [ 138.053472][ T3945] process '/newroot/362/file0' started with executable stack [ 138.200484][ T9] usb 6-1: device descriptor read/64, error -71 [ 138.260486][ T65] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 138.281540][ T65] usb 7-1: device descriptor read/8, error -71 [ 138.411795][ T65] usb 7-1: device descriptor read/8, error -71 [ 138.440572][ T9] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 138.570910][ T9] usb 6-1: device descriptor read/64, error -71 [ 138.650729][ T65] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 138.671790][ T65] usb 7-1: device descriptor read/8, error -71 [ 138.801771][ T65] usb 7-1: device descriptor read/8, error -71 [ 138.810763][ T9] usb 6-1: device descriptor read/64, error -71 [ 138.910935][ T65] usb usb7-port1: unable to enumerate USB device [ 138.920922][ T9] usb usb6-port1: attempt power cycle [ 139.260998][ T9] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 139.292029][ T9] usb 6-1: device descriptor read/8, error -71 [ 139.422053][ T9] usb 6-1: device descriptor read/8, error -71 [ 139.511109][ T65] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 139.661212][ T9] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 139.669841][ T65] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.680835][ T65] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.693911][ T65] usb 4-1: config 0 interface 0 has no altsetting 0 [ 139.700553][ T65] usb 4-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 139.709671][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.718184][ T9] usb 6-1: device descriptor read/8, error -71 [ 139.724585][ T65] usb 4-1: config 0 descriptor?? [ 139.852331][ T9] usb 6-1: device descriptor read/8, error -71 [ 139.931432][ T3959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.940117][ T3959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.961424][ T9] usb usb6-port1: unable to enumerate USB device [ 140.149428][ T3959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.158169][ T3959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.166593][ T3959] SELinux: security_context_str_to_sid (sytem_uGй9GDk ˬ#xhwoQ7g) failed with errno=-22 [ 140.188051][ T65] lg-g15 0003:046D:0A07.000D: item fetching failed at offset 23/24 [ 140.196179][ T65] lg-g15 0003:046D:0A07.000D: probe with driver lg-g15 failed with error -22 [ 140.393451][ T65] usb 4-1: USB disconnect, device number 66 [ 140.603701][ T36] kauditd_printk_skb: 43028 callbacks suppressed [ 140.603717][ T36] audit: type=1326 audit(1700006427.005:65383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3978 comm="syz.5.1043" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ba399e159 code=0x0 [ 141.031835][ T3984] cgroup: subsys name conflicts with all [ 141.191971][ T45] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 141.256958][ T4010] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 141.266604][ T4010] SELinux: failed to load policy [ 141.342739][ T45] usb 4-1: not running at top speed; connect to a high speed hub [ 141.351169][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.361298][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 141.370249][ T45] usb 4-1: New USB device found, idVendor=0000, idProduct=d970, bcdDevice= 1.00 [ 141.379337][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.391009][ T45] usb 4-1: Found UVC 1.00 device (0000:d970) [ 141.397951][ T45] usb 4-1: No valid video chain found. [ 141.532134][ T65] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 141.592207][ T10] usb 4-1: USB disconnect, device number 67 [ 141.662214][ T65] usb 7-1: device descriptor read/64, error -71 [ 141.711935][ T36] audit: type=1326 audit(1700006428.105:65384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.2.1062" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f014639e159 code=0x0 [ 141.902349][ T65] usb 7-1: device descriptor read/64, error -71 [ 142.100386][ T4036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4036 comm=syz.3.1063 [ 142.113489][ T4038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4038 comm=syz.3.1063 [ 142.142427][ T65] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 142.282487][ T65] usb 7-1: device descriptor read/64, error -71 [ 142.372537][ T9] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 142.512635][ T9] usb 4-1: device descriptor read/64, error -71 [ 142.522634][ T65] usb 7-1: device descriptor read/64, error -71 [ 142.632806][ T65] usb usb7-port1: attempt power cycle [ 142.752734][ T9] usb 4-1: device descriptor read/64, error -71 [ 142.972862][ T65] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 142.992904][ T9] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 143.001466][ T65] usb 7-1: device descriptor read/8, error -71 [ 143.098127][ T4069] bridge0: port 3(veth1_macvtap) entered blocking state [ 143.105153][ T4069] bridge0: port 3(veth1_macvtap) entered disabled state [ 143.112160][ T4069] veth1_macvtap: entered allmulticast mode [ 143.118347][ T4069] veth1_macvtap: left allmulticast mode [ 143.141579][ T9] usb 4-1: device descriptor read/64, error -71 [ 143.148731][ T65] usb 7-1: device descriptor read/8, error -71 [ 143.227868][ T36] audit: type=1400 audit(1700006429.624:65385): avc: denied { read } for pid=4079 comm="syz.5.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 143.393044][ T9] usb 4-1: device descriptor read/64, error -71 [ 143.403072][ T65] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 143.434125][ T65] usb 7-1: device descriptor read/8, error -71 [ 143.503200][ T9] usb usb4-port1: attempt power cycle [ 143.564369][ T65] usb 7-1: device descriptor read/8, error -71 [ 143.603185][ T10] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 143.673377][ T65] usb usb7-port1: unable to enumerate USB device [ 143.754323][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.766703][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.775876][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.783995][ T10] usb 6-1: Product: syz [ 143.788285][ T10] usb 6-1: Manufacturer: syz [ 143.792859][ T10] usb 6-1: SerialNumber: syz [ 143.843281][ T9] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 143.864213][ T9] usb 4-1: device descriptor read/8, error -71 [ 143.994224][ T9] usb 4-1: device descriptor read/8, error -71 [ 144.233472][ T9] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 144.254732][ T9] usb 4-1: device descriptor read/8, error -71 [ 144.353371][ T4097] netlink: 'syz.2.1083': attribute type 4 has an invalid length. [ 144.383015][ T4104] overlayfs: missing 'workdir' [ 144.395186][ T9] usb 4-1: device descriptor read/8, error -71 [ 144.433018][ T36] audit: type=1326 audit(1700006430.824:65386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4115 comm="syz.6.1090" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534cf9e159 code=0x7ffc0000 [ 144.435647][ T4116] fuseblk: Bad value for 'group_id' [ 144.459224][ T36] audit: type=1326 audit(1700006430.824:65387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4115 comm="syz.6.1090" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534cf9e159 code=0x7ffc0000 [ 144.464048][ T4116] fuseblk: Bad value for 'group_id' [ 144.489091][ T36] audit: type=1326 audit(1700006430.834:65388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4115 comm="syz.6.1090" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534cf9e159 code=0x7ffc0000 [ 144.489116][ T36] audit: type=1326 audit(1700006430.834:65389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4115 comm="syz.6.1090" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f534cf9e159 code=0x7ffc0000 [ 144.489152][ T36] audit: type=1326 audit(1700006430.834:65390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4115 comm="syz.6.1090" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534cf9e159 code=0x7ffc0000 [ 144.489172][ T36] audit: type=1326 audit(1700006430.834:65391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4115 comm="syz.6.1090" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534cf9e159 code=0x7ffc0000 [ 144.489194][ T36] audit: type=1326 audit(1700006430.834:65392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4115 comm="syz.6.1090" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f534cf9e159 code=0x7ffc0000 [ 144.524039][ T9] usb usb4-port1: unable to enumerate USB device [ 144.602757][ T4091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.637604][ T4091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.851864][ T10] cdc_ncm 6-1:1.0: failed to get mac address [ 144.873784][ T65] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 145.003850][ T65] usb 7-1: device descriptor read/64, error -71 [ 145.054469][ T10] cdc_ncm 6-1:1.0: bind() failure [ 145.060744][ T10] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 145.068911][ T10] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 145.078021][ T10] usb 6-1: USB disconnect, device number 49 [ 145.244248][ T65] usb 7-1: device descriptor read/64, error -71 [ 145.252554][ T4124] mmap: syz.3.1093 (4124) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 145.324498][ T4151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1101'. [ 145.504109][ T65] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 145.594194][ T373] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 145.649700][ T65] usb 7-1: device descriptor read/64, error -71 [ 145.726162][ T4179] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1111'. [ 145.738700][ T4179] FAULT_INJECTION: forcing a failure. [ 145.738700][ T4179] name failslab, interval 1, probability 0, space 0, times 0 [ 145.751325][ T4179] CPU: 1 UID: 0 PID: 4179 Comm: syz.5.1111 Not tainted syzkaller #0 92ad247b86212872588e4244b63285ac9b5a817e [ 145.751353][ T4179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.751366][ T4179] Call Trace: [ 145.751372][ T4179] [ 145.751378][ T4179] __dump_stack+0x21/0x30 [ 145.751399][ T4179] dump_stack_lvl+0x140/0x1c0 [ 145.751420][ T4179] ? __cfi_dump_stack_lvl+0x10/0x10 [ 145.751435][ T4179] ? kasan_save_track+0x4f/0x80 [ 145.751447][ T4179] ? kasan_save_alloc_info+0x3a/0x50 [ 145.751457][ T4179] dump_stack+0x19/0x20 [ 145.751469][ T4179] should_fail_ex+0x3c2/0x510 [ 145.751481][ T4179] should_failslab+0xac/0x100 [ 145.751492][ T4179] kmem_cache_alloc_noprof+0x42/0x410 [ 145.751503][ T4179] ? mas_wr_store_type+0x13f3/0x1b40 [ 145.751514][ T4179] ? mas_alloc_nodes+0x254/0x9d0 [ 145.751527][ T4179] mas_alloc_nodes+0x254/0x9d0 [ 145.751539][ T4179] mas_preallocate+0x79b/0xc90 [ 145.751551][ T4179] ? __cfi_mas_preallocate+0x10/0x10 [ 145.751563][ T4179] ? __asan_memset+0x39/0x50 [ 145.751573][ T4179] ? vm_area_alloc+0x5f/0x190 [ 145.751584][ T4179] mmap_region+0x1409/0x1d10 [ 145.751595][ T4179] ? __cfi_mmap_region+0x10/0x10 [ 145.751607][ T4179] ? mm_get_unmapped_area_vmflags+0xbe/0xe0 [ 145.751619][ T4179] ? __get_unmapped_area+0x406/0x470 [ 145.751629][ T4179] do_mmap+0xb61/0x13b0 [ 145.751639][ T4179] ? __cfi_do_mmap+0x10/0x10 [ 145.751648][ T4179] ? down_write_killable+0xee/0x2d0 [ 145.751661][ T4179] ? __cfi_down_write_killable+0x10/0x10 [ 145.751673][ T4179] ? lock_vma_under_rcu+0x4cf/0x590 [ 145.751685][ T4179] vm_mmap_pgoff+0x367/0x4b0 [ 145.751696][ T4179] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 145.751706][ T4179] ? __kasan_check_write+0x18/0x20 [ 145.751716][ T4179] ? do_user_addr_fault+0xbf5/0x1230 [ 145.751730][ T4179] ksys_mmap_pgoff+0xfa/0x1e0 [ 145.751740][ T4179] ? __kasan_check_read+0x15/0x20 [ 145.751750][ T4179] __x64_sys_mmap+0x121/0x140 [ 145.751759][ T4179] x64_sys_call+0x13bf/0x2ee0 [ 145.751769][ T4179] do_syscall_64+0x57/0xf0 [ 145.751777][ T4179] ? clear_bhb_loop+0x50/0xa0 [ 145.751789][ T4179] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 145.751800][ T4179] RIP: 0033:0x7f2ba399dec2 [ 145.751810][ T4179] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 145.751819][ T4179] RSP: 002b:00007f2ba48d8d08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 145.751832][ T4179] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ba399dec2 [ 145.751840][ T4179] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000000 [ 145.751846][ T4179] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 145.751853][ T4179] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 145.751860][ T4179] R13: 0000000000001000 R14: 0000000000000022 R15: 00007f2ba3a32778 [ 145.751868][ T4179] [ 145.984382][ T65] usb 7-1: device descriptor read/64, error -71 [ 146.144522][ T65] usb usb7-port1: attempt power cycle [ 146.322896][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 146.322912][ T36] audit: type=1400 audit(1700006432.713:65441): avc: denied { append } for pid=4206 comm="syz.3.1119" name="cpu_dma_latency" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 146.355649][ T36] audit: type=1400 audit(1700006432.713:65442): avc: denied { open } for pid=4206 comm="syz.3.1119" path="/201/dev/cpu_dma_latency" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 146.484615][ T65] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 146.505625][ T65] usb 7-1: device descriptor read/8, error -71 [ 146.554663][ T10] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 146.635660][ T65] usb 7-1: device descriptor read/8, error -71 [ 146.705775][ T10] usb 6-1: config 1 has an invalid interface descriptor of length 8, skipping [ 146.714699][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.724949][ T10] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 146.735606][ T10] usb 6-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 146.744631][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.752874][ T10] usb 6-1: Product: syz [ 146.757050][ T10] usb 6-1: Manufacturer: syz [ 146.761633][ T10] usb 6-1: SerialNumber: syz [ 146.874800][ T65] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 146.895773][ T65] usb 7-1: device descriptor read/8, error -71 [ 146.980676][ T10] usb 6-1: 0:2 : does not exist [ 146.990439][ T10] usb 6-1: USB disconnect, device number 50 [ 147.000738][ T2660] udevd[2660]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 147.036196][ T65] usb 7-1: device descriptor read/8, error -71 [ 147.145069][ T65] usb usb7-port1: unable to enumerate USB device [ 148.055439][ T65] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 148.208143][ T65] usb 7-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 148.217429][ T65] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.225700][ T65] usb 7-1: Product: syz [ 148.230017][ T65] usb 7-1: Manufacturer: syz [ 148.234649][ T65] usb 7-1: SerialNumber: syz [ 148.242847][ T65] ums-karma 7-1:1.0: USB Mass Storage device detected [ 148.256075][ T65] ums-karma 7-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 148.256075][ T65] Please send a copy of this message to and [ 148.642787][ T65] scsi host1: usb-storage 7-1:1.0 [ 148.813829][ T4250] FAULT_INJECTION: forcing a failure. [ 148.813829][ T4250] name failslab, interval 1, probability 0, space 0, times 0 [ 148.826713][ T4250] CPU: 0 UID: 0 PID: 4250 Comm: syz.5.1134 Not tainted syzkaller #0 92ad247b86212872588e4244b63285ac9b5a817e [ 148.826741][ T4250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.826752][ T4250] Call Trace: [ 148.826758][ T4250] [ 148.826766][ T4250] __dump_stack+0x21/0x30 [ 148.826790][ T4250] dump_stack_lvl+0x140/0x1c0 [ 148.826804][ T4250] ? __cfi_dump_stack_lvl+0x10/0x10 [ 148.826818][ T4250] ? futex_wake+0x666/0x950 [ 148.826828][ T4250] dump_stack+0x19/0x20 [ 148.826840][ T4250] should_fail_ex+0x3c2/0x510 [ 148.826853][ T4250] should_failslab+0xac/0x100 [ 148.826866][ T4250] kmem_cache_alloc_noprof+0x42/0x410 [ 148.826877][ T4250] ? do_timer_create+0x1a8/0x1260 [ 148.826889][ T4250] ? vfs_write+0xbcf/0xfd0 [ 148.826901][ T4250] do_timer_create+0x1a8/0x1260 [ 148.826912][ T4250] ? do_futex+0x32a/0x510 [ 148.826925][ T4250] ? __cfi_do_futex+0x10/0x10 [ 148.826938][ T4250] ? mutex_unlock+0x90/0x240 [ 148.826950][ T4250] ? __ia32_sys_clock_nanosleep_time32+0xc0/0xc0 [ 148.826962][ T4250] ? __se_sys_futex+0x13c/0x320 [ 148.826975][ T4250] ? fput+0x1a4/0x230 [ 148.826988][ T4250] __x64_sys_timer_create+0x14d/0x1c0 [ 148.826998][ T4250] ? __cfi___x64_sys_timer_create+0x10/0x10 [ 148.827008][ T4250] ? __kasan_check_write+0x18/0x20 [ 148.827018][ T4250] ? fpregs_restore_userregs+0x11c/0x260 [ 148.827032][ T4250] ? switch_fpu_return+0x12/0x20 [ 148.827044][ T4250] x64_sys_call+0x2704/0x2ee0 [ 148.827054][ T4250] do_syscall_64+0x57/0xf0 [ 148.827063][ T4250] ? clear_bhb_loop+0x50/0xa0 [ 148.827076][ T4250] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 148.827087][ T4250] RIP: 0033:0x7f2ba399e159 [ 148.827097][ T4250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.827113][ T4250] RSP: 002b:00007f2ba48da028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 148.827125][ T4250] RAX: ffffffffffffffda RBX: 00007f2ba3c25fa0 RCX: 00007f2ba399e159 [ 148.827133][ T4250] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 148.827140][ T4250] RBP: 00007f2ba3a3503b R08: 0000000000000000 R09: 0000000000000000 [ 148.827147][ T4250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.827153][ T4250] R13: 00007f2ba3c26038 R14: 00007f2ba3c25fa0 R15: 00007ffc10dff3f8 [ 148.827161][ T4250] [ 148.828304][ T4250] FAULT_INJECTION: forcing a failure. [ 148.828304][ T4250] name failslab, interval 1, probability 0, space 0, times 0 [ 148.852630][ T4226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.853332][ T4250] CPU: 1 UID: 0 PID: 4250 Comm: syz.5.1134 Not tainted syzkaller #0 92ad247b86212872588e4244b63285ac9b5a817e [ 148.853357][ T4250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.853367][ T4250] Call Trace: [ 148.853373][ T4250] [ 148.853380][ T4250] __dump_stack+0x21/0x30 [ 148.853409][ T4250] dump_stack_lvl+0x140/0x1c0 [ 148.853431][ T4250] ? __cfi_dump_stack_lvl+0x10/0x10 [ 148.853456][ T4250] dump_stack+0x19/0x20 [ 148.853477][ T4250] should_fail_ex+0x3c2/0x510 [ 148.853497][ T4250] ? sk_prot_alloc+0x104/0x3a0 [ 148.853518][ T4250] should_failslab+0xac/0x100 [ 148.853539][ T4250] __kmalloc_noprof+0x69/0x510 [ 148.853558][ T4250] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 148.853575][ T4250] ? sk_prot_alloc+0x104/0x3a0 [ 148.853596][ T4250] sk_prot_alloc+0x104/0x3a0 [ 148.853624][ T4250] sk_alloc+0x40/0x590 [ 148.853644][ T4250] netlink_create+0x3d0/0x630 [ 148.853667][ T4250] ? __cfi_nfnetlink_bind+0x10/0x10 [ 148.853686][ T4250] ? __cfi_nfnetlink_unbind+0x10/0x10 [ 148.853709][ T4250] __sock_create+0x3a5/0x810 [ 148.853729][ T4250] __sys_socket+0xe1/0x1c0 [ 148.853747][ T4250] __x64_sys_socket+0x7e/0x90 [ 148.853766][ T4250] x64_sys_call+0x2608/0x2ee0 [ 148.853783][ T4250] do_syscall_64+0x57/0xf0 [ 148.853798][ T4250] ? clear_bhb_loop+0x50/0xa0 [ 148.853819][ T4250] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 148.853838][ T4250] RIP: 0033:0x7f2ba399e159 [ 148.853854][ T4250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.853868][ T4250] RSP: 002b:00007f2ba48da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 148.853888][ T4250] RAX: ffffffffffffffda RBX: 00007f2ba3c25fa0 RCX: 00007f2ba399e159 [ 148.853902][ T4250] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 148.853914][ T4250] RBP: 00007f2ba3a3503b R08: 0000000000000000 R09: 0000000000000000 [ 148.853925][ T4250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.853935][ T4250] R13: 00007f2ba3c26038 R14: 00007f2ba3c25fa0 R15: 00007ffc10dff3f8 [ 148.853950][ T4250] [ 149.289089][ T4226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.302679][ T65] usb 7-1: USB disconnect, device number 29 [ 149.546133][ T45] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 149.697297][ T45] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 149.706477][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.715069][ T45] usb 6-1: config 0 descriptor?? [ 150.066394][ T310] usb 7-1: new low-speed USB device number 30 using dummy_hcd [ 150.213175][ T4286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1147'. [ 150.225491][ T4288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1147'. [ 150.228533][ T310] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 4 [ 150.245400][ T310] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0 [ 150.256169][ T310] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 150.268703][ T310] usb 7-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 150.282420][ T45] usb 6-1: Cannot set MAC address [ 150.287690][ T310] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.295679][ T310] usb 7-1: Product: Б [ 150.299888][ T45] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 150.311553][ T310] usb 7-1: Manufacturer: ᠊ [ 150.316202][ T310] usb 7-1: SerialNumber: ᰉ [ 150.321724][ T45] usb 6-1: USB disconnect, device number 51 [ 150.535489][ T310] usb 7-1: failed waiting for Axe-Fx III to boot: -71 [ 150.542363][ T310] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 150.553212][ T310] usb 7-1: USB disconnect, device number 30 [ 150.838161][ T36] audit: type=1400 audit(1700006437.230:65443): avc: denied { read } for pid=4321 comm="syz.5.