last executing test programs: 3m25.913151729s ago: executing program 32 (id=67): pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000040)={0x0, 0x0}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000008c0)={0x0, {{0xa, 0x4e20, 0x7, @mcast2, 0x4}}, 0x1, 0x200000000000163}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) write$P9_RVERSION(r1, &(0x7f0000000280)={0x15, 0x65, 0xffff, 0x2000, 0x8, '9P2000.L'}, 0x15) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RATTACH(r1, &(0x7f00000002c0)={0x14, 0x69, 0x0, {0x80}}, 0x14) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000840)={{}, {0x671c073}, 0x28, 0x0, 0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000440)="c730031b9663b8f4f37fa37297d7e404911a3b8fc8a7d92c29d326e8246a23f48d90371430ae79215966be5e9b1430bddf9a2406a9a84b33dace611df42523bdaf5d12a6f2841155d48aa824798adcdbbc21d64e94de6d653f99b2a2d449b31e5e5e49c1bfe54c7b3db007012419cdb740d8ef439f0b33a8988efb4ca0815c995fd6c80a2d129ffbd450b717590d81375337bd68027247f4d9492716e8bf58a60d12ef3c2f20aed9086c5c2e83e48907525f2a2e98f832d9868eba5cf9021819882734278c4a6bc880d25e65b6ac5b10757c35665174c20d098e6501283fc538787683ddbcef453f51ab42ac0c357ed9e913025e0877c4f5321905f0100f14e6526a9001e3643d1bd4b002f8a66d1ae903fa962dfcace7e0e9e01d745521146e263d6951630681c2dc86f745061c638ab85e5d20955a4b76e854165a1bbce190371754487f28172a7284b56a764a1955465bd4b7a7231a6521ea747148685b40d5511023563944aed2015d754c5540d21297ec09147e30cd8cde362214c4827cbbb7ab0b3234b993ade9e472385b90211c68ec0601e3071bd07084e175bc84ead9b8c2330f6ea2282692", 0x1aa, 0x0, &(0x7f0000000600)={0x2, 0x1b7, {0x1, 0xc, 0xbd, "9d9eed2d7b0d590cf01350ffe16d6d91bd3c4e314212681c0d5debd7b7dafc5c128be668465db5a673652f4a895da0125435506dc726408a2cda4bf41e77d80e805a1f24c27cb92a60eef049e7378224315c857044d3cde94ea7930c37e3fa373fa22c090de2fb458933c70235dfe7ae0b84a0c91a2e20c8dfb7795b1b7518c2cf6f6c59aa68006a7f8bf0bafb6db8d422740de0291fef06afec59ed87ea6d04560faf7e9294b1c46e2f3813a72de18649776b1a5f170de5c55c0b482c", 0xed, "5a11e1d9cb30656d81f9ea82e07049cd6249ab1db78da089344a3cd23644826117dfbe55b47d6794610e06d9985c18407f2e0fdf8b1239dca57994fe6b5297400bb00757117cd4e2c1d834c1fe8d62fc5e075f5ed27af74a0a13f2376acc99ae468000db5965ebabf61759fd6c345039d3241db9f8074132065e8bbe3dccc1b1d7cfbc37c2b5bb008ab142c20a4cc585eafebd8a40d29c8526878e71d5d3ef89e14f5ff57da21d595ca3aba09624506b216b672f7774d562cda4efe9735e455464e372d6148c2737af2ee1dfb92153ee8f46ad2b5b9feab9acac2b982639d456ccd7817d85a41f51090b9ffc68"}, 0x6d, "3dd79558f214bcae6962c766d6a62d9031db1d777418024001ed023ab22c5d9b932ac46244df4cf242f4793ef19f44fb022cbf6a4178030488de4ba5588e18d5ba796c283d7dcba7da1816787d24b2b15f9c53e6b602a5785bc619ebdd66c7926d921cd45e90562aa7e31f4d81"}, 0x230}) getgroups(0x1, &(0x7f0000000140)=[0xee01]) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000b80)='ns/pid_for_children\x00') r6 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r6, &(0x7f0000000340)=[{{&(0x7f0000000980)={0xa, 0x4e22, 0x8, @local, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x8}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0xc}}}], 0x30}}], 0x1, 0x4040090) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000a00)=0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000a40)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000a80)={"f18b331013f89894db899258fd556ca2", r7, r8, {0x5, 0xb}, {0x7, 0x80000001}, 0x10000, [0x3, 0x5, 0x8, 0xfffffffffffffff9, 0x8001, 0x7, 0xa, 0x4, 0xdf, 0x4, 0xfe97, 0x3464, 0x3, 0x7, 0x1, 0x6]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'lo\x00', &(0x7f00000001c0)=@ethtool_channels={0x3c, 0x4, 0xffffff7f, 0xffff7fff, 0x0, 0x1ff, 0xfff, 0x1273, 0x9}}) write$P9_RGETATTR(r1, &(0x7f0000000380)={0xa0, 0x19, 0x0, {0x18bd, {0x40, 0x3}, 0x40, 0x0, r5, 0x0, 0x100000ae, 0x8000000000000009, 0x4, 0x8, 0x0, 0x5, 0x0, 0x8000000000000, 0x2c05, 0x3c, 0xffffffffffffffff, 0xffffffffffffff3d, 0xfffffffffffffffc, 0x3}}, 0xa0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) 3m13.80736773s ago: executing program 33 (id=226): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x103, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000440)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x9600, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'LVM-syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x168, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@error={0x0, 0x80, 0x0, 0x30}]}) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, 0x0) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, 0x0) mknodat$dm(0xffffffffffffff9c, &(0x7f0000000840)='./dm0\x00', 0x6180, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r2, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0xc, 0x73e9}) ioctl$DM_TABLE_DEPS(r2, 0xc138fd0b, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x190, 0x138, 0x0, 0x0, 0xc00, 0x0, 0x0, @by_uuid={0x0, '\x00', {'CRP-syz', 0x0, '1\x00'}}, "aa8805dbd0d4887c2b6f3c9b27b3439957610364cab9aa0825ef971dafe5c7717d1d7d765651c9eca32db392d3ba942a0f0cac3488b7bc1d9a9474e7310eb3794043ff04a82c741c76e5464fcb70b67420ac6e54f7697d95"}) r3 = openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000880)='./dm0\x00', 0x2, 0x0) pwrite64(r3, &(0x7f00000008c0)="0102", 0x2, 0x1000) 3m9.514782029s ago: executing program 34 (id=162): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000005c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000600)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000640)={0x0, 0x42cc, 0x100, 0x1, 0x7f}, &(0x7f00000006c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800e706, 0x4, 0x1000002, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7774, 0x8, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x8000, 0x2, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x38a9, 0x800, 0x0, 0x230, 0x0, r5}}], 0x1, 0x0, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x4010, r5, 0x80000000) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)={0x310, r2, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5f6, 0x49}}}}, [@NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fdcd9a84b6f45993"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4a1c5b106e9d3ab2ae1888ff643f9ad2a70627103d698bcbf54c964f8bb50b09"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="655aa6961c7b9563b6e7729ff609a80a6210d76e829f709e"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="524b2c8c5c1f58aa7be0bb9e8057c273bed2e3194658d665c898cb729b6f13fa"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "615e97ba9ad75de7"}]}, @NL80211_ATTR_REKEY_DATA={0x7c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="15042410d99f5ea473986643e55034cb"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6658852b8bab4f2fda987c7f0441f29d"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="2da96bea14f224a2a5962c3487677d3c"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="6600f91a45509990e3b63c2b4358aa9e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "04ca299af413bc80"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9bcdd35d1ecb81f7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1ff956dfef98e65a60a9ba71f91f4f6d32ee65fe0cb2980cb769c900b028f0bf"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "944b3363e0e85030"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3a3539a86b2d99ae"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4d97dff82667671dc411d363b791b1e7"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="87a18e4c6610a74873c206126ea532311a47fa136a30c131"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="07300b4e80e573155e7a895a62b89284"}]}, @NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a283edbcaa743ab5"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="1e23381d21772e4e6cf7d6fe525d830e"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="cc49cf8fe4746f4dd11e296afca1d1ad1109a72b718073aa"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e31545ee7b276a89"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5f9ea7ae88a2654f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7f}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}]}, @NL80211_ATTR_REKEY_DATA={0x4c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3dd59fd6f1805baf662ecf0dcb245c84"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="005d810dfe3a3fa737199e0450ddfe9b3284dfcb19f7a940e31743864238872d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}]}, @NL80211_ATTR_REKEY_DATA={0x7c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="037f1044600a164194a5811d8c7f8de0d06e75698fa2091bbdd1fce0f75a9697"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="bff9fe3f96a2a846f78623ed5a8be99340ab8731a7b796b4"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d16e7bd261c501a6cab30a199534064b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffff8}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="91a829833e824b60e21b837b7bc550e7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1ea09e38}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8d6c8fe952045ab7"}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8fdf2cbd7000f3009d4d18660000000000000000fb0000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) 2m31.354263805s ago: executing program 6 (id=617): r0 = syz_open_procfs$namespace(0x0, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 2m31.318454818s ago: executing program 6 (id=618): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000041) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000000500)=0x81, 0x4) prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) r2 = accept$inet_tcp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10) setsockopt$inet_int(r2, 0x0, 0xe, &(0x7f0000000080)=0x9, 0x4) fchmodat(0xffffffffffffff9c, &(0x7f0000000b00)='.\x00', 0xfffffe42) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, r6, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000827bd7000fcdbdf4070000000080003020677e3ab77ba07ffd344fc97c798f1540f7ea5631317397fa6147342", @ANYRES32=r7, @ANYBLOB="0c00990001800000290000000a0006000802110000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x44044) mknodat$null(0xffffffffffffff9c, &(0x7f0000000b40)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40042, 0x1) 2m31.277551663s ago: executing program 6 (id=619): add_key(&(0x7f0000000140)='asymmetric\x00', 0x0, &(0x7f0000000b80)="3082010c3081baa003020102020101300a06082a85030701010302300c310a30080603550403130141301e170d3230303130313030303030305a170d3330303130313030303030305a300c310a30080601103c80fffffe0068302106082a85030701010101301506092a850307010201010106082a85030701010202034300044001010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101300a06082a8503070101030203410002020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202", 0x110, 0xfffffffffffffffd) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x169a82, 0x109) fsconfig$FSCONFIG_SET_PATH(r0, 0x9c, 0x0, 0x0, r0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(r1, r1, 0x0) ioprio_set$uid(0x3, r1, 0x4000) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x74, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) 2m31.183197692s ago: executing program 6 (id=620): openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000340), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)=@v3={0x3000000, [{0x8}, {0x0, 0xfffffff6}], 0xee00}, 0x18, 0x0) lgetxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=ANY=[], 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$can_raw(0x1d, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_ublk_setup_io_uring(0x3, &(0x7f0000000780)={0x0, 0x4, 0x1000}, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2002, 0x0) socket(0x10, 0x803, 0x5) socket$xdp(0x2c, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x1, 0x2, 0x0) openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000540)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000580)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000005c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x303}, "c8bf5d03ac85c25d", "9a5d38a17f00c500000000feff00", "a1c4776d", "3c84a3a3be2adbff"}, 0x28) recvfrom(r2, &(0x7f0000001dc0)=""/4070, 0x20, 0x101, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000002dc0), r2) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) 2m31.171977433s ago: executing program 6 (id=621): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) (async) faccessat(0xffffffffffffffff, 0x0, 0x3) (async, rerun: 64) r1 = getpid() (rerun: 64) r2 = syz_pidfd_open(r1, 0x0) copy_file_range(r2, 0x0, r2, 0x0, 0x22b1, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='100', 0x3) (async, rerun: 32) syz_clone3(&(0x7f0000000280)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 32) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r5 = add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, &(0x7f0000000440)="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", 0x559, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000009c0)={r5, 0x50, 0x300}, &(0x7f0000000a00)=ANY=[], 0x0, 0x0) (async) r6 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0xc, 0x0, 0xfec00000}) (async, rerun: 32) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x27, {0x0, "48b80000c0fe00000000640f700017"}}, @nested_vmlaunch={0x12f, 0x18}], 0x6f}) (async, rerun: 32) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4e, &(0x7f0000000300)=0xfffffff7, 0x4) (async) sendmmsg$inet6(r8, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1e0101", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00('], 0x50, 0x7ffffff7}}], 0x1, 0xc050) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2m30.317688799s ago: executing program 6 (id=626): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000002000)='ns/mnt\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 2m15.666326484s ago: executing program 3 (id=768): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000480)={0x28, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0xc, 0x102, 0x0, 0x1, [@typed={0x8, 0x134, 0x0, 0x0, @fd=r0}]}, @typed={0xc, 0xdf, 0x0, 0x0, @u64}]}, 0x28}], 0x1}, 0x0) 2m15.253404075s ago: executing program 35 (id=626): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000002000)='ns/mnt\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 2m15.251559125s ago: executing program 3 (id=763): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x54, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, 0x0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000140)) 2m14.2993708s ago: executing program 3 (id=771): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000004c0)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000540)=[@acquire]}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000006c0)='./binderfs/binder0\x00', 0x2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000880)={0x8, 0x0, &(0x7f00000008c0)=[@acquire]}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) 2m14.29905384s ago: executing program 3 (id=773): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000003c0)='./file0/file0/../file0\x00', &(0x7f0000000400)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x88000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x1001) mount$bind(&(0x7f0000000540)='.\x00', &(0x7f0000000580)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) 2m14.251370615s ago: executing program 3 (id=775): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000000000010ef17476000000000000109022400010000a00209040005020300840009210000400122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000680)={0x24, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000700), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000040)={0x3, 0xffffffff, 0x102d, 0x9c, 0xf58, 0x100002}) 2m14.00609702s ago: executing program 3 (id=788): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff}) io_setup(0x205, &(0x7f0000000cc0)=0x0) io_submit(r1, 0x1, &(0x7f0000000d00)=[&(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x1000, r0, 0x0}]) io_getevents(r1, 0x0, 0x0, 0x0, 0x0) 2m13.957323945s ago: executing program 36 (id=788): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff}) io_setup(0x205, &(0x7f0000000cc0)=0x0) io_submit(r1, 0x1, &(0x7f0000000d00)=[&(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x1000, r0, 0x0}]) io_getevents(r1, 0x0, 0x0, 0x0, 0x0) 1m40.383175102s ago: executing program 1 (id=1110): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x32) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000800)='map_files\x00') fchdir(r6) sendmmsg$unix(r5, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d4}}, {{&(0x7f00000008c0)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x2, 0x40000004) listen(r4, 0x24af85c0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000100)=0x1, 0x4) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f00000021c0)=@vmx={0x1, 0x0, 0x2080, {0x6000, 0x26000}, {"59b731ec0c631cb82e5ce7ced3a1c0c5e18cb32a32c665f8c9bdafed2b82cf04c48757a798200b03bd3330883d4eedcc80d210e877a00d2f93c9c0c140efc8beab6c8526ae3da71768a95843e994d30c8b96a1ae887bcd9c4833e861e192f8676fbbcdaf43ace5b5b6c1b7e9e7710f55ef6a9dc4525bab4664c6e3078601b4c5687c588c6b824def64187dbcc0ef89d04b361f0944a1a28240c2f102a7b2a19e981a3def426d6d4747a4978186dd23abe9380be57e2b5fe88039e6be01fccf2cf47e12eb13c27e374676407c8eb93311370d9fcff53c747bf1eadd58ec3a73658b5f30740b4e07cc0b901a8fc8d335f507549d8fcc7e0ff33ceba8df77e3d5d8623a7ede3f7a6327daa6b7335fd01c7da85eeab49b4fe849acc08e22106fc262ca9c7cf52d6afbd67ce7d156986d90bc0d5703b16f0bbf5305cec40869bd28da7fc06aad94e99aa5c7849d1b7345e865d645ae2452ed13f9b5d3ae819402a2f94e5499372abf7636cbf6d61d34badc8a6fd2d52136fec7f4b7f0654401e8a2b7260c7ca740fca9e34c1385b5b14290bd22fbef5f10238719e93d3c34156de82979fddff74db77c6db96058e62d19da49188ad978b7bf5e9c679f2f8c176fd74715bd7d306e163baea872fb66baab022da41121575cb75f5effb22e5aa7aa7835ed8a94e8035606939c8948d76f067b544c56ed12b42a2a489594c6240af191bf16f30306831318b268c1f86aea7b5818362123e71095aa2150cfc04753badf5abe59830e6366ce622fc2c78003fdec54d73735a8175f4debb83ff053c0da9dc039bc206130dfd74ff128b847603ddd03ec03f2a385028a4e54b0137a70aee2421d0731bb876ea542559d00000000000000007fcbfd90b73ff47be4019f04bea17dce796d4141018427e779a393efb4228936f5f3484e2b3cad0cd5c5a479013c29a7229d9cb73befc3418126c8e87a73c01bab67721a54c5a0a2c13a7825804905e5391c249c75145e1e8916fe26c5c6b2b381cf8b195ca0748c7a81676e706baafc9d8cd9a7c4767c6eee9d73ca54df35b3c089a6d846568e8bef8911a4136e8a463080217172ed2c164d012e9c7bf822d88232e3fb98eb4f80fa67baa74c96490c36a98fccf098904c4f0187cc17675d29794bd8e1c04c0c1bb4bb776377b407ab40f61f2c587cd2cfb827f5d0a515d64beddf40d2143b9a07302a36163f3d07000000000000000be3724a8d2b8ba007bbcc0b70b85102e3bfb2f1e6b7922002f6ad36f9673426c6d17c6f2fc1ccf81778e97901940652ecf0e261bbc934e3f3e489dde2f3f3c14b28480a8ddfd782d7cb758bafb1f1c371c215286ae1c8c85a52d626e8511fbc77bff6f455b0ef1cdb07701aeb902c05c3638bffa1ddecd22e5bc2cb35fda8b4f9412cc3f82c9266995baeb061c29001b2b0835c869d4351bf2c0178061392a6ae74b908635abd9e4802fdefdebed8121cb92ebdd975b238755347986e91a40be6b53aa569e84c5eb7a068ee08edcca3c6ebf4f979bcb9a1fb452dcf516b7e4994e38aba36cbafcea11a606a2067c1ed43f7d9aab9b5e79918ddcf01f8f23bd63404f2ab834e4c606151f3c8c8097934b553372d2ae7eae524161f33d9d2e713c964c3afdd3a8ec956aa0e0d84e41f74171a91570df0fa891976a9c95150862e0b3350203ebfb637d697698b673147a4d4c598f7edd0fc65f3e56af0ef67ca47264f66de28469ba0795ffab3f6c2b7964948b11c70b8147e66f67ab3c36722c722a310f771aab589bfe6a5c435553a8937f866eb5185d283d9796cd6f95e5efd269f1ccccbb43567e8eddf88ad60a3d765279a64f21cf79b33b754829f2765b945de60f50e053086681da916d49349fc447a1196cc644911b48967c3ce9cee55bccfd3a897c10cd5846d9b5f493a3915d19a81dc9354ee0490f9074634ae0a729a10b2fc90de8b562f6bac53cfe5966d98fb8294b9a10a800554bef9414f480e9d61f714991ff42e7e1f3a1255ee967596a12e39dd61f143d0418728b205d1d50656e99c658c20353b5e86367efc201a08b552b4cc265387471025237871039b809ec39c82f4e94d17e4cb22830f6ac0f55d49ce134e0d6c1d9619bc7feed7307fc24a4622c2a40461c7b244e8a75b0750ff8503eb32f5ddd2c973859cb72d05ffc2a817dd14f7959801e34d9ec2b8b1d44d886dec872cf55edc428f78c93baa4780122b91f7df5a263258326e7255c17c11135e9ec2ff72b22c15d5a93b2ca4aaf5dbd427ce17f995100f0507205b1b5634d5e73b3e70818e8dd0f61de7833b13c17940b4a570a7324dd27df86c245db9337e44a19cc44190d5d5959f2d9c37d5870370615c68f575fece7bb3e34a8e3c6db26393e3b4d7b9395606c1238fb0d501c295fbcaa4e91c7afb3d104b1eafa4084edcd73cc02427e7e2d583df5e720dd07d5c2e00dca6be743a0d0d5d951abab377968495bd4e10c6c106b14d6515cf02e12eed876527fe75f57fb709084eda49149acc50ced855820671fa1f7df271dc67b64b8f07ba76c9b7430e7c6ac058e3f39a1d6b79ea7b03f1d2b56809df013b2cb0b48728a554598f3852305f84f3f99c83e3a5764650a1e51c99913a77648c098508534bbe5858f14b2ae3c5649d10e12c5af951f07301e70963661d82ba7300a09c70a6596e6e157e57c0bfe863ad256b5cab40a35f87cf72a45e26693c1a298d49d1222d5e3aebaa28e82ae1b1e71dd0d4aa6e1c7fdcc29c17a139065d0f164a259fb838455599a041fb38614b57dd55eae9cf34e224c12feb1abeb9bf5704dfba6392ef90d43ab1ba1a4cf66d906536fd3881e1fb7d6e7b5c556c337bb1c811b578c43c6e4bd916f547c2fcb6fd3cbe8fdfca3668869ea88589de0fa5c4e57a27ec860937dcb8846e1b3a86a7c39133dd9e174eca9ced30b58517eb5e1c80758e07b990ce462674e22029ff3c4a093fffc1f3468de3150f272a61df473d3fbe4587aad70d02e5cec4f5988b77ea90f4b8fd311d88cbdd8d0257e8c4274527be40518eeaf1564f86cb1c17f2d042e1ec28c8660436b0fd8e47926a076876d8b7633c0667d5b8ba3ee4fa1fa27b5078c74f4844d559740f94e6558dd4d68cbc449feba4032d8ee1cabc73bc8f3b32f75189952047c5164cb688c4374c22c49792fa5b910181b4a1b99b0f7777ed3e9ba67b7fa423c4656ad9df5751227d7101c793652ef6e0c9f8215fa7e4a8a12e145bf469507e75c4529b3a85f898fd7893378933c8e7b064c3aef4a4388317f3a0bdb6e711aef119b13c63cc8d4757251fbf34ba45d5c304a9fa8e4a9fd19fd6b2040b4c55ca57904dd7c14835f9021d78f6c664e8f2bb8362cd182f793b285bd80b0f135fff591373dfee41e70a67dfa1db83bfb8a7e73f0f5f096d1841a81adf4529ba3b09eee32905efd4fb182dfcf39574516dba5dc5e950bfa7175e0004f9bc5dd9825609bbd553d01f72842f84d5801a9b079c2e4abf3977abba2ae5b7b9173ef1dc170514974530daf677033cd393c22fee8fb5db94a37648ac9af9482ff43d3bfff18951264618c279b39116cbe5779eac025db01093c20938020a9b42d5710182add3a36610c398ae41b8b77939fbada295d30f65949673e643f0dbcd7d215868aa0b7193aec8b25df8da1bd35a2049d7a1822bca6b56b0c2fbd8bc5b1df8b59c405332800650fb7e1a8368e7687ccf88c41531a7421e8445ecf63edc07d5909b5178592ce856f73e1eff0ed6fff8951d96dc1298e1fa28c78fcdf8137e7a9a0d8243d46fc4e42058775d28906d4ce24b0a5014580c2518d43762373bf2576897fb9e73d5107a20875e9c40c33e4407b19059ee89994969aaea6ec0788d7e4cb98f680bd7c1916070e1700d75f968ccdccd6e549a626148cdc6bae429fc5c2833243fb36adb35e14f1510d2ff933044a3d4a943900b403864f50409dd1b2ebc7405776d44f6e84fde0e8fc7e0e2c11505af3cb56d23838028e973b00802cf1cf467ab1fc5ed58cdbf0907886dc8d9b25ae95fad2b2fbe402a4b3776c14edac46d9b07ed05aac3a7d3406dd983ef8327ac7c0a4b53dfad34a31f4998c4dcd2cc4dfe8868cce1c7171d43648a75653b9e774bb53b08218c8e7a55129fcb8de709430faf8d4efcae886f1eb4edb84739bf70d087edcffe0f83f2f84e102c9bb9a2aca29a9eec1a545b12d655db2e0157405a537e0140ee40f35bafba744cd252a3070ba4cdce77da307312c9109bfc4d36f3a0cf776ae12faaa118fc50529fb3a4d6cab1985a89375d60fac2ad7a9d4ec9e291ea290329834c405019098e5d6db39aac907e97602ab3bd9479d98af8b63558a24f36a6bca2a37ac3c648de1ed39d2d0ac4d3fa9dfd79f72b264743ca31beabaa433fc23c350567b951377cab04d8a3e33b85f444f138f4bb61025b39ed86c7cb4c1780c7b4fbaadddcb0aff5f006d57f20705b17785c765cd7c2d2bf897463210deefc6255ae5a0e1e320896bea34883bd49ead0d4ea875571e5faebd6beaac63a7af9a5ac708448db100bb1fdd5ffc30308f320f98d9e75603578a96b4266c2d341e10b9f9947081431e20492f292d3adabe996e67f125abe90744468703ae31d3dafc9a0a2bf410bdc8f16965ab836753e3b4f028721fe418cbe9e82feaf27df09a47fa20b94c332fd9fd105e6c48104c03a7e490aabdc90dc48d3641e44f39b1a17e0c9d59d2b54f26708446fc4c0ad27f8381c1285ebd03c4147ebb06b9b5f5e355ce6ca40b10f4f439ff365e3eb5ead1bf81e851a788b51caadefa8ad4d27cb91347c562df8c53f1d8af5618c3e38910d6917920a39a4bc92700bf6b511358d93df97a046e90ce0c4a1dc7edc0d40d3db553014b761968cfbe149198da731e878a910fe35becb3334d4b0435ab1b33f25bc4c7fb1f1215fff8ed8aa51090f56e8a1559cade70d24124a76b840ef2ba023a822bcdcac938a971ea20a3e480fb6cc752560d424fa891d5b4dab7fea716c395d5210c1732ec324c8d5062b4024453d4bd2f57f6f0f6e2878412fa149c57d0301c3b01c5b6460fff7115f39438244af7a72a5ba6551dcaf9b766c2ae8c16a92f2103ce7663cf0eeb43e37109337180927e3be2b813c23dbf5ebc17a1c33b9e86db947c5025e89ec9169d5f6ce1461d79e445ed533811aae37618a553dcbbe2bbce739eaa6d15037d4bf4e03db75df4daf0c9256d18182da660e38017ae42f2b91598ecb6c3150abf66087291f4c020f115a97ce09991337ffb9edfdc82d252d6ae104ba96c0276d215b770fa6c93407d9b8f65d8da2d055f094ad2a717a6a6d60fdcbf984aae0e49bbfd8da4edd280378577ccafbdf9b2055c1ea8dfb91f986a05facb54609f575f41af772ba656a11e6ced6589c843974229dd5ca2e49176536d9716adfa5881793baa7f2758ba6d6c39322bdf61b826592e9a332e7ee6bda95f984ff78f6c521170bb150482570343294d07df343cb06850ff76e86d273670baf04bc6c0efac15ef49be95a26d8398a794e0bf800fe5bf1772e56fb8f4ee020a8f03a6610c9ed1356a57ef058e39ef59185653e9939597b43840eb1036e176ac2917d270dc3c9c51679d361d81a8b115c9940dbbb75f09e5c437287cd67fa2d96740f595b64c027a8663a2494be5aa9c00efd7fd5deb16383e7b64737d69d1f6bc32f0149344160e64abf5fff0d4a050043b506646f81c01a9be51a21b97d338c0fde6187da7c696f4f92bfe40aa3979f9400", "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"}}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40015}, 