last executing test programs: 18.419455214s ago: executing program 2 (id=588): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) setpriority(0x2, 0x0, 0xd2f4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x3, 0x0, [{0x7, 0x0, 0x3, 0x8, 0xfffffff2, 0xfffffff9}, {0x2, 0x2f8b, 0x6, 0xe, 0x87b, 0x1, 0x400}, {0xb, 0x59c, 0x5, 0x2, 0xf64a, 0x5f8f, 0x9}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000000)=0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18.193483017s ago: executing program 2 (id=592): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) getpeername$unix(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) (async) sendmsg$key(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x2, 0xa, 0x4, 0x9, 0x4, 0x0, 0x70bd2b, 0x25dfdbfd, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e24}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e20}]}, 0x20}}, 0x50) 18.15392359s ago: executing program 2 (id=593): newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(r0, r0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x18a) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x0, 0x0, 0x0}) getdents64(r2, &(0x7f0000000100)=""/134, 0x86) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x18, 0x0, &(0x7f0000000440)=[@request_death, @release], 0x0, 0x0, 0x0}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000000040)=0x8001) r8 = getpgid(0x0) fcntl$setownex(r7, 0xf, &(0x7f0000000140)={0x2, r8}) sendmmsg$unix(r6, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015) r9 = socket(0x2, 0xa, 0x300) recvfrom$inet_nvme(r9, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r10, 0x4, 0x2) getdents(r10, 0x0, 0x0) r11 = socket$can_bcm(0x1d, 0x2, 0x2) bind$packet(r11, 0x0, 0x0) 18.016124608s ago: executing program 2 (id=594): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c7ce360863078120abd001e402010902120001000000000904000000ff"], 0x0) socket$packet(0x11, 0x2, 0x300) 16.851939577s ago: executing program 2 (id=597): syz_usb_connect(0x2, 0x4f, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x20, 0xb1, 0xd0, 0x20, 0x1b3d, 0x1ab, 0x8524, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2c, 0xff, 0x1, 0x71, 0xe7, 0x48, 0x3, [], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x4, 0x4c, 0x8, [@generic={0x8, 0xb, "3bad28d948f0"}]}}]}}, {{0x9, 0x4, 0x5c, 0x5, 0x1, 0xb, 0xbe, 0x33, 0x40, [], [{{0x9, 0x5, 0xb, 0x2, 0x20, 0x1, 0x54, 0x69, [@generic={0x8, 0xb, "1268c0c56f0f"}]}}]}}]}}]}}, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000300), 0xe1742, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000002, 0x11, r0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) write(r2, &(0x7f0000000200)="41272c6038cd86b94b265bbdfdff7d4000a0b47ba4daec3e72a6a522b197c9cde6c410d27546e04e4d7ced340b488bb98c670e16e6839a1fe6bb2cae3e0bb6", 0x3f) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) write(r0, &(0x7f0000000400)='T{', 0x2) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000002280)='./file0\x00', 0x1, 0x1e4) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$lock(r5, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000401}) syslog(0x3, &(0x7f0000000080)=""/107, 0x6b) creat(&(0x7f0000000000)='./file0\x00', 0x28) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x10) rmdir(&(0x7f000001f940)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x6, &(0x7f0000000140)=[{0x6, 0x4, 0xa2, 0x6}, {0x1, 0x0, 0x2, 0x1}, {0x8, 0x28, 0x9, 0x10}, {0x0, 0x40, 0x3, 0x9}, {0xa, 0x8, 0x2, 0x4}, {0x5, 0x2a, 0xf, 0x4}]}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2a83, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SIGNAL_MSI(r8, 0x4020aea5, &(0x7f0000000580)={0x1, 0xd000, 0xffff5896, 0x1, 0xd7d}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) 15.395970332s ago: executing program 2 (id=607): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x7075e23db815f53d) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000004f00), 0x2001, 0x0) write$cgroup_int(r1, &(0x7f0000000380)=0x5, 0x12) mkdirat(r0, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)={{0x0, 0xea60}, {r2, r3/1000+60000}}) mount$overlay(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)) sigaltstack(&(0x7f0000000240)={&(0x7f0000000000)=""/30, 0x3, 0x1e}, &(0x7f0000000340)={&(0x7f0000000280)=""/71, 0x0, 0x47}) r4 = socket$nl_route(0x10, 0x3, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f00000003c0)={0x10}, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="280000002100010002000000000000020a20000000"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) chown(&(0x7f0000000080)='./file0/file0\x00', r5, 0xee01) 8.090801313s ago: executing program 0 (id=676): mprotect(&(0x7f00006dc000/0x2000)=nil, 0x2000, 0x1800006) io_setup(0x7ff, &(0x7f0000000680)) 8.070359794s ago: executing program 0 (id=677): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000040)={0x0, 0x20000000000000, 0x1, [0x8, 0x401, 0x0, 0xee1, 0x5], [0x0, 0xf, 0x4, 0x4b, 0x1, 0x0, 0x1, 0x5, 0x4, 0x5, 0x7, 0x2, 0x2, 0x100000001, 0x6, 0x2, 0x7182bedb, 0x5, 0x5, 0x0, 0x4, 0x148, 0x3, 0x0, 0x0, 0x0, 0x3, 0x9, 0x3, 0x7fffffffffffffff, 0xffffffff80000000, 0x0, 0x1, 0x2, 0x7, 0x6, 0x5, 0x7, 0x2, 0xcb, 0x6, 0x7, 0x0, 0x6, 0x59c, 0xfffffffffffffff8, 0x5, 0x5, 0xf, 0x2, 0x3ff, 0x4, 0x7, 0xffffffffffffffff, 0x8, 0x8, 0x4, 0x0, 0x5, 0x6, 0x8, 0x7, 0xfffffffffffffffd, 0x5, 0x2, 0x401, 0xfffffffffffffffa, 0x0, 0xe62, 0x3ff, 0x1, 0x5, 0x8, 0x7, 0x8000000000000000, 0x100, 0x9, 0x3, 0x7fff, 0x9, 0x7fffffffffffffff, 0x1, 0x1, 0x9, 0x5, 0xe, 0xb, 0x0, 0x6, 0x3, 0x38e, 0x2, 0x2, 0x2, 0x9, 0x5, 0x3800000000000000, 0xfffffffffffffff9, 0x0, 0x1, 0x101, 0x6, 0x1, 0x6, 0x5, 0x7, 0x10000, 0xffffffff, 0x3, 0x5, 0x48ef6e52, 0x33, 0xa, 0x9, 0x1, 0x6, 0x9, 0xf, 0x7ff, 0xb, 0x7]}) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r1, 0xc038586c, &(0x7f00000005c0)={r0, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x365bd92bb9ae8569, &(0x7f0000000500)={@align=0x7a32, {0x5, 0x7fff, 0x5, 0x3}}, 0x555c, &(0x7f0000000540), &(0x7f0000000580)=0x6}) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000600)={0x40, 0x44f}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x70, r2, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "0d15614805"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7890e94a1a"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "cbd8871b42"}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "6660a4c69c23879067058caf6c8d0267"}]}, 0x70}, 0x1, 0x0, 0x0, 0x48880}, 0x41) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xd) ioctl$KIOCSOUND(r0, 0x4b2f, 0xfffffffffffffffd) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000007c0)={0x5, 0x9, 0x10000, 0x0, 0x0, 0x5}) ioctl$BLKGETZONESZ(r0, 0x80041284, &(0x7f0000000800)=0x2) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000940)={'ip_vti0\x00', &(0x7f00000008c0)={'tunl0\x00', 0x0, 0x20, 0x28, 0x3ff, 0x4, {{0x11, 0x4, 0x3, 0x24, 0x44, 0x66, 0x0, 0x2, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @timestamp_prespec={0x44, 0x2c, 0x96, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0xd}, 0x1000}, {@private=0xa010102}, {@empty, 0x9}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x1}, {@remote, 0x3}]}]}}}}}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000980)={@dev, 0x0}, &(0x7f00000009c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000a40)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000b00)={'tunl0\x00', &(0x7f0000000a80)={'tunl0\x00', 0x0, 0x1, 0x1, 0x6, 0x7, {{0xe, 0x4, 0x1, 0x1e, 0x38, 0x68, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@ra={0x94, 0x4}, @cipso={0x86, 0x9, 0x0, [{0x5, 0x3, '2'}]}, @timestamp_addr={0x44, 0x14, 0xd8, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x75d}, {@dev={0xac, 0x14, 0x14, 0x36}, 0xffff}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b40)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0xb5, 0x2, 0x14, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0xa1, 0x7800, 0x73800, 0xa20}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000e80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000c00)={0x20c, r4, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20008045}, 0x81) r11 = fcntl$dupfd(0xffffffffffffffff, 0x406, r3) setsockopt$MRT6_TABLE(r11, 0x29, 0xcf, &(0x7f0000000ec0)=0xff, 0x4) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f40), r11) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r11, &(0x7f0000001200)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000011c0)={&(0x7f0000000f80)={0x240, r12, 0x100, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x2000000000000000}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x523}, {0xc, 0x90, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xffffffffffffffff}, {0xc, 0x90, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xfffffffffffffff7}, {0xc, 0x90, 0x8}}]}, 0x240}}, 0x24040890) socket$inet6(0xa, 0x0, 0x2) sendmsg$NFT_MSG_GETGEN(r11, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000001340)=@x86={0x8, 0x5, 0x3, 0x0, 0x0, 0x2, 0x39, 0xd, 0x7f, 0x5, 0xa, 0x2, 0x0, 0x269569e4, 0x2, 0xbc, 0x0, 0x6, 0x1, '\x00', 0x0, 0xca11}) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r0, 0x4068aea3, &(0x7f0000001380)) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000001400)) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r13, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x210000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xfffffff8}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044005}, 0x4004104) 8.059999745s ago: executing program 0 (id=678): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3000}) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) mount(0x0, &(0x7f0000000000)='./file3\x00', &(0x7f00000000c0)='cramfs\x00', 0x0, &(0x7f0000000100)='acl') socket$nl_xfrm(0x10, 0x3, 0x6) 8.011923058s ago: executing program 0 (id=679): pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0xffffffff80000000) syz_open_dev$usbmon(&(0x7f0000001840), 0x9, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000200)=""/66, 0x42}, {&(0x7f00000004c0)=""/4082, 0xff2}], 0x2}}], 0x1, 0x40030002, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x24}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x48) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000000)='./file0\x00') r5 = creat(&(0x7f0000000080)='./file2\x00', 0x21) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r5, 0x0, 0xfe, 0xa00}]) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x664}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffa000/0x2000)=nil, 0x2000}, 0x2}) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0a2000000202000000000000240009801c000000080000001400056efa91593f22dc8679e91f3bf7fcbb5d3a2b2c0caaa4860e9c2033887dd0deaa00283bd9b51ac4d1087f3c64c2ec6ad18a67258d7b90c21c54d32eec985257225af66a5792d3fe5321dae356ddfc3cd71dae7e8113bfe511b5723845b19fe5111319310800b761"], 0x40}], 0x1}, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004000)=ANY=[@ANYBLOB="240000006c0001"], 0x24}}, 0x4008000) ptrace$pokeuser(0x6, r8, 0x388, 0x41d9fda7) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) syz_open_dev$usbmon(&(0x7f0000000040), 0x2000007, 0xc200) 7.959711551s ago: executing program 0 (id=682): r0 = syz_clone(0x20800000, &(0x7f0000000040)="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", 0xfe, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="bcc864aac018c236f48f17902c8d48d63c206158680564bbfe2cf72b3a2f9724615ed10a177bc843e60b8be052f12c601b0b1e78753ef32d33ad68d45060a87008ef23adc2cba5390ec8d85e159eb2de3bd200f5385a9cd3c097ebb5b6b0280a8b5ec73ac9eb3a38e0db08275547b49cbd76986e2c749be6e3856b3a2c85ab1d7127654398b51146b06ea23af7887c1cbbf890a16b2b71f4221825f7475857a34f4125") ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f0000000280)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, 0x0) r3 = creat(0x0, 0x0) sendmsg$nl_generic(r3, 0x0, 0xcc0d0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x304}, "145aa359352e4de0", "e8a1056a7c356ba2b862ef93136b1587", "28aa90f4", "ff0547fd1577e7a1"}, 0x28) sendto$inet6(r4, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r4, 0x0, 0xfdef) sendto$inet6(r4, &(0x7f0000000540)="c66a73ebcca96c4283ae924458b7898a7ec2", 0x12, 0x8040, 0x0, 0x0) write$binfmt_elf64(r4, 0x0, 0xfdd6) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000002000/0x3000)=nil, 0x3000}, 0x6}) syz_io_uring_setup(0x1c08, &(0x7f00000005c0)={0x0, 0x4ec6, 0x400, 0x400001, 0x367}, &(0x7f0000ffe000), 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000300), 0xe1742, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x9, 0x4084152, r6, 0x1000) writev(0xffffffffffffffff, 0x0, 0x0) 7.932649982s ago: executing program 0 (id=683): ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000000)='\x00') (async) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x440e00, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) r1 = dup2(r0, r0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, 0x42}) (async, rerun: 32) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0xc772, 0x7, 0x3a, 0xff}, {0x5, 0x1, 0x40, 0x1}, {0x3, 0x1e, 0x4, 0xf4}]}) (rerun: 32) r3 = socket(0x1a, 0x3, 0x3) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'wg1\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "466f293ee2f90eed878f3411c43926ad1b7d0242a90b4227805aa914ac71542c", "7882c23f9c66506a1ad0150efe07d5218ce1238b80f40874e470aa3573d8c8d6", "a7d50cb18b31cc6c62219328d0781397d162b8cd83fbaf43d1e7a03b0aed442b", "86375221850c8f158eb170c14473a6f2af60f8d6dfcd4110073e178d455af083", "63f7296d3459a06510036b3c5e7e789df6b5e27842b7430d9acefce2e7cdf017", "d13ba0c9a8a0c19905a7b6c1", 0xc, 0x400, 0x1ff, 0x2, 0x4}}) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) (async) ioctl$XFS_IOC_FSBULKSTAT(r3, 0xc0205865, &(0x7f0000000880)={&(0x7f00000002c0)=0x1, 0x3, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000840)}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f00000008c0)) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8800) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r5, 0x100, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r6, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4080) (async) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x27}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000d40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000dc0)={r7, 0x1, r1, 0x6, 0x80000}) accept4$nfc_llcp(r0, &(0x7f0000000e00), &(0x7f0000000e80)=0x60, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000ec0)) write$FUSE_NOTIFY_RESEND(r1, &(0x7f0000000f00)={0x14}, 0x14) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000f40)={r7, 0x8, 0xc}) (async) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0xffffffffffffffff}, 0x20000800) r8 = openat$cgroup(r1, &(0x7f0000001000)='syz0\x00', 0x200002, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r8, 0x40085875) r9 = openat$cgroup_ro(r8, &(0x7f0000001040)='cpuacct.usage_sys\x00', 0x0, 0x0) pidfd_getfd(r1, r9, 0x0) 7.900980324s ago: executing program 32 (id=683): ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000000)='\x00') (async) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x440e00, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) r1 = dup2(r0, r0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, 0x42}) (async, rerun: 32) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0xc772, 0x7, 0x3a, 0xff}, {0x5, 0x1, 0x40, 0x1}, {0x3, 0x1e, 0x4, 0xf4}]}) (rerun: 32) r3 = socket(0x1a, 0x3, 0x3) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'wg1\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "466f293ee2f90eed878f3411c43926ad1b7d0242a90b4227805aa914ac71542c", "7882c23f9c66506a1ad0150efe07d5218ce1238b80f40874e470aa3573d8c8d6", "a7d50cb18b31cc6c62219328d0781397d162b8cd83fbaf43d1e7a03b0aed442b", "86375221850c8f158eb170c14473a6f2af60f8d6dfcd4110073e178d455af083", "63f7296d3459a06510036b3c5e7e789df6b5e27842b7430d9acefce2e7cdf017", "d13ba0c9a8a0c19905a7b6c1", 0xc, 0x400, 0x1ff, 0x2, 0x4}}) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) (async) ioctl$XFS_IOC_FSBULKSTAT(r3, 0xc0205865, &(0x7f0000000880)={&(0x7f00000002c0)=0x1, 0x3, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000840)}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f00000008c0)) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8800) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r5, 0x100, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r6, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4080) (async) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x27}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000d40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000dc0)={r7, 0x1, r1, 0x6, 0x80000}) accept4$nfc_llcp(r0, &(0x7f0000000e00), &(0x7f0000000e80)=0x60, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000ec0)) write$FUSE_NOTIFY_RESEND(r1, &(0x7f0000000f00)={0x14}, 0x14) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000f40)={r7, 0x8, 0xc}) (async) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0xffffffffffffffff}, 0x20000800) r8 = openat$cgroup(r1, &(0x7f0000001000)='syz0\x00', 0x200002, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r8, 0x40085875) r9 = openat$cgroup_ro(r8, &(0x7f0000001040)='cpuacct.usage_sys\x00', 0x0, 0x0) pidfd_getfd(r1, r9, 0x0) 5.710791283s ago: executing program 4 (id=703): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x3, 0x0, [{0x7, 0x0, 0x3, 0x8, 0xfffffff2, 0xfffffff9}, {0x2, 0x2f8b, 0x6, 0xe, 0x87b, 0x1, 0x400}, {0xb, 0x59c, 0x5, 0x2, 0xf64a, 0x5f8f, 0x9}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.708029233s ago: executing program 4 (id=704): syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x4, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x79, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x2, 0x1, 0x2, 0x10, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "cbfeb5405541"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x4f7, 0x7000, 0x8}, {0x6, 0x24, 0x1a, 0x1}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0x7, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x2, 0x2, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x10, 0x6, 0x6}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x3, 0xf7, 0xb, 0x20, 0xff}, 0x1cb, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x6, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1}}, {0x97, &(0x7f0000000300)=@string={0x97, 0x3, "306ad51463aeb3f5cd4ebec90fc0bb4f008474ce2d4673547f6f880b915d23a8f28d6e23dfda2e68d37b4f04132233cb56436b9dbeb7e21673d7ad4573e3d7ab45bf343354b1dcee3b9068395aae799c43bbe80bcfff90d4f048becf26e39f75812b853b7d522a9bae11096da157fcb98985ee9f732143c6650428fe2d67655feed2b84f8f8a3727a4aac98e3221beb35f87a08de5"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x449}}, {0xf2, &(0x7f0000000440)=@string={0xf2, 0x3, "5af4c8c87e3a7cc14a42a08059d1b0cd906a1fdf86fe8c61b72361b8f7d94070c9231111c1466567e97d4709589f0be281afa759bc33cd364e54df28696ca52387050198be5b9a3acc57f2142143d56fe109f51d98c72cba88ee781586739dca3820e3cb1eb185566217b29d963707a124316afc6bf409655ed9ee39c5a16823f364c48df40a8512ea3d89dc7c1baa172f2a1ed89def9be7a903ac454223629d7561bf4cf38d56c1f83ab6ec4ade9ad6a0acb0493e7f83eddd3fecfba8a6057357c3a57a863e8b48e090dff0bd7e4849629aa59aa7d8aa538ff1d794e1ab1ea9b76fd0932cbc89e03d539afe145aba5c"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc01}}]}) 5.241688021s ago: executing program 1 (id=708): mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900c000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e03000600000000000200000300000000000000000000000002000100000000000000020300000000030015000000000002004e23ac1414000000000000000000"], 0x70}, 0x1, 0x7}, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x20000}) close(0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r4, 0xaea2, 0x406026) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x7, 0x7, 0x8001, 0x7}]}) r6 = socket(0x1e, 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmmsg$sock(r6, &(0x7f0000000600)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x1}, 0x80, 0x0}}], 0x2, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003f00), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={&(0x7f0000003f40)={0x14, r8, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4010) mount$bind(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x8000, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f0000000d00)=[{&(0x7f0000000180)="75960c3f36a5871390d29e26a5a5abdb6de4b8485b9a4f31fa98d9e90b3151190a8ce551d145c9a90b9241065f2149a01180727503108de1c7a9ddc320b38e9d7b9a7c09900e78e3c601586ad5ae5f", 0x4f}, {&(0x7f0000000200)="95ad663d3f683ecf234754d51043fc377fbef4f25c04de579f93b80fcd2dd553a578ae1312840c99bba6d3d556407dc568c5e9a4f64f59891a0a049f80729eb154e7682daa681bd065957a06852dd758d19c86eff5a655002e98aa1b34d2c48ef16654bb83b2dafd6288788b6de274f19c9ad1a947b372ef65383429", 0x7c}, {&(0x7f0000000880)="d8c9dd7150c10ba7dabd2d94c770639f9abc835d7443b245476ef293c27fb5a0bf32e8b59d355ad8250e8b6a8c28a12bc0e4ffb3d14ed6f6a26e36ddb9641ba375e2ce453e774e529c670003d05a6f033302da74a87fab7f0258c642073f84eadbd274c724c2de9d8ff1e218f38de6f7a9222e1318043802675ad6a4a7083d754f732c52399f48d9730c631ca260b2894fbfede4f4b53bd0399e2e50fd7c22ffe1e8ef39abe55f4645da6207fc79cc44a8a0ffc58a369309cd72d2b7711e619148806aa66a3eab08c408a939401bb23d55cd60cbac6dcc5fd7d733b2037f5a2c", 0xe0}, {&(0x7f0000000980)="678946e09dd60d9fa7a776e86c2732240947636f5117e9412ba55467763db0c7317f615cc8189925e3f3cee86601d8f3502c60a1d6ff33a1c9ccb547b0794383590df2004211eb93acf5828f7446d7f80ed5bbde398a31eeecdde78da299e16a03e382d926b261388af00d9e5ac8d9356d688315051f7d0295d21469087409c9359d362280347648169f895e5d643c364ff537a087cb2461ec18272e470bc661ae885d84dcaac53738b2f77ed4818faad1d94d301b779ab209c77ece9742981a883425afd3aa23a960a11686afe532ba340354f1f2884b39", 0xd8}, {&(0x7f0000000280)="8a4cb71da310526cfd3de6919386450f9afc0e5210791f4d04ad602fde5799d8112ed203339d0b14ab9b821f2c08c2477b92ab760dcac48d25373d6ac5ae74d44c3b11a0e0371bcc6f090cbebc1682e5d22dde03996b28cfbae6e3229dc463666c9abae94020fb947b723b95ada74ffa8ca08215c9724eb4480171aa96afe0c7461e65ac2bb3918796db9c12a97a59bf5c7f3e33b3144a96f5c88bea", 0x9c}, {&(0x7f0000000380)="ffee7623a54a852e732aefc34d12c90536b403c4f7673e7950", 0x19}, {&(0x7f0000000a80)="260a0a9554291d904cf2d385500fc595568fee14ba52ef2c0a7a33fd5e53274ae1a3f09dce9af4b64fd5e84928a0cc83779d8263378101991d0cc308dfa5b22b7065b09f260162815af9dff6e1f280e46b632c123693336ee531bc158b6e6598bd353b8f8284ea6f3aa44a19672778bac34b81b84b6161edc0e8285346e5e539b16f2985e5475c7a9ab0b9af24d46a11a071c1284019f4db11656a6eafd63d7cdf752e35e3771aad49a903a9d4d77eef8c5cdde015a4c2671bb4ec8dc7f3534a6f47b127aa2745b95a7d53b92e511f0e11513d25c9336e5189b5731701d9aec4dd3e4fcec1369a2f05653276a75e", 