last executing test programs: 1m34.674320901s ago: executing program 32 (id=186): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4605069e0dffffffffffffffff0200030009000000ca020000380000005e02000006040000fbff2000040003001e0400020000000051e57464142700000cf2000006000000e69c000006000000030000000800000051e57464fd"], 0xb8) close(r0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) (fail_nth: 14) 49.492618948s ago: executing program 1 (id=453): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x44, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x28, 0xe, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @challenge={0x10, 0x1, 0x3c}, @gcr_ga={0xbd, 0x6, @broadcast}, @measure_req={0x26, 0x14, {0x2, 0x0, 0xcf, "31e1fd0ae36d3095053ef898767bed682c"}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x24000890) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000005c0)={0x14, &(0x7f00000001c0)={0x0, 0xf, 0xa1, {0xa1, 0x30, "3ace727c20bc11a87681ae27881d5b3223abc60fdcc8112c3109b014fb25b2e95db3cc3c6cb803c963977d1bc57db4cbaee6bdc56f5ec3dd419e8d4d663a7e3e982f8e96586463f4065acaba5f8809f7df0ad94df32a6905ed443b2ac5f9855e83c92f94e18390c0f51dba57e6f39a64e9fec7dff8dce37ed0afb0a400db59013526291433af325602a30e36bfed9e271d5b143a51326150617bc14d501583"}}, &(0x7f0000000480)={0x0, 0x3, 0xc8, @string={0xc8, 0x3, "d559b95c57f791f413cf568793713481bce3d2d13ac67687a6701e18317c9b462a6c50b87535fb7be22dd8917583fa728057425354ad5aae0a9abc2543cf58deffefe8bbb7e051d101a18f85b74ce25f5bd2d6d7ee1b8e9aa25b44f2765aa8578d4506772d07b1f5e5012dd25262f8717854607c2bff6719f1b14b768108b4fdbed04037314b0b24c522e5dfc34ef783954c58f3a624c5391876f1441fbcba405b32a3951039979826d07cc78ea8a5365a1c9d0d99928c33497917734faa1b26c740fa0060f5"}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 47.24097855s ago: executing program 2 (id=470): time(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x3a) setxattr$security_evm(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) (async) setxattr$security_evm(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) 47.211516804s ago: executing program 2 (id=471): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000000)={0xb}, 0x8) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x5}, 0x1c) r1 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) ptrace(0x10, r1) sendmmsg$sock(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x18}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc004) write(r0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x82900, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000340)={0xffff1000, 0x90ad41ae5193074, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000006c0)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000740)='devtmpfs\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r5, 0xc138fd05, &(0x7f00000007c0)="0400000002000000000000007e0100003801") ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280), 0x2) r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x846a8a76a1f7ce0b, &(0x7f0000000640)="6ca7c475283b6978144651bbf72615eda622f9e0250b511ee30842953a58320cf0f725c8a885bd4d8ea23be1f469950867e241db0659dfd481b0e83b554601929a4a8ca0c3ccb6e3829a78f799a0a2023d8600a965ea438f0585a43396", 0x5d) ftruncate(r6, 0xffff) prlimit64(0x0, 0x7, &(0x7f0000000480)={0x0, 0x100}, 0x0) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 47.210369044s ago: executing program 2 (id=472): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) (async, rerun: 64) r1 = socket(0x1e, 0x4, 0x0) (rerun: 64) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) (async) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) (async) recvmmsg$unix(r1, &(0x7f00000006c0)=[{{&(0x7f00000000c0), 0x6e, &(0x7f0000000640)=[{&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000480)=""/126, 0x7e}, {&(0x7f0000000700)=""/53, 0x35}, {&(0x7f0000000540)=""/27, 0x1b}, {&(0x7f0000000580)=""/138, 0x8a}], 0x5}}], 0x1, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) (async) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0xd3, @none, 0x3}, 0xe) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000780)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000007c0)={'syzkaller1\x00', 0x1}) (async) write$tun(r3, &(0x7f0000000800)=ANY=[], 0x4a) (async) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async, rerun: 64) io_setup(0x5, &(0x7f0000000380)=0x0) (rerun: 64) io_submit(r6, 0x1, &(0x7f00000003c0)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0xe, r5, &(0x7f0000000440)='\f\v', 0x2, 0x0, 0x0, 0x4}]) (async, rerun: 64) recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/157, 0x9d}], 0x1, 0x0, 0x5e}, 0x6}], 0x1, 0x2002, 0x0) (async, rerun: 64) close(r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x2a, &(0x7f0000000000)=[{0xe66, 0x4}, {0x0, 0x0, 0xff, 0x40000100}]}) 47.106488834s ago: executing program 2 (id=473): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000002c0)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000380)={0x74, 0x0, 0x54}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 47.106259714s ago: executing program 2 (id=474): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1fd) r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000280)="3800000055000102000000000000000007000000010000002000010000000000800000000000000000000000000000000000000000000000640e", 0x3a) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) r2 = socket(0x1, 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000240)=@gcm_128={{0x303}, "4717a8f2defc2bf3", "222869a7a9f791c28829949068b10128", "e202e869", "8cec0617b63d3724"}, 0x28) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x3}, 0x8) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e1f, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) close(r3) syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write(r1, &(0x7f0000000100)='6', 0x32) 46.964060149s ago: executing program 2 (id=475): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0xffffffff, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x3, 0x1a, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, '\n'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x4, 0x0, 0x3, 0xc}, @sadb_address={0x5, 0x5, 0x3c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}, @sadb_key={0xa, 0x8, 0x220, 0x0, "67328c217950d4ed0ce9fd283e7a39cddf91db11b8d33fe41b6225fa8075fb71275ea059e57dbe5ddb41c0ece4532edb885207438d8c8ccd0b4736f5a7f78c02c19e54e1"}]}, 0xd0}, 0x1, 0x7}, 0x4) 46.467150901s ago: executing program 1 (id=476): socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000036c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) connect$inet(r0, &(0x7f0000003700)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003740)={{{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xfffc, 0xffff, 0x0, 0x2}, {0x0, 0x28c, 0x30, 0x0, 0x1, 0x3, 0x0, 0xc}, {0x7, 0x0, 0x1}, 0x0, 0x6e6bb1, 0x1, 0x0, 0x873f24456926a1a5}, {{@in=@rand_addr=0x64010102, 0x4d3, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x7fffffe, 0x3}}, 0xe8) sendmmsg(r0, &(0x7f0000003840), 0x800001d, 0x60002000) 46.358110622s ago: executing program 1 (id=478): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') lseek(r3, 0x20, 0x1) getdents(r3, 0x0, 0x48) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, &(0x7f0000000040)={0x8009, 0x8}) (async) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f010000000000000000000905810320000000000905820220000000000905030208"], 0x0) 45.093393843s ago: executing program 1 (id=483): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000002c0)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000380)={0x74, 0x0, 0x54}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 45.080517393s ago: executing program 1 (id=484): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1fd) r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000280)="3800000055000102000000000000000007000000010000002000010000000000800000000000000000000000000000000000000000000000640e", 0x3a) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) r2 = socket(0x1, 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000240)=@gcm_128={{0x303}, "4717a8f2defc2bf3", "222869a7a9f791c28829949068b10128", "e202e869", "8cec0617b63d3724"}, 0x28) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x3}, 0x8) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e1f, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) close(r3) syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) write(r1, &(0x7f0000000100)='6', 0x32) 44.713118422s ago: executing program 1 (id=486): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000180)={0x0, 0x0, 0x7fffffffffffffff, 0x6}) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="240000002100010000000000000000000a00000000000001016287632b6c1461fce900"/44], 0x24}], 0x1}, 0x0) mlockall(0x7) mlockall(0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) capset(&(0x7f0000000040)={0xf1504, r2}, &(0x7f0000000240)={0x0, 0x40000, 0x0, 0x81, 0x8, 0x800}) io_setup(0x6, &(0x7f0000000100)) 31.735706642s ago: executing program 33 (id=475): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0xffffffff, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x3, 0x1a, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, '\n'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x4, 0x0, 0x3, 0xc}, @sadb_address={0x5, 0x5, 0x3c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}, @sadb_key={0xa, 0x8, 0x220, 0x0, "67328c217950d4ed0ce9fd283e7a39cddf91db11b8d33fe41b6225fa8075fb71275ea059e57dbe5ddb41c0ece4532edb885207438d8c8ccd0b4736f5a7f78c02c19e54e1"}]}, 0xd0}, 0x1, 0x7}, 0x4) 29.117060122s ago: executing program 34 (id=486): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000180)={0x0, 0x0, 0x7fffffffffffffff, 0x6}) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="240000002100010000000000000000000a00000000000001016287632b6c1461fce900"/44], 0x24}], 0x1}, 0x0) mlockall(0x7) mlockall(0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) capset(&(0x7f0000000040)={0xf1504, r2}, &(0x7f0000000240)={0x0, 0x40000, 0x0, 0x81, 0x8, 0x800}) io_setup(0x6, &(0x7f0000000100)) 28.16837336s ago: executing program 3 (id=570): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000010000000000000001410000"], 0x34}}, 0x0) 28.153829422s ago: executing program 3 (id=571): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000700)={'vcan0\x00'}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000007c0)=0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000800)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000840)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@can={{0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "37c90c1f3501e462"}, 0x10}, 0x1, 0x0, 0x0, 0x248c5}, 0x11) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x60, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x94, r3, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x12}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x6f6}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_STA_WME={0x4c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xa}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xc}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x26}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x80}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 28.114134426s ago: executing program 3 (id=572): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000380)={0x74, 0x0, 0x54}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 28.058324022s ago: executing program 4 (id=574): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xd) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x44, 0x2, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000001c0)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@local, 0x402, 0x0, 0x0, 0x3}, &(0x7f0000000240)=0x20) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x80000029) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0xda0b79b762d5d64a, 0x4, 0x18a21e7e276e9fb2, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) getsockopt$inet6_int(r1, 0x29, 0x3e, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000180)={0xdd5, 0xc, 0x3}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x3, 0x6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty}}, @sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0xb}]}, 0xa0}}, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 28.058101762s ago: executing program 4 (id=575): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000100)={0x1, 0x8d6c30f34124690b, 0x55f}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000003c0)=0x100000001, 0x4) syz_clone(0x8000000, &(0x7f00000001c0)="8c101015d51b1392c94bee2c", 0xc, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="6a2c2f41ad4ada1f7c61b508174180d176340c1317dca11aa21d894ba835f9b54bc28e3c46a32455ecc5494e9c036c3c82b5add50d22eb87d8f60c22fdcf6829c3309145b5ff90bcacfa19ae33fc5133dd3ee0dd5b2b9ce61be5fe94a8f224e69fb74f84d12a757f289ec0c60a12da059815370f0a6981248d286b48085c8ac44e5a5d2986cd708bca92bafa2cda90149a2a7e7a2bd93df74f5694552852f2e9dde69d16b770fa8df0a5235e9e4d4a0e9a1031574ebdced7d790cf946a7033882bae155fc799669657ffd33dca25cc867bda114519c80ae084c93c096ffff6ea024307fb9adb1c441db7f751cd4b399f6cb277986aad0ef4") close_range(r0, 0xffffffffffffffff, 0x0) 28.057529532s ago: executing program 3 (id=576): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='oom_score_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000380)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5, 0x6}}, 0x30) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x8000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)={0x2, 0x0, [{0x4000, 0x97, &(0x7f0000000100)=""/151}, {0x6da0545f46239b8d, 0xaf, &(0x7f00000001c0)=""/175}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000280)=0x1) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000300)={@my=0x0}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000480)="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", 0x559, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000a00)='asymmetric\x00', &(0x7f0000000a40)=@chain) add_key(&(0x7f0000000a80)='asymmetric\x00', 0x0, &(0x7f0000000ac0)="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", 0x55a, r4) listen(r3, 0x9) 28.037479404s ago: executing program 3 (id=577): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1fd) r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000280)="3800000055000102000000000000000007000000010000002000010000000000800000000000000000000000000000000000000000000000640e", 0x3a) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) r2 = socket(0x1, 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000240)=@gcm_128={{0x303}, "4717a8f2defc2bf3", "222869a7a9f791c28829949068b10128", "e202e869", "8cec0617b63d3724"}, 0x28) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x3}, 0x8) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) close(r3) syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000100)='6', 0x32) 28.004979897s ago: executing program 3 (id=578): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000240)) ptrace$cont(0x21, r0, 0x5, 0x4) capset(&(0x7f0000000d80)={0x0, r0}, 0x0) r1 = add_key(&(0x7f0000000540)='asymmetric\x00', 0x0, &(0x7f0000000580)="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", 0x559, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000b00)={r1, 0x1}, &(0x7f0000000b40)=ANY=[@ANYBLOB='enc=pkcs1 hasJ=sha256\x00'/79], &(0x7f0000000bc0)='P', &(0x7f0000000c00)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e00010000000000000000000000002001000000000000000000000000000200000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff00000000000000000000000000000000000400000000000000ffffffffffffffff070000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001010600000000004400050000000000000000000000ffff00000000000000003c0000000200000000000000000000000000ffffac1e0101060000000403"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r4, 0x29, 0x1e, 0x0, &(0x7f0000000240)) keyctl$invalidate(0x15, r1) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 26.474478035s ago: executing program 4 (id=584): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000380)={0x74, 0x0, 0x54}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26.371929356s ago: executing program 4 (id=585): r0 = socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./mysys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x20102, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x3, &(0x7f0000000100)=0x5, 0xfdda) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4012011, r1, 0x0) mremap(&(0x7f0000407000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000071c000/0x1000)=nil) syz_clone(0x80007700, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000006940)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xffffffff, 0x0, 0x4}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000006980)={'vlan0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f00000069c0)={0x11, 0x88a8, r4, 0x1, 0x8}, 0x14) 26.323616961s ago: executing program 4 (id=586): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1fd) r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000280)="3800000055000102000000000000000007000000010000002000010000000000800000000000000000000000000000000000000000000000640e", 0x3a) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) r2 = socket(0x1, 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000240)=@gcm_128={{0x303}, "4717a8f2defc2bf3", "222869a7a9f791c28829949068b10128", "e202e869", "8cec0617b63d3724"}, 0x28) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x3}, 0x8) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) close(r3) syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000100)='6', 0x32) 26.283867075s ago: executing program 4 (id=587): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000400100000000000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00221800000005011500a38e41d54c098fc9010882008cc3c71d5f709501"], 0x0}, 0x0) 25.85488136s ago: executing program 5 (id=589): r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000010000000000000001410000"], 0x34}}, 0x0) 25.819703963s ago: executing program 5 (id=590): getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x29, 0x6, &(0x7f0000000200), 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x149000, 0x19a) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000100)={0x8, 0xffffffffffffffff, 0x8001, 0x7ffb, 0xb, 0x3}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x2c3}) 25.586507917s ago: executing program 5 (id=591): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001640), 0x80042, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000001680)={{0x2, 0xfffffffe}, {0xffffffffffffffff, 0x8}, 0x100001, 0x2}) 25.586273817s ago: executing program 5 (id=592): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000100)={0x1, 0x8d6c30f34124690b, 0x55f}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000003c0)=0x100000001, 0x4) syz_clone(0x8000000, &(0x7f00000001c0)="8c101015d51b1392c94bee2c", 0xc, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="6a2c2f41ad4ada1f7c61b508174180d176340c1317dca11aa21d894ba835f9b54bc28e3c46a32455ecc5494e9c036c3c82b5add50d22eb87d8f60c22fdcf6829c3309145b5ff90bcacfa19ae33fc5133dd3ee0dd5b2b9ce61be5fe94a8f224e69fb74f84d12a757f289ec0c60a12da059815370f0a6981248d286b48085c8ac44e5a5d2986cd708bca92bafa2cda90149a2a7e7a2bd93df74f5694552852f2e9dde69d16b770fa8df0a5235e9e4d4a0e9a1031574ebdced7d790cf946a7033882bae155fc799669657ffd33dca25cc867bda114519c80ae084c93c096ffff6ea024307fb9adb1c441db7f751cd4b399f6cb277986aad0ef4") close_range(r0, 0xffffffffffffffff, 0x0) 24.111587919s ago: executing program 5 (id=595): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1fd) r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000280)="3800000055000102000000000000000007000000010000002000010000000000800000000000000000000000000000000000000000000000640e", 0x3a) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) r2 = socket(0x1, 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000240)=@gcm_128={{0x303}, "4717a8f2defc2bf3", "222869a7a9f791c28829949068b10128", "e202e869", "8cec0617b63d3724"}, 0x28) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x3}, 0x8) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) close(r3) syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000100)='6', 0x32) 24.044301766s ago: executing program 5 (id=597): write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000000)={0xc, {0x58, "a9ce44f70264827e0a2b0c71cd0bbedf0380c309818c5dc6dd9ab3d98eb5938e2144ea5bf5f117264e0970eba64508d068377e2a749e36ba63e9470cc44a1800b8718e94520a06977ff295be23308070eb6adf7fbec15abe"}}, 0x5e) (async) r0 = syz_usb_connect$sierra_net(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x4, 0x2, 0x3ff, 0x2, 0x69, 0x3b}, {0x9, 0x5, 0x5, 0x2, 0x79f, 0x1d, 0x80, 0x9}, {0x9, 0x5, 0x4, 0x3, 0x3ff, 0xc, 0x0, 0x9}}}}}}]}}, 0x0) (async) r1 = syz_usb_connect$sierra_net(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x7, 0x2, 0x40, 0x9, 0x2, 0xe0}, {0x9, 0x5, 0x9, 0x2, 0x28, 0x9, 0x3, 0x79}, {0x9, 0x5, 0x80, 0x3, 0x40, 0x1, 0x6, 0x6}}}}}}]}}, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$OCFS2_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x1, 0x0, 0xfffffffffffffffb, 0x7, 0x8, 0x1}) (async) syz_usb_ep_read(r0, 0x6, 0x0, &(0x7f0000000180)) (async) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x60, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, &(0x7f0000000280)=0x7, 0x4) r4 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x2087, 0xf01, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x81, 0x80, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x7, 0x4, 0x1, {0x22, 0x7a}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0x44, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x8, 0x8, 0xf}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x110, 0xc, 0x9, 0x3, 0x0, 0x4}, 0x29, &(0x7f0000000340)={0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x3, 0x0, 0x8001, [0xc000, 0xc0d1, 0x0, 0xc030, 0xc030, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1c0a}}, {0xc7, &(0x7f0000000400)=@string={0xc7, 0x3, "3313499b781de334ab36faf47bd019f2a12ae4174f10dbe76e777d332d9fb5d621a29fa5eca0de1882dca7530091c7a4c4dc24dbd30b4628ebd4cac32f693eef1d38449fbb1885553cb82cbab6077874d3840894151b65cec396d48c71b545ec6495b13d1f6a1b412c6353dde434e1fb3716886348e61ea10bce883cbd32f20408e16bf887e219d25a130ec5b63e9886ec34f97d963ada552c9396e3e4825f41fce9785b5cac1a1a5317335b2ec23964216770de40072d93477e22dc2ddb9b7f264e29a15c"}}, {0xb3, &(0x7f0000000500)=@string={0xb3, 0x3, "bbfab36aca2c356c5abafbeefe66769bacc699dbf487e78b6c7866e329b97c633d3581391796d2906cd08aaf6ff5372ba4bfecdc88977170c3a2931e8ff55bd89deb6ff2ff137cd8976151407e4deac0a9d5854259b3ba2073674f7bf2611d0aaad9b814e00e40682d3e3898bb3f3d246c01faa2855b146331d7fa4aaf2d465a82d1195546e5e0aa245e577c5844c9ba720fcc5238bd37796b1557153f7dfe00cba969c947e530854771e2935028575c3a"}}, {0x17, &(0x7f00000005c0)=@string={0x17, 0x3, "cef4a37f96d480053b2bedbb680d84c3fb557e5b9e"}}, {0x75, &(0x7f0000000600)=@string={0x75, 0x3, "3d10c5c52af77e29d00b805edfc4c8d8de7f406bad146de463363e494bfb9426fffa72b3e10c7167f475f3d687648876b55cdf13c00c2bc80ef7ca1da13c21ee803a2a9ac39a4db3ff01cfa6b23c35ba2243ed2e9b4526432c677d3173702b4c3da53a859d5604debb685b379d58124fc6a50a"}}]}) syz_usb_control_io$hid(r4, &(0x7f00000008c0)={0x24, &(0x7f0000000700)={0x20, 0x23, 0xca, {0xca, 0xf, "58e096371ddef2b1bd6702861d5918421b4f1799dc124e25473c5b8ff9dfc0caaa89229e11e695cfc2a4b02ea4a242cd92fada8d99a2c9476fef46b12fd32692b3ff5e19f3f3bfd7755f8cefffb5678a9d6c2a5e615d826568f026eb757dfed6097e1d06d325ec5e827268ab34048dd2a7338892d0c75a6adfc62e2600b87f9777c2b3198ec2fa5ad41126f2f63c7f7c3170f3fd54141474fa29969c7554ccdd63595949f8e77b69b516d553624d509816ed6c9e0afd561e6d822a8284e41cd0f2fe2fd1ef62c3a5"}}, &(0x7f0000000800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}, &(0x7f0000000840)={0x0, 0x22, 0x20, {[@local=@item_012={0x0, 0x2, 0x8}, @global=@item_4={0x3, 0x1, 0x1, "674015df"}, @global=@item_4={0x3, 0x1, 0x7, "b3608f69"}, @main=@item_4={0x3, 0x0, 0x9, "45c8e7de"}, @local=@item_012={0x2, 0x2, 0x3, "d94f"}, @main=@item_4={0x3, 0x0, 0x9, "91d8dae1"}, @main=@item_012={0x2, 0x0, 0xc, "a237"}, @local=@item_4={0x3, 0x2, 0x0, "cd2e61fa"}]}}, &(0x7f0000000880)={0x0, 0x21, 0x9, {0x9, 0x21, 0x40, 0x1, 0x1, {0x22, 0x810}}}}, &(0x7f0000000bc0)={0x2c, &(0x7f0000000900)={0x60, 0x3, 0xe6, "e451274ad1c8adfe58ca0d30954f3613b717bf8634125d8519c2af8d1835fe30580348ecc4a8c2a51a0c0d89a9d1d2d4dd5ca25d3ded1976b218dbe1650609d2b4eea76c696a6b2ab3782897671ebd9624488adf906aca0fb9de6e328d3464bd7ce4e2101da1d1d724a9ae183decf2a094ed54ae2c8e1d4f753a94030f5972e8cf2b03df2093da1105c5f50a262187e58003089e7e5f2ad421478a411209b9a125c784def2f95f9e011c3a02765888f30a0fed80f91ec874e90c5a8a6b9bcd3509bc8418d2378a16166a46218b6280381a7bcf9f2037c8ea5e9a3f5ef952ccb8ffc0fcc40e42"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000a80)={0x20, 