0x20000010) recvmsg(r1, &(0x7f0000000740)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000000700)=[{&(0x7f0000000280)=""/41, 0x29}, {&(0x7f0000000480)=""/208, 0xd0}, {&(0x7f0000000580)=""/202, 0xca}, {&(0x7f0000000680)=""/113, 0x71}], 0x4}, 0x80010040) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x8, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x6], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000380)) 1m40.382909132s ago: executing program 1 (id=1111): madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x12) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x4b301, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x1a) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000012000103000000000000000002000000000000000000000000000000000000000000000000000000000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000ffffffff00000000140001000710100002200000ffffffff"], 0x60}}, 0x0) 1m30.129343387s ago: executing program 1 (id=1118): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc020000000000000000000000000000ac1414aa0000001900000000000000000000000900000008000000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000000000000000000000000000000000000700000000000000fcffffffffffffff00000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000100000000000002000000200000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x29) connect$inet(r1, &(0x7f0000000740)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000780)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@remote, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xad, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r1, 0x0, 0x0) 1m30.128931587s ago: executing program 1 (id=1119): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x6, 0x4) (async) getsockopt$inet6_tcp_buf(r0, 0x6, 0x8, 0x0, &(0x7f0000000040)) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) r2 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000280)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000880)='./proc\x00', &(0x7f00000008c0)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./proc/sys/net/ipv4/tcp_ecn\x00', 0x1, 0x0) write(r7, &(0x7f0000000940)='3', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./tracing\x00', 0x1ff) (async) mount(0x0, &(0x7f00000009c0)='./tracing\x00', &(0x7f0000000a00)='tracefs\x00', 0x0, 0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) readv(r8, &(0x7f0000000a80)=[{0x0}, {&(0x7f0000000ac0)=""/105, 0x69}], 0x2) (async) syz_clone(0x200011, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x1, 0x68, 0x0, 0x0, 0x1000, 0xd, 0x0, 0x0, 0x120}}}, &(0x7f0000000480)=0x0) (async) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000500)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x42, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_add_dev(r12, 0x0, r2, r6, 0x0, &(0x7f0000000580)) (async) syz_ublk_setup_queues(r12, r9, 0x0, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000001, 0xb6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa803, 0x40, 0x0, 0x146, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa4b3, 0x2000, 0x3, 0xbfffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a37, 0x8, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) (async) r13 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) (async) r15 = syz_kvm_setup_syzos_vm$x86(r13, &(0x7f0000c00000/0x400000)=nil) r16 = syz_kvm_add_vcpu$x86(r15, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18, 0x8000000000000000}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest16=0x800, 0xfffffffffffffbfe, 0xe90d}}], 0x68}) ioctl$KVM_RUN(r16, 0xae80, 0x0) 1m30.128848687s ago: executing program 1 (id=1120): syz_open_procfs(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='proc\x00', 0x100c803, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='pagemap\x00') syz_usb_disconnect(0xffffffffffffffff) syz_fuse_handle_req(r1, &(0x7f0000000640)="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", 0x2000, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m30.128760037s ago: executing program 1 (id=1121): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000280), 0xfd4, 0x40c640) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r1, 0x40786e88, &(0x7f0000000180)={{&(0x7f0000000000)=[{0x10000, 0x10, 0x80000000, {0x521e, 0x6f}, 0x8, 0x3, 0x1ab0}], 0x1, 0x40, 0x4800, 0x5}, {&(0x7f0000000040)=[{0x9, 0x3}, {0x1, 0x8}], 0x2, 0x10, 0x0, 0xffffffff}, {&(0x7f0000000080)=[0x81, 0x2], 0x2, 0x8, 0x4, 0xd}, {&(0x7f00000000c0)=[{0xb, 0x1, 0x1, 0x80000000, 0x3}, {0x8, 0x68a08dc6, 0x2, 0x8}, {0x4, 0x2, 0x1, 0x8099, 0x7}], 0x3, 0x28, 0x81, 0x5}, {&(0x7f0000000140)=[0xdf, 0x4000000d, 0x6], 0x3, 0x8, 0x9, 0x7}}) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000200)=""/41, &(0x7f0000000240)=0x29) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000002c0)={0x3, 0x100, 0x2e000000, 0x7fff, 0xb, 0x2}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000300)={0x7, 'veth0_to_bond\x00', {0xffffffff}, 0x6}) 1m30.128668957s ago: executing program 37 (id=1121): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000280), 0xfd4, 0x40c640) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r1, 0x40786e88, &(0x7f0000000180)={{&(0x7f0000000000)=[{0x10000, 0x10, 0x80000000, {0x521e, 0x6f}, 0x8, 0x3, 0x1ab0}], 0x1, 0x40, 0x4800, 0x5}, {&(0x7f0000000040)=[{0x9, 0x3}, {0x1, 0x8}], 0x2, 0x10, 0x0, 0xffffffff}, {&(0x7f0000000080)=[0x81, 0x2], 0x2, 0x8, 0x4, 0xd}, {&(0x7f00000000c0)=[{0xb, 0x1, 0x1, 0x80000000, 0x3}, {0x8, 0x68a08dc6, 0x2, 0x8}, {0x4, 0x2, 0x1, 0x8099, 0x7}], 0x3, 0x28, 0x81, 0x5}, {&(0x7f0000000140)=[0xdf, 0x4000000d, 0x6], 0x3, 0x8, 0x9, 0x7}}) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000200)=""/41, &(0x7f0000000240)=0x29) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000002c0)={0x3, 0x100, 0x2e000000, 0x7fff, 0xb, 0x2}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000300)={0x7, 'veth0_to_bond\x00', {0xffffffff}, 0x6}) 1m19.79534608s ago: executing program 5 (id=1207): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x208202, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) (async, rerun: 64) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x0, 0x21) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async, rerun: 64) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (rerun: 64) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) fchdir(0xffffffffffffffff) (async, rerun: 32) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) lseek(r5, 0x1, 0x1) write$hidraw(r5, &(0x7f0000000340)="537997339264d6efb99a5f6688e19b4bb048db9175d0f99d8a1f260ae2d4834056ef5efa1d809cff4c6b49a87f8701251fc977f00fedbcdd46009cf6e21d61ac2388e6a867498621af5d5e616368bd8a1b43736dfc82584189c7808efd93c8112ecac0", 0x63) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r8 = open(&(0x7f00000002c0)='./file0\x00', 0x80ff, 0x1) (async) r9 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fcntl$setlease(r9, 0x400, 0x1) (async) fcntl$getflags(r8, 0x401) (async) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4b564d07, 0x0, 0x9}]}) (async, rerun: 64) getdents64(r5, 0x0, 0x22) (rerun: 64) r11 = fcntl$dupfd(r1, 0x0, r2) ioctl$TCFLSH(r11, 0x400455c8, 0x0) 1m19.779999832s ago: executing program 5 (id=1208): madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x12) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x1a) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000012000103000000000000000002000000000000000000000000000000000000000000000000000000000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000ffffffff00000000140001000710100002200000ffffffff"], 0x60}}, 0x0) 1m19.762362044s ago: executing program 5 (id=1209): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc020000000000000000000000000000ac1414aa0000000007000000000000000000000900000008000000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000000000000000000000000000000000000700000000000000fcffffffffffffff00000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000100000000000002000000200000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x29) connect$inet(r1, &(0x7f0000000740)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000780)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@remote, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xad, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r1, 0x0, 0x0) 1m19.70728889s ago: executing program 5 (id=1210): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x800000001, 0xf3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffff, 0x80, 0x40000000005, 0x3168f216, 0x5, 0x2, 0x5], 0x2000, 0x8144}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x89901) move_mount(r3, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_clone(0x2000000, &(0x7f0000000300)="49cd23320f1da00244772c76d4160dfaf496afb818476ae8ba1d94c3eeb8336ee26116e8c8160afba46317ae16f3d2575aad76bf3f241f2d34831f33ef3efa787a7b63ee31f3d4586f22f7a67697395a3e89007501c4151a2f657073cf777f593c99ac6ed743d604c205c8596d15d5b80012bc32a25b20c8057375852fcc9d5f", 0x80, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="489d20f8f487b37d54a8326e5e2a6047579ac012b98dbea46bb7fdc5aa2a7c2a1b9bb2faad4d07aa3306cae2ba2d8fb77c7f6b8d9fb5b2ea4d1e2d8cf5a17d6d99a5bad2b32a4cf0c551e1c6bf5441775b1d4168e96ad60e4a5ed8dce50acb9f2f6ac29ceefa3afbe52e31def48d091d06370607d3485104e64f2ed9c196132c5ea95f1f47fdff661c877c5b301839af29cbaa33b7b706208ba4f07fd5b492ac2512091cf61d6b7ba1aa354ed61eac1dfe3cf980fcb82dcc43b143cca34b5edd6ec3e31823b1afbca7cfda2a82d450c48cb2b52bccb5662988005d00474bc4dcf339f6aea109d9c70107d3004823121334527721134aa8e4d4600666f61e37ba95f1a02a1dfc383a23d2465f35173f3af1b3fe35eecdb0060fe654300dcf1c961c30a39674090e3fdc198b6f8a78479e02d49c70b3c5af46e18c87af9cc889d4bb1cd51127888e6e1b76df4147b482eaf68ff0a089b0e53103f4ec65c46b10a0a17adde31073eb4d5e45c296c265bc8ab4816348af77599cac90df76788d96358f885de33c024a94244aafed71eca04b58fb94b38c44034b3d07e39a0f77767eb57d573076bec60306d1b9f62b3ac56eefa9c496b510c8ea6e9d7ddf910837afea3e549b474fc9e508159e94888d0ffef3757ea7e9b221d0af2819a74db5e36e658ef62d5843897d3782f4f3b0ff630c47dcf3144365f892fa70ea341630ec281d2ff6da38c2619bb72cbbb4ddb65d5bd9c226244a51ec77349b4dc2c22349320f4a23212d9544483f6a24de3082d0e1ac36600907e8d985bf3656251bf84f8b740696a1390d32c51b9a8c996cce6be5f484224886acb85a0c7b97fa0dd499ca881787e5283c2d3ada35634a9024b3683a628d9671ce1856055b0b6cc13e8fd826667c1095b6228da2777299a4084413b5fb16fc98efed98b252d7a48eee5939f112cd48ddd935c99d1fcda3ee50efd19bf6e6409b4dcc1161dead9e01f6d9f5d8b145b391f00cae19a07b716d9a253de7f14627e49954b03536ee602b9cb96ea85294c5a4e9183e572c8349bf86640c3910c2aee45e6314212701caa842ac881e51f8e931afe09a3c30bfc152c24eea6417aff392668ea54dfbf85eff3b94cb1ebcda4ad5f90e94460ec5cf9612e8d5e5c475efd693becc489c6b6c29f45fc41aa2e50212e0afda8d92379e482d0b83ddeb27aaebe1f10626220183b7a38800d695ae4045bfe6db2d52dacd124c0f8b7d864d75b3d8423c202f657019adbbcf99ddf9019f7f0ef47090ca96e409dd91acc3d730d644fc041a29270e612edc002f8a0d3d85265d080e92941f5810d850c9e2b257f8c30a38be8985920ffff1904c79daf6b4869b2a5723756f04bd818e763bf9f42aeb8cb83ef816f3fe04cfb5c644d4822a2f2d78fbe424604ccbe811693d06200aa83556463bc693c135051a8a9140386cab626ae5db1d2d056db19b32e2e7aefafa9a4f37b91050c98a723828b8b3f7425c4c96baec8f81eb0e3987419d63c4fcf7cabdbd5fb6138579814e64dbf2cd325f11f64f3d901b6c8d00a6a00db729670b72aa4b77c74dcf355629b3d4c5606c4c7da933e1d6de3a14fe62c2fdb9f99131361b777b159df05b7f1ed5a0a87a0af72081a7450d96f2ea8e6705f9e600e97804ce2bc6b6e58e349451974364103d0809189ea6c393ddcc13d18452d293ea3d816a83a58ca2f3f1db616750c7da9325fde46e21d415b7c2682bf2d90f4bc5ccdda085629037ae9396a8f4f34c8fab4c782e30b192bbfb431785b0dc406d7118c7e0cbd388b24ea605d9243785e4f94072d27613dfb5e4b007a11170d2db8639bcc348927a1f23df63894c7895799e06a9b3efb32b7debefc7592a6ee09890960c81cda84cbb1ea57ce1dad56308ae153521ea40a9759aea86ba5e268ad72c9673321d5008395e18151ff899f7e9d848a6afda0a381a101d1fba4163c757c6faf1cba42c3fd61acee01d1e9d478ff2a0c67d2a3d4babb0d93064e34b907e0ec9c3691d12b1368b52afa909eafbf9e1995391606265ff139ab8723dbfed50f22f0f2f3aa02a7b3665ccea6633921853d119afbd5e729fee027c59e8b5c67ab3d6621d13d491eec372910108ebdbafcad3c14d314ff875408b25426bcc2422d3a750925857bff4e9d843470fbd19c593cf20d5725ff2e1c327f6cebbd68e7ea70379305cfca6eeb4d541541aeb678661216314e7be027edda46ddac5466cbf642bbfe7ab06a62a81bba48e9dfff10bc7be0f0866f109998706b7e61ee1f56eb0e36c7c5db0d46aaba004104b9f5ff7828e00580d3b7d0da70fb34801e047f2e37398dd69ea5b02a482564873f45b0ab41291acb834ae2be5535621ba82624386bc5d83dce150d02531279540d519c2dd1fbf12a7ae2e1dc48cf94fb6c113630553439e0928af343469c46b46031f599d6fd84211117e648f34c88fe71f2c244a89ec902ad2fb63fa6e2052fa902fd172d3570963206b84d951d997faefecc428cfa1ec14e73587aad5ddbd86cfdc612addc0ef391cea9cc1fda9c899e25103031539a47bff01e6d29f885e1f83b122a3a4e8e85131125db11c00342d2a372c533ec1e87678f5b012734d62cd11d5180cdd5aef983ec1a26d9940556ade6c62238e9fdadceea4573f8cdfdb1da3c5efae23b6e28f3c65b81bb24115811d7ae5303f5249eb885aa1ec0a9900c09759e6f98c268790946846f16bdc80b7548ceca0c0945f5504efccd0623531f71d8b1059bcde48c48556eabaaceb86bbcbad45595151dc63afe78c36d9abf1e8aeaaecabab031ea84142c052542405ce0e5be6548f3b7d6f50e899337051e72c2fae1fc4100617cd757eab3d2bd2049d8a0f3e9a353d751c1557f6d788fae381f6e8cd5d7b61024e79e6482262471a7d7320ce90390dfb8f639720028ee80ffb2cfaa5d41cc4f603ed9ff0e94ff87113e6fe64f806c2fbbce31fd5cf421d092009d90200158cf2386fed363b37b6b82ef234a9c05d6fb3465832ab7bb1e0501384a400324463123acecf687f355b9ab2ac226cf3285313de352b1a8e5c075c00e8a4dc0694533a07ee0637465ae45e472d57bd12b974d28e37bee90296fa797fa85f54aab0c9fa515e9d76d287485312ed8b3cf4c5383cf898f0028abebc37251ac22fd459aa5f18e1bd8e9cea22acd230a18e5f44896c080444e643a89c97f929180ff9e63bf3b11d7ccdec89920c698e7334db2294e3f81e45a3dc64c013d9b74dec5d5a48e4234a331b82d0d7b1a49559ee21a11a6a2bfeae1ab2e6cd8e1e9cccbd3e687c1e0d0ec72754cb1dd02e2751442ec1adefc9fe51995f0aa1f20143b770384f10261c2768f926a8d918f90dcd01d1a201a0da6ef6980c18f53c870a535f86804ca9cf31f5f3a924797a326588a7156be9de123cb5a20708947b1e63cec511db10a544f093dc368f9134863815f81ac77dcab2fd9e19aa93bcb2701d45639a6ca90d104fda2c8243ec6458ec0b83e24a8ba5e9f6b5dd03b16366f7d8dc3a5faba7c8785e510bb5ccd33e54a0fff36f27a396e77282aa9835ebe2432b179a1b86cb1a01714b35521f2953eb8615b9d08d4590f8a1ea4c2f21bb8929f59fccf1ba6a58694f09004fc8eb7cde86fda63eaf37ab940ad769f52dc2c0604e82059924bfc3ac6dbf006ed6eb9c9c7983214d79e5eb6ff5a7fb98a6b24affdd46155535d97b6447aa8ec5310e3f7c108152a576c52d3b741e3f81218c5b0ee2da2b7d32a5501ac0b619fa533372afa8d8e398937cdc0c6751f781913374a72c0b5cc4da62ecccb12d9ef1ff79a7611cc8c6ccd4d7cd8964c5621f5499b13d5f3a160da7bab539a034da50614beaa4a4c605c10a1fef6542fb55de639300e8fcec3dc7465cc574b95e35125f4c15121945cf62b2be86fea478e067bc28d426f97c0688c261ab84eea9c8047c94330f9be929538f585951bf5a4dcc4c99a9fc4bdac0699a8897ee9518bcd47875ce76b531939129f763f1595194be0cff1197a1b6d100e80f4f8d5199745418da94f001dce1492291c8c7f05402a80b6de5c6b4897c07886c9709ebc294842ab21cd972112238e919d299aaeb87f38644e7f7c9fddfacee5ae9776e90a01059d230f167d0fccd979cd04fc8db69ffc7e1510f7c65164c14b189ead48ea5c39e61629cf8713a1e72c92ceb1d4b8ca893f27bea188c0116dcfaf4f4f15eec0bf86d92be0b610bb80f479423303840f2469dd3f5f7034d860db3ee215a35a47a58ddc56670a401a9b1246f01295b663da7da6b79e1df56ab735703779180af6ff9f1af0c3cf197ce058c14a92207545bc12e045055fe8495fc9c68a92cecdd90b9b1f19507cebd0bf43f718da4721b6e37de6da652f0903e39f270c143640660924a54b1979425f9a47ff7c10ffc31aa3ffa1ec0079cf768143c92391226a721d25f596cdc6d5a0a4d196438f337f2b640b3dc11783f03dda3428221a2ab3b4fde02236ef4703c8ee49aeff44fd786cdd219327f736d6a218c5a493e0ec8493feb647dcb929db2903200217e92cf264c75e8613fe20ec76ff7ed2e7395ab10bdb6d36f8c6c6a3277dc0935691331df0d97547b749937df3e5e5f6155da49329426b84d7bcedb9ce102e9c0567252b736aecc85f271cd69dc0b9df1202fc74d66b64e3b8741a7ab2b8340e1673df39f0308aa2f0f4652ff3e89bbc6b5ddfd58b5a7acd2a8175abf8fb4ec01aba582ca4124b99aee8145960368bab42aecd9857bbb4df187ec225343fdc0f0143923ccc28966714e2d9d1ce85b4f03e56bd800ae3e720ab9a930f087c06e8e529460f2f3ba7c5ba4469dd7f493e407fa50af0c6a2c0e2a92420bd02cd40633db733669474fef9ac425c670259e3327408dc42b9ea8670a345b55b68cb254223992107155add12a32550fa53bfdc9090c40265451fe91c1d4510447b088ca86d95e1d9f97029eca39894b1721d2c581a3f9b34139e0c846e345950576db2eae2a304349fa7677c7c9e1e527b1938bd494e41815569810697d64abecdba538890f6bbb70e1583139541442be88257735d2c52aff98719a693a70520b0e851edef7ed1eef9e527aa1caac65e1cd42a30e5ce14afc221fea200b9383ee4728d7bcde8652162c5526c6d26643cec69b00378194e892c5b33873ae40c56b22756ff926edbf34c1dc42c25fb82ec6ed242918bb3e72f1aca5ac11637303a8cb330472ac6d6c1e444899b57d82d34a0a1e44c776407997fc92a4a131594abf14a495f5373cbe6e6b99c62712d053bdcbc9448d355f393144b4073d079faf19f3546202fc4432dd9404daa23a1354e2eaf20beb29849a6d7d9a250cbfa9c6dafbbbc1b9d17b808114531347ba50afb691d1246dbcf37a83355ff443596794755ab1b40a67640b648a3efa504b8c2b1be4c8d4ab1fba7c7826b5c7bea5be46ba9b925ae14803a53797eded0f03724f91696de773b94020b215569ff670a54846e3b703f980ae9880aaefa4dc91d8fc5ffae519f7eba5d3b8cd7b91ae077a126e51067c68757534ec9b70e247ba003f03f4dd3b24d6234574db6dafebdaba78bd7bda26d4bd3d09b315663f9a93a809071085e82f5e85f3e7d9913920a2a0d51647ca0f58019a0c3c206304f2cece75331a64a77b600f3d6caddda37fd143c1db7e3a58962295522decc00fab84a476a3add85c5d53ac509d09a32f6de546e381b6f026e65f60eee1bc6d34e931851aeb782ee3024796a71f297c5d47a30f073c69e6f45e00cd64cf30068926") r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', r4, &(0x7f00000002c0)='./file0\x00', 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000040)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001440)='./proc\x00', &(0x7f0000001480)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./proc/mtrr\x00', 0x20002, 0x0) ioctl(r5, 0x400c4d04, &(0x7f0000001500)) openat$kvm(0xffffffffffffff9c, &(0x7f0000001500), 0x0, 0x0) r6 = accept$inet6(r3, 0x0, &(0x7f0000001540)) ioctl$sock_inet_SIOCGIFPFLAGS(r6, 0x8935, &(0x7f0000001580)={'macvtap0\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m19.675581062s ago: executing program 5 (id=1211): syz_usb_connect$cdc_ncm(0x6, 0x73, &(0x7f0000000040)=ANY=[], 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe00000090582"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1m19.435339426s ago: executing program 5 (id=1213): syz_usb_connect$cdc_ncm(0x6, 0x73, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902610002010484080000000001020d000005240600010524020006000606"], 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe00000090582"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 1m19.435232126s ago: executing program 38 (id=1213): syz_usb_connect$cdc_ncm(0x6, 0x73, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902610002010484080000000001020d000005240600010524020006000606"], 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe00000090582"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 20.791339171s ago: executing program 9 (id=1662): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000010c0)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000001100)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sigaltstack(&(0x7f0000001180)={0x0, 0x0, 0xfffffffffffffed8}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f00000011c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000001200)) timer_settime(0x0, 0x1, &(0x7f0000001240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f0000000080)={{r3}, "52a1edc740e90233ac8441c1a73dffaf5554fb3201f1ad70767330e9e3ed65e2123a908861b5b4ec9a7ff3125796069490ba9c0f0db430223c92de1e6be2d79aa56c79203ad0f8bb0f27cd1e79201ec7eddeafc142161311009d53b052466cd62948d06f22a0bef8734e6e9370b76d8dfc301fa09d70b88a9a246713148f4c3ee9b7511298c64559202c792d0e06b8302c1a60e3aa45d400ccfafaed8feb7c637ceab07a26cfd4cc9b855f32c8ac9f598170c7bf72239954601c0854cc88f6077b9d9e7d634fd6479d5d9d4d8e43bd1156f3a966606a079bc1bf1149c0e48e76fb40597e63efbf4f309f4c373d2fc3cbd41935e58581b16473fa9438e66a4258073f5ab99de9068fd6101a9dad193857b3a59bdffcd8a55272f1a180eda516684bf3ae3cf99bb151a3215d206ac6d078df7b4a36280b50dd9555f3d5e849cdf58e960f917f1a0beb56f516966534ba38f463e3814ebbb255df9a70467f88227900b137d405153a379f278cd1498ad63dbe0c1de5af7d98393af9c37886231c9cac43eb9f810d2ededa92269f5cbea75efd2dca3eca10c5701d487ce35ff091f47a347f5c173b332a17b5af4edc0c251553c33a36d8ab9408eb47983b2a639ac3ef09828186c53a56112738b5519b79f06ea3b156f8e5d3a26ccd8f596533cd7d7936483a6e945512e546a7589732efabd17d3a57e54b957950ce575695700036c649a090d40bf3c8e60b91f29e1bcfacdeedeb4df3ca7341a852d51dbd02ef011720bfcfce46495c9cd641590d51a74ca59f468ec0c8e32fe4524ff4a59dc2782813631f6cbaa70a9ab2ad6870068ee51395b492b3a600a9c688697d3989a40ddae12a246a50ef5eda205c17837e3777cdfbe438c6b386b1abcf116fbeaf6de8784e947e9a646a32b82e0b1a0f8db8ad564953f954b2306a70b8b0918233584dca774e040fc2cbd598eb66f5037eb77ed32af6c2722b4d33c86b65029448e34e5d24325cd697a407575adb08f297f096f40eaa1ff23f4fd57b793a4c459dda62a7c0b64a1d3d3ef4cee5fa9e601e64fa98da1af2804395220de034374413966c9682f86027b91830ffaf001f0235c981a68d0913b46d6054e5ef605e7a95224a497c6b4f9dca11109f459f63617a1345f4c187203ad6e20a1cae20023e9cc8a28cfe1da97d7f1813ce308a8c24696896915df9e9a11e1f1b052eea94d2b25f95256e4e527cb936d6bae125179772e158b276c126fd10a361507ca04abd9ae7826b7b38ddd3770429d308f07b368f284d64c284bd8aeb410087ac04f464dd82474366dad3135f9d8760874e16c63c6c4db0aef99cc0c118aa700932e67e25f7b7300afefbd8ad63ec5b543daf8c6a86a15a7b09e2d96ed0df011ad3612c0f349dd9e0ae2c2d201d2968a119970aecfcd89071ff805ae2ae5c3c4bc8598ff212de2f1836312eb36eadd7bc2e11436928ea2fd0b8d00cbbc1047898ea2b829cf9b98b280f8fd8efc3727b1da4b2faf38591eefad36434716c7edd2e9f05972ef88d7b3dfbf6b48fe8c851c406b7352d489a20c75602f513f968e2258720fd24a02ee032eecdf494e60527962189afa25f3d8310bb421ceffbdf298ffee2198673f87972458f6c476d403891d5ae9c64e78c22b10af8a6b7a6e97c22fd9618f8075060c8e2f17731f6dcb2351574fbf2c296dcf8f88e7914096310c90588a06a49472fdad363edaf20f2cbcc21b565b59dc4b31443c4af5e5f0fbc6cc4fc5efa53feefeff9a44644a0890d0c35e2efe5bd8ae62dd902de5d8b8ee219339bca6339c74fde760e4326b84747a341cbd84671e60825daa95d7ce737193cbec35a26b7860e612c8f68b0c3195e54a0ddc37333edc7354802cf28c53febb56aea50d4562d51a444f1a273653b63d8cdff23fb289067952f7b3949b2f6a886fb4acbcb9ade1c18277dbc0d44f817e2458955c7a646bce945a33a55e8ccf488f59b1fd2eda9baee60590c2e009a24c8f25f5d2dcb68ba00927f664f5189ee5894144b6407748b405b8877becb741a06af21ff818f99ae5ab1830f974cfb0a9dc9e8275a88e7042a4a7547b0ebc34535e19cfb81c3fcbdf000d0749011706e6c17de504c380940ebf2163cb4883318ace8fa8b8647b8c174ad839088442835110199bf712c01f1c100ed627be5eb15312ff9d837b0e976497b36d05bd128517989bff1cffea1f10721b357c068428c56eb4b2ee0c81201184306fd388fc43332b6cdecf7110dce76617522ed522de0044c75d74cace79f50249fd451cfa2862c315cf136d957a89ec75d2fa8f789b2d7973fb4f3b5c9aed5e833397e11bc90020ec7264e80316fcc791e93fec764e9993aef8fa463dba48e5294ca79acdec9c4ce898e55ba47a5b5f6470f4f17a34ef510c94193fe273be143509b7127ad99a126ac469fb06fcb9d28a517f69c73922c26788a86970bf8c06d6764439014524318fa226f7a3c6e02806d18e1d14902441ab34338d85abb4be398cee29d0455154201f293d7a880a36525b48664f75d4a86fc8c820708f9ea4f7a016bdff5b51bbacf64227edfc449ad68e6f04e9cf5722fee748e94b2b534ccd012b7d024af51524a4582dfb702fbbc894b9ec19dd16814a5b2aa82f73aa8783fd3ae7b354613a017d91013fcc5155f67c58c981745c8f809a3621de27d834824d916e010c6709af1666b7ac32adb6450e4fc97701131dfd13b593c4867b7ce4847583db21954838ac3e5d2b47fe97ff40830b410b697c3f185b6e522ddd5313090c145bf294940db94db711b3f625fff5ee06a3f8fde2b7b74ece66d59104062fa00c290fc87c7464a772f52f95919799564deb4dd45a37628eed8343c0082e6bc696bc0a2965866184aac639b16d35b579956b70a04374283822c8503312675bc01826f942732ad56146a0c33445f972aec2e242b97b7b651271e3cd0c41a21f9f761bc090c51803aac97d49da74b08849beae8d1974bded08d3ba02baf7e4d128fc7f7afd202d417dfab73b83a95dbbbb89a9166760d784f89fa8a45414c2fc397b5ea91cf87e9d9a2040fea9e369fe542586c66b2bcc9d22e7e7cdc6ee2628974c0caa2c7ffccc84c660abec82df13599861eb666ca5ad76fcd7105a4885346d7d33b3ce7f3b5285f0e8ec1a53360d8884bf796c188f5cf4aa51ff02896987e709cfb419ea651caf41e5639d32fd361c264ac29367657ebae53d3e04cede4f34142a779abcf31cbe3367eea33479135d30db9b5b35f9af91772e745de676fcd7f46f05831b17de233f1f7222bd73e6b5875149bbba0bd33ee1f63cca1abc4daba0181674391da25cb638c3e50323203ca41630123c094b81307521f81401aeb229f3ffd14993e72a736bb4491d533d47686254235ce8e571ee7a45e08b497469aad50ac2046719ace69bed4f2a933201134aa5cc0bdfb786d54ba43b76f4956b56707bdb9fc024cb1e5807799f82d004b119133b76cb2764b44a0b2370800a0b1cfcd31567ea36beb6c9287640c4edfdeef180334f1971845418c1109ca0c77b998126831b2ee60490ed0fb55797b9415e1ae2c216fe2ab063d850e081b762c9f747e01adc13a3dbd62d2bc5f41f515a751f93f3c9d54e7b10613531c63d8537a933703f68ef4766a32b24aa4dec64f37bed6cf83ac256ac8a04b08638ed23f2ee9719c6201eb35634019bce61a4028b86fdec60ababac9fdffa08dc036ef9c6f8ae3fa5a8ad8df6477a269f3dd98b341d9aa4435561cc09e2d39ed6a06913556e51a4c74e325a2c22b1be8bd9fdf8475bfd8e764d69899b90a3983ee14a22a81ce3db7ae41f8a81041f1618fc0f4e4419d399f0998cd8f87521130f6e60abcc843c163358c839121befcda4812c4b83a4335433fcfce2c6675b1d4d493cfe595c980e88a1dca391c542c2b48a8af4fcf25ffc425fa841cdec6ea3eddb703ef54e083752ced382f1111fb4e3bf95110b2bd2be5cb0899aa0a2e677745b287cde8e38ee032f1c5b3f63fc7b9867d3c619e7229f88beb5e3e1b8a23dbe13c5c36ec32ff7475d5761a881fda1e3737ef94a4da13a813b9ec9988372065aaca0d826b60e889953b859dff7bead3d5526cc2aa28409659f483f0524cbc81d162aa17fa3132dbf6b2384fb2965064c5a871eaab6b80d6ed321613c225f7bc9481799a85f6271c793ffc63fc46498ab621176c6be5cf617742f90cb0636173a2a9ab1684819b4d38470a75c64396a2052aba8042ed85f632c3e3a279c61d048fdf595e668bf0568ab06a9c962549a47d07b3e1193f2641a58696388ed698e39a92ff65b7d7e3b9c1274636025f3d83360ab84f00e6143be1de638373b2c432573b9903df7fef82646e7484169db6cb83939266bd00e6c2d2ca0a0bf58251d08393f4f5f9b0db5aaa7a4ca84ceb8578555cd072179a5f20e458807d570e2de23aad638f0822dbc0694df7a9fb5bf480a7a0e0b5d4649f2527ea2337a313ce0637aea5e656e12c37254d6bee220497615f98b2e1d5d101b6881c1d01f0fe9eb3f297e79fd31d08e3d7d8677a54dbe2ded7d5aa320963bd32d63308fa639dd40ac0a5be86f74fdf2aeb50225e8353cd54503a5dedef2ec6d0a35508a8a2ff3101a8975f11655d3afad95766a5cd95afdaa46e63ce1e3f72542d224a23a7d0a938b81f3235af57f7d4829e2fa679803828a48e764003f076ec518eb7cd89148f346a40c68092c14949c765708542708d0c451bf4d44615c32e51329adafac7718b5f5279272f3de871e09c04266021ad9a7933e2c31bf87400552f962b6e3729632f584b25539b0f8b0e1d87928f535c69db8cbe164c3408a6c902f801d863d239322e6dc8986245d217ed9d1a766acc5583730f43597fdab723838c867846e0799dbcce9e13d546768bff37a620cb1dd6eae22c8b7ae7c51c9dc371f0b174418ca9e5581693f2ed536e5cd108764d71a95c2c6869af37e5381e6e4174ab40d49eb7fa52571f220abc83dca4ba3ff264f6a91a810b7de633272cf06b28cbc551435c1e08e9c5455ceb942a864669f05a5f5ad08c9d1a7fb86f177caae009dbf3dbd14fa5fac29f3daf345b047d111fb6955e25c0096e17b87c0dab07e94b5f751cec9f7a5b5f376b4edfbccf31ff446cee9213349367557e8ef876d592fdf905482c78989a9afeb236279b66998babbb606de7a84c0b67d7f16a72a1fa445385b3a5758f9d963bb66c143d870e9e8f2f56cdc4942bc97f25189c21f9939dc83b50e8776809f434da85316f2bd972febe35d56e2ee63973f62bcf0b7c8eb44ead57844e7135ae56a72f69946d6d4ba6f4e82c899b2c7b3318143d9193751c4553a8580213be4adb6f0b86895c647943a1333669dc272920d892d9a1de95b9dda6568e91ba552886ca0b00936bbf04ada429190650124c8277331f9c24e9e43dfa1b04195784ecf9a9a3c039db2e33d63044152f3c95298870e1043c04a67d42205f2cbe362667a91192d47351d57ffa3a198b506d989ad18c997029df7601a87c240ec448e4ea5e2a012d281d4e123621aad7a2b99c8a11eb03c4de69efad1be025a034683a0e55b19f57daf7e36ad160cbce9a49d6b2596a089faf1781d60f1a8fa947ecc468b1f105b5a04859b54a62b483cb3b840269342fb4c89b9a109c61ee8e2193828149fe0448569d0ce111b889e34265bd69b7fd7132629546d11ee027169a51338fc1052f01dbac0adfe99ad71b68456d3d2593928e1310d5aa59bc3eef0508f0fd6f97"}) prctl$PR_SET_NAME(0xf, &(0x7f0000001140)='new_name\x00') prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) syz_clone(0x40001000, 