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.274796][ T36] audit: type=1400 audit(1700006437.660:65444): avc: denied { read } for pid=4335 comm="syz.6.1162" name="c_srate" dev="configfs" ino=39679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 151.315779][ T4336] kvm: kvm [4335]: vcpu0, guest rIP: 0x9143 Unhandled WRMSR(0x11e) = 0xbe702111 [ 151.837284][ T10] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 151.846162][ T4363] FAULT_INJECTION: forcing a failure. [ 151.846162][ T4363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.859601][ T4363] CPU: 1 UID: 0 PID: 4363 Comm: syz.5.1171 Not tainted syzkaller #0 92ad247b86212872588e4244b63285ac9b5a817e [ 151.859627][ T4363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.859638][ T4363] Call Trace: [ 151.859643][ T4363] [ 151.859651][ T4363] __dump_stack+0x21/0x30 [ 151.859675][ T4363] dump_stack_lvl+0x140/0x1c0 [ 151.859689][ T4363] ? __cfi_dump_stack_lvl+0x10/0x10 [ 151.859745][ T4363] ? check_stack_object+0x138/0x150 [ 151.859758][ T4363] dump_stack+0x19/0x20 [ 151.859771][ T4363] should_fail_ex+0x3c2/0x510 [ 151.859783][ T4363] should_fail+0xf/0x20 [ 151.859794][ T4363] should_fail_usercopy+0x1e/0x30 [ 151.859807][ T4363] _copy_to_user+0x24/0xa0 [ 151.859821][ T4363] simple_read_from_buffer+0xed/0x160 [ 151.859835][ T4363] proc_fail_nth_read+0x1aa/0x220 [ 151.859850][ T4363] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 151.859864][ T4363] ? __kasan_check_write+0x18/0x20 [ 151.859874][ T4363] ? bpf_lsm_file_permission+0xd/0x20 [ 151.859887][ T4363] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 151.859901][ T4363] vfs_read+0x28b/0xc70 [ 151.859912][ T4363] ? __cfi_vfs_read+0x10/0x10 [ 151.859922][ T4363] ? __kasan_check_write+0x18/0x20 [ 151.859932][ T4363] ? mutex_lock+0x97/0x1d0 [ 151.859944][ T4363] ? __cfi_mutex_lock+0x10/0x10 [ 151.859956][ T4363] ksys_read+0x145/0x260 [ 151.859966][ T4363] ? __cfi_ksys_read+0x10/0x10 [ 151.859976][ T4363] ? __kasan_check_read+0x15/0x20 [ 151.859986][ T4363] __x64_sys_read+0x7f/0x90 [ 151.859997][ T4363] x64_sys_call+0x2638/0x2ee0 [ 151.860006][ T4363] do_syscall_64+0x57/0xf0 [ 151.860015][ T4363] ? clear_bhb_loop+0x50/0xa0 [ 151.860028][ T4363] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 151.860039][ T4363] RIP: 0033:0x7f2ba395e98e [ 151.860049][ T4363] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 151.860058][ T4363] RSP: 002b:00007f2ba48d9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 151.860070][ T4363] RAX: ffffffffffffffda RBX: 00007f2ba48da6c0 RCX: 00007f2ba395e98e [ 151.860078][ T4363] RDX: 000000000000000f RSI: 00007f2ba48da0a0 RDI: 0000000000000003 [ 151.860085][ T4363] RBP: 00007f2ba48da090 R08: 0000000000000000 R09: 0000000000000000 [ 151.860091][ T4363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.860098][ T4363] R13: 00007f2ba3c26038 R14: 00007f2ba3c25fa0 R15: 00007ffc10dff3f8 [ 151.860106][ T4363] [ 151.968685][ T4365] input: syz0 as /devices/virtual/input/input17 [ 152.027710][ T36] audit: type=1400 audit(1700006438.380:65445): avc: denied { map } for pid=4368 comm="syz.2.1173" path="socket:[39995]" dev="sockfs" ino=39995 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 152.032288][ T4365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.142901][ T4365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.142997][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 152.162129][ T10] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 152.177415][ T10] usb 7-1: config 179 has no interface number 0 [ 152.183712][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 152.197491][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 152.213297][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 152.222194][ T4381] 9p: Unknown access argument 18446744073709551615: -34 [ 152.224524][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 152.243027][ T10] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 152.256299][ T10] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 152.265342][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.274540][ T4357] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 152.297503][ T65] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 152.447574][ T65] usb 6-1: device descriptor read/64, error -71 [ 152.490042][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input18 [ 152.692713][ T45] usb 7-1: USB disconnect, device number 31 [ 152.692813][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 152.707209][ T45] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 152.707290][ C0] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 152.724729][ T65] usb 6-1: device descriptor read/64, error -71 [ 152.967846][ T65] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 153.097907][ T65] usb 6-1: device descriptor read/64, error -71 [ 153.331659][ T36] audit: type=1400 audit(1700006439.729:65446): avc: denied { create } for pid=4390 comm="syz.6.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 153.338025][ T65] usb 6-1: device descriptor read/64, error -71 [ 153.468205][ T65] usb usb6-port1: attempt power cycle [ 153.808317][ T65] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 153.829326][ T65] usb 6-1: device descriptor read/8, error -71 [ 153.959401][ T65] usb 6-1: device descriptor read/8, error -71 [ 154.198456][ T65] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 154.221782][ T65] usb 6-1: device descriptor read/8, error -71 [ 154.306849][ T36] audit: type=1326 audit(1700006440.699:65447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.6.1190" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f534cf9e159 code=0x0 [ 154.359491][ T65] usb 6-1: device descriptor read/8, error -71 [ 154.468721][ T65] usb usb6-port1: unable to enumerate USB device [ 155.799241][ T9] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 155.979310][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 155.984981][ T36] audit: type=1400 audit(1700006442.378:65448): avc: denied { ioctl } for pid=4459 comm="syz.5.1200" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 156.011087][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 156.019492][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.034258][ T9] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 156.043556][ T9] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 156.057890][ T4472] netlink: 'syz.6.1204': attribute type 4 has an invalid length. [ 156.066097][ T9] usb 6-1: New USB device found, idVendor=17cc, idProduct=0839, bcdDevice= 0.40 [ 156.077380][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.087873][ T9] usb 6-1: Product: syz [ 156.093313][ T9] usb 6-1: Manufacturer: syz [ 156.097964][ T9] usb 6-1: SerialNumber: syz [ 156.364938][ T36] audit: type=1400 audit(1700006442.758:65449): avc: denied { read write } for pid=4459 comm="syz.5.1200" name="ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 156.380265][ T4487] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1200'. [ 156.389181][ T36] audit: type=1400 audit(1700006442.758:65450): avc: denied { open } for pid=4459 comm="syz.5.1200" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 156.467707][ T9] usb 6-1: unit 5 not found! [ 156.474687][ T9] usb 6-1: USB disconnect, device number 56 [ 156.481162][ T1714] udevd[1714]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 156.901334][ T36] audit: type=1400 audit(1700006443.297:65451): avc: denied { read append } for pid=4501 comm="syz.6.1213" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 156.926286][ T36] audit: type=1400 audit(1700006443.297:65452): avc: denied { open } for pid=4501 comm="syz.6.1213" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 156.989824][ T36] audit: type=1400 audit(1700006443.377:65453): avc: denied { mounton } for pid=4507 comm="syz.6.1216" path="/137/dev/sda1" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 157.229959][ T2617] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 157.330048][ T9] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 157.360018][ T2617] usb 7-1: device descriptor read/64, error -71 [ 157.481324][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 157.489615][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.499704][ T9] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 157.508667][ T9] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 157.519558][ T9] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 157.532690][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 157.543506][ T9] usb 6-1: config 1 interface 1 has no altsetting 0 [ 157.561836][ T9] usb 6-1: string descriptor 0 read error: -22 [ 157.568064][ T9] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 157.577194][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.610142][ T2617] usb 7-1: device descriptor read/64, error -71 [ 157.719841][ T4521] overlayfs: missing 'lowerdir' [ 157.725165][ T4521] overlayfs: failed to clone upperpath [ 157.731415][ T4521] overlayfs: failed to clone upperpath [ 157.850271][ T2617] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 157.980335][ T2617] usb 7-1: device descriptor read/64, error -71 [ 158.138062][ T4525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.146632][ T4525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.220455][ T2617] usb 7-1: device descriptor read/64, error -71 [ 158.331397][ T2617] usb usb7-port1: attempt power cycle [ 158.680922][ T2617] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 158.716907][ T2617] usb 7-1: device descriptor read/8, error -71 [ 158.851855][ T2617] usb 7-1: device descriptor read/8, error -71 [ 158.853882][ T4532] overlayfs: failed to resolve './cgroup': -2 [ 159.090888][ T2617] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 159.111959][ T2617] usb 7-1: device descriptor read/8, error -71 [ 159.242002][ T2617] usb 7-1: device descriptor read/8, error -71 [ 159.351835][ T2617] usb usb7-port1: unable to enumerate USB device [ 160.090298][ T9] usb 6-1: Warning! Unlikely big volume range (=29647), cval->res is probably wrong. [ 160.099925][ T9] usb 6-1: [2] FU [Speaker Playback Volume] ch = 1, val = -29647/0/1 [ 160.113222][ T9] usb 6-1: USB disconnect, device number 57 [ 160.154254][ T4561] netlink: 4476 bytes leftover after parsing attributes in process `syz.5.1231'. [ 160.401586][ T65] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 160.491612][ T9] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 160.551660][ T65] usb 7-1: Using ep0 maxpacket: 32 [ 160.560685][ T65] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 160.574885][ T65] usb 7-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 160.584009][ T65] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.592055][ T65] usb 7-1: Product: syz [ 160.596222][ T65] usb 7-1: Manufacturer: syz [ 160.600785][ T65] usb 7-1: SerialNumber: syz [ 160.631683][ T9] usb 6-1: device descriptor read/64, error -71 [ 160.814122][ T65] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 160.820980][ T65] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 160.828656][ T65] usb 7-1: 0:3 : does not exist [ 160.833528][ T65] usb 7-1: 0:4 : does not exist [ 160.838380][ T65] usb 7-1: unit 7 not found! [ 160.847422][ T65] usb 7-1: USB disconnect, device number 36 [ 160.881786][ T9] usb 6-1: device descriptor read/64, error -71 [ 161.121964][ T9] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 161.252037][ T9] usb 6-1: device descriptor read/64, error -71 [ 161.349781][ T4584] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 161.358636][ T4584] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 161.379929][ T4586] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 161.388180][ T4586] SELinux: security_context_str_to_sid (^) failed with errno=-22 [ 161.398134][ T4586] tipc: Enabling of bearer rejected, media not registered [ 161.416713][ T36] audit: type=1400 audit(1700006447.805:65454): avc: denied { getopt } for pid=4587 comm="syz.2.