last executing test programs: 3.285903344s ago: executing program 1 (id=124): r0 = syz_ublk_setup_io_uring(0x1943, &(0x7f0000000200)={0x0, 0x5fc6, 0x80, 0xfbffffff, 0x3b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000000)={0x2e, 0x1f, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0xe96, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x100}}}, &(0x7f0000000300)) 3.277794465s ago: executing program 1 (id=125): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000000)={[0xe000, 0x8080000, 0xffc, 0x81e15a6bd36cebc9], 0x9, 0x82, 0x7}) (async) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000000c40)={0x0, [{0x3, 0x0, 0x8001, 0x0}, {0x2, 0x0, 0x8000, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x80000001, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x3ff, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x3, 0x0, 0xfffffff9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x1, 0x0, 0xffffffff, 0x0}, {0x1, 0x0, 0x0, 0x0}]}) (async) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000000)={'veth1_to_hsr\x00', {0x2, 0x4e23, @local}}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x0, 0x74, 0x10000}) 3.211885458s ago: executing program 1 (id=126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x800, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x30}}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x3ed, 0x4, 0x70bd26, 0x25dfdbfb}, 0x10}}, 0x20000006) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x17, &(0x7f0000000180)=0xfffffffc, 0x4) r6 = inotify_init() r7 = userfaultfd(0x801) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000480)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x2c, r9, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x818}, 0x4040400) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000001400)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000013c0)={&(0x7f0000001300)={0xb0, r1, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x96c7}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x6}, @ETHTOOL_A_RINGS_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x8084) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f000022d000/0x1000)=nil, 0x400000, 0x3, 0x2}) syz_clone3(&(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff], 0x1}, 0x58) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005cf000/0x400000)=nil) syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000000)=""/4105, 0x1009, 0x0, 0x0}, 0x56) close_range(r6, 0xffffffffffffffff, 0x0) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r11, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="00220f000000870eb731000b455018ffca364be8bd4d677e262e7a18ff7e6ebdc8f49ac925b87d2e9ffff2edd0c8040f2e0befe5e69e46d1003e81c53063225ea7a8675a22143f250d0ec18cafaea08b943c37a5a0ff455889827c1c1c6fbb5f006d04143afdbd3519a7cb0514160be3a194e6f01f82ab9434f1ef450700cf2f4da2fd8e10d0290dbf9af8845142d92a5377ea20804bac79b02a6bd61a8729aef586091e56ed5d5add1c187db1c09eba9533123dfebbcd00ba99a360dff2fc3bd01050bf2e4a79af748e39ef70fd8710ab241de3aecdbc05499fc4f6f8781a8636cb52b83d735400"], 0x0}, 0x0) setsockopt$inet_int(r5, 0x0, 0x17, 0x0, 0x0) write$FUSE_DIRENTPLUS(r4, 0x0, 0xb0) 2.451986963s ago: executing program 0 (id=132): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'veth0\x00', {0x2, 0x4e20, @rand_addr=0xdffffc00}}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/194, 0xc2}, {&(0x7f00000004c0)=""/107, 0x6b}], 0x3}, 0x402}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) close(0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x202, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x4, 0xfec00000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x0, 0xdc) write(r5, 0x0, 0x0) 2.450597913s ago: executing program 0 (id=133): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x10, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) getpeername$tipc(r4, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r6, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088d0}, 0x48000) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.83510558s ago: executing program 3 (id=142): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) close(0x3) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14, 0x44}, @multicast1, 0x1, 0x3, [@multicast1, @remote, @empty]}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00141202004788aa96a13bb1000011000088ca1a67", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) r4 = socket$inet(0x2, 0xa, 0xb) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0x6, @broadcast, 0x4e20, 0x2, 'lblc\x00', 0x31, 0x1, 0x25}, 0x2c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000001040), 0x4, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_fscache}]}}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x29) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r8, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r9, 0x89a2, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') 1.705901835s ago: executing program 3 (id=144): openat$ptmx(0xffffffffffffff9c, 0x0, 0x181402, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x18c) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory9/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)="6f66466c696e65ecbbd0741e465d3bfa86c4eea0cf8875afb6aa6837b8005500"/41, 0x29) 1.705799985s ago: executing program 3 (id=145): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) removexattr(&(0x7f0000000940)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_access\x00') (async) bind$can_raw(r2, &(0x7f0000000100), 0x10) (async) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) (async) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) (async) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x8cff, 0x0) 1.62790079s ago: executing program 3 (id=148): r0 = socket(0x2, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="84000000", @ANYRESDEC=r1, @ANYBLOB="01002abd7000fcdbdf2502000000060006000000020008000900010000000c00030003000000000000000c000300020000000000000014000b00000000000000000c0000ffffac14140d0800020000000000060006000300000005000d0026000000060006000100000014000c0000000000000000000000ffff00000000"], 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x4008020) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f0000000300), 0x4) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x40480) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000280)={{0x2, 0x3, 0x8ee, 0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000280)={{0x2, 0x3, 0x8ee, 0x1}}) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0x4, 0x1f8, 0xfffffffffffffffe, 0xffffffdfefffff17, 0x3, 0x0, 0x1, 0x4]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x7, 0x17, 0x401, 0x401, {{0xb, 0x4, 0x2, 0x0, 0x2c, 0x65, 0x0, 0x9, 0x2f, 0x0, @rand_addr=0x64010101, @multicast1, {[@noop, @generic={0x82, 0x11, "65a39782657e408d9de986aef40961"}, @ra={0x94, 0x4}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x7, 0x17, 0x401, 0x401, {{0xb, 0x4, 0x2, 0x0, 0x2c, 0x65, 0x0, 0x9, 0x2f, 0x0, @rand_addr=0x64010101, @multicast1, {[@noop, @generic={0x82, 0x11, "65a39782657e408d9de986aef40961"}, @ra={0x94, 0x4}]}}}}}) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r6}, 0x10) (async) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r6}, 0x10) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/profiling', 0x101a42, 0x57) copy_file_range(r7, &(0x7f0000000000)=0x8, r7, 0x0, 0x4, 0x0) (async) copy_file_range(r7, &(0x7f0000000000)=0x8, r7, 0x0, 0x4, 0x0) close(r0) userfaultfd(0x1) (async) userfaultfd(0x1) accept4(r0, &(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x80, 0x800) epoll_create1(0x80000) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0x10, 0x2, 0x10) (async) r9 = socket$inet6(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) symlinkat(&(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000200)='./file0\x00') (async) symlinkat(&(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000200)='./file0\x00') mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x2010, r8, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x2010, r8, 0x0) copy_file_range(r9, &(0x7f0000000040)=0x7f, r9, 0x0, 0x9, 0x0) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x100000000000) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r11, 0x4008ae90, 0x0) 1.373945878s ago: executing program 1 (id=151): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x35, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233445566778899aabb04ddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x42}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x39, 0x30, 0x30, 0x66, 0x30, 0x38, 0x30, 0x30, 0x31, 0x39, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2042, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read$FUSE(r1, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x31, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x15}, 0x48, r0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@local, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0x184, 0x5, [{{@in6=@loopback, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x510d3f49}, {{@in=@broadcast, 0x0, 0x2b}, 0x2, @in6=@private1, 0x0, 0x0, 0x3}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x400, 0x1, 0x3, 0x0, 0x0, 0x2cd6}, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x4d2, 0x3c}, 0x2, @in=@remote, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x3c}, 0x2, @in6=@loopback, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffd}, {{@in=@rand_addr=0x64010100, 0x0, 0x2b}, 0x0, @in=@broadcast, 0x0, 0x1, 0x2, 0x80, 0x0, 0x2}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x60004000}, 0x0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x38, 0x32, 0x37, 0x30, 0x64, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x35, 0x30, 0x32, 0x30, 0x30, 0x31, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x63, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x39, 0x61, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556c778899aabbccddeeff", 0x3d}, 0x48, r0) 1.148005681s ago: executing program 0 (id=152): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe0000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b9500200000f01c8b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x60}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x1b, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x1, 0x9, 0x2, 0xb767, 0x9, 0x8001, 0x6, 0xfffffffffffffffc, 0x2, 0xffffffff, 0x8903, 0x9, 0x1, 0x20000000000fc, 0x1, 0x1000000008], 0xffff1000, 0x40005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x81101) ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) 827.444963ms ago: executing program 2 (id=156): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f00000000c0), 0x4) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020}, 0x2020) getresgid(&(0x7f0000002280), &(0x7f00000022c0), &(0x7f0000002300)) (async) getresgid(&(0x7f0000002280), &(0x7f00000022c0), &(0x7f0000002300)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c004}, 0x24008001) (async) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c004}, 0x24008001) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2031500}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10000dbd0900000001000000df2541000000", @ANYRES32=0x0, @ANYBLOB="0500180119000000080026006c090000"], 0x2c}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000884) (async) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2031500}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10000dbd0900000001000000df2541000000", @ANYRES32=0x0, @ANYBLOB="0500180119000000080026006c090000"], 0x2c}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000884) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000b40)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="21092cbd7000fedbdf258301000000000300", @ANYRES32=r3, @ANYBLOB="080011800400058008001001080000000a000600ffffffffffff00000a00060008021100000100008c00118088000580500000800a0001000802110000010000040002800a000100ffffffffffff00000a000100ffffffffffff00002400028008002700020000000800a1000000008008002700020000000800220143000000340000800a000100ffffffffffff00000c00038004000200040001800c00038004000200040002000a0001000802110000000000"], 0xd0}, 0x1, 0x0, 0x0, 0x48084}, 0x10) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, 0x0, 0x4008014) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002340), &(0x7f0000002380)=0xc) stat(&(0x7f00000023c0)='./file1\x00', &(0x7f0000002400)) (async) stat(&(0x7f00000023c0)='./file1\x00', &(0x7f0000002400)) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x40, &(0x7f0000002680)=ANY=[]) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x6d, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x6d, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) (async) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r8, 0x4038ae7a, &(0x7f00000025c0)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) (async) ioctl$KVM_XEN_HVM_CONFIG(r8, 0x4038ae7a, &(0x7f00000025c0)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) r9 = dup2(r8, r4) fsconfig$FSCONFIG_SET_PATH_EMPTY(r8, 0x4, &(0x7f0000002600)='mask', &(0x7f0000002640)='./file1\x00', r9) (async) fsconfig$FSCONFIG_SET_PATH_EMPTY(r8, 0x4, &(0x7f0000002600)='mask', &(0x7f0000002640)='./file1\x00', r9) ioctl$KVM_SET_REGS(r7, 0x4090ae82, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000024c0)=@arm64={0xe5, 0x5, 0x4, '\x00', 0xaba8}) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 779.633392ms ago: executing program 0 (id=157): mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) truncate(&(0x7f0000000240)='./file0\x00', 0x1) 743.384878ms ago: executing program 0 (id=158): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x80) socket$inet_udp(0x2, 0x2, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x80004, 0x6) read$FUSE(r0, &(0x7f0000001140)={0x2020}, 0x2020) r1 = openat(r0, &(0x7f0000000100)='./dev/sda\x00', 0x0, 0x0) ioctl$BLKDISCARD(r1, 0xc06012e6, &(0x7f0000000000)) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/tracing/events/sched/sched_switch/enable\x00', 0x2141, 0x1d1) ftruncate(r2, 0x1000000000000) 701.524417ms ago: executing program 3 (id=159): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x7000) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000001940)='c', 0x1}], 0x1, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt\x00', 0x1ff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/printer.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f00000004c0)='dummy_udc.0', 0xb) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x400000ff, 0x0, 0x1}]}) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x18d042, 0x15) getsockname(r5, &(0x7f0000000180)=@x25={0x9, @remote}, &(0x7f0000000200)=0x80) pwrite64(r5, &(0x7f0000000000)="ff", 0x582b4, 0x5b000) 700.863087ms ago: executing program 2 (id=160): syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000086d0415c20000000000010902240001000000ef09040000090300030009210b0010002229000905810308", @ANYRES32, @ANYRESDEC], 0x0) 700.555007ms ago: executing program 0 (id=161): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4044810, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e0000002ebe660f38049f9e0064f30fc7b000101f20f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f08b8f4008ee0", 0x5b}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x42201, 0x0) ioctl$SNAPSHOT_S2RAM(r9, 0x330b) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x14, r1, 0x601}, 0x14}}, 0x40000) 483.994048ms ago: executing program 1 (id=162): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000100)="0f2855150f356436640f01c966b9630200000f3236f36cba420066ed2e0f01c2440f20c066350b000000440f22c0f2ad0f75f3", 0x33}], 0x1, 0x10, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) lseek(r3, 0x186a0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) fgetxattr(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="6274fdffffff2f6465762f6b766d00"], &(0x7f00000002c0)=""/220, 0xdc) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x2a, 0x26, 0x0, 0x80) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000240)={0x74, 0x0, 0x6c}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x37}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 475.29562ms ago: executing program 1 (id=163): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x109) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x109) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_marker\x00', 0x1, 0x5a) socket$inet6(0xa, 0x80001, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_names\x00') sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) ioprio_set$pid(0x2, 0x0, 0x0) pipe(&(0x7f0000000300)) (async) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) mount$9p_unix(&(0x7f0000000240)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000b40)='./file0\x00', 