0x0, 0x0, 0x0, 0x0, 0x0) 20.670271833s ago: executing program 9 (id=1663): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000400)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000004c0)={0xa3, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000600)=ANY=[@ANYBLOB="a00b060000003fb50a7e0583"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000700)=ANY=[@ANYBLOB="00f770600100fa2c628c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19.723231337s ago: executing program 9 (id=1677): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000440)='smb3\x00', 0x1000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='./dev/sda1\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='ext4\x00', 0x8410, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000001c0)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, 0x0) r2 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0xa, 0x7, @mcast2, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000000c0)="671723d7c6012c", 0x7}, {&(0x7f0000000100)="9e91d91a92dc7c8fa2c24fbe79d9284d0c668de5d6c228230000565f0000000000", 0x21}], 0x2}, 0x20008b88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x438001, 0x10) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000600)='u', 0x1}], 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfc, 0x94, 0x7fff0000}]}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='name', &(0x7f0000000240)='ccnA\xf6gro_p\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r5, 0x0, 0x0, 0x0, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x801, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r6, 0x3304) close_range(r4, 0xffffffffffffffff, 0x0) 19.722967728s ago: executing program 9 (id=1678): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f00000a0000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./trace\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/set_event\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='!*:', 0x3) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/binder0\x00', 0x802, 0x0) r4 = syz_clone(0x2000, &(0x7f0000000400)="13ecd3b6ce316bdf2f409922151f4b5461c2ca3466d8718df7282cbb5912a61f0c72b58ee425589ddc1c0495d55e852e96b8d19ed2e4e6d89755644b50baaaf3fddce0fa157be6a7bc1c66da48f03fac1967dddc31c4c5e365201d8adb495e0754fe690e774e37a462ed652c089c067d7a679adcff38428e0188b4f0eafd9ea9422523a214df538104d23244a63f5cb3bce2720f913982c2d90e9cdf10a7f6ca6d41b35036ca67620b59c922de32f59fd688c0394bdb7e706e61dd796048255c6c0925fca2cc7a8dd395f0", 0xcb, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="6b62229f70fe793c916f7212f3936560d8483141949a72b279ef1ab055516f93c912e46dc9dd63a645d12126d3074528f4bb888f1c1c9e44d3fe9a94a0b06e710722dc3381a9d446b57911f68c5cd4203698dbb7ead2ab0c") ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000000600)={r4, 0x1, 0x8}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x0, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x0, 0x2, 0x2}, @flat=@weak_binder={0x77622a85, 0x1001, 0x2, 0x2}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}}]}) 19.716758828s ago: executing program 9 (id=1679): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe, 0xfffffff9}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500080002000000", 0x24) 19.615318918s ago: executing program 9 (id=1680): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4801000010000100feffffff00010000fc0000000000000000000000000000000a010100000000000000000009000000000107144e230005000000803a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 19.567213863s ago: executing program 39 (id=1680): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4801000010000100feffffff00010000fc0000000000000000000000000000000a010100000000000000000009000000000107144e230005000000803a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 18.044518075s ago: executing program 8 (id=1696): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000400)={0x0, [{0x1, 0x10, 0x0, &(0x7f0000000100)="4f94"}, {0x2, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x5, 0x0, 0xb0, 0x0}, {0x3, 0x0, 0x772f206f, 0x0}, {0x0, 0x0, 0xa, 0x0}, {0x0, 0x0, 0x80000000, 0x0}, {0x2, 0x0, 0xe9a, 0x0}, {0x2, 0x0, 0xfffffff4, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x6, 0x0, 0x7fffffff, 0x0}, {0x257a66601b02eb98, 0x0, 0xc, 0x0}, {0x3, 0x0, 0x80000001, 0x0}, {0x1, 0x0, 0x0, 0x0}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x1ff, 0x3, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=0x64010102, 0x13, 0x10}}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x18, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18.002185419s ago: executing program 8 (id=1697): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x1, 0x30) getpgid(0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c000}, 0x45) r2 = syz_clone(0x20000000, 0x0, 0xf, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0xffffffffffffff28}) openat$tun(0xffffffffffffff9c, 0x0, 0x161842, 0x0) 17.943349915s ago: executing program 8 (id=1698): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xc, @remote, 0x9}, 0x1c) sendmmsg$unix(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc699a27860badff9}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="f702", 0x2}], 0x1, 0x0, 0x0, 0x40001}}], 0x2, 0x2000c080) sendmsg(r0, &(0x7f0000000140)={0x0, 0x33, &(0x7f0000000180)=[{&(0x7f00000001c0)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000780)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000007c0)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000001cc0)=[{0xfffffffffffffffa, 0x5a, 0x1}], 0x1, 0x0, 0x0, 0x2, 0x0, 0x2}) 17.851124775s ago: executing program 8 (id=1704): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000006, 0x14032, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$incfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x80, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f0000000300)='.pending_reads\x00', 0x22000, 0x1b4) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, 0x0) r2 = syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r3, 0xf517, 0x0) r4 = fsopen(&(0x7f0000000180)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000280)='uid', &(0x7f0000000000)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\x00\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) 17.850892215s ago: executing program 8 (id=1705): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000400)={0x0, [{0x1, 0x10, 0x0, &(0x7f0000000100)="4f94"}, {0x2, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x5, 0x0, 0xb0, 0x0}, {0x3, 0x0, 0x772f206f, 0x0}, {0x0, 0x0, 0xa, 0x0}, {0x0, 0x0, 0x80000000, 0x0}, {0x2, 0x0, 0xe9a, 0x0}, {0x2, 0x0, 0xfffffff4, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x6, 0x0, 0x7fffffff, 0x0}, {0x257a66601b02eb98, 0x0, 0xc, 0x0}, {0x3, 0x0, 0x80000001, 0x0}, {0x1, 0x0, 0x0, 0x0}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x1ff, 0x3, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=0x64010102, 0x13, 0x10}}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x18, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 17.677751162s ago: executing program 8 (id=1706): r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000680)={0x14, 0x0, &(0x7f00000006c0)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000740)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x60, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2}}}}}]}}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003b7000000b703"]}, 0x0) syz_usb_control_io$uac3(r1, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f00000002c0)={0x14, &(0x7f0000000180)={0x20, 0x9, 0xbb, {0xbb, 0x21, "2fa531f9ea1d5e42230919f1c5bd1272891384541f064e561f57280fa12b0b1d46c0c610499f18b1d92944801144335a83c8f8c10cf115a8898ca624e772bf09d563b25b0de48abfd004f7c1d8418623333e649288b6d0749f61a37b2d37be21cf9907a196389dee9d2ecdc2b6709326d6b9a057bdef9e8c1f743f280a8e7f59f46ecfa0aa0a05922b19b6fd859e7b285b92e465d9961079450d11d25640223586693bb1f7583ac7eb3511b606a44a07a8c354e7b13c7c87a1"}}, &(0x7f0000000580)={0x0, 0x3, 0xe, @string={0xe, 0x3, "455d3a16162d2976354f03bd"}}}, &(0x7f0000000500)={0x44, &(0x7f0000000300)={0x40, 0x1, 0x1d, "441a572a411442508edd50055e74b1286b505199b2ece356276beda2f6"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x44}, &(0x7f00000003c0)={0x20, 0x81, 0x3, "34147c"}, &(0x7f0000000400)={0x20, 0x82, 0x2, 'F\f'}, &(0x7f0000000440)={0x20, 0x83, 0x2, "e8f0"}, &(0x7f0000000480)={0x20, 0x84, 0x0, "f4ab"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "c806e1"}}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000780)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x40, 0x5, 0x2, "2bd8"}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, &(0x7f0000000ac0)={0x0, 0x6, 0x7, "ad715147d169ba"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x19, 0x2, '6|'}, &(0x7f0000000e80)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000ec0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000f00)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000f40)={0x40, 0x21, 0x1, 0x8}}) 17.654309864s ago: executing program 40 (id=1706): r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000680)={0x14, 0x0, &(0x7f00000006c0)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000740)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x60, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2}}}}}]}}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003b7000000b703"]}, 0x0) syz_usb_control_io$uac3(r1, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f00000002c0)={0x14, &(0x7f0000000180)={0x20, 0x9, 0xbb, {0xbb, 0x21, "2fa531f9ea1d5e42230919f1c5bd1272891384541f064e561f57280fa12b0b1d46c0c610499f18b1d92944801144335a83c8f8c10cf115a8898ca624e772bf09d563b25b0de48abfd004f7c1d8418623333e649288b6d0749f61a37b2d37be21cf9907a196389dee9d2ecdc2b6709326d6b9a057bdef9e8c1f743f280a8e7f59f46ecfa0aa0a05922b19b6fd859e7b285b92e465d9961079450d11d25640223586693bb1f7583ac7eb3511b606a44a07a8c354e7b13c7c87a1"}}, &(0x7f0000000580)={0x0, 0x3, 0xe, @string={0xe, 0x3, "455d3a16162d2976354f03bd"}}}, &(0x7f0000000500)={0x44, &(0x7f0000000300)={0x40, 0x1, 0x1d, "441a572a411442508edd50055e74b1286b505199b2ece356276beda2f6"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x44}, &(0x7f00000003c0)={0x20, 0x81, 0x3, "34147c"}, &(0x7f0000000400)={0x20, 0x82, 0x2, 'F\f'}, &(0x7f0000000440)={0x20, 0x83, 0x2, "e8f0"}, &(0x7f0000000480)={0x20, 0x84, 0x0, "f4ab"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "c806e1"}}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000780)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x40, 0x5, 0x2, "2bd8"}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, &(0x7f0000000ac0)={0x0, 0x6, 0x7, "ad715147d169ba"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x19, 0x2, '6|'}, &(0x7f0000000e80)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000ec0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000f00)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000f40)={0x40, 0x21, 0x1, 0x8}}) 5.212772538s ago: executing program 4 (id=1789): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000280)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) capset(0x0, &(0x7f0000000300)={0x86, 0x3, 0x10, 0x1, 0x2, 0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x1, 0x0) write$binfmt_format(r4, &(0x7f0000000140)='-1\x00', 0x3) write$binfmt_format(r4, &(0x7f0000000180)='1\x00', 0x2) 5.067231473s ago: executing program 4 (id=1790): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00001b6000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000020, 0x0, 0x9}]}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0xf0, 0x1e, 0x401, 0x70bd27, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@loopback, 0x4d2, 0x32}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {0x8000}, 0x1, 0x0, 0xa}}, 0xf0}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) r4 = socket$netlink(0x10, 0x3, 0xf) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r5, 0x0) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f00000000c0)=0xef88) r6 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_TDX_FINALIZE_VM(r7, 0xc008aeba, 0x0) r8 = syz_io_uring_complete(0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000004a00010000000000000000000a0080"], 0x30}}, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r4) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x84, r10, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1ff}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x24048084) 5.060618693s ago: executing program 4 (id=1793): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x52, 0x1, 0x70bd05, 0x4, {0x2}, [@typed={0x8, 0x2, 0x0, 0x0, @uid}]}, 0x1c}}, 0x800) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4205, r1, 0x200, 0x0) r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, &(0x7f0000000300)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000340)={0x20, 0x5, 0x22, "630bb66485a6df05b501c9170a46612921579a99768ac73459f84a349056954f4a3c"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000400)={0xc0, 0x5, 0x5, "629013eff5"}, 0x0}) syz_usb_control_io$uac2(r2, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000b40)=ANY=[@ANYBLOB="401804000000e5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.582054251s ago: executing program 2 (id=1802): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000000)=0x90c3ff, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x172, 0x4) sendmmsg$inet6(r2, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x5, @mcast2}, 0x1c, 0x0}}], 0x1, 0x20000000) recvmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x137) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x207) capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000280)={0x200003, 0x200003, 0x801, 0x80000001, 0x7}) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)={[{@redirect_dir_nofollow}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000500)=0xc) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x8008, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d, r4}}], [], 0x6b}}) 3.504972989s ago: executing program 2 (id=1803): write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x2000a, 0xd, 0x10001}}, 0x30) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./debug\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/bluetooth/rfcomm\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/100, 0x64) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r1, 0x5393, &(0x7f0000000100)=0x3) 3.49570437s ago: executing program 2 (id=1804): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fgetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000040)=""/67, 0x43) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000000c0)={'pim6reg0\x00', {0x2, 0x0, @multicast1}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x8000, 0x10, 0x5025, 0x8, {{0x26, 0x4, 0x3, 0x3f, 0x98, 0x66, 0x0, 0x40, 0x4, 0x0, @multicast2, @multicast1, {[@rr={0x7, 0x13, 0x18, [@multicast1, @local, @rand_addr=0x64010101, @multicast2]}, @timestamp_addr={0x44, 0x44, 0xc0, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x5}, {@empty, 0x6}, {@multicast2, 0x6}, {@broadcast, 0x3}, {@dev={0xac, 0x14, 0x14, 0x42}}, {@multicast1, 0x6}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x4}]}, @timestamp={0x44, 0x18, 0xe5, 0x0, 0x7, [0x1, 0xf, 0x2, 0x6, 0x8001]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x6c, [@loopback, @multicast1, @local]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x4, 0xdd, 0x3, 0x9, 0x1, @empty, @mcast1, 0x7800, 0x40, 0x8, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @remote, @multicast2}, &(0x7f00000004c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x4, 0x10, 0x34, 0x10000, 0x32, @private1, @local, 0x8, 0x46694b11989478bf, 0x14ca, 0xfffffffb}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000c00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000600)={0x5b4, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x100, 0x0, 0x3b, 0xfffffffb}, {0x0, 0x3, 0x0, 0x5}, {0x4, 0x6, 0x2, 0x102}, {0x800, 0x7, 0xcb, 0x1}, {0xdc76, 0x3, 0xc, 0x1}, {0x6, 0x4, 0x4, 0x800}, {0x5, 0x80, 0x73, 0x1}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x1dc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x642}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r12}}}]}}]}, 0x5b4}, 0x1, 0x0, 0x0, 0x4000000}, 0x48054) r13 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r13, &(0x7f0000001040)={&(0x7f0000000c40)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000cc0)=""/102, 0x66}, {&(0x7f0000000d40)=""/95, 0x5f}, {&(0x7f0000000dc0)}, {&(0x7f0000000e00)=""/109, 0x6d}, {&(0x7f0000000e80)=""/250, 0xfa}], 0x5, &(0x7f0000001000)}, 0x10000) r14 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000001080)='/proc/self/make-it-fail\x00', 0x1, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r14, 0x80286722, &(0x7f0000001180)={&(0x7f00000010c0)=""/171, 0xab, 0xff, 0x9}) r15 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000011c0)={0x2c, 0x6, r5, 0x36, r15}, 0x10) r16 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000001200)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r16, 0x89f2, &(0x7f00000012c0)={'ip6tnl0\x00', &(0x7f0000001240)={'syztnl0\x00', r17, 0x29, 0x7, 0x7, 0x25e5, 0x1, @private0, @mcast2, 0x8, 0x10, 0xfff, 0x8}}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f0000001300)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r15, 0x8982, &(0x7f0000001340)={0x3, 'pim6reg1\x00', {0x101}, 0xfff}) getsockopt$inet6_mreq(r16, 0x29, 0x1b, &(0x7f0000001380)={@loopback}, &(0x7f00000013c0)=0x14) sendmsg(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001400)="61d9030939de146b7d4efcfefc2c7a149ace0c34f4c6ae2e580dd08b237ad9808274a3a29bde5fdc45b5ced5f218082cddb17ee9764163dd9ea043161299", 0x3e}], 0x1, &(0x7f0000001480)=[{0x88, 0x107, 0x8, "09d30bf867d3d0c5cd3c1f7678c6a36c120117ff2c1da85e636f44094daed33dbf80cc5f1644be31cc9071a50d2dcdb97f9987362dbfc2040f5c1d7651ab83290fcca8396bcfd48e4e92d601c2082d6680658eac7566bd503b75c9ad8fb1467983d13ab94302ab1a7eccbaaa031e73e6c61572d19f"}, {0xf0, 0x111, 0x9, "239df44406eec8a7ac35ae5e2bb2964d09a64b1b918142b87a38dd02611067c4e3cfa3d8eebed84f6b470035f241ae1131fa222274d01adeb5e7bf4deed4e263c194bd7fc5984181d3303a9f1b9dfc52958fa3e86cece4dee74639b2a30228383c0a1a0e9d0b85525dd7ab81fd018add5d3d09959532520d1373699ca2bd8022abf81489008ac783d5b940305dbdfdb59c666884ad1a715e4b4cd40ea9460a39019285e9c57658ec1cf653876c832a774a0dd805728d5cc5db9b508a76a225a58692b6e8c0d8228b63f667307439eae4411c2fcbc9a560ac2aef5ba4884f5496"}, {0x30, 0x116, 0x1, "1f61ec8b1f398706ca4c50f28f406dc4107400e567cfbe8358f0aa60"}, {0x100, 0x0, 0xd, "e9f5a279631f3647ef84dfe195010f1d8de5babdf6af400f61a2576b02c5ccce9d96fae193a448e84a708eb6cf8c283ed50cb27aefdc4efa1adc4a6aeff6346be3480d418c1f449d8ac367db664a773680d115ed9d1954f4af4141a7bfd7bdabec86791334a335e767bf020a2d9e1cc8bf3c86d570b3e6177da27bb629fe70a8f610b67a9f6251e2ed34f60bec55c36df18bff869af3d2eeef70ed092350eecf687702cea3359d9adfc9c8cf60c9188e23eb9e9f06264ffccc088569ba49a26458b5833292979436015f98480ab0b17e3ca6448f49cdbe2b075bd0a5f8b2f9f480652b4cab4ba997e97f78"}, {0xd0, 0x102, 0x3, "074b47a2c0a86bdf1aa0cf4155e3806942d649848c627d6d52c2ebb7aaa6c99f9cd69cf9459fe53d84e63a746c04703312491ae559161c449989489a1854796b5e5a1c10d53fd5168ca8ab49c9917de76a6bbcb1034b139329afe936d5e83955f2fbb575fd296ff1c352125257a5175131f71151a96ca2a66083db4452639feb361d5901b01b5f983eeb340ca1b3269aa6656b765d19ea922d27bba9f8fc72928b8109d2f35d81e467555d77e46482390ca1927216415f5b09dd0583872000"}], 0x378}, 0x24000080) 3.052824614s ago: executing program 0 (id=1805): syz_usb_connect$cdc_ncm(0x6, 0x73, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902610002010484080000000001020d000005240600010524020006000606"], 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe00000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.607328889s ago: executing program 2 (id=1806): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$DM_DEV_ARM_POLL(r0, 0xc138fd10, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x800, 0x0, 0x0, @by_uuid={0x0, '\x00', {'LVM-syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x168, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@error={0x0, 0x80, 0x0, 0x30}]}) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000740)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) socket$packet(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48241, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000440)={0x0, &(0x7f0000000480)=[@wr_drn={0x68, 0x20, {0x4, 0x40000000002000}}], 0x20}) getpid() setns(0xffffffffffffffff, 0x24020000) r1 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000dc0)='.