0xee}, {&(0x7f0000000b80)="ce89310265f04e17f677e5d04a2a236416df7f4de72d474850743179938e5582d3ff8d25c96ff4885ac78f638a99f784426cd5a25cecd0970e5db6d6850688836b94fe3b2862cdebbd3d6b5f2ebf4a850c7096cc3ff50b6353aafa2b5fd92873870539fe84659fb8a9ef169768bda545577c53407e9efad094b9199967192bcff6e8320d560579190c7e9749839e136ccc13ff86e2a4f908491c4e021a8f08e21110400c942c8f35cfb30ea0175cb54b24", 0xb1}, {&(0x7f0000000c40)="8dd1127f21b8d66bedbccf0f65ba3dcfe0856cbec3c851ae8137adcde4f5b5f24476c69bb8c0013962767276780af8a23cd2bbc72442e1df668f89d3c0c5127204450e31c1d140870ae66d81f4c035a0ee159dc8708d01318e4130ff7531f09d9c20d98f38f10b614385bfd10c66da0cee6a4311bb9f29797b0438ec32b4c7d3442f1b203cec4f253e26aca1fe9c2c32229b2083ac59f3ab9f10f11ee68493edb24c081871ecb0964ff10c5d4f12a74ad004", 0xb2}], 0x9) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xa, 0x9, 0x80, 0x2, 0x7, 0x7f, 0x6, 0x5, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x2, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x80, 0xe661, 0x7fff, 0xb, 0x3, 0xfffffff9, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8b, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf7, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x9, 0xffffff00, 0x312, 0x1, 0x0, 0xfffffffe, 0x800008, 0x4, 0x8000, 0x2, 0x6, 0x401, 0x9, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x81, 0x1, 0x2, 0x2, 0x80000009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x8, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x8000001, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x820, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x9, 0x1, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x40, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x0, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x40a, 0xffffffff, 0x80000000, 0x22be, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x4, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c80"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 5.075922891s ago: executing program 1 (id=709): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) (async) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) (async) r1 = socket$inet6(0xa, 0x1, 0x2000003b) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x10000008, @mcast2, 0x9}, 0x1c) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x110, 0x4) (async) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) (async) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="fb55841f209647ba0c9c0e89d3499577b7cfa68164680805008532aa825433f75748a0a3f71f981ea4e4fd0b5c009d248d711af2d82c8ef11972006cfa9f3a3f746d5ee5e09f2a77115157723d798b6dda33aa405ebf90687641ea88fdab29225a095b217b66fc551a6a5ae9635d4cbf647f0cf9182d9f3e9b5c9ef0", 0x7c}, {&(0x7f00000006c0)="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", 0xff8}, {&(0x7f00000016c0)="91681f0e204308f5113805bf592c2ef66549528c41baa41dfd58bed95adc429b73c1f91c3549ead23619231a971abdb57c09fe0e654259473924f87374fb6068c02efc896961ca5a5b748f6eb27f443df5f717f4b0054392f1b9bc1b8f82b7af362be861a77eb246e2ad465ff2ea762b6ffd84640ff80c926e5552893e200ff94263b81accd550264feae86cf7f7ed3f8f8af2525dc1954bbda7b144a2b9f6eb91c5b1ed6bfb5d98dc67f7b98571690a65832ff820fbd13b107b5cde833539c316d75d4497458fff1120a84c131672f6a36c20393581c82382abae7ad5d5b61b010115c215f05e39b5f109c5bbf77a3d4791a3d38c2150bc2f6e42dce5f84f784e1a241689e785be9947182564f7ef1b1a8c0ce259bd995429dfc1b4e73114426d8c3ac32504d79f68e5d0ac72b7eeb383d6984c3dcc76860527949eccca9f39355d06c593b5ccfd8c856d696ae41146b6b9547f1690d8e6aedee0a55dcb7eeb9f1d3bb016a1f2c1127fc30a5e8b2562861e5d293b65d2379e220384a3dbbc34f0fd5798f53a3c74e58a5f038e8677b9cb61f5cf4c4c1ba5cdac71109789afbe17993d0bea364b33773f5f52f95947c9003a62a406cda0492d83e5eac60857e2677787c56bddf21d98a08a43578f5e9ae8c347167a4cbdac70b49200fcaf10229f66950a1d35fffedae68172ec27fe2fd4f736b80ad19475030d9e3a21e6d3d2e17c30aa3e70c9cb10d4bfaccd71a4d7b09ae57f3d16289aa3343448ea52a6f270401467d247ff04bb9b32ee84a196a047111d5c7eaa1a3c679bc6eb02dd1beca6c18e7d3839cc8c681a8ea566fa7e4781dc993a27f3514b7a34d428258906a3aed5c875c31e85e91eb39d39d18cc2e435f2a97d6ababff01ad1581de7a1269823803a937225370951c23d9a9e6191383dee0bbcda4e817599defed3ffeeef38e7c8ea5e3016a7771a5c1b238fdbc7a4b52f8ded102dc83ded335befd5b1087df5e99c0922b81383f673e2d8d43d33c7dfebdb96be78706173ea2ac9646688a0fea1de13eccb720c97592089f7e9efa0ad91b9f3cbb381bca58c2b242be3128ff586e4a2b4676a71ddfbc624ac8bf13956107450a50fabda476cb342e20735bbae0ede7dc5cc1539ba4c80475f5d494a5e91794ae99a6b82b0691607c33abd97a15dd3324ddce3cf2e716082e27c1a627d4a941a9f88f6fbfaaaf6749eb673cc61a6f32222adb2eb92925a392015a4202fbbb821325d72afc8df67846be6ce2f7070b5cf81425a28d5ea7dcbd5d554a96fbbcd785fe9ab3d30e5610a653e9bc79644b39f72a74c0dfb064768b81034a5f13c4800ef09fd5556fb0178ee0ec667c2f1e0a48f03eedbbcb03eba7afa138f9c5212d76ff4f0b2a5faf786b4907123c43684d0d1faed56ebd2edb84fdc205302f3712a6008703fb9086ab713a7a80739ea9ca32917e6f8fc05de257e72ad13ca572aeb7055b197f4c2e58c2d036d58b1ddd6e02e972d437bd1af0ad141a21d7ef52559c9837886ee4d4c7df77080e8b0f49b967fe899456931db022ec26a918ed816dd04e152e7dcccab8268b64ffbdfadf4d38b695306d0ba57c3e5438d2367472630384b48561fc6db448cc707156144238a6932612d4bfacdec26018616408ecc337a9c7ec2c39cd57fa8f0c2fb6bfe3905b22b761457bf8bc804e3851da32f7fdb92c3f3c642d02f6df1beb3e37bb9b20b1f75f21b08f335d304b1f2fc596c6e4a5f4ef309ac15cd255ba193360fd7e685fda6fd4175e39596e845c9af12d0f35e1f53708634e9a5eca73e14081ced52a24107808b9cd42bf993db4b5d37c7d8add0f254d42c57f4b3d686f0a2fc66614da483d8a80ad79bb9ca60cb4d438c7494599ef8a02ea59a14715ae1a0bf5c0911243c900fe00ed74467e6102d7969e7674a00a43ed1955607e641525f18737bca456f532fe3a3f1580e59f0a50c54fe99e336439b7284fd39cb1aff3b3245c5ebfc4e8402a2a00e3ba2d51166a7da8e0d25d4b5119761029127e499287414c01a105d6bac33241eb8fcc2533f450019d88ea82771bf4d332a7e77b0e7c39652a18844ae85599d094f8296dfe39f33dbe5689125bafb7078a0b9d3e0636c0f3bf08cb976c9f32ae0a2fbb04b03f2dd4f456fa9e32e27d7edfad4840c5ff4c56f65066c616b8d7c525efddce4064464ee41ab3e5dd6869e4d1a085a420e4e176b67b1bfcd10846a126faeea168cf50f3ed04194367ea3025e4f4a3c849084c85d468f46f4e4721b5eeaf092ade4933087691a957c49174ac6eaeb0fed4a17160d107e31f9a043b0bad47a94541cb7425eeb1ff70647f2c8301e5b7cb2a183e3342c31107abe6c228fce7a6d387d31579e8e6f74d57350ef1e05ac22bec25a42710ef5be191e4373643053917628008af2c5fc63454879dea6876e4cbe32ed3ad4a441e2aef82b1711196e0c9b172eeac78becd09ace4c35e296168aac4027c3be4417cabf70b5c85d9fa240ea21f13942b58c0b7c3a65c9aa8893bdabb6022be20270e5bd3beeb2a0f2dd5aa1b08f73a00229f932a33bbcea441cb0c05fc0f76f0db79d5966cabb7252cbfa569c7abd62cab6a5c8792652906e1042202663db943b773fd5ac613899479413ec966078277c99ffcd29ce18080629059acad1e5d2c8709a20191e43435ac6376d2412efc4dd02d20525f83864915b6a365183188f036ff7a0111f8d82fa7e27c9f52ef8788eca2ab1a864073600295c0df7da3a69c3cbff84b581273485ecbd4f372c42aabb0f9afdebb49a7a4b72a5f18e9b7b5437344f9229ec6a36b4e15ff2cb86ecd4b7db857d217c2851dc336d47cd5df3d6c3d971d33d6f5a71846c27f1531bb5d0e318cddc57d2b75a84833c695e36b2535313f8b8af5e8481a74be6fdf1b61c0370ab98567d8822dd1e698e416546e1152946d77f8c41450c6cdafc935f929bdcd89fdc5754d6435c2c26ac5dc2abb5aeef842c6ebca406f48c1e5b461203b32104e45a6efc834f326dcba173e05cd0de2de9fa6b5ba5207605e20d0bdf2ec0277d06ce70a7b76c5e4cb40945bc3c7e57759dd0e389900aa7137b71f62c60c2e9d197a57643147ddccc3603b74ebe8b3e07d4bf0e24c4c3f22692d741a02762a3845947499bff48122095da07674e395328ec083b409b6e6ff4dfc6c2a8d0fa67742f3b9784f11c899230930175aebb1805c85543ea430bf7cc496ceb7925fc824538aee4232d8d601da62aea4b968cc3c6a232eb20ca37e8ae16fa646ae828774fb65941328e050cf0f30919eb2b8bc045525a9082949a3b4b2a05a5704f0d6d02fae1a6cbc223dc22f7873cbb2251e0f3a35f4c0d1d34e2fe6d10ce4ffcee6a3bfa0067d4854e8e8849ca12483ee5b692eaa2955caf234110c86d510353fdd207271b9ea6188f6493b6a36dccd69ecdde1a60343a6229be29460aa5bf799e490d1a654a09db2078b7559c975a08f5fd60116d51d77badc471e0229918c6e508d806a2e8dc3cccc91b2b2da11386fa2a141e7a6068df43a3d85702ff1a57121756faf22e3378ffffca5f161846c160fdd66ccf4cb612731608bafa892f6e2649e32f79fea8f17a0c20295763c6b48ebf4d45bc64664b61134ddaf662168e4048d2609f1d9fbb45825a54078800e53d60ac9f49822d9dc4b9ed4fe5d59fd7ff429ccacf7b0caae5766eb972d3026425d14774ce1e152633a7484ae8da5770f335f9c07fb61fc578b9663bd66e04014f417d34b3b0c55906f6da6e47bcc9644256612a411f1e7e8c42ab9e09d398e5692719dfa7a8dfec24fc3f8f4a020068b2776cba72b40b7dbe55e4d6a4cd5075288dcd3a8922ee0fd0ac97139caf9a0d29fae1ba8069d527ad1b8f125402f6e8a512f1d372fd8efdb3d1ac29370cd0d3ad7730e38f2118d43d8f57e19dbf3b98ae87b426de7bbe3e20127a3b55427908aa32957be2126033ef404d0b714847baad2e1ea33e9ec26ce3a19ef76af88b28571319958f5863af5d81a927e25eb050e16835db9be0b90e2a39612117b059fb4cb18fe736ce734a2657ea81515b845bef050bf20eb9bf18a2b1c0daa4ecf8ffe66b09f658f24ba386514e73343471e434b9d72baca08156ad26cf60a040562c799ff8d675e53eca65f7e9e48732e7542587a9bbbac3b3b8bad86db0447a23a6526b21fa86726b03c846f3c6cc05255148a61acb0780d23f60bdc3f5a4f3c93edf6388cea15da73d9e58f66225e4ed80c3bce48350dd19f968bee3fd645756f3bbad3a0d7119161d6247884f9603e26fa08c929017ca83429367d662875d39dae1bba21a70e757dfb7d86817d3b04b6f050a4302cdba8e0ef8602070a58a0f2cc28534c18b1bdb8f35ffcccb997d7e85526c3293f5f737a65236d9ab26fcb6c36737632709cf59b90df49878395d71b9f8231e5f33ece0e7612e12e50a80c9aaa5d33585f0b7ab3924c2db183e6aa087bf34b0c65abf3dadb7d32b45d54bc2b12d071977494c5bc6d8087bd7e9a026948d253e4258a38303845347ceb92709e796c2527837c76e992f2892e08347de497799dff0199c989eaa1190dba12476198641679a8226454af8c7f89963a9f519805d973b7e66b6ae3378c73d1eee492fd625e625a36f5ba53c145dedd0fc3cbf1ad48de1b551053a1aa1d6d252976b94e60d46044522484198783d7a30d7d26167aff62b3c5ef7278c4feb04c66ebe7569e7c5c46ba3e13c29887374739b72b43fb359a7bf19188e60e22804d869512cfd834fc1b50ecc7536aa17776b6294654a1c5d42a2c80e79cc8830eebab3651bec8d9e01719420d027ae3a832d523a76d8c4767323b3238fdac2ba4510c992f89ad8c9401fbd6f9b2f60fb0da4869ba31a62e3b557025b85ff3a299288429c73451c0c7410cceea95a6fd4982a3d83f9eca2b46032f6df104af00336cd7c46c5b4818f38e3653f1ff0f984c5101208aad25e6d133a037cf371c82898d9bad66fb879340c21bc311ba51d5d4f7006426fb77fe1a1e95627167ea9c5a167f3a28f2b3ccf13542154ce800d68a3d778e8b43b01d94e841762a9ff5b6de26ef916b2c4ef7d9788e49c958083b111e9b4ee82314e6b15a1849c4afa0d85d8ccca8e2e627ac1cac0d5377ad6e932bf08bad8f2b88f14678c385060dc0c0c9fd4a43c7521ed36ce29f9a7c65234a0049f06226b26308f6cbbffa21830481fdf0d3d7efdfc0d85018ffe42598ea78e53c38f4fe565cc6cbf375764c1d1090c220a5a4903db7e89ec85b1bc687a98b263eff9fc9496647b4061f1b44fd86c54df18f3e829cc2227a517de2f03d3260842a16d0305f96548eaf72113f7f21b3e5a11d2c436b2ecd5b66096c955fbeca01139ff4e6394f7bb8db0a4bfb66fedeb167779eed9310af8186957ef573f108a49e9463c1a280a2ce8afedbfffe011e90ac74d916ff6a29c5b75ca615b70f7f4d08c6413970f5b2bfcfe3f92cf0e47c0d00032e4c5a718730e85fd2ad85f57fa56d4088aa903ef5c761cc50f511cacbb8557744fbfffff945989d57ae8d81a873c77a605a4241718732c212134153d3966725d7c8b53ebf4fb0f9d3bcca1a4bd927b80f2beb155b4451ba78da33bb7ab66bc15bb4d68b48e21cd04cc9b6ce98077849ebf941f39c02cb5942a88f1aa876d165515e8223565edd581c1dcfe12f08231536ac1ed42964b583a6d0ac68d6b190c33669edec3a567a766bc4257ee29e2e0ac76de9895a22db9bb1bc990257e2853d5739480a16bcb599e4e1a2543861554fb72", 0x1000}, {&(0x7f00000046c0)="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", 0xf6f}], 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) (async) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 5.075340151s ago: executing program 1 (id=710): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000002c0)={0x1, r2}) ioctl$int_out(r0, 0x5460, &(0x7f0000000040)) r3 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r3, &(0x7f0000000080)={&(0x7f0000000140)={0xa, 0xa, 0x4, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x48}}], 0x18}, 0x922bac8556bdad8e) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fce000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x3, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x480}]}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000080)=@arm64={0x1, 0x4, 0x2, '\x00', 0x8000}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r10, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}}, 0x50) vmsplice(r9, &(0x7f0000000140)=[{&(0x7f00000003c0)="c6714e54", 0x4}], 0x1, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r8, 0x4010ae68, &(0x7f0000000000)={0x10000, 0x101000, 0x1}) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000a004e2000000007ff02000000000000000000000000000104000000000000000000000000000000000000000000000000000000000000000000426751f08d32ef8d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0x90) 4.975533706s ago: executing program 1 (id=714): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000300), 0xe1742, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000002, 0x11, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000005c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x81, 0x1, "9a"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x16, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="300000001c0021002dbd70000000000007000000050000000000000014000200"], 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fddbdf250a0000004c000180140002006d616376746170300000000000000000080003000200000008000300d7457d1b080001"], 0x60}}, 0x240448c0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) write(r0, &(0x7f0000000400)='T{', 0x2) 4.383884202s ago: executing program 4 (id=717): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x247, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xa0}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f0000000100)={0x0, 0x24, 0x36, {0x36, 0x7, "ad6667e44bb2cd263ca19db35b64ef7517ef18a5c7f872b2a6ba743febfd81b6a5ceb58e9c8690a139a795dbb34c976e696cd965"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) chdir(0x0) socket$inet6_udplite(0xa, 0x2, 0x88) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x20000}) close(0x3) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000880)={0x32c, r4, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5a48000}]}, @TIPC_NLA_NODE={0xe4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x7b, 0x3, "2ffb95e8062c66df57749b2f8116c587c5e2af29a4acbb9c5e47cc1a61d8af7dce8cdd56479460043b8e7cc6b8ffb48df5078233110151a7c4c06575ce7b9989158a2a587dfb4295b9d19353ee29d40304eaf1cd5d63cc51a085b5220052b901c2bfa71787f9de0163fe8f57bdfac07255233cce5f8f77"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7bd28}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "b4d5f7618b222184fc897594df14b1c57c5bcdddb98773ccafbba80ecd"}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0x9c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x397}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6c9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6e}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6d352f9e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}]}, 0x32c}, 0x1, 0x0, 0x0, 0x80}, 0x24000881) mount$bind(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x8000, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000200)={0x1, 0x100205, 0x7d}, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x26, [0x1, 0xc95a, 0xa, 0x9, 0x80, 0x2, 0x7, 0x7f, 0x6, 0x2, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0xaef91c5a, 0x4, 0x2, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x80, 0xe661, 0x7fff, 0xb, 0x3, 0xfffffff9, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x1fffffff, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf7, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x9, 0xffffff00, 0x312, 0x1, 0x0, 0xfffffffe, 0x800008, 0x4, 0x8000, 0x2, 0x6, 0x401, 0xd2, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x81, 0x1, 0x2, 0x2, 0x80000009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x8000001, 0xb, 0x4, 0x5, 0x1006, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xffdffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0x1, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x40, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x0, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10001, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x40a, 0xffffffff, 0x80000002, 0x22be, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c80"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.421118508s ago: executing program 3 (id=722): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) (async) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400, 0x200, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r1, &(0x7f0000000280)={0x54, 0x7d, 0x1, {{0x0, 0x3f, 0x7, 0x9, {0x4, 0x2, 0x8}, 0x8040000, 0x8, 0x3, 0x4, 0x0, '', 0xa, '^*]\xc1!-([,}', 0x0, '', 0x2, '}]'}, 0x0, '', r2, r4, r5}}, 0x54) (async, rerun: 64) write$P9_RSTAT(r1, &(0x7f0000000300)={0x52, 0x7d, 0x2, {0x0, 0x4b, 0x6, 0x12e, {0x1, 0x0, 0x3}, 0x80200000, 0x9, 0x0, 0x9, 0x2, '}]', 0x2, '!\\', 0xa, '^*]\xc1!-([,}', 0xa, '^*]\xc1!-([,}'}}, 0x52) (async, rerun: 64) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) close_range(r7, r0, 0x2) (async) write$P9_RREMOVE(r1, &(0x7f00000003c0)={0x7, 0x7b, 0x2}, 0x7) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresgid(r6, r3, r8) (async, rerun: 32) write$binfmt_register(r7, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x8001, 0x3a, '!\\', 0x3a, '*w@', 0x3a, './file0/file0', 0x3a, [0x4f, 0x43]}, 0x34) (rerun: 32) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async, rerun: 64) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020, 0x0, 0x0}, 0x2020) (rerun: 64) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000002780)={0x10, 0xffffffffffffffda, r9}, 0x10) ioctl$BTRFS_IOC_SEND(r7, 0x40489426, &(0x7f0000002800)={{r1}, 0x2, &(0x7f00000027c0)=[0x3, 0x7147902b], 0x8, 0x6, 0x1}) getpeername(0xffffffffffffffff, &(0x7f0000002880)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000002900)=0x80) (async, rerun: 64) r11 = openat2(0xffffffffffffffff, &(0x7f0000002940)='./file1\x00', &(0x7f0000002980)={0x200, 0x34}, 0x18) (rerun: 64) r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r12, &(0x7f0000002b40)={&(0x7f00000029c0)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x14, &(0x7f0000002b00)={&(0x7f0000002a00)="2e78c7e21f42446c0facda77b7db0d69c2761b4a37511721d70f34b81f49152de6c4b14bbc1ac2d0c3e3fee026c9354c0146dcb46c84587de72127fe9e57e102b68221940c557871f9e5d2603c293d252fa4322e78db47978b06af961e788bd73db9e4ce0bd06b8645ab9c019c3e7416028ea5a0add24a4a2ebed91e0b8c35de566c87f0b4f7d37f793cd291c08048efeb9cd3b831fc3529d9667fac01b1154b5f4dd87a8539a5d17d8595b3d4bdd34227435579730bb29ed933bf824d272ac578d41ee7490d46a311dd59d28d156407186b824c883409562a044898e7e728ad", 0xe0}, 0x1, 0x0, 0x0, 0x95}, 0x40040d0) ioctl$VFAT_IOCTL_READDIR_BOTH(r11, 0x82307201, &(0x7f0000002b80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) r13 = socket$inet6(0xa, 0x800, 0x1) sendmsg(r13, &(0x7f0000003280)={&(0x7f0000002dc0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x4}}, 0x80, &(0x7f0000003200)=[{&(0x7f0000002e40)="99e07310ff5707226e4d70d700016a656969bb3b8fff65c15b69e06eb4fd04b6fd29e17ac27bbcfd473a02bc4f65da6a9a7501325adba1ecc88312ae8ffbd000ed1f80d3590048a8a661013d9dc408e96552c133cb09012dd27b412ef60ce0b413bb517ec2ca332d9ec935758f23682d670c848aef788bda06459b594d2635f848f930976c7a5b6a", 0x88}, {&(0x7f0000002f00)="fd04efc26eebd80f0b618f43d19b9491ac40399fb56d8e203e1ede5af6527720ce0eee21dbeaa7fe1dd488a16c785dcebdd2e02de2e719d3307eba2061df41f6ca69c066bbba35cc6f154a0ff16c253bbba59be890d4f6553824b98baf632ed29dbc08b3b12636c7ec577c8a3b8fb0a46569e44aaa21172ea72d4fb431052fa9c085c87d46507cffb5546b66b4fce5054be56ac4e081b3a00d53b1d774", 0x9d}, {&(0x7f0000002fc0)="2a83e1e3c96749e6fb3d933e9ffb2860ccf29b6721464fe1868bd8c3c314c6216a9091b15221812bd54ccbf92d7b069d2b7ac3f4ac1b94ca9c7a639507dc689ababace499a98e2c722e94810dfc9a06573eaa526f6d308b956d439a74ab32450278f2b7ca17f39ae276aecf4983d0a341d45f3db5f42a4090c418a68a950489543c28b98ed8de71359", 0x89}, {&(0x7f0000003080)="e08b054cdda251166430641b09cf7362d52bfaabf6e898590101ce63e17622ccfdbab2cf0b2f71d9d23e07bd01796b741339050d23e45368bf08279666432d6141da2fc8be839ad2b943caf8c350566c11246bbdc0492020da2a61", 0x5b}, {&(0x7f0000003100)="8f166caf8e948b8b5e24c3ab51facb7e1fd04ee9e6a3d831d90b8b815f37d86389986aa4588fe253234e17e9991c896fd433fa689fb70659f6180c31df080d7883567d90041b0ab95e1a4b3294922b2c54ed687bebde9e2de5295d16d7d05a9ce025f071bdd64fb8bf8447c3795c899da6455819cc5cb5d9c50fc16bd43a143276266fcdc6d3e0225f2b6ac1ff0c0727b2949af93f47d1e14edd41b103d7d41542b83b2592768c4fa23faba9df65d524171cfaa9c17bdb000a7e7e70b5ee0a825b4d681bc754f81c1d", 0xc9}], 0x5}, 0x41) r14 = accept$unix(r11, 0x0, &(0x7f00000032c0)) getpeername$unix(r14, &(0x7f0000003300)=@abs, &(0x7f0000003380)=0x6e) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000033c0), r10) (async, rerun: 64) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000003400)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$XFS_IOC_BULKSTAT(r15, 0x8040587f, &(0x7f00000038c0)={{0x1, 0x0, 0x5, 0x46a, 0xffffff01}, &(0x7f0000003440)=[{}, {}, {}, {}, {}, {}]}) (async) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) (async) ioctl$PPPIOCGIDLE(r11, 0x8010743f, &(0x7f0000003940)) 3.351908802s ago: executing program 3 (id=723): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x107842, 0xa) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000440)='.