0x1, 0xd2, "de4ec58eab5a05a1589bf927fe9815a3060267584967a6b11856f9fcea035d20eef53ab35a0710561ae09dd9b6d16ccae21f29caf0542f5a03912a3291e28e8eef329560be3c5ccf6385d33b759650fdc48fd53f08da96cc91a63fde4c09c9ebcfd41ada639e1466f4c615414f5d047dc84c812189a2361b070cf10477b2d8780bb19e52d0aed0bd8369634707e27026e8f2619c2d8a408fd5a358c22957f33507d53b9c616a5ef2feeb3eda4c0185fac8e0ebf79aed8f62a1cf8f92658edc4918cd212b9ebfe792297af23ae0dce2bcc34c"}, &(0x7f0000000b80)={0x20, 0x3, 0x1, 0x6c}}) mount(&(0x7f0000000c00)=@nullb, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)='configfs\x00', 0x102080, &(0x7f0000000cc0)='\x00') r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000d40)={'vxcan1\x00', 0x6820}) (async) syz_usb_ep_read(r1, 0x6, 0x58, &(0x7f0000000d80)=""/88) (async) pivot_root(&(0x7f0000000e00)='./file1\x00', &(0x7f0000000e40)='./file0\x00') syz_open_dev$ptys(0xc, 0x3, 0x1) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000e80)={{0xa, 0x4e21, 0xba8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ec}, {0xa, 0x4e23, 0xa137, @mcast1, 0x8}, 0xffffffffffffffff, {[0x6, 0x8, 0xcec7, 0x5, 0xc, 0x73, 0x8001, 0x2]}}, 0x5c) write$UHID_INPUT2(r5, &(0x7f0000000f00)={0xc, {0x82, "bf5a292721f31f1db471a2832fae213c76cf43dcabd933bd6846e80d6b000b39875fe165474444bbfa6bbc7c4cee30793d22ac771e8242f6a1e6203a44aacee630ffe64d9ef0302bf3cc47b219fce7bc4189009b1bd2c06c279e3285fd5a8d6f08829f3b4830d6671da528fcc6fb069b216d6683dfccd2bfcbc8d1c02621c1b0d736"}}, 0x88) (async) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000fc0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000001000)={{r2}, r6, 0xe, @unused=[0xad, 0x6, 0x1, 0x8], @name="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"}) (async) read$FUSE(r5, &(0x7f0000002000)={0x2020}, 0x2020) (async) mount$overlay(0x0, &(0x7f0000004040)='./file0\x00', &(0x7f0000004080), 0x4000, &(0x7f00000040c0)={[{@nfs_export_on}, {@redirect_dir_off}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}, {@verity_require}], [{@dont_appraise}, {@subj_role={'subj_role', 0x3d, '[[[/'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}) (async) r7 = syz_usb_connect$midi(0x0, 0xf5, &(0x7f0000004140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x4151, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe3, 0x1, 0x1, 0x1, 0x40, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x20, 0x9, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x2, 0xfc}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x3, 0x5}, @midi_out_jack={0xd, 0x24, 0x3, 0x2, 0x8, 0x3, [{0x7, 0x9}, {0x5, 0x6}, {0x43, 0x5}], 0x74}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x8, 0x7}, @midi_out_jack={0xd, 0x24, 0x3, 0x2, 0x4, 0x3, [{0x0, 0x7e}, {0x3, 0x54}, {0x9, 0x4}], 0x1}, @midi_out_jack={0x17, 0x24, 0x3, 0x1, 0xb6, 0x8, [{0x5d, 0x7}, {0x4, 0xfd}, {0x5, 0x8}, {0x6, 0x7d}, {0x9, 0xe}, {0x3, 0x7}, {0x9e, 0x5}, {0x0, 0x1}], 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x7}], [{{0x9, 0x5, 0xd, 0x10, 0x10, 0x6, 0xf1, 0xf8, {0x7, 0x25, 0x1, 0x3, "53ec49"}}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0xb7, 0x5, 0xfc, {0x7, 0x25, 0x1, 0x3, "8babdf"}}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0xe, 0x9, 0x32, {0x6, 0x25, 0x1, 0x2, "e339"}}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x6a, 0x5, 0x6, {0x5, 0x25, 0x1, 0x1, "a1"}}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x5, 0x9, {0x11, 0x25, 0x1, 0xd, "c51f6f69df40b8700fc8f11af1"}}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x2, 0x6, 0x6, {0x8, 0x25, 0x1, 0x4, "70224f81"}}}, {{0x9, 0x5, 0x6, 0x2, 0x7af, 0x0, 0x4, 0x0, {0xa, 0x25, 0x1, 0x6, "b66dcdc59896"}}}, {{0x9, 0x5, 0x0, 0x4, 0x7ff, 0x5, 0xc0, 0x81, {0x4}}}]}}}}}]}}, &(0x7f00000044c0)={0xa, &(0x7f0000004240)={0xa, 0x6, 0x300, 0x8, 0xf1, 0x9, 0x40, 0x5}, 0x2c, &(0x7f0000004280)={0x5, 0xf, 0x2c, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x7f, 0x1, 0x401, 0xf00, 0x2d95, [0x30]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x2, 0x9, 0x7}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x6, 0x3, 0x28f}, @ptm_cap={0x3}]}, 0x5, [{0x98, &(0x7f00000042c0)=@string={0x98, 0x3, "5458752cfe2ec43f362f96055edc1f2c44f4bc9a77168b62fcd278d8e543f1cc86274c03d451b02d0a092d98422a0ff59fc4e9edf5ae6aa8b18ee603b592c5d14ae38a2363fa172d0fd14742e73df0c0c19271c3f3d52a1f88336c284bad8640328c5dc724d25b7082bacb1738150e497a2f482813aa81cc4bbd343736e61754496ecd449d3b0622fe169ea912326b432f20447391e6"}}, {0x4, &(0x7f0000004380)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f00000043c0)=@lang_id={0x4, 0x3, 0x406}}, {0x49, &(0x7f0000004400)=@string={0x49, 0x3, "85f5e236e76db88e8801f59c21b72eba5ec030317c80814a551821a3e1b54d9ec97542a7399639b999ac5ca14a437019aa3245a87c25f23b6136265208aa481add298020d8f7d7"}}, {0x4, &(0x7f0000004480)=@lang_id={0x4, 0x3, 0x414}}]}) syz_usb_control_io$rtl8150(r7, &(0x7f0000004600)={0x14, &(0x7f0000004540)={0x40, 0xd, 0x50, {0x50, 0x9, "fc0ef947c5fdee0857dd56132fe2f3a01f6a25fa3d8c030019cfc16136f2adf9cd3c31b51f6f2f9f9585b5d53cf09515eac47c5756d5302208497e5e7e04a25d04765cc3a3f6b990f78973263542"}}, &(0x7f00000045c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}}, &(0x7f00000047c0)={0x2c, &(0x7f0000004640)={0x40, 0x17, 0x4f, "7d9b42d8b43b383964cc3e0660bc0d58cfae365f73ced8557a4cad833b35d34391588c27a5d7d489e45383c5ba1d95a0002299f76364e122b13b62ec0cf35208ff240752a8f7300b91e4cebc5f354c"}, &(0x7f00000046c0)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000004700)={0x0, 0x8, 0x1, 0xdd}, &(0x7f0000004740), &(0x7f0000004780)={0x40, 0x5, 0x6, "b4418c74a8ef"}}) (async) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f00000048c0)={{r5}, r6, 0xe, @inherit={0x88, &(0x7f0000004800)={0x0, 0x8, 0x3ff, 0xc54, {0x20, 0xffffffffffffffa6, 0x8, 0x6, 0xe}, [0x0, 0x93, 0x3, 0x4, 0x8, 0x5, 0x7, 0x8]}}, @name="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"}) (async) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000005940)={{r5}, r6, 0x2, @inherit={0x48, &(0x7f00000058c0)={0x0, 0x0, 0x6, 0xffff, {0x0, 0xf, 0x1, 0x5, 0xffffffff}}}, @subvolid=0x10}) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000006940)=0x3, 0x4) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) (async) r8 = syz_usb_connect$uac2(0x0, 0xd6, &(0x7f0000006980)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4, 0x3, 0x1, 0x9, 0x80, 0xff, {0x8, 0xb, 0x1, 0x1, 0x1, 0x0, 0x20, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1000, 0xc, 0x4d, 0x5}, [@feature_unit={0xf, 0x24, 0x6, 0x2, 0x5, [0xb, 0x9, 0x1, 0x7, 0x4]}, @selector_unit={0x7, 0x24, 0xb, 0xe, 0x2, "988b"}, @extension_unit={0x7, 0x24, 0x9, 0x5, 0x6, 0x7a}, @feature_unit={0xf, 0x24, 0x6, 0x6, 0x2, [0x0, 0x8, 0x3, 0x8, 0x7]}, @input_terminal={0x10, 0x24, 0x2, 0x5, 0x1ff, 0x6, 0xf2, 0x2, 0xfffffffa, 0xd3, 0x9, 0x2}, @extension_unit={0x8, 0x24, 0x9, 0x5, 0x4, 0x5, '4'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x80, 0x25, 0x5, 0x8, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x7, 0x6, 0x76, {0x8, 0x25, 0x1, 0x42, 0x30, 0x9, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x4, 0x4, 0x29, "8b6343019c12"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7, 0xff, 0x4, {0x8, 0x25, 0x1, 0x0, 0x33, 0x6, 0x7}}}}}}}}]}}, &(0x7f0000006e40)={0xa, &(0x7f0000006a80)={0xa, 0x6, 0x250, 0x6, 0x3, 0x3, 0x20, 0x7}, 0x6b, &(0x7f0000006ac0)={0x5, 0xf, 0x6b, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0xf, 0x9, 0xdfe}, @generic={0x49, 0x10, 0x4, "a5ca9c21456ef315c71b0737378aa933034ae54a02696a8723924ca0a7a7fba46e7cb2bfc2ff6f5f1ef1ffdd35017a288a4306668c7e8c4fe5a3a8a807e4acaffbb8a4298e71"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x5, 0xb, 0x9, 0xac}, @wireless={0xb, 0x10, 0x1, 0xc, 0x41, 0xed, 0x7f, 0xffff, 0x1}]}, 0x7, [{0x4, &(0x7f0000006b40)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000006b80)=@lang_id={0x4, 0x3, 0x140a}}, {0x77, &(0x7f0000006bc0)=@string={0x77, 0x3, "60dba1d025517422ad2c32d5475bea1a719af0ec899dccec8e44db86fbed508ff6839002af9b67e50b434db9b02fdd64d80b13f27f26180d0be51ac5ea6f0bece73e1cc02aba5d7bfd202b9b2f7c47f69733e258326599a8550262b7783893f099f15f7fe38ad497af5e8bd4985dba9b0b959e6d4d"}}, {0xe1, &(0x7f0000006c40)=@string={0xe1, 0x3, "e9dbfd92dc6662439653b162515b8f0eb187c3932feed4a572caff8109b76efb7d345d7d8c5847aa41175977e577c95e8ece54e3d03dbc01487ee6583a1365e9b5f0aa0cb6416ed46c004de1deff7bff07b110061b17043f6ec98f0f1d2bc57899b3f38d8c36025cdfe527ec9f5b7ae776c5c57e96e02a6094ef71b81a591410f656235017a1616f988f7b381ce1d8ead4328f9b60c57d189291c48eb5e5599c0b8416f20d59b82fd260e9a25aa7b7fdc92150aea02b9442cbc5c7c424cbdd0393f4cfb7f4936125e9ec262efb1a41203d0f15466552e3774a821d5c3c0746"}}, {0x5b, &(0x7f0000006d40)=@string={0x5b, 0x3, "a4d82b7b1fd9250f5defb7cb53ccee38a491a63994f840eda221c443c17066fc0797ca91eefe872a85db8b286141764726990ce5046b34ac9d1f5ad3da2d71e56d456aa885fdb5c09cee77f0f52709c282541dbd954faead75"}}, {0x4, &(0x7f0000006dc0)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000006e00)=@lang_id={0x4, 0x3, 0x44d}}]}) syz_usb_ep_read(r8, 0x40, 0x2, &(0x7f0000006ec0)=""/2) 12.518244277s ago: executing program 35 (id=578): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000240)) ptrace$cont(0x21, r0, 0x5, 0x4) capset(&(0x7f0000000d80)={0x0, r0}, 0x0) r1 = add_key(&(0x7f0000000540)='asymmetric\x00', 0x0, &(0x7f0000000580)="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", 0x559, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000b00)={r1, 0x1}, &(0x7f0000000b40)=ANY=[@ANYBLOB='enc=pkcs1 hasJ=sha256\x00'/79], &(0x7f0000000bc0)='P', &(0x7f0000000c00)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e00010000000000000000000000002001000000000000000000000000000200000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff00000000000000000000000000000000000400000000000000ffffffffffffffff070000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001010600000000004400050000000000000000000000ffff00000000000000003c0000000200000000000000000000000000ffffac1e0101060000000403"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r4, 0x29, 0x1e, 0x0, &(0x7f0000000240)) keyctl$invalidate(0x15, r1) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 11.825009989s ago: executing program 7 (id=622): r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000000000000014100000018001700000021000000"], 0x34}}, 0x0) 11.755163576s ago: executing program 7 (id=625): socket(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000004900)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000004940)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000004980)='./file0\x00', &(0x7f00000049c0)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f0000004a00)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000004a40)='./file0\x00', &(0x7f0000004a80)='./file0\x00', 0x0, 0x2125099, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000004ac0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004b00)={0x2020}, 0x2020) (async) personality(0xfe47fef9f5ff7379) uname(&(0x7f0000000040)=""/47) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x802, 0x165) write(r2, &(0x7f00000001c0)='100', 0x3) (async) add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES16=r1], 0x78}, 0x1, 0x7}, 0x0) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r3, 0x22ebf000) (async) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0x77, 0x101301) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="a1", 0x1}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) (async) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x400000, 0x3) (async) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x80, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='`y']) 11.733400408s ago: executing program 7 (id=626): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42c40, 0xa0) setrlimit(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file1\x00', 0x20fffbfffc) finit_module(r0, 0x0, 0x1) sendmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="2edc5fe408399b87d0379357ed0390f5ac27fc665299106117beba2dc77a13d916c3a05297787f", 0x27}, {&(0x7f0000001100)="c99adca747f2adb82439abe7b67e6a4417d095bfd105a9ef9407c5871d60dbd067deaf8183647f2ac051b3b076145d01850bf0257154800cd2b2df3a664ba62a7a0e64a3156865bfa503119a7ab043608339de1201702d66f235c2016f2bf0985dc3e12939e91e2f93197aee0be8cca904a370a7d7d146ab7222bc4e653e420deae0b5eebca46a9ecaaee0ac7fa523278f1fcd1e39d761200a394fd1d1fae8ed1869267826514125df2752398dc38be99549758a478b2ee08c4e67f86287f7ca09ef31836bd5d490b55a8863c89bc89bf80443", 0xd3}, {&(0x7f0000001200)="aee928898103978ed187fac7e2aaff19009956fddee9c0a5267a", 0x1a}, {&(0x7f0000001240)="614d3f84864ef1f64123b8fe9298fc67ef3c44436d80d16e25e2918c3fc79316ccf64098b5ef7b1e0a", 0x29}, {&(0x7f0000001280)="7af49298fdc8b03542746a9067e8787ae5e9d4d04e7be88cab345a945fd1137510154b7ecfe24cfa1212798d09e2bdbe0f96738872f9685a0ff065e4c1ce73f0f0dc8e15bd623127afd1e9c4610ba63187134741fb0372e77fad8d1995f51bdf6ba92adf948bec4e9d72119971f25050d8ffae73a1dbc99de12fa6", 0x7b}, {&(0x7f0000001300)="e81c63f5a83a71678a599c4ba341f30817328705992ee5c4f1c469c1f4dbf51244e2b706bc182f44a2d7065a2c91842c639c67a6e55e85ca01232b2cd62cb5ebf9d6b78eb80d82f0869a56de6a0f5fba3cdbc2e0f6b7b437cfc688191fe87d73f5aa6b8805b4adc6c370f18440fdd3f53687ad54f639b19c8163add395747db83a57", 0x82}, {&(0x7f00000013c0)="9c809ade62fe0e48224aa05043ddfe0786e724f78d95277ca32befb8af0e3dd7d76044270f881187f3a5c1e9d22f3ddcc592a9f9109a65a9f20dd04c9088a9721ad064a6217e489b4d9a3f38b707c0714de6c20b21bcb69771e2c2e7779966c2c9c45f829ca7d0603d8faa521c64769a5050e90bf8214f524b00bc987bcae664528809418942e54140ebcfc549a09cd3bb3be195f14bd10da5b11ff9b0904be7c368cee321", 0xa5}], 0x8}, 0xc000) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, &(0x7f0000003a40)) 11.566398005s ago: executing program 7 (id=628): mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000100)='6', 0x32) socket$tipc(0x1e, 0x2, 0x0) 11.513261941s ago: executing program 36 (id=628): mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000100)='6', 0x32) socket$tipc(0x1e, 0x2, 0x0) 11.252610247s ago: executing program 37 (id=587): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000400100000000000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00221800000005011500a38e41d54c098fc9010882008cc3c71d5f709501"], 0x0}, 0x0) 9.008369939s ago: executing program 38 (id=597): write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000000)={0xc, {0x58, "a9ce44f70264827e0a2b0c71cd0bbedf0380c309818c5dc6dd9ab3d98eb5938e2144ea5bf5f117264e0970eba64508d068377e2a749e36ba63e9470cc44a1800b8718e94520a06977ff295be23308070eb6adf7fbec15abe"}}, 0x5e) (async) r0 = syz_usb_connect$sierra_net(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x4, 0x2, 0x3ff, 0x2, 0x69, 0x3b}, {0x9, 0x5, 0x5, 0x2, 0x79f, 0x1d, 0x80, 0x9}, {0x9, 0x5, 0x4, 0x3, 0x3ff, 0xc, 0x0, 0x9}}}}}}]}}, 0x0) (async) r1 = syz_usb_connect$sierra_net(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x7, 0x2, 0x40, 0x9, 0x2, 0xe0}, {0x9, 0x5, 0x9, 0x2, 0x28, 0x9, 0x3, 0x79}, {0x9, 0x5, 0x80, 0x3, 0x40, 0x1, 0x6, 0x6}}}}}}]}}, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$OCFS2_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x1, 0x0, 0xfffffffffffffffb, 0x7, 0x8, 0x1}) (async) syz_usb_ep_read(r0, 0x6, 0x0, &(0x7f0000000180)) (async) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x60, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, &(0x7f0000000280)=0x7, 0x4) r4 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x2087, 0xf01, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x81, 0x80, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x7, 0x4, 0x1, {0x22, 0x7a}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0x44, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x8, 0x8, 0xf}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x110, 0xc, 0x9, 0x3, 0x0, 0x4}, 0x29, &(0x7f0000000340)={0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x3, 0x0, 0x8001, [0xc000, 0xc0d1, 0x0, 0xc030, 0xc030, 0xf]}]}, 0x6, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1c0a}}, {0xc7, &(0x7f0000000400)=@string={0xc7, 0x3, "3313499b781de334ab36faf47bd019f2a12ae4174f10dbe76e777d332d9fb5d621a29fa5eca0de1882dca7530091c7a4c4dc24dbd30b4628ebd4cac32f693eef1d38449fbb1885553cb82cbab6077874d3840894151b65cec396d48c71b545ec6495b13d1f6a1b412c6353dde434e1fb3716886348e61ea10bce883cbd32f20408e16bf887e219d25a130ec5b63e9886ec34f97d963ada552c9396e3e4825f41fce9785b5cac1a1a5317335b2ec23964216770de40072d93477e22dc2ddb9b7f264e29a15c"}}, {0xb3, &(0x7f0000000500)=@string={0xb3, 0x3, "bbfab36aca2c356c5abafbeefe66769bacc699dbf487e78b6c7866e329b97c633d3581391796d2906cd08aaf6ff5372ba4bfecdc88977170c3a2931e8ff55bd89deb6ff2ff137cd8976151407e4deac0a9d5854259b3ba2073674f7bf2611d0aaad9b814e00e40682d3e3898bb3f3d246c01faa2855b146331d7fa4aaf2d465a82d1195546e5e0aa245e577c5844c9ba720fcc5238bd37796b1557153f7dfe00cba969c947e530854771e2935028575c3a"}}, {0x17, &(0x7f00000005c0)=@string={0x17, 0x3, "cef4a37f96d480053b2bedbb680d84c3fb557e5b9e"}}, {0x75, &(0x7f0000000600)=@string={0x75, 0x3, "3d10c5c52af77e29d00b805edfc4c8d8de7f406bad146de463363e494bfb9426fffa72b3e10c7167f475f3d687648876b55cdf13c00c2bc80ef7ca1da13c21ee803a2a9ac39a4db3ff01cfa6b23c35ba2243ed2e9b4526432c677d3173702b4c3da53a859d5604debb685b379d58124fc6a50a"}}]}) syz_usb_control_io$hid(r4, &(0x7f00000008c0)={0x24, &(0x7f0000000700)={0x20, 0x23, 0xca, {0xca, 0xf, "58e096371ddef2b1bd6702861d5918421b4f1799dc124e25473c5b8ff9dfc0caaa89229e11e695cfc2a4b02ea4a242cd92fada8d99a2c9476fef46b12fd32692b3ff5e19f3f3bfd7755f8cefffb5678a9d6c2a5e615d826568f026eb757dfed6097e1d06d325ec5e827268ab34048dd2a7338892d0c75a6adfc62e2600b87f9777c2b3198ec2fa5ad41126f2f63c7f7c3170f3fd54141474fa29969c7554ccdd63595949f8e77b69b516d553624d509816ed6c9e0afd561e6d822a8284e41cd0f2fe2fd1ef62c3a5"}}, &(0x7f0000000800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}, &(0x7f0000000840)={0x0, 0x22, 0x20, {[@local=@item_012={0x0, 0x2, 0x8}, @global=@item_4={0x3, 0x1, 0x1, "674015df"}, @global=@item_4={0x3, 0x1, 0x7, "b3608f69"}, @main=@item_4={0x3, 0x0, 0x9, "45c8e7de"}, @local=@item_012={0x2, 0x2, 0x3, "d94f"}, @main=@item_4={0x3, 0x0, 0x9, "91d8dae1"}, @main=@item_012={0x2, 0x0, 0xc, "a237"}, @local=@item_4={0x3, 0x2, 0x0, "cd2e61fa"}]}}, &(0x7f0000000880)={0x0, 0x21, 0x9, {0x9, 0x21, 0x40, 0x1, 0x1, {0x22, 0x810}}}}, &(0x7f0000000bc0)={0x2c, &(0x7f0000000900)={0x60, 0x3, 0xe6, "e451274ad1c8adfe58ca0d30954f3613b717bf8634125d8519c2af8d1835fe30580348ecc4a8c2a51a0c0d89a9d1d2d4dd5ca25d3ded1976b218dbe1650609d2b4eea76c696a6b2ab3782897671ebd9624488adf906aca0fb9de6e328d3464bd7ce4e2101da1d1d724a9ae183decf2a094ed54ae2c8e1d4f753a94030f5972e8cf2b03df2093da1105c5f50a262187e58003089e7e5f2ad421478a411209b9a125c784def2f95f9e011c3a02765888f30a0fed80f91ec874e90c5a8a6b9bcd3509bc8418d2378a16166a46218b6280381a7bcf9f2037c8ea5e9a3f5ef952ccb8ffc0fcc40e42"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000a80)={0x20, 0x1, 0xd2, "de4ec58eab5a05a1589bf927fe9815a3060267584967a6b11856f9fcea035d20eef53ab35a0710561ae09dd9b6d16ccae21f29caf0542f5a03912a3291e28e8eef329560be3c5ccf6385d33b759650fdc48fd53f08da96cc91a63fde4c09c9ebcfd41ada639e1466f4c615414f5d047dc84c812189a2361b070cf10477b2d8780bb19e52d0aed0bd8369634707e27026e8f2619c2d8a408fd5a358c22957f33507d53b9c616a5ef2feeb3eda4c0185fac8e0ebf79aed8f62a1cf8f92658edc4918cd212b9ebfe792297af23ae0dce2bcc34c"}, &(0x7f0000000b80)={0x20, 0x3, 0x1, 0x6c}}) mount(&(0x7f0000000c00)=@nullb, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)='configfs\x00', 0x102080, &(0x7f0000000cc0)='\x00') r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000d40)={'vxcan1\x00', 0x6820}) (async) syz_usb_ep_read(r1, 0x6, 0x58, &(0x7f0000000d80)=""/88) (async) pivot_root(&(0x7f0000000e00)='./file1\x00', &(0x7f0000000e40)='./file0\x00') syz_open_dev$ptys(0xc, 0x3, 0x1) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000e80)={{0xa, 0x4e21, 0xba8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ec}, {0xa, 0x4e23, 0xa137, @mcast1, 0x8}, 0xffffffffffffffff, {[0x6, 0x8, 0xcec7, 0x5, 0xc, 0x73, 0x8001, 0x2]}}, 0x5c) write$UHID_INPUT2(r5, &(0x7f0000000f00)={0xc, {0x82, "bf5a292721f31f1db471a2832fae213c76cf43dcabd933bd6846e80d6b000b39875fe165474444bbfa6bbc7c4cee30793d22ac771e8242f6a1e6203a44aacee630ffe64d9ef0302bf3cc47b219fce7bc4189009b1bd2c06c279e3285fd5a8d6f08829f3b4830d6671da528fcc6fb069b216d6683dfccd2bfcbc8d1c02621c1b0d736"}}, 0x88) (async) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000fc0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000001000)={{r2}, r6, 0xe, @unused=[0xad, 0x6, 0x1, 0x8], @name="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"}) (async) read$FUSE(r5, &(0x7f0000002000)={0x2020}, 0x2020) (async) mount$overlay(0x0, &(0x7f0000004040)='./file0\x00', &(0x7f0000004080), 0x4000, &(0x7f00000040c0)={[{@nfs_export_on}, {@redirect_dir_off}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}, {@verity_require}], [{@dont_appraise}, {@subj_role={'subj_role', 0x3d, '[[[/'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}) (async) r7 = syz_usb_connect$midi(0x0, 0xf5, &(0x7f0000004140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x4151, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe3, 0x1, 0x1, 0x1, 0x40, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x20, 0x9, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x2, 0xfc}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x3, 0x5}, @midi_out_jack={0xd, 0x24, 0x3, 0x2, 0x8, 0x3, [{0x7, 0x9}, {0x5, 0x6}, {0x43, 0x5}], 0x74}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x8, 0x7}, @midi_out_jack={0xd, 0x24, 0x3, 0x2, 0x4, 0x3, [{0x0, 0x7e}, {0x3, 0x54}, {0x9, 0x4}], 0x1}, @midi_out_jack={0x17, 0x24, 0x3, 0x1, 0xb6, 0x8, [{0x5d, 0x7}, {0x4, 0xfd}, {0x5, 0x8}, {0x6, 0x7d}, {0x9, 0xe}, {0x3, 0x7}, {0x9e, 0x5}, {0x0, 0x1}], 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x7}], [{{0x9, 0x5, 0xd, 0x10, 0x10, 0x6, 0xf1, 0xf8, {0x7, 0x25, 0x1, 0x3, "53ec49"}}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0xb7, 0x5, 0xfc, {0x7, 0x25, 0x1, 0x3, "8babdf"}}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0xe, 0x9, 0x32, {0x6, 0x25, 0x1, 0x2, "e339"}}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x6a, 0x5, 0x6, {0x5, 0x25, 0x1, 0x1, "a1"}}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x5, 0x9, {0x11, 0x25, 0x1, 0xd, "c51f6f69df40b8700fc8f11af1"}}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x2, 0x6, 0x6, {0x8, 0x25, 0x1, 0x4, "70224f81"}}}, {{0x9, 0x5, 0x6, 0x2, 0x7af, 0x0, 0x4, 0x0, {0xa, 0x25, 0x1, 0x6, "b66dcdc59896"}}}, {{0x9, 0x5, 0x0, 0x4, 0x7ff, 0x5, 0xc0, 0x81, {0x4}}}]}}}}}]}}, &(0x7f00000044c0)={0xa, &(0x7f0000004240)={0xa, 0x6, 0x300, 0x8, 0xf1, 0x9, 0x40, 0x5}, 0x2c, &(0x7f0000004280)={0x5, 0xf, 0x2c, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x7f, 0x1, 0x401, 0xf00, 0x2d95, [0x30]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x2, 0x9, 0x7}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x6, 0x3, 0x28f}, @ptm_cap={0x3}]}, 0x5, [{0x98, &(0x7f00000042c0)=@string={0x98, 0x3, "5458752cfe2ec43f362f96055edc1f2c44f4bc9a77168b62fcd278d8e543f1cc86274c03d451b02d0a092d98422a0ff59fc4e9edf5ae6aa8b18ee603b592c5d14ae38a2363fa172d0fd14742e73df0c0c19271c3f3d52a1f88336c284bad8640328c5dc724d25b7082bacb1738150e497a2f482813aa81cc4bbd343736e61754496ecd449d3b0622fe169ea912326b432f20447391e6"}}, {0x4, &(0x7f0000004380)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f00000043c0)=@lang_id={0x4, 0x3, 0x406}}, {0x49, &(0x7f0000004400)=@string={0x49, 0x3, "85f5e236e76db88e8801f59c21b72eba5ec030317c80814a551821a3e1b54d9ec97542a7399639b999ac5ca14a437019aa3245a87c25f23b6136265208aa481add298020d8f7d7"}}, {0x4, &(0x7f0000004480)=@lang_id={0x4, 0x3, 0x414}}]}) syz_usb_control_io$rtl8150(r7, &(0x7f0000004600)={0x14, &(0x7f0000004540)={0x40, 0xd, 0x50, {0x50, 0x9, "fc0ef947c5fdee0857dd56132fe2f3a01f6a25fa3d8c030019cfc16136f2adf9cd3c31b51f6f2f9f9585b5d53cf09515eac47c5756d5302208497e5e7e04a25d04765cc3a3f6b990f78973263542"}}, &(0x7f00000045c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}}, &(0x7f00000047c0)={0x2c, &(0x7f0000004640)={0x40, 0x17, 0x4f, "7d9b42d8b43b383964cc3e0660bc0d58cfae365f73ced8557a4cad833b35d34391588c27a5d7d489e45383c5ba1d95a0002299f76364e122b13b62ec0cf35208ff240752a8f7300b91e4cebc5f354c"}, &(0x7f00000046c0)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000004700)={0x0, 0x8, 0x1, 0xdd}, &(0x7f0000004740), &(0x7f0000004780)={0x40, 0x5, 0x6, "b4418c74a8ef"}}) (async) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f00000048c0)={{r5}, r6, 0xe, @inherit={0x88, &(0x7f0000004800)={0x0, 0x8, 0x3ff, 0xc54, {0x20, 0xffffffffffffffa6, 0x8, 0x6, 0xe}, [0x0, 0x93, 0x3, 0x4, 0x8, 0x5, 0x7, 