\x00', 0x9900, &(0x7f0000000e00)={0x4, 0xf7, 0x80000}, 0x20) 2.573335152s ago: executing program 2 (id=1807): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000400)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000600)=ANY=[@ANYBLOB="a00b060000003fb50a7e0583"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000700)=ANY=[@ANYBLOB="00f770600100fa2c628c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.044910425s ago: executing program 4 (id=1808): mkdirat(0xffffffffffffff9c, &(0x7f0000001c40)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000001c80)='./trace\x00', &(0x7f0000001cc0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001d00)='trace/events/sched/sched_switch/filter\x00', 0x101041, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000001d00)='trace/events/sched/sched_switch/filter\x00', 0x101041, 0x0) write(r0, &(0x7f0000001d40)='prev_state.function ==x', 0x17) (async) write(r0, &(0x7f0000001d40)='prev_state.function ==x', 0x17) write$P9_RVERSION(r0, &(0x7f0000001d80)=ANY=[@ANYBLOB='0'], 0x15) clock_adjtime(0x0, &(0x7f0000001b40)={0x0, 0x4, 0x9, 0x4, 0xffffffffffffffff, 0x3, 0x8, 0x9, 0x200, 0x1ffffffff, 0x3, 0x3, 0x8000, 0x58cc, 0x4, 0x1, 0x4, 0x0, 0xa, 0x2, 0x8, 0x268, 0x1, 0x4, 0x280, 0x2}) (async) clock_adjtime(0x0, &(0x7f0000001b40)={0x0, 0x4, 0x9, 0x4, 0xffffffffffffffff, 0x3, 0x8, 0x9, 0x200, 0x1ffffffff, 0x3, 0x3, 0x8000, 0x58cc, 0x4, 0x1, 0x4, 0x0, 0xa, 0x2, 0x8, 0x268, 0x1, 0x4, 0x280, 0x2}) r1 = socket(0x8000000010, 0x3, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x65}, @void, @val={0xc, 0x99, {0x8, 0x3e}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x26000800) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000019c0)='./proc\x00', &(0x7f0000001f00)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001a00)='./proc/thread-self/fail-nth\x00', 0x202, 0x40) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./proc/thread-self/fail-nth\x00', 0x202, 0x40) r3 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x20) fsetxattr$system_posix_acl(r3, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000001000000000000000800060000000000100007000000000020"], 0x24, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000001e00), r2) write(r2, &(0x7f0000001a40)='27', 0x2) (async) write(r2, &(0x7f0000001a40)='27', 0x2) socket$vsock_stream(0x28, 0x1, 0x0) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000001980)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000001f40)=0x33, 0x8) listen(r4, 0x0) (async) listen(r4, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000001f80)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendto(r6, &(0x7f0000000000)="f2fe8836269ab4cbdf0dfe9c133563b923e27c4679a38406af4966041a80e884267e07236acd134dbfa337b779a82a", 0x2f, 0x0, 0x0, 0x0) (async) sendto(r6, &(0x7f0000000000)="f2fe8836269ab4cbdf0dfe9c133563b923e27c4679a38406af4966041a80e884267e07236acd134dbfa337b779a82a", 0x2f, 0x0, 0x0, 0x0) recvfrom(r5, &(0x7f0000002000)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) (async) sendmsg$nl_xfrm(r7, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000001a80)='./binderfs\x00', &(0x7f0000001ac0), 0x80, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) 1.643198465s ago: executing program 4 (id=1809): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES16=r3, @ANYRES8, @ANYRESHEX, @ANYRES16, @ANYRESDEC=r1, @ANYRESOCT=r1], 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x420eedf5a7100e44) (async) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES16=r3, @ANYRES8, @ANYRESHEX, @ANYRES16, @ANYRESDEC=r1, @ANYRESOCT=r1], 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x420eedf5a7100e44) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x807fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0xa, 0xc], 0x25000, 0x304}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x807fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0xa, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x1cb142, 0x84) io_setup(0x20fe, &(0x7f0000000500)) (async) io_setup(0x20fe, &(0x7f0000000500)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f0000000580)={0x0, 0x0, 0xe4, 0x7, 0xfffc, r5, 0x0, 0x0, 0x600}]) (async) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f0000000580)={0x0, 0x0, 0xe4, 0x7, 0xfffc, r5, 0x0, 0x0, 0x600}]) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r8, 0x0, 0x2e, &(0x7f0000000680)="17000000020001000003d68c5ee17688a2003308020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da40000000000000000005b09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007b71174aa951f3c63e5c83f1baa6e000"/184, 0xb8) dup(r7) (async) r9 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) sendmsg$key(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="020e08000400df2502000b000200000016910000000000006421903c18d3e8ce179747a31cc0b972e0129ae041aa82c82c43da6eb791122c9afe1dbc1040ff0fe9f4f956cb78d4bd092e52c238901355600000000000000000"], 0x20}}, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000740)={'broute\x00', 0x0, 0x0, 0x0, [0xffffffff, 0x3, 0x4759, 0x1ff, 0x5, 0x3]}, &(0x7f00000007c0)=0x78) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(0xffffffffffffffff, 0x8010aebb, &(0x7f0000000480)={0xffff1000, 0x7000}) (async) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(0xffffffffffffffff, 0x8010aebb, &(0x7f0000000480)={0xffff1000, 0x7000}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000340)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f0000000380)=@attr_riscv64=@attr_ctrl={0x0, 0x1, 0x1, &(0x7f00000005c0)=0x3}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) r13 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) (async) ioctl$KVM_RUN(r13, 0xae80, 0x0) 1.442007895s ago: executing program 0 (id=1810): madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x12) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x4b301, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x1a) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="60000000120001030000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000ffffffff00000000140001000710100002200000ffffffff"], 0x60}}, 0x0) 1.373224022s ago: executing program 0 (id=1814): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4801000010000100feffffff00010000fc0000000000000000000000000000000a0101000000000000000000f0ff0000000107144e230005000000803a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1.346653725s ago: executing program 0 (id=1816): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000100)='devpts\x00', 0xd834c4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@index_on}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@index_on}]}) 1.271315542s ago: executing program 0 (id=1818): syz_usb_connect$cdc_ncm(0x6, 0x73, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902610002010484080000000001020d000005240600010524020006000606"], 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe00000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 696.87814ms ago: executing program 4 (id=1820): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x1ff, 0x3, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=0x64010102, 0x13, 0x10}}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x18, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 610.182059ms ago: executing program 2 (id=1822): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x10) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) recvmmsg(r0, &(0x7f0000003100)=[{{&(0x7f00000000c0)=@x25, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000840)=""/78, 0x4e}, {&(0x7f00000008c0)=""/153, 0x99}, {&(0x7f0000000980)=""/137, 0x89}, {&(0x7f0000000a40)=""/30, 0x1e}, {&(0x7f0000000a80)=""/75, 0x4b}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/128, 0x80}], 0x7, &(0x7f0000000c40)=""/209, 0xd1}, 0x6}, {{&(0x7f0000000d40)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000003040)=[{&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/93, 0x5d}, {&(0x7f0000002e40)=""/29, 0x1d}, {&(0x7f0000002e80)=""/188, 0xbc}, {&(0x7f0000002f40)=""/200, 0xc8}], 0x6, &(0x7f00000030c0)=""/6, 0x6}, 0x2}], 0x2, 0x1, 0x0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\fE\x00\x00\x00'], &(0x7f0000000380)={0xa1, 0x1, 0x400, "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"}, 0x0}) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0xfffffffffffffea4}}}, 0x0) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0xb41, 0x5, 0x1, 0xbf}) 507.227689ms ago: executing program 7 (id=1823): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000001900010000000000fddbdf2500000000000000000000000000000000ff02000000000000000000000000000100000000000000000a00008000bf0000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=r0], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f00000004c0), 0x2000, &(0x7f00000024c0)={&(0x7f0000002580)={0x11, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110079, 0x1000, 0x0, 0x7fc, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002600)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000002640)='./bus\x00', &(0x7f0000002680), 0x8, &(0x7f00000026c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x0, {{@in=@local, @in6=@mcast2, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@broadcast, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000000e3ffff030000000000000010000000000000002000000000000000"], 0x24, 0x0) write(r1, &(0x7f0000000180)="a4dfeea14d7ad0b0d3261ce9a0d8111f5f2a1db055b9907257acf08527046dbf45b76a424b20", 0x26) 506.934219ms ago: executing program 7 (id=1824): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x110, r0, 0x0) r1 = socket(0x11, 0x80803, 0x0) setsockopt(r1, 0x107, 0xf, &(0x7f0000000140)="00008634", 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000180)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x41f4, &(0x7f00000001c0)={0x0, 0xf46f, 0x4000, 0x3, 0x3c3}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000300)={0x0, 0xfffffffe, 0x800, 0xfffffffe, 0x2f6}, &(0x7f0000000380)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x40, 0x3, 0x30f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6c, 0x0, 0x40000003, 0xd5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1, 0x1, 0x19f}}], 0x1, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000000)) 445.290985ms ago: executing program 7 (id=1825): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$DM_DEV_ARM_POLL(r0, 0xc138fd10, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x800, 0x0, 0x0, @by_uuid={0x0, '\x00', {'LVM-syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x168, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@error={0x0, 0x80, 0x0, 0x30}]}) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000740)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) socket$packet(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48241, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000440)={0x0, &(0x7f0000000480)=[@wr_drn={0x68, 0x20, {0x4, 0x40000000002000}}], 0x20}) getpid() setns(0xffffffffffffffff, 0x24020000) r1 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000dc0)='.\x00', 0x9900, &(0x7f0000000e00)={0x4, 0xf7, 0x80000}, 0x20) 431.560917ms ago: executing program 7 (id=1826): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4801000010000100feffffff00010000fc0000000000000000000000000000000a010100000000000000000000000001000107144e230005000000803a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 359.290284ms ago: executing program 7 (id=1827): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x3d5) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/nf_conntrack/parameters/hashsize\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)="49a06706", 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000b00)=[@text16={0x10, 0x0}], 0x1, 0x14, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000b40)=[@text64={0x40, &(0x7f0000000b80)="67400f00d9440f381c730866baf80cb838b97a83ef66bafc0c66b8000066ef430f005f000f01f865400f01c5c7442400bdc70000c7442402f7670000c7442406000000000f011c24c744240004000000c744240200580000ff1c2466baf80cb8ec337087ef66bafc0c66edb9260b00000f32", 0x72}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000c00)=@x86={0x60, 0x4, 0x9, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x7, '\x00', 0x0, 0x1}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000c40)={0x2, 0x0, @ioapic={0x8000000, 0xe, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x6}, {0x0, 0x5, 0xd4, '\x00', 0xf9}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0xd4, '\x00', 0xdf}, {0x71, 0xd7, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x12, 0x26}, {0xcf, 0x3, 0x0, '\x00', 0x6}, {0xb, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0xff, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x8}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x44}]}}) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000080)=0x2) 358.811444ms ago: executing program 7 (id=1828): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d6c672", 0x3}], 0x1}, 0x49cf75490397e6ce) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2080, 0x0) close_range(r2, r2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8905, &(0x7f0000000140)={'ip6_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}) syz_usb_connect(0x0, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a"], 0x0) 0s ago: executing program 0 (id=1829): setns(0xc9, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x400800, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000400)="16b425b31275de72ec319b0a2d3f7b2ce573c01c980b7f335afbd6e97de8f98d0506bf95cee4bdeac5ad0e4c4e55737f7a21d2cd118f29f04a4811cbd4daacba43d925bc1a1313774405c5aa948034e8c2d928f672fced7687a0f18ddb242f5bcfe2d5df8ebf545b5313d7e20dee3279e3e7a3df6b4a73e4d8743a5ab8b3aa88a3b99dffbd493103d4a06d128f788207de79c5b713e9b17b89c3a23cfbcbd68e52578212a900310484b86953f88d12f8891b4860152c951d19") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000280)=[{{&(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="1f", 0x1}], 0x1}}], 0x2, 0x2400c0a2) r2 = socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)={0x1040, 0x20, 0x1, 0x70bd25, 0x0, {0x2}, [@typed={0x1015, 0x27, 0x0, 0x0, @binary="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"}, @typed={0x14, 0x123, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x1040}, 0x1, 0x0, 0x0, 0x40940}, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x20080, 0xcc, 0x12}, 0x18) openat(r3, &(0x7f0000000140)='./file0\x00', 0x1, 0x2) writev(r1, &(0x7f00000009c0)=[{&(0x7f0000000a00)="b0", 0x306}], 0x1) setns(0xc9, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x400800, 0x0) (async) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000400)="16b425b31275de72ec319b0a2d3f7b2ce573c01c980b7f335afbd6e97de8f98d0506bf95cee4bdeac5ad0e4c4e55737f7a21d2cd118f29f04a4811cbd4daacba43d925bc1a1313774405c5aa948034e8c2d928f672fced7687a0f18ddb242f5bcfe2d5df8ebf545b5313d7e20dee3279e3e7a3df6b4a73e4d8743a5ab8b3aa88a3b99dffbd493103d4a06d128f788207de79c5b713e9b17b89c3a23cfbcbd68e52578212a900310484b86953f88d12f8891b4860152c951d19") (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4) (async) sendmmsg$inet(r1, &(0x7f0000000280)=[{{&(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="1f", 0x1}], 0x1}}], 0x2, 0x2400c0a2) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo\x00') (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)={0x1040, 0x20, 0x1, 0x70bd25, 0x0, {0x2}, [@typed={0x1015, 0x27, 0x0, 0x0, @binary="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"}, @typed={0x14, 0x123, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x1040}, 0x1, 0x0, 0x0, 0x40940}, 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x20080, 0xcc, 0x12}, 0x18) (async) openat(r3, &(0x7f0000000140)='./file0\x00', 0x1, 0x2) (async) writev(r1, &(0x7f00000009c0)=[{&(0x7f0000000a00)="b0", 0x306}], 0x1) (async) kernel console output (not intermixed with test programs): B disconnect, device number 32 [ 183.965307][ T4377] netlink: 'syz.2.1267': attribute type 27 has an invalid length. [ 183.976779][ T4377] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 184.046604][ T535] usb 10-1: device descriptor read/8, error -71 [ 184.155739][ T535] usb usb10-port1: unable to enumerate USB device [ 184.235658][ T352] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 184.385655][ T352] usb 3-1: Using ep0 maxpacket: 8 [ 184.391827][ T352] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 184.400104][ T352] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 184.408775][ T352] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 184.417854][ T352] usb 3-1: config 250 has no interface number 0 [ 184.424172][ T352] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 184.435785][ T352] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 184.446268][ T352] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 184.456569][ T352] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 184.470096][ T352] usb 3-1: config 250 interface 228 has no altsetting 0 [ 184.478145][ T352] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 184.487951][ T352] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 184.496252][ T352] usb 3-1: Product: syz [ 184.499501][ T4354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.500457][ T352] usb 3-1: SerialNumber: syz [ 184.509420][ T4354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.515123][ T352] hub 3-1:250.228: bad descriptor, ignoring hub [ 184.522325][ T4354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.529187][ T352] hub 3-1:250.228: probe with driver hub failed with error -5 [ 184.539386][ T4389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.552082][ T4354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.553238][ T4389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.690670][ T4392] fuse: Unknown parameter 'fowner' [ 184.703391][ T4392] x_tables: unsorted underflow at hook 1 [ 184.709854][ T36] audit: type=1400 audit(2000000085.970:14393): avc: denied { create } for pid=4391 comm="syz.9.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 184.755677][ T535] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 184.845745][ T384] usb 3-1: USB disconnect, device number 6 [ 184.868260][ T36] audit: type=1400 audit(2000000086.130:14394): avc: denied { write } for pid=4395 comm="syz.9.1273" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 184.916883][ T535] usb 8-1: unable to get BOS descriptor or descriptor too short [ 184.925370][ T535] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.935761][ T535] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 184.944736][ T535] usb 8-1: config 1 interface 1 has no altsetting 0 [ 184.953357][ T535] usb 8-1: string descriptor 0 read error: -22 [ 184.959609][ T535] usb 8-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 184.968695][ T535] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.981722][ T535] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 184.984180][ T3764] udevd[3764]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 185.273961][ T4408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1277'. [ 185.493111][ T4431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.502594][ T4431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.735651][ T384] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 185.846320][ T535] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 185.858971][ T31] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 185.869536][ T31] usb 9-1: USB disconnect, device number 35 [ 185.905663][ T384] usb 3-1: Using ep0 maxpacket: 32 [ 185.912276][ T384] usb 3-1: unable to get BOS descriptor or descriptor too short [ 185.920636][ T384] usb 3-1: config 1 has an invalid interface number: 52 but max is 2 [ 185.928822][ T384] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.938967][ T384] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.947917][ T384] usb 3-1: config 1 has no interface number 0 [ 185.954051][ T384] usb 3-1: config 1 interface 52 altsetting 34 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 185.967188][ T384] usb 3-1: config 1 interface 52 has no altsetting 0 [ 185.975735][ T384] usb 3-1: string descriptor 0 read error: -22 [ 185.981970][ T384] usb 3-1: New USB device found, idVendor=0421, idProduct=048e, bcdDevice=8b.ad [ 185.991034][ T384] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.995657][ T535] usb 10-1: Using ep0 maxpacket: 16 [ 186.002038][ T384] rndis_host 3-1:1.52: More than one union descriptor, skipping ... [ 186.006911][ T535] usb 10-1: unable to get BOS descriptor or descriptor too short [ 186.012267][ T384] usb 3-1: bad CDC descriptors [ 186.022192][ T535] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 186.024854][ T384] cdc_acm 3-1:1.52: More than one union descriptor, skipping ... [ 186.037893][ T535] usb 10-1: string descriptor 0 read error: -22 [ 186.049573][ T535] usb 10-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 186.058893][ T535] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.070527][ T535] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 186.185654][ T31] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 186.202729][ T384] usb 3-1: USB disconnect, device number 7 [ 186.268995][ T535] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 186.276053][ T535] usb 10-1: unit 2 not found! [ 186.282313][ T535] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 186.284670][ T3746] udevd[3746]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 186.293763][ T535] usb 10-1: USB disconnect, device number 14 [ 186.335645][ T31] usb 9-1: Using ep0 maxpacket: 8 [ 186.341775][ T31] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 186.350038][ T31] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 186.358550][ T31] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 186.367606][ T31] usb 9-1: config 250 has no interface number 0 [ 186.374287][ T31] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 186.385878][ T31] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 186.396324][ T31] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 186.406818][ T31] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 186.420304][ T31] usb 9-1: config 250 interface 228 has no altsetting 0 [ 186.428388][ T31] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 186.437456][ T31] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 186.445828][ T31] usb 9-1: Product: syz [ 186.449984][ T31] usb 9-1: SerialNumber: syz [ 186.456615][ T31] hub 9-1:250.228: bad descriptor, ignoring hub [ 186.462869][ T31] hub 9-1:250.228: probe with driver hub failed with error -5 [ 186.765770][ T31] usb 9-1: USB disconnect, device number 36 [ 186.985706][ T384] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 187.035668][ T10] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 187.147932][ T384] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 187.157149][ T384] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.165130][ T384] usb 3-1: Product: syz [ 187.169585][ T384] usb 3-1: Manufacturer: syz [ 187.174189][ T384] usb 3-1: SerialNumber: syz [ 187.185658][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 187.195522][ T10] usb 10-1: config 0 has an invalid interface number: 20 but max is 0 [ 187.204732][ T10] usb 10-1: config 0 has no interface number 0 [ 187.211153][ T10] usb 10-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 187.221286][ T10] usb 10-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 187.231209][ T10] usb 10-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 187.242467][ T10] usb 10-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 187.251635][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.259720][ T10] usb 10-1: Product: syz [ 187.263989][ T10] usb 10-1: Manufacturer: syz [ 187.268679][ T10] usb 10-1: SerialNumber: syz [ 187.275458][ T10] usb 10-1: config 0 descriptor?? [ 187.281686][ T4446] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 187.506139][ T31] usb 8-1: USB disconnect, device number 33 [ 187.514846][ T36] audit: type=1400 audit(2000000088.770:14395): avc: denied { execute } for pid=4455 comm="syz.7.1292" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 187.545790][ T4458] X.509: Couldn't decode AuthKeyIdentifier [ 187.556744][ T10] usb-storage 10-1:0.20: USB Mass Storage device detected [ 187.566721][ T10] usb-storage 10-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 187.577129][ T10] scsi host1: usb-storage 10-1:0.20 [ 187.584488][ T10] usb 10-1: USB disconnect, device number 15 [ 187.764025][ T4468] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1294'. [ 187.773020][ T4468] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1294'. [ 187.819106][ T36] audit: type=1400 audit(2000000089.080:14396): avc: denied { mounton } for pid=4470 comm="syz.7.1295" path="/96/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 187.819130][ T4471] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 187.860677][ T36] audit: type=1400 audit(2000000089.120:14397): avc: denied { create } for pid=4474 comm="syz.7.