\x00', 0x449) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x33fe0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffff1e00000000000000000000e5ffffffffffffff000000000000000000000a000000000000feffffffff7f4000020000000000000800000000000000000100db00000000004400050000000000000000000000000000000000fffffffc3c00000002000000ac1414aa0000000000000000000000000600000004030000010400"/180], 0xfc}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r7 = socket$inet6(0xa, 0x80002, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x42, 0xa01, 0x1, 0x0, {0x2}}, 0x14}}, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x5, &(0x7f0000000280)={0xa, 0x4e23, 0x8000, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r9 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) ioctl$USBDEVFS_CLAIMINTERFACE(r9, 0x8004550f, &(0x7f0000000080)=0xb6) pread64(r0, &(0x7f0000000100)=""/58, 0x3a, 0x10000) syz_usb_connect(0x5, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="12011001070102109806826bebd30102030109021200010600b06a091f"], 0x0) r10 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x0) sendmsg$netlink(r6, &(0x7f0000000440)={&(0x7f0000000300)=@kern={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)=[{&(0x7f00000005c0)={0x204, 0x23, 0x10, 0x70bd27, 0x25dfdbff, "", [@typed={0xc, 0x10e, 0x0, 0x0, @u64=0x4}, @generic="a370634866061ef3a9f49002f1d2581465053efac51dd99bcd130ccef3c57311d722dc8527da10ab914b44093710778b9b74c7ee9b03d219eb4f3463f20efaaf735e94713a618fc102abf55d23bc5f9ea0afd03a1adf834578914f8f99fba52a6c2d63a93d0587687eb7ddde609449a7244835415f3358931b92958b0dbd6d785dfef5c81d2a1c0467f18799cea80953f6492395cf2f61d6ee9700d8142a4506bacfb3e26f5cf5e021df34944c6d", @nested={0xb6, 0x140, 0x0, 0x1, [@nested={0x4, 0x29}, @nested={0x4, 0x7}, @generic="c88a1043683b7b15c11e74b7c913c6c6b1fd8c6875ece3db51f84b5a482912ba84b3ed9c177c68b9a7ff32590bf6c273b576ea1e4e1129cbedd4313b6850a6ea9d55b3a8d0fff1b771ba8c6e7091491aec4837c20c2ea89cd0f736c67e14bc0bffe8f27bd1843e505c4fcb1fd2ee57c1da031ddee2ad77242752109ff63bb19296ff4b7d636ed1e079cfff594c1356892541bfcb37f1ddf1dc21d32c26aa485a311df1c71dc5a9a7195f"]}, @generic="41db0e9f9e39be765a38a513957a55b2b8a95516549e520ffb4b70b73bd85ae96853dcb824f2fc20eee16e1d840f8a62eb47f80a4314baa8c7", @generic="1ac6b98fcb0e9cef172fb026c6810e0b75b99b2388c5c80b05a7697b40cc6c405728b30c28a4815b6b3d17f7b2b47af7f8bfef6507491026e96906904e0c9805a457ffc284f2ef5923"]}, 0x204}, {&(0x7f0000000340)={0x48, 0x32, 0x200, 0x70bd2c, 0x25dfdbff, "", [@generic="c79d4ae35d8f0100d8fa10557172e263f8aa751d5f50aaf5699454cbce3fd0cee4c0a462852ccd8acf3c169c8be87b9d1f11cff2b401ac"]}, 0x48}], 0x2, 0x0, 0x0, 0x4010}, 0x4) connect$unix(r10, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x40020, &(0x7f00000004c0)={[{}]}) 2.835275563s ago: executing program 4 (id=724): r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x37b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x81, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x0, 'DL(\x00'}, @local=@item_012={0x0, 0x2, 0x3}, @main=@item_012={0x0, 0x0, 0xb}]}}, 0x0}, 0x0) 2.324303663s ago: executing program 4 (id=725): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @ioapic={0x41000, 0x1be, 0x85, 0xfffffbc5, 0x0, [{0x6c, 0x4, 0x9, '\x00', 0x12}, {0x7, 0x3, 0x6f, '\x00', 0x3}, {0x0, 0x1, 0x5, '\x00', 0x5}, {0x81, 0x3, 0x6c, '\x00', 0x9}, {0x8, 0xe, 0x4, '\x00', 0x49}, {0xf3, 0xf, 0x2, '\x00', 0x7}, {0x6, 0xf4, 0x1, '\x00', 0x9}, {0xa, 0x2, 0xb, '\x00', 0x45}, {0x7, 0xf, 0xfe, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x38, 0x11, 0x2}, {0x56, 0x4, 0x1}, {0x3, 0x6, 0x10, '\x00', 0x5}, {0x5, 0x5f, 0x2}, {0x4, 0x4, 0x1, '\x00', 0x29}, {0x0, 0x2, 0xf2, '\x00', 0x7f}, {0x8, 0xee, 0xd5, '\x00', 0x99}, {0xd, 0x3, 0x2, '\x00', 0xff}, {0xa, 0x9e, 0xc0, '\x00', 0x2}, {0x2, 0x3f, 0xd}, {0x7, 0x21, 0x25, '\x00', 0x1}, {0x5, 0x0, 0xff, '\x00', 0x3}, {0x3, 0x1, 0x6, '\x00', 0xe6}, {0x6, 0x4, 0xe, '\x00', 0x54}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendto$packet(r2, 0x0, 0x0, 0x20000081, &(0x7f0000000240)={0x6, 0x1, 0x0, 0x1, 0xa4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="c481fde2c8c744240000000000c74424020e00000064410f01c40f101c2436430fc76f00c744240001cac93fc744240602000000939393240600000000c441fc2fa20b0000483e440f01c9c46119f3660066450fc7b30000000065410f0636660f3881450c", 0x65}], 0xaaaaaaaaaaaaa8a, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0xd3, 0x0, 0x3, 0x4, 0xbb, 0x6d, 0xc0, 0x6d, 0x7, 0x61, 0xb, 0x95, 0xd}}) 1.919903487s ago: executing program 1 (id=726): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'rose0\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "a9ea027a6e07ca4b880a0cb28896feb551aac4e7be1e2e50e74cb50cec8a73cf", "6106b803613ed5d9881cb1745df4d40620a9a61c5c92242223177cc03afaad90", "1a11025c1d18865c4c77b48927b76f77b01d6357a92430838482370e50bf71b5", "31ce2468953643392c40fd7f73478d77139c0c0305e1e454199b7bdae9c43842", "aa145401ccf066293964e14b28f594e962a5e63394ddc745cc1b204cee283942", "f91efa890aa46d25bd4fa16d", 0x92, 0x5, 0x3, 0x7, 0x7}}) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x40) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000180)=""/245, 0xf5}, {&(0x7f0000000380)=""/223, 0xdf}], 0x2) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000080)=[@uexit, @wr_drn={0x68, 0x20, {0x5, 0xe0a}}, @uexit={0x0, 0x18, 0xc}, @nested_create_vm={0x12d, 0x18, 0x2}], 0x68}) (async) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000040)={0x1000200001fe0000, 0x1}) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x100089, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) syz_usb_connect(0x1, 0x49e, &(0x7f0000000a40)={{0x12, 0x1, 0x250, 0xc7, 0x42, 0x1e, 0x10, 0xbb4, 0xa5d, 0x7de8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48c, 0x3, 0x8, 0x6, 0x0, 0x4, [{{0x9, 0x4, 0x9e, 0x90, 0x4, 0xc6, 0xfe, 0xbd, 0x7, [@uac_as={[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x3, 0x0, 0x9, "20b8b2fb"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x6, 0x3, 0x1, 0x7f, "a6c33cab0a"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x2, 0x6, 0x5, 0x2c, "e024c9ee5098e2"}, @as_header={0x7, 0x24, 0x1, 0xf, 0x2, 0x1001}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x1, 0x1, 0x0, 0x7, 'sXO\b'}]}, @hid_hid={0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x725}}], [{{0x9, 0x5, 0xf, 0x0, 0x40, 0x3, 0x67}}, {{0x9, 0x5, 0xd, 0x1, 0x40, 0x8a, 0x3, 0x4e}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0xeb, 0x7, 0x4, [@generic={0xc7, 0x22, "34edef236f490479201ff1e8b53a7deb99cf71da04e5637b2624aea2257c109b2447a91a59a551fc96884e8cc1a29b522b90783707c49e731d80dcf66123c3305fdbaa921434a6e707a94a7b0848d943e03a06abeb4f5feb0aa11f635bdc1350ce6af995f3466d6cdf92a922537a370c4024f077f1a12b1ff3038b88ea25d49e9b70a7af93473f142c66d1ba2c394cf7f6f4ec3f5d261755139a47aedaa23e9e0b956c095d229e99ef96ff4c60da23cfd70f8efe735be907de947e519b9456eb41ef2fce5e"}, @generic={0xab, 0xa, "a3ba266937768e6e132c3724b3e1332961359ab80f12976d12a591a12ba1a388257e5ed4de2513bf3b79efce63afa60861f09b78795f18e2d13394523840d9b3b6e4fd461340ce8cbca4c6b1587c76d32de497625ad92a6be687bc81a13721cc5fab8cd400b9371517dd2d2601a6686a8cd8cbeaab177a25dd570f2b8325c3d5c05c519f5c54c9ec3e38a600a80beb3b1327142d71b86b2ac31ec61a494795f01b1a33088065775cde"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x40, 0x1, 0x87, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x7, 0x40}]}}]}}, {{0x9, 0x4, 0xb9, 0x40, 0x1, 0xcd, 0x45, 0xfc, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0x1}, [@selector_unit={0x6, 0x24, 0x5, 0x2, 0x8, "82"}, @feature_unit={0x9, 0x24, 0x6, 0x6, 0x6, 0x1, [0x8]}]}], [{{0x9, 0x5, 0x7, 0x0, 0x400, 0xe9, 0x0, 0x5, [@generic={0x2d, 0x11, "17159910bfec83123185fff46b167581b7dd2abbe25476242e11aad0466f9f68de674368a758b711903f8e"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x40}]}}]}}, {{0x9, 0x4, 0x96, 0x8, 0x8, 0x5a, 0x9f, 0x25, 0x2, [], [{{0x9, 0x5, 0x0, 0x0, 0x10, 0x5, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xff, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc, 0x3}]}}, {{0x9, 0x5, 0xe, 0x2, 0x40, 0x3, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x4}]}}, {{0x9, 0x5, 0x4, 0x3eecaa84276ad3a6, 0x8, 0x6, 0xa, 0x88, [@generic={0x83, 0x6, "845bd7dac9c5a5c8033eb380a84e508241e30d18d280f42905279cb0a05931bae27c9deeebabc3f542b73d99e56be2e60faa13b3a79064501a8cd0c34345129da870c2b217a233bb16a71c1b5d3cb558a4805d0b7fb7b769b2426864ef0a4f611cbcc9b7a3d74ac1e722eab8ccbd8d8b4034e9b1d6fbdb013aeda74183831db814"}, @generic={0x5f, 0x2, "5cf49feb3de7ce87c74ec5ceceef8cfbf0985bf9b1bb03b1cf9d04c4cad58657a6c7b5f85125fb54dd2b114879ffa99cfe2d445d023b160b07c78aaac49b9aedadcb325abad89122e6335b76a165cf5e4973f83b818a603c1dbe611950"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x15, 0x0, 0x5}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x9, 0x29, 0x5c, [@generic={0xe4, 0x6, "960e48009b6cffa150fa8fae559a212d55edf0349f6681056b904936836aa18d5c4dda3ea624461ddac58f92f67aacaf45774722d64e3fb0c9840afcd239828cfbf1ddb9679c95cfe9f6ef605bf8e1d73bdfef138b34a0002658b2b82bf5cffcb8a8b22e62e4d506ce56eb88712f044c57fdcd275c078a62b68628b57f8db1be14f9739fa2fe8cee92040fc04f4213d9b6af91a1adef9c49c023b245e872f5d8962b6bb33314187d9cac08d2cbb8d8abc889e54b16fc76c9a402f4497c7f2ffd9f11c2a192171e6a70855e95846ec55341fba4d9f34e62a3feeb6aa39df9ecfb1f8c"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x8, 0x4, 0x8}}, {{0x9, 0x5, 0x1, 0x8, 0x20, 0x0, 0x6, 0x1}}, {{0x9, 0x5, 0x4, 0x4, 0x400, 0x3, 0x8, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xfff}]}}]}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0x8, 0xfe, 0x8, 0x8, 0x5}, 0x8, &(0x7f0000000300)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0xe9, &(0x7f0000000580)=@string={0xe9, 0x3, "e097443bd1d597a073449c25ec3290b4795cb3e37f42cb43068bbedacf2fbf58c4e9b0576d1365c14598948ff03915db28af5a157471301ce334450cb53c4c24bda467f6f8b61f60aa1cfd9407a2cb3d4afe5ba280f40e1f8340f1d1614c1a3376c0094aea5eb56b095f516e6f7eaa5b62cb4c530985e9082fa61e90f69952ab01ed695a1fc6094288bc1ec46313cece6ea230534a44f1c6210d9d6bf9589df95936b090ee20023f3166ac85c512f9beb8145f5dee06105266177c2e99a1742380312f2e472c34a6db7b0a5a41cc39c6e8b4335265653fa453d8dac12c37e68a15601b09eb7fe5"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x3423}}, {0x7, &(0x7f00000004c0)=@string={0x7, 0x3, "dc8e2469c2"}}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) 1.417956426s ago: executing program 4 (id=727): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'vlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "a9ea027a6e07ca4b880a0cb28896feb551aac4e7be1e2e50e74cb50cec8a73cf", "6106b803613ed5d9881cb1745df4d40620a9a61c5c90242223177cc03afaad90", "1a11025c1d18865c4c77b48927b76f77b01d6357a92430838482370e50bf71b5", "31ce2468953643392c40fd7f73478d77139c0c0305e1e454199b7bdae9c43842", "aa145401ccf066293964e14b28f594e962a5e63394ddc745cc1b204cee283942", "f95500890aa46dcebd4fa16d", 0x92, 0x8, 0x3, 0x7, 0x7}}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7", @ANYRESDEC=0x0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x40) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd1, 0x0, 0x0) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x0, 0x0}, &(0x7f0000000680)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="201800000020"], 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000400)={0x20, 0x81, 0x2, "a63c"}, &(0x7f0000000580)=ANY=[@ANYBLOB="208203000000418020aaed81c20b744d192a6ba995550882b212c9987d3bc9c5cab5d7b82b83d44bae37c242eaaeb0fd5e0ec330f9d75e9e564c42fbd695307ac257400d93d6b030529c1827761a2a95163da58ee7d289c02c1666c513c30f7445fda55cd0b769966d4b941a1b97b50517ea2b6bcb24f1b734cfd51072fd54cacfecab7a9e067812bf822c8a4f701d5fbe21c35139d1b9192cacde3d13c60f68aad89508e12ffe414919b3b510a8cdad9e3940675908c9e279385299103a7b56cb198a57f977f4e93222"], &(0x7f00000004c0)={0x20, 0x83, 0x2, '&q'}, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x10) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r5) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, 0x0, 0x0) getpid() r7 = syz_pidfd_open(0xffffffffffffffff, 0x0) setns(r7, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 455.436283ms ago: executing program 1 (id=728): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0xa00, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) inotify_init1(0x80800) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r4, &(0x7f0000000480)=[{&(0x7f0000000100)='\f7', 0x2}], 0x1) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r4, 0x4008af23, &(0x7f0000000080)={0x2, 0xdc0}) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0xffffffff]}, 0x8, 0x80000) rmdir(&(0x7f0000000380)='./file0/../file0\x00') ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbabbbbbb0205000000008100000008004c250044006a00ffffff441c1011e00000010500bf2c7f000001fffffc00e0000002000000004e244e22000000000000000000009e44ab615866a7d68c327370af9080c3f7c2b70426a42a7eb2a95e1842a8a5c531dab40b7c747922fda832bbe2b58c162910976b480ab9a4708c9669d29e5eeef88d189035595b3c0e7c2fd1cb4e8b9987d6037930645e64cdb94a92e43638f580977f57e9699324cb33b880be301f3b1d46339355087a6800bd8968bc345c3f399813429b587fa48345482fe9be91f46187c2003ded976e0650a2cdc6ae14d639b582d9e8c7a7226af94737ad1f1b5688f9491efd02cd07a20d9a52", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5140000290780007"], 0x56) ioctl$TCSETAW(r0, 0x5407, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) signalfd4(r4, &(0x7f0000000040)={[0x5]}, 0x8, 0x800) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x35, 0x36, 0xb, 0x15, 0x6, 0x3, 0x2, 0xd1, 0x1}) 367.238628ms ago: executing program 33 (id=607): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x7075e23db815f53d) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000004f00), 0x2001, 0x0) write$cgroup_int(r1, &(0x7f0000000380)=0x5, 0x12) mkdirat(r0, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)={{0x0, 0xea60}, {r2, r3/1000+60000}}) mount$overlay(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)) sigaltstack(&(0x7f0000000240)={&(0x7f0000000000)=""/30, 0x3, 0x1e}, &(0x7f0000000340)={&(0x7f0000000280)=""/71, 0x0, 0x47}) r4 = socket$nl_route(0x10, 0x3, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f00000003c0)={0x10}, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="280000002100010002000000000000020a20000000"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) chown(&(0x7f0000000080)='./file0/file0\x00', r5, 0xee01) 323.934471ms ago: executing program 3 (id=730): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000000c0)={0x3, 0x0, [{0x7, 0x0, 0x3, 0x8, 0xfffffff2, 0xfffffff9}, {0x2, 0x2f8b, 0x6, 0xe, 0x87b, 0x1, 0x400}, {0xb, 0x59c, 0x5, 0x2, 0xf64a, 0x5f8f, 0x9}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 323.589871ms ago: executing program 3 (id=731): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f00000004c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x80000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001000010000000000000000001c0000000c00000000000000000000000c0016000600", @ANYRESDEC], 0x2c}], 0x1}, 0x0) 285.243963ms ago: executing program 3 (id=732): socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r2 = socket(0x1e, 0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x3}, &(0x7f00000002c0)=0x28) bind$tipc(r6, 0x0, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x10) 172.8846ms ago: executing program 5 (id=729): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc211, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x26, 0x5, 0xfd}}]}}}]}}]}}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) munmap(&(0x7f0000822000/0x2000)=nil, 0x2000) connect$inet6(r2, &(0x7f0000000ac0)={0xa, 0x4e23, 0x2, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000300)=0x3, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x80000000, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x0, 0xff, 0x0, 0x0, 0x6, 0xff, 0x0, 0x5}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000790000/0x2000)=nil, 0x2000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r6, &(0x7f0000000000)=0x7, r6, 0x0, 0x7, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='ro\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r1, 0x7, 0x4) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x8201) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x1000000009a, 0x0, 0x0, 0x4, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0xa7, 0x2000000000001]}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x40, 0x21, 0x7, {0x7, 0xd, "406116c99e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 3 (id=733): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000b62000/0x3000)=nil, 0x3000, 0xe000, 0x3, &(0x7f0000bca000/0xe000)=nil) (async) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000100)={0x2c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x2, 0x0, 0x0, @uid=r1}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic='+']}]}, 0x2c}], 0x1}, 0xcc000) kernel console output (not intermixed with test programs): mber 39 [ 81.178512][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 81.178548][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 81.207141][ T36] audit: type=1400 audit(1770757331.719:330): avc: denied { block_suspend } for pid=1390 comm="syz.2.314" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 81.610539][ T398] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 81.708920][ T1417] netlink: 'syz.1.322': attribute type 2 has an invalid length. [ 81.717124][ T1417] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 81.725842][ T1417] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 81.737452][ T1417] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 81.772377][ T36] audit: type=1400 audit(1770757332.279:331): avc: denied { map } for pid=1421 comm="syz.1.324" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 81.797403][ T398] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 81.807585][ T398] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 81.821525][ T398] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.830630][ T398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 81.838609][ T398] usb 1-1: SerialNumber: syz [ 81.844107][ T1404] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 81.858907][ T65] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 82.008911][ T65] usb 3-1: Using ep0 maxpacket: 8 [ 82.008914][ T796] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 82.022596][ T65] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 82.030845][ T65] usb 3-1: config 0 has no interface number 0 [ 82.036992][ T65] usb 3-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice= 8.d0 [ 82.046044][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.055054][ T65] usb 3-1: config 0 descriptor?? [ 82.061327][ T65] usb 3-1: NDI device with a latency value of 1 [ 82.158940][ T796] usb 2-1: Using ep0 maxpacket: 8 [ 82.165131][ T796] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 82.176650][ T796] usb 2-1: config 0 interface 0 has no altsetting 0 [ 82.183331][ T796] usb 2-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00 [ 82.192388][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.201842][ T796] usb 2-1: config 0 descriptor?? [ 82.268405][ T65] ftdi_sio 3-1:0.255: FTDI USB Serial Device converter detected [ 82.278019][ T65] ftdi_sio ttyUSB0: unknown device type: 0x8d0 [ 82.285460][ T65] usb 3-1: USB disconnect, device number 33 [ 82.291851][ T65] ftdi_sio 3-1:0.255: device disconnected [ 82.403370][ T1423] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 82.609292][ T796] usbhid 2-1:0.0: can't add hid device: -71 [ 82.615479][ T796] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 82.624211][ T796] usb 2-1: USB disconnect, device number 40 [ 82.813893][ T398] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 82.902492][ T36] audit: type=1400 audit(1770757333.419:332): avc: denied { create } for pid=1440 comm="syz.2.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 82.926372][ T36] audit: type=1400 audit(1770757333.419:333): avc: denied { sys_admin } for pid=1440 comm="syz.2.327" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 83.040567][ T65] usb 1-1: USB disconnect, device number 33 [ 83.047144][ T65] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 83.199556][ T1468] netlink: 20 bytes leftover after parsing attributes in process `syz.3.331'. [ 83.248996][ T398] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 83.411832][ T398] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.426298][ T398] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.441656][ T398] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.450866][ T398] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.459084][ T398] usb 3-1: Product: syz [ 83.463328][ T398] usb 3-1: Manufacturer: syz [ 83.467899][ T398] usb 3-1: SerialNumber: syz [ 83.575967][ T1494] netlink: 'syz.3.335': attribute type 46 has an invalid length. [ 83.583756][ T1494] netlink: 'syz.3.335': attribute type 28 has an invalid length. [ 83.677495][ T398] cdc_ncm 3-1:1.0: bind() failure [ 83.687596][ T398] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 83.698927][ T398] cdc_ncm 3-1:1.1: bind() failure [ 83.708063][ T398] usb 3-1: USB disconnect, device number 34 [ 83.733945][ T1502] Invalid logical block size (14) [ 83.739545][ T1502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.337'. [ 83.808932][ T796] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 83.960956][ T796] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.970861][ T796] usb 1-1: config 0 interface 0 has no altsetting 0 [ 83.977731][ T796] usb 1-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 83.986925][ T45] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 83.994526][ T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.007533][ T796] usb 1-1: config 0 descriptor?? [ 84.149916][ T45] usb 4-1: config 0 has an invalid interface number: 190 but max is 0 [ 84.158138][ T45] usb 4-1: config 0 has no interface number 0 [ 84.164273][ T45] usb 4-1: New USB device found, idVendor=19d2, idProduct=1111, bcdDevice= 7.75 [ 84.173334][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.181955][ T45] usb 4-1: config 0 descriptor?? [ 84.213200][ T1499] futex_wake_op: syz.0.336 tries to shift op by -1; fix this program [ 84.232449][ T796] usbhid 1-1:0.0: can't add hid device: -71 [ 84.246002][ T796] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 84.253810][ T354] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 84.262353][ T796] usb 1-1: USB disconnect, device number 34 [ 84.348638][ T1524] syz.2.344: attempt to access beyond end of device [ 84.348638][ T1524] loop2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 84.361939][ T1524] EXT4-fs (loop2): unable to read superblock [ 84.368384][ T1523] veth1_macvtap: left promiscuous mode [ 84.374318][ T1523] macsec0: entered allmulticast mode [ 84.380557][ T1523] veth1_macvtap: entered promiscuous mode [ 84.386330][ T1523] veth1_macvtap: entered allmulticast mode [ 84.392220][ T1523] macsec0: left allmulticast mode [ 84.398782][ T1523] veth1_macvtap: left allmulticast mode [ 84.404456][ T45] usb 4-1: string descriptor 0 read error: -71 [ 84.411608][ T45] usb 4-1: bad CDC descriptors [ 84.412733][ T36] audit: type=1400 audit(1770757334.929:334): avc: denied { nlmsg_write } for pid=1522 comm="syz.2.