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 161.471337][ T36] audit: type=1400 audit(1700006447.835:65455): avc: denied { accept } for pid=4587 comm="syz.2.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 161.502090][ T9] usb 6-1: device descriptor read/64, error -71 [ 161.529606][ T36] audit: type=1326 audit(1700006447.915:65456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4598 comm="syz.2.1245" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f014639e159 code=0x0 [ 161.608782][ T4600] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.612248][ T9] usb usb6-port1: attempt power cycle [ 161.616037][ T4600] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.628550][ T4600] bridge_slave_0: entered allmulticast mode [ 161.635080][ T4600] bridge_slave_0: entered promiscuous mode [ 161.641789][ T4600] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.649523][ T4600] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.656852][ T4600] bridge_slave_1: entered allmulticast mode [ 161.664478][ T4600] bridge_slave_1: entered promiscuous mode [ 161.725856][ T4600] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.733031][ T4600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.740305][ T4600] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.747345][ T4600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.772789][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.780111][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.794461][ T1926] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.801513][ T1926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.810951][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.818036][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.850217][ T4600] veth0_vlan: entered promiscuous mode [ 161.864737][ T4600] veth1_macvtap: entered promiscuous mode [ 161.952304][ T9] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 161.973386][ T9] usb 6-1: device descriptor read/8, error -71 [ 162.104149][ T9] usb 6-1: device descriptor read/8, error -71 [ 162.303701][ T36] audit: type=1400 audit(1700006448.695:65457): avc: denied { write } for pid=4626 comm="syz.6.1251" path="socket:[42043]" dev="sockfs" ino=42043 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 162.342915][ T9] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 162.373047][ T9] usb 6-1: device descriptor read/8, error -71 [ 162.401529][ T4644] cgroup: Unknown subsys name 'measure' [ 162.407975][ T4644] cgroup: Unknown subsys name 'measure' [ 162.472590][ T65] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 162.504502][ T9] usb 6-1: device descriptor read/8, error -71 [ 162.542872][ T598] usb 7-1: new low-speed USB device number 37 using dummy_hcd [ 162.560958][ T36] audit: type=1400 audit(1700006448.944:65458): avc: denied { nlmsg_write } for pid=4661 comm="syz.2.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 162.622319][ T9] usb usb6-port1: unable to enumerate USB device [ 162.630460][ T65] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 162.638669][ T65] usb 8-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 162.648920][ T65] usb 8-1: config 0 has no interface number 0 [ 162.656524][ T65] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 162.665706][ T65] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.673796][ T65] usb 8-1: Product: syz [ 162.678037][ T65] usb 8-1: Manufacturer: syz [ 162.682685][ T598] usb 7-1: device descriptor read/64, error -71 [ 162.689029][ T65] usb 8-1: SerialNumber: syz [ 162.697975][ T65] usb 8-1: config 0 descriptor?? [ 162.905124][ T4625] FAULT_INJECTION: forcing a failure. [ 162.905124][ T4625] name failslab, interval 1, probability 0, space 0, times 0 [ 162.917858][ T4625] CPU: 0 UID: 0 PID: 4625 Comm: syz.7.1250 Not tainted syzkaller #0 92ad247b86212872588e4244b63285ac9b5a817e [ 162.917890][ T4625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.917902][ T4625] Call Trace: [ 162.917910][ T4625] [ 162.917919][ T4625] __dump_stack+0x21/0x30 [ 162.917945][ T4625] dump_stack_lvl+0x140/0x1c0 [ 162.917959][ T4625] ? __cfi_dump_stack_lvl+0x10/0x10 [ 162.917973][ T4625] ? do_futex+0x32a/0x510 [ 162.917987][ T4625] dump_stack+0x19/0x20 [ 162.917999][ T4625] should_fail_ex+0x3c2/0x510 [ 162.918011][ T4625] should_failslab+0xac/0x100 [ 162.918024][ T4625] kmem_cache_alloc_noprof+0x42/0x410 [ 162.918035][ T4625] ? prepare_creds+0x47/0x6b0 [ 162.918045][ T4625] ? __cfi_make_kuid+0x10/0x10 [ 162.918057][ T4625] prepare_creds+0x47/0x6b0 [ 162.918068][ T4625] __sys_setuid+0x96/0x740 [ 162.918080][ T4625] __x64_sys_setuid+0x3b/0x50 [ 162.918091][ T4625] x64_sys_call+0xe99/0x2ee0 [ 162.918100][ T4625] do_syscall_64+0x57/0xf0 [ 162.918110][ T4625] ? clear_bhb_loop+0x50/0xa0 [ 162.918125][ T4625] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 162.918137][ T4625] RIP: 0033:0x7fd354f9e159 [ 162.918147][ T4625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.918156][ T4625] RSP: 002b:00007fd3539e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 162.918168][ T4625] RAX: ffffffffffffffda RBX: 00007fd355225fa0 RCX: 00007fd354f9e159 [ 162.918176][ T4625] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.918182][ T4625] RBP: 00007fd35503503b R08: 0000000000000000 R09: 0000000000000000 [ 162.918189][ T4625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.918196][ T4625] R13: 00007fd355226038 R14: 00007fd355225fa0 R15: 00007fffb24a1298 [ 162.918210][ T4625] [ 163.105745][ T598] usb 7-1: device descriptor read/64, error -71 [ 163.120191][ T36] audit: type=1400 audit(1700006449.504:65459): avc: denied { map } for pid=4624 comm="syz.7.1250" path=2F352F66696C6531202864656C6574656429 dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 163.145927][ T36] audit: type=1400 audit(1700006449.504:65460): avc: denied { execute } for pid=4624 comm="syz.7.1250" path=2F352F66696C6531202864656C6574656429 dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 163.170665][ T65] usb 8-1: Found UVC 0.00 device syz (046d:0823) [ 163.177036][ T65] usb 8-1: No valid video chain found. [ 163.183403][ T65] usb 8-1: USB disconnect, device number 2 [ 163.241222][ T4672] kvm: emulating exchange as write [ 163.343102][ T598] usb 7-1: new low-speed USB device number 38 using dummy_hcd [ 163.483226][ T598] usb 7-1: device descriptor read/64, error -71 [ 163.723237][ T598] usb 7-1: device descriptor read/64, error -71 [ 163.833323][ T598] usb usb7-port1: attempt power cycle [ 163.913296][ T373] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 164.064845][ T373] usb 8-1: unable to get BOS descriptor or descriptor too short [ 164.081125][ T373] usb 8-1: not running at top speed; connect to a high speed hub [ 164.089699][ T373] usb 8-1: config 129 has an invalid interface number: 80 but max is 0 [ 164.098116][ T373] usb 8-1: config 129 has an invalid interface number: 5 but max is 0 [ 164.106625][ T373] usb 8-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 164.116041][ T373] usb 8-1: config 129 has no interface number 0 [ 164.122416][ T373] usb 8-1: config 129 has no interface number 1 [ 164.129528][ T373] usb 8-1: config 129 interface 80 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 164.143240][ T373] usb 8-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 164.154442][ T4697] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1272'. [ 164.154523][ T36] audit: type=1400 audit(1700006450.544:65461): avc: denied { sys_module } for pid=4696 comm="syz.2.1272" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 164.163816][ T373] usb 8-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 164.184680][ T598] usb 7-1: new low-speed USB device number 39 using dummy_hcd [ 164.206375][ T373] usb 8-1: config 129 interface 80 has no altsetting 0 [ 164.212104][ T4699] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=32076 sclass=netlink_tcpdiag_socket pid=4699 comm=syz.2.1272 [ 164.213773][ T373] usb 8-1: config 129 interface 5 has no altsetting 0 [ 164.226855][ T4698] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=32076 sclass=netlink_tcpdiag_socket pid=4698 comm=syz.2.1272 [ 164.234574][ T373] usb 8-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 164.246197][ T4697] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1272'. [ 164.255193][ T373] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.264131][ T4697] netlink: 412 bytes leftover after parsing attributes in process `syz.2.1272'. [ 164.272166][ T373] usb 8-1: Product: syz [ 164.281698][ T598] usb 7-1: device descriptor read/8, error -71 [ 164.286505][ T373] usb 8-1: Manufacturer: syz [ 164.295932][ T373] usb 8-1: SerialNumber: syz [ 164.316842][ T4705] netlink: 182 bytes leftover after parsing attributes in process `syz.2.1274'. [ 164.414521][ T598] usb 7-1: device descriptor read/8, error -71 [ 164.507928][ T373] usb 8-1: MIDIStreaming interface descriptor not found [ 164.527585][ T373] usb 8-1: USB disconnect, device number 3 [ 164.653792][ T598] usb 7-1: new low-speed USB device number 40 using dummy_hcd [ 164.674657][ T598] usb 7-1: device descriptor read/8, error -71 [ 164.735553][ T4703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1273'. [ 164.805032][ T598] usb 7-1: device descriptor read/8, error -71 [ 164.913931][ T598] usb usb7-port1: unable to enumerate USB device [ 165.253969][ T598] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 165.405136][ T598] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 165.415008][ T598] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 165.433158][ T598] usb 8-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 165.442287][ T598] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.450303][ T598] usb 8-1: Product: syz [ 165.454536][ T598] usb 8-1: Manufacturer: syz [ 165.459193][ T598] usb 8-1: SerialNumber: syz [ 165.464763][ T598] usb 8-1: config 0 descriptor?? [ 165.469972][ T4737] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 165.477212][ T4737] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 165.685693][ T4737] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 165.692985][ T4737] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 165.808955][ T4751] fuse: Bad value for 'user_id' [ 165.813852][ T4751] fuse: Bad value for 'user_id' [ 165.853822][ T36] audit: type=1400 audit(1700006452.233:65462): avc: denied { call } for pid=4759 comm="syz.5.