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 187.860979][ T4475] bridge0: entered promiscuous mode [ 187.885429][ T4475] bridge0: entered allmulticast mode [ 188.217731][ T36] audit: type=1400 audit(2000000089.480:14398): avc: denied { setattr } for pid=4490 comm="syz.8.1302" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 188.455734][ T31] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 188.625703][ T31] usb 10-1: Using ep0 maxpacket: 16 [ 188.632067][ T31] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 188.642347][ T31] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 188.651524][ T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.659641][ T31] usb 10-1: Product: syz [ 188.663886][ T31] usb 10-1: Manufacturer: syz [ 188.668704][ T31] usb 10-1: SerialNumber: syz [ 188.673981][ T31] usb 10-1: config 0 descriptor?? [ 188.679996][ T31] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 188.687810][ T31] usb 10-1: Detected FT232R [ 188.880142][ T31] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 189.015653][ T535] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 189.065668][ T310] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 189.145511][ T4503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.154101][ T4503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.162507][ T31] ftdi_sio 10-1:0.0: GPIO initialisation failed: -32 [ 189.169856][ T31] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 189.178688][ T535] usb 8-1: unable to get BOS descriptor or descriptor too short [ 189.187703][ T535] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.197909][ T535] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 189.206936][ T535] usb 8-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 189.217857][ T535] usb 8-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 189.231001][ T310] usb 9-1: Using ep0 maxpacket: 8 [ 189.236044][ T535] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 189.248944][ T535] usb 8-1: config 1 interface 1 has no altsetting 0 [ 189.256517][ T310] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 189.264871][ T310] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 189.273336][ T310] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 189.282432][ T310] usb 9-1: config 250 has no interface number 0 [ 189.288809][ T310] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 189.300577][ T310] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 189.311119][ T310] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 189.321409][ T310] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 189.334944][ T535] usb 8-1: string descriptor 0 read error: -22 [ 189.341140][ T310] usb 9-1: config 250 interface 228 has no altsetting 0 [ 189.348135][ T535] usb 8-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 189.357230][ T535] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.366049][ T310] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 189.375081][ T310] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 189.383522][ T310] usb 9-1: Product: syz [ 189.387723][ T310] usb 9-1: SerialNumber: syz [ 189.394504][ T535] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 189.398617][ T3746] udevd[3746]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 189.408299][ T310] hub 9-1:250.228: bad descriptor, ignoring hub [ 189.425526][ T310] hub 9-1:250.228: probe with driver hub failed with error -5 [ 189.715731][ T10] usb 9-1: USB disconnect, device number 37 [ 189.765640][ T10] usb 3-1: USB disconnect, device number 8 [ 190.125269][ T36] audit: type=1400 audit(2000000091.380:14399): avc: denied { relabelfrom } for pid=4512 comm="syz.8.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 190.145298][ T36] audit: type=1400 audit(2000000091.380:14400): avc: denied { relabelto } for pid=4512 comm="syz.8.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 190.236890][ T36] audit: type=1400 audit(2000000091.500:14401): avc: denied { connect } for pid=4514 comm="syz.8.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 190.269329][ T36] audit: type=1400 audit(2000000091.530:14402): avc: denied { lock } for pid=4517 comm="syz.8.1311" path="socket:[38066]" dev="sockfs" ino=38066 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 190.795707][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 190.967546][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 190.976631][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.989857][ T10] usb 3-1: string descriptor 0 read error: -22 [ 190.996381][ T10] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 191.005773][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.246615][ T352] usb 10-1: USB disconnect, device number 16 [ 191.266041][ T352] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 191.288935][ T352] ftdi_sio 10-1:0.0: device disconnected [ 191.640060][ T10] usb 3-1: 1:1: cannot get freq at ep 0x1 [ 191.651861][ T4536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.655655][ T45] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 191.661525][ T4536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.695664][ T352] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 191.786156][ T384] usb 8-1: USB disconnect, device number 34 [ 191.805663][ T45] usb 9-1: device descriptor read/64, error -71 [ 191.845803][ T352] usb 10-1: Using ep0 maxpacket: 8 [ 191.852108][ T352] usb 10-1: config index 0 descriptor too short (expected 5924, got 36) [ 191.860537][ T352] usb 10-1: config 250 has an invalid interface number: 228 but max is -1 [ 191.869157][ T352] usb 10-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 191.878346][ T352] usb 10-1: config 250 has no interface number 0 [ 191.884716][ T352] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 191.896435][ T352] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 191.907096][ T352] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 191.917505][ T352] usb 10-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 191.931126][ T352] usb 10-1: config 250 interface 228 has no altsetting 0 [ 191.939223][ T352] usb 10-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 191.951334][ T352] usb 10-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 191.959751][ T352] usb 10-1: Product: syz [ 191.964025][ T352] usb 10-1: SerialNumber: syz [ 191.970246][ T352] hub 10-1:250.228: bad descriptor, ignoring hub [ 191.976632][ T352] hub 10-1:250.228: probe with driver hub failed with error -5 [ 192.055687][ T45] usb 9-1: device descriptor read/64, error -71 [ 192.275756][ T352] usb 10-1: USB disconnect, device number 17 [ 192.295683][ T45] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 192.425706][ T45] usb 9-1: device descriptor read/64, error -71 [ 192.665680][ T45] usb 9-1: device descriptor read/64, error -71 [ 192.776120][ T45] usb usb9-port1: attempt power cycle [ 192.925669][ T352] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 193.075674][ T352] usb 10-1: device descriptor read/64, error -71 [ 193.115659][ T45] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 193.146652][ T45] usb 9-1: device descriptor read/8, error -71 [ 193.276663][ T45] usb 9-1: device descriptor read/8, error -71 [ 193.325656][ T352] usb 10-1: device descriptor read/64, error -71 [ 193.545802][ T45] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 193.565738][ T352] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 193.574542][ T45] usb 9-1: device descriptor read/8, error -71 [ 193.658508][ T384] usb 3-1: USB disconnect, device number 9 [ 193.705996][ T352] usb 10-1: device descriptor read/64, error -71 [ 193.707439][ T45] usb 9-1: device descriptor read/8, error -71 [ 193.825938][ T45] usb usb9-port1: unable to enumerate USB device [ 193.912146][ T36] audit: type=1400 audit(2000000095.170:14403): avc: denied { unmount } for pid=4201 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 193.965709][ T352] usb 10-1: device descriptor read/64, error -71 [ 194.075948][ T352] usb usb10-port1: attempt power cycle [ 194.165709][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 194.316944][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 194.325393][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.335559][ T10] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 194.344528][ T10] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 194.355438][ T10] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 194.368664][ T10] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 194.381697][ T10] usb 3-1: config 1 interface 1 has no altsetting 0 [ 194.390207][ T10] usb 3-1: string descriptor 0 read error: -22 [ 194.396435][ T10] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 194.405458][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.418598][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 194.427125][ T3746] udevd[3746]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 194.435660][ T352] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 194.466666][ T352] usb 10-1: device descriptor read/8, error -71 [ 194.596675][ T352] usb 10-1: device descriptor read/8, error -71 [ 194.825668][ T310] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 194.845670][ T352] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 194.866638][ T352] usb 10-1: device descriptor read/8, error -71 [ 194.985646][ T310] usb 9-1: Using ep0 maxpacket: 8 [ 194.991805][ T310] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 195.000627][ T310] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 195.003345][ T352] usb 10-1: device descriptor read/8, error -71 [ 195.009447][ T310] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 195.026380][ T310] usb 9-1: config 250 has no interface number 0 [ 195.032669][ T310] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 195.044226][ T310] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 195.054791][ T310] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 195.065418][ T310] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 195.079123][ T310] usb 9-1: config 250 interface 228 has no altsetting 0 [ 195.087151][ T310] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 195.096200][ T310] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 195.104467][ T310] usb 9-1: Product: syz [ 195.108641][ T310] usb 9-1: SerialNumber: syz [ 195.115283][ T310] hub 9-1:250.228: bad descriptor, ignoring hub [ 195.121571][ T310] hub 9-1:250.228: probe with driver hub failed with error -5 [ 195.135754][ T352] usb usb10-port1: unable to enumerate USB device [ 195.285654][ T10] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 195.425760][ T310] usb 9-1: USB disconnect, device number 42 [ 195.435740][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 195.442232][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 195.450633][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.460759][ T10] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 195.469718][ T10] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 195.484004][ T10] usb 8-1: New USB device found, idVendor=17cc, idProduct=0839, bcdDevice= 0.40 [ 195.493109][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.501110][ T10] usb 8-1: Product: syz [ 195.505294][ T10] usb 8-1: Manufacturer: syz [ 195.509895][ T10] usb 8-1: SerialNumber: syz [ 196.931925][ T384] usb 3-1: USB disconnect, device number 10 [ 196.940295][ T352] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 197.085665][ T352] usb 9-1: device descriptor read/64, error -71 [ 197.290072][ T4643] netlink: 'syz.2.1347': attribute type 29 has an invalid length. [ 197.345659][ T352] usb 9-1: device descriptor read/64, error -71 [ 197.505658][ T310] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 197.585660][ T352] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 197.655646][ T310] usb 10-1: Using ep0 maxpacket: 8 [ 197.661929][ T310] usb 10-1: config index 0 descriptor too short (expected 5924, got 36) [ 197.670472][ T310] usb 10-1: config 250 has an invalid interface number: 228 but max is -1 [ 197.679021][ T310] usb 10-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 197.688195][ T310] usb 10-1: config 250 has no interface number 0 [ 197.694543][ T310] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 197.706249][ T310] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 197.716789][ T310] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 197.725662][ T352] usb 9-1: device descriptor read/64, error -71 [ 197.727136][ T310] usb 10-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 197.746913][ T310] usb 10-1: config 250 interface 228 has no altsetting 0 [ 197.755044][ T310] usb 10-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 197.764209][ T310] usb 10-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 197.772584][ T310] usb 10-1: Product: syz [ 197.777024][ T310] usb 10-1: SerialNumber: syz [ 197.784065][ T310] hub 10-1:250.228: bad descriptor, ignoring hub [ 197.790454][ T310] hub 10-1:250.228: probe with driver hub failed with error -5 [ 197.965659][ T352] usb 9-1: device descriptor read/64, error -71 [ 198.026222][ T36] audit: type=1326 audit(2000000099.290:14404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4608 comm="syz.7.1336" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8870fa8fd9 code=0x7fc00000 [ 198.054254][ T10] usb 8-1: unit 5 not found! [ 198.065762][ T10] usb 8-1: USB disconnect, device number 35 [ 198.069771][ T3746] udevd[3746]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 198.095757][ T310] usb 10-1: USB disconnect, device number 22 [ 198.096006][ T352] usb usb9-port1: attempt power cycle [ 198.136274][ T4652] bridge0: port 3(syz_tun) entered blocking state [ 198.145642][ T4652] bridge0: port 3(syz_tun) entered disabled state [ 198.152119][ T4652] syz_tun: entered allmulticast mode [ 198.169448][ T4652] syz_tun: entered promiscuous mode [ 198.174753][ T4652] bridge0: port 3(syz_tun) entered blocking state [ 198.181199][ T4652] bridge0: port 3(syz_tun) entered forwarding state [ 198.625679][ T352] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 198.646709][ T352] usb 9-1: device descriptor read/8, error -71 [ 198.745665][ T310] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 198.776699][ T352] usb 9-1: device descriptor read/8, error -71 [ 198.815664][ T10] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 198.895652][ T310] usb 10-1: Using ep0 maxpacket: 16 [ 198.901914][ T310] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.913007][ T310] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 198.922937][ T310] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 198.932678][ T310] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 198.946387][ T310] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 198.955495][ T310] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 198.963593][ T310] usb 10-1: SerialNumber: syz [ 198.969064][ T4666] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 198.976303][ T4666] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 198.984038][ T310] hub 10-1:1.0: bad descriptor, ignoring hub [ 198.990238][ T310] hub 10-1:1.0: probe with driver hub failed with error -5 [ 199.007751][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 199.017484][ T352] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 199.027506][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.037605][ T10] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 199.046862][ T10] usb 8-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 199.058332][ T10] usb 8-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 199.071611][ T10] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 199.084550][ T10] usb 8-1: config 1 interface 1 has no altsetting 0 [ 199.091618][ T352] usb 9-1: device descriptor read/8, error -71 [ 199.099283][ T10] usb 8-1: string descriptor 0 read error: -22 [ 199.105478][ T10] usb 8-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 199.114556][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.130488][ T3764] udevd[3764]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 199.146610][ T10] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 199.184230][ T4666] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 199.191476][ T4666] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 199.226692][ T352] usb 9-1: device descriptor read/8, error -71 [ 199.335733][ T352] usb usb9-port1: unable to enumerate USB device [ 199.600914][ T310] cdc_ether 10-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.9-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 199.795312][ T4697] tipc: Started in network mode [ 199.800274][ T4697] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 199.802639][ C1] cdc_ether 10-1:1.0 usb0: CDC: unexpected notification 68! [ 199.809361][ T4697] tipc: Enabled bearer , priority 10 [ 199.825688][ T4697] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1359'. [ 200.018984][ T36] audit: type=1400 audit(2000000101.280:14405): avc: denied { ioctl } for pid=4665 comm="syz.9.1352" path="socket:[37719]" dev="sockfs" ino=37719 ioctlcmd=0x582b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 200.019403][ T310] usb 10-1: USB disconnect, device number 23 [ 200.050276][ T310] cdc_ether 10-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.9-1, CDC Ethernet Device [ 200.095696][ T10] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 200.185662][ T352] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 200.245692][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 200.253022][ T10] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 200.261461][ T10] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 200.270030][ T10] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 200.279112][ T10] usb 9-1: config 250 has no interface number 0 [ 200.285355][ T10] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 200.296944][ T10] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 200.307402][ T10] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 200.317673][ T10] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 200.331226][ T10] usb 9-1: config 250 interface 228 has no altsetting 0 [ 200.339237][ T10] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 200.348330][ T10] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 200.356830][ T10] usb 9-1: Product: syz [ 200.361096][ T10] usb 9-1: SerialNumber: syz [ 200.366314][ T352] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 200.378264][ T10] hub 9-1:250.228: bad descriptor, ignoring hub [ 200.384533][ T10] hub 9-1:250.228: probe with driver hub failed with error -5 [ 200.392138][ T352] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 200.402705][ T352] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=30.00 [ 200.411777][ T352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.423142][ T352] r8152-cfgselector 3-1: Unknown version 0x0000 [ 200.685715][ T9] usb 9-1: USB disconnect, device number 47 [ 200.805746][ T10] usb 10-1: new low-speed USB device number 24 using dummy_hcd [ 200.925659][ T9] tipc: Node number set to 4269801488 [ 200.935671][ T10] usb 10-1: device descriptor read/64, error -71 [ 201.175684][ T10] usb 10-1: device descriptor read/64, error -71 [ 201.226443][ T45] usb 8-1: USB disconnect, device number 36 [ 201.415718][ T10] usb 10-1: new low-speed USB device number 25 using dummy_hcd [ 201.545736][ T10] usb 10-1: device descriptor read/64, error -71 [ 201.785744][ T10] usb 10-1: device descriptor read/64, error -71 [ 201.900406][ T10] usb usb10-port1: attempt power cycle [ 202.126735][ T36] audit: type=1400 audit(2000000103.390:14406): avc: denied { mount } for pid=4752 comm="syz.7.1369" name="/" dev="incremental-fs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 202.128061][ T4753] 9pnet_fd: p9_fd_create_unix (4753): problem connecting socket: ./cgroup/file0: -2 [ 202.192167][ T36] audit: type=1400 audit(2000000103.450:14407): avc: denied { unmount } for pid=2684 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 202.225673][ T45] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 202.245707][ T10] usb 10-1: new low-speed USB device number 26 using dummy_hcd [ 202.266613][ T10] usb 10-1: device descriptor read/8, error -71 [ 202.376702][ T45] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 768 [ 202.388060][ T45] usb 9-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 202.396673][ T10] usb 10-1: device descriptor read/8, error -71 [ 202.397150][ T45] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.411585][ T45] usb 9-1: Product: syz [ 202.415788][ T45] usb 9-1: Manufacturer: syz [ 202.420379][ T45] usb 9-1: SerialNumber: syz [ 202.426355][ T4748] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 202.445634][ T384] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 202.595635][ T384] usb 8-1: Using ep0 maxpacket: 8 [ 202.601787][ T384] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 202.610119][ T384] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 202.618602][ T384] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 202.627803][ T384] usb 8-1: config 250 has no interface number 0 [ 202.634134][ T384] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 202.645781][ T10] usb 10-1: new low-speed USB device number 27 using dummy_hcd [ 202.653365][ T384] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 202.663892][ T384] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 202.674255][ T384] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 202.687831][ T384] usb 8-1: config 250 interface 228 has no altsetting 0 [ 202.695720][ T10] usb 10-1: device descriptor read/8, error -71 [ 202.702065][ T384] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 202.711155][ T384] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 202.719457][ T384] usb 8-1: Product: syz [ 202.723644][ T384] usb 8-1: SerialNumber: syz [ 202.731437][ T384] hub 8-1:250.228: bad descriptor, ignoring hub [ 202.737794][ T384] hub 8-1:250.228: probe with driver hub failed with error -5 [ 202.835530][ T45] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 202.836622][ T10] usb 10-1: device descriptor read/8, error -71 [ 202.905573][ T352] r8152-cfgselector 3-1: Unknown version 0x0000 [ 202.914441][ T352] r8152-cfgselector 3-1: USB disconnect, device number 11 [ 202.955790][ T10] usb usb10-port1: unable to enumerate USB device [ 203.035755][ T384] usb 8-1: USB disconnect, device number 37 [ 203.245660][ T352] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 203.250144][ T45] usb 9-1: USB disconnect, device number 48 [ 203.406911][ T352] usb 3-1: unable to get BOS descriptor or descriptor too short [ 203.415245][ T352] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.425410][ T352] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 203.434391][ T352] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 203.445443][ T352] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 203.458735][ T352] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.471785][ T352] usb 3-1: config 1 interface 1 has no altsetting 0 [ 203.480599][ T352] usb 3-1: string descriptor 0 read error: -22 [ 203.487391][ T352] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 203.496476][ T352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.510262][ T352] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 203.512423][ T3746] udevd[3746]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 204.540771][ T352] wiimote 0005:057E:0306.0010: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz1 [ 204.557026][ T352] wiimote 0005:057E:0306.0010: New device registered [ 204.566610][ T4790] wiimote 0005:057E:0306.0010: Device removed [ 204.715673][ T45] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 204.835664][ T31] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 204.865675][ T45] usb 8-1: Using ep0 maxpacket: 8 [ 204.871805][ T45] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 204.880142][ T45] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 204.888576][ T45] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 204.897617][ T45] usb 8-1: config 250 has no interface number 0 [ 204.903870][ T45] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 204.915509][ T45] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 204.926062][ T45] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 204.936342][ T45] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 204.949821][ T45] usb 8-1: config 250 interface 228 has no altsetting 0 [ 204.957829][ T45] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 204.966906][ T45] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 204.975130][ T45] usb 8-1: Product: syz [ 204.979430][ T45] usb 8-1: SerialNumber: syz [ 204.985977][ T45] hub 8-1:250.228: bad descriptor, ignoring hub [ 204.992234][ T45] hub 8-1:250.228: probe with driver hub failed with error -5 [ 205.005654][ T31] usb 9-1: Using ep0 maxpacket: 32 [ 205.011846][ T31] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 63, changing to 7 [ 205.024587][ T31] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 205.033700][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.041701][ T31] usb 9-1: Product: ঻手苅ⵚ⭉ì«å¬€à°“ꇳ촻ﱆì‘䆿å»ë¥ªÞ帩ﺥ屰蚴븅íˆë®ˆé‡‚惔㙬é¾ä¯ë€‡åºáˆ¦ë©€âž²å†…鶼ࡣ⇢ã©íœ‡åŸ†î³¨ã“’ [ 205.058085][ T31] usb 9-1: Manufacturer: å­â‡ç„©â¿«å–Žã™¯ë¯â¦Œà·³é¬¼ë’±bäˆå“¦å§±âœ‡ã‚„벲箵ï•á’¼ë·Žî°‰å˜·í’ƒæ¦¹âžì´¤ë©¦ïº»â²™ë­¢è„¥ë…¹è¿‚áŸîŸì¡¥ä˜©éŒŒà¶›çŸ¿ê–Ÿì£œêŠ¯ì€Ã‡æ„»ëŠµê¦Œæ‘â•…ç„﷉ࡥ䱴顖샌âžâˆ«ê¥¤î²™é«Œç‡’륈᎚㭀ê汒좄橬飃柖췖ឈì¢å™›à·ºì„¯èŠ¤ä¶ž [ 205.083945][ T31] usb 9-1: SerialNumber: 瓬⚶㓥èŽâ†˜â¬‰ä®¹çŠ¹ä´éˆºä¦–艳നꊿ૿蕸à¢ê‡•çªá”ˆï²±ìˆ®æ„‰ä¢°å”…掖졊烉餟ᳰ⤞岫呚莔轆䜩⿂퓗煩홃頃ä½éµ¥Éï¤ä‚« [ 205.295750][ T352] usb 8-1: USB disconnect, device number 38 [ 205.304105][ T36] audit: type=1400 audit(2000000106.560:14408): avc: denied { lock } for pid=4796 comm="syz.8.1384" path="socket:[39053]" dev="sockfs" ino=39053 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 205.507094][ T31] usb 9-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 205.513452][ T31] usb 9-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 205.521900][ T31] usb 9-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 205.528027][ T31] usb 9-1: 2:1 : invalid channels 0 [ 