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 84.440458][ T45] usb 4-1: USB disconnect, device number 28 [ 84.450377][ T354] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 84.462101][ T354] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 84.462478][ T36] audit: type=1400 audit(1770757334.929:335): avc: denied { audit_write } for pid=1522 comm="syz.2.344" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 84.489456][ T354] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 84.493128][ T36] audit: type=1107 audit(1770757334.929:336): pid=1522 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 84.502522][ T354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 84.523166][ T354] usb 2-1: SerialNumber: syz [ 84.529481][ T36] audit: type=1107 audit(1770757334.929:337): pid=1522 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 84.543071][ T36] audit: type=1400 audit(1770757334.929:338): avc: denied { ioctl } for pid=1522 comm="syz.2.344" path="socket:[13888]" dev="sockfs" ino=13888 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 84.544316][ T354] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 84.576170][ T354] usb-storage 2-1:1.0: USB Mass Storage device detected [ 84.583987][ T354] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 84.591773][ T796] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 84.599600][ T354] scsi host1: usb-storage 2-1:1.0 [ 84.738944][ T796] usb 1-1: device descriptor read/64, error -71 [ 84.753673][ T36] audit: type=1400 audit(1770757335.269:339): avc: denied { watch watch_reads } for pid=1511 comm="syz.1.340" path="/84/file0" dev="tmpfs" ino=464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 84.768951][ T331] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 84.929947][ T331] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 84.939037][ T331] usb 3-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice=9e.00 [ 84.948090][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.956800][ T331] usb 3-1: config 0 descriptor?? [ 84.978923][ T796] usb 1-1: device descriptor read/64, error -71 [ 85.212090][ T36] audit: type=1400 audit(1770757335.729:340): avc: denied { write } for pid=1534 comm="syz.3.347" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 85.218965][ T796] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 85.368932][ T796] usb 1-1: device descriptor read/64, error -71 [ 85.548931][ T331] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 85.618982][ T796] usb 1-1: device descriptor read/64, error -71 [ 85.698924][ T331] usb 4-1: Using ep0 maxpacket: 32 [ 85.705132][ T331] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.716784][ T331] usb 4-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 85.725919][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.734174][ T796] usb usb1-port1: attempt power cycle [ 85.739581][ T331] usb 4-1: Product: syz [ 85.743738][ T331] usb 4-1: Manufacturer: syz [ 85.748328][ T331] usb 4-1: SerialNumber: syz [ 85.753857][ T331] usb 4-1: config 0 descriptor?? [ 85.759629][ T331] net1080 4-1:0.0: probe with driver net1080 failed with error -22 [ 85.840844][ T398] usb 2-1: USB disconnect, device number 41 [ 85.960816][ T331] usb 4-1: USB disconnect, device number 29 [ 86.088978][ T796] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 86.109951][ T796] usb 1-1: device descriptor read/8, error -71 [ 86.239957][ T796] usb 1-1: device descriptor read/8, error -71 [ 86.469761][ T36] audit: type=1400 audit(1770757336.979:341): avc: denied { sqpoll } for pid=1547 comm="syz.1.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 86.488955][ T796] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 86.519888][ T796] usb 1-1: device descriptor read/8, error -71 [ 86.649887][ T796] usb 1-1: device descriptor read/8, error -71 [ 86.759210][ T796] usb usb1-port1: unable to enumerate USB device [ 87.018938][ T796] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 87.168924][ T796] usb 4-1: Using ep0 maxpacket: 16 [ 87.175312][ T796] usb 4-1: unable to get BOS descriptor or descriptor too short [ 87.183721][ T796] usb 4-1: config 1 has an invalid interface number: 206 but max is 0 [ 87.191933][ T796] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.202007][ T796] usb 4-1: config 1 has no interface number 0 [ 87.208082][ T796] usb 4-1: config 1 interface 206 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 87.222419][ T796] usb 4-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 87.231503][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.239942][ T796] usb 4-1: Product: syz [ 87.244096][ T796] usb 4-1: Manufacturer: syz [ 87.248670][ T796] usb 4-1: SerialNumber: syz [ 87.467146][ T796] usb 4-1: USB disconnect, device number 30 [ 87.539934][ T398] usb 3-1: USB disconnect, device number 35 [ 87.638927][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 87.648942][ T331] usb 1-1: new low-speed USB device number 39 using dummy_hcd [ 87.768939][ T9] usb 2-1: device descriptor read/64, error -71 [ 87.800223][ T331] usb 1-1: unable to get BOS descriptor or descriptor too short [ 87.808471][ T331] usb 1-1: config 127 has an invalid interface number: 106 but max is 0 [ 87.816951][ T331] usb 1-1: config 127 has no interface number 0 [ 87.823301][ T331] usb 1-1: config 127 interface 106 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0 [ 87.833311][ T331] usb 1-1: config 127 interface 106 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.846433][ T331] usb 1-1: config 127 interface 106 has no altsetting 0 [ 87.855492][ T331] usb 1-1: string descriptor 0 read error: -22 [ 87.861715][ T331] usb 1-1: New USB device found, idVendor=0403, idProduct=e80a, bcdDevice= 0.b8 [ 87.870770][ T331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.879377][ T398] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 87.880930][ T331] ftdi_sio 1-1:127.106: FTDI USB Serial Device converter detected [ 87.895007][ T331] usb 1-1: Detected SIO [ 87.899211][ T331] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 15 [ 87.907313][ T331] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 87.987565][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 87.997178][ T1577] SELinux: failed to load policy [ 88.002337][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.011919][ T1577] SELinux: failed to load policy [ 88.016970][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.018970][ T9] usb 2-1: device descriptor read/64, error -71 [ 88.026538][ T1577] SELinux: failed to load policy [ 88.026753][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.047265][ T1577] SELinux: failed to load policy [ 88.052380][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.058912][ T398] usb 3-1: Using ep0 maxpacket: 16 [ 88.061946][ T1577] SELinux: failed to load policy [ 88.068243][ T398] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00 [ 88.072189][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.081361][ T398] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.090534][ T1577] SELinux: failed to load policy [ 88.099140][ T1567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.104555][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.112667][ T398] usb 3-1: config 0 descriptor?? [ 88.124199][ T1577] SELinux: failed to load policy [ 88.126691][ T1567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.132118][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.139739][ T1567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.149678][ T1577] SELinux: failed to load policy [ 88.158239][ T398] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 88.163468][ T1567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.169973][ T398] usb 3-1: Detected FT2233HP [ 88.177224][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.191615][ T1577] SELinux: failed to load policy [ 88.192035][ T1567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.196756][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.205551][ T1567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.214871][ T1577] SELinux: failed to load policy [ 88.223488][ T1567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.227849][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.236279][ T1567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.245491][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.253746][ T1567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.262898][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.271402][ T1567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.280729][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.288030][ T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 88.297636][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.315438][ T331] usb 1-1: USB disconnect, device number 39 [ 88.321643][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.331585][ T331] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 88.331630][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.343899][ T331] ftdi_sio 1-1:127.106: device disconnected [ 88.350835][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.366532][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.376522][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.386344][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.396091][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.405933][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.415657][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.425433][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.435006][ T9] usb 2-1: device descriptor read/64, error -71 [ 88.439183][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.451613][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.461458][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.471231][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.481007][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.490834][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.500619][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.510381][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.520552][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.530487][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.541543][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.551292][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.561080][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.570862][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.580654][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.590399][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.600185][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.609934][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.619715][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.629449][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.639251][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.649042][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.658781][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.668556][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.678407][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.688168][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.688964][ T9] usb 2-1: device descriptor read/64, error -71 [ 88.697972][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.713739][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.723545][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.733281][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.743072][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.752829][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.762622][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.772372][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.782175][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.791917][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.801742][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.811506][ T1577] SELinux: policydb magic number 0x9 does not match expected magic number 0xf97cff8c [ 88.819032][ T9] usb usb2-port1: attempt power cycle [ 88.869270][ T1582] syzkaller1: entered promiscuous mode [ 88.875480][ T1582] syzkaller1: entered allmulticast mode [ 88.881645][ T398] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 88.888845][ T398] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 88.897521][ T398] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 88.909198][ T398] usb 3-1: USB disconnect, device number 36 [ 88.916490][ T398] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 88.927340][ T398] ftdi_sio 3-1:0.0: device disconnected [ 89.108930][ T354] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 89.168929][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 89.190026][ T9] usb 2-1: device descriptor read/8, error -71 [ 89.218929][ T398] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 89.269912][ T354] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 89.279026][ T354] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.287584][ T354] usb 4-1: config 0 descriptor?? [ 89.320302][ T9] usb 2-1: device descriptor read/8, error -71 [ 89.380006][ T398] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.391011][ T398] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.400825][ T398] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 89.413782][ T398] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.422882][ T398] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.431712][ T398] usb 3-1: config 0 descriptor?? [ 89.558957][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 89.579944][ T9] usb 2-1: device descriptor read/8, error -71 [ 89.698071][ T354] usb 4-1: Cannot read MAC address [ 89.703277][ T354] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 89.709963][ T9] usb 2-1: device descriptor read/8, error -71 [ 89.717884][ T354] usb 4-1: USB disconnect, device number 31 [ 89.826130][ T1594] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 89.829074][ T9] usb usb2-port1: unable to enumerate USB device [ 89.836200][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 89.836212][ T36] audit: type=1400 audit(1770757340.349:344): avc: denied { relabelto } for pid=1593 comm="syz.0.365" name="cgroup" dev="tmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 89.845984][ T398] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 89.850424][ T36] audit: type=1400 audit(1770757340.349:345): avc: denied { associate } for pid=1593 comm="syz.0.365" name="cgroup" dev="tmpfs" ino=462 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_log_t:s0" [ 89.882401][ T398] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 89.913456][ T36] audit: type=1400 audit(1770757340.399:346): avc: denied { unlink } for pid=293 comm="syz-executor" name="cgroup" dev="tmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 90.208928][ T398] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 90.358928][ T398] usb 1-1: Using ep0 maxpacket: 8 [ 90.364959][ T398] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 90.374171][ T398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.382742][ T398] usb 1-1: config 0 descriptor?? [ 90.493259][ C1] plantronics 0003:047F:FFFF.000B: hid_field_extract() called with n (132) > 32! (syz.3.362) [ 90.505143][ T1612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.513673][ T1612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.693728][ T796] usb 3-1: USB disconnect, device number 37 [ 90.878926][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 90.888928][ T65] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 91.001200][ T398] usbhid 1-1:0.0: can't add hid device: -71 [ 91.007140][ T398] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 91.015927][ T398] usb 1-1: USB disconnect, device number 40 [ 91.028973][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 91.035744][ T9] usb 2-1: config 16 has an invalid interface number: 60 but max is 0 [ 91.043983][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 91.049145][ T9] usb 2-1: config 16 has no interface number 0 [ 91.055293][ T9] usb 2-1: config 16 interface 60 has no altsetting 0 [ 91.063086][ T65] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.073327][ T65] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.082587][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0475, bcdDevice=77.d1 [ 91.091710][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.099936][ T9] usb 2-1: Product: syz [ 91.104121][ T9] usb 2-1: Manufacturer: syz [ 91.108784][ T9] usb 2-1: SerialNumber: syz [ 91.114067][ T65] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 91.124211][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.132341][ T65] usb 4-1: Product: syz [ 91.136510][ T65] usb 4-1: Manufacturer: syz [ 91.141216][ T65] usb 4-1: SerialNumber: syz [ 91.349173][ T65] usb 4-1: 0:2 : does not exist [ 91.356351][ T65] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 91.367149][ T65] usb 4-1: USB disconnect, device number 32 [ 91.378701][ T9] usb 2-1: USB disconnect, device number 46 [ 91.944767][ T36] audit: type=1400 audit(1770757342.459:347): avc: denied { ioctl } for pid=1642 comm="syz.1.382" path="socket:[15526]" dev="sockfs" ino=15526 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 92.066721][ T36] audit: type=1400 audit(1770757342.579:348): avc: denied { checkpoint_restore } for pid=1647 comm="syz.1.383" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 92.748967][ T796] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 92.794450][ T36] audit: type=1400 audit(1770757343.309:349): avc: denied { mounton } for pid=1670 comm="syz.3.391" path="/syzcgroup/unified/syz3" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 92.794471][ T1671] cgroup: release_agent respecified [ 92.901035][ T1682] overlayfs: failed to resolve './file1': -2 [ 92.918925][ T796] usb 1-1: Using ep0 maxpacket: 32 [ 92.925104][ T796] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 92.938916][ T796] usb 1-1: config 0 has no interface number 0 [ 92.945257][ T796] usb 1-1: config 0 interface 184 has no altsetting 0 [ 92.960414][ T796] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 92.969574][ T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.977590][ T796] usb 1-1: Product: syz [ 92.981836][ T796] usb 1-1: Manufacturer: syz [ 92.986432][ T796] usb 1-1: SerialNumber: syz [ 92.992169][ T796] usb 1-1: config 0 descriptor?? [ 92.998173][ T796] smsc75xx v1.0.0 [ 93.002314][ T796] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 93.012634][ T796] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 93.438935][ T796] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 93.588977][ T796] usb 4-1: Using ep0 maxpacket: 16 [ 93.595644][ T796] usb 4-1: config 1 has too many interfaces: 33, using maximum allowed: 32 [ 93.604352][ T796] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 33 [ 93.613337][ T796] usb 4-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.624303][ T796] usb 4-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 93.634069][ T796] usb 4-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 93.647289][ T796] usb 4-1: config 1 interface 0 has no altsetting 0 [ 93.654643][ T796] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.663990][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 93.671998][ T796] usb 4-1: SerialNumber: syz [ 93.677393][ T1692] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 93.885641][ T1692] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 94.108932][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 94.258931][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 94.265212][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.275498][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.286166][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 94.295248][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.303295][ T9] usb 2-1: Product: syz [ 94.307448][ T9] usb 2-1: Manufacturer: syz [ 94.312075][ T9] usb 2-1: SerialNumber: syz [ 94.519884][ T9] usb 2-1: 0:2 : does not exist [ 94.527193][ T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 94.539786][ T9] usb 2-1: USB disconnect, device number 47 [ 94.551429][ T1376] udevd[1376]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 94.608933][ T331] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 94.759937][ T331] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 94.768067][ T331] usb 3-1: config 0 has no interface number 0 [ 94.774221][ T331] usb 3-1: config 0 interface 41 has no altsetting 0 [ 94.782275][ T331] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 94.791402][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.799416][ T331] usb 3-1: Product: syz [ 94.803579][ T331] usb 3-1: Manufacturer: syz [ 94.808166][ T331] usb 3-1: SerialNumber: syz [ 94.813406][ T331] usb 3-1: config 0 descriptor?? [ 95.037269][ T36] audit: type=1400 audit(1770757345.549:350): avc: denied { ioctl } for pid=1707 comm="syz.1.404" path="socket:[14712]" dev="sockfs" ino=14712 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.321895][ T1718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.408'. [ 95.386076][ T9] usb 1-1: USB disconnect, device number 41 [ 95.431368][ T1726] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 95.928924][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 96.078924][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 96.084463][ T9] usb 1-1: no configurations [ 96.089225][ T9] usb 1-1: can't read configurations, error -22 [ 96.214839][ T796] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 96.228356][ T796] usb 4-1: USB disconnect, device number 33 [ 96.230377][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 96.278922][ T45] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 96.388955][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 96.394506][ T9] usb 1-1: no configurations [ 96.399181][ T9] usb 1-1: can't read configurations, error -22 [ 96.405527][ T9] usb usb1-port1: attempt power cycle [ 96.438907][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 96.445259][ T45] usb 2-1: config index 0 descriptor too short (expected 40600, got 36) [ 96.453803][ T45] usb 2-1: config 31 has too many interfaces: 91, using maximum allowed: 32 [ 96.462595][ T45] usb 2-1: config 31 has an invalid descriptor of length 244, skipping remainder of the config [ 96.472968][ T45] usb 2-1: config 31 has 0 interfaces, different from the descriptor's value: 91 [ 96.482101][ T45] usb 2-1: New USB device found, idVendor=0f7d, idProduct=2d5a, bcdDevice= 0.00 [ 96.491179][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.702791][ T45] usb 2-1: string descriptor 0 read error: -71 [ 96.710483][ T45] usb 2-1: USB disconnect, device number 48 [ 96.748945][ T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 96.769272][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 96.774821][ T9] usb 1-1: no configurations [ 96.779580][ T9] usb 1-1: can't read configurations, error -22 [ 96.908946][ T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 96.929262][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 96.934807][ T9] usb 1-1: no configurations [ 96.939613][ T9] usb 1-1: can't read configurations, error -22 [ 96.945967][ T9] usb usb1-port1: unable to enumerate USB device [ 97.101181][ T1749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.418'. [ 97.140818][ T1755] FAULT_INJECTION: forcing a failure. [ 97.140818][ T1755] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 97.154168][ T1755] CPU: 0 UID: 0 PID: 1755 Comm: syz.3.421 Not tainted syzkaller #0 4ae5b12b683c07c90cf68c53485f2a5719abf10e [ 97.154197][ T1755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 97.154210][ T1755] Call Trace: [ 97.154216][ T1755] [ 97.154223][ T1755] __dump_stack+0x21/0x30 [ 97.154250][ T1755] dump_stack_lvl+0x140/0x1c0 [ 97.154268][ T1755] ? __cfi_dump_stack_lvl+0x10/0x10 [ 97.154288][ T1755] dump_stack+0x19/0x20 [ 97.154305][ T1755] should_fail_ex+0x3d7/0x530 [ 97.154322][ T1755] should_fail_alloc_page+0xec/0x110 [ 97.154344][ T1755] __alloc_pages_noprof+0x1c0/0x7e0 [ 97.154360][ T1755] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 97.154378][ T1755] ? avc_has_perm+0x155/0x240 [ 97.154400][ T1755] __folio_alloc_noprof+0x14/0x80 [ 97.154415][ T1755] shmem_alloc_and_add_folio+0x46b/0x10b0 [ 97.154438][ T1755] ? put_swap_device+0x130/0x130 [ 97.154459][ T1755] ? shmem_huge_global_enabled+0x2da/0x360 [ 97.154479][ T1755] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 