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 165.854049][ T4760] rust_binder: 4759:4760 error while translating object: EPERM [ 165.875760][ T36] audit: type=1400 audit(1700006452.233:65463): avc: denied { transfer } for pid=4759 comm="syz.5.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 165.880845][ T4760] rust_binder: Failure in copy_transaction_data: EPERM [ 165.900004][ T4760] rust_binder: 4759:4760 transaction call to 4759:0 failed EPERM, code 0 size 88-24 [ 165.917880][ T598] Error reading MAC address [ 165.928425][ T598] usb 8-1: USB disconnect, device number 4 [ 165.939769][ T9] rust_binder: 4759: undelivered TRANSACTION_ERROR: 29201 [ 166.005062][ T4765] kvm: MWAIT instruction emulated as NOP! [ 166.394526][ T598] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 166.520845][ T4799] FAULT_INJECTION: forcing a failure. [ 166.520845][ T4799] name failslab, interval 1, probability 0, space 0, times 0 [ 166.533750][ T4799] CPU: 0 UID: 0 PID: 4799 Comm: syz.6.1309 Not tainted syzkaller #0 92ad247b86212872588e4244b63285ac9b5a817e [ 166.533770][ T4799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.533777][ T4799] Call Trace: [ 166.533781][ T4799] [ 166.533786][ T4799] __dump_stack+0x21/0x30 [ 166.533805][ T4799] dump_stack_lvl+0x140/0x1c0 [ 166.533819][ T4799] ? __cfi_dump_stack_lvl+0x10/0x10 [ 166.533834][ T4799] ? __filename_parentat+0x458/0x660 [ 166.533847][ T4799] dump_stack+0x19/0x20 [ 166.533863][ T4799] should_fail_ex+0x3c2/0x510 [ 166.533875][ T4799] should_failslab+0xac/0x100 [ 166.533887][ T4799] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 166.533898][ T4799] ? __d_alloc+0x42/0x8c0 [ 166.533907][ T4799] ? __d_lookup+0x4e8/0x550 [ 166.533919][ T4799] __d_alloc+0x42/0x8c0 [ 166.533929][ T4799] d_alloc+0x4c/0x1c0 [ 166.533939][ T4799] ? lookup_one_qstr_excl+0xba/0x280 [ 166.533951][ T4799] lookup_one_qstr_excl+0xcf/0x280 [ 166.533964][ T4799] filename_create+0x241/0x450 [ 166.533979][ T4799] ? kern_path_create+0x70/0x70 [ 166.533995][ T4799] ? __cfi___check_object_size+0x10/0x10 [ 166.534006][ T4799] do_mkdirat+0xa9/0x530 [ 166.534019][ T4799] ? __cfi_do_mkdirat+0x10/0x10 [ 166.534031][ T4799] ? __kasan_check_write+0x18/0x20 [ 166.534041][ T4799] ? getname_flags+0x203/0x6b0 [ 166.534051][ T4799] ? __kasan_check_write+0x18/0x20 [ 166.534061][ T4799] __x64_sys_mkdirat+0x8b/0xa0 [ 166.534074][ T4799] x64_sys_call+0x2ba8/0x2ee0 [ 166.534083][ T4799] do_syscall_64+0x57/0xf0 [ 166.534093][ T4799] ? clear_bhb_loop+0x50/0xa0 [ 166.534104][ T4799] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 166.534115][ T4799] RIP: 0033:0x7f534cf9e159 [ 166.534125][ T4799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.534134][ T4799] RSP: 002b:00007f534de84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 166.534147][ T4799] RAX: ffffffffffffffda RBX: 00007f534d225fa0 RCX: 00007f534cf9e159 [ 166.534155][ T4799] RDX: 16bfc9754559bcb9 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 166.534162][ T4799] RBP: 00007f534d03503b R08: 0000000000000000 R09: 0000000000000000 [ 166.534169][ T4799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.534176][ T4799] R13: 00007f534d226038 R14: 00007f534d225fa0 R15: 00007fffa19f06d8 [ 166.534184][ T4799] [ 166.770597][ T598] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.784761][ T598] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 166.795006][ T598] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.803008][ T598] usb 6-1: Product: syz [ 166.807194][ T598] usb 6-1: Manufacturer: syz [ 166.812071][ T598] usb 6-1: SerialNumber: syz [ 166.818658][ T598] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 166.824561][ T598] cdc_wdm 6-1:1.0: Unknown control protocol [ 166.830548][ T9] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 166.985990][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.996123][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.006356][ T9] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 167.015487][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.023472][ T9] usb 8-1: Product: syz [ 167.027653][ T9] usb 8-1: Manufacturer: syz [ 167.032262][ T9] usb 8-1: SerialNumber: syz [ 167.046636][ C1] cdc_wdm 6-1:1.0: unknown notification 118 received: index 49584 len 5225 [ 167.055400][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 1 bytes [ 167.174931][ T45] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 167.239865][ T9] usb 8-1: 0:2 : does not exist [ 167.245471][ T9] usb 8-1: unit 9 not found! [ 167.247304][ T4772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.252432][ T9] usb 8-1: 4:0: cannot get min/max values for control 1 (id 4) [ 167.258887][ T4772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.268677][ T9] usb 8-1: 4:0: cannot get min/max values for control 2 (id 4) [ 167.279526][ T373] usb 6-1: USB disconnect, device number 62 [ 167.285091][ T9] usb 8-1: 4:0: cannot get min/max values for control 4 (id 4) [ 167.302968][ T9] usb 8-1: 4:0: cannot get min/max values for control 7 (id 4) [ 167.312909][ T9] usb 8-1: 4:0: cannot get min/max values for control 8 (id 4) [ 167.322667][ T9] usb 8-1: 4:0: cannot get min/max values for control 9 (id 4) [ 167.324993][ T45] usb 7-1: Using ep0 maxpacket: 16 [ 167.332297][ T9] usb 8-1: 4:0: cannot get min/max values for control 10 (id 4) [ 167.336597][ T45] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.356713][ T45] usb 7-1: config 0 interface 0 has no altsetting 0 [ 167.357248][ T9] usb 8-1: USB disconnect, device number 5 [ 167.363324][ T45] usb 7-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 167.382520][ T1714] udevd[1714]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 167.385983][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.407162][ T45] usb 7-1: config 0 descriptor?? [ 167.614068][ T4811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.626253][ T4811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.634760][ T4811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.643376][ T4811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.793794][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 167.793812][ T36] audit: type=1400 audit(1700006454.172:65468): avc: denied { read write } for pid=4881 comm="syz.7.1320" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 167.811589][ T4883] rust_binder: 4880:4883 no such ref 1 [ 167.827075][ T36] audit: type=1400 audit(1700006454.172:65469): avc: denied { open } for pid=4881 comm="syz.7.1320" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 167.830263][ T4883] rust_binder: 4880:4883 got reply transaction with no transaction stack [ 167.862426][ T36] audit: type=1400 audit(1700006454.182:65470): avc: denied { ioctl } for pid=4881 comm="syz.7.1320" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 167.892282][ T4884] rust_binder: Failure in copy_transaction_data: EINVAL [ 167.892309][ T4884] rust_binder: 4880:4884 transaction call to 4880:0 failed EINVAL, code 0 size 80-24 [ 167.894201][ T4883] rust_binder: 4880:4883 transaction reply to 0:0 failed EINVAL, code 0 size 72-24 [ 167.919115][ T373] rust_binder: 4880: undelivered TRANSACTION_ERROR: 29201 [ 167.982344][ T36] audit: type=1400 audit(1700006454.362:65471): avc: denied { mount } for pid=4899 comm="syz.2.1325" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 168.561908][ T4915] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1327'. [ 168.595801][ T4915] overlayfs: failed to resolve 'rootcontext=system_u': -2 [ 168.606747][ T36] audit: type=1400 audit(1700006454.991:65472): avc: denied { read } for pid=4914 comm="syz.7.1327" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 168.735134][ T36] audit: type=1400 audit(1700006455.111:65473): avc: denied { map } for pid=4919 comm="syz.7.1329" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 168.856012][ T4931] netlink: 'syz.2.1332': attribute type 11 has an invalid length. [ 168.984282][ T36] audit: type=1400 audit(1700006455.361:65474): avc: denied { mounton } for pid=4937 comm="syz.7.1336" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 169.021460][ T4946] SELinux: policydb table sizes (8,2097159) do not match mine (8,7) [ 169.029714][ T4946] SELinux: failed to load policy [ 169.037621][ T36] audit: type=1400 audit(1700006455.421:65475): avc: denied { connect } for pid=4937 comm="syz.7.