205.535884][ T31] usb 9-1: USB disconnect, device number 49 [ 205.544052][ T3746] udevd[3746]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 205.605804][ T384] wiimote 0005:057E:0306.0010: detected device: Nintendo Wii Remote (Gen 1) [ 205.617240][ T384] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0010/input/input19 [ 205.630966][ T384] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0010/input/input20 [ 205.642524][ T384] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0010/input/input18 [ 205.891569][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 205.899551][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 205.907539][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 205.915638][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 205.923659][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 205.931632][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 205.939557][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 205.947481][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 205.955380][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 205.961443][ T10] usb 3-1: USB disconnect, device number 12 [ 205.963315][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 205.977996][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 205.987171][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 205.995169][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 205.996054][ T4819] netlink: 'syz.2.1390': attribute type 4 has an invalid length. [ 206.003357][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.010981][ T4819] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1390'. [ 206.019147][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.035762][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.044023][ T4819] overlayfs: workdir and upperdir must be separate subtrees [ 206.045369][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.059274][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.067309][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.075223][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.083151][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.091242][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.099278][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.107276][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.115268][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.123229][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.131220][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.139388][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.147348][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.155292][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.163250][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.171201][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.179424][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.187696][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.196112][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.204115][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.217423][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.225465][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.233692][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.242022][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.250221][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.258361][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.266389][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.274389][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.282429][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.290431][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.298427][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.306351][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.314268][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.322205][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.330126][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.338080][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.346003][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.353924][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.361850][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.369762][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.377678][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.385579][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.393506][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.401432][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.409385][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.417325][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.425229][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.433163][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.441081][ T4812] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.475671][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 206.625655][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 206.631750][ T10] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 206.640078][ T10] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 206.648629][ T10] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 206.657738][ T10] usb 3-1: config 250 has no interface number 0 [ 206.664010][ T10] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 206.675659][ T10] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 206.686138][ T10] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 206.696436][ T10] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 206.709945][ T10] usb 3-1: config 250 interface 228 has no altsetting 0 [ 206.717895][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 206.726987][ T10] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 206.735229][ T10] usb 3-1: Product: syz [ 206.739464][ T10] usb 3-1: SerialNumber: syz [ 206.748949][ T10] hub 3-1:250.228: bad descriptor, ignoring hub [ 206.755334][ T10] hub 3-1:250.228: probe with driver hub failed with error -5 [ 207.025673][ T10] usb 8-1: new full-speed USB device number 39 using dummy_hcd [ 207.066138][ T9] usb 3-1: USB disconnect, device number 13 [ 207.095675][ T382] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 207.176693][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.186853][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.196446][ T10] usb 8-1: New USB device found, idVendor=08b7, idProduct=ec00, bcdDevice= 0.00 [ 207.205508][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 207.213732][ T10] usb 8-1: SerialNumber: syz [ 207.246909][ T382] usb 9-1: unable to get BOS descriptor or descriptor too short [ 207.255242][ T382] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.265419][ T382] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 207.274415][ T382] usb 9-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 207.285341][ T382] usb 9-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 207.298657][ T382] usb 9-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 207.311575][ T382] usb 9-1: config 1 interface 1 has no altsetting 0 [ 207.320205][ T382] usb 9-1: string descriptor 0 read error: -22 [ 207.326469][ T382] usb 9-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 207.335504][ T382] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.348129][ T382] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 207.351155][ T4375] udevd[4375]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 207.486670][ T10] usb 8-1: 0:2 : does not exist [ 207.498065][ T10] usb 8-1: USB disconnect, device number 39 [ 208.068110][ T36] audit: type=1400 audit(2000000109.330:14409): avc: denied { connect } for pid=4849 comm="syz.7.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 208.575672][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 208.725685][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 208.731836][ T10] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 208.740151][ T10] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 208.748629][ T10] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 208.757716][ T10] usb 3-1: config 250 has no interface number 0 [ 208.763991][ T10] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 208.775617][ T10] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 208.786137][ T10] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 208.796437][ T10] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 208.810154][ T10] usb 3-1: config 250 interface 228 has no altsetting 0 [ 208.818096][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 208.827246][ T10] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 208.835815][ T10] usb 3-1: Product: syz [ 208.840093][ T10] usb 3-1: SerialNumber: syz [ 208.848724][ T10] hub 3-1:250.228: bad descriptor, ignoring hub [ 208.855026][ T10] hub 3-1:250.228: probe with driver hub failed with error -5 [ 208.953857][ T4868] kvm: kvm [4867]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 208.962801][ T4868] kvm: kvm [4867]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 209.185768][ T10] usb 3-1: USB disconnect, device number 14 [ 209.625156][ T4881] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 209.874553][ T9] usb 9-1: USB disconnect, device number 50 [ 209.925680][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 210.075835][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 210.081885][ T10] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 210.090427][ T10] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 210.098964][ T10] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 210.105670][ T31] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 210.108115][ T10] usb 3-1: config 250 has no interface number 0 [ 210.121900][ T10] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 210.133502][ T10] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 210.144019][ T10] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 210.154459][ T10] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 210.168054][ T10] usb 3-1: config 250 interface 228 has no altsetting 0 [ 210.176045][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 210.185120][ T10] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 210.193405][ T10] usb 3-1: Product: syz [ 210.197608][ T10] usb 3-1: SerialNumber: syz [ 210.204053][ T10] hub 3-1:250.228: bad descriptor, ignoring hub [ 210.210385][ T9] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 210.217982][ T10] hub 3-1:250.228: probe with driver hub failed with error -5 [ 210.235669][ T31] usb 8-1: device descriptor read/64, error -71 [ 210.376709][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.386917][ T9] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 210.399178][ T9] usb 9-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 210.411948][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.420988][ T9] usb 9-1: Product: syz [ 210.425168][ T9] usb 9-1: Manufacturer: syz [ 210.429796][ T9] usb 9-1: SerialNumber: syz [ 210.495668][ T31] usb 8-1: device descriptor read/64, error -71 [ 210.525730][ T10] usb 3-1: USB disconnect, device number 15 [ 210.637716][ T9] usb 9-1: 1:1 : unsupported format bits 0x20000 [ 210.644312][ T9] usb 9-1: 2:1 : no or invalid class specific endpoint descriptor [ 210.652195][ T9] usb 9-1: 2:1 : unsupported format bits 0x20000 [ 210.661097][ T9] usb 9-1: USB disconnect, device number 51 [ 210.671052][ T3746] udevd[3746]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 210.755705][ T31] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 210.895663][ T31] usb 8-1: device descriptor read/64, error -71 [ 211.135665][ T31] usb 8-1: device descriptor read/64, error -71 [ 211.245747][ T31] usb usb8-port1: attempt power cycle [ 211.595660][ T31] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 211.626601][ T31] usb 8-1: device descriptor read/8, error -71 [ 211.725657][ T384] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 211.756701][ T31] usb 8-1: device descriptor read/8, error -71 [ 211.876951][ T384] usb 3-1: unable to get BOS descriptor or descriptor too short [ 211.885270][ T384] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.895495][ T384] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 211.904474][ T384] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 211.915412][ T384] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 211.928605][ T384] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 211.941509][ T384] usb 3-1: config 1 interface 1 has no altsetting 0 [ 211.949913][ T384] usb 3-1: string descriptor 0 read error: -22 [ 211.956138][ T384] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 211.965177][ T384] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.978087][ T384] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 211.980210][ T3746] udevd[3746]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 212.002798][ T31] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 212.026661][ T31] usb 8-1: device descriptor read/8, error -71 [ 212.155689][ T535] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 212.164091][ T31] usb 8-1: device descriptor read/8, error -71 [ 212.275736][ T31] usb usb8-port1: unable to enumerate USB device [ 212.305641][ T535] usb 9-1: Using ep0 maxpacket: 8 [ 212.311709][ T535] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 212.319994][ T535] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 212.328461][ T535] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 212.337638][ T535] usb 9-1: config 250 has no interface number 0 [ 212.343895][ T535] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 212.355443][ T535] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 212.365878][ T535] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 212.376120][ T535] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 212.389609][ T535] usb 9-1: config 250 interface 228 has no altsetting 0 [ 212.397553][ T535] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 212.406595][ T535] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 212.414838][ T535] usb 9-1: Product: syz [ 212.418999][ T535] usb 9-1: SerialNumber: syz [ 212.425544][ T535] hub 9-1:250.228: bad descriptor, ignoring hub [ 212.431848][ T535] hub 9-1:250.228: probe with driver hub failed with error -5 [ 212.735801][ T535] usb 9-1: USB disconnect, device number 52 [ 213.175669][ T352] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 213.316183][ T384] usb 8-1: new full-speed USB device number 44 using dummy_hcd [ 213.326679][ T352] usb 10-1: config 7 descriptor has 1 excess byte, ignoring [ 213.334015][ T352] usb 10-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 213.344398][ T352] usb 10-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 213.353598][ T352] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.361728][ T352] usb 10-1: Product: syz [ 213.366030][ T352] usb 10-1: Manufacturer: syz [ 213.370718][ T352] usb 10-1: SerialNumber: syz [ 213.375647][ T9] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 213.384717][ T352] rndis_host 10-1:7.0: skipping garbage [ 213.390481][ T352] usb 10-1: bad CDC descriptors [ 213.472274][ T4938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.482794][ T4938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.526064][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 213.532121][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.542415][ T9] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 213.552813][ T9] usb 9-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 213.561919][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.569990][ T9] usb 9-1: Product: syz [ 213.574184][ T9] usb 9-1: Manufacturer: syz [ 213.578809][ T9] usb 9-1: SerialNumber: syz [ 213.587273][ T535] usb 10-1: USB disconnect, device number 28 [ 213.879241][ T9] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 213.889508][ T9] usb 9-1: USB disconnect, device number 53 [ 213.900688][ T3746] udevd[3746]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 214.371217][ T4973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.379844][ T4973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.493821][ T9] usb 3-1: USB disconnect, device number 16 [ 214.554572][ T36] audit: type=1400 audit(2000000115.810:14410): avc: denied { execute } for pid=4976 comm="syz.2.1449" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=40659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 214.587603][ T4979] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1450'. [ 214.635644][ T352] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 214.786973][ T352] usb 9-1: unable to get BOS descriptor or descriptor too short [ 214.795392][ T352] usb 9-1: config 1 has an invalid interface number: 121 but max is 0 [ 214.803596][ T352] usb 9-1: config 1 has no interface number 0 [ 214.811063][ T352] usb 9-1: New USB device found, idVendor=05ba, idProduct=0007, bcdDevice=3e.97 [ 214.820172][ T352] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.828205][ T352] usb 9-1: Product: syz [ 214.832430][ T352] usb 9-1: Manufacturer: syz [ 214.837095][ T352] usb 9-1: SerialNumber: syz [ 214.844140][ T352] hub 9-1:1.121: bad descriptor, ignoring hub [ 214.850320][ T352] hub 9-1:1.121: probe with driver hub failed with error -5 [ 215.075663][ T535] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 215.095694][ T5001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.104072][ T5002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.104174][ T5001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.114070][ T5002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.145759][ T45] usb 9-1: USB disconnect, device number 54 [ 215.227066][ T535] usb 10-1: unable to get BOS descriptor or descriptor too short [ 215.235554][ T535] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.246088][ T535] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 215.255139][ T535] usb 10-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 215.266144][ T535] usb 10-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 215.279391][ T535] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 215.289160][ T535] usb 10-1: config 1 interface 1 has no altsetting 0 [ 215.297828][ T535] usb 10-1: string descriptor 0 read error: -22 [ 215.304107][ T535] usb 10-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 215.313244][ T535] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.323220][ T535] usb 10-1: incorrect wMaxPacketSize 0x0 for BADD profile [ 215.332046][ T535] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 215.334559][ T3746] udevd[3746]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 215.719633][ T5027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.728422][ T5027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.855657][ T352] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 216.005689][ T352] usb 3-1: Using ep0 maxpacket: 8 [ 216.011712][ T352] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 216.020036][ T352] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 216.028484][ T352] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 216.037668][ T352] usb 3-1: config 250 has no interface number 0 [ 216.043923][ T352] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 216.055507][ T352] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 216.065986][ T352] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 216.076269][ T352] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 216.089798][ T352] usb 3-1: config 250 interface 228 has no altsetting 0 [ 216.097728][ T352] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 216.106831][ T352] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 216.115072][ T352] usb 3-1: Product: syz [ 216.119288][ T352] usb 3-1: SerialNumber: syz [ 216.125874][ T352] hub 3-1:250.228: bad descriptor, ignoring hub [ 216.132162][ T352] hub 3-1:250.228: probe with driver hub failed with error -5 [ 216.315678][ T5035] x_tables: unsorted underflow at hook 2 [ 216.386524][ T5056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.395063][ T5056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.406621][ T5057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.415082][ T5057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.445700][ T9] usb 3-1: USB disconnect, device number 17 [ 216.575648][ T352] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 216.725684][ T352] usb 9-1: Using ep0 maxpacket: 32 [ 216.732552][ T352] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 216.743669][ T352] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 216.755642][ T352] usb 9-1: string descriptor 0 read error: -22 [ 216.761854][ T352] usb 9-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 216.770929][ T352] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.779750][ T5037] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 216.787762][ T352] usb 9-1: MIDIStreaming interface descriptor not found [ 216.933608][ T5066] overlayfs: missing 'lowerdir' [ 216.948028][ T5068] netlink: 228 bytes leftover after parsing attributes in process `syz.7.1480'. [ 216.989046][ T352] usb 9-1: USB disconnect, device number 55 [ 216.993204][ T5079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.004225][ T5079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.523900][ T5083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.532799][ T5083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.697845][ T5091] FAULT_INJECTION: forcing a failure. [ 217.697845][ T5091] name failslab, interval 1, probability 0, space 0, times 0 [ 217.710575][ T5091] CPU: 0 UID: 0 PID: 5091 Comm: syz.2.1490 Not tainted syzkaller #0 86de5008f7c01450474dc95eb50061c1f601e771 [ 217.710607][ T5091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 217.710623][ T5091] Call Trace: [ 217.710631][ T5091] [ 217.710639][ T5091] __dump_stack+0x21/0x30 [ 217.710692][ T5091] dump_stack_lvl+0x140/0x1c0 [ 217.710711][ T5091] ? __cfi_dump_stack_lvl+0x10/0x10 [ 217.710730][ T5091] ? selinux_kernfs_init_security+0x14b/0x4b0 [ 217.710760][ T5091] dump_stack+0x19/0x20 [ 217.710778][ T5091] should_fail_ex+0x3c2/0x510 [ 217.710807][ T5091] should_failslab+0xac/0x100 [ 217.710829][ T5091] kmem_cache_alloc_noprof+0x42/0x410 [ 217.710857][ T5091] ? __kernfs_new_node+0xf1/0x740 [ 217.710876][ T5091] __kernfs_new_node+0xf1/0x740 [ 217.710897][ T5091] ? kernfs_new_node+0x280/0x280 [ 217.710918][ T5091] ? snprintf+0xe9/0x140 [ 217.710937][ T5091] kernfs_new_node+0x154/0x280 [ 217.710957][ T5091] __kernfs_create_file+0x52/0x280 [ 217.710981][ T5091] cgroup_addrm_files+0x775/0xac0 [ 217.711005][ T5091] ? trace_raw_output_cgroup_rstat+0x1f0/0x1f0 [ 217.711027][ T5091] ? delete_node+0x3df/0xa60 [ 217.711051][ T5091] ? idr_replace+0x137/0x1b0 [ 217.711077][ T5091] ? __cfi_idr_replace+0x10/0x10 [ 217.711103][ T5091] css_populate_dir+0x12d/0x3d0 [ 217.711129][ T5091] cgroup_apply_control_enable+0x62f/0xce0 [ 217.711151][ T5091] cgroup_mkdir+0x11f8/0x1590 [ 217.711172][ T5091] ? __cfi_cgroup_mkdir+0x10/0x10 [ 217.711190][ T5091] kernfs_iop_mkdir+0x1bb/0x2d0 [ 217.711212][ T5091] vfs_mkdir+0x591/0x810 [ 217.711236][ T5091] do_mkdirat+0x240/0x530 [ 217.711258][ T5091] ? __cfi_do_mkdirat+0x10/0x10 [ 217.711280][ T5091] ? __kasan_check_write+0x18/0x20 [ 217.711306][ T5091] ? getname_flags+0x203/0x6b0 [ 217.711324][ T5091] ? __kasan_check_write+0x18/0x20 [ 217.711351][ T5091] __x64_sys_mkdirat+0x8b/0xa0 [ 217.711374][ T5091] x64_sys_call+0x2ba8/0x2ee0 [ 217.711394][ T5091] do_syscall_64+0x57/0xf0 [ 217.711412][ T5091] ? clear_bhb_loop+0x50/0xa0 [ 217.711437][ T5091] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 217.711462][ T5091] RIP: 0033:0x7f05f99a8fd9 [ 217.711487][ T5091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.711504][ T5091] RSP: 002b:00007f05fa8b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 217.711530][ T5091] RAX: ffffffffffffffda RBX: 00007f05f9c25fa0 RCX: 00007f05f99a8fd9 [ 217.711546][ T5091] RDX: 00000000000001ff RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 217.711560][ T5091] RBP: 00007f05f9a37fed R08: 0000000000000000 R09: 0000000000000000 [ 217.711573][ T5091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.711585][ T5091] R13: 00007f05f9c26038 R14: 00007f05f9c25fa0 R15: 00007ffddabeea98 [ 217.711602][ T5091] [ 217.711633][ T5091] cgroup: cgroup_addrm_files: failed to add prio.class, err=-12 [ 217.851522][ T535] usb 10-1: USB disconnect, device number 29 [ 217.880314][ T5095] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1492'. [ 218.008884][ T5095] netlink: 1 bytes leftover after parsing attributes in process `syz.9.1492'. [ 218.027682][ T352] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 218.108223][ T5117] rust_binder: 5116:5117 transaction call to 5116:0 failed EINVAL, code 1 size 0-0 line thread.rs:1189 [ 218.120049][ T5117] loop2: detected capacity change from 0 to 7 [ 218.128761][ T45] rust_binder: 5116: undelivered TRANSACTION_ERROR: 29201 [ 218.181553][ T5125] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5125 comm=syz.2.1500 [ 218.196921][ T352] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.219157][ T352] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.229183][ T352] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 218.238249][ T352] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.247100][ T352] usb 9-1: config 0 descriptor?? [ 218.435684][ T45] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 218.454628][ T352] usbhid 9-1:0.0: can't add hid device: -71 [ 218.461750][ T352] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 218.472658][ T352] usb 9-1: USB disconnect, device number 56 [ 218.496257][ T384] usb 8-1: unable to read config index 0 descriptor/start: -32 [ 218.503874][ T384] usb 8-1: chopping to 0 config(s) [ 218.509012][ T384] usb 8-1: can't read configurations, error -32 [ 218.606990][ T45] usb 10-1: unable to get BOS descriptor or descriptor too short [ 218.615405][ T45] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.625626][ T45] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 218.634660][ T45] usb 10-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 218.645682][ T45] usb 10-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 218.645991][ T384] usb 8-1: new full-speed USB device number 45 using dummy_hcd [ 218.666052][ T5087] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1488'. [ 218.675351][ T45] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 218.685092][ T45] usb 10-1: config 1 interface 1 has no altsetting 0 [ 218.693715][ T45] usb 10-1: string descriptor 0 read error: -22 [ 218.700027][ T45] usb 10-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 218.709142][ T45] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.720652][ T45] usb 10-1: incorrect wMaxPacketSize 0x0 for BADD profile [ 218.729311][ T45] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 218.736748][ T3746] udevd[3746]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 218.815677][ T384] usb 8-1: device descriptor read/64, error -32 [ 219.065730][ T384] usb 8-1: device descriptor read/64, error -32 [ 219.175746][ T384] usb usb8-port1: attempt power cycle [ 219.485544][ T36] audit: type=1400 audit(2000000120.740:14411): avc: denied { append } for pid=5185 comm="syz.2.1525" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 219.508961][ T36] audit: type=1400 audit(2000000120.740:14412): avc: denied { nlmsg_write } for pid=5185 comm="syz.2.