97.154499][ T1755] ? is_bpf_text_address+0x17b/0x1a0 [ 97.154520][ T1755] shmem_get_folio_gfp+0x607/0x1390 [ 97.154540][ T1755] ? __kernel_text_address+0x11/0x40 [ 97.154560][ T1755] ? shmem_get_folio+0xc0/0xc0 [ 97.154578][ T1755] ? _parse_integer+0x2e/0x40 [ 97.154593][ T1755] ? inode_to_bdi+0x6d/0x100 [ 97.154608][ T1755] shmem_write_begin+0xf4/0x270 [ 97.154629][ T1755] generic_perform_write+0x328/0x970 [ 97.154649][ T1755] ? __cfi_generic_perform_write+0x10/0x10 [ 97.154665][ T1755] ? down_write+0xee/0x2b0 [ 97.154683][ T1755] ? file_update_time+0xa3/0x210 [ 97.154698][ T1755] shmem_file_write_iter+0x105/0x130 [ 97.154714][ T1755] vfs_write+0x761/0xf90 [ 97.154732][ T1755] ? __cfi_vfs_write+0x10/0x10 [ 97.154750][ T1755] ? __cfi_mutex_lock+0x10/0x10 [ 97.154768][ T1755] ksys_write+0x145/0x260 [ 97.154786][ T1755] ? __cfi_ksys_write+0x10/0x10 [ 97.154804][ T1755] ? __kasan_check_read+0x15/0x20 [ 97.154821][ T1755] __x64_sys_write+0x7f/0x90 [ 97.154839][ T1755] x64_sys_call+0x271c/0x2ee0 [ 97.154864][ T1755] do_syscall_64+0x57/0xf0 [ 97.154884][ T1755] ? clear_bhb_loop+0x50/0xa0 [ 97.154905][ T1755] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.154926][ T1755] RIP: 0033:0x7fb57f79bf79 [ 97.154945][ T1755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.154958][ T1755] RSP: 002b:00007fb580664028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 97.154983][ T1755] RAX: ffffffffffffffda RBX: 00007fb57fa15fa0 RCX: 00007fb57f79bf79 [ 97.154995][ T1755] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000003 [ 97.155005][ T1755] RBP: 00007fb580664090 R08: 0000000000000000 R09: 0000000000000000 [ 97.155016][ T1755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.155026][ T1755] R13: 00007fb57fa16038 R14: 00007fb57fa15fa0 R15: 00007ffc338ead28 [ 97.155042][ T1755] [ 97.448987][ T331] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 97.493300][ T331] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 97.511769][ T331] usb 3-1: USB disconnect, device number 38 [ 97.698939][ T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 97.718918][ T398] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 97.849943][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.860917][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 97.870007][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.878833][ T9] usb 2-1: config 0 descriptor?? [ 97.884053][ T398] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.893876][ T398] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 97.903565][ T398] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.912223][ T398] usb 4-1: config 0 descriptor?? [ 98.095825][ T9] kone 0003:1E7D:2CED.000C: item fetching failed at offset 2/5 [ 98.100573][ T1769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.103679][ T9] kone 0003:1E7D:2CED.000C: parse failed [ 98.112061][ T1769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.117749][ T9] kone 0003:1E7D:2CED.000C: probe with driver kone failed with error -22 [ 98.127826][ T1769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.422'. [ 98.149130][ T331] usb 2-1: USB disconnect, device number 49 [ 98.165830][ T1772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.427'. [ 98.343670][ T36] audit: type=1400 audit(1770757348.859:351): avc: denied { watch watch_reads } for pid=1761 comm="syz.3.425" path="/117" dev="tmpfs" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 98.381284][ T398] hid (null): invalid report_count -158524431 [ 98.391486][ T1778] veth1: entered allmulticast mode [ 98.397258][ T398] nintendo 0003:057E:200E.000D: invalid report_count -158524431 [ 98.404975][ T398] nintendo 0003:057E:200E.000D: item 0 4 1 9 parsing failed [ 98.412432][ T398] nintendo 0003:057E:200E.000D: HID parse failed [ 98.418827][ T398] nintendo 0003:057E:200E.000D: probe - fail = -22 [ 98.425399][ T398] nintendo 0003:057E:200E.000D: probe with driver nintendo failed with error -22 [ 98.499132][ T331] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 98.590783][ T398] usb 4-1: USB disconnect, device number 34 [ 98.628937][ T796] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 98.648910][ T331] usb 2-1: Using ep0 maxpacket: 32 [ 98.655129][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.666167][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.676024][ T331] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 98.685084][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.693592][ T331] usb 2-1: config 0 descriptor?? [ 98.699461][ T331] hub 2-1:0.0: USB hub found [ 98.712834][ T36] audit: type=1400 audit(1770757349.229:352): avc: denied { mount } for pid=1780 comm="syz.0.430" name="/" dev="configfs" ino=2435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 98.735385][ T36] audit: type=1400 audit(1770757349.249:353): avc: denied { search } for pid=1780 comm="syz.0.430" name="/" dev="configfs" ino=2435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.757674][ T36] audit: type=1400 audit(1770757349.249:354): avc: denied { setattr } for pid=1780 comm="syz.0.430" name="/" dev="configfs" ino=2435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.775376][ T1785] FAULT_INJECTION: forcing a failure. [ 98.775376][ T1785] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 98.792869][ T1785] CPU: 0 UID: 0 PID: 1785 Comm: syz.0.432 Not tainted syzkaller #0 4ae5b12b683c07c90cf68c53485f2a5719abf10e [ 98.792901][ T1785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 98.792913][ T1785] Call Trace: [ 98.792921][ T1785] [ 98.792929][ T1785] __dump_stack+0x21/0x30 [ 98.792948][ T1785] dump_stack_lvl+0x140/0x1c0 [ 98.792965][ T1785] ? __cfi_dump_stack_lvl+0x10/0x10 [ 98.792988][ T1785] dump_stack+0x19/0x20 [ 98.793007][ T1785] should_fail_ex+0x3d7/0x530 [ 98.793026][ T1785] should_fail+0xf/0x20 [ 98.793040][ T1785] should_fail_usercopy+0x1e/0x30 [ 98.793050][ T1785] copy_page_from_iter_atomic+0x34b/0x17a0 [ 98.793065][ T1785] ? __cfi_copy_page_from_iter_atomic+0x10/0x10 [ 98.793078][ T1785] ? _parse_integer+0x2e/0x40 [ 98.793086][ T1785] ? inode_to_bdi+0x6d/0x100 [ 98.793098][ T1785] ? __kasan_check_read+0x15/0x20 [ 98.793117][ T1785] generic_perform_write+0x582/0x970 [ 98.793138][ T1785] ? __cfi_generic_perform_write+0x10/0x10 [ 98.793156][ T1785] ? down_write+0xee/0x2b0 [ 98.793176][ T1785] ? file_update_time+0xa3/0x210 [ 98.793188][ T1785] shmem_file_write_iter+0x105/0x130 [ 98.793199][ T1785] vfs_write+0x761/0xf90 [ 98.793212][ T1785] ? __cfi_vfs_write+0x10/0x10 [ 98.793223][ T1785] ? __cfi_mutex_lock+0x10/0x10 [ 98.793234][ T1785] ksys_write+0x145/0x260 [ 98.793248][ T1785] ? __cfi_ksys_write+0x10/0x10 [ 98.793268][ T1785] ? __kasan_check_read+0x15/0x20 [ 98.793289][ T1785] __x64_sys_write+0x7f/0x90 [ 98.793308][ T1785] x64_sys_call+0x271c/0x2ee0 [ 98.793327][ T1785] do_syscall_64+0x57/0xf0 [ 98.793341][ T1785] ? clear_bhb_loop+0x50/0xa0 [ 98.793355][ T1785] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 98.793368][ T1785] RIP: 0033:0x7f88ed39bf79 [ 98.793379][ T1785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.793389][ T1785] RSP: 002b:00007f88ebde3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 98.793409][ T1785] RAX: ffffffffffffffda RBX: 00007f88ed615fa0 RCX: 00007f88ed39bf79 [ 98.793423][ T1785] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000003 [ 98.793436][ T1785] RBP: 00007f88ebde3090 R08: 0000000000000000 R09: 0000000000000000 [ 98.793448][ T1785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.793460][ T1785] R13: 00007f88ed616038 R14: 00007f88ed615fa0 R15: 00007ffe3febcfc8 [ 98.793471][ T1785] [ 98.798928][ T796] usb 3-1: Using ep0 maxpacket: 32 [ 99.044042][ T331] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 99.053254][ T796] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 99.061585][ T796] usb 3-1: config 0 has no interface number 0 [ 99.067725][ T331] usbhid 2-1:0.0: can't add hid device: -71 [ 99.073672][ T331] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 99.081479][ T796] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 99.093554][ T796] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 99.102655][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.111283][ T796] usb 3-1: Product: syz [ 99.116664][ T796] usb 3-1: Manufacturer: syz [ 99.122064][ T796] usb 3-1: SerialNumber: syz [ 99.127755][ T796] usb 3-1: config 0 descriptor?? [ 99.133169][ T1778] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 99.207135][ T36] audit: type=1400 audit(1770757349.719:355): avc: denied { mounton } for pid=1795 comm="syz.3.437" path="/119/file0/file0" dev="fuse" ino=18446744073709551615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 99.259045][ T331] usb 2-1: reset high-speed USB device number 50 using dummy_hcd [ 99.268541][ T331] usb 2-1: device reset changed ep0 maxpacket size! [ 99.275380][ T331] usb 2-1: USB disconnect, device number 50 [ 99.383048][ T1778] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 99.393465][ T796] asix 3-1:0.188: probe with driver asix failed with error -71 [ 99.401507][ T1777] veth1: left allmulticast mode [ 99.410279][ T796] usb 3-1: USB disconnect, device number 39 [ 99.480266][ T1804] FAULT_INJECTION: forcing a failure. [ 99.480266][ T1804] name failslab, interval 1, probability 0, space 0, times 1 [ 99.493028][ T1804] CPU: 0 UID: 0 PID: 1804 Comm: syz.0.439 Not tainted syzkaller #0 4ae5b12b683c07c90cf68c53485f2a5719abf10e [ 99.493058][ T1804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 99.493071][ T1804] Call Trace: [ 99.493077][ T1804] [ 99.493085][ T1804] __dump_stack+0x21/0x30 [ 99.493112][ T1804] dump_stack_lvl+0x140/0x1c0 [ 99.493132][ T1804] ? __cfi_dump_stack_lvl+0x10/0x10 [ 99.493153][ T1804] ? __cfi_avc_has_perm+0x10/0x10 [ 99.493174][ T1804] ? kasan_save_alloc_info+0x40/0x50 [ 99.493195][ T1804] dump_stack+0x19/0x20 [ 99.493214][ T1804] should_fail_ex+0x3d7/0x530 [ 99.493232][ T1804] should_failslab+0xac/0x100 [ 99.493255][ T1804] __kmalloc_cache_noprof+0x41/0x470 [ 99.493276][ T1804] ? vhost_task_create+0x12c/0x400 [ 99.493307][ T1804] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 99.493333][ T1804] vhost_task_create+0x12c/0x400 [ 99.493356][ T1804] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 99.493383][ T1804] ? __cfi_vhost_task_create+0x10/0x10 [ 99.493407][ T1804] ? __cfi_vhost_task_fn+0x10/0x10 [ 99.493430][ T1804] ? __kasan_check_write+0x18/0x20 [ 99.493449][ T1804] ? mutex_lock+0x97/0x1d0 [ 99.493468][ T1804] ? __cfi_mutex_lock+0x10/0x10 [ 99.493484][ T1804] ? kernel_text_address+0xa9/0xe0 [ 99.493504][ T1804] kvm_mmu_post_init_vm+0x161/0x300 [ 99.493527][ T1804] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 99.493549][ T1804] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 99.493569][ T1804] ? kstrtoull+0x13b/0x1e0 [ 99.493586][ T1804] ? kstrtouint+0x78/0xf0 [ 99.493602][ T1804] ? ioctl_has_perm+0x1bc/0x500 [ 99.493621][ T1804] ? __asan_memcpy+0x5a/0x80 [ 99.493640][ T1804] ? ioctl_has_perm+0x408/0x500 [ 99.493658][ T1804] ? has_cap_mac_admin+0xd0/0xd0 [ 99.493676][ T1804] ? __kasan_check_write+0x18/0x20 [ 99.493695][ T1804] ? mutex_lock_killable+0x97/0x1d0 [ 99.493714][ T1804] ? __cfi_mutex_lock_killable+0x10/0x10 [ 99.493739][ T1804] ? proc_fail_nth_write+0x184/0x220 [ 99.493758][ T1804] kvm_vcpu_ioctl+0xa48/0x1000 [ 99.493782][ T1804] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 99.493805][ T1804] ? __cfi_vfs_write+0x10/0x10 [ 99.493825][ T1804] ? __kasan_check_write+0x18/0x20 [ 99.493844][ T1804] ? mutex_unlock+0x90/0x240 [ 99.493862][ T1804] ? __cfi_mutex_unlock+0x10/0x10 [ 99.493879][ T1804] ? __fget_files+0x2c5/0x340 [ 99.493903][ T1804] ? __fget_files+0x2c5/0x340 [ 99.493925][ T1804] ? bpf_lsm_file_ioctl+0xd/0x20 [ 99.493941][ T1804] ? security_file_ioctl+0x3e/0x110 [ 99.493959][ T1804] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 99.493981][ T1804] __se_sys_ioctl+0x132/0x1b0 [ 99.494005][ T1804] __x64_sys_ioctl+0x7f/0xa0 [ 99.494027][ T1804] x64_sys_call+0x1878/0x2ee0 [ 99.494056][ T1804] do_syscall_64+0x57/0xf0 [ 99.494079][ T1804] ? clear_bhb_loop+0x50/0xa0 [ 99.494102][ T1804] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 99.494124][ T1804] RIP: 0033:0x7f88ed39bf79 [ 99.494140][ T1804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.494155][ T1804] RSP: 002b:00007f88ebde3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.494176][ T1804] RAX: ffffffffffffffda RBX: 00007f88ed615fa0 RCX: 00007f88ed39bf79 [ 99.494191][ T1804] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 99.494202][ T1804] RBP: 00007f88ebde3090 R08: 0000000000000000 R09: 0000000000000000 [ 99.494214][ T1804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.494225][ T1804] R13: 00007f88ed616038 R14: 00007f88ed615fa0 R15: 00007ffe3febcfc8 [ 99.494241][ T1804] [ 99.568913][ T331] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 100.020340][ T331] usb 2-1: Using ep0 maxpacket: 16 [ 100.028264][ T331] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 100.044259][ T331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.044659][ T1816] FAULT_INJECTION: forcing a failure. [ 100.044659][ T1816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.052334][ T331] usb 2-1: Product: syz [ 100.065708][ T1816] CPU: 0 UID: 0 PID: 1816 Comm: syz.3.444 Not tainted syzkaller #0 4ae5b12b683c07c90cf68c53485f2a5719abf10e [ 100.065735][ T1816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 100.065746][ T1816] Call Trace: [ 100.065752][ T1816] [ 100.065759][ T1816] __dump_stack+0x21/0x30 [ 100.065784][ T1816] dump_stack_lvl+0x140/0x1c0 [ 100.065804][ T1816] ? __cfi_dump_stack_lvl+0x10/0x10 [ 100.065824][ T1816] ? check_stack_object+0x12b/0x150 [ 100.065846][ T1816] dump_stack+0x19/0x20 [ 100.065864][ T1816] should_fail_ex+0x3d7/0x530 [ 100.065883][ T1816] should_fail+0xf/0x20 [ 100.065898][ T1816] should_fail_usercopy+0x1e/0x30 [ 100.065917][ T1816] _copy_to_user+0x24/0xa0 [ 100.065936][ T1816] simple_read_from_buffer+0xed/0x160 [ 100.065961][ T1816] proc_fail_nth_read+0x1aa/0x220 [ 100.065979][ T1816] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 100.065995][ T1816] ? up_write+0x66/0x280 [ 100.066015][ T1816] ? bpf_lsm_file_permission+0xd/0x20 [ 100.066031][ T1816] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 100.066048][ T1816] vfs_read+0x289/0xcb0 [ 100.066067][ T1816] ? __cfi_vfs_read+0x10/0x10 [ 100.066085][ T1816] ? __kasan_check_write+0x18/0x20 [ 100.066104][ T1816] ? mutex_lock+0x97/0x1d0 [ 100.066121][ T1816] ? __cfi_mutex_lock+0x10/0x10 [ 100.066138][ T1816] ? __fget_files+0x2c5/0x340 [ 100.066160][ T1816] ksys_read+0x145/0x260 [ 100.066180][ T1816] ? __cfi_ksys_read+0x10/0x10 [ 100.066199][ T1816] ? __kasan_check_read+0x15/0x20 [ 100.066218][ T1816] __x64_sys_read+0x7f/0x90 [ 100.066237][ T1816] x64_sys_call+0x2638/0x2ee0 [ 100.066257][ T1816] do_syscall_64+0x57/0xf0 [ 100.066279][ T1816] ? clear_bhb_loop+0x50/0xa0 [ 100.066302][ T1816] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 100.066324][ T1816] RIP: 0033:0x7fb57f75c84e [ 100.066339][ T1816] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 100.066353][ T1816] RSP: 002b:00007fb580663fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 100.066373][ T1816] RAX: ffffffffffffffda RBX: 00007fb5806646c0 RCX: 00007fb57f75c84e [ 100.066386][ T1816] RDX: 000000000000000f RSI: 00007fb5806640a0 RDI: 0000000000000005 [ 100.066398][ T1816] RBP: 00007fb580664090 R08: 0000000000000000 R09: 0000000000000000 [ 100.066409][ T1816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.066420][ T1816] R13: 00007fb57fa16038 R14: 00007fb57fa15fa0 R15: 00007ffc338ead28 [ 100.066434][ T1816] [ 100.148935][ T9] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 100.149539][ T331] usb 2-1: Manufacturer: syz [ 100.288912][ T9] usb 1-1: device descriptor read/64, error -71 [ 100.292891][ T331] usb 2-1: SerialNumber: syz [ 100.337610][ T331] r8152-cfgselector 2-1: Unknown version 0x0000 [ 100.343924][ T331] r8152-cfgselector 2-1: config 0 descriptor?? [ 100.367544][ T1831] netlink: 'syz.2.449': attribute type 4 has an invalid length. [ 100.501922][ T1835] FAULT_INJECTION: forcing a failure. [ 100.501922][ T1835] name failslab, interval 1, probability 0, space 0, times 0 [ 100.514799][ T1835] CPU: 0 UID: 0 PID: 1835 Comm: syz.2.450 Not tainted syzkaller #0 4ae5b12b683c07c90cf68c53485f2a5719abf10e [ 100.514831][ T1835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 100.514842][ T1835] Call Trace: [ 100.514847][ T1835] [ 100.514853][ T1835] __dump_stack+0x21/0x30 [ 100.514879][ T1835] dump_stack_lvl+0x140/0x1c0 [ 100.514897][ T1835] ? __cfi_dump_stack_lvl+0x10/0x10 [ 100.514916][ T1835] dump_stack+0x19/0x20 [ 100.514933][ T1835] should_fail_ex+0x3d7/0x530 [ 100.514951][ T1835] should_failslab+0xac/0x100 [ 100.514973][ T1835] kmem_cache_alloc_node_noprof+0x45/0x420 [ 100.514993][ T1835] ? dup_task_struct+0xc1/0xd50 [ 100.515010][ T1835] ? kasan_save_alloc_info+0x40/0x50 [ 100.515026][ T1835] ? __kasan_kmalloc+0x96/0xb0 [ 100.515046][ T1835] ? __kmalloc_cache_noprof+0x23c/0x470 [ 100.515065][ T1835] dup_task_struct+0xc1/0xd50 [ 100.515081][ T1835] ? __kasan_check_write+0x18/0x20 [ 100.515100][ T1835] ? _raw_spin_lock_irq+0x93/0x120 [ 100.515120][ T1835] ? copy_process+0x3220/0x3220 [ 100.515136][ T1835] ? __kasan_check_write+0x18/0x20 [ 100.515154][ T1835] copy_process+0x55a/0x3220 [ 100.515173][ T1835] ? __cfi_copy_process+0x10/0x10 [ 100.515189][ T1835] ? __kmalloc_cache_noprof+0x23c/0x470 [ 100.515207][ T1835] ? __kasan_check_write+0x18/0x20 [ 100.515225][ T1835] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 100.515249][ T1835] vhost_task_create+0x1f7/0x400 [ 100.515269][ T1835] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 100.515293][ T1835] ? __cfi_vhost_task_create+0x10/0x10 [ 100.515314][ T1835] ? __cfi_vhost_task_fn+0x10/0x10 [ 100.515335][ T1835] ? __kasan_check_write+0x18/0x20 [ 100.515352][ T1835] ? mutex_lock+0x97/0x1d0 [ 100.515369][ T1835] ? __cfi_mutex_lock+0x10/0x10 [ 100.515384][ T1835] ? kernel_text_address+0xa9/0xe0 [ 100.515402][ T1835] kvm_mmu_post_init_vm+0x161/0x300 [ 100.515422][ T1835] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 100.515441][ T1835] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 100.515459][ T1835] ? kstrtoull+0x13b/0x1e0 [ 100.515474][ T1835] ? kstrtouint+0x78/0xf0 [ 100.515489][ T1835] ? ioctl_has_perm+0x1bc/0x500 [ 100.515505][ T1835] ? __asan_memcpy+0x5a/0x80 [ 100.515522][ T1835] ? ioctl_has_perm+0x408/0x500 [ 100.515538][ T1835] ? has_cap_mac_admin+0xd0/0xd0 [ 100.515553][ T1835] ? __kasan_check_write+0x18/0x20 [ 100.515570][ T1835] ? mutex_lock_killable+0x97/0x1d0 [ 100.515587][ T1835] ? __cfi_mutex_lock_killable+0x10/0x10 [ 100.515603][ T1835] ? proc_fail_nth_write+0x184/0x220 [ 100.515621][ T1835] kvm_vcpu_ioctl+0xa48/0x1000 [ 100.515642][ T1835] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 100.515668][ T1835] ? __cfi_vfs_write+0x10/0x10 [ 100.515686][ T1835] ? __kasan_check_write+0x18/0x20 [ 100.515703][ T1835] ? mutex_unlock+0x90/0x240 [ 100.515719][ T1835] ? __cfi_mutex_unlock+0x10/0x10 [ 100.515733][ T1835] ? __fget_files+0x2c5/0x340 [ 100.515756][ T1835] ? __fget_files+0x2c5/0x340 [ 100.515775][ T1835] ? bpf_lsm_file_ioctl+0xd/0x20 [ 100.515790][ T1835] ? security_file_ioctl+0x3e/0x110 [ 100.515805][ T1835] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 100.515825][ T1835] __se_sys_ioctl+0x132/0x1b0 [ 100.515845][ T1835] __x64_sys_ioctl+0x7f/0xa0 [ 100.515865][ T1835] x64_sys_call+0x1878/0x2ee0 [ 100.515885][ T1835] do_syscall_64+0x57/0xf0 [ 100.515905][ T1835] ? clear_bhb_loop+0x50/0xa0 [ 100.515927][ T1835] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 100.515946][ T1835] RIP: 0033:0x7fb39e59bf79 [ 100.515960][ T1835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.515973][ T1835] RSP: 002b:00007fb39f4fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.515992][ T1835] RAX: ffffffffffffffda RBX: 00007fb39e815fa0 RCX: 00007fb39e59bf79 [ 100.516004][ T1835] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 100.516015][ T1835] RBP: 00007fb39f4fb090 R08: 0000000000000000 R09: 0000000000000000 [ 100.516026][ T1835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.516037][ T1835] R13: 00007fb39e816038 R14: 00007fb39e815fa0 R15: 00007ffe28668488 [ 100.516050][ T1835] [ 100.751418][ T331] r8152-cfgselector 2-1: USB disconnect, device number 51 [ 100.753828][ T9] usb 1-1: device descriptor read/64, error -71 [ 101.003507][ T1841] kvm: kvm [1840]: vcpu0, guest rIP: 0x5408d Unhandled WRMSR(0x40000057) = 0x5 [ 101.169126][ T9] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 101.298921][ T65] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 101.306668][ T9] usb 1-1: device descriptor read/64, error -71 [ 101.458926][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 101.465103][ T65] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 101.473446][ T65] usb 3-1: config 0 has no interface number 0 [ 101.479568][ T65] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 101.491389][ T65] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 101.500674][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.512238][ T65] usb 3-1: Product: syz [ 101.516411][ T65] usb 3-1: Manufacturer: syz [ 101.526198][ T65] usb 3-1: SerialNumber: syz [ 101.535529][ T65] usb 3-1: config 0 descriptor?? [ 101.540959][ T1848] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 101.551075][ T9] usb 1-1: device descriptor read/64, error -71 [ 101.594126][ T1864] FAULT_INJECTION: forcing a failure. [ 101.594126][ T1864] name failslab, interval 1, probability 0, space 0, times 0 [ 101.606767][ T1864] CPU: 1 UID: 0 PID: 1864 Comm: syz.3.460 Not tainted syzkaller #0 4ae5b12b683c07c90cf68c53485f2a5719abf10e [ 101.606796][ T1864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 101.606808][ T1864] Call Trace: [ 101.606815][ T1864] [ 101.606822][ T1864] __dump_stack+0x21/0x30 [ 101.606847][ T1864] dump_stack_lvl+0x140/0x1c0 [ 101.606868][ T1864] ? __cfi_dump_stack_lvl+0x10/0x10 [ 101.606890][ T1864] ? __kasan_check_write+0x18/0x20 [ 101.606909][ T1864] ? copy_mm+0x2d2/0x1cf0 [ 101.606920][ T1864] dump_stack+0x19/0x20 [ 101.606931][ T1864] should_fail_ex+0x3d7/0x530 [ 101.606942][ T1864] should_failslab+0xac/0x100 [ 101.606955][ T1864] kmem_cache_alloc_noprof+0x42/0x410 [ 101.606968][ T1864] ? alloc_pid+0xa5/0xba0 [ 101.606983][ T1864] ? __asan_memcpy+0x5a/0x80 [ 101.607003][ T1864] alloc_pid+0xa5/0xba0 [ 101.607020][ T1864] copy_process+0x1409/0x3220 [ 101.607041][ T1864] ? __cfi_copy_process+0x10/0x10 [ 101.607054][ T1864] ? __kmalloc_cache_noprof+0x23c/0x470 [ 101.607067][ T1864] ? __kasan_check_write+0x18/0x20 [ 101.607078][ T1864] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 101.607094][ T1864] vhost_task_create+0x1f7/0x400 [ 101.607108][ T1864] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 101.607133][ T1864] ? __cfi_vhost_task_create+0x10/0x10 [ 101.607159][ T1864] ? __cfi_vhost_task_fn+0x10/0x10 [ 101.607182][ T1864] ? __kasan_check_write+0x18/0x20 [ 101.607196][ T1864] ? mutex_lock+0x97/0x1d0 [ 101.607207][ T1864] ? __cfi_mutex_lock+0x10/0x10 [ 101.607216][ T1864] ? kernel_text_address+0xa9/0xe0 [ 101.607228][ T1864] kvm_mmu_post_init_vm+0x161/0x300 [ 101.607240][ T1864] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 101.607254][ T1864] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 101.607273][ T1864] ? kstrtoull+0x13b/0x1e0 [ 101.607290][ T1864] ? kstrtouint+0x78/0xf0 [ 101.607313][ T1864] ? ioctl_has_perm+0x1bc/0x500 [ 101.607331][ T1864] ? __asan_memcpy+0x5a/0x80 [ 101.607343][ T1864] ? ioctl_has_perm+0x408/0x500 [ 101.607353][ T1864] ? has_cap_mac_admin+0xd0/0xd0 [ 101.607362][ T1864] ? __kasan_check_write+0x18/0x20 [ 101.607373][ T1864] ? mutex_lock_killable+0x97/0x1d0 [ 101.607384][ T1864] ? __cfi_mutex_lock_killable+0x10/0x10 [ 101.607395][ T1864] ? proc_fail_nth_write+0x184/0x220 [ 101.607414][ T1864] kvm_vcpu_ioctl+0xa48/0x1000 [ 101.607438][ T1864] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 101.607461][ T1864] ? __cfi_vfs_write+0x10/0x10 [ 101.607478][ T1864] ? __kasan_check_write+0x18/0x20 [ 101.607489][ T1864] ? mutex_unlock+0x90/0x240 [ 101.607499][ T1864] ? __cfi_mutex_unlock+0x10/0x10 [ 101.607509][ T1864] ? __fget_files+0x2c5/0x340 [ 101.607523][ T1864] ? __fget_files+0x2c5/0x340 [ 101.607536][ T1864] ? bpf_lsm_file_ioctl+0xd/0x20 [ 101.607552][ T1864] ? security_file_ioctl+0x3e/0x110 [ 101.607570][ T1864] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 101.607593][ T1864] __se_sys_ioctl+0x132/0x1b0 [ 101.607616][ T1864] __x64_sys_ioctl+0x7f/0xa0 [ 101.607630][ T1864] x64_sys_call+0x1878/0x2ee0 [ 101.607643][ T1864] do_syscall_64+0x57/0xf0 [ 101.607656][ T1864] ? clear_bhb_loop+0x50/0xa0 [ 101.607671][ T1864] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 101.607685][ T1864] RIP: 0033:0x7fb57f79bf79 [ 101.607700][ T1864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.607715][ T1864] RSP: 002b:00007fb580664028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.607736][ T1864] RAX: ffffffffffffffda RBX: 00007fb57fa15fa0 RCX: 00007fb57f79bf79 [ 101.607750][ T1864] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 101.607761][ T1864] RBP: 00007fb580664090 R08: 0000000000000000 R09: 0000000000000000 [ 101.607768][ T1864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.607774][ T1864] R13: 00007fb57fa16038 R14: 00007fb57fa15fa0 R15: 00007ffc338ead28 [ 101.607783][ T1864] [ 101.669156][ T9] usb usb1-port1: attempt power cycle [ 101.771853][ T1848] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 102.248931][ T332] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 102.259059][ T9] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 102.279889][ T9] usb 1-1: device descriptor read/8, error -71 [ 102.348911][ T398] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 102.398903][ T332] usb 2-1: Using ep0 maxpacket: 16 [ 102.405030][ T332] usb 2-1: too many endpoints for config 0 interface 0 altsetting 3: 63, using maximum allowed: 30 [ 102.415974][ T332] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.427203][ T332] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 63 [ 102.440215][ T332] usb 2-1: config 0 interface 0 has no altsetting 0 [ 102.446847][ T332] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 102.456121][ T332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.464209][ T9] usb 1-1: device descriptor read/8, error -71 [ 102.470993][ T332] usb 2-1: config 0 descriptor?? [ 102.498930][ T398] usb 4-1: Using ep0 maxpacket: 16 [ 102.505149][ T398] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 102.514291][ T398] usb 4-1: config 1 has no interface number 1 [ 102.520414][ T398] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 102.531129][ T398] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 102.544033][ T398] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 102.556293][ T398] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 102.565384][ T398] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.573428][ T398] usb 4-1: Product: syz [ 102.577572][ T398] usb 4-1: Manufacturer: syz [ 102.582416][ T398] usb 4-1: SerialNumber: syz [ 102.678211][ T36] audit: type=1400 audit(1770757353.189:356): avc: denied { watch watch_reads } for pid=1865 comm="syz.1.461" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.709360][ T9] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 102.729986][ T9] usb 1-1: device descriptor read/8, error -71 [ 102.765654][ T332] usbhid 2-1:0.0: can't add hid device: -71 [ 102.771690][ T332] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 102.780699][ T332] usb 2-1: USB disconnect, device number 52 [ 102.859953][ T9] usb 1-1: device descriptor read/8, error -71 [ 102.968996][ T9] usb usb1-port1: unable to enumerate USB device [ 102.995873][ T398] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 103.008318][ T398] usb 4-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 103.019212][ T332] hid-generic 0004:076F:00A7.000E: hidraw0: HID v0.07 Device [syz1] on syz0 [ 103.034915][ T398] usb 4-1: USB disconnect, device number 35 [ 103.048486][ T1309] udevd[1309]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 103.268928][ T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 103.310196][ T36] audit: type=1400 audit(1770757353.829:357): avc: denied { map } for pid=1897 comm="syz.3.471" path="socket:[17193]" dev="sockfs" ino=17193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.428899][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 103.435099][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 103.445957][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 103.458290][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 103.467384][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.475414][ T9] usb 1-1: Product: syz [ 103.479617][ T9] usb 1-1: Manufacturer: syz [ 103.484244][ T9] usb 1-1: SerialNumber: syz [ 103.508935][ T796] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 103.638946][ T796] usb 2-1: device descriptor read/64, error -71 [ 103.692114][ T36] audit: type=1400 audit(1770757354.209:358): avc: denied { getattr } for pid=1879 comm="syz.0.466" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 103.692146][ T1880] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 103.725563][ T36] audit: type=1400 audit(1770757354.239:359): avc: denied { mounton } for pid=1879 comm="syz.0.466" path="/103/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.725651][ T1880] overlayfs: failed to resolve '/ $': -2 [ 103.754308][ T36] audit: type=1400 audit(1770757354.269:360): avc: denied { append } for pid=1879 comm="syz.0.466" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 103.778711][ T1903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.788335][ T1903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.801388][ T9] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 103.814937][ T9] usb 1-1: USB disconnect, device number 50 [ 103.832239][ T1376] udevd[1376]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 103.908928][ T796] usb 2-1: device descriptor read/64, error -71 [ 103.957908][ T1848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.966493][ T1848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.977456][ T65] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 103.987996][ T65] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 103.998457][ T65] asix 3-1:0.188: probe with driver asix failed with error -71 [ 104.010494][ T65] usb 3-1: USB disconnect, device number 40 [ 104.148931][ T796] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 104.278924][ T796] usb 2-1: device descriptor read/64, error -71 [ 104.388936][ T65] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 104.408198][ T1919] fuse: Bad value for 'fd' [ 104.519561][ T796] usb 2-1: device descriptor read/64, error -71 [ 104.559995][ T65] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.570165][ T65] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.579750][ T65] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 104.588827][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 104.596834][ T65] usb 3-1: SerialNumber: syz [ 104.603915][ T65] usb 3-1: 0:2 : does not exist [ 104.629020][ T796] usb usb2-port1: attempt power cycle [ 104.648914][ T331] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 104.799931][ T331] usb 1-1: too many endpoints for config 0 interface 0 altsetting 3: 62, using maximum allowed: 30 [ 104.810766][ T331] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 62 [ 104.823834][ T331] usb 1-1: config 0 interface 0 has no altsetting 0 [ 104.830476][ T331] usb 1-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 104.839607][ T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.848016][ T331] usb 1-1: config 0 descriptor?? [ 104.968938][ T796] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 104.989861][ T796] usb 2-1: device descriptor read/8, error -71 [ 105.116720][ T9] usb 3-1: USB disconnect, device number 41 [ 105.119980][ T796] usb 2-1: device descriptor read/8, error -71 [ 105.255900][ T331] hid-rmi 0003:17EF:6085.000F: hidraw0: USB HID v0.04 Device [HID 17ef:6085] on usb-dummy_hcd.0-1/input0 [ 105.368923][ T796] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 105.389918][ T796] usb 2-1: device descriptor read/8, error -71 [ 105.472385][ T331] usb 1-1: USB disconnect, device number 51 [ 105.529938][ T796] usb 2-1: device descriptor read/8, error -71 [ 105.633760][ T36] audit: type=1400 audit(1770757356.149:361): avc: denied { compute_member } for pid=1924 comm="syz.2.479" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 105.654592][ T796] usb usb2-port1: unable to enumerate USB device [ 105.668924][ T36] audit: type=1400 audit(1770757356.179:362): avc: denied { module_load } for pid=1924 comm="syz.2.479" path=2F6D656D66643A2D42D54E49C56A9A08202864656C6574656429 dev="tmpfs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 105.668941][ T1925] Invalid ELF header len 16 [ 106.161345][ T1936] SELinux: policydb string length 1836477231 does not match expected length 8 [ 106.170429][ T1936] sel_write_load: 53 callbacks suppressed [ 106.170443][ T1936] SELinux: failed to load policy [ 106.484478][ T1959] 9pnet_fd: Insufficient options for proto=fd [ 106.528940][ T796] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 106.679963][ T796] usb 3-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 106.690860][ T796] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 106.701979][ T796] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.713278][ T796] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 106.726299][ T796] usb 3-1: config 0 interface 0 has no altsetting 0 [ 106.732927][ T796] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 106.743876][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.752437][ T796] usb 3-1: config 0 descriptor?? [ 106.759019][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 106.784206][ T1974] netlink: 216 bytes leftover after parsing attributes in process `syz.3.496'. [ 106.795393][ T36] audit: type=1400 audit(1770757357.309:363): avc: denied { create } for pid=1973 comm="syz.3.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 106.818943][ T398] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 106.908927][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 106.915092][ T9] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 106.923465][ T9] usb 1-1: config 179 has no interface number 0 [ 106.929764][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 106.940835][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 106.952076][ T398] usb 2-1: device descriptor read/64, error -71 [ 106.958534][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 106.969728][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 106.981124][ T9] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 106.994352][ T9] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 107.003405][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.012669][ T1964] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 107.160311][ T796] ryos 0003:1E7D:3138.0010: unknown main item tag 0x0 [ 107.167173][ T796] ryos 0003:1E7D:3138.0010: unknown main item tag 0x0 [ 107.174150][ T796] ryos 0003:1E7D:3138.0010: unknown main item tag 0x0 [ 107.181080][ T796] ryos 0003:1E7D:3138.0010: unknown main item tag 0x0 [ 107.187864][ T796] ryos 0003:1E7D:3138.0010: unknown main item tag 0x0 [ 107.195430][ T796] ryos 0003:1E7D:3138.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.2-1/input0 [ 107.208948][ T398] usb 2-1: device descriptor read/64, error -71 [ 107.226510][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input15 [ 107.363042][ T1943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.372283][ T1943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.381499][ T796] usb 3-1: USB disconnect, device number 42 [ 107.427205][ T1964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.435813][ T1964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.444330][ T331] usb 1-1: USB disconnect, device number 52 [ 107.444330][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 107.444362][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 107.466828][ T331] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 107.479564][ T398] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 107.618971][ T398] usb 2-1: device descriptor read/64, error -71 [ 107.858989][ T398] usb 2-1: device descriptor read/64, error -71 [ 107.975083][ T398] usb usb2-port1: attempt power cycle [ 107.988212][ T2008] fuse: Bad value for 'group_id' [ 108.008511][ T2008] fuse: Bad value for 'group_id' [ 108.318983][ T398] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 108.339963][ T398] usb 2-1: device descriptor read/8, error -71 [ 108.469897][ T398] usb 2-1: device descriptor read/8, error -71 [ 108.583314][ T2021] netlink: 72 bytes leftover after parsing attributes in process `syz.2.511'. [ 108.708936][ T398] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 108.729949][ T398] usb 2-1: device descriptor read/8, error -71 [ 108.858946][ T796] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 108.859960][ T398] usb 2-1: device descriptor read/8, error -71 [ 108.978999][ T398] usb usb2-port1: unable to enumerate USB device [ 109.009889][ T796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.020838][ T796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.030583][ T796] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 109.039647][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.048087][ T796] usb 3-1: config 0 descriptor?? [ 109.455972][ T796] cp2112 0003:10C4:EA90.0011: item fetching failed at offset 5/7 [ 109.463987][ T796] cp2112 0003:10C4:EA90.0011: parse failed [ 109.470059][ T796] cp2112 0003:10C4:EA90.0011: probe with driver cp2112 failed with error -22 [ 109.517679][ T2040] overlayfs: failed to resolve './file0': -2 [ 109.524723][ T2040] overlayfs: failed to resolve './file0': -2 [ 109.538316][ T2045] netlink: 'syz.3.520': attribute type 2 has an invalid length. [ 109.587449][ T2051] FAULT_INJECTION: forcing a failure. [ 109.587449][ T2051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.600665][ T2051] CPU: 0 UID: 0 PID: 2051 Comm: syz.1.522 Not tainted syzkaller #0 4ae5b12b683c07c90cf68c53485f2a5719abf10e [ 109.600693][ T2051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 109.600704][ T2051] Call Trace: [ 109.600710][ T2051] [ 109.600716][ T2051] __dump_stack+0x21/0x30 [ 109.600741][ T2051] dump_stack_lvl+0x140/0x1c0 [ 109.600760][ T2051] ? __cfi_dump_stack_lvl+0x10/0x10 [ 109.600780][ T2051] ? _parse_integer+0x2e/0x40 [ 109.600795][ T2051] ? kstrtoull+0x13b/0x1e0 [ 109.600809][ T2051] dump_stack+0x19/0x20 [ 109.600827][ T2051] should_fail_ex+0x3d7/0x530 [ 109.600845][ T2051] should_fail+0xf/0x20 [ 109.600860][ T2051] should_fail_usercopy+0x1e/0x30 [ 109.600877][ T2051] _copy_from_user+0x20/0xa0 [ 109.600897][ T2051] ___sys_sendmsg+0x1c7/0x370 [ 109.600919][ T2051] ? __sys_sendmsg+0x2a0/0x2a0 [ 109.600940][ T2051] ? proc_fail_nth_write+0x184/0x220 [ 109.600956][ T2051] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 109.600979][ T2051] __x64_sys_sendmsg+0x1fb/0x2d0 [ 109.601000][ T2051] ? fput+0x1a4/0x240 [ 109.601014][ T2051] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 109.601034][ T2051] ? ksys_write+0x1f3/0x260 [ 109.601052][ T2051] ? __kasan_check_read+0x15/0x20 [ 109.601065][ T2051] x64_sys_call+0x2a4c/0x2ee0 [ 109.601085][ T2051] do_syscall_64+0x57/0xf0 [ 109.601099][ T2051] ? clear_bhb_loop+0x50/0xa0 [ 109.601114][ T2051] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 109.601127][ T2051] RIP: 0033:0x7f27f899bf79 [ 109.601137][ T2051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.601145][ T2051] RSP: 002b:00007f27f977a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.601158][ T2051] RAX: ffffffffffffffda RBX: 00007f27f8c15fa0 RCX: 00007f27f899bf79 [ 109.601166][ T2051] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 109.601172][ T2051] RBP: 00007f27f977a090 R08: 0000000000000000 R09: 0000000000000000 [ 109.601179][ T2051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.601186][ T2051] R13: 00007f27f8c16038 R14: 00007f27f8c15fa0 R15: 00007ffef1ef0378 [ 109.601194][ T2051] [ 110.010571][ T2063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.019122][ T2063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.178929][ T398] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 110.328952][ T398] usb 2-1: Using ep0 maxpacket: 8 [ 110.335408][ T398] usb 2-1: unable to get BOS descriptor or descriptor too short [ 110.344192][ T398] usb 2-1: config 9 has an invalid interface number: 5 but max is 0 [ 110.355040][ T398] usb 2-1: config 9 has no interface number 0 [ 110.361358][ T398] usb 2-1: config 9 interface 5 altsetting 9 has an ignored endpoint with address 0x1, skipping [ 110.371842][ T36] audit: type=1326 audit(1770757360.879:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2071 comm="syz.3.529" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb57f79bf79 code=0x0 [ 110.394656][ T398] usb 2-1: config 9 interface 5 has no altsetting 0 [ 110.402734][ T398] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 110.411826][ T398] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.419886][ T398] usb 2-1: Product: syz [ 110.424070][ T398] usb 2-1: Manufacturer: syz [ 110.428637][ T398] usb 2-1: SerialNumber: syz [ 110.637609][ T398] usb 2-1: USB disconnect, device number 61 [ 111.155551][ T2077] FAULT_INJECTION: forcing a failure. [ 111.155551][ T2077] name failslab, interval 1, probability 0, space 0, times 0 [ 111.168196][ T2077] CPU: 1 UID: 0 PID: 2077 Comm: syz.1.531 Not tainted syzkaller #0 4ae5b12b683c07c90cf68c53485f2a5719abf10e [ 111.168216][ T2077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 111.168223][ T2077] Call Trace: [ 111.168227][ T2077] [ 111.168231][ T2077] __dump_stack+0x21/0x30 [ 111.168249][ T2077] dump_stack_lvl+0x140/0x1c0 [ 111.168261][ T2077] ? __cfi_dump_stack_lvl+0x10/0x10 [ 111.168274][ T2077] ? release_sock+0x171/0x1f0 [ 111.168285][ T2077] dump_stack+0x19/0x20 [ 111.168297][ T2077] should_fail_ex+0x3d7/0x530 [ 111.168308][ T2077] should_failslab+0xac/0x100 [ 111.168322][ T2077] kmem_cache_alloc_node_noprof+0x45/0x420 [ 111.168335][ T2077] ? netlink_data_ready+0x20/0x20 [ 111.168347][ T2077] ? __alloc_skb+0x108/0x370 [ 111.168358][ T2077] __alloc_skb+0x108/0x370 [ 111.168369][ T2077] netlink_alloc_large_skb+0xf7/0x1b0 [ 111.168381][ T2077] netlink_sendmsg+0x594/0xb10 [ 111.168403][ T2077] ? __cfi_netlink_sendmsg+0x10/0x10 [ 111.168424][ T2077] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 111.168448][ T2077] ? security_socket_sendmsg+0x3d/0x100 [ 111.168462][ T2077] ? __cfi_netlink_sendmsg+0x10/0x10 [ 111.168475][ T2077] ____sys_sendmsg+0xa8c/0xae0 [ 111.168490][ T2077] ? __import_iovec+0x5ad/0x7c0 [ 111.168503][ T2077] ? __sys_sendmsg_sock+0x50/0x50 [ 111.168517][ T2077] ? import_iovec+0x80/0xb0 [ 111.168529][ T2077] ___sys_sendmsg+0x2a6/0x370 [ 111.168543][ T2077] ? __sys_sendmsg+0x2a0/0x2a0 [ 111.168556][ T2077] ? proc_fail_nth_write+0x184/0x220 [ 111.168566][ T2077] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 111.168579][ T2077] __x64_sys_sendmsg+0x1fb/0x2d0 [ 111.168592][ T2077] ? fput+0x1a4/0x240 [ 111.168601][ T2077] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 111.168614][ T2077] ? ksys_write+0x1f3/0x260 [ 111.168626][ T2077] ? __kasan_check_read+0x15/0x20 [ 111.168638][ T2077] x64_sys_call+0x2a4c/0x2ee0 [ 111.168652][ T2077] do_syscall_64+0x57/0xf0 [ 111.168666][ T2077] ? clear_bhb_loop+0x50/0xa0 [ 111.168680][ T2077] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 111.168693][ T2077] RIP: 0033:0x7f27f899bf79 [ 111.168703][ T2077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.168712][ T2077] RSP: 002b:00007f27f977a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.168724][ T2077] RAX: ffffffffffffffda RBX: 00007f27f8c15fa0 RCX: 00007f27f899bf79 [ 111.168731][ T2077] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 111.168738][ T2077] RBP: 00007f27f977a090 R08: 0000000000000000 R09: 0000000000000000 [ 111.168744][ T2077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.168750][ T2077] R13: 00007f27f8c16038 R14: 00007f27f8c15fa0 R15: 00007ffef1ef0378 [ 111.168761][ T2077] [ 111.508361][ T2083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.533'. [ 111.553117][ T2088] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 111.563138][ T2088] SELinux: failed to load policy [ 111.569727][ T36] audit: type=1400 audit(1770757362.089:365): avc: denied { mount } for pid=2086 comm="syz.1.535" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 111.569775][ T2088] tracefs: Bad value for 'uid' [ 111.591854][ T36] audit: type=1400 audit(1770757362.089:366): avc: denied { remount } for pid=2086 comm="syz.1.535" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 111.596618][ T2088] tracefs: Bad value for 'uid' [ 111.632240][ T796] usb 3-1: USB disconnect, device number 43 [ 111.645913][ T36] audit: type=1400 audit(1770757362.159:367): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 111.790753][ T2110] IPv6: NLM_F_CREATE should be specified when creating new route [ 111.798585][ T2110] IPv6: NLM_F_REPLACE set, but no existing node found! [ 111.807395][ T36] audit: type=1400 audit(1770757362.319:368): avc: denied { getopt } for pid=2109 comm="syz.1.