0x0, 0x12c9498, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x5, 0x0, 0x1b, 0x0, 0xffff, 0x4, 0x0, 0xffffffffffffffff}}) mount$cgroup(0x0, &(0x7f0000002800)='./file0\x00', 0x0, 0x20040ac, &(0x7f0000002880)={[{@none}]}) (async) mount$cgroup(0x0, &(0x7f0000002800)='./file0\x00', 0x0, 0x20040ac, &(0x7f0000002880)={[{@none}]}) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) (async) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r3, 0x1) write$P9_RREADDIR(r1, &(0x7f0000000340)={0x9c, 0x29, 0x1, {0x3, [{{0x80, 0x0, 0x2}, 0x1, 0xfc, 0x5, './mnt'}, {{0x80, 0x1, 0x2}, 0x7, 0x6, 0x5, './mnt'}, {{0x10, 0x3, 0x6}, 0x6, 0x2, 0x5, './dev'}, {{0x2, 0x3, 0x8}, 0x101, 0xc9, 0x5, './mnt'}, {{0x10, 0x0, 0x7}, 0x8b60, 0x1, 0x5, './mnt'}]}}, 0x9c) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) (async) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) ioprio_get$pid(0x2, 0x0) (async) ioprio_get$pid(0x2, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX, @ANYRES64=r0], 0x0) ioctl$KVM_GET_TSC_KHZ_vm(r4, 0xaea3) 347.807834ms ago: executing program 3 (id=164): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x40400) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000000c0)={0x7, 0x8, 0xd6c, {0x6, 0x1}, {0x0, 0x5}, @const={0xf30e, {0x400, 0x0, 0x9, 0xc4df}}}) unshare(0x60000600) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') statx(r2, 0x0, 0xbceac039e3b9a104, 0x10, &(0x7f0000000200)) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="280000002d000100fcffffff0000000008000000", @ANYBLOB='\n'], 0x28}], 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000100)={0x0, 0x2, [0x1000, 0x6, 0x81, 0x3, 0x5, 0x1]}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r4, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r4, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) recvmmsg(r4, &(0x7f0000002100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e80)=""/91, 0x5b}, 0x1}], 0x1, 0x40010021, 0x0) unshare(0x4040500) 132.036775ms ago: executing program 2 (id=165): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe0000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b9500200000f01c8b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x60}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x1b, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x7, 0x2, 0xff, 0x10000000100006, 0x9, 0x2, 0xb, 0x2, 0xffffffff, 0x8000000000002042, 0x9, 0x9944, 0x20000000000fc, 0x8000000002, 0x8], 0x33ff9, 0x40005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 101.847391ms ago: executing program 2 (id=166): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "ab624f6011dc5562", "21004bb854986b0b74c0152fbf338bad", "270689dd", "2969c92218294513"}, 0x28) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xc) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xffffffffffffff72}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 88.312183ms ago: executing program 2 (id=167): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r1, 0x11a, 0x3, &(0x7f0000000100)=0x304, 0x4) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x10000801, 0x40840) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.current\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d03072000001ea89de2b7fb0000e60080b8785d9600010000000002000001000000ff0001000000000200", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r4) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="6c010000170001000000000000000000fe8000000000000000000000000000aa080004d600000000fe800000000000001d000000000000bbac1414bb000000000000000000000000ffffffff0000000000000000000000004e210000fffe75000000008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ac1414bb00000000000000000000000000000000000000000200802000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000020200000000f9ffffff02000000200000000000000044000500ffffffff000000000000000000000000000004d23300000002000000000000000000000000000000000000000000000002010500000800000104000005000000"], 0x16c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71012000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000fbdbdf25130000000cd8d58b3600ca8008000180"], 0x20}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/virtual/net/bridge0/bridge/no_linklocal_learn\x00', 0x0, 0x48) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000002280)={@private2={0xfc, 0x2, '\x00', 0x1}, 0xa17, 0x1, 0x2, 0x0, 0xeac, 0x80}, &(0x7f00000022c0)=0x20) read$FUSE(r9, &(0x7f0000000240)={0x2020}, 0x2020) sendto$inet6(r5, &(0x7f0000000100)="3402d29fe0ec616e06411a3ff4fb1c71bcdb7849f447187ff34ea0105df382264cbd4a31c7696fb5103337e52e5a3533b36a3a10e754ec86cb079b94a52bf8ece4d3013fe3e654dc07e98ffa25f372aa3d0ea9fefef6337cf8f8badc176338f149a51e57fd993d254e0e3439ba923d2a6d5747592a1fd7abe70dd438b76f66b897fb48bc99bfaa20aaf9456292", 0x8d, 0x24048840, &(0x7f00000001c0)={0xa, 0x4e23, 0xffffffff, @rand_addr=' \x01\x00', 0x9}, 0x1c) r10 = signalfd4(r9, &(0x7f0000000000)={[0x4]}, 0x8, 0x800) write$FUSE_NOTIFY_RETRIEVE(r10, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x4, 0x9, 0x400}}, 0x30) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 0s ago: executing program 2 (id=168): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x42}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x4040001) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r3, &(0x7f00000002c0)=ANY=[], 0x200002e6) (async) fcntl$setpipe(r2, 0x407, 0x1) r4 = dup(r0) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40200d4}, 0x8842) syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa4600010102030109025100010100c032090400000208065000070501020002000705820200020009040001040806620007050102000324020705"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.138' (ED25519) to the list of known hosts. [ 20.786745][ T36] audit: type=1400 audit(1790984545.070:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.787952][ T286] cgroup: Unknown subsys name 'net' [ 20.809485][ T36] audit: type=1400 audit(1790984545.070:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.836804][ T36] audit: type=1400 audit(1790984545.100:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.836967][ T286] cgroup: Unknown subsys name 'devices' [ 20.959362][ T286] cgroup: Unknown subsys name 'hugetlb' [ 20.964975][ T286] cgroup: Unknown subsys name 'rlimit' [ 21.077395][ T36] audit: type=1400 audit(1790984545.360:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.100678][ T36] audit: type=1400 audit(1790984545.360:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.125586][ T36] audit: type=1400 audit(1790984545.370:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.134037][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.157740][ T36] audit: type=1400 audit(1790984545.440:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.183434][ T36] audit: type=1400 audit(1790984545.450:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.216073][ T36] audit: type=1400 audit(1790984545.500:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.241654][ T36] audit: type=1400 audit(1790984545.500:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.242030][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.045942][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.053081][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.060187][ T293] bridge_slave_0: entered allmulticast mode [ 22.066402][ T293] bridge_slave_0: entered promiscuous mode [ 22.073017][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.080099][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.087156][ T293] bridge_slave_1: entered allmulticast mode [ 22.093546][ T293] bridge_slave_1: entered promiscuous mode [ 22.121421][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.128530][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.135593][ T296] bridge_slave_0: entered allmulticast mode [ 22.141886][ T296] bridge_slave_0: entered promiscuous mode [ 22.149298][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.156330][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.163546][ T296] bridge_slave_1: entered allmulticast mode [ 22.169731][ T296] bridge_slave_1: entered promiscuous mode [ 22.192483][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.199585][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.206751][ T294] bridge_slave_0: entered allmulticast mode [ 22.213069][ T294] bridge_slave_0: entered promiscuous mode [ 