0x8]}}, @name="3ba2d8decc9c6241a9b528ab9fff14ac6bcf8778f9b0772790d8d67a6ebbb19a7e2a06eaf48b0a350dbe86d9b763f8b6f8e84a1a10977131e33eec43e7722b5b699a5a2e360ee91d17adce0ff3e03a4ba1d1e272cdd4af00c87d288857747af4a5b74bc3712b838407a8e5e4fe8553b54e7ba41eb35929816c5565d3e2a322989a59e0be16bcef6d4898ea738461d4e1a239225dc434259129d22b58cbde08fe28b429f3f65e5ee217c0d15d2e6ea21c916b652a9443747255e751bdfa5440c7c7f61c434fde7945e55e5998dcaaee392f2abf408668c671845f0340fd9284b07f24ef63bd2abaee2dcc6237852cdca867e6798738f4294d8740abf63cf5bc84a2da711bf71da19573f7aa67c2cf98df6e19f9ec0eae90026013da22e92c0314c63a90e8aeeb5e71f4cc0a8c9addea502f04dfdc27e5202020d23add308d941abe4267a9991439ce355a9aafe6dd2cbb52f30d81647889da068c1c381e4170eaa5d5d6d7507e4dfd7446196a600cafb32e0a848acad1e791ddd6561b4471532c0bc9c752a2ef8efcc5feaef1fb887af7227eac6383d0d9850e48bb836ae8c6b5045374844ad128789a28f633aa73d63909ba99f7af5694aa577a048b9aaba70e7734ee752b0305480cdd0cc0a85c0882533b9f0bef1fea0c0d59cc1cc3ab1abc185eceb0f386ab319a324239ce5df61aa34d72dffc1a4c9888a48d184b19bc527171c38f414d89e06dc8ba7fecaea492fd057402f6738dbd47d23c1a9b625266fd645bf199d500a95d24eb7a6b377501b1214e7188bfefabb3545a5f7c8f968c963f7657694f1a1956298302ab849597726d54ec67238a227f55576c5abdf4685e2ad2d91ec6ba328f2e37bc3832eedbb92c4dcf87c8a5ded54ac1882511a62edd34f47816d507f54f63b00e7f3c274c1455e3d7e91320723ab141956426e3e4917dade3726ceef132dc58af64a4336787e7c64258f9d1f1f6c2b04ea825687bf0557d0a2233db9b533d5f0311ed61f58a1c53a2cf5484729d71b1ee63caf4a3db33f9b5c8de8d32a5f8cd517e978dbdf63abb92e41818d403c68a0d18d75b1fcfcc40693e5afd64595902bc86ed364dbed69c57d2b5bfdfc7be85b4d42d766b891949c3e06fb9721ca06a19c5899b8290bca5e15a5f4684086164e80cefe7f525a1840c9c42ad1d78158be08b5937fe7210c7ae4c929ca1590120c0f767083871e4884b0a09b8fe1a2abd193bf29c62815717e188aec81a46695120e83b47b5164915fcbbe63999abdfd65b661062d633bd101b5d37f628c78941e09b1356e68e7bfe7cec22e255ccd561287391e135d79fff115cfb46f47d4e1577f0d48ed83d5ebe16c0a6f645380f2d115a57d8968574e048dc0ac4b972a959a37564196cbe516ff6915d5149714c63ac76ddc2172188977d85a2639b7b607b3739444d92116abf06630d90b2fdfafa3581ee1065d968c3f0c0d30555de5de59c672dfbae82ad4bc75ad8feccbdd47f2d10ddafcaa7282538e3ca7cc6cce9bd2dc5df46b3e05e6c98680691e0b74a9a3346030a8b4297818127e8da36c1062dd7fa47aca870369f08fbd672096a13810c6f9cf9053ee6e67fbe97c700d05745597b8e5899c6dd48b1b68957263e31e4bd575e3cf9d664bb9dbbab91eded053f53eafd9cf916a9157a6b77504c514b8cec6531aac953e267669f774561ab2341bbe567f93f60aa791dd7162ed623b40b4da9dfb048058b2d46df6685cc90fa9853220186b6ca7aecf61de300141d23b7d8df9db12ec2a1295809b1cf8bfbb2e1c8d359c25394ce6b0aea74939578d40fe0dc6dacd579d7ad18ff35fe8675ae48a25ae96a00bb5772e6239b6e58923d61f689c92286cad54f1b1cdf4b9b3d6ec2e2f805808afea1ddee1770fd21be993a3bc5539c3cee9cf051b180db94a74158b30aa223d9578301bfdb244c338fc3c2b3c430946b7e0c8d72bdbbb53ac8efc85539e608821f87aac6ef7709e4a03b700ae31610e8566cbea310fc0e6087a31af1ac3f53629a5b7057e069c80a0279e6caad22fb0f09dd58610d0719aa4d710c84546d6a1caddc2e716f5875608b693d7cae82c97b96788b01cba030744074d4f489f194c6921b87e92c18ff30ac6755fe6385d7b973db964a2d130bc79e5e0353eb35843fa9c11e167beb079c605ddb5559b48e99f294dfc706316810e48d4b00b56b45ea3337ee6ebff67a3796a3bfa3fa3280ef759c9f4ef0e855e102ebe1d75ba336e1d83acbe1786d29bce8a11b38c0ba1da212951f63907b0b79813ad1748013e5ada7aea2545e4133d88fa176daa11a08fc421b74c192e0792b9175602ae0c0de1619cad4e84bbb87730e471cd832e8b0afaa45c08d916b3ed5cd5d6836ea29caf047c20527a9a2ddc5ab22d760f4b7ca96fa1cdc9740bb9f8a102f50e0125aca6b45a9e55438801183becf7e7b204d73a802935cec09375845b7d1c2b80b071c9058df29418b23c76fa524312c52c6ea6a2b4db84394be06ed36ebba40fb007eed63885501c27e5f5d132a4b688495fed8221127be8dc14db3c0a218c1bd53f4ef436bb1b7de34078bc4f0dbf5df65b44b75617ecdd444c30b312ef6e2a480e94a6a6292bd32f0fc7204bac3c1740cd2f8830293d59248f8246fca69ee91820db1717ea009d72311844d911bade12de85e8555c6a2895dc8a987d844d1c30b1bc453b501975d01390b69f36ce9f30346a9ec69e5f0c79657c5e2d12a14deb373ae518833d8fe8f8dfd6f08992e898766b98d3813b6a78436850704d6e1031790221afbdcb7bc8cee2f4dd2e31510a7c64978d31ca310eebbda738624b76228d09330ad5a4b64121bf98028dba5cf1bf072fd17833a3e99844f13bf15de6ca62884c69ca599ac5cc908671cb66863f70f87cbbbea6209dc28adcf1fae9fd6efb2acb4518397160321d91cfd1fc74387ce8a67ce6d7c570fa9470099e464e6742c4666fc4aabe6d4746f72872d59677c3a5c2600acc0d13eb89bd1080daef6f94c7bb9a1180ec099e559824a1fc2a3201c00455146a73b3f34f5119991d01927171c9674c3859804955e4c467b3e0344fb9060f303f280b2e33bf74acac78d29e41ee3b84a5e5df1524066fd09ebcffb55864470ebc4530a080e37407d1a426e350e672f8c72f7db5dc6277ede77fc0b14d33e8ebd6f9835b780a4adfcc3d5eebedf144cbc675f9761ca228f5f57a012d87bd8f13becb7a2e8e957e95ec6cf9a0c3734023e2cdc1c5f3072ea200a95373c23a0a234e5544be6d938b8fcc8c32e635531b00f22e31a60e67d4d9bceed4a97b43f103d8ccf6f49d9aadfb62ace5f18276a9010f8a01e7f4f6c31c6372bd0df57931f3fdf69ecc1ab5b2dc82959e56a9de57b026e3f319cccc51c719244f5d16f8de15fa6d00d4da5fc9a0cdd16970f606bf70824db42cbf9e6ed8e7035cd728c7d144197ca5c0fc68d422920bfed8e65f2f3b036e27d24e8f6bb0b3fd45f216820768ddca75616c20ad0ec9b6edcadc704e479c2e8648e569f53ed5e472bccbb632ed116d0c084e49e6b4fa28217cf68883f261a70d24120741097efc71c97ab48fa3d83feb75d439b4da43d0b14c029030cc9397b44a057f2f018e84d3653996f48b8e5b112a2663448cc2321265a561e7c5af071437a34ac1bcd0d708978db294d541f109ef5d36da105fdf7beddc8629a5ca29fea69ca0286858546bed2153eedca4f92246e920e811032dd5455a5f438b8ec3b32f529c811952b20696d3559cfde0c4a67df6bec73bc4881f6a285c0107976a9f2e769a31b624f64e522772fd8746033858acb92ca5274e46213d989c8bf286b3fcb824ebb9c919df949b5669eb481749b18f5f1036a023820dbdb0a39854d768cb0980d2a9390bb8bddf3184b8bb5011c5aa0f0302307855f47622f26b46a1a651fd02b1aaa53e67da72f5b8c31a6cd540e396b3ed82519ac3a7b6392599b7451f7c441a4387339609b0499eed01c448453d7976f0b5a568244bbc9fbbbb0c10fd9c9e413bfc82f35f998e4dbebf22629c31fe2a8dfa3fb2f688c28e5b5b3b771681763ccf9a610cf39b6b99d86144488d4c0b3614c541f52f507177c1aa66bf154e07d2f8ba56a1977f647291e0c37220c2de1c5da585983bf9ee569f1c127ab4e5cb98842aa9219abe296fe9c49e6f3cc9149594530af7c0c8d0740d1147fb2d4f6fd59017d45c3baa7f9c9a729142dea26af16e4f67707972f31690df3b31167de126295aef8099068bd6adf555bc332ac331907a927cbeb48ea206f67f8cd15408d7ea159d4f8ecc57671be7fc62a2cac13553b694075e399220cc21424f23d04f4767eac853b145bf1f06f00f28a1301942d40a750e627a0e913b0b980d2daf22b85cd5386223da7e99b128c7045f4773434b542dffe9d82d70af65cc5684a37307a98a7bf93dab1876568b36a15b50364070a04bbd0f83dc282d70258e4dfc6b1cc499a8a73ec6550d062ccb90d5789284953adccc4709573a11a9050b257b849afd24ae2d15fe8ec3a8802601c7ebcfebf8539686fe10d7cf3a03c344fbdce18cede8bef81924a7bd28f6339ed45e3780d8bdfd19a69aee0b1b5e35c0a56b23845420560e53cf0fe0f75585a927c5352ceab17a59a8f507937e08948432dd5c795696b8e4a421b215e81a3ec8298a80bdff386bbe8d2758e369929be92ac7b68b0e7d8638a2a4a38d78e37af3de82e075e79b7cd61161e95763ee68da223202b27befb332ed940eb75c9b2d6db73cb234e8d53b2cd856dce9e052df28f161f92df879cc0872ef90e09b1c3b1d3a2b57608a0b153fa0e3d44e000dd0462d9f6a89d7b436556d5922b939e1b86abbc7735bc279f1dcf2eb6610b8123dc92d73c9ce71282e2c55c55715f9440b913d13a612952ce794a5e87cda1ed4074c833e188f7669608a2269aab0307e5c40810712f6423fedee589aac69578fb548ecdc31203b2f5f94890b0d7febeed0668373877129d9b881f842259f0d19c03a9ee36db94783d30517c264e1680c77c14d4772e0dc518e89ad74a5bf2730056c07996020d5d384a768fcb3e355fae57a9b85c914ca75edffbb95bb346ca4148171bfa919d0d71c05dcad48874cc9aaac04f563932d0e5c71e76c4615addc180ec1b0149c5a7614c9e93fcde8c1dcc581f3c2a75cd49c711a3215105d11ed6b6efd7962cf5b525ec6855002db4e1f26817646e24e844cc298df7bfa6dc4d1fee619ee7fd030fadc25a7618517398f268d00a0b715129f2808048346067bc59a9044b02b4f9d0116254fce5ec3654585629cc97e993fc216701dfe81d820560caa4cfc13d79feae71cb4ad97b28623208ac17f50d65b07fba69de0351f18e0e9f5e2181e74a5d7f6de807705ce2f231b88165ecf561cee1ad115ff819ee52b41739e2ed460d98b59a7be4521cea56acee9ca3f1a38dec2ed2b3246f7df418bbb8ad5cf1a1d35107431cebb76b299f25d3c56b6dc93db5b30b50ae430c69fe14ddd89517eba39e5f30093a9823e2fdca43189427e13d4c634a1e14213277b6dc5e059aa4da5ca6ac523cee5a289309ce139e1edff5a5ac83860386eb776c9a6f958b388f95e2e478fa03cde2356f8f23fa612cc2368a56c17b47c845b757a08a827ff09debf8edea79af7a563e122b6d2c4cb9c20a54ab230c719141c6ed1358ba302074"}) (async) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000005940)={{r5}, r6, 0x2, @inherit={0x48, &(0x7f00000058c0)={0x0, 0x0, 0x6, 0xffff, {0x0, 0xf, 0x1, 0x5, 0xffffffff}}}, @subvolid=0x10}) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000006940)=0x3, 0x4) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) (async) r8 = syz_usb_connect$uac2(0x0, 0xd6, &(0x7f0000006980)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4, 0x3, 0x1, 0x9, 0x80, 0xff, {0x8, 0xb, 0x1, 0x1, 0x1, 0x0, 0x20, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1000, 0xc, 0x4d, 0x5}, [@feature_unit={0xf, 0x24, 0x6, 0x2, 0x5, [0xb, 0x9, 0x1, 0x7, 0x4]}, @selector_unit={0x7, 0x24, 0xb, 0xe, 0x2, "988b"}, @extension_unit={0x7, 0x24, 0x9, 0x5, 0x6, 0x7a}, @feature_unit={0xf, 0x24, 0x6, 0x6, 0x2, [0x0, 0x8, 0x3, 0x8, 0x7]}, @input_terminal={0x10, 0x24, 0x2, 0x5, 0x1ff, 0x6, 0xf2, 0x2, 0xfffffffa, 0xd3, 0x9, 0x2}, @extension_unit={0x8, 0x24, 0x9, 0x5, 0x4, 0x5, '4'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x80, 0x25, 0x5, 0x8, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x7, 0x6, 0x76, {0x8, 0x25, 0x1, 0x42, 0x30, 0x9, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x4, 0x4, 0x29, "8b6343019c12"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7, 0xff, 0x4, {0x8, 0x25, 0x1, 0x0, 0x33, 0x6, 0x7}}}}}}}}]}}, &(0x7f0000006e40)={0xa, &(0x7f0000006a80)={0xa, 0x6, 0x250, 0x6, 0x3, 0x3, 0x20, 0x7}, 0x6b, &(0x7f0000006ac0)={0x5, 0xf, 0x6b, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0xf, 0x9, 0xdfe}, @generic={0x49, 0x10, 0x4, "a5ca9c21456ef315c71b0737378aa933034ae54a02696a8723924ca0a7a7fba46e7cb2bfc2ff6f5f1ef1ffdd35017a288a4306668c7e8c4fe5a3a8a807e4acaffbb8a4298e71"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x5, 0xb, 0x9, 0xac}, @wireless={0xb, 0x10, 0x1, 0xc, 0x41, 0xed, 0x7f, 0xffff, 0x1}]}, 0x7, [{0x4, &(0x7f0000006b40)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000006b80)=@lang_id={0x4, 0x3, 0x140a}}, {0x77, &(0x7f0000006bc0)=@string={0x77, 0x3, "60dba1d025517422ad2c32d5475bea1a719af0ec899dccec8e44db86fbed508ff6839002af9b67e50b434db9b02fdd64d80b13f27f26180d0be51ac5ea6f0bece73e1cc02aba5d7bfd202b9b2f7c47f69733e258326599a8550262b7783893f099f15f7fe38ad497af5e8bd4985dba9b0b959e6d4d"}}, {0xe1, &(0x7f0000006c40)=@string={0xe1, 0x3, "e9dbfd92dc6662439653b162515b8f0eb187c3932feed4a572caff8109b76efb7d345d7d8c5847aa41175977e577c95e8ece54e3d03dbc01487ee6583a1365e9b5f0aa0cb6416ed46c004de1deff7bff07b110061b17043f6ec98f0f1d2bc57899b3f38d8c36025cdfe527ec9f5b7ae776c5c57e96e02a6094ef71b81a591410f656235017a1616f988f7b381ce1d8ead4328f9b60c57d189291c48eb5e5599c0b8416f20d59b82fd260e9a25aa7b7fdc92150aea02b9442cbc5c7c424cbdd0393f4cfb7f4936125e9ec262efb1a41203d0f15466552e3774a821d5c3c0746"}}, {0x5b, &(0x7f0000006d40)=@string={0x5b, 0x3, "a4d82b7b1fd9250f5defb7cb53ccee38a491a63994f840eda221c443c17066fc0797ca91eefe872a85db8b286141764726990ce5046b34ac9d1f5ad3da2d71e56d456aa885fdb5c09cee77f0f52709c282541dbd954faead75"}}, {0x4, &(0x7f0000006dc0)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000006e00)=@lang_id={0x4, 0x3, 0x44d}}]}) syz_usb_ep_read(r8, 0x40, 0x2, &(0x7f0000006ec0)=""/2) 5.863767155s ago: executing program 8 (id=677): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c40)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x2, 0x9b, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x2, 0x1, 0xf4, 0x40, 0x5f, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "158809"}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x4, 0x8000, 0x10}, {0x6, 0x24, 0x1a, 0x6, 0x24}, [@call_mgmt={0x5, 0x24, 0x1, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xf}, @acm={0x4, 0x24, 0x2, 0x7}, @dmm={0x7, 0x24, 0x14, 0x66ab, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x5, 0x5, 0x48}, @country_functional={0xe, 0x24, 0x7, 0x2, 0xc, [0x1, 0x1, 0xd898, 0xfc3]}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x24, 0x9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0x4, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x7f, 0xfb, 0x7}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0xf5, 0x8, 0x6, 0x8, 0x8}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x41b}}, {0x9b, &(0x7f0000000340)=@string={0x9b, 0x3, "99e0e0ed37b3b5ec51c697905385436a9d05a294c1aa33ae6f56bda7c397653921115038893af0e431b6925d1565b7edcf201617da4f36eb6c51c9aa1ee6dee95ce82fddf2d5ebd826a22f0a6e9c563adc706a5c9cc155eca4eac4779db5ddef8444777b9e2364da277d7b5488716919b29789e374a0c188e475975450fd87088abab831d07652d86cf4b5a9b53e50a1968988ea8dcfb545b9"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x445}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000540)={0x14, &(0x7f00000004c0)={0x40, 0xb, 0x20, {0x20, 0x11, "4e230c6134b2af9f4b9ed1da3b0282c9d138c8f3004fa768981645462d20"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x44, &(0x7f0000000580)={0x40, 0x3, 0x26, "4b2f03e000d6d7140ebe51e2bf901bf4e85fa4cc9d03e05e9772a0efcc634e0f035275cafd84"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000640)={0x20, 0x80, 0x1c, {0xffd2, 0x8, 0x7ff, 0x8, 0x101, 0x6, 0x2, 0xfffffff3, 0x1, 0x1, 0x5, 0xb}}, &(0x7f0000000680)={0x20, 0x85, 0x4, 0x4000}, &(0x7f00000006c0)={0x20, 0x83, 0x2}, &(0x7f0000000700)={0x20, 0x87, 0x2, 0xff}, &(0x7f0000000740)={0x20, 0x89, 0x2}}) syz_usb_control_io$hid(r0, &(0x7f0000000dc0)={0x24, 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000ec0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000f00)={0x1, 0x8d6c30f34124690b, 0x55f}) 3.609586647s ago: executing program 9 (id=691): syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x75}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)=@x86={0x19, 0x0, 0x44, 0x0, 0x0, 0x7, 0x1, 0x1, 0x5, 0x6c, 0x0, 0x58, 0x0, 0x4, 0x5, 0x4, 0x6, 0x6, 0x4, '\x00', 0xa, 0x3}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x4f, 0x7c, 0x2, 0x80, 0x1, 0x3, 0x44, 0x8, 0x2, 0x10000000000e}, {0x12, 0xfffd, 0x6, 0x8, 0x9, 0xff, 0x8, 0x4, 0xa, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x7, 0xd, 0x0, 0x25, 0x1, 0x81, 0xfb, 0x80, 0x4, 0x0, 0x2}], 0x378a}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x9}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x1, 0xc, 0x4d, 0x6, 0x4, 0x2, 0x42, 0x9, 0x1, 0x4, 0x2, 0x3, 0x3}, {0x1, 0x7, 0x7, 0x0, 0x8, 0x8, 0x49, 0xff, 0x2, 0x9, 0x9, 0xe, 0x20000000002}, {0x2, 0x3, 0x77, 0x84, 0x6, 0x7, 0xfd, 0x40, 0x4, 0x3, 0x4, 0x3, 0x80000000000}], 0xf87}) ioctl$KVM_RUN(r2, 0xae80, 0x20002) 3.462467172s ago: executing program 9 (id=692): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000480)="580000001400060300000000000000001e000000ffffffff00"/88, 0x58) 3.462196182s ago: executing program 9 (id=693): socket$inet(0x2, 0x4000000000000001, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x44000) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000}, 0xfeda) listen(r1, 0x0) r2 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000880)=@req={0x3, 0x1, 0xfffffffe}, 0x10) r3 = syz_usb_connect(0x5, 0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd01800905020210020200000905820200"], 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000800)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$uac3(r3, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000980)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) accept4$nfc_llcp(r1, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000200)='asymmetric\x00', 0x0, &(0x7f0000000240)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a306406092a864886f70d01010b29801f901b5330343132303006035504030c2943657248c166696361746520000072696669636174626f6e2073656c662d74657374696e67206b65793020170d32323035313832320700000000000000313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5e7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b36664266761fbfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebf026c8a31f31cc74be693cda35d305b300c0603551d130101ff04023000300b0603551d0f04040302240780301d0683551d0e04160454f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de71050fc917c9156d4dfa6bbe84d1b58aa28fac1197cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b5825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f0593447070000000000000000f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cffbffffffffffffff79748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3b9ef982500e374e27286f68db3e09383b8d78edebc30aff27e35287b25966e3ee6743dfeb5f7fe01043840fd000000000000000000000000778153a5c06e", 0x559, r4) sendmsg$tipc(r2, &(0x7f00000008c0)={&(0x7f0000000a40)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8840}, 0x8804) 3.109177639s ago: executing program 8 (id=694): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000080)={0x49, 0x29, 0x1, {0x1ff, [{{0x1, 0x0, 0x8}, 0x1, 0x6, 0x7, './file0'}, {{0x80, 0x4, 0x5}, 0x2, 0xff, 0x7, './file0'}]}}, 0x49) 3.09665573s ago: executing program 8 (id=695): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b0009050000000000000000000000030017006c20000002004e22ffffffff000000000000000028b48b45e7634fdc4404ffe4b06af8b311e1186d2301d1884997f7d0b829e9768f2cd5743cba733f20eb1a6478dcc31b20ebf5a777d54a4d1bd7b99e29f6fef520478a7e36f3448416c94b3ccd417acd55117d3d59634bf988bea7bda9"], 0x28}}, 0x0) 3.042554135s ago: executing program 8 (id=696): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x1, 0x1, {0xa, 0x4e20, 0xfffffff6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10}}}, 0x3a) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x20) 3.015123558s ago: executing program 8 (id=697): r0 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xa0, 0x11, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x4, 0xff, 0x1, {0x22, 0x15}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0xfc, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x9, 0x81, 0x6}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0022180000000501150025ff0904a101090192008c0508950129309102c0"], 0x0}, 0x0) (async) r1 = syz_open_dev$hiddev(&(0x7f0000000180), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x4018480c, &(0x7f00000001c0)={0x2, 0xffffffff, 0x10000}) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x0}) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xf42, 0x4) (async) r4 = socket$packet(0x11, 0xa, 0x300) sendto$packet(r2, &(0x7f0000000280)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000300)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) recvmmsg(r4, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1}, 0x9}], 0x1, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000080)='FREEZING\x00', 0x9) 1.669829928s ago: executing program 6 (id=703): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x4f, 0x7c, 0x2, 0x80, 0x1, 0x3, 0x44, 0x8, 0x2, 0x10000000000e}, {0x12, 0xfffd, 0x6, 0x8, 0x9, 0xff, 0x8, 0x4, 0xa, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x7, 0xd, 0x0, 0x25, 0x1, 0x81, 0xfb, 0x80, 0x4, 0x0, 0x2}], 0x378a}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x345, 0x0, 0x2000}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x9}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000140)={[{0x1, 0xc, 0x4d, 0x6, 0x4, 0x2, 0x42, 0x9, 0x1, 0x4, 0x2, 0x3, 0x3}, {0x1, 0x7, 0x7, 0x0, 0x8, 0x8, 0x49, 0xff, 0x2, 0x9, 0x9, 0xe, 0x20000000002}, {0x2, 0x3, 0x77, 0x84, 0x6, 0x7, 0xfd, 0x40, 0x4, 0x3, 0x4, 0x3, 0x80000000000}], 0xf87}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$KVM_RUN(r3, 0xae80, 0x80000) 1.562773829s ago: executing program 6 (id=704): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1000, 0x4, 0x10000000, 0xc}, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_freeze_timeout', 0x0, 0x4f) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x14, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) sendfile(r1, r1, 0x0, 0x1b) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x128}, 0x0) syz_open_procfs(0x0, &(0x7f0000000840)) recvmsg$unix(r3, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000009c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, r5, 0x0, 0x40}}}, &(0x7f0000000a00)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)) syz_ublk_setup_queues(r8, r6, &(0x7f0000000a80)={0x0, 0xfffffffe, 0x0, 0x0, 0x1f4}, &(0x7f0000000b00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfdc8, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) r9 = gettid() r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket(0x1, 0x2, 0x1) ioctl$SIOCGETLINKNAME(r11, 0x89e0, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xfffffffd, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x7, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x80, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x4}}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000140001000000000004000000e00000020000000000000000000000000000000000000000000000000000000000000000100000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000010000000000000006000000000000000000000000000000feffffffffffffff00"/112], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) timer_create(0x1, &(0x7f0000000000)={0x0, 0x21, 0x4, @tid=r9}, &(0x7f0000000080)) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffff7ffffffd]}, 0x0, 0x8) 708.685897ms ago: executing program 6 (id=709): alarm(0x38) mkdir(&(0x7f0000000340)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) chdir(&(0x7f0000001dc0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) 692.034978ms ago: executing program 6 (id=710): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000940)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x7000001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (fail_nth: 7) 570.510251ms ago: executing program 6 (id=711): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0x4018aee3, 0x0) 370.749202ms ago: executing program 9 (id=712): mkdir(&(0x7f0000000000)='./file0\x00', 0x18b) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x17, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7188}, {@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x22}, 0xfffffffa}]}]}}}], 0x30}, 0x4000014) r1 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000002c0)={0x0, &(0x7f0000000300)=[@wrmsr={0x65, 0x20, {0x40000073, 0x124}}], 0x20}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000340)={0x1, 0x0, [{0x40000001, 0x7, 0x4, 0x31237648, 0xfffffff2, 0x4}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000000c80)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r6, &(0x7f0000002cc0)={0x50, 0x0, r7, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xfffe, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002d40)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000002e40)=0xe8) r9 = getgid() write$FUSE_CREATE_OPEN(r5, &(0x7f0000002e80)={0xa0, 0xffffffffffffffda, r7, {{0x0, 0x3, 0x0, 0x8, 0x4, 0x7, {0x0, 0xfff, 0x5, 0x400, 0x1, 0x2, 0x401, 0x340, 0x16d2baec, 0xa000, 0x1000, r8, r9, 0x1000, 0x8000}}, {0x0, 0x10}}}, 0xa0) mount$bpf(0x0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000b40), 0x800800, 0x0) mount$bpf(0x0, &(0x7f0000000c00)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000c40)='./file0\x00', 0x0, 0x8ad006, 0x0) 304.716758ms ago: executing program 6 (id=713): r0 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000004600)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x100, 0x1, 0x3}, 0x18, 0x0) r1 = memfd_create(&(0x7f0000000240)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000280)=@sg0, 0x0, &(0x7f00000002c0)={0x7, 0x55f, 0x0, 0xb}) listxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=""/135, 0x87) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x1, 0x2, 0x6, 0xfbb4}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="18000000680015"], 0x1c}], 0x1}, 0x4000080) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x8c6, &(0x7f0000000180)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824050503"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000200)=ANY=[@ANYRESDEC]}]}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000005d00)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005cc0)={0x40, 0x5, 0x1, 'm'}}) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000400)=0x4) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000006100)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x5, 0x6, "573a07038dc4"}}) 174.533542ms ago: executing program 9 (id=714): mount$tmpfs(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x204082, &(0x7f0000000700)=ANY=[@ANYBLOB='nr_blocks=K']) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)='tmpfs\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) 126.355027ms ago: executing program 0 (id=716): openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$can_raw(0x1d, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x2, 0x2e, 0x6, 0x2, 0x0, 0x70bd2d, 0x25dfdbfd}, 0x10}}, 0x40000) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x80, 0xc) sendmsg$key(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x2, 0x16, 0x5, 0x9, 0xc, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_sa={0x2, 0x1, 0x4d3, 0x5, 0x7, 0x7d, 0x1}, @sadb_x_policy={0x8, 0x12, 0x3, 0x0, 0x0, 0x6e6bbf, 0x101, {0x6, 0x6c, 0xc, 0x8, 0x0, 0x81, 0x0, @in6=@mcast1, @in=@empty}}]}, 0x60}}, 0x40) syz_ublk_setup_io_uring(0x3, &(0x7f0000000780)={0x0, 0x4, 0x1000}, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2002, 0x0) socket(0x10, 0x803, 0x5) socket$xdp(0x2c, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x1, 0x2, 