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 111.938956][ T398] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 112.048940][ T796] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 112.088925][ T398] usb 1-1: Using ep0 maxpacket: 32 [ 112.095113][ T398] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 112.103382][ T398] usb 1-1: config 0 has no interface number 0 [ 112.110738][ T398] usb 1-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=fb.a8 [ 112.119853][ T398] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.127836][ T398] usb 1-1: Product: syz [ 112.132004][ T398] usb 1-1: Manufacturer: syz [ 112.136584][ T398] usb 1-1: SerialNumber: syz [ 112.141757][ T398] usb 1-1: config 0 descriptor?? [ 112.148570][ T398] ftdi_sio 1-1:0.133: FTDI USB Serial Device converter detected [ 112.156603][ T398] ftdi_sio ttyUSB0: unknown device type: 0xfba8 [ 112.198984][ T796] usb 3-1: Using ep0 maxpacket: 32 [ 112.205189][ T796] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 112.213383][ T796] usb 3-1: config 0 has no interface number 0 [ 112.219890][ T796] usb 3-1: config 0 interface 184 has no altsetting 0 [ 112.227893][ T796] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 112.236986][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.244997][ T796] usb 3-1: Product: syz [ 112.249200][ T796] usb 3-1: Manufacturer: syz [ 112.253780][ T796] usb 3-1: SerialNumber: syz [ 112.258797][ T796] usb 3-1: config 0 descriptor?? [ 112.264477][ T796] smsc75xx v1.0.0 [ 112.350684][ T2100] fuse: Bad value for 'rootmode' [ 112.430214][ T331] usb 1-1: USB disconnect, device number 53 [ 112.436464][ T331] ftdi_sio 1-1:0.133: device disconnected [ 112.598928][ T398] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 112.748959][ T398] usb 2-1: Using ep0 maxpacket: 16 [ 112.755279][ T398] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.765564][ T398] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 112.774640][ T398] usb 2-1: New USB device found, idVendor=0043, idProduct=0000, bcdDevice= 0.00 [ 112.783800][ T398] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.792484][ T398] usb 2-1: config 0 descriptor?? [ 112.865901][ T796] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 112.876798][ T796] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 113.006741][ T2114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.015397][ T2114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.031558][ T2117] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 113.042410][ T2117] kvm: pic: non byte write [ 113.273305][ T36] audit: type=1400 audit(1770757363.789:369): avc: denied { accept } for pid=2123 comm="syz.0.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 113.408543][ T36] audit: type=1400 audit(1770757363.919:370): avc: denied { write } for pid=2136 comm="syz.3.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 113.429042][ T36] audit: type=1400 audit(1770757363.939:371): avc: denied { read } for pid=2136 comm="syz.3.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 113.500893][ T2142] netlink: 16 bytes leftover after parsing attributes in process `syz.3.557'. [ 113.578938][ T331] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 113.708908][ T331] usb 1-1: device descriptor read/64, error -71 [ 113.894913][ T796] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 113.905884][ T796] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 113.915619][ T796] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 113.925123][ T796] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 113.934486][ T796] usb 3-1: USB disconnect, device number 44 [ 113.948929][ T331] usb 1-1: device descriptor read/64, error -71 [ 114.188931][ T331] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 114.318932][ T331] usb 1-1: device descriptor read/64, error -71 [ 114.548769][ T36] audit: type=1400 audit(1770757365.059:372): avc: denied { bind } for pid=2171 comm="syz.2.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 114.568117][ T331] usb 1-1: device descriptor read/64, error -71 [ 114.574577][ T36] audit: type=1400 audit(1770757365.069:373): avc: denied { name_bind } for pid=2171 comm="syz.2.569" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 114.679001][ T331] usb usb1-port1: attempt power cycle [ 114.888923][ T398] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 115.028920][ T331] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 115.049936][ T331] usb 1-1: device descriptor read/8, error -71 [ 115.049974][ T398] usb 3-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config [ 115.066619][ T398] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.076159][ T398] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 115.085405][ T398] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 115.093415][ T398] usb 3-1: SerialNumber: syz [ 115.179966][ T331] usb 1-1: device descriptor read/8, error -71 [ 115.301679][ T398] usb 3-1: 0:2 : does not exist [ 115.306613][ T398] usb 3-1: unit 48 not found! [ 115.313648][ T398] usb 3-1: USB disconnect, device number 45 [ 115.323013][ T1301] udevd[1301]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 115.372118][ T796] usb 2-1: USB disconnect, device number 62 [ 115.418982][ T331] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 115.439910][ T331] usb 1-1: device descriptor read/8, error -71 [ 115.534422][ T2199] overlay: Unknown parameter 'smackfsroot' [ 115.569904][ T331] usb 1-1: device descriptor read/8, error -71 [ 115.679023][ T331] usb usb1-port1: unable to enumerate USB device [ 115.748929][ T796] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 115.900221][ T796] usb 2-1: not running at top speed; connect to a high speed hub [ 115.908701][ T796] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 115.919568][ T796] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 115.931755][ T796] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.940848][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.948825][ T796] usb 2-1: Product: syz [ 115.953014][ T796] usb 2-1: Manufacturer: syz [ 115.957593][ T796] usb 2-1: SerialNumber: syz [ 115.963155][ T2195] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 116.053187][ T2209] netlink: 20 bytes leftover after parsing attributes in process `syz.3.582'. [ 116.063246][ T2209] netlink: 40 bytes leftover after parsing attributes in process `syz.3.582'. [ 116.080711][ T2214] tmpfs: Unknown parameter 'appraise_type' [ 116.171231][ T2195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.180160][ T2195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.189581][ T2195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.198398][ T2195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.209188][ T796] cdc_ncm 2-1:1.0: bind() failure [ 116.214863][ T796] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 116.221680][ T796] cdc_ncm 2-1:1.1: bind() failure [ 116.227698][ T796] usb 2-1: USB disconnect, device number 63 [ 116.354666][ T2221] syzkaller1: entered promiscuous mode [ 116.360244][ T2221] syzkaller1: entered allmulticast mode [ 116.725874][ T2228] kvm: kvm [2227]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 116.821160][ T2233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=2233 comm=syz.1.590 [ 116.833621][ T2233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=2233 comm=syz.1.590 [ 116.846226][ T2233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=2233 comm=syz.1.590 [ 116.858685][ T2233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=2233 comm=syz.1.590 [ 116.881050][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 116.881065][ T36] audit: type=1400 audit(1770757367.399:375): avc: denied { mount } for pid=2234 comm="syz.1.591" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 116.934987][ T36] audit: type=1400 audit(1770757367.449:376): avc: denied { ioctl } for pid=2237 comm="syz.2.592" path="socket:[19670]" dev="sockfs" ino=19670 ioctlcmd=0xf517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 116.990426][ T2241] syz.2.593 uses obsolete (PF_INET,SOCK_PACKET) [ 117.218919][ T9] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 117.308981][ T796] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 117.369948][ T9] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 117.380311][ T9] usb 2-1: config 0 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 117.393212][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 117.399851][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 117.408916][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.417465][ T9] usb 2-1: config 0 descriptor?? [ 117.423200][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 117.468949][ T796] usb 3-1: Using ep0 maxpacket: 8 [ 117.476412][ T796] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 117.485563][ T796] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 117.493765][ T796] usb 3-1: Product: syz [ 117.497975][ T796] usb 3-1: Manufacturer: syz [ 117.498924][ T398] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 117.502588][ T796] usb 3-1: SerialNumber: syz [ 117.515579][ T796] usb 3-1: config 0 descriptor?? [ 117.658967][ T398] usb 1-1: Using ep0 maxpacket: 32 [ 117.665160][ T398] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 117.673524][ T398] usb 1-1: config 0 has no interface number 0 [ 117.679641][ T398] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 117.691029][ T398] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 117.700143][ T398] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.708137][ T398] usb 1-1: Product: syz [ 117.712340][ T398] usb 1-1: Manufacturer: syz [ 117.716934][ T398] usb 1-1: SerialNumber: syz [ 117.723383][ T398] usb 1-1: config 0 descriptor?? [ 117.728973][ T2251] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 117.742110][ T796] usb 3-1: USB disconnect, device number 46 [ 117.760240][ T1301] udevd[1301]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 117.939526][ T2251] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 118.468943][ T796] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 118.619989][ T796] usb 3-1: config 0 has an invalid interface number: 44 but max is 1 [ 118.628166][ T796] usb 3-1: config 0 has an invalid interface number: 92 but max is 1 [ 118.636302][ T796] usb 3-1: config 0 has no interface number 0 [ 118.642407][ T796] usb 3-1: config 0 has no interface number 1 [ 118.648501][ T796] usb 3-1: config 0 interface 44 has no altsetting 0 [ 118.655208][ T796] usb 3-1: config 0 interface 92 has no altsetting 0 [ 118.663287][ T796] usb 3-1: New USB device found, idVendor=1b3d, idProduct=01ab, bcdDevice=85.24 [ 118.672387][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.680420][ T796] usb 3-1: Product: syz [ 118.684577][ T796] usb 3-1: Manufacturer: syz [ 118.689196][ T796] usb 3-1: SerialNumber: syz [ 118.694489][ T796] usb 3-1: config 0 descriptor?? [ 118.699731][ T796] usb 3-1: Interface #92 referenced by multiple IADs [ 118.952346][ T2251] Bluetooth: hci0: Frame reassembly failed (-84) [ 118.959072][ T2251] Bluetooth: hci0: Frame reassembly failed (-84) [ 118.965545][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 118.972529][ T2251] Bluetooth: hci0: Frame reassembly failed (-84) [ 118.979753][ T398] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 118.989978][ T398] asix 1-1:0.188: probe with driver asix failed with error -32 [ 119.181538][ T796] ftdi_sio 3-1:0.44: FTDI USB Serial Device converter detected [ 119.189416][ T796] ftdi_sio ttyUSB0: unknown device type: 0x8524 [ 119.196682][ T796] ftdi_sio 3-1:0.92: FTDI USB Serial Device converter detected [ 119.205912][ T796] ftdi_sio ttyUSB1: unknown device type: 0x8524 [ 119.216385][ T796] usb 3-1: USB disconnect, device number 47 [ 119.229532][ T796] ftdi_sio 3-1:0.44: device disconnected [ 119.237582][ T796] ftdi_sio 3-1:0.92: device disconnected [ 119.758162][ T36] audit: type=1400 audit(1770757370.269:377): avc: denied { mounton } for pid=2280 comm="syz.3.608" path="/194/file0" dev="tmpfs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 119.883794][ T796] usb 2-1: USB disconnect, device number 64 [ 120.998919][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 120.999013][ T863] Bluetooth: hci0: command 0x1003 tx timeout [ 121.020434][ T796] usb 1-1: USB disconnect, device number 58 [ 121.054040][ T2317] kvm: kvm [2316]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 121.249488][ T2321] tipc: Started in network mode [ 121.254478][ T2321] tipc: Node identity 4, cluster identity 4711 [ 121.260713][ T2321] tipc: Node number set to 4 [ 121.377991][ T36] audit: type=1400 audit(1770757371.889:378): avc: denied { create } for pid=2322 comm="syz.3.623" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 121.413719][ T36] audit: type=1400 audit(1770757371.919:379): avc: denied { write } for pid=2322 comm="syz.3.623" name="file2" dev="tmpfs" ino=1102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 121.436388][ T36] audit: type=1400 audit(1770757371.919:380): avc: denied { open } for pid=2322 comm="syz.3.623" path="/202/file2" dev="tmpfs" ino=1102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 121.459762][ T36] audit: type=1400 audit(1770757371.919:381): avc: denied { ioctl } for pid=2322 comm="syz.3.623" path="/202/file2" dev="tmpfs" ino=1102 ioctlcmd=0x1282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 121.484005][ T36] audit: type=1400 audit(1770757371.919:382): avc: denied { unlink } for pid=295 comm="syz-executor" name="file2" dev="tmpfs" ino=1102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 121.518824][ T2328] netlink: 'syz.3.625': attribute type 3 has an invalid length. [ 121.526546][ T2328] netlink: 944 bytes leftover after parsing attributes in process `syz.3.625'. [ 121.610365][ T2335] sit0: entered promiscuous mode [ 121.616873][ T2335] netlink: 'syz.0.627': attribute type 1 has an invalid length. [ 121.624821][ T2335] netlink: 1 bytes leftover after parsing attributes in process `syz.0.627'. [ 121.636368][ T2335] netlink: 44 bytes leftover after parsing attributes in process `syz.0.627'. [ 121.650393][ T2336] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 122.106999][ T2336] overlayfs: failed to clone lowerpath [ 122.139266][ T2343] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 122.253672][ T2346] kvm: kvm [2345]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 122.464750][ T2351] veth1_to_hsr: entered promiscuous mode [ 122.510304][ T2350] veth1_to_hsr: left promiscuous mode [ 122.545025][ T36] audit: type=1400 audit(1770757373.059:383): avc: denied { setopt } for pid=2352 comm="syz.0.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 122.555307][ T2355] netlink: 'syz.0.634': attribute type 4 has an invalid length. [ 122.572265][ T2356] netlink: 'syz.0.634': attribute type 4 has an invalid length. [ 122.828936][ T796] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 123.010298][ T796] usb 1-1: unable to get BOS descriptor or descriptor too short [ 123.018435][ T796] usb 1-1: not running at top speed; connect to a high speed hub [ 123.028325][ T796] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 123.039981][ T796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 123.051066][ T796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 221, setting to 64 [ 123.061956][ T796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 123.071675][ T796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 123.081700][ T796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 67, setting to 64 [ 123.093889][ T796] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 123.103063][ T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.111118][ T796] usb 1-1: Product: syz [ 123.115404][ T796] usb 1-1: Manufacturer: syz [ 123.120051][ T796] usb 1-1: SerialNumber: syz [ 123.138952][ T796] usb 1-1: config 0 descriptor?? [ 123.145591][ T2360] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 123.153091][ T2360] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 123.160466][ T2360] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 124.082733][ T36] audit: type=1400 audit(1770757374.599:384): avc: denied { map } for pid=2367 comm="syz.0.637" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 124.106447][ T36] audit: type=1400 audit(1770757374.599:385): avc: denied { execute } for pid=2367 comm="syz.0.637" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 124.418508][ T36] audit: type=1400 audit(1770757374.929:386): avc: denied { create } for pid=2370 comm="syz.0.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 124.795348][ T36] audit: type=1400 audit(1770757375.309:387): avc: denied { read } for pid=2387 comm="syz.0.644" name="/" dev="configfs" ino=2435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.894047][ T36] audit: type=1400 audit(1770757375.309:388): avc: denied { open } for pid=2387 comm="syz.0.644" path="/" dev="configfs" ino=2435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 125.708350][ T2410] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 125.814613][ T2421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'. [ 125.823572][ T2420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'. [ 125.965500][ T2426] overlayfs: maximum fs stacking depth exceeded [ 125.975494][ T2424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.986140][ T2424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.125177][ T36] audit: type=1400 audit(1770757376.639:389): avc: denied { getopt } for pid=2427 comm="syz.1.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 126.250968][ T36] audit: type=1326 audit(1770757376.769:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2438 comm="syz.1.661" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27f899bf79 code=0x0 [ 126.331191][ T2446] netlink: 'syz.3.664': attribute type 10 has an invalid length. [ 126.339156][ T2446] netlink: 40 bytes leftover after parsing attributes in process `syz.3.664'. [ 126.348226][ T2446] veth1: entered promiscuous mode [ 126.699663][ T2455] overlayfs: failed to set uuid (152/file1, err=-1); falling back to uuid=null. [ 126.710711][ T2455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.666'. [ 126.728104][ T36] audit: type=1400 audit(1770757377.239:391): avc: denied { setattr } for pid=2456 comm="syz.0.667" name="RAWv6" dev="sockfs" ino=20897 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 126.871679][ T36] audit: type=1400 audit(1770757377.389:392): avc: denied { read } for pid=2463 comm="syz.0.670" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 127.002799][ T2478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.675'. [ 127.137613][ T2486] IPv6: NLM_F_CREATE should be specified when creating new route [ 127.149512][ T2486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.679'. [ 127.177275][ T960] usb 1-1: USB disconnect, device number 59 [ 127.299721][ T2500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.685'. [ 127.560371][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 127.560388][ T36] audit: type=1400 audit(1770757378.079:398): avc: denied { mounton } for pid=2501 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 127.604628][ T2501] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.611734][ T2501] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.618821][ T2501] bridge_slave_0: entered allmulticast mode [ 127.625409][ T2501] bridge_slave_0: entered promiscuous mode [ 127.632031][ T2501] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.639274][ T2501] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.646367][ T2501] bridge_slave_1: entered allmulticast mode [ 127.652855][ T2501] bridge_slave_1: entered promiscuous mode [ 127.749872][ T2501] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.756929][ T2501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.764216][ T2501] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.771257][ T2501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.810240][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.825774][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.848759][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.855843][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.865152][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.872201][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.908376][ T2501] veth0_vlan: entered promiscuous mode [ 127.925250][ T2501] veth1_macvtap: entered promiscuous mode [ 127.945468][ T36] audit: type=1400 audit(1770757378.459:399): avc: denied { mounton } for pid=2501 comm="syz-executor" path="/root/syzkaller.bKKk37/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 128.269317][ T398] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 128.430170][ T398] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.440391][ T398] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 128.449269][ T398] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.459235][ T398] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 128.468243][ T398] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.479393][ T398] hub 5-1:1.0: bad descriptor, ignoring hub [ 128.485303][ T398] hub 5-1:1.0: probe with driver hub failed with error -5 [ 128.494266][ T398] cdc_wdm 5-1:1.0: skipping garbage [ 128.498941][ T331] usb 2-1: new low-speed USB device number 65 using dummy_hcd [ 128.499510][ T398] cdc_wdm 5-1:1.0: skipping garbage [ 128.512210][ T398] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 128.649911][ T331] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 128.658204][ T331] usb 2-1: config 179 has no interface number 0 [ 128.664531][ T331] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 128.675677][ T331] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 128.685832][ T331] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 128.698819][ T331] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 128.710090][ T331] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 128.723343][ T331] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 128.732411][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.741473][ T2540] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 128.749374][ T331] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 128.760070][ T331] xpad 2-1:179.65: probe with driver xpad failed with error -5 [ 128.789023][ T398] usb 5-1: USB disconnect, device number 2 [ 128.958597][ T331] usb 2-1: USB disconnect, device number 65 [ 129.162428][ T36] audit: type=1326 audit(1770757379.679:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2541 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57f79bf79 code=0x7fc00000 [ 129.190181][ T2546] netlink: 32 bytes leftover after parsing attributes in process `syz.3.696'. [ 129.202617][ T36] audit: type=1326 audit(1770757379.719:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2545 comm="syz.3.696" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb57f79bf79 code=0x0 [ 129.264537][ T2553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.698'. [ 129.659003][ T398] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 129.678713][ T36] audit: type=1400 audit(1770757380.189:402): avc: denied { relabelfrom } for pid=2577 comm="syz.1.