22.222559][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.229664][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.236738][ T294] bridge_slave_1: entered allmulticast mode [ 22.243026][ T294] bridge_slave_1: entered promiscuous mode [ 22.309895][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.316969][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.324131][ T295] bridge_slave_0: entered allmulticast mode [ 22.330470][ T295] bridge_slave_0: entered promiscuous mode [ 22.348176][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.355320][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.362455][ T295] bridge_slave_1: entered allmulticast mode [ 22.368808][ T295] bridge_slave_1: entered promiscuous mode [ 22.446536][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.453616][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.461014][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.468404][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.505733][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.512827][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.520201][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.527217][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.537347][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.544413][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.551672][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.558803][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.588636][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.595710][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.603024][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.610091][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.639130][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.646311][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.653960][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.661244][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.668904][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.676084][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.701005][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.708077][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.717441][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.724531][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.738878][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.745931][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.753546][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.760601][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.781346][ T293] veth0_vlan: entered promiscuous mode [ 22.799481][ T293] veth1_macvtap: entered promiscuous mode [ 22.816786][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.823862][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.833575][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.840645][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.848663][ T296] veth0_vlan: entered promiscuous mode [ 22.874598][ T296] veth1_macvtap: entered promiscuous mode [ 22.902880][ T295] veth0_vlan: entered promiscuous mode [ 22.924311][ T294] veth0_vlan: entered promiscuous mode [ 22.933376][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 22.938153][ T295] veth1_macvtap: entered promiscuous mode [ 22.963658][ T294] veth1_macvtap: entered promiscuous mode [ 22.981378][ T313] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.041231][ T319] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6'. [ 23.051289][ T319] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 23.057229][ T313] x_tables: duplicate underflow at hook 1 [ 23.150074][ T330] netlink: 972 bytes leftover after parsing attributes in process `syz.0.8'. [ 23.327694][ T45] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 23.407712][ T317] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.487611][ T45] usb 2-1: Invalid ep0 maxpacket: 64 [ 23.493025][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.557805][ T317] usb 1-1: Using ep0 maxpacket: 16 [ 23.564045][ T317] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=30.00 [ 23.573158][ T317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.582243][ T317] usb 1-1: config 0 descriptor?? [ 23.588797][ T317] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 23.596564][ T317] usb 1-1: Detected FT2232HP [ 23.627598][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.627726][ T45] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 23.648695][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.659837][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.671048][ T10] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 23.680164][ T10] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 23.688227][ T10] usb 3-1: Manufacturer: syz [ 23.693423][ T10] usb 3-1: config 0 descriptor?? [ 23.777603][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 23.783759][ T9] usb 4-1: config 0 has no interfaces? [ 23.790346][ T317] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 23.796091][ T9] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 23.798835][ T317] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 23.806630][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.813365][ T45] usb 2-1: Invalid ep0 maxpacket: 64 [ 23.821474][ T9] usb 4-1: Product: syz [ 23.827152][ T45] usb usb2-port1: attempt power cycle [ 23.831131][ T9] usb 4-1: Manufacturer: syz [ 23.836360][ T317] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 23.841032][ T9] usb 4-1: SerialNumber: syz [ 23.855677][ T317] usb 1-1: USB disconnect, device number 2 [ 23.862730][ T317] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 23.872432][ T317] ftdi_sio 1-1:0.0: device disconnected [ 23.878554][ T9] usb 4-1: config 0 descriptor?? [ 24.187648][ T45] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 24.208005][ T45] usb 2-1: Invalid ep0 maxpacket: 64 [ 24.347753][ T45] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 24.376087][ T45] usb 2-1: Invalid ep0 maxpacket: 64 [ 24.381874][ T45] usb usb2-port1: unable to enumerate USB device [ 24.401280][ T351] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.401977][ T351] rust_binder: 350:351 got transaction to invalid handle 1 [ 24.415776][ T351] rust_binder: 350:351 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 24.425252][ T9] rust_binder: 350: undelivered TRANSACTION_ERROR: 29201 [ 24.506894][ T10] uclogic 0003:256C:006D.0001: failed retrieving Huion firmware version: -71 [ 24.516184][ T10] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 24.523737][ T10] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 24.533873][ T10] usb 3-1: USB disconnect, device number 2 [ 24.687656][ T45] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 24.837661][ T45] usb 1-1: Invalid ep0 maxpacket: 16 [ 24.967627][ T45] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 25.127651][ T45] usb 1-1: Invalid ep0 maxpacket: 16 [ 25.133103][ T45] usb usb1-port1: attempt power cycle [ 25.247626][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 25.397613][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 25.404308][ T10] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 25.415784][ T10] usb 3-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 25.429345][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 25.437387][ T10] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a18, bcdDevice= 0.40 [ 25.446487][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.454522][ T10] usb 3-1: Product: 聫な祤纺ᜍ㙄Ꮾᨷ㷙빱㴱緳℔甼Ⲥࡏ䅤뽁ࢃ㯕뒤폪㺭埵ࢃ㟞ﱹ氷﵇鲐쉈씃⻶◎椩厐㼥릹暑ᡊᦢ [ 25.469815][ T10] usb 3-1: Manufacturer: ﳿ [ 25.474423][ T10] usb 3-1: SerialNumber: syz [ 25.487588][ T45] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 25.507929][ T45] usb 1-1: Invalid ep0 maxpacket: 16 [ 25.637607][ T45] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 25.657949][ T45] usb 1-1: Invalid ep0 maxpacket: 16 [ 25.663383][ T45] usb usb1-port1: unable to enumerate USB device [ 25.883275][ T10] usbhid 3-1:1.0: can't add hid device: -71 [ 25.889309][ T10] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 25.898310][ T10] usb 3-1: USB disconnect, device number 3 [ 26.007780][ T36] kauditd_printk_skb: 82 callbacks suppressed [ 26.007798][ T36] audit: type=1400 audit(1790984550.300:156): avc: denied { read } for pid=360 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.082042][ T36] audit: type=1400 audit(1790984550.370:157): avc: denied { create } for pid=362 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.119323][ T36] audit: type=1400 audit(1790984550.410:158): avc: denied { mounton } for pid=362 comm="syz.1.18" path="/2/file0" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 26.201769][ T36] audit: type=1400 audit(1790984550.490:159): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 26.228907][ T36] audit: type=1400 audit(1790984550.520:160): avc: denied { write } for pid=366 comm="syz.1.19" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 26.251480][ T36] audit: type=1400 audit(1790984550.520:161): avc: denied { read append } for pid=366 comm="syz.1.19" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 26.274720][ T36] audit: type=1400 audit(1790984550.520:162): avc: denied { open } for pid=366 comm="syz.1.19" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 26.297917][ T36] audit: type=1400 audit(1790984550.520:163): avc: denied { map } for pid=366 comm="syz.1.19" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 26.394103][ T36] audit: type=1400 audit(1790984550.680:164): avc: denied { create } for pid=371 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 26.413368][ T36] audit: type=1400 audit(1790984550.680:165): avc: denied { connect } for pid=371 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 26.453284][ T10] usb 4-1: USB disconnect, device number 2 [ 26.474382][ T379] Zero length message leads to an empty skb [ 26.847654][ T336] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 26.997607][ T336] usb 2-1: Using ep0 maxpacket: 16 [ 27.003842][ T336] usb 2-1: config 0 interface 0 has no altsetting 0 [ 27.010635][ T336] usb 2-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 27.019800][ T336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.028558][ T336] usb 2-1: config 0 descriptor?? [ 27.464902][ T336] kye 0003:0458:5012.0002: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 27.475676][ T336] kye 0003:0458:5012.0002: unknown main item tag 0x2 [ 27.482477][ T336] kye 0003:0458:5012.0002: unknown main item tag 0x6 [ 27.489247][ T336] kye 0003:0458:5012.0002: unknown main item tag 0x0 [ 27.498128][ T336] kye 0003:0458:5012.0002: ignoring exceeding usage max [ 27.507053][ T336] kye 0003:0458:5012.0002: hidraw0: USB HID vcc.5e Device [HID 0458:5012] on usb-dummy_hcd.1-1/input0 [ 27.518352][ T336] kye 0003:0458:5012.0002: tablet-enabling feature report not found [ 27.526339][ T336] kye 0003:0458:5012.0002: tablet enabling failed [ 27.667840][ T31] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 27.797617][ T31] usb 3-1: device descriptor read/64, error -71 [ 28.037596][ T31] usb 3-1: device descriptor read/64, error -71 [ 28.171813][ T10] usb 2-1: USB disconnect, device number 6 [ 28.276608][ T446] usb usb7: check_ctrlrecip: process 446 (syz.1.43) requesting ep 01 but needs 81 [ 28.277596][ T31] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 28.285960][ T446] usb usb7: usbfs: process 446 (syz.1.43) did not claim interface 0 before use [ 28.323332][ T450] overlayfs: missing 'lowerdir' [ 28.389336][ T459] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.417690][ T31] usb 3-1: device descriptor read/64, error -71 [ 28.576588][ T498] SELinux: Context is not valid (left unmapped). [ 28.589230][ T501] overlayfs: conflicting lowerdir path [ 28.647306][ T504] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 28.657581][ T31] usb 3-1: device descriptor read/64, error -71 [ 28.768102][ T31] usb usb3-port1: attempt power cycle [ 28.972071][ T533] cgroup: Need name or subsystem set [ 29.093080][ T537] : renamed from bond_slave_0 [ 29.107596][ T31] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 29.111697][ T539] usb usb8: usbfs: process 539 (syz.0.67) did not claim interface 0 before use [ 29.138576][ T31] usb 3-1: device descriptor read/8, error -71 [ 29.278866][ T31] usb 3-1: device descriptor read/8, error -71 [ 29.287628][ T336] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 29.377589][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 29.437588][ T336] usb 2-1: Using ep0 maxpacket: 32 [ 29.443870][ T336] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 29.452305][ T336] usb 2-1: config 0 has no interface number 0 [ 29.459808][ T336] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 29.468979][ T336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.476976][ T336] usb 2-1: Product: syz [ 29.481148][ T336] usb 2-1: Manufacturer: syz [ 29.485737][ T336] usb 2-1: SerialNumber: syz [ 29.491180][ T336] usb 2-1: config 0 descriptor?? [ 29.496850][ T336] smsc95xx v2.0.0 [ 29.507598][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 29.507613][ T429] Bluetooth: hci0: command 0x1003 tx timeout [ 29.517756][ T31] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 29.538610][ T10] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 29.548589][ T31] usb 3-1: device descriptor read/8, error -71 [ 29.551154][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 29.567384][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 29.580338][ T10] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 29.589399][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.598164][ T10] usb 1-1: config 0 descriptor?? [ 29.603967][ T10] usb-storage 1-1:0.0: USB Mass Storage device detected [ 29.611768][ T10] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 29.678572][ T31] usb 3-1: device descriptor read/8, error -71 [ 29.787698][ T31] usb usb3-port1: unable to enumerate USB device [ 29.807052][ T10] usb 1-1: USB disconnect, device number 7 [ 29.898048][ T535] tipc: Enabling of bearer rejected, failed to enable media [ 29.906796][ T336] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 29.917642][ T336] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 30.333132][ T535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.65'. [ 30.595193][ T10] smpboot: CPU 1 is now offline [ 30.631261][ T320] Bluetooth: hci0: Frame reassembly failed (-84) [ 30.862595][ T336] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 30.896362][ T336] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 30.906916][ T336] usb 2-1: USB disconnect, device number 7 [ 31.007567][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.167582][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 31.181315][ T10] usb 4-1: config 14 has an invalid interface number: 199 but max is 0 [ 31.203061][ T10] usb 4-1: config 14 has no interface number 0 [ 31.217085][ T631] netlink: 'syz.0.85': attribute type 16 has an invalid length. [ 31.229449][ T10] usb 4-1: New USB device found, idVendor=5bfe, idProduct=a243, bcdDevice=3a.07 [ 31.248246][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.277564][ T10] usb 4-1: Product: syz [ 31.287067][ T36] kauditd_printk_skb: 61 callbacks suppressed [ 31.287077][ T36] audit: type=1400 audit(1790984555.570:227): avc: denied { create } for pid=632 comm="syz.0.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 31.314156][ T10] usb 4-1: Manufacturer: syz [ 31.327561][ T10] usb 4-1: SerialNumber: syz [ 31.387869][ T36] audit: type=1400 audit(1790984555.600:228): avc: denied { mount } for pid=632 comm="syz.0.86" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 31.440022][ T36] audit: type=1400 audit(1790984555.610:229): avc: denied { write } for pid=632 comm="syz.0.86" name="instances" dev="tracefs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 31.493476][ T36] audit: type=1400 audit(1790984555.610:230): avc: denied { add_name } for pid=632 comm="syz.0.86" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 31.550817][ T36] audit: type=1400 audit(1790984555.610:231): avc: denied { create } for pid=632 comm="syz.0.86" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 31.570911][ T621] file system registered [ 31.592796][ T10] cdc_acm 4-1:14.199: invalid descriptor buffer length [ 31.617073][ T10] usb 4-1: USB disconnect, device number 3 [ 31.638286][ T36] audit: type=1400 audit(1790984555.630:232): avc: denied { read write } for pid=632 comm="syz.0.86" name="available_tracers" dev="tracefs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 31.697932][ T36] audit: type=1400 audit(1790984555.630:233): avc: denied { ioctl open } for pid=632 comm="syz.0.86" path="/24/tracefs/available_tracers" dev="tracefs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 31.771344][ T36] audit: type=1400 