0x0) openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) clock_adjtime(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) clock_adjtime(0x7, &(0x7f0000000340)={0x9, 0x0, 0x6, 0x80, 0x1, 0x1, 0x6, 0x8, 0x6, 0xa, 0x3, 0x1, 0x401, 0x920f, 0x4, 0x4, 0x8, 0x1, 0xf, 0x8, 0xb26a, 0x40000000000, 0x101, 0x80000000, 0xb4ac, 0x6}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0d1, 0x4000, 0x1, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x905b, 0x800, 0x0, 0x8003aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x400, 0x40040001, 0x3cc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x80, 0x0, 0xfffffffb}}], 0x1, 0x0, 0x0) 87.843841ms ago: executing program 0 (id=717): r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0xd82, 0x8000000) 87.649831ms ago: executing program 0 (id=718): alarm(0x38) mkdir(&(0x7f0000000340)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) 85.779851ms ago: executing program 0 (id=719): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x3, 0xff82, &(0x7f0000000740)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0203000310000000000000000000000002000100000000000002060280ffffff05000500000000000a004e240800064800000000000000000000000000000001050000000000000002000900400000001552ab1e131340f8050006006c0000000a"], 0x80}, 0x1, 0x7}, 0x4000080) 27.868577ms ago: executing program 0 (id=720): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000001c0)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x8000001d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x6, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x42, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0xfffffffb, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffc0003, 0x5, 0x4, 0x8, 0x101, 0x90, 0x2, 0x4, 0x9, 0x8, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x2, 0xf7, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffe, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x23, 0x1, 0x40009, 0x400400, 0x401, 0x3, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x33, 0x9, 0x8, 0x800000d, 0x88da, 0x8, 0xd, 0x1, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x801, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xff7f], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0xa, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x2, 0x5, 0x20000005, 0x0, 0x1ef, 0x4, 0x8, 0x86, 0x3, 0x7, 0x3e7, 0x0, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x139, 0x7, 0x200, 0x80000000, 0x3, 0x4e0a, 0x9, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x3, 0xfffffff9, 0x0, 0x8, 0xffff, 0x2b98, 0x1, 0x4, 0x120000, 0xbe, 0x0, 0xffffffff, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0xf0c1, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfefd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x800014c, 0x3, 0x6, 0x10006, 0x8, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x100001, 0x0, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x8a13, 0xffff, 0x8000007, 0x2bf, 0x3, 0x1ff, 0x7fffffff, 0x5]}, 0x45c) r0 = syz_open_procfs(0x0, &(0x7f0000000680)='pagemap\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000019740)={0x0, 0x0, &(0x7f0000019780)={&(0x7f00000197c0)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f000001da40)=""/2, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000019840)='net/nf_conntrack\x00') read$FUSE(r2, &(0x7f0000019880)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f000001b8c0)={0x2020}, 0x2020) pread64(r0, &(0x7f00000006c0)=""/102400, 0x19000, 0x1000000000) socket$pppl2tp(0x18, 0x1, 0x1) ppoll(&(0x7f0000000640)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000019700), 0xa0100, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000196c0)={'ip6gre0\x00', 0x2000}) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r4, &(0x7f0000000100)='6', 0x32) fsopen(&(0x7f0000000180)='vfat\x00', 0x0) creat(&(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f000001d940), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r5, &(0x7f000001da00)={&(0x7f000001d900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f000001d9c0)={&(0x7f000001d980)={0x24, r6, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x40) 27.687467ms ago: executing program 9 (id=721): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x3f1b02, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x49db, 0x0, 0xf7f9, 0x6, 0x16, "ec28a144f10d7607"}) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0xff6b) syz_open_pts(r1, 0x200) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x9, 0x0, 0x2, 0x12, "1b28000440800037dd15b21f54c23003103000"}) r3 = syz_open_pts(r2, 0x20800) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x44) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190ec) 19.641038ms ago: executing program 0 (id=722): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x1201, 0x1, 0x0, 0x0) 0s ago: executing program 8 (id=723): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f0000001400)={0x500, 0x0, &(0x7f0000001440)={&(0x7f0000001480)=ANY=[@ANYBLOB="020100030e000000fcffffff0400000005000600000000000a00000000000000fc01ff80000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000000000000000000aa0000000000000000020013"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000001500), 0x400008a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) process_mrelease(0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendto(r1, &(0x7f0000000500)="300000002400070400efffff0300000001000000010000000000fffff1ffffff0000000003000100636c736163740040", 0x30, 0x24020010, 0x0, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r3 = add_key$keyring(&(0x7f0000000d40), &(0x7f0000000d80)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000dc0)='asymmetric\x00', 0x0, &(0x7f0000000e00)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d32fdb80ab5388ef4d23f3232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08ffffffff0000000079c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231d4f107f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38478301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2f3cc4f2494ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000392020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85528f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e86b604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56", 0x559, r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) write(r4, &(0x7f0000000580)='0', 0x1) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000004c0)={'wlan0\x00', &(0x7f0000000600)=@ethtool_test={0x1a, 0x4}}) fcntl$setlease(r2, 0x400, 0x1) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) recvmsg(r4, &(0x7f0000000cc0)={&(0x7f0000000640)=@ax25={{0x3, @bcast}, [@bcast, @default, @netrom, @rose, @rose, @default, @netrom, @bcast]}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/19, 0x13}, {&(0x7f00000008c0)=""/14, 0xe}, {&(0x7f0000000900)=""/84, 0x54}, {&(0x7f0000000980)=""/84, 0x54}, {&(0x7f0000000a00)=""/180, 0xb4}, {&(0x7f0000000ac0)=""/88, 0x58}], 0x8, &(0x7f0000000bc0)=""/248, 0xf8}, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0xe24, 0x0, @empty, 0x80002}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x3) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001580)={0x28, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "f46579901b721f32", "b148002c892da3da75b8f7624ea3547c", "e6df24db", "806ca73fd4f7f4f4"}, 0x16) bind$bt_hci(r4, &(0x7f0000000d00)={0x1f, 0x3, 0x3}, 0x6) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000180)="94c0020187f2c020372deb2b10efa3f826217c4fd01e8dd1bc4758ee45eed79322186fee88", 0x25}, {&(0x7f00000001c0)="b961d5ffe0e8", 0x6}, {&(0x7f0000000200)="4d58d0d333adb8b2cc24c48bc1b7ec65a3cd1fb3c538f9e33d3d2530a34258029282c82a27ca2da931f4e7f8e456e512a97d454f07a1a9a85da1fa23134a4abf51018acf", 0x44}, {&(0x7f0000000280)="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", 0x211}], 0x4) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt(r7, 0x6, 0x2, 0x0, 0x0) pipe(&(0x7f0000000040)) kernel console output (not intermixed with test programs): R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.058659][ T1625] R13: 00007f904ca26038 R14: 00007f904ca25fa0 R15: 00007ffd70d3c778 [ 60.058667][ T1625] [ 60.120229][ T686] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 60.146876][ T36] kauditd_printk_skb: 124 callbacks suppressed [ 60.146895][ T36] audit: type=1400 audit(1793432871.522:780): avc: denied { read } for pid=1626 comm="syz.3.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.301170][ T686] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.348920][ T686] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.364178][ T686] usb 2-1: config 0 interface 0 has no altsetting 0 [ 60.372720][ T686] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 60.381821][ T686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.390454][ T686] usb 2-1: config 0 descriptor?? [ 60.429731][ T1645] netlink: 'syz.4.372': attribute type 12 has an invalid length. [ 60.438202][ T36] audit: type=1400 audit(1793432871.822:781): avc: denied { connect } for pid=1644 comm="syz.4.372" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.536453][ T1651] kvm: kvm [1650]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 60.545566][ T1651] kvm: kvm [1650]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 60.556590][ T1651] kvm: kvm [1650]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 60.568105][ T1651] kvm: kvm [1650]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 60.577428][ T1651] kvm: kvm [1650]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 60.586533][ T45] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 60.630149][ T312] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 60.650557][ T1654] overlay: Unknown parameter 'mask' [ 60.740063][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 60.746276][ T45] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 60.757505][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 60.764207][ T45] usb 3-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 60.773607][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.782257][ T45] usb 3-1: config 0 descriptor?? [ 60.792085][ T312] usb 4-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 60.801186][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 60.803079][ T686] playstation 0003:054C:09CC.0009: hidraw0: USB HID v36.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.1-1/input0 [ 60.809988][ T312] usb 4-1: Product: syz [ 60.825355][ T312] usb 4-1: Manufacturer: syz [ 60.900072][ T776] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 61.003277][ T686] playstation 0003:054C:09CC.0009: Invalid byte count transferred, expected 16 got 0 [ 61.012834][ T686] playstation 0003:054C:09CC.0009: Failed to retrieve DualShock4 pairing info: -22 [ 61.022206][ T686] playstation 0003:054C:09CC.0009: Failed to get MAC address from DualShock4 [ 61.031126][ T686] playstation 0003:054C:09CC.0009: Failed to create dualshock4. [ 61.039479][ T686] playstation 0003:054C:09CC.0009: probe with driver playstation failed with error -22 [ 61.061634][ T776] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 61.072554][ T776] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 61.086364][ T776] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 61.095449][ T776] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 61.103605][ T776] usb 5-1: Manufacturer: syz [ 61.110208][ T312] usb 4-1: USB disconnect, device number 13 [ 61.116778][ T776] usb 5-1: config 0 descriptor?? [ 61.123879][ T776] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 61.192759][ T45] wacom 0003:056A:037A.000A: Unknown device_type for 'HID 056a:037a'. Assuming pen. [ 61.202760][ T45] wacom 0003:056A:037A.000A: hidraw0: USB HID v0.02 Device [HID 056a:037a] on usb-dummy_hcd.2-1/input0 [ 61.220690][ T45] input: Wacom One by Wacom S Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:037A.000A/input/input15 [ 61.392201][ T686] usb 2-1: USB disconnect, device number 19 [ 61.401109][ T1637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.409715][ T1637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.418367][ T312] usb 3-1: USB disconnect, device number 16 [ 61.659216][ T36] audit: type=1400 audit(1793432873.042:782): avc: denied { append } for pid=1661 comm="syz.3.378" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.692603][ T36] audit: type=1400 audit(1793432873.082:783): avc: denied { connect } for pid=1664 comm="syz.3.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 61.757732][ T1668] FAULT_INJECTION: forcing a failure. [ 61.757732][ T1668] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 61.771493][ T1668] CPU: 0 UID: 0 PID: 1668 Comm: syz.3.380 Not tainted syzkaller #0 86ffabe033aa4b611dc1eaf9ec72dc67ec78bb97 [ 61.771525][ T1668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 61.771538][ T1668] Call Trace: [ 61.771544][ T1668] [ 61.771551][ T1668] __dump_stack+0x21/0x30 [ 61.771574][ T1668] dump_stack_lvl+0x140/0x1c0 [ 61.771590][ T1668] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.771608][ T1668] dump_stack+0x19/0x20 [ 61.771624][ T1668] should_fail_ex+0x3c2/0x510 [ 61.771648][ T1668] should_fail_alloc_page+0xec/0x110 [ 61.771668][ T1668] __alloc_pages_noprof+0x1c0/0x7e0 [ 61.771691][ T1668] ? _raw_spin_lock+0x92/0x120 [ 61.771717][ T1668] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 61.771739][ T1668] ? __kasan_check_write+0x18/0x20 [ 61.771763][ T1668] ? __pte_offset_map_lock+0x279/0x2f0 [ 61.771789][ T1668] __folio_alloc_noprof+0x14/0x80 [ 61.771808][ T1668] folio_prealloc+0x46/0x220 [ 61.771827][ T1668] do_wp_page+0x187e/0x2e80 [ 61.771844][ T1668] ? cgroup_rstat_updated+0x144/0x800 [ 61.771869][ T1668] ? folio_put+0x90/0x90 [ 61.771885][ T1668] ? __cfi__raw_spin_lock+0x10/0x10 [ 61.771911][ T1668] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 61.771933][ T1668] handle_mm_fault+0x1017/0x1ba0 [ 61.771949][ T1668] ? __kasan_check_write+0x18/0x20 [ 61.771976][ T1668] ? __cfi_handle_mm_fault+0x10/0x10 [ 61.771992][ T1668] ? vm_normal_page+0x1fa/0x220 [ 61.772017][ T1668] ? follow_page_pte+0x8fb/0xba0 [ 61.772038][ T1668] ? gup_must_unshare+0x1e0/0x1e0 [ 61.772058][ T1668] ? vma_is_secretmem+0x11/0x50 [ 61.772079][ T1668] ? check_vma_flags+0x36d/0x3a0 [ 61.772099][ T1668] __get_user_pages+0x114b/0x22d0 [ 61.772118][ T1668] ? __kasan_check_write+0x18/0x20 [ 61.772145][ T1668] ? populate_vma_page_range+0x220/0x220 [ 61.772163][ T1668] ? get_user_pages_fast_only+0xc0/0xc0 [ 61.772180][ T1668] ? __kasan_check_write+0x18/0x20 [ 61.772201][ T1668] get_user_pages_unlocked+0x1ab/0x6c0 [ 61.772221][ T1668] __hva_to_pfn+0x25b/0xb80 [ 61.772239][ T1668] ? stack_depot_save+0x12/0x20 [ 61.772263][ T1668] ? __cfi___hva_to_pfn+0x10/0x10 [ 61.772281][ T1668] ? kvm_tdp_mmu_fast_pf_get_last_sptep+0x231/0x2d0 [ 61.772309][ T1668] ? kvm_tdp_mmu_map+0x82b/0x1250 [ 61.772331][ T1668] __gfn_to_pfn_memslot+0x2a1/0x330 [ 61.772352][ T1668] kvm_faultin_pfn+0x60e/0x1620 [ 61.772371][ T1668] ? fast_page_fault+0x1170/0x1170 [ 61.772390][ T1668] ? __kvm_mmu_topup_memory_cache+0x449/0x7e0 [ 61.772409][ T1668] ? get_guest_cr3+0xc0/0xc0 [ 61.772436][ T1668] ? kvm_find_cpuid_entry_index+0x1c3/0x210 [ 61.772460][ T1668] kvm_tdp_page_fault+0x204/0x320 [ 61.772484][ T1668] kvm_mmu_do_page_fault+0x2bf/0x640 [ 61.772505][ T1668] ? kvm_set_msr_common+0x1b5/0x3800 [ 61.772525][ T1668] ? kvm_arch_async_page_ready+0x480/0x480 [ 61.772547][ T1668] ? __cfi_rcu_note_context_switch+0x10/0x10 [ 61.772569][ T1668] kvm_mmu_page_fault+0x150/0x9a0 [ 61.772593][ T1668] handle_ept_violation+0x256/0x450 [ 61.772615][ T1668] ? vmx_vcpu_run+0x1116/0x1f70 [ 61.772632][ T1668] ? __cfi_handle_ept_violation+0x10/0x10 [ 61.772652][ T1668] vmx_handle_exit+0x13b5/0x1bf0 [ 61.772655][ T36] audit: type=1400 audit(1793432873.172:784): avc: denied { bind } for pid=1673 comm="syz.1.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 61.772669][ T1668] ? kvm_deliver_exception_payload+0xd0/0x1e0 [ 61.772693][ T1668] ? __cfi_vmx_vcpu_run+0x10/0x10 [ 61.772707][ T1668] vcpu_run+0x4bf8/0x7810 [ 61.772738][ T1668] ? signal_pending+0xc0/0xc0 [ 61.772762][ T1668] ? __kasan_check_write+0x18/0x20 [ 61.772786][ T1668] ? xfd_validate_state+0x68/0x140 [ 61.772811][ T1668] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 61.772832][ T1668] ? __kasan_check_write+0x18/0x20 [ 61.772855][ T1668] ? fpregs_mark_activate+0x68/0x160 [ 61.772876][ T1668] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 61.772898][ T1668] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 61.772919][ T1668] kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0 [ 61.772944][ T1668] ? _parse_integer_limit+0x195/0x1e0 [ 61.772968][ T1668] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 61.772993][ T1668] ? kstrtoull+0x13b/0x1e0 [ 61.773014][ T1668] ? kstrtouint+0x78/0xf0 [ 61.773037][ T1668] ? ioctl_has_perm+0x1bc/0x500 [ 61.773060][ T1668] ? __asan_memcpy+0x5a/0x80 [ 61.773084][ T1668] ? ioctl_has_perm+0x408/0x500 [ 61.773106][ T1668] ? has_cap_mac_admin+0xd0/0xd0 [ 61.773130][ T1668] ? __kasan_check_write+0x18/0x20 [ 61.773153][ T1668] ? mutex_lock_killable+0x97/0x1d0 [ 61.773174][ T1668] ? __cfi_mutex_lock_killable+0x10/0x10 [ 61.773194][ T1668] ? proc_fail_nth_write+0x184/0x220 [ 61.773214][ T1668] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 61.773236][ T1668] kvm_vcpu_ioctl+0xa43/0x1000 [ 61.773257][ T1668] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 61.773275][ T1668] ? __cfi_vfs_write+0x10/0x10 [ 61.773299][ T1668] ? __kasan_check_write+0x18/0x20 [ 61.773321][ T1668] ? mutex_unlock+0x90/0x240 [ 61.773340][ T1668] ? __cfi_mutex_unlock+0x10/0x10 [ 61.773361][ T1668] ? __fget_files+0x2bc/0x330 [ 61.773379][ T1668] ? bpf_lsm_file_ioctl+0xd/0x20 [ 61.773398][ T1668] ? security_file_ioctl+0x3e/0x110 [ 61.773430][ T1668] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 61.773448][ T1668] __se_sys_ioctl+0x126/0x1b0 [ 61.773466][ T1668] __x64_sys_ioctl+0x7f/0xa0 [ 61.773483][ T1668] x64_sys_call+0x1878/0x2ee0 [ 61.773502][ T1668] do_syscall_64+0x57/0xf0 [ 61.773517][ T1668] ? clear_bhb_loop+0x50/0xa0 [ 61.773539][ T1668] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 61.773560][ T1668] RIP: 0033:0x7f904c79f559 [ 61.773575][ T1668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.773592][ T1668] RSP: 002b:00007f904d651028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.773611][ T1668] RAX: ffffffffffffffda RBX: 00007f904ca25fa0 RCX: 00007f904c79f559 [ 61.773625][ T1668] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 61.773636][ T1668] RBP: 00007f904d651090 R08: 0000000000000000 R09: 0000000000000000 [ 61.773648][ T1668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.773659][ T1668] R13: 00007f904ca26038 R14: 00007f904ca25fa0 R15: 00007ffd70d3c778 [ 61.773674][ T1668] [ 61.818507][ T1674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.382'. [ 61.818935][ T36] audit: type=1400 audit(1793432873.182:785): avc: denied { setopt } for pid=1673 comm="syz.1.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 61.885823][ T1678] kvm: kvm [1677]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 61.890086][ T36] audit: type=1326 audit(1793432873.252:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1677 comm="syz.1.384" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9e79f559 code=0x7ffc0000 [ 61.890116][ T36] audit: type=1326 audit(1793432873.252:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1677 comm="syz.1.384" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e9e79f559 code=0x7ffc0000 [ 61.890138][ T36] audit: type=1326 audit(1793432873.262:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1677 comm="syz.1.384" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e9e79f1eb code=0x7ffc0000 [ 61.977982][ T1681] kvm: kvm [1680]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 61.982939][ T36] audit: type=1326 audit(1793432873.262:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1677 comm="syz.1.384" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e9e79f1eb code=0x7ffc0000 [ 61.988156][ T1681] kvm: kvm [1680]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 62.535714][ T1681] kvm: kvm [1680]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 62.547500][ T1681] kvm: kvm [1680]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 62.607823][ T1693] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 62.691004][ T1710] usb usb1: usbfs: process 1710 (syz.3.395) did not claim interface 0 before use [ 62.725608][ T1714] rust_binder: 1713:1714 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 62.733800][ T1714] rust_binder: 1713:1714 got reply transaction with no transaction stack [ 62.742353][ T1714] rust_binder: 1713:1714 transaction reply to 0:0 failed EINVAL, code 0 size 88-24 line thread.rs:1560 [ 62.772018][ T1716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=1716 comm=syz.1.398 [ 62.780986][ T45] rust_binder: 1713: undelivered TRANSACTION_ERROR: 29201 [ 62.798429][ T1718] netlink: 92 bytes leftover after parsing attributes in process `syz.1.399'. [ 62.807556][ T1720] FAULT_INJECTION: forcing a failure. [ 62.807556][ T1720] name failslab, interval 1, probability 0, space 0, times 0 [ 62.820233][ T1720] CPU: 1 UID: 0 PID: 1720 Comm: syz.3.400 Not tainted syzkaller #0 86ffabe033aa4b611dc1eaf9ec72dc67ec78bb97 [ 62.820265][ T1720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 62.820276][ T1720] Call Trace: [ 62.820282][ T1720] [ 62.820289][ T1720] __dump_stack+0x21/0x30 [ 62.820311][ T1720] dump_stack_lvl+0x140/0x1c0 [ 62.820326][ T1720] ? __cfi_dump_stack_lvl+0x10/0x10 [ 62.820344][ T1720] dump_stack+0x19/0x20 [ 62.820360][ T1720] should_fail_ex+0x3c2/0x510 [ 62.820383][ T1720] should_failslab+0xac/0x100 [ 62.820402][ T1720] kmem_cache_alloc_noprof+0x42/0x410 [ 62.820427][ T1720] ? skb_clone+0x21d/0x470 [ 62.820447][ T1720] ? kmalloc_reserve+0xcf/0x4f0 [ 62.820465][ T1720] skb_clone+0x21d/0x470 [ 62.820485][ T1720] pfkey_broadcast_one+0x9d/0x360 [ 62.820503][ T1720] pfkey_broadcast+0x2d9/0x320 [ 62.820520][ T1720] pfkey_sendmsg+0xefa/0x1190 [ 62.820540][ T1720] ? __cfi_pfkey_sendmsg+0x10/0x10 [ 62.820558][ T1720] ? selinux_socket_sendmsg+0x281/0x380 [ 62.820585][ T1720] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 62.820612][ T1720] ? security_socket_sendmsg+0x3d/0x100 [ 62.820642][ T1720] ____sys_sendmsg+0x9a1/0xa00 [ 62.820663][ T1720] ? __import_iovec+0x5b9/0x7d0 [ 62.820682][ T1720] ? __sys_sendmsg_sock+0x50/0x50 [ 62.820705][ T1720] ? import_iovec+0x80/0xb0 [ 62.820725][ T1720] ___sys_sendmsg+0x2a6/0x370 [ 62.820747][ T1720] ? __sys_sendmsg+0x260/0x260 [ 62.820769][ T1720] ? proc_fail_nth_write+0x184/0x220 [ 62.820791][ T1720] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 62.820813][ T1720] ? __fget_files+0x2bc/0x330 [ 62.820833][ T1720] __x64_sys_sendmsg+0x1be/0x2a0 [ 62.820855][ T1720] ? fput+0x1a4/0x230 [ 62.820875][ T1720] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 62.820897][ T1720] ? ksys_write+0x1f3/0x260 [ 62.820923][ T1720] ? __kasan_check_read+0x15/0x20 [ 62.820950][ T1720] x64_sys_call+0x2a4c/0x2ee0 [ 62.820969][ T1720] do_syscall_64+0x57/0xf0 [ 62.820986][ T1720] ? clear_bhb_loop+0x50/0xa0 [ 62.821008][ T1720] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 62.821036][ T1720] RIP: 0033:0x7f904c79f559 [ 62.821053][ T1720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.821069][ T1720] RSP: 002b:00007f904d651028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.821090][ T1720] RAX: ffffffffffffffda RBX: 00007f904ca25fa0 RCX: 00007f904c79f559 [ 62.821105][ T1720] RDX: 0000000000000084 RSI: 0000200000000280 RDI: 0000000000000003 [ 62.821117][ T1720] RBP: 00007f904d651090 R08: 0000000000000000 R09: 0000000000000000 [ 62.821130][ T1720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.821142][ T1720] R13: 00007f904ca26038 R14: 00007f904ca25fa0 R15: 00007ffd70d3c778 [ 62.821158][ T1720] [ 63.181230][ T1730] netlink: 'syz.1.402': attribute type 16 has an invalid length. [ 63.189103][ T1730] netlink: 16954 bytes leftover after parsing attributes in process `syz.1.402'. [ 63.198798][ T1730] netlink: 36 bytes leftover after parsing attributes in process `syz.1.402'. [ 63.380898][ T1740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11792 sclass=netlink_route_socket pid=1740 comm=syz.3.407 [ 63.400791][ T1744] rust_binder: 1743:1744 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 63.408967][ T1744] rust_binder: 1743:1744 got reply transaction with no transaction stack [ 63.417487][ T1744] rust_binder: 1743:1744 transaction reply to 0:0 failed EINVAL, code 0 size 88-24 line thread.rs:1560 [ 63.442884][ T45] rust_binder: 1743: undelivered TRANSACTION_ERROR: 29201 [ 63.640066][ T1110] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 63.668230][ T312] usb 5-1: USB disconnect, device number 12 [ 63.727697][ T1764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.416'. [ 