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 129.698571][ T36] audit: type=1400 audit(1770757380.189:403): avc: denied { relabelto } for pid=2577 comm="syz.1.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 129.718204][ T36] audit: type=1400 audit(1770757380.209:404): avc: denied { attach_queue } for pid=2577 comm="syz.1.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 129.829953][ T398] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 129.839916][ T398] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 129.849174][ T398] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.859495][ T398] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 129.910479][ T2585] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 129.929372][ T2585] netlink: 'syz.1.708': attribute type 1 has an invalid length. [ 129.937013][ T2585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.708'. [ 129.945821][ T2585] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.069793][ T2572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.087027][ T2572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.190166][ T960] usb 5-1: USB disconnect, device number 3 [ 130.388907][ T398] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 130.538916][ T398] usb 2-1: Using ep0 maxpacket: 16 [ 130.544988][ T398] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 130.553704][ T398] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.563836][ T398] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.574042][ T398] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.583092][ T398] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.591134][ T398] usb 2-1: Product: syz [ 130.595277][ T398] usb 2-1: Manufacturer: syz [ 130.599868][ T398] usb 2-1: SerialNumber: syz [ 130.627059][ T36] audit: type=1326 audit(1770757381.139:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2606 comm="syz.3.716" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb57f79bf79 code=0x0 [ 130.677374][ T2608] sit0: entered promiscuous mode [ 130.683248][ T2608] netlink: 'syz.3.716': attribute type 1 has an invalid length. [ 130.694208][ T2608] netlink: 1 bytes leftover after parsing attributes in process `syz.3.716'. [ 130.928943][ T960] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 131.078943][ T960] usb 5-1: Using ep0 maxpacket: 16 [ 131.085168][ T960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.096217][ T960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.106099][ T960] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 131.115155][ T960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.123756][ T960] usb 5-1: config 0 descriptor?? [ 131.525440][ T36] audit: type=1400 audit(1770757382.039:406): avc: denied { execute_no_trans } for pid=2613 comm="syz.3.718" path="/230/file0" dev="tmpfs" ino=1246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 131.550686][ T960] apple 0003:05AC:0247.0012: fixing up MacBook JIS keyboard report descriptor [ 131.560236][ T960] apple 0003:05AC:0247.0012: unexpected long global item [ 131.567465][ T960] apple 0003:05AC:0247.0012: parse failed [ 131.573681][ T960] apple 0003:05AC:0247.0012: probe with driver apple failed with error -22 [ 131.595810][ T36] audit: type=1400 audit(1770757382.109:407): avc: denied { remount } for pid=2620 comm="syz.3.720" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 131.616472][ T2622] bridge0: port 3(erspan0) entered blocking state [ 131.638919][ T2622] bridge0: port 3(erspan0) entered disabled state [ 131.645651][ T2622] erspan0: entered allmulticast mode [ 131.651727][ T2622] erspan0: entered promiscuous mode [ 131.657437][ T2622] bridge0: port 3(erspan0) entered blocking state [ 131.663909][ T2622] bridge0: port 3(erspan0) entered forwarding state [ 131.671856][ T2621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.720'. [ 131.759862][ T332] usb 5-1: USB disconnect, device number 4 [ 131.773250][ T2611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.717'. [ 131.801250][ T2633] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=50 sclass=netlink_xfrm_socket pid=2633 comm=syz.3.723 [ 133.153122][ T398] usb 2-1: 0:2 : does not exist [ 133.162295][ T398] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 133.176441][ T398] usb 2-1: USB disconnect, device number 66 [ 133.468917][ T398] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 133.619963][ T398] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.630913][ T398] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.640949][ T398] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.654000][ T398] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.663092][ T398] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.671863][ T398] usb 2-1: config 0 descriptor?? [ 133.948933][ T960] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 134.079174][ T398] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 134.088008][ T398] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 134.100005][ T960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 134.111758][ T960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 134.123606][ T960] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 134.136560][ T960] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 134.145612][ T960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.154220][ T960] usb 5-1: config 0 descriptor?? [ 134.561474][ T960] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 134.571875][ T960] plantronics 0003:047F:FFFF.0014: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 134.660609][ T960] usb 2-1: USB disconnect, device number 67 [ 134.802107][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 134.802125][ T36] audit: type=1404 audit(1770757385.309:410): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 134.823041][ T2657] syzkaller1: entered promiscuous mode [ 134.828511][ T2657] syzkaller1: entered allmulticast mode [ 134.842052][ T36] audit: type=1400 audit(1770757385.359:411): avc: denied { create } for pid=2658 comm="syz.3.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 134.862718][ T36] audit: type=1400 audit(1770757385.379:412): avc: denied { create } for pid=2658 comm="syz.3.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 134.882376][ T36] audit: type=1400 audit(1770757385.379:413): avc: denied { create } for pid=2658 comm="syz.3.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 134.905127][ T36] audit: type=1400 audit(1770757385.419:414): avc: denied { read } for pid=2660 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 135.008410][ T36] audit: type=1400 audit(1770757385.519:415): avc: denied { create } for pid=2658 comm="syz.3.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 135.051139][ T36] audit: type=1400 audit(1770757385.529:416): avc: denied { execmem } for pid=2662 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 135.082645][ T36] audit: type=1400 audit(1770757385.549:417): avc: denied { create } for pid=2658 comm="syz.3.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 135.105188][ T36] audit: type=1400 audit(1770757385.549:418): avc: denied { create } for pid=2658 comm="syz.3.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 135.124873][ T36] audit: type=1400 audit(1770757385.549:419): avc: denied { create } for pid=2658 comm="syz.3.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 136.739050][ T960] usb 5-1: USB disconnect, device number 5 [ 267.079436][ T37] INFO: task syz-executor:294 blocked for more than 122 seconds. [ 267.087244][ T37] Not tainted syzkaller #0 [ 267.158919][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 267.167623][ T37] task:syz-executor state:D stack:0 pid:294 tgid:294 ppid:1 flags:0x00004006 [ 267.288910][ T37] Call Trace: [ 267.292224][ T37] [ 267.295162][ T37] __schedule+0x134f/0x1ea0 [ 267.348922][ T37] ? irqentry_exit+0x4a/0x60 [ 267.353564][ T37] ? __sched_text_start+0x10/0x10 [ 267.358597][ T37] ? rwsem_spin_on_owner+0x14b/0x3b0 [ 267.448909][ T37] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 267.455125][ T37] ? __kasan_check_write+0x18/0x20 [ 267.538908][ T37] ? _raw_spin_lock_irq+0x93/0x120 [ 267.544073][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 267.598908][ T37] ? __kasan_check_write+0x18/0x20 [ 267.604064][ T37] schedule+0xc5/0x240 [ 267.608143][ T37] schedule_preempt_disabled+0x14/0x30 [ 267.678909][ T37] rwsem_down_write_slowpath+0x5b0/0x1bb0 [ 267.684670][ T37] ? __kasan_slab_free+0x5f/0x80 [ 267.768907][ T37] ? kmem_cache_free+0x1bd/0x4f0 [ 267.773889][ T37] ? put_files_struct+0x2fd/0x330 [ 267.828909][ T37] ? rwsem_down_read_slowpath+0x1490/0x1490 [ 267.834843][ T37] ? syscall_exit_to_user_mode+0x57/0xb0 [ 267.908926][ T37] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 267.915044][ T37] down_write+0x163/0x2b0 [ 267.978922][ T37] ? __cfi_down_write+0x10/0x10 [ 267.983832][ T37] ? __kasan_check_write+0x18/0x20 [ 268.048915][ T37] put_mnt_ns+0x7a/0xf0 [ 268.053121][ T37] free_nsproxy+0x52/0x290 [ 268.057546][ T37] exit_task_namespaces+0x99/0xe0 [ 268.118982][ T37] do_exit+0x9de/0x2650 [ 268.123188][ T37] ? __x64_sys_openat+0x13a/0x170 [ 268.128220][ T37] ? __cfi_do_exit+0x10/0x10 [ 268.238946][ T37] ? __kasan_check_write+0x18/0x20 [ 268.244115][ T37] ? _raw_spin_lock_irq+0x93/0x120 [ 268.298932][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 268.304549][ T37] do_group_exit+0x229/0x2f0 [ 268.378916][ T37] ? __kasan_check_write+0x18/0x20 [ 268.384086][ T37] get_signal+0x1398/0x14e0 [ 268.388621][ T37] arch_do_signal_or_restart+0xbc/0x760 [ 268.448928][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 268.455130][ T37] ? __x64_sys_openat+0x13a/0x170 [ 268.528910][ T37] syscall_exit_to_user_mode+0x57/0xb0 [ 268.534420][ T37] do_syscall_64+0x63/0xf0 [ 268.538852][ T37] ? clear_bhb_loop+0x50/0xa0 [ 268.593604][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 268.658932][ T37] RIP: 0033:0x7fb39e557197 [ 268.663404][ T37] RSP: 002b:00007ffe28667660 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 268.758949][ T37] RAX: fffffffffffffe00 RBX: 000055556176a500 RCX: 00007fb39e557197 [ 268.766966][ T37] RDX: 0000000000000000 RSI: 00007ffe286677b0 RDI: ffffffffffffff9c [ 268.858910][ T37] RBP: 00007ffe286677b0 R08: 0000000000000000 R09: 0000000000000000 [ 268.866927][ T37] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe28668840 [ 268.958933][ T37] R13: 00007fb39e631c3b R14: 000055556176a4e8 R15: 00007ffe28668880 [ 268.966955][ T37] [ 269.028930][ T37] INFO: task kworker/u8:4:330 blocked for more than 124 seconds. [ 269.036684][ T37] Not tainted syzkaller #0 [ 269.118908][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 269.127628][ T37] task:kworker/u8:4 state:D stack:0 pid:330 tgid:330 ppid:2 flags:0x00004000 [ 269.238922][ T37] Workqueue: ipv6_addrconf addrconf_dad_work [ 269.244999][ T37] Call Trace: [ 269.248298][ T37] [ 269.318925][ T37] __schedule+0x134f/0x1ea0 [ 269.323490][ T37] ? __sched_text_start+0x10/0x10 [ 269.328534][ T37] ? __kasan_check_write+0x18/0x20 [ 269.408922][ T37] ? kthread_data+0x54/0xc0 [ 269.413478][ T37] ? wq_worker_sleeping+0x69/0x260 [ 269.418614][ T37] ? trace_contention_begin+0xc0/0xc0 [ 269.518911][ T37] schedule+0xc5/0x240 [ 269.523031][ T37] schedule_preempt_disabled+0x14/0x30 [ 269.528503][ T37] __mutex_lock+0x960/0x1bb0 [ 269.608913][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 269.615727][ T37] ? tg_unthrottle_up+0x9a0/0x9a0 [ 269.688934][ T37] ? add_timer_global+0x84/0xb0 [ 269.693839][ T37] ? __queue_delayed_work+0x1b0/0x240 [ 269.758917][ T37] ? __cfi_update_misfit_status+0x10/0x10 [ 269.764695][ T37] ? dequeue_entities+0x1d7/0x1400 [ 269.828930][ T37] ? xfd_validate_state+0x68/0x140 [ 269.834103][ T37] ? save_fpregs_to_fpstate+0x196/0x220 [ 269.898911][ T37] __mutex_lock_slowpath+0xe/0x20 [ 269.903992][ T37] mutex_lock+0x113/0x1d0 [ 269.908339][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 269.988914][ T37] rtnl_lock+0x19/0x20 [ 269.993041][ T37] addrconf_dad_work+0xce/0x1530 [ 269.998176][ T37] ? _raw_spin_unlock+0x45/0x60 [ 270.088909][ T37] ? finish_task_switch+0x139/0x760 [ 270.094158][ T37] ? __cfi_addrconf_dad_work+0x10/0x10 [ 270.158928][ T37] ? __schedule+0x1357/0x1ea0 [ 270.163665][ T37] ? kick_pool+0xb9/0x550 [ 270.168014][ T37] process_scheduled_works+0x7d4/0x1020 [ 270.248929][ T37] worker_thread+0xc70/0x10b0 [ 270.253665][ T37] ? __cfi_try_to_wake_up+0x10/0x10 [ 270.308930][ T37] kthread+0x2c9/0x370 [ 270.313055][ T37] ? __cfi_worker_thread+0x10/0x10 [ 270.318183][ T37] ? __cfi_kthread+0x10/0x10 [ 270.418907][ T37] ret_from_fork+0x67/0xa0 [ 270.423372][ T37] ? __cfi_kthread+0x10/0x10 [ 270.427971][ T37] ret_from_fork_asm+0x1a/0x30 [ 270.488929][ T37] [ 270.492020][ T37] INFO: task kworker/1:6:960 blocked for more than 126 seconds. [ 270.568906][ T37] Not tainted syzkaller #0 [ 270.573876][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 270.658908][ T37] task:kworker/1:6 state:D stack:0 pid:960 tgid:960 ppid:2 flags:0x00004000 [ 270.728921][ T37] Workqueue: usb_hub_wq hub_event [ 270.734009][ T37] Call Trace: [ 270.737295][ T37] [ 270.808909][ T37] __schedule+0x134f/0x1ea0 [ 270.813464][ T37] ? __sched_text_start+0x10/0x10 [ 270.818511][ T37] ? _raw_spin_lock_irq+0x93/0x120 [ 270.888906][ T37] ? wake_up_process+0x14/0x20 [ 270.893726][ T37] ? vsnprintf+0x19ef/0x1ad0 [ 270.898331][ T37] ? wq_worker_sleeping+0x1a0/0x260 [ 271.008910][ T37] schedule+0xc5/0x240 [ 271.013028][ T37] schedule_timeout+0xc7/0x3b0 [ 271.017810][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 271.078931][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 271.084533][ T37] wait_for_common+0x369/0x650 [ 271.148936][ T37] ? wait_for_completion+0x40/0x40 [ 271.154101][ T37] ? _raw_spin_lock+0x92/0x120 [ 271.208967][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 271.214221][ T37] ? usb_devnode+0x8a/0xb0 [ 271.218656][ T37] ? __cfi_usb_devnode+0x10/0x10 [ 271.338916][ T37] wait_for_completion+0x1c/0x40 [ 271.343916][ T37] devtmpfs_delete_node+0x16d/0x200 [ 271.398921][ T37] ? __cfi_devtmpfs_delete_node+0x10/0x10 [ 271.404685][ T37] ? __kasan_check_write+0x18/0x20 [ 271.468941][ T37] ? _raw_spin_lock+0x92/0x120 [ 271.473776][ T37] ? kobject_put+0x1cc/0x2a0 [ 271.478384][ T37] ? __cfi_klist_children_put+0x10/0x10 [ 271.548923][ T37] ? klist_children_put+0x4c/0x60 [ 271.553994][ T37] ? klist_del+0xf8/0x120 [ 271.558334][ T37] device_del+0x2d2/0xd00 [ 271.648918][ T37] ? __cfi_class_find_device+0x10/0x10 [ 271.654428][ T37] ? __cfi_device_del+0x10/0x10 [ 271.718929][ T37] ? __kasan_check_write+0x18/0x20 [ 271.724090][ T37] ? kobject_put+0x1cc/0x2a0 [ 271.728698][ T37] device_destroy+0xb0/0x100 [ 271.808933][ T37] ? __cfi_device_destroy+0x10/0x10 [ 271.814183][ T37] ? up_write+0x66/0x280 [ 271.818443][ T37] usb_deregister_dev+0x6c/0x190 [ 271.908915][ T37] hiddev_disconnect+0x8b/0x190 [ 271.913817][ T37] hid_device_remove+0x1bd/0x3f0 [ 271.918774][ T37] ? __cfi_hid_device_remove+0x10/0x10 [ 271.998912][ T37] device_release_driver_internal+0x45f/0x790 [ 272.005024][ T37] device_release_driver+0x1d/0x30 [ 272.078924][ T37] bus_remove_device+0x359/0x380 [ 272.083905][ T37] device_del+0x581/0xd00 [ 272.088251][ T37] ? __pm_runtime_resume+0xa0/0xa0 [ 272.168951][ T37] ? __cfi_device_del+0x10/0x10 [ 272.173860][ T37] ? __kasan_check_write+0x18/0x20 [ 272.238940][ T37] ? _raw_spin_lock_irq+0x93/0x120 [ 272.244114][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 272.308912][ T37] hid_destroy_device+0x6e/0x110 [ 272.313894][ T37] usbhid_disconnect+0xa3/0xc0 [ 272.318677][ T37] usb_unbind_interface+0x2a7/0xa30 [ 272.408940][ T37] ? kernfs_remove_by_name_ns+0x124/0x160 [ 272.414710][ T37] ? __cfi_usb_unbind_interface+0x10/0x10 [ 272.478914][ T37] device_release_driver_internal+0x4c5/0x790 [ 272.485033][ T37] device_release_driver+0x1d/0x30 [ 272.558922][ T37] bus_remove_device+0x359/0x380 [ 272.563988][ T37] device_del+0x581/0xd00 [ 272.568329][ T37] ? kfree_const+0x3d/0x50 [ 272.628905][ T37] ? __cfi_device_release+0x10/0x10 [ 272.634151][ T37] ? __cfi_device_del+0x10/0x10 [ 272.699368][ T37] ? kobject_put+0x238/0x2a0 [ 272.704020][ T37] ? device_unregister+0x2b/0x40 [ 272.768926][ T37] usb_disable_device+0x3af/0x770 [ 272.773994][ T37] usb_disconnect+0x322/0x930 [ 272.778683][ T37] hub_event+0x1c7a/0x4700 [ 272.868914][ T37] ? kthread_data+0x54/0xc0 [ 272.873473][ T37] ? psi_task_switch+0x59e/0xa10 [ 272.878433][ T37] ? __cfi_hub_event+0x10/0x10 [ 272.958909][ T37] ? __schedule+0x1357/0x1ea0 [ 272.963623][ T37] ? pwq_dec_nr_in_flight+0x6c7/0xc60 [ 273.018910][ T37] ? kick_pool+0xb9/0x550 [ 273.023280][ T37] process_scheduled_works+0x7d4/0x1020 [ 273.028852][ T37] worker_thread+0xc70/0x10b0 [ 273.093605][ T37] ? __cfi_try_to_wake_up+0x10/0x10 [ 273.098823][ T37] kthread+0x2c9/0x370 [ 273.158925][ T37] ? __cfi_worker_thread+0x10/0x10 [ 273.164085][ T37] ? __cfi_kthread+0x10/0x10 [ 273.168685][ T37] ret_from_fork+0x67/0xa0 [ 273.258933][ T37] ? __cfi_kthread+0x10/0x10 [ 273.263578][ T37] ret_from_fork_asm+0x1a/0x30 [ 273.268363][ T37] [ 273.338937][ T37] INFO: task syz.1.728:2649 blocked for more than 129 seconds. [ 273.346520][ T37] Not tainted syzkaller #0 [ 273.418926][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 273.427644][ T37] task:syz.1.728 state:D stack:0 pid:2649 tgid:2649 ppid:289 flags:0x00000004 [ 273.548932][ T37] Call Trace: [ 273.552267][ T37] [ 273.555211][ T37] __schedule+0x134f/0x1ea0 [ 273.608931][ T37] ? __sched_text_start+0x10/0x10 [ 273.614011][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 273.678904][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 273.684409][ T37] ? wake_up_process+0x14/0x20 [ 273.748907][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 273.754765][ T37] schedule+0xc5/0x240 [ 273.758846][ T37] synchronize_rcu_expedited+0x6eb/0x970 [ 273.824569][ T37] ? __cfi_synchronize_rcu_expedited+0x10/0x10 [ 273.898930][ T37] ? locks_remove_file+0x381/0x1090 [ 273.904194][ T37] ? __cfi_wait_rcu_exp_gp+0x10/0x10 [ 273.959242][ T37] ? __cfi_autoremove_wake_function+0x10/0x10 [ 273.965359][ T37] ? __cfi_locks_remove_file+0x10/0x10 [ 274.048908][ T37] ? __kasan_check_read+0x15/0x20 [ 274.054061][ T37] synchronize_net+0x2c/0x40 [ 274.058667][ T37] __tun_detach+0x774/0x1460 [ 274.119712][ T37] ? __kasan_check_write+0x18/0x20 [ 274.124869][ T37] ? mutex_lock+0x97/0x1d0 [ 274.188910][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 274.193808][ T37] tun_chr_close+0x93/0x150 [ 274.198320][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 274.298927][ T37] __fput+0x1fb/0xa00 [ 274.302955][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 274.308521][ T37] ____fput+0x20/0x30 [ 274.378908][ T37] task_work_run+0x1e5/0x260 [ 274.383542][ T37] ? __cfi_task_work_run+0x10/0x10 [ 274.388662][ T37] ? __kasan_check_write+0x18/0x20 [ 274.488909][ T37] resume_user_mode_work+0x35/0x50 [ 274.494070][ T37] syscall_exit_to_user_mode+0x63/0xb0 [ 274.558908][ T37] do_syscall_64+0x63/0xf0 [ 274.563370][ T37] ? clear_bhb_loop+0x50/0xa0 [ 274.568061][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 274.638908][ T37] RIP: 0033:0x7f27f899bf79 [ 274.643367][ T37] RSP: 002b:00007ffef1ef04d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 274.728906][ T37] RAX: 0000000000000000 RBX: 00007f27f8c17da0 RCX: 00007f27f899bf79 [ 274.736916][ T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 274.848903][ T37] RBP: 00007f27f8c17da0 R08: 0000000000000006 R09: 0000000000000000 [ 274.856918][ T37] R10: 00007f27f8c17cb0 R11: 0000000000000246 R12: 0000000000021141 [ 274.938903][ T37] R13: 00007f27f8c1618c R14: 0000000000020f17 R15: 00007f27f8c16180 [ 274.946915][ T37] [ 275.008914][ T37] INFO: task syz.1.728:2651 blocked for more than 130 seconds. [ 275.016485][ T37] Not tainted syzkaller #0 [ 275.108938][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 275.117649][ T37] task:syz.1.728 state:D stack:0 pid:2651 tgid:2649 ppid:289 flags:0x00000024 [ 275.238909][ T37] Call Trace: [ 275.242232][ T37] [ 275.245167][ T37] __schedule+0x134f/0x1ea0 [ 275.298938][ T37] ? __sched_text_start+0x10/0x10 [ 275.304004][ T37] ? __kasan_check_write+0x18/0x20 [ 275.368907][ T37] ? _raw_spin_lock_irq+0x93/0x120 [ 275.374066][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 275.428908][ T37] schedule+0xc5/0x240 [ 275.433024][ T37] schedule_preempt_disabled+0x14/0x30 [ 275.438489][ T37] rwsem_down_read_slowpath+0x6fb/0x1490 [ 275.528925][ T37] ? down_write_killable+0x2d0/0x2d0 [ 275.534253][ T37] ? kasan_save_alloc_info+0x40/0x50 [ 275.608906][ T37] ? __kasan_check_write+0x18/0x20 [ 275.614059][ T37] ? downgrade_write+0x370/0x460 [ 275.668912][ T37] ? _raw_spin_lock+0x92/0x120 [ 275.673723][ T37] ? _raw_spin_trylock_bh+0x140/0x150 [ 275.738929][ T37] down_read+0x95/0xe0 [ 275.743041][ T37] ? __cfi_down_read+0x10/0x10 [ 275.747820][ T37] ? __cfi_ovl_inode_set+0x10/0x10 [ 275.818905][ T37] ? _raw_spin_unlock+0x45/0x60 [ 275.823800][ T37] clone_private_mount+0x4c/0x320 [ 275.828833][ T37] ovl_fill_super+0xef6/0x38f0 [ 275.893714][ T37] ? ida_alloc_range+0xa48/0xa80 [ 275.898670][ T37] ? __kmalloc_cache_noprof+0x23c/0x470 [ 275.998916][ T37] ? __cfi_ovl_fill_super+0x10/0x10 [ 276.004153][ T37] ? __kasan_check_write+0x18/0x20 [ 276.058907][ T37] ? mutex_unlock+0x90/0x240 [ 276.063539][ T37] ? __cfi_mutex_unlock+0x10/0x10 [ 276.068579][ T37] ? __kasan_check_write+0x18/0x20 [ 276.148911][ T37] ? _raw_spin_lock+0x92/0x120 [ 276.153725][ T37] ? sget_fc+0x9ce/0xad0 [ 276.157977][ T37] ? __cfi_set_anon_super_fc+0x10/0x10 [ 276.258911][ T37] get_tree_nodev+0xce/0x170 [ 276.263540][ T37] ? __cfi_ovl_fill_super+0x10/0x10 [ 276.268754][ T37] ovl_get_tree+0x20/0x30 [ 276.338933][ T37] vfs_get_tree+0xa1/0x290 [ 276.343395][ T37] do_new_mount+0x251/0xb30 [ 276.347912][ T37] ? security_capable+0x44/0x130 [ 276.438945][ T37] path_mount+0x682/0x1010 [ 276.443412][ T37] __se_sys_mount+0x2bf/0x480 [ 276.448104][ T37] ? __x64_sys_mount+0xf0/0xf0 [ 276.538914][ T37] ? __kasan_check_write+0x18/0x20 [ 276.544068][ T37] ? fpregs_restore_userregs+0x11c/0x260 [ 276.599338][ T37] __x64_sys_mount+0xc3/0xf0 [ 276.603976][ T37] x64_sys_call+0x2021/0x2ee0 [ 276.608667][ T37] do_syscall_64+0x57/0xf0 [ 276.679343][ T37] ? clear_bhb_loop+0x50/0xa0 [ 276.684068][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 276.748908][ T37] RIP: 0033:0x7f27f899bf79 [ 276.753358][ T37] RSP: 002b:00007f27f73f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 276.839354][ T37] RAX: ffffffffffffffda RBX: 00007f27f8c16090 RCX: 00007f27f899bf79 [ 276.847364][ T37] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 276.948908][ T37] RBP: 00007f27f8a327e0 R08: 0000200000000a00 R09: 0000000000000000 [ 276.956920][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.058918][ T37] R13: 00007f27f8c16128 R14: 00007f27f8c16090 R15: 00007ffef1ef0378 [ 277.066929][ T37]