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 219.535763][ T384] usb 8-1: new full-speed USB device number 46 using dummy_hcd [ 219.556174][ T384] usb 8-1: device descriptor read/8, error -32 [ 219.686167][ T384] usb 8-1: device descriptor read/8, error -32 [ 219.795678][ T352] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 219.925846][ T384] usb 8-1: new full-speed USB device number 47 using dummy_hcd [ 219.946210][ T384] usb 8-1: device descriptor read/8, error -32 [ 219.953169][ T352] usb 3-1: unable to get BOS descriptor or descriptor too short [ 219.961210][ T352] usb 3-1: not running at top speed; connect to a high speed hub [ 219.969583][ T352] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 240, changing to 4 [ 219.981892][ T352] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 219.990963][ T352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.998955][ T352] usb 3-1: Product: syz [ 220.003132][ T352] usb 3-1: Manufacturer: syz [ 220.007740][ T352] usb 3-1: SerialNumber: syz [ 220.076114][ T384] usb 8-1: device descriptor read/8, error -32 [ 220.121428][ T5208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.130681][ T5208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.185665][ T384] raw-gadget.2 gadget.7: failed to queue suspend event [ 220.192626][ T384] usb usb8-port1: unable to enumerate USB device [ 220.214272][ T5190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.222827][ T5190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.233207][ T352] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 220.242919][ T352] usb 3-1: unit 4 not found! [ 220.247595][ T352] usb 3-1: unit 0 not found! [ 220.255389][ T352] usb 3-1: USB disconnect, device number 18 [ 220.264608][ T4375] udevd[4375]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 220.762919][ T5226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.771488][ T5226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.817434][ T36] audit: type=1400 audit(2000000122.080:14413): avc: denied { mounton } for pid=5231 comm="syz.2.1543" path="/98/dev/sda" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 220.817491][ T5232] incfs: Options parsing error. -22 [ 220.847027][ T5232] incfs: mount failed -22 [ 220.867576][ T36] audit: type=1400 audit(2000000122.130:14414): avc: denied { connect } for pid=5233 comm="syz.2.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 221.115659][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 221.197496][ T352] usb 10-1: USB disconnect, device number 30 [ 221.221577][ T36] audit: type=1400 audit(2000000122.480:14415): avc: denied { map } for pid=5237 comm="syz.9.1546" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 221.245964][ T9] usb 3-1: device descriptor read/64, error -71 [ 221.435128][ T5257] netlink: 'syz.7.1553': attribute type 29 has an invalid length. [ 221.485733][ T9] usb 3-1: device descriptor read/64, error -71 [ 221.665667][ T352] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 221.725688][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 221.816972][ T352] usb 10-1: unable to get BOS descriptor or descriptor too short [ 221.825387][ T352] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.835642][ T352] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 221.844675][ T352] usb 10-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 221.855871][ T9] usb 3-1: device descriptor read/64, error -71 [ 221.862178][ T352] usb 10-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 221.875426][ T352] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 221.885183][ T352] usb 10-1: config 1 interface 1 has no altsetting 0 [ 221.894455][ T352] usb 10-1: string descriptor 0 read error: -22 [ 221.900765][ T352] usb 10-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 221.909978][ T352] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.920729][ T352] usb 10-1: incorrect wMaxPacketSize 0x0 for BADD profile [ 221.929408][ T352] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 221.931914][ T3746] udevd[3746]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 221.980396][ T5265] IPv6: Can't replace route, no match found [ 222.095663][ T9] usb 3-1: device descriptor read/64, error -71 [ 222.173703][ T5271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.182214][ T5271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.206086][ T9] usb usb3-port1: attempt power cycle [ 222.235677][ T352] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 222.365678][ T352] usb 9-1: device descriptor read/64, error -71 [ 222.545671][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 222.566638][ T9] usb 3-1: device descriptor read/8, error -71 [ 222.605671][ T352] usb 9-1: device descriptor read/64, error -71 [ 222.698907][ T9] usb 3-1: device descriptor read/8, error -71 [ 222.700281][ T36] audit: type=1400 audit(2000000123.960:14416): avc: denied { watch watch_reads } for pid=5273 comm="syz.7.1560" path="/190/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 222.737072][ T36] audit: type=1400 audit(2000000124.000:14417): avc: denied { map } for pid=5273 comm="syz.7.1560" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 222.845696][ T352] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 222.873449][ T36] audit: type=1400 audit(2000000124.130:14418): avc: denied { audit_control } for pid=5282 comm="syz.7.1564" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 222.874836][ T5285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.903679][ T5285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.955946][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 222.985702][ T352] usb 9-1: device descriptor read/64, error -71 [ 222.992917][ T9] usb 3-1: device descriptor read/8, error -71 [ 223.126690][ T9] usb 3-1: device descriptor read/8, error -71 [ 223.225668][ T352] usb 9-1: device descriptor read/64, error -71 [ 223.235820][ T9] usb usb3-port1: unable to enumerate USB device [ 223.335810][ T352] usb usb9-port1: attempt power cycle [ 223.675664][ T352] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 223.696705][ T352] usb 9-1: device descriptor read/8, error -71 [ 223.836678][ T352] usb 9-1: device descriptor read/8, error -71 [ 224.075662][ T352] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 224.096658][ T352] usb 9-1: device descriptor read/8, error -71 [ 224.226638][ T352] usb 9-1: device descriptor read/8, error -71 [ 224.335764][ T352] usb usb9-port1: unable to enumerate USB device [ 224.342305][ T535] usb 10-1: USB disconnect, device number 31 [ 224.350208][ T5292] syzkaller0: entered promiscuous mode [ 224.355780][ T5292] syzkaller0: entered allmulticast mode [ 224.361942][ T5292] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 224.645689][ T352] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 224.675704][ T535] usb 10-1: new full-speed USB device number 32 using dummy_hcd [ 224.796668][ T352] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.807666][ T352] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.817590][ T352] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 224.826766][ T352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.835282][ T352] usb 3-1: config 0 descriptor?? [ 224.838073][ T535] usb 10-1: unable to get BOS descriptor or descriptor too short [ 224.848354][ T535] usb 10-1: not running at top speed; connect to a high speed hub [ 224.858231][ T535] usb 10-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice= 0.40 [ 224.867389][ T535] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.875504][ T535] usb 10-1: Product: syz [ 224.879779][ T535] usb 10-1: Manufacturer: syz [ 224.884459][ T535] usb 10-1: SerialNumber: syz [ 225.020090][ T36] audit: type=1400 audit(2000000126.280:14419): avc: denied { bind } for pid=5295 comm="syz.8.1569" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 225.040376][ T36] audit: type=1400 audit(2000000126.280:14420): avc: denied { name_bind } for pid=5295 comm="syz.8.1569" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 225.062569][ T36] audit: type=1400 audit(2000000126.280:14421): avc: denied { node_bind } for pid=5295 comm="syz.8.1569" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 225.091699][ T535] usb 10-1: MBOX3: Invalid descriptor size=96. [ 225.098652][ T535] usb 10-1: MBOX3: Invalid descriptor size=96. [ 225.105449][ T535] usb 10-1: MBOX3: Invalid descriptor size=96. [ 225.112637][ T535] usb 10-1: USB disconnect, device number 32 [ 225.264784][ T352] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 225.271658][ T352] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 225.278569][ T352] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 225.285389][ T352] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 225.292189][ T352] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 225.298992][ T352] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 225.305777][ T352] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 225.313140][ T352] pyra 0003:1E7D:2CF6.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 225.691789][ T5308] 9pnet_fd: Insufficient options for proto=fd [ 225.832497][ T5314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.841066][ T5314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.868766][ T352] pyra 0003:1E7D:2CF6.0011: couldn't init struct pyra_device [ 225.876244][ T352] pyra 0003:1E7D:2CF6.0011: couldn't install mouse [ 225.883224][ T352] pyra 0003:1E7D:2CF6.0011: probe with driver pyra failed with error -71 [ 225.892906][ T352] usb 3-1: USB disconnect, device number 23 [ 225.965678][ T45] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 226.117070][ T45] usb 10-1: unable to get BOS descriptor or descriptor too short [ 226.125535][ T45] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.135755][ T45] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 226.144794][ T45] usb 10-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 226.155785][ T45] usb 10-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 226.169068][ T45] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 226.179954][ T45] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 226.189704][ T45] usb 10-1: config 1 interface 1 has no altsetting 0 [ 226.198617][ T45] usb 10-1: string descriptor 0 read error: -22 [ 226.204889][ T45] usb 10-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 226.214042][ T45] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.224310][ T45] usb 10-1: incorrect wMaxPacketSize 0x0 for BADD profile [ 226.233559][ T45] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 226.235242][ T3746] udevd[3746]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 226.412765][ T36] audit: type=1326 audit(2000000127.670:14422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5320 comm="syz.8.1580" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe25bba8fd9 code=0x0 [ 226.438363][ T5322] raw_sendmsg: syz.7.1578 forgot to set AF_INET. Fix it! [ 226.529825][ T5336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.538382][ T5336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.745687][ T352] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 226.895646][ T352] usb 3-1: Using ep0 maxpacket: 32 [ 226.902202][ T352] usb 3-1: unable to get BOS descriptor or descriptor too short [ 226.911830][ T352] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 226.920938][ T352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.928957][ T352] usb 3-1: Product: syz [ 226.933148][ T352] usb 3-1: Manufacturer: syz [ 226.937750][ T352] usb 3-1: SerialNumber: syz [ 227.056642][ T5339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.065153][ T5339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.268017][ T5345] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 227.344478][ T5330] SELinux: Context system_u:object is not valid (left unmapped). [ 227.352566][ T36] audit: type=1400 audit(2000000128.610:14423): avc: denied { relabelto } for pid=5329 comm="syz.2.1583" name="cgroup.procs" dev="cgroup" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 227.378244][ T36] audit: type=1400 audit(2000000128.610:14424): avc: denied { associate } for pid=5329 comm="syz.2.1583" name="cgroup.procs" dev="cgroup" ino=109 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object" [ 227.525661][ T535] usb 9-1: new full-speed USB device number 61 using dummy_hcd [ 227.582319][ T5347] netlink: 'syz.7.1590': attribute type 63 has an invalid length. [ 227.590215][ T5347] netlink: 5 bytes leftover after parsing attributes in process `syz.7.1590'. [ 227.599140][ T5347] gretap0: entered allmulticast mode [ 227.604641][ T5347] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 227.655662][ T535] usb 9-1: device descriptor read/64, error -71 [ 227.754431][ T9] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 227.776349][ T9] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 227.781214][ T5347] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 227.896019][ T535] usb 9-1: device descriptor read/64, error -71 [ 227.913786][ T36] audit: type=1400 audit(2000000129.170:14425): avc: denied { mount } for pid=5358 comm="syz.7.1592" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 228.145660][ T535] usb 9-1: new full-speed USB device number 62 using dummy_hcd [ 228.275653][ T535] usb 9-1: device descriptor read/64, error -71 [ 228.515653][ T535] usb 9-1: device descriptor read/64, error -71 [ 228.604355][ T5367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.613078][ T5367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.625738][ T535] usb usb9-port1: attempt power cycle [ 228.717291][ T9] usb 10-1: USB disconnect, device number 33 [ 228.754172][ T36] audit: type=1400 audit(2000000130.010:14426): avc: denied { write } for pid=5372 comm="syz.9.1598" name="usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 228.985648][ T535] usb 9-1: new full-speed USB device number 63 using dummy_hcd [ 229.016658][ T535] usb 9-1: device descriptor read/8, error -71 [ 229.156657][ T535] usb 9-1: device descriptor read/8, error -71 [ 229.270971][ T5390] FAULT_INJECTION: forcing a failure. [ 229.270971][ T5390] name failslab, interval 1, probability 0, space 0, times 0 [ 229.283711][ T5390] CPU: 1 UID: 0 PID: 5390 Comm: syz.7.1604 Not tainted syzkaller #0 86de5008f7c01450474dc95eb50061c1f601e771 [ 229.283743][ T5390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 229.283757][ T5390] Call Trace: [ 229.283763][ T5390] [ 229.283771][ T5390] __dump_stack+0x21/0x30 [ 229.283794][ T5390] dump_stack_lvl+0x140/0x1c0 [ 229.283813][ T5390] ? __cfi_dump_stack_lvl+0x10/0x10 [ 229.283832][ T5390] ? _raw_spin_unlock+0x45/0x60 [ 229.283854][ T5390] ? finish_task_switch+0x13d/0x8a0 [ 229.283882][ T5390] dump_stack+0x19/0x20 [ 229.283900][ T5390] should_fail_ex+0x3c2/0x510 [ 229.283920][ T5390] ? sk_prot_alloc+0x104/0x3a0 [ 229.283944][ T5390] should_failslab+0xac/0x100 [ 229.283966][ T5390] __kmalloc_noprof+0x69/0x510 [ 229.283994][ T5390] ? sk_prot_alloc+0x104/0x3a0 [ 229.284017][ T5390] ? avc_has_perm_noaudit+0x289/0x360 [ 229.284038][ T5390] sk_prot_alloc+0x104/0x3a0 [ 229.284062][ T5390] sk_alloc+0x40/0x590 [ 229.284084][ T5390] tun_chr_open+0x80/0x7f0 [ 229.284109][ T5390] ? __cfi_kobject_get_unless_zero+0x10/0x10 [ 229.284132][ T5390] ? __cfi_tun_chr_open+0x10/0x10 [ 229.284156][ T5390] misc_open+0x2ef/0x370 [ 229.284182][ T5390] chrdev_open+0x4eb/0x610 [ 229.284201][ T5390] ? __cfi_chrdev_open+0x10/0x10 [ 229.284221][ T5390] ? bpf_lsm_file_open+0xd/0x20 [ 229.284243][ T5390] ? __cfi_chrdev_open+0x10/0x10 [ 229.284262][ T5390] do_dentry_open+0x97c/0x1510 [ 229.284297][ T5390] vfs_open+0x86/0x240 [ 229.284319][ T5390] ? __cfi_vfs_open+0x10/0x10 [ 229.284343][ T5390] ? may_open+0x352/0x430 [ 229.284367][ T5390] path_openat+0x2c49/0x35a0 [ 229.284392][ T5390] ? kasan_save_alloc_info+0x3a/0x50 [ 229.284418][ T5390] ? getname+0x1b/0x30 [ 229.284435][ T5390] ? x64_sys_call+0xe69/0x2ee0 [ 229.284456][ T5390] ? do_syscall_64+0x57/0xf0 [ 229.284478][ T5390] ? do_filp_open+0x440/0x440 [ 229.284499][ T5390] do_filp_open+0x1f2/0x440 [ 229.284521][ T5390] ? __cfi_do_filp_open+0x10/0x10 [ 229.284546][ T5390] ? alloc_fd+0x4c1/0x570 [ 229.284566][ T5390] do_sys_openat2+0x134/0x1d0 [ 229.284587][ T5390] ? fput+0x1a4/0x230 [ 229.284606][ T5390] ? do_sys_open+0x100/0x100 [ 229.284627][ T5390] ? __cfi_ksys_write+0x10/0x10 [ 229.284644][ T5390] __x64_sys_openat+0x13a/0x170 [ 229.284668][ T5390] x64_sys_call+0xe69/0x2ee0 [ 229.284688][ T5390] do_syscall_64+0x57/0xf0 [ 229.284706][ T5390] ? clear_bhb_loop+0x50/0xa0 [ 229.284732][ T5390] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 229.284756][ T5390] RIP: 0033:0x7f8870fa8fd9 [ 229.284773][ T5390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.284789][ T5390] RSP: 002b:00007f8871eeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 229.284803][ T5390] RAX: ffffffffffffffda RBX: 00007f8871225fa0 RCX: 00007f8870fa8fd9 [ 229.284813][ T5390] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 229.284825][ T5390] RBP: 00007f8871037fed R08: 0000000000000000 R09: 0000000000000000 [ 229.284836][ T5390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.284849][ T5390] R13: 00007f8871226038 R14: 00007f8871225fa0 R15: 00007ffd24c91798 [ 229.284867][ T5390] [ 229.515367][ T352] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 229.575651][ T535] usb 9-1: new full-speed USB device number 64 using dummy_hcd [ 229.621994][ T352] usb 3-1: USB disconnect, device number 24 [ 229.644859][ T535] usb 9-1: device descriptor read/8, error -71 [ 229.730457][ T5400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.739419][ T5400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.780058][ T535] usb 9-1: device descriptor read/8, error -71 [ 229.895752][ T535] usb usb9-port1: unable to enumerate USB device [ 229.925714][ T352] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 230.087038][ T352] usb 3-1: unable to get BOS descriptor or descriptor too short [ 230.095392][ T352] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.105566][ T352] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 230.114539][ T352] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 230.125468][ T352] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 230.138654][ T352] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 230.149491][ T352] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 230.159152][ T352] usb 3-1: config 1 interface 1 has no altsetting 0 [ 230.167702][ T352] usb 3-1: string descriptor 0 read error: -22 [ 230.173887][ T352] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 230.182973][ T352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.193804][ T352] usb 3-1: incorrect wMaxPacketSize 0x0 for BADD profile [ 230.203989][ T352] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 230.204859][ T3746] udevd[3746]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 230.257153][ T36] audit: type=1326 audit(2000000131.520:14427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5410 comm="syz.7.1613" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8870fa8fd9 code=0x7ffc0000 [ 230.286799][ T36] audit: type=1326 audit(2000000131.520:14428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5410 comm="syz.7.1613" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8870fa8fd9 code=0x7ffc0000 [ 230.299428][ T5414] netlink: 'syz.7.1614': attribute type 4 has an invalid length. [ 230.316221][ T36] audit: type=1326 audit(2000000131.520:14429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5410 comm="syz.7.1613" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f8870fa8fd9 code=0x7ffc0000 [ 230.330991][ T5414] netlink: 17 bytes leftover after parsing attributes in process `syz.7.1614'. [ 230.357027][ T36] audit: type=1326 audit(2000000131.520:14430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5410 comm="syz.7.1613" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8870fa8fd9 code=0x7ffc0000 [ 230.384130][ T36] audit: type=1326 audit(2000000131.520:14431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5410 comm="syz.7.1613" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f8870fa8fd9 code=0x7ffc0000 [ 230.410303][ T5413] 9pnet: p9_errstr2errno: server reported unknown error [ 230.436101][ T5424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.444638][ T5424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.695772][ T535] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 230.845693][ T535] usb 9-1: Using ep0 maxpacket: 16 [ 230.851926][ T535] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.862735][ T535] usb 9-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 0.04 [ 230.871797][ T535] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 230.879814][ T535] usb 9-1: SerialNumber: syz [ 230.884942][ T535] usb 9-1: config 0 descriptor?? [ 230.890569][ T535] hub 9-1:0.0: bad descriptor, ignoring hub [ 230.896513][ T535] hub 9-1:0.0: probe with driver hub failed with error -5 [ 230.903787][ T535] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 230.911582][ T535] usb 9-1: Detected SIO [ 230.916177][ T535] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 230.945675][ T9] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 230.987253][ T5435] tmpfs: Unknown parameter 'no' [ 231.034111][ T5437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.042644][ T5437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.052688][ T5437] ./dev/sda1: Can't lookup blockdev [ 231.095654][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 231.101818][ T9] usb 10-1: config index 0 descriptor too short (expected 5924, got 36) [ 231.110600][ T9] usb 10-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 231.121109][ T9] usb 10-1: config 250 has no interfaces? [ 231.127883][ T9] usb 10-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 231.137072][ T9] usb 10-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 231.145408][ T9] usb 10-1: Product: syz [ 231.149695][ T9] usb 10-1: SerialNumber: syz [ 231.195736][ T535] usb 9-1: USB disconnect, device number 65 [ 231.202328][ T535] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 231.211905][ T535] ftdi_sio 9-1:0.0: device disconnected [ 231.359420][ T9] usb 10-1: USB disconnect, device