63.791308][ T1110] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.801558][ T1110] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.811345][ T1110] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 63.821191][ T1110] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.835997][ T1110] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 63.852617][ T1110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.852785][ T1772] rust_binder: 1771:1772 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 63.860690][ T1110] usb 4-1: Product: syz [ 63.860709][ T1110] usb 4-1: Manufacturer: syz [ 63.869193][ T1772] rust_binder: 1771:1772 got reply transaction with no transaction stack [ 63.873063][ T1110] usb 4-1: SerialNumber: syz [ 63.877531][ T1772] rust_binder: 1771:1772 transaction reply to 0:0 failed EINVAL, code 0 size 88-24 line thread.rs:1560 [ 63.888740][ T1110] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 63.913961][ T1110] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 63.924776][ T312] rust_binder: 1771: undelivered TRANSACTION_ERROR: 29201 [ 63.924954][ T1110] usbserial_generic 4-1:1.0: generic converter detected [ 63.942163][ T1110] usb 4-1: generic converter now attached to ttyUSB0 [ 64.098548][ T1740] fuse: Bad value for 'group_id' [ 64.103596][ T1740] fuse: Bad value for 'group_id' [ 64.112163][ T1740] fuse: Bad value for 'rootmode' [ 64.230135][ T1110] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 64.273311][ T1793] rust_binder: 1792:1793 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 64.281578][ T1793] rust_binder: 1792:1793 got reply transaction with no transaction stack [ 64.290193][ T1793] rust_binder: 1792:1793 transaction reply to 0:0 failed EINVAL, code 0 size 88-24 line thread.rs:1560 [ 64.317750][ T9] rust_binder: 1792: undelivered TRANSACTION_ERROR: 29201 [ 64.381354][ T1110] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 64.392977][ T1110] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.402864][ T1110] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 64.416591][ T1110] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 64.425689][ T1110] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 64.433836][ T1110] usb 5-1: Manufacturer: syz [ 64.439125][ T1110] usb 5-1: config 0 descriptor?? [ 64.446380][ T1110] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 64.624069][ T312] usb 4-1: USB disconnect, device number 14 [ 64.632950][ T312] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 64.644030][ T312] usbserial_generic 4-1:1.0: device disconnected [ 64.940108][ T312] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 65.091132][ T312] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 65.102210][ T312] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.112146][ T312] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 65.125051][ T312] usb 4-1: config 0 interface 0 has no altsetting 0 [ 65.131692][ T312] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 65.140922][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.149663][ T312] usb 4-1: config 0 descriptor?? [ 65.293583][ T1814] futex_wake_op: syz.2.437 tries to shift op by 144; fix this program [ 65.317221][ T1814] netlink: 24 bytes leftover after parsing attributes in process `syz.2.437'. [ 65.420074][ T45] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 65.562752][ T1802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.570280][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 65.571727][ T1802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.577824][ T45] usb 2-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 28 [ 65.597439][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 65.604093][ T45] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 65.613188][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.621856][ T45] usb 2-1: config 0 descriptor?? [ 65.627727][ T45] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 65.661097][ T312] usbhid 4-1:0.0: can't add hid device: -71 [ 65.667218][ T312] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 65.675999][ T312] usb 4-1: USB disconnect, device number 15 [ 66.134126][ T1831] FAULT_INJECTION: forcing a failure. [ 66.134126][ T1831] name failslab, interval 1, probability 0, space 0, times 0 [ 66.146829][ T1831] CPU: 0 UID: 0 PID: 1831 Comm: syz.2.438 Not tainted syzkaller #0 86ffabe033aa4b611dc1eaf9ec72dc67ec78bb97 [ 66.146860][ T1831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 66.146871][ T1831] Call Trace: [ 66.146875][ T1831] [ 66.146881][ T1831] __dump_stack+0x21/0x30 [ 66.146895][ T1831] dump_stack_lvl+0x140/0x1c0 [ 66.146905][ T1831] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.146914][ T1831] ? vms_clear_ptes+0x4eb/0x610 [ 66.146930][ T1831] dump_stack+0x19/0x20 [ 66.146939][ T1831] should_fail_ex+0x3c2/0x510 [ 66.146953][ T1831] should_failslab+0xac/0x100 [ 66.146964][ T1831] kmem_cache_alloc_noprof+0x42/0x410 [ 66.146978][ T1831] ? vma_merge_new_range+0x71e/0x900 [ 66.146992][ T1831] ? vm_area_alloc+0x3f/0x190 [ 66.147005][ T1831] vm_area_alloc+0x3f/0x190 [ 66.147017][ T1831] mmap_region+0xce2/0x1d10 [ 66.147032][ T1831] ? __cfi_mmap_region+0x10/0x10 [ 66.147046][ T1831] ? __cfi_arch_get_unmapped_area_topdown+0x10/0x10 [ 66.147061][ T1831] ? __kasan_check_read+0x15/0x20 [ 66.147076][ T1831] ? __get_unmapped_area+0x406/0x470 [ 66.147090][ T1831] do_mmap+0xa47/0x1370 [ 66.147103][ T1831] ? __cfi_selinux_mmap_file+0x10/0x10 [ 66.147118][ T1831] ? __cfi_do_mmap+0x10/0x10 [ 66.147131][ T1831] ? down_write_killable+0x165/0x2d0 [ 66.147146][ T1831] ? __cfi_down_write_killable+0x10/0x10 [ 66.147159][ T1831] vm_mmap_pgoff+0x367/0x4b0 [ 66.147174][ T1831] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 66.147187][ T1831] ? ksys_write+0x1f3/0x260 [ 66.147202][ T1831] ksys_mmap_pgoff+0xfa/0x1e0 [ 66.147216][ T1831] __x64_sys_mmap+0x121/0x140 [ 66.147233][ T1831] x64_sys_call+0x13bf/0x2ee0 [ 66.147244][ T1831] do_syscall_64+0x57/0xf0 [ 66.147253][ T1831] ? clear_bhb_loop+0x50/0xa0 [ 66.147267][ T1831] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.147279][ T1831] RIP: 0033:0x7f4a6139f559 [ 66.147289][ T1831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.147299][ T1831] RSP: 002b:00007f4a621a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 66.147311][ T1831] RAX: ffffffffffffffda RBX: 00007f4a61626090 RCX: 00007f4a6139f559 [ 66.147319][ T1831] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 66.147327][ T1831] RBP: 00007f4a621a1090 R08: ffffffffffffffff R09: 0000000000000000 [ 66.147334][ T1831] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 66.147341][ T1831] R13: 00007f4a61626128 R14: 00007f4a61626090 R15: 00007ffc4bbb6f88 [ 66.147349][ T1831] [ 66.408012][ T1834] rust_binder: 1833:1834 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 66.417303][ T1834] rust_binder: 1833:1834 got reply transaction with no transaction stack [ 66.425865][ T1834] rust_binder: 1833:1834 transaction reply to 0:0 failed EINVAL, code 0 size 88-24 line thread.rs:1560 [ 66.457344][ T312] rust_binder: 1833: undelivered TRANSACTION_ERROR: 29201 [ 66.991339][ T312] usb 5-1: USB disconnect, device number 13 [ 68.188005][ T45] usb 2-1: USB disconnect, device number 20 [ 83.554406][ T36] kauditd_printk_skb: 51 callbacks suppressed [ 83.554425][ T36] audit: type=1400 audit(1793432894.942:841): avc: denied { cmd } for pid=1848 comm="syz.4.444" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 83.608480][ T36] audit: type=1400 audit(1793432894.992:842): avc: denied { remount } for pid=1855 comm="syz.2.448" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 83.640229][ T1866] rust_binder: 1865:1866 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 83.648517][ T1866] rust_binder: 1865:1866 got reply transaction with no transaction stack [ 83.657027][ T1866] rust_binder: 1865:1866 transaction reply to 0:0 failed EINVAL, code 0 size 88-24 line thread.rs:1560 [ 83.681357][ T1110] rust_binder: 1865: undelivered TRANSACTION_ERROR: 29201 [ 83.850101][ T312] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 83.940182][ T1110] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 84.000058][ T312] usb 4-1: Using ep0 maxpacket: 32 [ 84.000062][ T686] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 84.015613][ T312] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 84.024695][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.032926][ T312] usb 4-1: Product: 阓 [ 84.037205][ T312] usb 4-1: Manufacturer: ы [ 84.041717][ T312] usb 4-1: SerialNumber: 井樧숖⏹㽷ꉇﺯ鞪쳞睵๏빏๦뀲᥌㓟䐈獴ﴩ鱠挻몄篚䝩锩陣䁔䐙᭿℣쥢꺖齠ఎ㷪韸Ə褊ᆝ鴺ᕚᆰ釓拙ﺄ塧톥墇稲﷥쬅޽▵᳍쀣ﴁ告ᮡⳅ噯뮣䆁鈚鹟푷攟娰ꍹ녠嗩砳隈㠌챁 [ 84.090090][ T1110] usb 2-1: Using ep0 maxpacket: 16 [ 84.096512][ T1110] usb 2-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 28 [ 84.109646][ T1110] usb 2-1: config 0 interface 0 has no altsetting 0 [ 84.116289][ T1110] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 84.125350][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.133382][ T686] usb 5-1: device descriptor read/64, error -71 [ 84.140267][ T1110] usb 2-1: config 0 descriptor?? [ 84.146183][ T1110] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 84.272731][ T312] usb 4-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 84.281268][ T312] usb 4-1: 1:1 : unsupported sample bitwidth 3 in 162 bytes [ 84.288808][ T312] usb 4-1: unit 3 not found! [ 84.299990][ T312] usb 4-1: USB disconnect, device number 16 [ 84.309413][ T1884] udevd[1884]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 84.380112][ T686] usb 5-1: device descriptor read/64, error -71 [ 84.620101][ T686] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 84.750099][ T686] usb 5-1: device descriptor read/64, error -71 [ 84.990076][ T686] usb 5-1: device descriptor read/64, error -71 [ 85.025157][ T1892] FAULT_INJECTION: forcing a failure. [ 85.025157][ T1892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.044794][ T1892] CPU: 0 UID: 0 PID: 1892 Comm: syz.3.462 Not tainted syzkaller #0 86ffabe033aa4b611dc1eaf9ec72dc67ec78bb97 [ 85.044831][ T1892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 85.044846][ T1892] Call Trace: [ 85.044852][ T1892] [ 85.044860][ T1892] __dump_stack+0x21/0x30 [ 85.044886][ T1892] dump_stack_lvl+0x140/0x1c0 [ 85.044903][ T1892] ? __cfi_dump_stack_lvl+0x10/0x10 [ 85.044923][ T1892] dump_stack+0x19/0x20 [ 85.044940][ T1892] should_fail_ex+0x3c2/0x510 [ 85.044966][ T1892] should_fail+0xf/0x20 [ 85.044989][ T1892] should_fail_usercopy+0x1e/0x30 [ 85.045015][ T1892] fpu__restore_sig+0x1ff/0x10b0 [ 85.045042][ T1892] ? __cfi_fpu__restore_sig+0x10/0x10 [ 85.045070][ T1892] ? __kasan_check_write+0x18/0x20 [ 85.045096][ T1892] __ia32_sys_rt_sigreturn+0x6e9/0x830 [ 85.045117][ T1892] ? _raw_spin_unlock_irq+0x45/0x70 [ 85.045138][ T1892] ? __cfi___x64_sys_rt_sigreturn+0x10/0x10 [ 85.045159][ T1892] ? __kasan_check_read+0x15/0x20 [ 85.045184][ T1892] x64_sys_call+0x2c14/0x2ee0 [ 85.045203][ T1892] do_syscall_64+0x57/0xf0 [ 85.045221][ T1892] ? clear_bhb_loop+0x50/0xa0 [ 85.045245][ T1892] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 85.045267][ T1892] RIP: 0033:0x7f904c79f559 [ 85.045284][ T1892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.045302][ T1892] RSP: 002b:00007f904d651028 EFLAGS: 00000246 [ 85.045320][ T1892] RAX: 0000000000000000 RBX: 00007f904ca25fa0 RCX: 00007f904c79f559 [ 85.045335][ T1892] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 85.045347][ T1892] RBP: 00007f904c836b20 R08: 0000000000000000 R09: 0000000000000000 [ 85.045360][ T1892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.045373][ T1892] R13: 00007f904ca26038 R14: 00007f904ca25fa0 R15: 00007ffd70d3c778 [ 85.045390][ T1892] [ 85.241113][ T686] usb usb5-port1: attempt power cycle [ 85.281823][ T1907] FAULT_INJECTION: forcing a failure. [ 85.281823][ T1907] name failslab, interval 1, probability 0, space 0, times 0 [ 85.294561][ T1907] CPU: 1 UID: 0 PID: 1907 Comm: syz.2.468 Not tainted syzkaller #0 86ffabe033aa4b611dc1eaf9ec72dc67ec78bb97 [ 85.294595][ T1907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 85.294607][ T1907] Call Trace: [ 85.294614][ T1907] [ 85.294623][ T1907] __dump_stack+0x21/0x30 [ 85.294645][ T1907] dump_stack_lvl+0x140/0x1c0 [ 85.294662][ T1907] ? __cfi_dump_stack_lvl+0x10/0x10 [ 85.294681][ T1907] dump_stack+0x19/0x20 [ 85.294697][ T1907] should_fail_ex+0x3c2/0x510 [ 85.294723][ T1907] ? security_sk_alloc+0x65/0x260 [ 85.294746][ T1907] should_failslab+0xac/0x100 [ 85.294765][ T1907] __kmalloc_noprof+0x69/0x510 [ 85.294790][ T1907] ? kasan_save_alloc_info+0x3a/0x50 [ 85.294814][ T1907] ? security_sk_alloc+0x65/0x260 [ 85.294836][ T1907] ? __kasan_slab_alloc+0x73/0x90 [ 85.294856][ T1907] security_sk_alloc+0x65/0x260 [ 85.294880][ T1907] sk_prot_alloc+0x123/0x3a0 [ 85.294901][ T1907] sk_alloc+0x40/0x590 [ 85.294921][ T1907] tipc_sk_create+0x165/0x2150 [ 85.294942][ T1907] ? kasan_save_alloc_info+0x3a/0x50 [ 85.294966][ T1907] ? __kasan_slab_alloc+0x73/0x90 [ 85.294985][ T1907] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 85.295011][ T1907] ? security_inode_alloc+0x51/0x230 [ 85.295032][ T1907] ? security_inode_alloc+0xc2/0x230 [ 85.295051][ T1907] ? inode_init_always_gfp+0x76e/0x9e0 [ 85.295071][ T1907] ? __cfi_tipc_sk_create+0x10/0x10 [ 85.295090][ T1907] ? __cfi_sock_alloc_inode+0x10/0x10 [ 85.295117][ T1907] ? alloc_inode+0xdb/0x270 [ 85.295136][ T1907] __sock_create+0x3a2/0x810 [ 85.295155][ T1907] __sys_socket+0xe1/0x1c0 [ 85.295172][ T1907] __x64_sys_socket+0x7e/0x90 [ 85.295191][ T1907] x64_sys_call+0x2608/0x2ee0 [ 85.295209][ T1907] do_syscall_64+0x57/0xf0 [ 85.295226][ T1907] ? clear_bhb_loop+0x50/0xa0 [ 85.295263][ T1907] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 85.295286][ T1907] RIP: 0033:0x7f4a6139f559 [ 85.295303][ T1907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.295321][ T1907] RSP: 002b:00007f4a621c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 85.295343][ T1907] RAX: ffffffffffffffda RBX: 00007f4a61625fa0 RCX: 00007f4a6139f559 [ 85.295359][ T1907] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001e [ 85.295371][ T1907] RBP: 00007f4a61436b20 R08: 0000000000000000 R09: 0000000000000000 [ 85.295384][ T1907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.295396][ T1907] R13: 00007f4a61626038 R14: 00007f4a61625fa0 R15: 00007ffc4bbb6f88 [ 85.295413][ T1907] [ 85.300084][ T1907] 9pnet_fd: Insufficient options for proto=fd [ 85.311599][ T36] audit: type=1400 audit(1793432896.682:843): avc: denied { mounton } for pid=1906 comm="syz.2.468" path="/125/mnt_trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 85.590081][ T686] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 85.611043][ T686] usb 5-1: device descriptor read/8, error -71 [ 85.710098][ T312] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 85.751144][ T686] usb 5-1: device descriptor read/8, error -71 [ 85.881137][ T312] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 85.892097][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.901850][ T312] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 85.903024][ T1909] overlayfs: failed to resolve './cgroup': -40 [ 85.916042][ T312] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 85.930677][ T312] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 85.938813][ T312] usb 4-1: Manufacturer: syz [ 85.950330][ T312] usb 4-1: config 0 descriptor?? [ 85.956441][ T312] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 86.000069][ T686] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 86.021124][ T686] usb 5-1: device descriptor read/8, error -71 [ 86.151208][ T686] usb 5-1: device descriptor read/8, error -71 [ 86.200932][ T1924] FAULT_INJECTION: forcing a failure. [ 86.200932][ T1924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.214073][ T1924] CPU: 1 UID: 0 PID: 1924 Comm: syz.2.474 Not tainted syzkaller #0 86ffabe033aa4b611dc1eaf9ec72dc67ec78bb97 [ 86.214107][ T1924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 86.214121][ T1924] Call Trace: [ 86.214129][ T1924] [ 86.214138][ T1924] __dump_stack+0x21/0x30 [ 86.214163][ T1924] dump_stack_lvl+0x140/0x1c0 [ 86.214177][ T1924] ? __cfi_dump_stack_lvl+0x10/0x10 [ 86.214188][ T1924] dump_stack+0x19/0x20 [ 86.214197][ T1924] should_fail_ex+0x3c2/0x510 [ 86.214213][ T1924] should_fail+0xf/0x20 [ 86.214227][ T1924] should_fail_usercopy+0x1e/0x30 [ 86.214241][ T1924] fpu__restore_sig+0x1ff/0x10b0 [ 86.214257][ T1924] ? __cfi_fpu__restore_sig+0x10/0x10 [ 86.214274][ T1924] ? __kasan_check_write+0x18/0x20 [ 86.214288][ T1924] __ia32_sys_rt_sigreturn+0x6e9/0x830 [ 86.214300][ T1924] ? _raw_spin_unlock_irq+0x45/0x70 [ 86.214311][ T1924] ? __cfi___x64_sys_rt_sigreturn+0x10/0x10 [ 86.214323][ T1924] ? __kasan_check_read+0x15/0x20 [ 86.214337][ T1924] x64_sys_call+0x2c14/0x2ee0 [ 86.214348][ T1924] do_syscall_64+0x57/0xf0 [ 86.214357][ T1924] ? clear_bhb_loop+0x50/0xa0 [ 86.214369][ T1924] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 86.214381][ T1924] RIP: 0033:0x7f4a6139f559 [ 86.214391][ T1924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.214400][ T1924] RSP: 002b:00007f4a621c2028 EFLAGS: 00000246 [ 86.214411][ T1924] RAX: 0000000000000000 RBX: 00007f4a61625fa0 RCX: 00007f4a6139f559 [ 86.214419][ T1924] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 86.214425][ T1924] RBP: 00007f4a61436b20 R08: 0000000000000000 R09: 0000000000000000 [ 86.214432][ T1924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.214438][ T1924] R13: 00007f4a61626038 R14: 00007f4a61625fa0 R15: 00007ffc4bbb6f88 [ 86.214447][ T1924] [ 86.260171][ T686] usb usb5-port1: unable to enumerate USB device [ 86.704772][ T312] usb 2-1: USB disconnect, device number 21 [ 87.100076][ T312] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 87.251155][ T312] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 87.262378][ T312] usb 2-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 87.273855][ T312] usb 2-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 87.288152][ T312] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 87.297559][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 87.305780][ T312] usb 2-1: SerialNumber: syz [ 87.582448][ T312] rndis_host 2-1:253.0: RNDIS init failed, -71 [ 87.588735][ T312] rndis_host 2-1:253.0: probe with driver rndis_host failed with error -71 [ 87.600127][ T312] usb 2-1: USB disconnect, device number 22 [ 87.642808][ T1948] No source specified [ 87.890072][ T686] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 88.042613][ T686] usb 5-1: New USB device found, idVendor=9b98, idProduct=db1e, bcdDevice=19.87 [ 88.051831][ T686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.059899][ T686] usb 5-1: Product: syz [ 88.064362][ T686] usb 5-1: Manufacturer: syz [ 88.069244][ T686] usb 5-1: SerialNumber: syz [ 88.256489][ T312] usb 4-1: USB disconnect, device number 17 [ 88.279802][ T1952] FAULT_INJECTION: forcing a failure. [ 88.279802][ T1952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.282062][ T1948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.294813][ T1952] CPU: 1 UID: 0 PID: 1952 Comm: syz.1.484 Not tainted syzkaller #0 86ffabe033aa4b611dc1eaf9ec72dc67ec78bb97 [ 88.294846][ T1952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 88.294859][ T1952] Call Trace: [ 88.294866][ T1952] [ 88.294885][ T1952] __dump_stack+0x21/0x30 [ 88.294909][ T1952] dump_stack_lvl+0x140/0x1c0 [ 88.294926][ T1952] ? __cfi_dump_stack_lvl+0x10/0x10 [ 88.294945][ T1952] dump_stack+0x19/0x20 [ 88.294962][ T1952] should_fail_ex+0x3c2/0x510 [ 88.294988][ T1952] should_fail+0xf/0x20 [ 88.295010][ T1952] should_fail_usercopy+0x1e/0x30 [ 88.295036][ T1952] fpu__restore_sig+0x1ff/0x10b0 [ 88.295064][ T1952] ? __cfi_fpu__restore_sig+0x10/0x10 [ 88.295091][ T1952] ? __kasan_check_write+0x18/0x20 [ 88.295116][ T1952] __ia32_sys_rt_sigreturn+0x6e9/0x830 [ 88.295136][ T1952] ? _raw_spin_unlock_irq+0x45/0x70 [ 88.295155][ T1952] ? __cfi___x64_sys_rt_sigreturn+0x10/0x10 [ 88.295179][ T1952] ? __kasan_check_read+0x15/0x20 [ 88.295202][ T1952] x64_sys_call+0x2c14/0x2ee0 [ 88.295221][ T1952] do_syscall_64+0x57/0xf0 [ 88.295237][ T1952] ? clear_bhb_loop+0x50/0xa0 [ 88.295260][ T1952] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 88.295281][ T1952] RIP: 0033:0x7f4e9e79f559 [ 88.295297][ T1952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.295312][ T1952] RSP: 002b:00007f4e9f664028 EFLAGS: 00000246 [ 88.295329][ T1952] RAX: 0000000000000000 RBX: 00007f4e9ea25fa0 RCX: 00007f4e9e79f559 [ 88.295343][ T1952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 88.295355][ T1952] RBP: 00007f4e9e836b20 R08: 0000000000000000 R09: 0000000000000000 [ 88.295368][ T1952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.295380][ T1952] R13: 00007f4e9ea26038 R14: 00007f4e9ea25fa0 R15: 00007ffc3bc8aa28 [ 88.295396][ T1952] [ 88.493518][ T1948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.508975][ T686] usb 5-1: USB disconnect, device number 18 [ 88.730053][ T312] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 88.900066][ T312] usb 4-1: Using ep0 maxpacket: 16 [ 88.911086][ T312] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.930058][ T312] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 88.953269][ T312] usb 4-1: config 0 interface 0 has no altsetting 0 [ 88.959927][ T312] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 88.989335][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.000127][ T312] usb 4-1: config 0 descriptor?? [ 89.020218][ T312] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 90.268626][ T312] rust_binder: 1965: undelivered TRANSACTION_COMPLETE [ 90.860072][ T686] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 91.031532][ T686] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 91.050059][ T686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.080057][ T686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.089826][ T686] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 91.130740][ T686] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 91.139820][ T686] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 91.160050][ T686] usb 5-1: Manufacturer: syz [ 91.170262][ T686] usb 5-1: config 0 descriptor?? [ 91.305622][ T312] usb 4-1: USB disconnect, device number 18 [ 91.331568][ T1980] netlink: 76 bytes leftover after parsing attributes in process `syz.3.494'. [ 91.588139][ T686] usbhid 5-1:0.0: can't add hid device: -71 [ 91.600077][ T686] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 91.619140][ T686] usb 5-1: USB disconnect, device number 19 [ 91.770074][ T312] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 91.930064][ T312] usb 4-1: Using ep0 maxpacket: 8 [ 91.940211][ T312] usb 4-1: config 7 has an invalid interface number: 87 but max is 0 [ 91.948322][ T312] usb 4-1: config 7 has no interface number 0 [ 91.964578][ T312] usb 4-1: config 7 interface 87 altsetting 9 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 91.985649][ T312] usb 4-1: config 7 interface 87 altsetting 9 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 92.010049][ T312] usb 4-1: config 7 interface 87 has no altsetting 0 [ 92.028280][ T312] usb 4-1: New USB device found, idVendor=0403, idProduct=d738, bcdDevice= 1.74 [ 92.047572][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.057659][ T312] usb 4-1: Product: syz [ 92.067889][ T312] usb 4-1: Manufacturer: syz [ 92.077987][ T312] usb 4-1: SerialNumber: syz [ 92.166354][ T36] audit: type=1400 audit(1793432903.552:844): avc: denied { ioctl } for pid=1989 comm="syz.4.499" path="/dev/usbmon7" dev="devtmpfs" ino=112 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 92.290142][ T36] audit: type=1400 audit(1793432903.672:845): avc: denied { name_bind } for pid=1985 comm="syz.3.497" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 92.293397][ T1986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.350994][ T2008] virtio-fs: tag <> not found [ 92.370798][ T1986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.401595][ T312] ftdi_sio 4-1:7.87: FTDI USB Serial Device converter detected [ 92.409565][ T312] usb 4-1: Detected SIO [ 92.420573][ T312] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 92.439911][ T312] usb 4-1: USB disconnect, device number 19 [ 92.465947][ T312] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 92.479056][ T312] ftdi_sio 4-1:7.87: device disconnected [ 92.512103][ T36] audit: type=1400 audit(1793432903.902:846): avc: denied { name_bind } for pid=2009 comm="syz.4.501" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 92.931677][ T36] audit: type=1400 audit(1793432904.322:847): avc: denied { map } for pid=2014 comm="syz.3.503" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 92.975360][ T36] audit: type=1400 audit(1793432904.352:848): avc: denied { ioctl } for pid=2014 comm="syz.3.503" path="socket:[16089]" dev="sockfs" ino=16089 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 93.060454][ T2017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.504'. [ 93.069369][ T36] audit: type=1400 audit(1793432904.442:849): avc: denied { create } for pid=2016 comm="syz.3.