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 169.128153][ T4950] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 169.143381][ T4951] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 169.951225][ T45] usbhid 7-1:0.0: can't add hid device: -71 [ 169.963863][ T373] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 169.977052][ T45] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 169.990729][ T45] usb 7-1: USB disconnect, device number 41 [ 170.106466][ T373] usb 6-1: device descriptor read/64, error -71 [ 170.122592][ T4974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.131882][ T4974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.139997][ T4974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.148534][ T4974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.157019][ T4974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.165606][ T4974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.173653][ T4974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.182119][ T4974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.190626][ T4974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.199415][ T4974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.356528][ T373] usb 6-1: device descriptor read/64, error -71 [ 170.362859][ T2617] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 170.517655][ T2617] usb 8-1: config 162 has an invalid interface number: 79 but max is 1 [ 170.525950][ T2617] usb 8-1: config 162 has an invalid interface number: 183 but max is 1 [ 170.534329][ T2617] usb 8-1: config 162 has no interface number 0 [ 170.540669][ T2617] usb 8-1: config 162 has no interface number 1 [ 170.547123][ T2617] usb 8-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 170.560164][ T2617] usb 8-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 170.571027][ T2617] usb 8-1: config 162 interface 183 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 170.582161][ T2617] usb 8-1: config 162 interface 183 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 170.593291][ T2617] usb 8-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 170.605118][ T2617] usb 8-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64 [ 170.616435][ T373] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 170.623999][ T2617] usb 8-1: config 162 interface 183 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 170.635357][ T2617] usb 8-1: config 162 interface 183 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 170.645484][ T2617] usb 8-1: config 162 interface 183 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 170.658780][ T2617] usb 8-1: config 162 interface 79 has no altsetting 0 [ 170.665660][ T2617] usb 8-1: config 162 interface 183 has no altsetting 0 [ 170.674219][ T2617] usb 8-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 170.683284][ T2617] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.691272][ T2617] usb 8-1: Product: syz [ 170.695417][ T2617] usb 8-1: Manufacturer: syz [ 170.700036][ T2617] usb 8-1: SerialNumber: syz [ 170.796742][ T373] usb 6-1: device descriptor read/64, error -71 [ 170.877244][ T5000] overlayfs: failed to resolve './bus': -2 [ 170.892334][ T5002] /dev/nullb0: Can't lookup blockdev [ 170.912820][ T2617] pl2303 8-1:162.79: required endpoints missing [ 170.920025][ T2617] pl2303 8-1:162.183: pl2303 converter detected [ 170.926501][ T2617] pl2303 8-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 170.934970][ T2617] pl2303 8-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 170.943497][ T2617] pl2303 8-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 170.951839][ T2617] pl2303 8-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 170.960176][ T2617] pl2303 8-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 170.968630][ T2617] pl2303 8-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 170.977217][ T2617] pl2303 8-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 170.985539][ T2617] pl2303 8-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 170.993919][ T2617] pl2303 8-1:162.183: pl2303_vendor_write - failed to write [0000]: -71 [ 171.002460][ T2617] pl2303 8-1:162.183: pl2303_vendor_write - failed to write [0001]: -71 [ 171.011162][ T2617] pl2303 8-1:162.183: pl2303_vendor_write - failed to write [0002]: -71 [ 171.020420][ T2617] usb 8-1: pl2303 converter now attached to ttyUSB0 [ 171.028879][ T2617] usb 8-1: USB disconnect, device number 6 [ 171.037000][ T373] usb 6-1: device descriptor read/64, error -71 [ 171.043374][ T2617] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 171.051455][ T2617] pl2303 8-1:162.183: device disconnected [ 171.136997][ T310] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 171.146990][ T373] usb usb6-port1: attempt power cycle [ 171.286984][ T310] usb 7-1: Using ep0 maxpacket: 16 [ 171.293174][ T310] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.304146][ T310] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.313947][ T310] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 171.323001][ T310] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.331547][ T310] usb 7-1: config 0 descriptor?? [ 171.487079][ T373] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 171.489813][ T5009] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 171.512353][ T373] usb 6-1: device descriptor read/8, error -71 [ 171.648142][ T373] usb 6-1: device descriptor read/8, error -71 [ 171.694090][ T5013] incfs: Options parsing error. -22 [ 171.699411][ T5013] incfs: mount failed -22 [ 171.708021][ T596] Bluetooth: hci0: sending frame failed (-49) [ 171.714205][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 171.749501][ T5016] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1363'. [ 171.789169][ T36] audit: type=1326 audit(1700006458.160:65476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.7.1364" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd354f9e159 code=0x7ffc0000 [ 171.829614][ T36] audit: type=1326 audit(1700006458.160:65477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.7.1364" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd354f9e159 code=0x7ffc0000 [ 171.863207][ T5015] overlayfs: failed to resolve './cgroup': -2 [ 171.887286][ T373] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 171.908393][ T373] usb 6-1: device descriptor read/8, error -71 [ 172.038282][ T373] usb 6-1: device descriptor read/8, error -71 [ 172.157428][ T45] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 172.165132][ T373] usb usb6-port1: unable to enumerate USB device [ 172.319834][ T45] usb 8-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 172.328945][ T45] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.336932][ T45] usb 8-1: Product: syz [ 172.341101][ T45] usb 8-1: Manufacturer: syz [ 172.345718][ T45] usb 8-1: SerialNumber: syz [ 172.353085][ T45] ums-karma 8-1:1.0: USB Mass Storage device detected [ 172.360663][ T45] ums-karma 8-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 172.360663][ T45] Please send a copy of this message to and [ 172.554037][ T5026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.562599][ T5026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.740739][ T310] usbhid 7-1:0.0: can't add hid device: -71 [ 172.746842][ T310] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 172.755774][ T310] usb 7-1: USB disconnect, device number 42 [ 172.972099][ T5026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.985149][ T5026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.031996][ T45] ums-karma 8-1:1.0: probe with driver ums-karma failed with error -5 [ 173.042022][ T45] usb 8-1: USB disconnect, device number 7 [ 173.498094][ T45] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 173.526651][ T5053] e1000 0000:00:01.0: can't ioremap BAR 0: [??? 0x00000000 flags 0x0] [ 173.535135][ T5053] e1000 0000:00:01.0: probe with driver e1000 failed with error -5 [ 173.546989][ T36] kauditd_printk_skb: 39 callbacks suppressed [ 173.547005][ T36] audit: type=1400 audit(1700006459.929:65517): avc: denied { ioctl } for pid=5052 comm="syz.7.1376" path="cgroup:[4026532963]" dev="nsfs" ino=4026532963 ioctlcmd=0x6f06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 173.669021][ T45] usb 7-1: not running at top speed; connect to a high speed hub [ 173.677548][ T45] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.687903][ T45] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 173.697255][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.707167][ T45] usb 7-1: Found UVC 1.00 device (046d:0825) [ 173.714098][ T45] usb 7-1: No streaming interface found for terminal 2. [ 173.868305][ T373] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 173.908015][ T10] usb 7-1: USB disconnect, device number 43 [ 173.938335][ T9] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 174.013921][ T5064] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 174.022443][ T36] audit: type=1400 audit(1700006460.409:65518): avc: denied { relabelto } for pid=5063 comm="syz.2.1380" name="516" dev="tmpfs" ino=2800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 174.048284][ T36] audit: type=1400 audit(1700006460.409:65519): avc: denied { associate } for pid=5063 comm="syz.2.1380" name="516" dev="tmpfs" ino=2800 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 174.074919][ T36] audit: type=1400 audit(1700006460.409:65520): avc: denied { write } for pid=296 comm="syz-executor" name="516" dev="tmpfs" ino=2800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 174.078891][ T373] usb 8-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 174.100057][ T36] audit: type=1400 audit(1700006460.409:65521): avc: denied { remove_name } for pid=296 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 174.113337][ T373] usb 8-1: config 1 interface 0 has no altsetting 0 [ 174.138686][ T36] audit: type=1400 audit(1700006460.419:65522): avc: denied { rmdir } for pid=296 comm="syz-executor" name="516" dev="tmpfs" ino=2800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 174.147073][ T373] usb 8-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.40 [ 174.170675][ T9] usb 6-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.179050][ T373] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.192268][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 174.199920][ T373] usb 8-1: Product: 缒８护욚끋ൂⅤɌश㰙萉詜렘㻓䖯鰃쟽拎젙頍갺吖ᘾ謝遯욄㌇榛ꈮ唙苋᥉讲摈찑굔᳓荇衶ናỨꝤばᔟ쑃쳇䨧뗑┎詷ᳮ냞ⷒ䁏빺⓵ስ咑牚쫹岰묓秘곸믫沰隧擆濬ᦸ꒚蠿۹隊༚뽷閦㸥瓰댰궓汰蛖凉슱摱ꤷ⑀⚎妘ꐓ黩펼슨䔣 [ 174.207019][ T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 174.236317][ T373] usb 8-1: Manufacturer: 䩮砏蕵ภ娾഑勯홂戃ꅻᏋ猍㮃祁㑌爙쐽⮇閨跧槵촍왅嬫䶋᭤쏀伐鉒馇䗍㰆㲡뫲鄟慯攩쎓籸紒擇黨᪤鯓엨鉕ꡪꬥᦤ诫Ꞛ胿鈞뭸ꭀ笴➡ᰕ [ 174.245676][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.265639][ T373] usb 8-1: SerialNumber: 《 [ 174.277764][ T9] usb 6-1: config 0 descriptor?? [ 174.284046][ T5055] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 174.483249][ T5072] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 174.491513][ T5072] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 174.500465][ T5072] kvm: requested 126552 ns i8254 timer period limited to 200000 ns [ 174.508804][ T5072] kvm: requested 190247 ns i8254 timer period limited to 200000 ns [ 174.516844][ T5072] kvm: requested 146666 ns i8254 timer period limited to 200000 ns [ 174.525015][ T5072] kvm: requested 69561 ns i8254 timer period limited to 200000 ns [ 174.533066][ T5072] kvm: requested 153371 ns i8254 timer period limited to 200000 ns [ 174.541270][ T5072] kvm: requested 176838 ns i8254 timer period limited to 200000 ns [ 174.549363][ T5072] kvm: requested 112304 ns i8254 timer period limited to 200000 ns [ 174.694667][ T9] ryos 0003:1E7D:3232.000E: item fetching failed at offset 5/6 [ 174.704767][ T5085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.713564][ T9] ryos 0003:1E7D:3232.000E: parse failed [ 174.719813][ T9] ryos 0003:1E7D:3232.000E: probe with driver ryos failed with error -22 [ 174.728609][ T5084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.737185][ T5084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.749202][ T5085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.751690][ T5084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.767314][ T5084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.776436][ T5084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.785517][ T5084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.912954][ T373] usbhid 8-1:1.0: can't add hid device: -71 [ 174.922245][ T373] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 174.936413][ T310] usb 6-1: USB disconnect, device number 67 [ 174.950903][ T373] usb 8-1: USB disconnect, device number 8 [ 175.269566][ T5098] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1392'. [ 175.669237][ T373] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 175.789288][ T9] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 175.830474][ T373] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.840861][ T373] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.855615][ T373] usb 8-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 175.865115][ T373] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.873838][ T373] usb 8-1: Product: syz [ 175.878064][ T373] usb 8-1: Manufacturer: syz [ 175.882686][ T373] usb 8-1: SerialNumber: syz [ 175.939312][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 175.946225][ T9] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 175.957697][ T9] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 175.967981][ T9] usb 7-1: config 1 interface 0 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 175.981138][ T9] usb 7-1: config 1 interface 0 has no altsetting 0 [ 175.989113][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 175.998206][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.006215][ T9] usb 7-1: Product: ⍜彅杇⿼㜡숬ǁ쫱늱ĕ蠞⌙㧈坍倧踳돾ឺﺟ뿧髋氋⛆륬筍⠓牂㋇ṫ灹⾦伩股 [ 176.022139][ T9] usb 7-1: Manufacturer: Ќ [ 176.027522][ T5121] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 176.034861][ T5121] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 176.183596][ T36] audit: type=1400 audit(1700006462.568:65523): avc: denied { read } for pid=5129 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 176.389528][ T36] audit: type=1400 audit(1700006462.768:65524): avc: denied { read write } for pid=1136 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 176.435880][ T36] audit: type=1400 audit(1700006462.768:65525): avc: denied { open } for pid=1136 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 176.467479][ T36] audit: type=1400 audit(1700006462.768:65526): avc: denied { ioctl } for pid=1136 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 176.499239][ T9] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 176.518787][ T9] usb 7-1: USB disconnect, device number 44 [ 176.980865][ T5180] FAULT_INJECTION: forcing a failure. [ 176.980865][ T5180] name failslab, interval 1, probability 0, space 0, times 0 [ 176.993740][ T5180] CPU: 1 UID: 0 PID: 5180 Comm: syz.5.1409 Not tainted syzkaller #0 92ad247b86212872588e4244b63285ac9b5a817e [ 176.993773][ T5180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.993786][ T5180] Call Trace: [ 176.993793][ T5180] [ 176.993802][ T5180] __dump_stack+0x21/0x30 [ 176.993833][ T5180] dump_stack_lvl+0x140/0x1c0 [ 176.993859][ T5180] ? __cfi_dump_stack_lvl+0x10/0x10 [ 176.993887][ T5180] dump_stack+0x19/0x20 [ 176.993912][ T5180] should_fail_ex+0x3c2/0x510 [ 176.993935][ T5180] should_failslab+0xac/0x100 [ 176.993957][ T5180] __kmalloc_node_noprof+0x69/0x500 [ 176.993978][ T5180] ? __kvmalloc_node_noprof+0x128/0x300 [ 176.993997][ T5180] __kvmalloc_node_noprof+0x128/0x300 [ 176.994015][ T5180] ? kasan_save_alloc_info+0x3a/0x50 [ 176.994033][ T5180] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 176.994049][ T5180] ? __kmalloc_cache_noprof+0x1a0/0x470 [ 176.994069][ T5180] ? alloc_fdtable+0xd2/0x4f0 [ 176.994089][ T5180] alloc_fdtable+0x11b/0x4f0 [ 176.994109][ T5180] dup_fd+0x6af/0x9c0 [ 176.994130][ T5180] __close_range+0x1ca/0x4e0 [ 176.994151][ T5180] ? __cfi___close_range+0x10/0x10 [ 176.994173][ T5180] ? __kasan_check_write+0x18/0x20 [ 176.994192][ T5180] ? fpregs_restore_userregs+0x11c/0x260 [ 176.994215][ T5180] __x64_sys_close_range+0x7e/0x90 [ 176.994233][ T5180] x64_sys_call+0x1686/0x2ee0 [ 176.994251][ T5180] do_syscall_64+0x57/0xf0 [ 176.994270][ T5180] ? clear_bhb_loop+0x50/0xa0 [ 176.994294][ T5180] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 176.994318][ T5180] RIP: 0033:0x7f2ba399e159 [ 176.994334][ T5180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.994358][ T5180] RSP: 002b:00007f2ba48b9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 176.994379][ T5180] RAX: ffffffffffffffda RBX: 00007f2ba3c26090 RCX: 00007f2ba399e159 [ 176.994394][ T5180] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 0000000000000003 [ 176.994406][ T5180] RBP: 00007f2ba3a3503b R08: 0000000000000000 R09: 0000000000000000 [ 176.994419][ T5180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.994432][ T5180] R13: 00007f2ba3c26128 R14: 00007f2ba3c26090 R15: 00007ffc10dff3f8 [ 176.994448][ T5180] [ 177.300010][ T10] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 177.350013][ T310] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 177.430081][ T10] usb 7-1: device descriptor read/64, error -71 [ 177.451341][ T5194] : renamed from bridge0 (while UP) [ 177.500081][ T310] usb 6-1: Using ep0 maxpacket: 32 [ 177.506502][ T310] usb 6-1: unable to get BOS descriptor or descriptor too short [ 177.516180][ T310] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 177.525358][ T310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.533363][ T310] usb 6-1: Product: syz [ 177.537513][ T310] usb 6-1: Manufacturer: syz [ 177.542105][ T310] usb 6-1: SerialNumber: syz [ 177.680166][ T10] usb 7-1: device descriptor read/64, error -71 [ 177.920292][ T10] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 178.004310][ T5205] syz.2.1418(5205): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 178.050354][ T10] usb 7-1: device descriptor read/64, error -71 [ 178.089663][ T5211] SELinux: Context system_u:object_r:hald_keymap_exec_t:s0 is not valid (left unmapped). [ 178.310492][ T10] usb 7-1: device descriptor read/64, error -71 [ 178.420609][ T10] usb usb7-port1: attempt power cycle [ 178.432834][ T9] usb 8-1: USB disconnect, device number 9 [ 178.454233][ T5218] netlink: 112 bytes leftover after parsing attributes in process `syz.7.1421'. [ 178.770713][ T10] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 178.801778][ T10] usb 7-1: device descriptor read/8, error -71 [ 178.810742][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 178.886794][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 178.886810][ T36] audit: type=1400 audit(1700006465.266:65551): avc: denied { unlink } for pid=296 comm="syz-executor" name="file0" dev="tmpfs" ino=2946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 178.921282][ T5222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1423'. [ 178.942969][ T10] usb 7-1: device descriptor read/8, error -71 [ 178.964924][ T9] usb 8-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 178.974364][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.982473][ T9] usb 8-1: Product: syz [ 178.986699][ T9] usb 8-1: Manufacturer: syz [ 178.991809][ T9] usb 8-1: SerialNumber: syz [ 179.132388][ T5231] netlink: 'syz.2.1427': attribute type 27 has an invalid length. [ 179.151249][ T5231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30768 sclass=netlink_route_socket pid=5231 comm=syz.2.1427 [ 179.180936][ T10] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 179.212931][ T10] usb 7-1: device descriptor read/8, error -71 [ 179.219609][ T9] usb 8-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8215); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 179.234637][ T9] usb 8-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 179.243658][ T9] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 179.254170][ T9] usb 8-1: USB disconnect, device number 10 [ 179.361999][ T10] usb 7-1: device descriptor read/8, error -71 [ 179.471149][ T10] usb usb7-port1: unable to enumerate USB device [ 179.734355][ T36] audit: type=1400 audit(1700006466.116:65552): avc: denied { mounton } for pid=5235 comm="syz.7.1428" path="/file0" dev="bpf" ino=46420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 179.734930][ T5236] overlayfs: failed to clone upperpath [ 179.837198][ T36] audit: type=1400 audit(1700006466.216:65553): avc: denied { set_context_mgr } for pid=5237 comm="syz.7.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 179.837513][ T5239] rust_binder: 5237:5239 no such ref 0 [ 179.877625][ T5239] rust_binder: 5237:5239 got transaction to invalid handle 1 [ 179.885224][ T5239] rust_binder: 5237:5239 transaction call to 0:0 failed ENOENT, code 0 size 72-24 [ 179.930791][ T310] usb 6-1: unit 4 not found! [ 179.940931][ T310] usb 6-1: unit 0 not found! [ 179.948176][ T310] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 179.950411][ T36] audit: type=1400 audit(1700006466.326:65554): avc: denied { map } for pid=5240 comm="syz.5.1430" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 179.958767][ T310] usb 6-1: unit 4 not found! [ 179.981338][ T36] audit: type=1400 audit(1700006466.326:65555): avc: denied { execute } for pid=5240 comm="syz.5.1430" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 179.998833][ T310] usb 6-1: unit 0 not found! [ 180.014975][ T36] audit: type=1400 audit(1700006466.326:65556): avc: denied { read write } for pid=5240 comm="syz.5.1430" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 180.018225][ T310] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 180.041094][ T36] audit: type=1400 audit(1700006466.326:65557): avc: denied { open } for pid=5240 comm="syz.5.1430" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 180.041123][ T36] audit: type=1400 audit(1700006466.326:65558): avc: denied { ioctl } for pid=5240 comm="syz.5.1430" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 180.103211][ T310] usb 6-1: unit 4 not found! [ 180.108101][ T310] usb 6-1: unit 0 not found! [ 180.117461][ T310] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 180.130125][ T310] usb 6-1: USB disconnect, device number 68 [ 180.209739][ T36] audit: type=1400 audit(1700006466.586:65559): avc: denied { setopt } for pid=5264 comm="syz.2.