audit(1790984555.630:234): avc: denied { mounton } for pid=632 comm="syz.0.86" path="/24/tracefs" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 31.810675][ T36] audit: type=1400 audit(1790984555.640:235): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 31.834259][ T36] audit: type=1400 audit(1790984555.650:236): avc: denied { write } for pid=637 comm="syz.0.87" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.893461][ T651] FAULT_INJECTION: forcing a failure. [ 31.893461][ T651] name failslab, interval 1, probability 0, space 0, times 1 [ 31.906924][ T649] netlink: 'syz.1.88': attribute type 12 has an invalid length. [ 31.918581][ T651] CPU: 0 UID: 0 PID: 651 Comm: syz.0.89 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 31.918599][ T651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 31.918612][ T651] Call Trace: [ 31.918616][ T651] [ 31.918620][ T651] __dump_stack+0x21/0x30 [ 31.918640][ T651] dump_stack_lvl+0x140/0x1c0 [ 31.918654][ T651] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.918668][ T651] ? genl_family_rcv_msg_doit+0x2a4/0x360 [ 31.918682][ T651] dump_stack+0x19/0x20 [ 31.918696][ T651] should_fail_ex+0x3c2/0x510 [ 31.918709][ T651] should_failslab+0xac/0x100 [ 31.918723][ T651] kmem_cache_alloc_node_noprof+0x45/0x420 [ 31.918735][ T651] ? kasan_save_alloc_info+0x3a/0x50 [ 31.918745][ T651] ? __alloc_skb+0x10c/0x360 [ 31.918759][ T651] __alloc_skb+0x10c/0x360 [ 31.918771][ T651] netlink_ack+0x155/0xa50 [ 31.918786][ T651] ? __cfi_genl_rcv_msg+0x10/0x10 [ 31.918798][ T651] netlink_rcv_skb+0x2cb/0x4e0 [ 31.918812][ T651] ? __cfi_genl_rcv_msg+0x10/0x10 [ 31.918823][ T651] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 31.918839][ T651] ? down_read+0x7f/0xe0 [ 31.918853][ T651] ? __cfi_down_read+0x10/0x10 [ 31.918867][ T651] genl_rcv+0x2c/0x40 [ 31.918877][ T651] netlink_unicast+0x8bc/0xa70 [ 31.918891][ T651] netlink_sendmsg+0x7d1/0xad0 [ 31.918907][ T651] ? __cfi_netlink_sendmsg+0x10/0x10 [ 31.918926][ T651] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 31.918938][ T651] ? security_socket_sendmsg+0x3d/0x100 [ 31.918954][ T651] ____sys_sendmsg+0x99e/0xa00 [ 31.918970][ T651] ? __import_iovec+0x5b9/0x7d0 [ 31.918981][ T651] ? __sys_sendmsg_sock+0x50/0x50 [ 31.918997][ T651] ? import_iovec+0x80/0xb0 [ 31.919007][ T651] ___sys_sendmsg+0x2a6/0x370 [ 31.919022][ T651] ? __sys_sendmsg+0x260/0x260 [ 31.919037][ T651] ? proc_fail_nth_write+0x184/0x220 [ 31.919052][ T651] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 31.919070][ T651] ? __fget_files+0x2bc/0x330 [ 31.919084][ T651] __x64_sys_sendmsg+0x1be/0x2a0 [ 31.919098][ T651] ? fput+0x1a4/0x230 [ 31.919112][ T651] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 31.919127][ T651] ? ksys_write+0x1f3/0x260 [ 31.919139][ T651] ? __kasan_check_read+0x15/0x20 [ 31.919150][ T651] x64_sys_call+0x2a4c/0x2ee0 [ 31.919160][ T651] do_syscall_64+0x57/0xf0 [ 31.919171][ T651] ? clear_bhb_loop+0x50/0xa0 [ 31.919185][ T651] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.919198][ T651] RIP: 0033:0x7fd4c679e159 [ 31.919211][ T651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.919220][ T651] RSP: 002b:00007fd4c7700028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 31.919238][ T651] RAX: ffffffffffffffda RBX: 00007fd4c6a25fa0 RCX: 00007fd4c679e159 [ 31.919246][ T651] RDX: 000000000000c000 RSI: 0000200000000540 RDI: 0000000000000003 [ 31.919253][ T651] RBP: 00007fd4c7700090 R08: 0000000000000000 R09: 0000000000000000 [ 31.919259][ T651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.919266][ T651] R13: 00007fd4c6a26038 R14: 00007fd4c6a25fa0 R15: 00007ffc578169b8 [ 31.919275][ T651] [ 32.238881][ T655] process 'syz.0.91' launched './file0' with NULL argv: empty string added [ 32.302397][ T665] capability: warning: `syz.0.95' uses deprecated v2 capabilities in a way that may be insecure [ 32.388109][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 32.538498][ T10] usb 2-1: config index 0 descriptor too short (expected 4257, got 161) [ 32.546855][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.576163][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 32.611055][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.619124][ T544] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 32.707609][ T429] Bluetooth: hci0: command 0x1003 tx timeout [ 32.713723][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 32.778926][ T544] usb 1-1: config 1 has an invalid descriptor of length 238, skipping remainder of the config [ 32.807709][ T544] usb 1-1: config 1 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 32.824032][ T686] netlink: 40 bytes leftover after parsing attributes in process `syz.2.99'. [ 32.843047][ T686] netlink: 40 bytes leftover after parsing attributes in process `syz.2.99'. [ 32.852191][ T544] usb 1-1: config 1 interface 0 has no altsetting 0 [ 32.867495][ T10] usb 2-1: string descriptor 0 read error: -71 [ 32.874848][ T686] sock: sock_timestamping_bind_phc: sock not bind to device [ 32.883350][ T544] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.893150][ T10] uvcvideo 2-1:1.1: Unknown video format 32595559-0008-0010-8000-00aa00389b71 [ 32.908901][ T544] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.929118][ T10] usb 2-1: Found UVC 1.00 device (046d:0825) [ 32.938567][ T544] usb 1-1: Product: syz [ 32.942730][ T544] usb 1-1: Manufacturer: syz [ 32.960943][ T10] uvcvideo 2-1:1.1: No supported video formats found. [ 32.977571][ T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 32.985583][ T544] usb 1-1: SerialNumber: syz [ 32.990291][ T10] uvcvideo 2-1:1.1: Failed to initialize the device (-22). [ 33.007292][ T10] usb 2-1: USB disconnect, device number 8 [ 33.148626][ T9] usb 4-1: config 3 has an invalid interface number: 193 but max is 0 [ 33.156939][ T9] usb 4-1: config 3 has an invalid descriptor of length 97, skipping remainder of the config [ 33.167387][ T9] usb 4-1: config 3 has no interface number 0 [ 33.173873][ T9] usb 4-1: config 3 interface 193 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 33.187174][ T9] usb 4-1: config 3 interface 193 has no altsetting 0 [ 33.195386][ T9] usb 4-1: New USB device found, idVendor=045b, idProduct=0247, bcdDevice=6b.2b [ 33.209018][ T346] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 33.227051][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.237680][ T9] usb 4-1: Product: syz [ 33.241871][ T9] usb 4-1: Manufacturer: syz [ 33.256825][ T9] usb 4-1: SerialNumber: syz [ 33.378684][ T346] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 33.400814][ T346] usb 3-1: config 0 interface 0 has no altsetting 0 [ 33.409357][ T346] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 33.430154][ T346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.450573][ T346] usb 3-1: config 0 descriptor?? [ 33.464395][ T690] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 33.478422][ T9] cdc_acm 4-1:3.193: Zero length descriptor references [ 33.491704][ T9] cdc_acm 4-1:3.193: probe with driver cdc_acm failed with error -22 [ 33.511489][ T9] usb 4-1: USB disconnect, device number 4 [ 33.740402][ T346] usbhid 3-1:0.0: can't add hid device: -71 [ 33.747067][ T346] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 33.762402][ T346] usb 3-1: USB disconnect, device number 8 [ 33.937577][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 34.003441][ T782] FAULT_INJECTION: forcing a failure. [ 34.003441][ T782] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 34.016763][ T782] CPU: 0 UID: 0 PID: 782 Comm: syz.3.109 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 34.016783][ T782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 34.016790][ T782] Call Trace: [ 34.016794][ T782] [ 34.016798][ T782] __dump_stack+0x21/0x30 [ 34.016821][ T782] dump_stack_lvl+0x140/0x1c0 [ 34.016836][ T782] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.016851][ T782] ? check_stack_object+0x138/0x150 [ 34.016863][ T782] dump_stack+0x19/0x20 [ 34.016877][ T782] should_fail_ex+0x3c2/0x510 [ 34.016891][ T782] should_fail+0xf/0x20 [ 34.016903][ T782] should_fail_usercopy+0x1e/0x30 [ 34.016917][ T782] _copy_to_user+0x24/0xa0 [ 34.016932][ T782] simple_read_from_buffer+0xed/0x160 [ 34.016947][ T782] proc_fail_nth_read+0x1aa/0x220 [ 34.016963][ T782] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 34.016979][ T782] ? bpf_lsm_file_permission+0xd/0x20 [ 34.016993][ T782] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 34.017008][ T782] vfs_read+0x28b/0xc70 [ 34.017020][ T782] ? __cfi_vfs_read+0x10/0x10 [ 34.017031][ T782] ? __kasan_check_write+0x18/0x20 [ 34.017042][ T782] ? mutex_lock+0x97/0x1d0 [ 34.017055][ T782] ? __cfi_mutex_lock+0x10/0x10 [ 34.017069][ T782] ksys_read+0x145/0x260 [ 34.017080][ T782] ? __cfi_ksys_read+0x10/0x10 [ 34.017091][ T782] ? __kasan_check_read+0x15/0x20 [ 34.017102][ T782] __x64_sys_read+0x7f/0x90 [ 34.017113][ T782] x64_sys_call+0x2638/0x2ee0 [ 34.017123][ T782] do_syscall_64+0x57/0xf0 [ 34.017133][ T782] ? clear_bhb_loop+0x50/0xa0 [ 34.017148][ T782] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.017161][ T782] RIP: 0033:0x7f2fd235e98e [ 34.017171][ T782] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 34.017180][ T782] RSP: 002b:00007f2fd32a9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 34.017192][ T782] RAX: ffffffffffffffda RBX: 00007f2fd32aa6c0 RCX: 00007f2fd235e98e [ 34.017200][ T782] RDX: 000000000000000f RSI: 00007f2fd32aa0a0 RDI: 0000000000000004 [ 34.017207][ T782] RBP: 00007f2fd32aa090 R08: 0000000000000000 R09: 0000000000000000 [ 34.017214][ T782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.017220][ T782] R13: 00007f2fd2626038 R14: 00007f2fd2625fa0 R15: 00007ffd56031b98 [ 34.017229][ T782] [ 34.268486][ T9] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 34.276583][ T9] usb 2-1: config 1 has no interface number 0 [ 34.284035][ T9] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 34.293135][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.301295][ T9] usb 2-1: Product: syz [ 34.306236][ T9] usb 2-1: Manufacturer: syz [ 34.311170][ T9] usb 2-1: SerialNumber: syz [ 34.454144][ T804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.114'. [ 34.472136][ T806] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=72 sclass=netlink_xfrm_socket pid=806 comm=syz.3.115 [ 34.518768][ T774] synth uevent: /bus/acpi: unknown uevent action string [ 34.540872][ T9] usb 2-1: 3:1 : does not exist [ 34.547135][ T808] mmap: syz.3.116 (808) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.561455][ T9] usb 2-1: 3:2 : does not exist [ 34.572010][ T9] usb 2-1: USB disconnect, device number 9 [ 34.608058][ T700] udevd[700]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.3/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.775556][ T825] netlink: 'syz.3.122': attribute type 1 has an invalid length. [ 34.987561][ T346] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 35.138504][ T346] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 35.149062][ T346] usb 3-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 35.162913][ T346] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 35.172410][ T346] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 35.186869][ T346] usb 3-1: Manufacturer: syz [ 35.197660][ T346] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 35.343425][ T844] input: syz1 as /devices/virtual/input/input5 [ 35.430745][ T691] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 35.464122][ T846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.495637][ T846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.598628][ T691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.613393][ T691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.624954][ T10] usb 3-1: USB disconnect, device number 9 [ 35.634958][ T691] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 35.652728][ T691] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 35.664515][ T691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.680936][ T691] usb 2-1: config 0 descriptor?? [ 35.758923][ T544] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 35.776674][ T544] usb 1-1: USB disconnect, device number 8 [ 35.850151][ T865] kvm: emulating exchange as write [ 35.895852][ T870] FAULT_INJECTION: forcing a failure. [ 35.895852][ T870] name failslab, interval 1, probability 0, space 0, times 0 [ 35.927597][ T870] CPU: 0 UID: 0 PID: 870 Comm: syz.3.134 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 35.927620][ T870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 35.927629][ T870] Call Trace: [ 35.927633][ T870] [ 35.927638][ T870] __dump_stack+0x21/0x30 [ 35.927659][ T870] dump_stack_lvl+0x140/0x1c0 [ 35.927677][ T870] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.927693][ T870] dump_stack+0x19/0x20 [ 35.927707][ T870] should_fail_ex+0x3c2/0x510 [ 35.927721][ T870] should_failslab+0xac/0x100 [ 35.927734][ T870] kmem_cache_alloc_noprof+0x42/0x410 [ 35.927745][ T870] ? alloc_empty_file+0xbf/0x270 [ 35.927760][ T870] ? _raw_spin_unlock+0x45/0x60 [ 35.927772][ T870] alloc_empty_file+0xbf/0x270 [ 35.927785][ T870] ? _raw_spin_unlock+0x45/0x60 [ 35.927795][ T870] alloc_file_pseudo+0x142/0x1f0 [ 35.927809][ T870] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 35.927824][ T870] anon_inode_getfd+0xda/0x1d0 [ 35.927838][ T870] __se_sys_fsopen+0x260/0x390 [ 35.927848][ T870] __x64_sys_fsopen+0x5f/0x80 [ 35.927857][ T870] x64_sys_call+0x2d40/0x2ee0 [ 35.927867][ T870] do_syscall_64+0x57/0xf0 [ 35.927877][ T870] ? clear_bhb_loop+0x50/0xa0 [ 35.927891][ T870] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.927904][ T870] RIP: 0033:0x7f2fd239e159 [ 35.927914][ T870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.927923][ T870] RSP: 002b:00007f2fd32aa028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 35.927935][ T870] RAX: ffffffffffffffda RBX: 00007f2fd2625fa0 RCX: 00007f2fd239e159 [ 35.927964][ T870] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000000 [ 35.927972][ T870] RBP: 00007f2fd243506b R08: 0000000000000000 R09: 0000000000000000 [ 35.927978][ T870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.927985][ T870] R13: 00007f2fd2626038 R14: 00007f2fd2625fa0 R15: 00007ffd56031b98 [ 35.927993][ T870] [ 36.247266][ T878] ======================================================= [ 36.247266][ T878] WARNING: The mand mount option has been deprecated and [ 36.247266][ T878] and is ignored by this kernel. Remove the mand [ 36.247266][ T878] option from the mount to silence this warning. [ 36.247266][ T878] ======================================================= [ 36.347571][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 36.347584][ T36] audit: type=1400 audit(1790984560.580:260): avc: denied { create } for pid=881 comm="syz.3.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 36.388577][ T691] plantronics 0003:047F:FFFF.0003: report_id 3258126 is invalid [ 36.396237][ T691] plantronics 0003:047F:FFFF.0003: item 0 4 1 8 parsing failed [ 36.443473][ T691] plantronics 0003:047F:FFFF.0003: parse failed [ 36.464302][ T36] audit: type=1400 audit(1790984560.590:261): avc: denied { create } for pid=883 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.488251][ T691] plantronics 0003:047F:FFFF.0003: probe with driver plantronics failed with error -22 [ 36.512677][ T892] syz.3.142 uses obsolete (PF_INET,SOCK_PACKET) [ 36.542714][ T36] audit: type=1400 audit(1790984560.590:262): avc: denied { bind } for pid=883 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.561957][ T691] usb 2-1: USB disconnect, device number 10 [ 36.608560][ T36] audit: type=1400 audit(1790984560.590:263): avc: denied { connect } for pid=883 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.629006][ T899] fuse: Bad value for 'fd' [ 36.666695][ T36] audit: type=1400 audit(1790984560.590:264): avc: denied { accept } for pid=883 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.719972][ T914] unloading [ 36.747709][ T36] audit: type=1400 audit(1790984560.590:265): avc: denied { write } for pid=883 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.784071][ T294] ffs_data_put(): freeing [ 36.835372][ T36] audit: type=1400 audit(1790984560.750:266): avc: denied { setcurrent } for pid=889 comm="syz.3.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 36.873844][ T921] kvm: MONITOR instruction emulated as NOP! [ 36.911886][ T36] audit: type=1401 audit(1790984560.750:267): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 36.997142][ T36] audit: type=1400 audit(1790984560.930:268): avc: denied { bind } for pid=898 comm="syz.3.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.034543][ T921] kvm_intel: kvm [919]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0xa609 [ 37.062303][ T921] kvm: kvm [919]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xc404 [ 37.086146][ T36] audit: type=1400 audit(1790984560.930:269): avc: denied { setopt } for pid=898 comm="syz.3.