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.113297][ T36] audit: type=1400 audit(1793432904.452:850): avc: denied { write } for pid=2016 comm="syz.3.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.153224][ T36] audit: type=1400 audit(1793432904.452:851): avc: denied { nlmsg_write } for pid=2016 comm="syz.3.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.359195][ T2025] FAULT_INJECTION: forcing a failure. [ 93.359195][ T2025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.390079][ T2025] CPU: 0 UID: 0 PID: 2025 Comm: syz.4.507 Not tainted syzkaller #0 86ffabe033aa4b611dc1eaf9ec72dc67ec78bb97 [ 93.390122][ T2025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 93.390136][ T2025] Call Trace: [ 93.390142][ T2025] [ 93.390150][ T2025] __dump_stack+0x21/0x30 [ 93.390172][ T2025] dump_stack_lvl+0x140/0x1c0 [ 93.390188][ T2025] ? __cfi_dump_stack_lvl+0x10/0x10 [ 93.390207][ T2025] ? check_stack_object+0x138/0x150 [ 93.390234][ T2025] dump_stack+0x19/0x20 [ 93.390249][ T2025] should_fail_ex+0x3c2/0x510 [ 93.390275][ T2025] should_fail+0xf/0x20 [ 93.390298][ T2025] should_fail_usercopy+0x1e/0x30 [ 93.390324][ T2025] _copy_to_user+0x24/0xa0 [ 93.390344][ T2025] simple_read_from_buffer+0xed/0x160 [ 93.390366][ T2025] proc_fail_nth_read+0x1aa/0x220 [ 93.390389][ T2025] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 93.390411][ T2025] ? bpf_lsm_file_permission+0xd/0x20 [ 93.390432][ T2025] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 93.390454][ T2025] vfs_read+0x28b/0xc70 [ 93.390478][ T2025] ? __cfi_vfs_read+0x10/0x10 [ 93.390502][ T2025] ? __kasan_check_write+0x18/0x20 [ 93.390526][ T2025] ? mutex_lock+0x97/0x1d0 [ 93.390547][ T2025] ? __cfi_mutex_lock+0x10/0x10 [ 93.390569][ T2025] ksys_read+0x145/0x260 [ 93.390594][ T2025] ? __cfi_ksys_read+0x10/0x10 [ 93.390619][ T2025] ? __kasan_check_read+0x15/0x20 [ 93.390643][ T2025] __x64_sys_read+0x7f/0x90 [ 93.390667][ T2025] x64_sys_call+0x2638/0x2ee0 [ 93.390686][ T2025] do_syscall_64+0x57/0xf0 [ 93.390703][ T2025] ? clear_bhb_loop+0x50/0xa0 [ 93.390726][ T2025] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 93.390746][ T2025] RIP: 0033:0x7f67f6f5fd8e [ 93.390763][ T2025] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 93.390778][ T2025] RSP: 002b:00007f67f7e29fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 93.390798][ T2025] RAX: ffffffffffffffda RBX: 00007f67f7e2a6c0 RCX: 00007f67f6f5fd8e [ 93.390813][ T2025] RDX: 000000000000000f RSI: 00007f67f7e2a0a0 RDI: 0000000000000004 [ 93.390825][ T2025] RBP: 00007f67f7e2a090 R08: 0000000000000000 R09: 0000000000000000 [ 93.390838][ T2025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.390850][ T2025] R13: 00007f67f7226038 R14: 00007f67f7225fa0 R15: 00007fff41f26c58 [ 93.390867][ T2025] [ 93.820245][ T36] audit: type=1400 audit(1793432905.202:852): avc: denied { execmem } for pid=2036 comm="syz.3.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 93.880059][ T686] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 94.031100][ T686] usb 5-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.050062][ T686] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 94.070393][ T686] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 94.090053][ T686] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 94.099135][ T686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.128189][ T36] audit: type=1400 audit(1793432905.512:853): avc: denied { getopt } for pid=2043 comm="syz.3.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.549739][ T686] hub 5-1:32.0: USB hub found [ 94.557732][ T686] hub 5-1:32.0: config failed, can't read hub descriptor (err -22) [ 94.604193][ T686] usb 5-1: USB disconnect, device number 20 [ 95.110064][ T686] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 95.199853][ T2081] netlink: 60 bytes leftover after parsing attributes in process `syz.4.525'. [ 95.272137][ T686] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.292459][ T686] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.337162][ T686] usb 4-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice= 0.00 [ 95.355346][ T686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.378352][ T686] usb 4-1: Product: syz [ 95.382619][ T686] usb 4-1: Manufacturer: syz [ 95.388869][ T686] usb 4-1: SerialNumber: syz [ 95.409995][ T686] zaurus 4-1:1.0: probe with driver zaurus failed with error -22 [ 95.770088][ T686] usb 4-1: USB disconnect, device number 20 [ 96.353727][ T2092] netlink: 20 bytes leftover after parsing attributes in process `syz.3.529'. [ 96.369351][ T2094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.530'. [ 96.680071][ T686] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 96.833260][ T686] usb 5-1: device descriptor read/64, error -71 [ 97.052302][ T2113] Invalid logical block size (525312) [ 97.080077][ T686] usb 5-1: device descriptor read/64, error -71 [ 97.310060][ T776] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 97.330204][ T686] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 97.470047][ T776] usb 4-1: Using ep0 maxpacket: 32 [ 97.480059][ T686] usb 5-1: device descriptor read/64, error -71 [ 97.490417][ T776] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.510207][ T776] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 97.533300][ T776] usb 4-1: config 0 interface 0 has no altsetting 0 [ 97.539940][ T776] usb 4-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 97.569281][ T776] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.580301][ T776] usb 4-1: config 0 descriptor?? [ 97.730057][ T686] usb 5-1: device descriptor read/64, error -71 [ 97.840180][ T686] usb usb5-port1: attempt power cycle [ 97.992443][ T776] input: HID 046d:c227 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:046D:C227.000B/input/input18 [ 98.012025][ T776] lg-g15 0003:046D:C227.000B: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 046d:c227] on usb-dummy_hcd.3-1/input0 [ 98.190087][ T686] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 98.221087][ T686] usb 5-1: device descriptor read/8, error -71 [ 98.351013][ T686] usb 5-1: device descriptor read/8, error -71 [ 98.591750][ T686] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 98.641028][ T686] usb 5-1: device descriptor read/8, error -71 [ 98.708017][ T776] usb 4-1: USB disconnect, device number 21 [ 98.798880][ T686] usb 5-1: device descriptor read/8, error -71 [ 98.870878][ T2119] netlink: 4476 bytes leftover after parsing attributes in process `syz.3.540'. [ 98.920185][ T686] usb usb5-port1: unable to enumerate USB device [ 99.140080][ T776] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 99.290076][ T776] usb 4-1: device descriptor read/64, error -71 [ 99.550084][ T776] usb 4-1: device descriptor read/64, error -71 [ 99.790077][ T776] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 99.830265][ T312] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 99.930073][ T776] usb 4-1: device descriptor read/64, error -71 [ 99.980065][ T312] usb 5-1: Invalid ep0 maxpacket: 32 [ 100.120069][ T312] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 100.170066][ T776] usb 4-1: device descriptor read/64, error -71 [ 100.280173][ T776] usb usb4-port1: attempt power cycle [ 100.290213][ T312] usb 5-1: Invalid ep0 maxpacket: 32 [ 100.300240][ T312] usb usb5-port1: attempt power cycle [ 100.630269][ T776] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 100.660074][ T312] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 100.670935][ T776] usb 4-1: device descriptor read/8, error -71 [ 100.700412][ T312] usb 5-1: Invalid ep0 maxpacket: 32 [ 100.801074][ T776] usb 4-1: device descriptor read/8, error -71 [ 100.840082][ T312] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 100.880420][ T312] usb 5-1: Invalid ep0 maxpacket: 32 [ 100.890141][ T312] usb usb5-port1: unable to enumerate USB device [ 101.050066][ T776] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 101.071049][ T776] usb 4-1: device descriptor read/8, error -71 [ 101.201071][ T776] usb 4-1: device descriptor read/8, error -71 [ 101.320121][ T776] usb usb4-port1: unable to enumerate USB device [ 101.585493][ T2123] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.606464][ T2123] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.613869][ T2123] bridge_slave_0: entered allmulticast mode [ 101.621182][ T2123] bridge_slave_0: entered promiscuous mode [ 101.627836][ T2123] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.635140][ T2123] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.642543][ T2123] bridge_slave_1: entered allmulticast mode [ 101.648887][ T2123] bridge_slave_1: entered promiscuous mode [ 101.711437][ T2123] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.718543][ T2123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.725875][ T2123] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.732959][ T2123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.757390][ T343] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.765052][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.777207][ T441] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.784312][ T441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.792403][ T441] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.799454][ T441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.829134][ T2123] veth0_vlan: entered promiscuous mode [ 101.843057][ T2123] veth1_macvtap: entered promiscuous mode [ 102.300059][ T776] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 102.440073][ T776] usb 4-1: device descriptor read/64, error -71 [ 102.680080][ T776] usb 4-1: device descriptor read/64, error -71 [ 102.728568][ T2146] .N: renamed from veth0_to_bond (while UP) [ 102.775888][ T2132] overlayfs: statfs failed on './file0' [ 102.819909][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 102.819928][ T36] audit: type=1400 audit(1793432914.202:858): avc: denied { map } for pid=2155 comm="syz.4.554" path="/113/proc/sys/kernel/watchdog" dev="proc" ino=17823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_kernel_t tclass=file permissive=1 [ 102.930095][ T776] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 103.050633][ T2166] kvm_pr_unimpl_wrmsr: 2 callbacks suppressed [ 103.050655][ T2166] kvm: kvm [2165]: vcpu0, guest rIP: 0x1db Unhandled WRMSR(0xc1) = 0xb0006100008862 [ 103.070076][ T776] usb 4-1: device descriptor read/64, error -71 [ 103.078588][ T2166] kvm: kvm [2165]: vcpu0, guest rIP: 0x1db Unhandled WRMSR(0xc2) = 0xb0006100007c83 [ 103.111964][ T2172] bridge0: port 3(syz_tun) entered blocking state [ 103.118425][ T2172] bridge0: port 3(syz_tun) entered disabled state [ 103.125139][ T36] audit: type=1400 audit(1793432914.502:859): avc: denied { ioctl } for pid=2169 comm="syz.5.558" path="socket:[17972]" dev="sockfs" ino=17972 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 103.160294][ T2172] syz_tun: entered allmulticast mode [ 103.170965][ T2172] syz_tun: entered promiscuous mode [ 103.181044][ T2172] bridge0: port 3(syz_tun) entered blocking state [ 103.187521][ T2172] bridge0: port 3(syz_tun) entered forwarding state [ 103.320169][ T776] usb 4-1: device descriptor read/64, error -71 [ 103.430192][ T776] usb usb4-port1: attempt power cycle [ 103.480133][ T312] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 103.640082][ T312] usb 5-1: Using ep0 maxpacket: 8 [ 103.646570][ T312] usb 5-1: unable to get BOS descriptor or descriptor too short [ 103.655368][ T312] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 103.663815][ T312] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 103.673625][ T312] usb 5-1: config 4 has no interface number 0 [ 103.681405][ T312] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 103.690676][ T312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.698742][ T312] usb 5-1: Product: syz [ 103.703331][ T312] usb 5-1: Manufacturer: syz [ 103.708009][ T312] usb 5-1: SerialNumber: syz [ 103.770125][ T776] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 103.791088][ T776] usb 4-1: device descriptor read/8, error -71 [ 103.920701][ T312] usb 5-1: Found UVC 0.02 device syz (04f2:b746) [ 103.927181][ T312] uvcvideo 5-1:4.147: Entity type for entity Output 251 was not initialized! [ 103.937499][ T312] usb 5-1: Failed to create links for entity 251 [ 103.945193][ T312] usb 5-1: Failed to register entities (-22). [ 103.952457][ T776] usb 4-1: device descriptor read/8, error -71 [ 103.959831][ T312] usb 5-1: USB disconnect, device number 29 [ 104.097978][ T36] audit: type=1400 audit(1793432915.482:860): avc: denied { ioctl } for pid=2182 comm="syz.5.563" path="/6/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 104.174650][ T2184] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.181899][ T2184] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.189025][ T2184] bridge_slave_0: entered allmulticast mode [ 104.195267][ T2184] bridge_slave_0: entered promiscuous mode [ 104.200113][ T776] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 104.201896][ T2184] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.215653][ T2184] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.222944][ T2184] bridge_slave_1: entered allmulticast mode [ 104.229142][ T2184] bridge_slave_1: entered promiscuous mode [ 104.233981][ T776] usb 4-1: device descriptor read/8, error -71 [ 104.244223][ T343] bridge_slave_1: left allmulticast mode [ 104.249913][ T343] bridge_slave_1: left promiscuous mode [ 104.255749][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.263422][ T343] bridge_slave_0: left allmulticast mode [ 104.269068][ T343] bridge_slave_0: left promiscuous mode [ 104.274728][ T343] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.350419][ T2184] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.357470][ T2184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.364766][ T2184] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.371815][ T2184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.380238][ T312] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 104.390917][ T776] usb 4-1: device descriptor read/8, error -71 [ 104.401633][ T343] tipc: Disabling bearer [ 104.406971][ T343] tipc: Disabling bearer [ 104.412496][ T343] tipc: Disabling bearer [ 104.417963][ T343] tipc: Left network mode [ 104.424506][ T343] veth1_macvtap: left promiscuous mode [ 104.430919][ T343] veth0_vlan: left promiscuous mode [ 104.492751][ T2184] veth0_vlan: entered promiscuous mode [ 104.497124][ T36] audit: type=1400 audit(1793432915.882:861): avc: denied { setopt } for pid=2195 comm="syz.4.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 104.504522][ T2184] veth1_macvtap: entered promiscuous mode [ 104.520583][ T776] usb usb4-port1: unable to enumerate USB device [ 104.532074][ T36] audit: type=1400 audit(1793432915.882:862): avc: denied { sys_admin } for pid=2195 comm="syz.4.567" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 104.580494][ T312] usb 6-1: Using ep0 maxpacket: 32 [ 104.586739][ T312] usb 6-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 104.599728][ T312] usb 6-1: config 0 interface 0 has no altsetting 0 [ 104.606376][ T312] usb 6-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 104.615542][ T312] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.624351][ T312] usb 6-1: config 0 descriptor?? [ 104.820066][ T658] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 104.971107][ T658] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.981320][ T658] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 65535, setting to 64 [ 104.996522][ T658] usb 7-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 105.005711][ T658] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.013969][ T658] usb 7-1: Product: syz [ 105.018375][ T658] usb 7-1: Manufacturer: syz [ 105.023077][ T658] usb 7-1: SerialNumber: syz [ 105.028892][ T2201] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 105.089340][ T2215] sd 0:0:1:0: PR command failed: 1026 [ 105.094980][ T2215] sd 0:0:1:0: Sense Key : 0x5 [current] [ 105.100754][ T2215] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 105.157462][ T2223] FAULT_INJECTION: forcing a failure. [ 105.157462][ T2223] name fail_futex, interval 1, probability 0, space 0, times 1 [ 105.170498][ T2223] CPU: 0 UID: 0 PID: 2223 Comm: syz.3.577 Not tainted syzkaller #0 86ffabe033aa4b611dc1eaf9ec72dc67ec78bb97 [ 105.170530][ T2223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 105.170543][ T2223] Call Trace: [ 105.170548][ T2223] [ 105.170556][ T2223] __dump_stack+0x21/0x30 [ 105.170578][ T2223] dump_stack_lvl+0x140/0x1c0 [ 105.170598][ T2223] ? __cfi_dump_stack_lvl+0x10/0x10 [ 105.170614][ T2223] ? unwind_get_return_address+0x51/0x90 [ 105.170639][ T2223] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 105.170667][ T2223] dump_stack+0x19/0x20 [ 105.170683][ T2223] should_fail_ex+0x3c2/0x510 [ 105.170708][ T2223] should_fail+0xf/0x20 [ 105.170730][ T2223] get_futex_key+0x5c4/0x940 [ 105.170749][ T2223] ? __cfi_get_futex_key+0x10/0x10 [ 105.170766][ T2223] ? kasan_save_track+0x4f/0x80 [ 105.170785][ T2223] futex_wake+0x150/0x950 [ 105.170807][ T2223] ? __cfi_futex_wake+0x10/0x10 [ 105.170828][ T2223] ? perf_lock_task_context+0x398/0x450 [ 105.170855][ T2223] ? __perf_event_period+0x490/0x490 [ 105.170880][ T2223] ? mutex_unlock+0x90/0x240 [ 105.170903][ T2223] do_futex+0x37d/0x510 [ 105.170922][ T2223] ? __kasan_check_read+0x15/0x20 [ 105.170947][ T2223] ? __cfi_do_futex+0x10/0x10 [ 105.170966][ T2223] ? __kasan_check_write+0x18/0x20 [ 105.170990][ T2223] mm_release+0x15f/0x300 [ 105.171013][ T2223] ? exit_mm_release+0x50/0x50 [ 105.171036][ T2223] ? futex_exit_release+0x11d/0x1f0 [ 105.171056][ T2223] exit_mm_release+0x29/0x50 [ 105.171079][ T2223] do_exit+0x832/0x2850 [ 105.171105][ T2223] ? futex_wake+0x666/0x950 [ 105.171127][ T2223] ? __cfi_do_exit+0x10/0x10 [ 105.171151][ T2223] ? futex_wait+0x2b8/0x7c0 [ 105.171173][ T2223] ? __cfi_futex_wait+0x10/0x10 [ 105.171195][ T2223] ? __kasan_check_write+0x18/0x20 [ 105.171218][ T2223] ? _raw_spin_lock_irq+0x93/0x120 [ 105.171243][ T2223] do_group_exit+0x21f/0x2f0 [ 105.171266][ T2223] ? __kasan_check_write+0x18/0x20 [ 105.171289][ T2223] ? recalc_sigpending+0x16c/0x1d0 [ 105.171310][ T2223] get_signal+0x134c/0x1490 [ 105.171345][ T2223] arch_do_signal_or_restart+0xbc/0x700 [ 105.171365][ T2223] ? fput+0x1a4/0x230 [ 105.171384][ T2223] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 105.171407][ T2223] syscall_exit_to_user_mode+0x57/0xb0 [ 105.171431][ T2223] do_syscall_64+0x63/0xf0 [ 105.171448][ T2223] ? clear_bhb_loop+0x50/0xa0 [ 105.171471][ T2223] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 105.171492][ T2223] RIP: 0033:0x7f904c79f559 [ 105.171509][ T2223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.171525][ T2223] RSP: 002b:00007f904d6510e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 105.171547][ T2223] RAX: fffffffffffffe00 RBX: 00007f904ca25fa8 RCX: 00007f904c79f559 [ 105.171561][ T2223] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f904ca25fa8 [ 105.171574][ T2223] RBP: 00007f904ca25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 105.171586][ T2223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.171599][ T2223] R13: 00007f904ca26038 R14: 00007ffd70d3c690 R15: 00007ffd70d3c778 [ 105.171615][ T2223] [ 105.197285][ T312] usbhid 6-1:0.0: can't add hid device: -71 [ 105.241428][ T2201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.251001][ T312] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 105.251867][ T2201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.265426][ T312] usb 6-1: USB disconnect, device number 2 [ 105.279017][ T658] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 105.380073][ T776] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 105.390651][ T658] usb 7-1: USB disconnect, device number 2 [ 105.551179][ T776] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 105.593493][ T776] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.608650][ T776] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.621476][ T776] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 105.640182][ T36] audit: type=1400 audit(1793432917.022:863): avc: denied { ioctl } for pid=2229 comm="syz.5.580" path="/8/file2" dev="tmpfs" ino=65 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 105.664094][ T776] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 105.676954][ T776] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 105.685418][ T776] usb 5-1: Manufacturer: syz [ 105.696570][ T776] usb 5-1: config 0 descriptor?? [ 105.910080][ T686] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 106.060058][ T686] usb 6-1: Using ep0 maxpacket: 16 [ 106.067853][ T686] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 106.077640][ T686] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.085971][ T658] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 106.093823][ T686] usb 6-1: Product: syz [ 106.098001][ T686] usb 6-1: Manufacturer: syz [ 106.110107][ T686] usb 6-1: SerialNumber: syz [ 106.122587][ T686] usb 6-1: config 0 descriptor?? [ 106.128274][ T776] usbhid 5-1:0.0: can't add hid device: -71 [ 106.131420][ T686] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 106.134421][ T776] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 106.153786][ T776] usb 5-1: USB disconnect, device number 30 [ 106.154185][ T686] usb 6-1: Detected FT-X [ 106.240314][ T658] usb 7-1: device descriptor read/64, error -71 [ 106.331652][ T2232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.341792][ T2232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.360925][ T2232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.370272][ T2232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.386893][ T2232] can0: slcan on ttyS3. [ 106.450663][ T2244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.469267][ T2244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.480071][ T658] usb 7-1: device descriptor read/64, error -71 [ 106.525984][ T2231] can0 (unregistered): slcan off ttyS3. [ 106.537077][ T686] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 106.550788][ T686] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 106.562201][ T686] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 106.582936][ T686] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 106.593413][ T686] usb 6-1: USB disconnect, device number 3 [ 106.600469][ T686] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 106.620060][ T686] ftdi_sio 6-1:0.0: device disconnected [ 106.720118][ T658] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 106.817539][ T2270] x86/PAT: syz.4.585:2270 freeing invalid memtype [mem 0xfe408000-0xfe408fff] [ 106.840337][ T2269] x86/PAT: syz.4.585:2269 freeing invalid memtype [mem 0xfe407000-0xfe407fff] [ 106.872485][ T658] usb 7-1: device descriptor read/64, error -71 [ 106.874267][ T2273] FAULT_INJECTION: forcing a failure. [ 106.874267][ T2273] name fail_futex, interval 1, probability 0, space 0, times 0 [ 106.891661][ T2273] CPU: 1 UID: 0 PID: 2273 Comm: syz.4.586 Not tainted syzkaller #0 86ffabe033aa4b611dc1eaf9ec72dc67ec78bb97 [ 106.891692][ T2273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 106.891705][ T2273] Call Trace: [ 106.891711][ T2273] [ 106.891718][ T2273] __dump_stack+0x21/0x30 [ 106.891741][ T2273] dump_stack_lvl+0x140/0x1c0 [ 106.891758][ T2273] ? __cfi_dump_stack_lvl+0x10/0x10 [ 106.891775][ T2273] ? unwind_get_return_address+0x51/0x90 [ 106.891801][ T2273] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 106.891829][ T2273] dump_stack+0x19/0x20 [ 106.891845][ T2273] should_fail_ex+0x3c2/0x510 [ 106.891870][ T2273] should_fail+0xf/0x20 [ 106.891894][ T2273] get_futex_key+0x5c4/0x940 [ 106.891913][ T2273] ? __cfi_get_futex_key+0x10/0x10 [ 106.891928][ T2273] ? kasan_save_track+0x4f/0x80 [ 106.891947][ T2273] futex_wake+0x150/0x950 [ 106.891969][ T2273] ? __cfi_futex_wake+0x10/0x10 [ 106.891990][ T2273] ? perf_lock_task_context+0x398/0x450 [ 106.892018][ T2273] ? __perf_event_period+0x490/0x490 [ 106.892052][ T2273] ? mutex_unlock+0x90/0x240 [ 106.892074][ T2273] do_futex+0x37d/0x510 [ 106.892094][ T2273] ? __kasan_check_read+0x15/0x20 [ 106.892118][ T2273] ? __cfi_do_futex+0x10/0x10 [ 106.892138][ T2273] ? __kasan_check_write+0x18/0x20 [ 106.892163][ T2273] mm_release+0x15f/0x300 [ 106.892186][ T2273] ? exit_mm_release+0x50/0x50 [ 106.892207][ T2273] ? futex_exit_release+0x11d/0x1f0 [ 106.892228][ T2273] exit_mm_release+0x29/0x50 [ 106.892251][ T2273] do_exit+0x832/0x2850 [ 106.892276][ T2273] ? futex_wake+0x666/0x950 [ 106.892299][ T2273] ? __cfi_do_exit+0x10/0x10 [ 106.892323][ T2273] ? futex_wait+0x2b8/0x7c0 [ 106.892345][ T2273] ? __cfi_futex_wait+0x10/0x10 [ 