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 180.391532][ T2617] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 180.431566][ T310] usb 6-1: new high-speed USB device number 69 using dummy_hcd Connection to 10.128.1.9 closed by remote host. [ 180.511619][ T36] audit: type=1400 audit(1700006466.876:65560): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[1497]" dev="pipefs" ino=1497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 180.555617][ T2617] usb 7-1: device descriptor read/64, error -71 [ 180.825124][ T1243] bridge0: port 3(syz_tun) entered disabled state [ 180.842428][ T1243] syz_tun (unregistering): left allmulticast mode [ 180.848875][ T1243] syz_tun (unregistering): left promiscuous mode [ 180.859046][ T1243] bridge0: port 3(syz_tun) entered disabled state [ 180.868708][ T1933] bridge_slave_1: left allmulticast mode [ 180.874570][ T1933] bridge_slave_1: left promiscuous mode [ 180.880191][ T1933] : port 2(bridge_slave_1) entered disabled state [ 180.887286][ T1933] bridge_slave_0: left allmulticast mode [ 180.893258][ T1933] bridge_slave_0: left promiscuous mode [ 180.898869][ T1933] : port 1(bridge_slave_0) entered disabled state [ 180.917261][ T1933] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.924888][ T1933] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.104508][ T1933] veth1_macvtap: left promiscuous mode [ 181.110001][ T1933] veth0_vlan: left promiscuous mode [ 181.122854][ T45] rust_binder: 5237: undelivered TRANSACTION_ERROR: 29201 [ 181.343243][ T1933] ------------[ cut here ]------------ [ 181.348711][ T1933] WARNING: CPU: 0 PID: 1933 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 181.358798][ T1933] Modules linked in: [ 181.362706][ T1933] CPU: 0 UID: 0 PID: 1933 Comm: kworker/u8:52 Not tainted syzkaller #0 92ad247b86212872588e4244b63285ac9b5a817e [ 181.374501][ T1933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.384564][ T1933] Workqueue: netns cleanup_net [ 181.389318][ T1933] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 181.395316][ T1933] Code: e8 91 bd d5 fc 4b 83 3c 3e 00 75 19 e8 d5 da 7c fc 49 81 ff f8 07 00 00 74 1b e8 c7 da 7c fc 49 83 c7 08 eb c9 e8 bc da 7c fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 181.414941][ T1933] RSP: 0018:ffffc9000b7dfb90 EFLAGS: 00010293 [ 181.421017][ T1933] RAX: ffffffff850a9f54 RBX: ffff88812eec0000 RCX: ffff88811e631300 [ 181.429024][ T1933] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888104398000 [ 181.437011][ T1933] RBP: ffffc9000b7dfbb0 R08: 0000000000000003 R09: 0000000000000004 [ 181.444993][ T1933] R10: dffffc0000000000 R11: fffff520016fbf04 R12: dffffc0000000000 [ 181.452982][ T1933] R13: dffffc0000000000 R14: ffff888104398000 R15: 0000000000000000 [ 181.460944][ T1933] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 181.469900][ T1933] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 181.476491][ T1933] CR2: 00007f617f597e9c CR3: 000000010afa8000 CR4: 00000000003526b0 [ 181.484487][ T1933] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 181.492464][ T1933] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 181.500424][ T1933] Call Trace: [ 181.503713][ T1933] [ 181.506649][ T1933] cleanup_net+0x6bd/0xc90 [ 181.511065][ T1933] ? __cfi_cleanup_net+0x10/0x10 [ 181.516007][ T1933] ? kick_pool+0xb9/0x540 [ 181.520330][ T1933] process_scheduled_works+0x7f4/0x1060 [ 181.525873][ T1933] worker_thread+0xc99/0x13f0 [ 181.530541][ T1933] kthread+0x2c4/0x360 [ 181.534610][ T1933] ? __cfi_worker_thread+0x10/0x10 [ 181.539704][ T1933] ? __cfi_kthread+0x10/0x10 [ 181.544296][ T1933] ret_from_fork+0x64/0xa0 [ 181.548699][ T1933] ? __cfi_kthread+0x10/0x10 [ 181.553281][ T1933] ret_from_fork_asm+0x1a/0x30 [ 181.558035][ T1933] [ 181.561028][ T1933] ---[ end trace 0000000000000000 ]--- [ 181.566644][ T1933] ------------[ cut here ]------------ [ 181.572106][ T1933] WARNING: CPU: 1 PID: 1933 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 181.582262][ T1933] Modules linked in: [ 181.586132][ T1933] CPU: 1 UID: 0 PID: 1933 Comm: kworker/u8:52 Tainted: G W syzkaller #0 92ad247b86212872588e4244b63285ac9b5a817e [ 181.599525][ T1933] Tainted: [W]=WARN [ 181.603329][ T1933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.613402][ T1933] Workqueue: netns cleanup_net [ 181.618165][ T1933] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 181.624241][ T1933] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 80 da 7c fc 49 81 ff f8 07 00 00 74 1b e8 72 da 7c fc 49 83 c7 08 eb c5 e8 67 da 7c fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 57 da 7c fc 5b 41 5c 41 5e 41 [ 181.643910][ T1933] RSP: 0018:ffffc9000b7dfb90 EFLAGS: 00010293 [ 181.649988][ T1933] RAX: ffffffff850a9fa9 RBX: ffff888104398800 RCX: ffff88811e631300 [ 181.657980][ T1933] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888104398810 [ 181.665958][ T1933] RBP: ffffc9000b7dfbb0 R08: 0000000000000003 R09: 0000000000000004 [ 181.673939][ T1933] R10: dffffc0000000000 R11: fffff520016fbf04 R12: dffffc0000000000 [ 181.681902][ T1933] R13: dffffc0000000000 R14: ffff888104398000 R15: 0000000000000010 [ 181.689930][ T1933] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 181.698895][ T1933] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 181.705484][ T1933] CR2: 00007ffd0645cfd8 CR3: 000000010afa8000 CR4: 00000000003526b0 [ 181.713485][ T1933] Call Trace: [ 181.716769][ T1933] [ 181.719679][ T1933] cleanup_net+0x6bd/0xc90 [ 181.724098][ T1933] ? __cfi_cleanup_net+0x10/0x10 [ 181.729043][ T1933] ? kick_pool+0xb9/0x540 [ 181.733372][ T1933] process_scheduled_works+0x7f4/0x1060 [ 181.738915][ T1933] worker_thread+0xc99/0x13f0 [ 181.743589][ T1933] kthread+0x2c4/0x360 [ 181.747645][ T1933] ? __cfi_worker_thread+0x10/0x10 [ 181.752757][ T1933] ? __cfi_kthread+0x10/0x10 [ 181.757333][ T1933] ret_from_fork+0x64/0xa0 [ 181.761729][ T1933] ? __cfi_kthread+0x10/0x10 [ 181.766332][ T1933] ret_from_fork_asm+0x1a/0x30 [ 181.771086][ T1933] [ 181.774125][ T1933] ---[ end trace 0000000000000000 ]--- [ 181.781829][ T1933] ------------[ cut here ]------------ [ 181.787300][ T1933] WARNING: CPU: 0 PID: 1933 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 181.796875][ T1933] Modules linked in: [ 181.800856][ T1933] CPU: 0 UID: 0 PID: 1933 Comm: kworker/u8:52 Tainted: G W syzkaller #0 92ad247b86212872588e4244b63285ac9b5a817e [ 181.814477][ T1933] Tainted: [W]=WARN [ 181.818590][ T1933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.828943][ T1933] Workqueue: netns cleanup_net [ 181.833895][ T1933] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 181.839440][ T1933] Code: 3c 20 00 74 08 48 89 df e8 af 7b f0 fc 48 8b 3b e8 c7 6c db fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 e2 98 97 fc <0f> 0b e9 b0 fd ff ff e8 d6 98 97 fc 0f 0b e9 18 fe ff ff e8 ca 98 [ 181.859068][ T1933] RSP: 0018:ffffc9000b7dfb70 EFLAGS: 00010293 [ 181.865150][ T1933] RAX: ffffffff84efe12e RBX: ffff88812eec0000 RCX: ffff88811e631300 [ 181.873131][ T1933] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff88811e631300 [ 181.881086][ T1933] RBP: ffffc9000b7dfb98 R08: ffffffff87d43cc7 R09: 1ffffffff0fa8798 [ 181.889051][ T1933] R10: dffffc0000000000 R11: fffffbfff0fa8799 R12: 1ffffffff0fa84ec [ 181.897026][ T1933] R13: dffffc0000000000 R14: ffff88812eec0c00 R15: dffffc0000000000 [ 181.905009][ T1933] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 181.913941][ T1933] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 181.920514][ T1933] CR2: 00007f617f597e9c CR3: 00000000074aa000 CR4: 00000000003526b0 [ 181.928506][ T1933] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 181.936521][ T1933] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 181.944501][ T1933] Call Trace: [ 181.947799][ T1933] [ 181.950736][ T1933] xfrm_net_exit+0x31/0x80 [ 181.955176][ T1933] cleanup_net+0x6bd/0xc90 [ 181.959577][ T1933] ? __cfi_cleanup_net+0x10/0x10 [ 181.964513][ T1933] ? kick_pool+0xb9/0x540 [ 181.968835][ T1933] process_scheduled_works+0x7f4/0x1060 [ 181.974374][ T1933] worker_thread+0xc99/0x13f0 [ 181.979037][ T1933] kthread+0x2c4/0x360 [ 181.983104][ T1933] ? __cfi_worker_thread+0x10/0x10 [ 181.988204][ T1933] ? __cfi_kthread+0x10/0x10 [ 181.992791][ T1933] ret_from_fork+0x64/0xa0 [ 181.997197][ T1933] ? __cfi_kthread+0x10/0x10 [ 182.001763][ T1933] ret_from_fork_asm+0x1a/0x30 [ 182.006522][ T1933] [ 182.009525][ T1933] ---[ end trace 0000000000000000 ]--- [ 182.033431][ T1933] bridge_slave_1: left allmulticast mode [ 182.039093][ T1933] bridge_slave_1: left promiscuous mode [ 182.044691][ T1933] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.052017][ T1933] bridge_slave_0: left allmulticast mode [ 182.057776][ T1933] bridge_slave_0: left promiscuous mode [ 182.063400][ T1933] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.070933][ T1933] bridge_slave_1: left allmulticast mode [ 182.076618][ T1933] bridge_slave_1: left promiscuous mode [ 182.082180][ T1933] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.089586][ T1933] bridge_slave_0: left allmulticast mode [ 182.095281][ T1933] bridge_slave_0: left promiscuous mode [ 182.100841][ T1933] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.264452][ T1933] tipc: Disabling bearer [ 182.269751][ T1933] tipc: Left network mode [ 182.274965][ T1933] veth1_macvtap: left promiscuous mode [ 182.280442][ T1933] veth0_vlan: left promiscuous mode [ 182.285920][ T1933] veth1_macvtap: left promiscuous mode [ 182.291385][ T1933] veth0_vlan: left promiscuous mode [ 182.811837][ T5271] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 182.818419][ T5271] ACPI: PM: Preparing to enter system sleep state S5 [ 182.825390][ T5271] kvm: exiting hardware virtualization [ 182.830902][ T5271] reboot: Power down serialport: VM disconnected.