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.265990][ T930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.153'. [ 37.375309][ T933] random: crng reseeded on system resumption [ 37.404855][ T929] kvm_intel: kvm [927]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0xb80a [ 37.445498][ T929] kvm: kvm [927]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x2905 [ 37.527348][ T940] netlink: 188 bytes leftover after parsing attributes in process `syz.2.156'. [ 37.726573][ T951] random: crng reseeded on system resumption [ 37.876919][ T961] rtc_cmos 00:00: Alarms can be up to one day in the future [ 37.900767][ T961] cgroup: Need name or subsystem set [ 37.925060][ T960] cgroup: Need name or subsystem set [ 38.044487][ T966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.164'. [ 38.177564][ T691] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 38.207568][ T544] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 38.258466][ T975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.167'. [ 38.338796][ T691] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.348847][ T691] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 38.363605][ T691] usb 1-1: Dual-Role OTG device on HNP port [ 38.376257][ T691] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.12 [ 38.385408][ T544] usb 2-1: Using ep0 maxpacket: 16 [ 38.397561][ T544] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 38.409075][ T691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.419810][ T544] usb 2-1: config 0 has an invalid descriptor of length 226, skipping remainder of the config [ 38.438262][ C0] ------------[ cut here ]------------ [ 38.443830][ C0] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 38.450786][ C0] WARNING: CPU: 0 PID: 110 at drivers/usb/gadget/udc/core.c:125 usb_ep_enable+0x210/0x3c0 [ 38.460754][ C0] Modules linked in: [ 38.464631][ C0] CPU: 0 UID: 0 PID: 110 Comm: udevd Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 38.475716][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 38.485756][ C0] RIP: 0010:usb_ep_enable+0x210/0x3c0 [ 38.491152][ C0] Code: 4d 00 48 c7 c0 a0 61 6d 86 49 c7 c0 c0 61 6d 86 4c 0f 44 c0 48 c7 c7 60 61 6d 86 48 c7 c6 63 75 1d 87 44 89 f2 e8 50 2b 4b fd <0f> 0b e9 4c ff ff ff e8 c4 59 ce fd 49 bc 00 00 00 00 00 fc ff df [ 38.511113][ C0] RSP: 0018:ffffc90000007878 EFLAGS: 00010046 [ 38.517179][ C0] RAX: c44e7d77d7ade600 RBX: ffff888104ff40b0 RCX: ffff88810d308000 [ 38.525150][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 38.533172][ C0] RBP: ffffc900000078a0 R08: ffff8881f6e294d3 R09: 1ffff1103edc529a [ 38.541144][ C0] R10: dffffc0000000000 R11: ffffed103edc529b R12: dffffc0000000000 [ 38.549360][ C0] R13: ffff888104ff40b8 R14: 0000000000000081 R15: ffff88810e6463ba [ 38.557311][ C0] FS: 00007f6e33351880(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 38.566607][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.573173][ C0] CR2: 0000000000000000 CR3: 000000010e37e000 CR4: 00000000003526b0 [ 38.581303][ C0] DR0: 0000000000000004 DR1: 00000000000001f8 DR2: fffffffffffffffe [ 38.589258][ C0] DR3: ffffffdfefffff17 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 38.597306][ C0] Call Trace: [ 38.600746][ C0] [ 38.603575][ C0] hidg_set_alt+0x138/0xa70 [ 38.608587][ C0] set_config+0x812/0xd10 [ 38.612898][ C0] composite_setup+0x18b0/0x3320 [ 38.617999][ C0] ? __kasan_check_write+0x18/0x20 [ 38.623094][ C0] configfs_composite_setup+0xc6/0x110 [ 38.628556][ C0] dummy_timer+0x2eee/0x4900 [ 38.633150][ C0] ? __cfi_check_preempt_wakeup_fair+0x10/0x10 [ 38.639298][ C0] ? activate_task+0x43b/0x480 [ 38.644076][ C0] ? ttwu_do_activate+0x290/0x620 [ 38.649094][ C0] ? try_to_wake_up+0x111a/0x1fd0 [ 38.654121][ C0] ? process_backlog+0xa48/0xaf0 [ 38.659062][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 38.663983][ C0] ? timerqueue_del+0xd7/0x130 [ 38.668733][ C0] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 38.674094][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 38.679187][ C0] __hrtimer_run_queues+0x3ae/0x8e0 [ 38.684391][ C0] ? hrtimer_interrupt+0xf30/0xf30 [ 38.689493][ C0] ? read_tsc+0xd/0x20 [ 38.693567][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 38.699628][ C0] hrtimer_run_softirq+0x159/0x560 [ 38.704736][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 38.709943][ C0] handle_softirqs+0x1aa/0x620 [ 38.714787][ C0] __irq_exit_rcu+0x47/0xb0 [ 38.719291][ C0] irq_exit_rcu+0xd/0x30 [ 38.723536][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 38.729187][ C0] [ 38.732106][ C0] [ 38.735028][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 38.741090][ C0] RIP: 0010:inode_permission+0x67/0x4c0 [ 38.746635][ C0] Code: 3f 50 99 ff 4c 89 6d c8 4d 8d 7e 02 4d 89 fc 49 c1 ec 03 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 68 03 00 00 <45> 0f b7 2f 44 89 ee 83 e6 01 31 ff e8 a8 53 99 ff 41 83 e5 01 0f [ 38.766352][ C0] RSP: 0018:ffffc90000ebf8a0 EFLAGS: 00000246 [ 38.772498][ C0] RAX: 0000000000000000 RBX: 0000000000000081 RCX: ffff88810d308000 [ 38.780460][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 38.788409][ C0] RBP: ffffc90000ebf8d8 R08: ffff88810d308000 R09: 0000000000000002 [ 38.796535][ C0] R10: 000000000000002f R11: 0000000000000000 R12: 1ffff110220927de [ 38.804493][ C0] R13: 0000000000000000 R14: ffff888110493ef0 R15: ffff888110493ef2 [ 38.812891][ C0] link_path_walk+0x22d/0xeb0 [ 38.817573][ C0] path_openat+0x298/0x35a0 [ 38.822077][ C0] ? kasan_save_alloc_info+0x3a/0x50 [ 38.827351][ C0] ? __kasan_slab_alloc+0x73/0x90 [ 38.832392][ C0] ? getname+0x1b/0x30 [ 38.836460][ C0] ? x64_sys_call+0xe69/0x2ee0 [ 38.841292][ C0] ? do_syscall_64+0x57/0xf0 [ 38.845950][ C0] ? do_filp_open+0x440/0x440 [ 38.850635][ C0] do_filp_open+0x1f2/0x440 [ 38.855225][ C0] ? __cfi_do_filp_open+0x10/0x10 [ 38.860234][ C0] ? alloc_fd+0x4c1/0x570 [ 38.864544][ C0] do_sys_openat2+0x134/0x1d0 [ 38.869481][ C0] ? do_sys_open+0x100/0x100 [ 38.874068][ C0] __x64_sys_openat+0x13a/0x170 [ 38.878903][ C0] x64_sys_call+0xe69/0x2ee0 [ 38.883480][ C0] do_syscall_64+0x57/0xf0 [ 38.887874][ C0] ? clear_bhb_loop+0x50/0xa0 [ 38.892533][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.898421][ C0] RIP: 0033:0x7f6e32ca7407 [ 38.902845][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 38.922440][ C0] RSP: 002b:00007ffd19a32d00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 38.930865][ C0] RAX: ffffffffffffffda RBX: 00007f6e33351880 RCX: 00007f6e32ca7407 [ 38.938844][ C0] RDX: 0000000000080141 RSI: 000055c0953aa02e RDI: ffffffffffffff9c [ 38.946993][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 38.954960][ C0] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff [ 38.962921][ C0] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000 [ 38.970894][ C0] [ 38.973899][ C0] ---[ end trace 0000000000000000 ]--- [ 38.979351][ C0] configfs-gadget.g1 gadget.0: Enable IN endpoint FAILED! [ 38.993501][ T691] usb 1-1: can't set config #1, error -32 [ 39.540653][ T544] usb 2-1: config 0 has no interface number 0 [ 39.628414][ T544] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 39.637583][ T544] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.645551][ T544] usb 2-1: Product: syz [ 39.664962][ T544] usb 2-1: Manufacturer: syz [ 39.671651][ T544] usb 2-1: SerialNumber: syz [ 39.681329][ T544] usb 2-1: config 0 descriptor?? [ 39.717562][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 39.868571][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.878819][ T10] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 768 [ 39.891515][ T10] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 39.904457][ T544] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 39.911140][ T544] usb 2-1: No valid video chain found. [ 39.919782][ T10] usb 3-1: New USB device found, idVendor=174c, idProduct=46aa, bcdDevice= 1.00 [ 39.929157][ T544] usb 2-1: USB disconnect, device number 11 [ 39.935083][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.945838][ T10] usb 3-1: Product: syz [ 39.950257][ T10] usb 3-1: Manufacturer: syz [ 39.955016][ T10] usb 3-1: SerialNumber: syz [ 39.962905][ T10] usb-storage 3-1:1.0: USB Mass Storage device detected [ 39.971822][ T10] scsi host1: usb-storage 3-1:1.0 [ 41.307586][ T10] usb 3-1: USB disconnect, device number 10