106.892368][ T2273] ? __kasan_check_write+0x18/0x20 [ 106.892392][ T2273] ? _raw_spin_lock_irq+0x93/0x120 [ 106.892419][ T2273] do_group_exit+0x21f/0x2f0 [ 106.892444][ T2273] ? __kasan_check_write+0x18/0x20 [ 106.892468][ T2273] ? recalc_sigpending+0x16c/0x1d0 [ 106.892490][ T2273] get_signal+0x134c/0x1490 [ 106.892517][ T2273] arch_do_signal_or_restart+0xbc/0x700 [ 106.892536][ T2273] ? fput+0x1a4/0x230 [ 106.892556][ T2273] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 106.892579][ T2273] syscall_exit_to_user_mode+0x57/0xb0 [ 106.892603][ T2273] do_syscall_64+0x63/0xf0 [ 106.892620][ T2273] ? clear_bhb_loop+0x50/0xa0 [ 106.892643][ T2273] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 106.892665][ T2273] RIP: 0033:0x7f67f6f9f559 [ 106.892682][ T2273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.892698][ T2273] RSP: 002b:00007f67f7e2a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 106.892719][ T2273] RAX: fffffffffffffe00 RBX: 00007f67f7225fa8 RCX: 00007f67f6f9f559 [ 106.892734][ T2273] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f67f7225fa8 [ 106.892747][ T2273] RBP: 00007f67f7225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 106.892760][ T2273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.892772][ T2273] R13: 00007f67f7226038 R14: 00007fff41f26b70 R15: 00007fff41f26c58 [ 106.892786][ T2273] [ 107.110363][ T658] usb 7-1: device descriptor read/64, error -71 [ 107.302145][ T36] audit: type=1400 audit(1793432918.682:864): avc: denied { watch watch_reads } for pid=2276 comm="syz.5.588" path="/10/mnt" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 107.480178][ T658] usb usb7-port1: attempt power cycle [ 107.820077][ T686] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 107.830062][ T658] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 107.851068][ T658] usb 7-1: device descriptor read/8, error -71 [ 107.981041][ T658] usb 7-1: device descriptor read/8, error -71 [ 107.991071][ T686] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 108.002039][ T686] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.020239][ T686] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.040071][ T686] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 108.070828][ T686] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 108.080191][ T686] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 108.088287][ T686] usb 6-1: Manufacturer: syz [ 108.103849][ T686] usb 6-1: config 0 descriptor?? [ 108.230186][ T658] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 108.251085][ T658] usb 7-1: device descriptor read/8, error -71 [ 108.381121][ T658] usb 7-1: device descriptor read/8, error -71 [ 108.490219][ T658] usb usb7-port1: unable to enumerate USB device [ 108.533600][ T686] usbhid 6-1:0.0: can't add hid device: -71 [ 108.549806][ T686] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 108.570106][ T686] usb 6-1: USB disconnect, device number 4 [ 109.091111][ T2293] FAULT_INJECTION: forcing a failure. [ 109.091111][ T2293] name fail_futex, interval 1, probability 0, space 0, times 0 [ 109.130093][ T2293] CPU: 0 UID: 0 PID: 2293 Comm: syz.5.595 Not tainted syzkaller #0 86ffabe033aa4b611dc1eaf9ec72dc67ec78bb97 [ 109.130126][ T2293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 109.130139][ T2293] Call Trace: [ 109.130145][ T2293] [ 109.130152][ T2293] __dump_stack+0x21/0x30 [ 109.130173][ T2293] dump_stack_lvl+0x140/0x1c0 [ 109.130187][ T2293] ? __cfi_dump_stack_lvl+0x10/0x10 [ 109.130208][ T2293] ? unwind_get_return_address+0x51/0x90 [ 109.130234][ T2293] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 109.130262][ T2293] dump_stack+0x19/0x20 [ 109.130278][ T2293] should_fail_ex+0x3c2/0x510 [ 109.130303][ T2293] should_fail+0xf/0x20 [ 109.130326][ T2293] get_futex_key+0x5c4/0x940 [ 109.130346][ T2293] ? __cfi_get_futex_key+0x10/0x10 [ 109.130363][ T2293] ? kasan_save_track+0x4f/0x80 [ 109.130382][ T2293] futex_wake+0x150/0x950 [ 109.130403][ T2293] ? __cfi_futex_wake+0x10/0x10 [ 109.130425][ T2293] ? perf_lock_task_context+0x398/0x450 [ 109.130452][ T2293] ? __perf_event_period+0x490/0x490 [ 109.130477][ T2293] ? mutex_unlock+0x90/0x240 [ 109.130500][ T2293] do_futex+0x37d/0x510 [ 109.130518][ T2293] ? __kasan_check_read+0x15/0x20 [ 109.130543][ T2293] ? __cfi_do_futex+0x10/0x10 [ 109.130562][ T2293] ? __kasan_check_write+0x18/0x20 [ 109.130587][ T2293] mm_release+0x15f/0x300 [ 109.130608][ T2293] ? exit_mm_release+0x50/0x50 [ 109.130632][ T2293] ? futex_exit_release+0x11d/0x1f0 [ 109.130651][ T2293] exit_mm_release+0x29/0x50 [ 109.130674][ T2293] do_exit+0x832/0x2850 [ 109.130698][ T2293] ? futex_wake+0x666/0x950 [ 109.130721][ T2293] ? __cfi_do_exit+0x10/0x10 [ 109.130745][ T2293] ? futex_wait+0x2b8/0x7c0 [ 109.130766][ T2293] ? __cfi_futex_wait+0x10/0x10 [ 109.130789][ T2293] ? __kasan_check_write+0x18/0x20 [ 109.130812][ T2293] ? _raw_spin_lock_irq+0x93/0x120 [ 109.130839][ T2293] do_group_exit+0x21f/0x2f0 [ 109.130862][ T2293] ? __kasan_check_write+0x18/0x20 [ 109.130886][ T2293] ? recalc_sigpending+0x16c/0x1d0 [ 109.130917][ T2293] get_signal+0x134c/0x1490 [ 109.130945][ T2293] arch_do_signal_or_restart+0xbc/0x700 [ 109.130966][ T2293] ? fput+0x1a4/0x230 [ 109.130986][ T2293] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 109.131008][ T2293] syscall_exit_to_user_mode+0x57/0xb0 [ 109.131033][ T2293] do_syscall_64+0x63/0xf0 [ 109.131049][ T2293] ? clear_bhb_loop+0x50/0xa0 [ 109.131073][ T2293] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 109.131095][ T2293] RIP: 0033:0x7fe9e059f559 [ 109.131112][ T2293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.131128][ T2293] RSP: 002b:00007fe9deff70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 109.131149][ T2293] RAX: fffffffffffffe00 RBX: 00007fe9e0825fa8 RCX: 00007fe9e059f559 [ 109.131161][ T2293] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe9e0825fa8 [ 109.131174][ T2293] RBP: 00007fe9e0825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 109.131187][ T2293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.131199][ T2293] R13: 00007fe9e0826038 R14: 00007ffefc419f40 R15: 00007ffefc41a028 [ 109.131215][ T2293] [ 109.664124][ T2304] FAULT_INJECTION: forcing a failure. [ 109.664124][ T2304] name failslab, interval 1, probability 0, space 0, times 0 [ 109.730146][ T2304] CPU: 1 UID: 0 PID: 2304 Comm: syz.6.599 Not tainted syzkaller #0 86ffabe033aa4b611dc1eaf9ec72dc67ec78bb97 [ 109.730181][ T2304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 109.730194][ T2304] Call Trace: [ 109.730200][ T2304] [ 109.730207][ T2304] __dump_stack+0x21/0x30 [ 109.730229][ T2304] dump_stack_lvl+0x140/0x1c0 [ 109.730247][ T2304] ? __cfi_dump_stack_lvl+0x10/0x10 [ 109.730266][ T2304] dump_stack+0x19/0x20 [ 109.730282][ T2304] should_fail_ex+0x3c2/0x510 [ 109.730308][ T2304] ? p9_fcall_init+0x12d/0x360 [ 109.730334][ T2304] should_failslab+0xac/0x100 [ 109.730353][ T2304] __kmalloc_noprof+0x69/0x510 [ 109.730378][ T2304] ? p9_fcall_init+0x12d/0x360 [ 109.730403][ T2304] ? __kasan_slab_alloc+0x73/0x90 [ 109.730422][ T2304] p9_fcall_init+0x12d/0x360 [ 109.730455][ T2304] ? p9_msg_buf_size+0x1911/0x2180 [ 109.730480][ T2304] p9_client_prepare_req+0x2a6/0xa50 [ 109.730505][ T2304] ? path_mount+0x66a/0xff0 [ 109.730529][ T2304] ? __se_sys_mount+0x2bf/0x480 [ 109.730554][ T2304] ? trace_raw_output_9p_fid_ref+0x190/0x190 [ 109.730583][ T2304] p9_client_rpc+0x192/0xea0 [ 109.730606][ T2304] ? __kasan_check_write+0x18/0x20 [ 109.730631][ T2304] ? __cfi__raw_spin_lock+0x10/0x10 [ 109.730658][ T2304] ? add_wait_queue+0x18a/0x1d0 [ 109.730683][ T2304] ? p9_fid_create+0x3d0/0x3d0 [ 109.730705][ T2304] ? p9_pollwait+0x12b/0x170 [ 109.730722][ T2304] ? _raw_spin_unlock+0x45/0x60 [ 109.730739][ T2304] ? __kasan_check_write+0x18/0x20 [ 109.730762][ T2304] ? p9_conn_create+0x4f2/0x590 [ 109.730780][ T2304] ? p9_fd_create+0x2f4/0x4c0 [ 109.730796][ T2304] p9_client_create+0xa26/0x12d0 [ 109.730820][ T2304] ? __cfi_p9_client_create+0x10/0x10 [ 109.730843][ T2304] ? __kasan_kmalloc+0x96/0xb0 [ 109.730860][ T2304] ? __kmalloc_cache_noprof+0x23c/0x470 [ 109.730885][ T2304] ? v9fs_mount+0xc1/0x9d0 [ 109.730904][ T2304] ? kasan_save_alloc_info+0x3a/0x50 [ 109.730927][ T2304] ? __kasan_kmalloc+0x96/0xb0 [ 109.730945][ T2304] ? kstrdup+0x7b/0x130 [ 109.730967][ T2304] ? __asan_memset+0x39/0x50 [ 109.730991][ T2304] v9fs_session_init+0x1c4/0x18a0 [ 109.731017][ T2304] ? __cfi_v9fs_session_init+0x10/0x10 [ 109.731042][ T2304] ? kasan_save_alloc_info+0x3a/0x50 [ 109.731064][ T2304] ? __kasan_kmalloc+0x96/0xb0 [ 109.731082][ T2304] ? __kmalloc_cache_noprof+0x23c/0x470 [ 109.731107][ T2304] ? v9fs_mount+0xc1/0x9d0 [ 109.731125][ T2304] v9fs_mount+0xdb/0x9d0 [ 109.731143][ T2304] ? __cfi_v9fs_mount+0x10/0x10 [ 109.731165][ T2304] ? selinux_capable+0x38/0x50 [ 109.731186][ T2304] legacy_get_tree+0x103/0x1b0 [ 109.731208][ T2304] ? __cfi_v9fs_mount+0x10/0x10 [ 109.731226][ T2304] vfs_get_tree+0x9e/0x290 [ 109.731250][ T2304] do_new_mount+0x251/0xb40 [ 109.731275][ T2304] ? security_capable+0x44/0x130 [ 109.731294][ T2304] path_mount+0x66a/0xff0 [ 109.731318][ T2304] ? putname+0x113/0x150 [ 109.731335][ T2304] __se_sys_mount+0x2bf/0x480 [ 109.731359][ T2304] ? ksys_write+0x1f3/0x260 [ 109.731384][ T2304] ? __x64_sys_mount+0xf0/0xf0 [ 109.731411][ T2304] __x64_sys_mount+0xc3/0xf0 [ 109.731436][ T2304] x64_sys_call+0x2021/0x2ee0 [ 109.731461][ T2304] do_syscall_64+0x57/0xf0 [ 109.731478][ T2304] ? clear_bhb_loop+0x50/0xa0 [ 109.731501][ T2304] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 109.731523][ T2304] RIP: 0033:0x7f4b1559f559 [ 109.731539][ T2304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.731556][ T2304] RSP: 002b:00007f4b16487028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 109.731578][ T2304] RAX: ffffffffffffffda RBX: 00007f4b15825fa0 RCX: 00007f4b1559f559 [ 109.731593][ T2304] RDX: 00002000000022c0 RSI: 0000200000002280 RDI: 0000000000000000 [ 109.731606][ T2304] RBP: 00007f4b16487090 R08: 00002000000000c0 R09: 0000000000000000 [ 109.731618][ T2304] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000002 [ 109.731630][ T2304] R13: 00007f4b15826038 R14: 00007f4b15825fa0 R15: 00007fff4f5cbb38 [ 109.731647][ T2304] [ 110.970093][ T686] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 111.131060][ T686] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 111.150069][ T686] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.170056][ T686] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.200159][ T686] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 111.234227][ T686] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 111.250095][ T686] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 111.278520][ T686] usb 7-1: Manufacturer: syz [ 111.298967][ T686] usb 7-1: config 0 descriptor?? [ 111.722601][ T686] usbhid 7-1:0.0: can't add hid device: -71 [ 111.728627][ T686] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 111.745660][ T686] usb 7-1: USB disconnect, device number 7 [ 112.530090][ T2188] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 112.710759][ T2188] usb 7-1: not running at top speed; connect to a high speed hub [ 112.719234][ T2188] usb 7-1: config 1 has an invalid descriptor of length 72, skipping remainder of the config [ 112.730767][ T2188] usb 7-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 112.739825][ T2188] usb 7-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 112.760068][ T2188] usb 7-1: Product: syz [ 112.764270][ T2188] usb 7-1: Manufacturer: syz [ 112.781624][ T2188] usb 7-1: Found UVC 1.00 device syz (225a:e1d4) [ 113.165867][ T2188] usb 7-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 113.182315][ T2188] uvcvideo 7-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 113.210111][ T2188] uvcvideo 7-1:1.1: Failed to initialize the device (-71). [ 113.229190][ T2188] usb 7-1: USB disconnect, device number 8 [ 114.591472][ T36] audit: type=1400 audit(1793432925.982:865): avc: denied { mounton } for pid=2331 comm="syz.6.609" path="/proc/51/task" dev="proc" ino=18888 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 114.675661][ T36] audit: type=1400 audit(1793432926.062:866): avc: denied { cmd } for pid=2331 comm="iou-wrk-2332" path="socket:[18887]" dev="sockfs" ino=18887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 114.980231][ T36] audit: type=1400 audit(1793432926.372:867): avc: denied { lock } for pid=2338 comm="syz.6.611" path="/dev/vsock" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.400078][ T2188] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 116.570588][ T2188] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 116.600064][ T2188] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.630827][ T2188] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.650100][ T2188] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 116.690873][ T2188] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 116.699943][ T2188] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 116.720053][ T2188] usb 7-1: Manufacturer: syz [ 116.725385][ T2188] usb 7-1: config 0 descriptor?? [ 117.182381][ T2188] usbhid 7-1:0.0: can't add hid device: -71 [ 117.188372][ T2188] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 117.223054][ T2188] usb 7-1: USB disconnect, device number 9 [ 118.689996][ T2370] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 118.699714][ T36] audit: type=1400 audit(1793432930.082:868): avc: denied { setattr } for pid=2369 comm="syz.6.618" name="file0" dev="cgroup2" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.761486][ T36] audit: type=1400 audit(1793432930.152:869): avc: denied { map } for pid=2369 comm="syz.6.618" path="/proc/89/net/sockstat" dev="proc" ino=4026532988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 118.838761][ T36] audit: type=1400 audit(1793432930.222:870): avc: denied { bind } for pid=2369 comm="syz.6.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.570807][ T2376] 9pnet: Could not find request transport: Ld [ 119.860105][ T2188] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 120.031109][ T2188] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 120.050080][ T2188] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.080092][ T2188] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.089874][ T2188] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 120.144059][ T2188] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 120.153171][ T2188] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 120.170092][ T2188] usb 7-1: Manufacturer: syz [ 120.180789][ T2188] usb 7-1: config 0 descriptor?? [ 120.612974][ T2188] usbhid 7-1:0.0: can't add hid device: -71 [ 120.619817][ T2188] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 120.652852][ T2188] usb 7-1: USB disconnect, device number 10 [ 120.939342][ T2380] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.960095][ T2380] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.967206][ T2380] bridge_slave_0: entered allmulticast mode [ 120.990478][ T2380] bridge_slave_0: entered promiscuous mode [ 120.997100][ T2380] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.020049][ T2380] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.027162][ T2380] bridge_slave_1: entered allmulticast mode [ 121.040478][ T2380] bridge_slave_1: entered promiscuous mode [ 121.099233][ T2380] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.106332][ T2380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.113647][ T2380] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.120704][ T2380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.152015][ T442] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.166496][ T442] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.181643][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.188731][ T343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.210632][ T442] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.217700][ T442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.284856][ T2380] veth0_vlan: entered promiscuous mode [ 121.307567][ T2380] veth1_macvtap: entered promiscuous mode [ 121.402105][ T36] audit: type=1400 audit(1793432932.792:871): avc: denied { map } for pid=2395 comm="syz.7.625" path="socket:[19451]" dev="sockfs" ino=19451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 121.426994][ T2396] fuse: Bad value for 'group_id' [ 121.432063][ T2396] fuse: Bad value for 'group_id' [ 121.457001][ T36] audit: type=1400 audit(1793432932.822:872): avc: denied { read } for pid=2395 comm="syz.7.625" path="socket:[19451]" dev="sockfs" ino=19451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 121.552551][ T441] bridge_slave_1: left allmulticast mode [ 121.558275][ T441] bridge_slave_1: left promiscuous mode [ 121.572086][ T441] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.573784][ T36] audit: type=1400 audit(1793432932.962:873): avc: denied { accept } for pid=2400 comm="syz.6.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 121.599831][ T441] bridge_slave_0: left allmulticast mode [ 121.619639][ T441] bridge_slave_0: left promiscuous mode [ 121.639881][ T441] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.788471][ T441] veth1_macvtap: left promiscuous mode [ 121.799619][ T441] veth0_vlan: left promiscuous mode [ 122.029467][ T2404] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.036760][ T2404] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.043888][ T2404] bridge_slave_0: entered allmulticast mode [ 122.050320][ T2404] bridge_slave_0: entered promiscuous mode [ 122.057060][ T2404] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.064219][ T2404] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.071678][ T2404] bridge_slave_1: entered allmulticast mode [ 122.078121][ T2404] bridge_slave_1: entered promiscuous mode [ 122.167043][ T2409] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.174432][ T2409] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.181763][ T2409] bridge_slave_0: entered allmulticast mode [ 122.188153][ T2409] bridge_slave_0: entered promiscuous mode [ 122.211411][ T2409] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.218834][ T2409] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.226149][ T2409] bridge_slave_1: entered allmulticast mode [ 122.232698][ T2409] bridge_slave_1: entered promiscuous mode [ 122.250805][ T2404] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.257893][ T2404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.265235][ T2404] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.272297][ T2404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.332296][ T442] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.339646][ T442] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.368928][ T441] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.376724][ T441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.400331][ T441] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.407417][ T441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.462383][ T441] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.469485][ T441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.478908][ T441] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.486008][ T441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.512431][ T2404] veth0_vlan: entered promiscuous mode [ 122.536139][ T2404] veth1_macvtap: entered promiscuous mode [ 122.552806][ T2409] veth0_vlan: entered promiscuous mode [ 122.584129][ T2409] veth1_macvtap: entered promiscuous mode [ 122.611185][ T36] audit: type=1326 audit(1793432934.002:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2422 comm="syz.6.634" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b1559f559 code=0x0 [ 122.890106][ T658] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 122.977408][ T2442] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 122.986164][ T2442] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 123.051113][ T658] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 123.067685][ T658] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.085524][ T658] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.095793][ T658] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 123.109841][ T658] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 123.119508][ T658] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 123.127945][ T658] usb 10-1: Manufacturer: syz [ 123.139275][ T2446] SELinux: Context system_u:object_r:hald_var_lib_t:s0 is not valid (left unmapped). [ 123.140393][ T658] usb 10-1: config 0 descriptor?? [ 123.155324][ T36] audit: type=1400 audit(1793432934.532:875): avc: denied { relabelto } for pid=2445 comm="syz.8.641" name="cgroup" dev="tmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:hald_var_lib_t:s0" [ 123.185199][ T36] audit: type=1400 audit(1793432934.532:876): avc: denied { associate } for pid=2445 comm="syz.8.641" name="cgroup" dev="tmpfs" ino=50 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_var_lib_t:s0" [ 123.212689][ T36] audit: type=1400 audit(1793432934.532:877): avc: denied { read write } for pid=2445 comm="syz.8.641" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.237067][ T36] audit: type=1400 audit(1793432934.532:878): avc: denied { open } for pid=2445 comm="syz.8.641" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.260398][ T36] audit: type=1400 audit(1793432934.532:879): avc: denied { ioctl } for pid=2445 comm="syz.8.641" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.400076][ T2188] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 123.533281][ T2451] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 123.551195][ T2188] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 123.562168][ T2188] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.573295][ T2188] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.583242][ T2188] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 123.598995][ T2188] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 123.608361][ T2188] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 123.616731][ T2188] usb 9-1: Manufacturer: syz [ 123.622396][ T2188] usb 9-1: config 0 descriptor?? [ 123.650494][ T658] usbhid 10-1:0.0: can't add hid device: -71 [ 123.656581][ T658] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 123.674386][ T658] usb 10-1: USB disconnect, device number 2 [ 123.685301][ T36] audit: type=1400 audit(1793432935.082:880): avc: denied { listen } for pid=2453 comm="syz.6.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 123.940335][ T312] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 124.100092][ T312] usb 7-1: device descriptor read/64, error -71 [ 124.231118][ T2123] bridge0: port 3(syz_tun) entered disabled state [ 124.240781][ T2123] syz_tun (unregistering): left allmulticast mode [ 124.247231][ T2123] syz_tun (unregistering): left promiscuous mode [ 124.270081][ T2123] bridge0: port 3(syz_tun) entered disabled state [ 124.315051][ T343] bridge_slave_1: left allmulticast mode [ 124.321224][ T343] bridge_slave_1: left promiscuous mode [ 124.327069][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.336777][ T343] bridge_slave_0: left allmulticast mode [ 124.345011][ T343] bridge_slave_0: left promiscuous mode [ 124.354104][ T343] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.362735][ T312] usb 7-1: device descriptor read/64, error -71 [ 124.516504][ T2464] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.523603][ T2464] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.531800][ T2464] bridge_slave_0: entered allmulticast mode [ 124.539808][ T2464] bridge_slave_0: entered promiscuous mode [ 124.546468][ T2464] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.553900][ T2464] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.561192][ T2464] bridge_slave_1: entered allmulticast mode [ 124.567571][ T2464] bridge_slave_1: entered promiscuous mode [ 124.583640][ T343] veth1_macvtap: left promiscuous mode [ 124.589236][ T343] veth0_vlan: left promiscuous mode [ 124.620082][ T312] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 124.684493][ T2464] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.691593][ T2464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.698863][ T2464] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.705923][ T2464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.728466][ T459] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.735937][ T459] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.745449][ T441] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.752534][ T441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.769449][ T312] usb 7-1: device descriptor read/64, error -71 [ 124.775248][ T2477] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 124.786274][ T441] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.793360][ T441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.816157][ T2464] veth0_vlan: entered promiscuous mode [ 124.827366][ T2464] veth1_macvtap: entered promiscuous mode [ 125.010097][ T312] usb 7-1: device descriptor read/64, error -71 [ 125.120198][ T312] usb usb7-port1: attempt power cycle [ 125.290100][ T776] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 125.441156][ T776] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 125.452527][ T776] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.463576][ T312] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 125.471200][ T776] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.481156][ T776] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 125.495054][ T776] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 125.504235][ T776] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 125.513171][ T776] usb 10-1: Manufacturer: syz [ 125.518472][ T312] usb 7-1: device descriptor read/8, error -71 [ 125.524944][ T776] usb 10-1: config 0 descriptor?? [ 125.651014][ T312] usb 7-1: device descriptor read/8, error -71 [ 125.890068][ T312] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 125.920977][ T312] usb 7-1: device descriptor read/8, error -71 [ 125.941418][ T776] usbhid 10-1:0.0: can't add hid device: -71 [ 125.947524][ T776] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 125.958208][ T776] usb 10-1: USB disconnect, device number 3 [ 126.000307][ T2506] FAULT_INJECTION: forcing a failure. [ 126.000307][ T2506] name failslab, interval 1, probability 0, space 0, times 0 [ 126.013022][ T2506] CPU: 1 UID: 0 PID: 2506 Comm: syz.0.657 Not tainted syzkaller #0 86ffabe033aa4b611dc1eaf9ec72dc67ec78bb97 [ 126.013059][ T2506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 126.013071][ T2506] Call Trace: [ 126.013078][ T2506] [ 126.013085][ T2506] __dump_stack+0x21/0x30 [ 126.013118][ T2506] dump_stack_lvl+0x140/0x1c0 [ 126.013131][ T2506] ? __cfi_dump_stack_lvl+0x10/0x10 [ 126.013141][ T2506] dump_stack+0x19/0x20 [ 126.013149][ T2506] should_fail_ex+0x3c2/0x510 [ 126.013164][ T2506] should_failslab+0xac/0x100 [ 126.013175][ T2506] __kmalloc_cache_noprof+0x41/0x470 [ 126.013190][ T2506] ? __list_lru_init+0xc0/0x480 [ 126.013200][ T2506] __list_lru_init+0xc0/0x480 [ 126.013209][ T2506] alloc_super+0x77e/0x950 [ 126.013222][ T2506] sget+0x1fb/0x710 [ 126.013233][ T2506] ? __cfi_set_anon_super+0x10/0x10 [ 126.013245][ T2506] incfs_mount_fs+0xdb/0x970 [ 126.013260][ T2506] ? security_fs_context_parse_param+0x27b/0x2a0 [ 126.013272][ T2506] ? __cfi_incfs_mount_fs+0x10/0x10 [ 126.013286][ T2506] ? vfs_parse_fs_string+0x10f/0x180 [ 126.013297][ T2506] ? selinux_capable+0x38/0x50 [ 126.013309][ T2506] legacy_get_tree+0x103/0x1b0 [ 126.013319][ T2506] ? __cfi_incfs_mount_fs+0x10/0x10 [ 126.013334][ T2506] vfs_get_tree+0x9e/0x290 [ 126.013347][ T2506] do_new_mount+0x251/0xb40 [ 126.013361][ T2506] ? security_capable+0x44/0x130 [ 126.013372][ T2506] path_mount+0x66a/0xff0 [ 126.013385][ T2506] ? putname+0x113/0x150 [ 126.013394][ T2506] __se_sys_mount+0x2bf/0x480 [ 126.013408][ T2506] ? ksys_write+0x1f3/0x260 [ 126.013422][ T2506] ? __x64_sys_mount+0xf0/0xf0 [ 126.013436][ T2506] __x64_sys_mount+0xc3/0xf0 [ 126.013450][ T2506] x64_sys_call+0x2021/0x2ee0 [ 126.013462][ T2506] do_syscall_64+0x57/0xf0 [ 126.013471][ T2506] ? clear_bhb_loop+0x50/0xa0 [ 126.013484][ T2506] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 126.013497][ T2506] RIP: 0033:0x7f0a2399f559 [ 126.013510][ T2506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.013518][ T2506] RSP: 002b:00007f0a24864028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 126.013533][ T2506] RAX: ffffffffffffffda RBX: 00007f0a23c25fa0 RCX: 00007f0a2399f559 [ 126.013541][ T2506] RDX: 0000200000000200 RSI: 0000200000000180 RDI: 0000200000000140 [ 126.013549][ T2506] RBP: 00007f0a24864090 R08: 0000000000000000 R09: 0000000000000000 [ 126.013555][ T2506] R10: 0000000000000082 R11: 0000000000000246 R12: 0000000000000002 [ 126.013562][ T2506] R13: 00007f0a23c26038 R14: 00007f0a23c25fa0 R15: 00007ffd2878e338 [ 126.013570][ T2506] [ 126.282621][ T2188] usbhid 9-1:0.0: can't add hid device: -71 [ 126.288609][ T2188] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 126.298624][ T2509] capability: warning: `syz.8.658' uses 32-bit capabilities (legacy support in use) [ 126.302752][ T2188] usb 9-1: USB disconnect, device number 2 [ 126.319299][ T312] usb 7-1: device descriptor read/8, error -71 [ 126.335934][ T2511] netlink: 104 bytes leftover after parsing attributes in process `syz.8.659'. [ 126.430516][ T312] usb usb7-port1: unable to enumerate USB device [ 126.659450][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 126.659467][ T36] audit: type=1400 audit(1793432938.042:885): avc: denied { mounton } for pid=2528 comm="syz.9.663" path="" dev="overlay" ino=427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.659489][ T2529] overlay: filesystem on ./file0 not supported as upperdir [ 126.727829][ T2531] netlink: 'syz.6.664': attribute type 4 has an invalid length. [ 126.735598][ T2531] netlink: 17 bytes leftover after parsing attributes in process `syz.6.664'. [ 127.009361][ T2556] overlay: filesystem on ./file0 not supported as upperdir [ 127.080073][ T2188] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 127.231031][ T2188] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 127.241983][ T2188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.252942][ T2188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.262739][ T2188] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 127.277016][ T2188] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 127.285903][ T36] audit: type=1400 audit(1793432938.672:886): avc: denied { wake_alarm } for pid=2563 comm="syz.9.676" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 127.286376][ T2188] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 127.315232][ T2188] usb 1-1: Manufacturer: syz [ 127.321811][ T2188] usb 1-1: config 0 descriptor?? [ 127.500068][ T658] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 127.580072][ T1110] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 127.661165][ T658] usb 7-1: config index 0 descriptor too short (expected 65481, got 45) [ 127.672193][ T658] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 127.681393][ T658] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.689453][ T658] usb 7-1: Product: syz [ 127.693794][ T658] usb 7-1: Manufacturer: syz [ 127.698552][ T658] usb 7-1: SerialNumber: syz [ 127.731204][ T1110] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 127.741193][ T2188] usbhid 1-1:0.0: can't add hid device: -71 [ 127.742353][ T1110] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.750149][ T2188] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 127.759978][ T1110] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.774583][ T2188] usb 1-1: USB disconnect, device number 6 [ 127.777079][ T1110] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 127.796119][ T1110] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 127.805288][ T1110] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 127.813481][ T1110] usb 9-1: Manufacturer: syz [ 127.819013][ T1110] usb 9-1: config 0 descriptor?? [ 127.908527][ T312] usb 7-1: USB disconnect, device number 15 [ 128.226835][ T2575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.235445][ T2575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.244396][ T1110] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 128.251618][ T1110] appleir 0003:05AC:8243.000C: No inputs registered, leaving [ 128.259974][ T1110] appleir 0003:05AC:8243.000C: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 128.280072][ T2188] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 128.424071][ T2587] netlink: 'syz.6.682': attribute type 4 has an invalid length. [ 128.431944][ T2587] netlink: 12 bytes leftover after parsing attributes in process `syz.6.682'. [ 128.442188][ T2188] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 128.454677][ T2188] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 128.465782][ T2188] usb 10-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 128.475166][ T2188] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.483374][ T2188] usb 10-1: Product: syz [ 128.487652][ T2188] usb 10-1: Manufacturer: syz [ 128.492698][ T2188] usb 10-1: SerialNumber: syz [ 128.550325][ T312] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 128.690060][ T1110] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 128.700053][ T2188] usblp 10-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 128.712541][ T312] usb 1-1: unable to get BOS descriptor or descriptor too short [ 128.721509][ T312] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.731704][ T312] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 128.742870][ T312] usb 1-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 128.752015][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.760071][ T312] usb 1-1: Product: syz [ 128.764240][ T312] usb 1-1: Manufacturer: syz [ 128.768828][ T312] usb 1-1: SerialNumber: syz [ 128.820065][ T1110] usb 7-1: device descriptor read/64, error -71 [ 128.901574][ T36] audit: type=1400 audit(1793432940.292:887): avc: denied { read write } for pid=2576 comm="syz.9.678" name="lp0" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 128.902056][ C0] usblp0: nonzero read bulk status received: -71 [ 128.925098][ T36] audit: type=1400 audit(1793432940.292:888): avc: denied { open } for pid=2576 comm="syz.9.678" path="/dev/usb/lp0" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 128.932005][ T686] usb 10-1: USB disconnect, device number 4 [ 128.961113][ T2577] usblp0: error -71 reading from printer [ 128.968932][ T2576] usblp0: removed [ 128.978328][ T312] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 128.988606][ T312] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 129.001338][ T312] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 129.011501][ T312] usb 1-1: USB disconnect, device number 7 [ 129.020632][ T1861] udevd[1861]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 129.090069][ T1110] usb 7-1: device descriptor read/64, error -71 [ 129.330112][ T1110] usb 7-1: new low-speed USB device number 17 using dummy_hcd [ 129.460080][ T1110] usb 7-1: device descriptor read/64, error -71 [ 129.543224][ T2602] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 129.700131][ T1110] usb 7-1: device descriptor read/64, error -71 [ 129.810163][ T1110] usb usb7-port1: attempt power cycle [ 129.930088][ T10] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 130.157433][ T1110] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 130.180999][ T1110] usb 7-1: device descriptor read/8, error -71 [ 130.311273][ T1110] usb 7-1: device descriptor read/8, error -71 [ 130.550224][ T1110] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 130.571316][ T1110] usb 7-1: device descriptor read/8, error -71 [ 130.600312][ T658] usb 9-1: USB disconnect, device number 3 [ 130.711151][ T1110] usb 7-1: device descriptor read/8, error -71 [ 130.720326][ T2615] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 130.750066][ T658] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 130.820297][ T1110] usb usb7-port1: unable to enumerate USB device [ 130.871466][ T2615] usb 1-1: unable to get BOS descriptor or descriptor too short [ 130.879526][ T2615] usb 1-1: not running at top speed; connect to a high speed hub [ 130.888200][ T2615] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.898373][ T2615] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 130.907465][ T658] usb 9-1: Invalid ep0 maxpacket: 64 [ 130.913091][ T2615] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 41, changing to 4 [ 130.924010][ T2615] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 130.935126][ T2615] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 130.944237][ T2615] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.952273][ T2615] usb 1-1: Product: syz [ 130.956452][ T2615] usb 1-1: Manufacturer: syz [ 130.961164][ T2615] usb 1-1: SerialNumber: syz [ 131.040088][ T658] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 131.176488][ T2615] usb 1-1: USB disconnect, device number 8 [ 131.190077][ T658] usb 9-1: Invalid ep0 maxpacket: 64 [ 131.197551][ T658] usb usb9-port1: attempt power cycle [ 131.206810][ T1852] udevd[1852]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 131.540162][ T658] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 131.560524][ T658] usb 9-1: Invalid ep0 maxpacket: 64 [ 131.623095][ T2640] loop5: detected capacity change from 0 to 7 [ 131.688657][ T2643] netlink: 'syz.0.705': attribute type 46 has an invalid length. [ 131.700227][ T658] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 131.720559][ T658] usb 9-1: Invalid ep0 maxpacket: 64 [ 131.727922][ T658] usb usb9-port1: unable to enumerate USB device [ 131.734994][ T36] audit: type=1400 audit(1793432943.132:889): avc: denied { mounton } for pid=2646 comm="syz.0.707" path="/20/tracing/dynamic_events" dev="tracefs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 131.754623][ T2647] incfs: Options parsing error. -22 [ 131.780534][ T2647] incfs: mount failed -22 [ 131.781419][ T2641] netlink: 104 bytes leftover after parsing attributes in process `syz.6.704'. [ 131.809010][ T36] audit: type=1400 audit(1793432943.192:890): avc: denied { relabelfrom } for pid=2652 comm="syz.0.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 131.828771][ T36] audit: type=1400 audit(1793432943.192:891): avc: denied { relabelto } for pid=2652 comm="syz.0.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 131.849430][ T36] audit: type=1400 audit(1793432943.192:892): avc: denied { attach_queue } for pid=2652 comm="syz.0.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 132.050095][ T658] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 132.210065][ T658] usb 1-1: Using ep0 maxpacket: 32 [ 132.216676][ T658] usb 1-1: config 0 has no interfaces? [ 132.223969][ T658] usb 1-1: New USB device found, idVendor=0cf3, idProduct=817a, bcdDevice=eb.19 [ 132.233298][ T658] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.241487][ T658] usb 1-1: Product: syz [ 132.245682][ T658] usb 1-1: Manufacturer: syz [ 132.250325][ T658] usb 1-1: SerialNumber: syz [ 132.256097][ T658] usb 1-1: config 0 descriptor?? [ 132.505678][ T658] usb 1-1: USB disconnect, device number 9 [ 132.547372][ T2658] FAULT_INJECTION: forcing a failure. [ 132.547372][ T2658] name failslab, interval 1, probability 0, space 0, times 0 [ 132.560190][ T2658] CPU: 1 UID: 0 PID: 2658 Comm: syz.6.710 Not tainted syzkaller #0 86ffabe033aa4b611dc1eaf9ec72dc67ec78bb97 [ 132.560224][ T2658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 132.560237][ T2658] Call Trace: [ 132.560244][ T2658] [ 132.560252][ T2658] __dump_stack+0x21/0x30 [ 132.560276][ T2658] dump_stack_lvl+0x140/0x1c0 [ 132.560293][ T2658] ? __cfi_dump_stack_lvl+0x10/0x10 [ 132.560312][ T2658] dump_stack+0x19/0x20 [ 132.560329][ T2658] should_fail_ex+0x3c2/0x510 [ 132.560355][ T2658] should_failslab+0xac/0x100 [ 132.560376][ T2658] kmem_cache_alloc_noprof+0x42/0x410 [ 132.560401][ T2658] ? security_inode_alloc+0x51/0x230 [ 132.560423][ T2658] ? __cfi_make_kgid+0x10/0x10 [ 132.560441][ T2658] security_inode_alloc+0x51/0x230 [ 132.560463][ T2658] inode_init_always_gfp+0x756/0x9e0 [ 132.560482][ T2658] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 132.560503][ T2658] alloc_inode+0xc5/0x270 [ 132.560523][ T2658] new_inode+0x25/0x1e0 [ 132.560542][ T2658] shmem_get_inode+0x352/0xc10 [ 132.560563][ T2658] __shmem_file_setup+0x173/0x2c0 [ 132.560581][ T2658] shmem_zero_setup+0x90/0x130 [ 132.560599][ T2658] mmap_region+0x1659/0x1d10 [ 132.560624][ T2658] ? __kernel_text_address+0x11/0x40 [ 132.560650][ T2658] ? __cfi_mmap_region+0x10/0x10 [ 132.560685][ T2658] ? __cfi_arch_get_unmapped_area_topdown+0x10/0x10 [ 132.560712][ T2658] ? __kasan_check_read+0x15/0x20 [ 132.560738][ T2658] ? __get_unmapped_area+0x406/0x470 [ 132.560764][ T2658] do_mmap+0xa47/0x1370 [ 132.560788][ T2658] ? __cfi_selinux_mmap_file+0x10/0x10 [ 132.560815][ T2658] ? __cfi_do_mmap+0x10/0x10 [ 132.560838][ T2658] ? __kasan_check_write+0x18/0x20 [ 132.560862][ T2658] ? down_write_killable+0xee/0x2d0 [ 132.560888][ T2658] ? __cfi_down_write_killable+0x10/0x10 [ 132.560912][ T2658] vm_mmap_pgoff+0x367/0x4b0 [ 132.560938][ T2658] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 132.560962][ T2658] ? ksys_write+0x1f3/0x260 [ 132.560989][ T2658] ksys_mmap_pgoff+0xfa/0x1e0 [ 132.561013][ T2658] __x64_sys_mmap+0x121/0x140 [ 132.561034][ T2658] x64_sys_call+0x13bf/0x2ee0 [ 132.561054][ T2658] do_syscall_64+0x57/0xf0 [ 132.561071][ T2658] ? clear_bhb_loop+0x50/0xa0 [ 132.561095][ T2658] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 132.561117][ T2658] RIP: 0033:0x7f4b1559f559 [ 132.561134][ T2658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.561151][ T2658] RSP: 002b:00007f4b16466028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 132.561173][ T2658] RAX: ffffffffffffffda RBX: 00007f4b15826090 RCX: 00007f4b1559f559 [ 132.561188][ T2658] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 132.561201][ T2658] RBP: 00007f4b16466090 R08: ffffffffffffffff R09: 0000000000000000 [ 132.561215][ T2658] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 132.561228][ T2658] R13: 00007f4b15826128 R14: 00007f4b15826090 R15: 00007fff4f5cbb38 [ 132.561244][ T2658] [ 133.110086][ T1110] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 133.125419][ T2681] FAULT_INJECTION: forcing a failure. [ 133.125419][ T2681] name failslab, interval 1, probability 0, space 0, times 0 [ 133.138112][ T2681] CPU: 0 UID: 0 PID: 2681 Comm: syz.0.720 Not tainted syzkaller #0 86ffabe033aa4b611dc1eaf9ec72dc67ec78bb97 [ 133.138146][ T2681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 133.138158][ T2681] Call Trace: [ 133.138165][ T2681] [ 133.138173][ T2681] __dump_stack+0x21/0x30 [ 133.138196][ T2681] dump_stack_lvl+0x140/0x1c0 [ 133.138213][ T2681] ? __cfi_dump_stack_lvl+0x10/0x10 [ 133.138230][ T2681] ? __kmalloc_cache_noprof+0x23c/0x470 [ 133.138257][ T2681] ? fat_init_fs_context+0x67/0x520 [ 133.138279][ T2681] dump_stack+0x19/0x20 [ 133.138296][ T2681] should_fail_ex+0x3c2/0x510 [ 133.138319][ T2681] should_failslab+0xac/0x100 [ 133.138339][ T2681] __kmalloc_cache_noprof+0x41/0x470 [ 133.138363][ T2681] ? __se_sys_fsopen+0x14d/0x390 [ 133.138386][ T2681] __se_sys_fsopen+0x14d/0x390 [ 133.138410][ T2681] __x64_sys_fsopen+0x5f/0x80 [ 133.138433][ T2681] x64_sys_call+0x2d40/0x2ee0 [ 133.138454][ T2681] do_syscall_64+0x57/0xf0 [ 133.138473][ T2681] ? clear_bhb_loop+0x50/0xa0 [ 133.138497][ T2681] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 133.138521][ T2681] RIP: 0033:0x7f0a2399f559 [ 133.138536][ T2681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.138553][ T2681] RSP: 002b:00007f0a24864028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 133.138576][ T2681] RAX: ffffffffffffffda RBX: 00007f0a23c25fa0 RCX: 00007f0a2399f559 [ 133.138602][ T2681] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 133.138616][ T2681] RBP: 00007f0a23a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 133.138629][ T2681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.138641][ T2681] R13: 00007f0a23c26038 R14: 00007f0a23c25fa0 R15: 00007ffd2878e338 [ 133.138658][ T2681] [ 133.151832][ T2683] ------------[ cut here ]------------ [ 133.185877][ T2685] netlink: 12 bytes leftover after parsing attributes in process `syz.8.723'. [ 133.188054][ T2683] WARNING: CPU: 1 PID: 2683 at mm/page_alloc.c:5286 __alloc_pages_noprof+0x109/0x7e0 [ 133.283124][ T1110] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 133.287118][ T2683] Modules linked in: [ 133.295603][ T1110] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.303170][ T2683] CPU: 1 UID: 0 PID: 2683 Comm: syz.9.721 Not tainted syzkaller #0 86ffabe033aa4b611dc1eaf9ec72dc67ec78bb97 [ 133.311574][ T1110] usb 7-1: Product: syz [ 133.319132][ T2683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 133.319151][ T2683] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 133.322569][ T1110] usb 7-1: Manufacturer: syz [ 133.327679][ T2683] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 8a 19 8a 06 00 0f 85 c2 00 00 00 c6 05 7d 19 8a 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 133.327702][ T2683] RSP: 0018:ffffc90011a77560 EFLAGS: 00010246 [ 133.327720][ T2683] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000 [ 133.336967][ T1110] usb 7-1: SerialNumber: syz [ 133.346069][ T2683] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90011a77618 [ 133.449589][ T2683] RBP: ffffc90011a776a0 R08: ffffc90011a77617 R09: 0000000000000000 [ 133.457602][ T2683] R10: ffffc90011a77600 R11: fffff5200234eec3 R12: ffffc90011a775a0 [ 133.465610][ T2683] R13: dffffc0000000000 R14: 1ffff9200234eeb0 R15: 0000000000000000 [ 133.473630][ T2683] FS: 00007f57e4e306c0(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000 [ 133.482604][ T2683] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.489198][ T2683] CR2: 0000200000019000 CR3: 000000011e61c000 CR4: 00000000003526b0 [ 133.497204][ T2683] Call Trace: [ 133.500507][ T2683] [ 133.503444][ T2683] ? vfs_write+0x3c1/0xfd0 [ 133.507875][ T2683] ? ksys_write+0x145/0x260 [ 133.512422][ T2683] ? x64_sys_call+0x271c/0x2ee0 [ 133.517289][ T2683] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 133.523089][ T2683] ? hashtab_init+0xd6/0x1f0 [ 133.527690][ T2683] ___kmalloc_large_node+0x81/0x220 [ 133.532926][ T2683] ? hashtab_init+0xd6/0x1f0 [ 133.537535][ T2683] __kmalloc_large_node_noprof+0x1e/0xd0 [ 133.543230][ T2683] ? hashtab_init+0xd6/0x1f0 [ 133.547836][ T2683] __kmalloc_noprof+0x326/0x510 [ 133.552827][ T2683] ? kasan_save_alloc_info+0x3a/0x50 [ 133.558129][ T2683] hashtab_init+0xd6/0x1f0 [ 133.562608][ T2683] ? common_read+0x175/0x490 [ 133.567210][ T2683] symtab_init+0x44/0x70 [ 133.571485][ T2683] common_read+0x1e7/0x490 [ 133.575910][ T2683] ? hashtab_init+0xd6/0x1f0 [ 133.580529][ T2683] ? __cfi_common_read+0x10/0x10 [ 133.585477][ T2683] ? hashtab_init+0x100/0x1f0 [ 133.590213][ T2683] policydb_read+0xa86/0x2860 [ 133.594911][ T2683] ? __kasan_kmalloc+0x96/0xb0 [ 133.599687][ T2683] ? __cfi_policydb_read+0x10/0x10 [ 133.604860][ T2683] ? security_load_policy+0x130/0x12d0 [ 133.610363][ T2683] security_load_policy+0x16a/0x12d0 [ 133.615672][ T2683] ? irqentry_exit+0x4a/0x60 [ 133.620307][ T2683] ? __kasan_check_write+0x18/0x20 [ 133.625469][ T2683] ? mutex_lock+0x97/0x1d0 [ 133.629899][ T2683] ? __cfi_security_load_policy+0x10/0x10 [ 133.635662][ T2683] ? rep_movs_alternative+0x4a/0xa0 [ 133.640910][ T2683] sel_write_load+0x258/0x600 [ 133.645611][ T2683] ? __cfi_sel_write_load+0x10/0x10 [ 133.650838][ T2683] ? bpf_lsm_file_permission+0xd/0x20 [ 133.656222][ T2683] ? __cfi_sel_write_load+0x10/0x10 [ 133.661506][ T2683] vfs_write+0x3c1/0xfd0 [ 133.665763][ T2683] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 133.671357][ T2683] ? __cfi_vfs_write+0x10/0x10 [ 133.676138][ T2683] ? __kasan_check_write+0x18/0x20 [ 133.681321][ T2683] ? mutex_lock+0x97/0x1d0 [ 133.685752][ T2683] ? __cfi_mutex_lock+0x10/0x10 [ 133.690643][ T2683] ksys_write+0x145/0x260 [ 133.694989][ T2683] ? xfd_validate_state+0x68/0x140 [ 133.700137][ T2683] ? __cfi_ksys_write+0x10/0x10 [ 133.705012][ T2683] ? __kasan_check_write+0x18/0x20 [ 133.710151][ T2683] ? fpregs_restore_userregs+0x11c/0x260 [ 133.715812][ T2683] __x64_sys_write+0x7f/0x90 [ 133.720449][ T2683] x64_sys_call+0x271c/0x2ee0 [ 133.725138][ T2683] do_syscall_64+0x57/0xf0 [ 133.729572][ T2683] ? clear_bhb_loop+0x50/0xa0 [ 133.734287][ T2683] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 133.740218][ T2683] RIP: 0033:0x7f57e3f9f559 [ 133.744638][ T2683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.764218][ T2664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.764282][ T2683] RSP: 002b:00007f57e4e30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 133.774688][ T2664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.781035][ T2683] RAX: ffffffffffffffda RBX: 00007f57e4225fa0 RCX: 00007f57e3f9f559 [ 133.796779][ T2683] RDX: 00000000000190ec RSI: 0000200000000000 RDI: 0000000000000003 [ 133.804803][ T2683] RBP: 00007f57e4036b20 R08: 0000000000000000 R09: 0000000000000000 [ 133.812813][ T2683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.820824][ T2683] R13: 00007f57e4226038 R14: 00007f57e4225fa0 R15: 00007ffc9e0617f8 [ 133.828896][ T2683] [ 133.831956][ T2683] ---[ end trace 0000000000000000 ]--- [ 133.837670][ T2683] SELinux: failed to load policy [ 133.992875][ T1110] (unnamed net_device) (uninitialized): Assigned a random MAC address: 92:d0:b0:c3:54:b8 [ 134.004188][ T1110] rtl8150 7-1:1.0: eth1: rtl8150 is detected [ 134.013142][ T1110] usb 7-1: USB disconnect, device number 20