number 34 [ 231.567296][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 231.567312][ T36] audit: type=1326 audit(2000000132.830:14439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5439 comm="syz.7.1624" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8870fa8fd9 code=0x0 [ 231.835661][ T535] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 231.907577][ T36] audit: type=1400 audit(2000000133.170:14440): avc: denied { map } for pid=5451 comm="syz.9.1629" path="socket:[42964]" dev="sockfs" ino=42964 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 231.988351][ T535] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 231.999934][ T535] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 232.012147][ T535] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 232.021944][ T535] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 232.035057][ T535] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 232.044236][ T535] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.054977][ T535] usb 9-1: config 0 descriptor?? [ 232.261515][ T5442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.270119][ T5442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.305679][ T9] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 232.409436][ T5469] overlayfs: conflicting options: userxattr,redirect_dir=on [ 232.451334][ T5473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2366 sclass=netlink_route_socket pid=5473 comm=syz.7.1637 [ 232.455658][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 232.471378][ T9] usb 10-1: config index 0 descriptor too short (expected 5924, got 36) [ 232.479493][ T535] plantronics 0003:047F:FFFF.0013: ignoring exceeding usage max [ 232.481533][ T9] usb 10-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 232.495879][ T535] plantronics 0003:047F:FFFF.0013: unbalanced collection at end of report description [ 232.498102][ T9] usb 10-1: config 250 has no interfaces? [ 232.511485][ T535] plantronics 0003:047F:FFFF.0013: parse failed [ 232.514617][ T9] usb 10-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 232.519756][ T535] plantronics 0003:047F:FFFF.0013: probe with driver plantronics failed with error -22 [ 232.528579][ T9] usb 10-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 232.547593][ T9] usb 10-1: Product: syz [ 232.551894][ T9] usb 10-1: SerialNumber: syz [ 232.559672][ T5482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.568710][ T5483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.568853][ T5482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.578583][ T5483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.618640][ T352] usb 3-1: USB disconnect, device number 25 [ 232.674354][ T5496] overlayfs: conflicting options: userxattr,verity=on [ 232.705115][ T36] audit: type=1326 audit(2000000133.960:14441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.2.1644" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f05f99a8fd9 code=0x0 [ 232.759947][ C0] raw-gadget.3 gadget.9: ignoring, device is not running [ 232.770951][ T9] usb 10-1: USB disconnect, device number 35 [ 233.186518][ T5521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.195073][ T5521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.283408][ T5523] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1651'. [ 233.286956][ T36] audit: type=1400 audit(2000000134.540:14442): avc: denied { getopt } for pid=5522 comm="syz.9.1651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 233.564297][ T36] audit: type=1400 audit(2000000134.820:14443): avc: denied { rename } for pid=5530 comm="syz.2.1653" name="file0" dev="tmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 233.720915][ T36] audit: type=1400 audit(2000000134.980:14444): avc: denied { write } for pid=5534 comm="syz.7.1655" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 233.777602][ T5540] netlink: 'syz.7.1657': attribute type 7 has an invalid length. [ 233.785410][ T5540] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1657'. [ 233.835662][ T352] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 233.988704][ T5547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.997275][ T5547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.006662][ T352] usb 3-1: config 0 has an invalid interface number: 148 but max is 0 [ 234.014888][ T352] usb 3-1: config 0 has no interface number 0 [ 234.022300][ T352] usb 3-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 234.031394][ T352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.039401][ T352] usb 3-1: Product: syz [ 234.043586][ T352] usb 3-1: Manufacturer: syz [ 234.048193][ T352] usb 3-1: SerialNumber: syz [ 234.053334][ T352] usb 3-1: config 0 descriptor?? [ 234.059169][ T352] ftdi_sio 3-1:0.148: FTDI USB Serial Device converter detected [ 234.067141][ T352] ftdi_sio ttyUSB0: unknown device type: 0x223 [ 234.585656][ T45] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 234.602705][ T5565] input: syz1 as /devices/virtual/input/input21 [ 234.614365][ T352] usb 9-1: USB disconnect, device number 66 [ 234.704036][ T5583] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1670'. [ 234.738705][ T45] usb 10-1: unable to get BOS descriptor or descriptor too short [ 234.747016][ T45] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 234.754647][ T45] usb 10-1: can't read configurations, error -71 [ 234.766808][ T5584] TCP: TCP_TX_DELAY enabled [ 234.772921][ T9] usb 3-1: USB disconnect, device number 26 [ 234.779153][ T9] ftdi_sio 3-1:0.148: device disconnected [ 234.985672][ T352] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 235.135675][ T352] usb 9-1: Using ep0 maxpacket: 8 [ 235.141765][ T352] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 235.151099][ T352] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 235.162596][ T352] usb 9-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 235.185643][ T352] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 235.202182][ T352] usb 9-1: config 250 has no interface number 0 [ 235.214887][ T352] usb 9-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 235.236391][ T352] usb 9-1: config 250 interface 228 has no altsetting 0 [ 235.244786][ T352] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 235.253908][ T352] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 235.257148][ T5600] ./dev/sda1: Can't lookup blockdev [ 235.262195][ T352] usb 9-1: Product: syz [ 235.271562][ T352] usb 9-1: SerialNumber: syz [ 235.279126][ T352] hub 9-1:250.228: bad descriptor, ignoring hub [ 235.285441][ T352] hub 9-1:250.228: probe with driver hub failed with error -5 [ 235.377520][ T31] rust_binder: 5601: undelivered TRANSACTION_COMPLETE [ 235.377570][ T352] rust_binder: 5601: undelivered transaction 52, process died [ 235.392573][ T1854] bridge_slave_1: left allmulticast mode [ 235.398616][ T1854] bridge_slave_1: left promiscuous mode [ 235.404476][ T1854] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.412294][ T1854] bridge_slave_0: left allmulticast mode [ 235.421276][ T1854] bridge_slave_0: left promiscuous mode [ 235.427367][ T1854] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.520289][ T1854] veth1_macvtap: left promiscuous mode [ 235.525865][ T1854] veth0_vlan: left promiscuous mode [ 235.572585][ T36] audit: type=1326 audit(2000000136.830:14445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5606 comm="syz.7.1682" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8870fa8fd9 code=0x0 [ 235.587480][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.604454][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.611731][ T5605] bridge_slave_0: entered allmulticast mode [ 235.612096][ T535] usb 9-1: USB disconnect, device number 67 [ 235.618212][ T5605] bridge_slave_0: entered promiscuous mode [ 235.632484][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.639581][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.646814][ T5605] bridge_slave_1: entered allmulticast mode [ 235.653301][ T5605] bridge_slave_1: entered promiscuous mode [ 235.689962][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.697025][ T5605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.704264][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.711299][ T5605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.729916][ T1858] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.737344][ T1858] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.746567][ T1698] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.753632][ T1698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.762785][ T1858] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.769843][ T1858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.793391][ T5605] veth0_vlan: entered promiscuous mode [ 235.803417][ T5605] veth1_macvtap: entered promiscuous mode [ 236.145699][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 236.285678][ T45] usb 9-1: new full-speed USB device number 68 using dummy_hcd [ 236.297702][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 236.306024][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 236.313574][ T9] usb 3-1: can't read configurations, error -71 [ 236.439523][ T45] usb 9-1: unable to get BOS descriptor or descriptor too short [ 236.441677][ T5642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.450356][ T45] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 236.456043][ T5642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.464278][ T45] usb 9-1: can't read configurations, error -71 [ 236.471271][ T352] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 236.488737][ T5642] netlink: 316 bytes leftover after parsing attributes in process `syz.7.1694'. [ 236.498090][ T5642] netlink: 316 bytes leftover after parsing attributes in process `syz.7.1694'. [ 236.646967][ T352] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.658396][ T352] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 236.667566][ T352] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.675558][ T352] usb 1-1: Product: syz [ 236.679789][ T352] usb 1-1: Manufacturer: syz [ 236.684381][ T352] usb 1-1: SerialNumber: syz [ 237.122319][ T5668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.133761][ T5668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.140802][ T5670] incfs_lookup_dentry err:-13 [ 237.153449][ T36] audit: type=1400 audit(2000000138.410:14446): avc: denied { write } for pid=2740 comm="syz-executor" name="/" dev="incremental-fs" ino=1022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 237.178459][ T36] audit: type=1400 audit(2000000138.410:14447): avc: denied { remove_name } for pid=2740 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 237.182914][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 237.203382][ T36] audit: type=1400 audit(2000000138.410:14448): avc: denied { unlink } for pid=2740 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 237.259976][ T1854] bridge_slave_1: left allmulticast mode [ 237.265678][ T1854] bridge_slave_1: left promiscuous mode [ 237.271288][ T1854] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.279046][ T1854] bridge_slave_0: left allmulticast mode [ 237.284688][ T1854] bridge_slave_0: left promiscuous mode [ 237.290684][ T1854] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.365872][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 237.372282][ T9] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 237.380600][ T9] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 237.390319][ T9] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 237.400679][ T1854] tipc: Disabling bearer [ 237.400742][ T9] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 237.414028][ T1854] tipc: Left network mode [ 237.415146][ T9] usb 3-1: config 250 has no interface number 0 [ 237.426096][ T9] usb 3-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 237.439748][ T1854] veth1_macvtap: left promiscuous mode [ 237.439897][ T9] usb 3-1: config 250 interface 228 has no altsetting 0 [ 237.445427][ T1854] veth0_vlan: left promiscuous mode [ 237.458512][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 237.475203][ T9] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 237.484813][ T9] usb 3-1: Product: syz [ 237.489085][ T9] usb 3-1: SerialNumber: syz [ 237.495521][ T5634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.508128][ T9] hub 3-1:250.228: bad descriptor, ignoring hub [ 237.514415][ T9] hub 3-1:250.228: probe with driver hub failed with error -5 [ 237.527112][ T5634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.538521][ T5634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.547099][ T5634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.559111][ T352] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 237.569572][ T5673] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.576660][ T5673] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.577847][ T352] cdc_ncm 1-1:1.0: bind() failure [ 237.583719][ T5673] bridge_slave_0: entered allmulticast mode [ 237.590062][ T352] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 237.595131][ T5673] bridge_slave_0: entered promiscuous mode [ 237.601601][ T352] cdc_ncm 1-1:1.1: bind() failure [ 237.609183][ T5673] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.618440][ T352] usb 1-1: USB disconnect, device number 16 [ 237.620514][ T5673] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.632250][ T5673] bridge_slave_1: entered allmulticast mode [ 237.638580][ T5673] bridge_slave_1: entered promiscuous mode [ 237.696991][ T5673] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.704051][ T5673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.711369][ T5673] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.718423][ T5673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.753537][ T1698] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.761074][ T1698] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.771762][ T1854] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.778828][ T1854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.787826][ T1858] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.794866][ T1858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.817285][ T5673] veth0_vlan: entered promiscuous mode [ 237.829749][ T5673] veth1_macvtap: entered promiscuous mode [ 237.845887][ T384] usb 3-1: USB disconnect, device number 28 [ 237.871026][ T5687] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1712'. [ 237.989704][ T5695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.999593][ T5695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.123076][ T5701] FAULT_INJECTION: forcing a failure. [ 238.123076][ T5701] name failslab, interval 1, probability 0, space 0, times 0 [ 238.151575][ T5701] CPU: 0 UID: 0 PID: 5701 Comm: syz.0.1718 Not tainted syzkaller #0 86de5008f7c01450474dc95eb50061c1f601e771 [ 238.151598][ T5701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 238.151607][ T5701] Call Trace: [ 238.151611][ T5701] [ 238.151616][ T5701] __dump_stack+0x21/0x30 [ 238.151633][ T5701] dump_stack_lvl+0x140/0x1c0 [ 238.151643][ T5701] ? __cfi_dump_stack_lvl+0x10/0x10 [ 238.151654][ T5701] ? init_pseudo+0x68/0x1f0 [ 238.151668][ T5701] dump_stack+0x19/0x20 [ 238.151678][ T5701] should_fail_ex+0x3c2/0x510 [ 238.151690][ T5701] should_failslab+0xac/0x100 [ 238.151702][ T5701] __kmalloc_cache_noprof+0x41/0x470 [ 238.151718][ T5701] ? __se_sys_fsopen+0x14d/0x390 [ 238.151733][ T5701] __se_sys_fsopen+0x14d/0x390 [ 238.151747][ T5701] __x64_sys_fsopen+0x5f/0x80 [ 238.151760][ T5701] x64_sys_call+0x2d40/0x2ee0 [ 238.151772][ T5701] do_syscall_64+0x57/0xf0 [ 238.151784][ T5701] ? clear_bhb_loop+0x50/0xa0 [ 238.151798][ T5701] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 238.151812][ T5701] RIP: 0033:0x7f2aa6ba8fd9 [ 238.151823][ T5701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.151833][ T5701] RSP: 002b:00007f2aa7b3d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 238.151846][ T5701] RAX: ffffffffffffffda RBX: 00007f2aa6e25fa0 RCX: 00007f2aa6ba8fd9 [ 238.151855][ T5701] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000300 [ 238.151862][ T5701] RBP: 00007f2aa6c37fed R08: 0000000000000000 R09: 0000000000000000 [ 238.151870][ T5701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.151877][ T5701] R13: 00007f2aa6e26038 R14: 00007f2aa6e25fa0 R15: 00007fffbf258328 [ 238.151886][ T5701] [ 238.349843][ T36] audit: type=1400 audit(2000000139.610:14449): avc: denied { setattr } for pid=5705 comm="syz.2.1720" name="NETLINK" dev="sockfs" ino=46119 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 238.466036][ T384] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 238.536694][ T5722] netlink: 676 bytes leftover after parsing attributes in process `syz.7.1725'. [ 238.581882][ T5732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.591570][ T5732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.615647][ T384] usb 1-1: Using ep0 maxpacket: 16 [ 238.621991][ T384] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.638771][ T5739] fuse: Bad value for 'fd' [ 238.643794][ T384] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.655810][ T384] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 238.664977][ T384] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.673219][ T384] usb 1-1: Product: syz [ 238.679546][ T384] usb 1-1: Manufacturer: syz [ 238.684211][ T384] usb 1-1: SerialNumber: syz [ 238.892535][ T384] usb 1-1: 0:2 : does not exist [ 238.897523][ T384] usb 1-1: unit 48 not found! [ 238.904170][ T384] usb 1-1: USB disconnect, device number 17 [ 238.909290][ T3746] udevd[3746]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 239.108837][ T5745] ªªªªª»: renamed from vlan0 (while UP) [ 239.134260][ T5747] FAULT_INJECTION: forcing a failure. [ 239.134260][ T5747] name failslab, interval 1, probability 0, space 0, times 0 [ 239.147045][ T5747] CPU: 1 UID: 0 PID: 5747 Comm: syz.7.1731 Not tainted syzkaller #0 86de5008f7c01450474dc95eb50061c1f601e771 [ 239.147077][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 239.147090][ T5747] Call Trace: [ 239.147097][ T5747] [ 239.147106][ T5747] __dump_stack+0x21/0x30 [ 239.147130][ T5747] dump_stack_lvl+0x140/0x1c0 [ 239.147149][ T5747] ? __cfi_dump_stack_lvl+0x10/0x10 [ 239.147166][ T5747] dump_stack+0x19/0x20 [ 239.147175][ T5747] should_fail_ex+0x3c2/0x510 [ 239.147186][ T5747] should_failslab+0xac/0x100 [ 239.147198][ T5747] kmem_cache_alloc_noprof+0x42/0x410 [ 239.147213][ T5747] ? security_inode_alloc+0x51/0x230 [ 239.147227][ T5747] ? __cfi_make_kgid+0x10/0x10 [ 239.147238][ T5747] security_inode_alloc+0x51/0x230 [ 239.147250][ T5747] inode_init_always_gfp+0x756/0x9e0 [ 239.147262][ T5747] alloc_inode+0xc5/0x270 [ 239.147274][ T5747] ? __cfi_d_alloc_name+0x10/0x10 [ 239.147288][ T5747] new_inode+0x25/0x1e0 [ 239.147299][ T5747] ? __cfi_sprintf+0x10/0x10 [ 239.147310][ T5747] ? inode_doinit_with_dentry+0x580/0xde0 [ 239.147323][ T5747] fuse_ctl_add_dentry+0x91/0x400 [ 239.147337][ T5747] fuse_ctl_add_conn+0x1b0/0x390 [ 239.147351][ T5747] ? __cfi_fuse_ctl_add_conn+0x10/0x10 [ 239.147366][ T5747] ? mutex_lock+0x97/0x1d0 [ 239.147384][ T5747] ? _raw_spin_unlock+0x45/0x60 [ 239.147396][ T5747] fuse_fill_super_common+0xe16/0x1450 [ 239.147409][ T5747] ? __cfi_fuse_fill_super_common+0x10/0x10 [ 239.147422][ T5747] ? _raw_spin_lock+0x92/0x120 [ 239.147433][ T5747] ? __kasan_check_write+0x18/0x20 [ 239.147448][ T5747] ? shrinker_register+0x162/0x220 [ 239.147463][ T5747] fuse_fill_super+0x71/0x250 [ 239.147477][ T5747] get_tree_nodev+0xcb/0x170 [ 239.147490][ T5747] ? __cfi_fuse_fill_super+0x10/0x10 [ 239.147504][ T5747] fuse_get_tree+0x2cb/0x640 [ 239.147518][ T5747] vfs_get_tree+0x9e/0x290 [ 239.147532][ T5747] do_new_mount+0x251/0xb40 [ 239.147546][ T5747] ? security_capable+0x44/0x130 [ 239.147558][ T5747] path_mount+0x66a/0xff0 [ 239.147572][ T5747] ? putname+0x113/0x150 [ 239.147582][ T5747] __se_sys_mount+0x2bf/0x480 [ 239.147592][ T5747] ? __x64_sys_mount+0xf0/0xf0 [ 239.147602][ T5747] ? __kasan_check_write+0x18/0x20 [ 239.147616][ T5747] ? fpregs_restore_userregs+0x11c/0x260 [ 239.147631][ T5747] __x64_sys_mount+0xc3/0xf0 [ 239.147641][ T5747] x64_sys_call+0x2021/0x2ee0 [ 239.147652][ T5747] do_syscall_64+0x57/0xf0 [ 239.147663][ T5747] ? clear_bhb_loop+0x50/0xa0 [ 239.147677][ T5747] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 239.147691][ T5747] RIP: 0033:0x7f8870fa8fd9 [ 239.147702][ T5747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.147712][ T5747] RSP: 002b:00007f8871eeb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 239.147725][ T5747] RAX: ffffffffffffffda RBX: 00007f8871225fa0 RCX: 00007f8870fa8fd9 [ 239.147734][ T5747] RDX: 0000200000000280 RSI: 0000200000000240 RDI: 0000000000000000 [ 239.147741][ T5747] RBP: 00007f8871037fed R08: 00002000000002c0 R09: 0000000000000000 [ 239.147749][ T5747] R10: 0000000000000404 R11: 0000000000000246 R12: 0000000000000000 [ 239.147756][ T5747] R13: 00007f8871226038 R14: 00007f8871225fa0 R15: 00007ffd24c91798 [ 239.147765][ T5747] [ 239.150216][ T5747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.475741][ T5747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.525775][ T5751] device-mapper: ioctl: Invalid target message parameters. [ 239.725687][ T384] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 239.906956][ T384] usb 3-1: unable to get BOS descriptor or descriptor too short [ 239.915288][ T384] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.925586][ T384] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 239.934708][ T384] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 239.945881][ T384] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 239.959081][ T384] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 239.969966][ T384] usb 3-1: config 1 interface 1 has no altsetting 0 [ 239.977863][ T384] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 239.986966][ T384] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.994931][ T384] usb 3-1: Product: syz [ 239.999160][ T384] usb 3-1: Manufacturer: syz [ 240.003747][ T384] usb 3-1: SerialNumber: syz [ 240.008498][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 240.166361][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 240.172421][ T9] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 240.180840][ T9] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 240.189449][ T9] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 240.199774][ T9] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 240.208841][ T9] usb 1-1: config 250 has no interface number 0 [ 240.215169][ T9] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 240.227689][ T9] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 240.238269][ T9] usb 1-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 240.251880][ T9] usb 1-1: config 250 interface 228 has no altsetting 0 [ 240.261141][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 240.270257][ T384] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 240.277488][ T9] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 240.285886][ T9] usb 1-1: Product: syz [ 240.290096][ T9] usb 1-1: SerialNumber: syz [ 240.296428][ T384] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 240.304680][ T9] hub 1-1:250.228: bad descriptor, ignoring hub [ 240.312513][ T9] hub 1-1:250.228: probe with driver hub failed with error -5 [ 240.320945][ T384] usb 3-1: USB disconnect, device number 29 [ 240.605732][ T384] usb 1-1: USB disconnect, device number 18 [ 240.770363][ T5766] FAULT_INJECTION: forcing a failure. [ 240.770363][ T5766] name failslab, interval 1, probability 0, space 0, times 0 [ 240.783063][ T5766] CPU: 0 UID: 0 PID: 5766 Comm: syz.2.1739 Not tainted syzkaller #0 86de5008f7c01450474dc95eb50061c1f601e771 [ 240.783083][ T5766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 240.783091][ T5766] Call Trace: [ 240.783096][ T5766] [ 240.783101][ T5766] __dump_stack+0x21/0x30 [ 240.783117][ T5766] dump_stack_lvl+0x140/0x1c0 [ 240.783128][ T5766] ? __cfi_dump_stack_lvl+0x10/0x10 [ 240.783140][ T5766] dump_stack+0x19/0x20 [ 240.783149][ T5766] should_fail_ex+0x3c2/0x510 [ 240.783162][ T5766] should_failslab+0xac/0x100 [ 240.783180][ T5766] __kmalloc_cache_noprof+0x41/0x470 [ 240.783200][ T5766] ? io_wq_create+0xe0/0x9d0 [ 240.783219][ T5766] ? __kasan_check_write+0x18/0x20 [ 240.783245][ T5766] ? mutex_unlock+0x90/0x240 [ 240.783266][ T5766] io_wq_create+0xe0/0x9d0 [ 240.783277][ T5766] io_uring_alloc_task_context+0x2a5/0x6b0 [ 240.783292][ T5766] ? alloc_file_pseudo+0x191/0x1f0 [ 240.783305][ T5766] ? __cfi_io_uring_alloc_task_context+0x10/0x10 [ 240.783319][ T5766] ? __cfi_io_wq_submit_work+0x10/0x10 [ 240.783333][ T5766] ? __cfi_io_wq_free_work+0x10/0x10 [ 240.783346][ T5766] ? __cfi_anon_inode_make_secure_inode+0x10/0x10 [ 240.783361][ T5766] __io_uring_add_tctx_node+0x324/0x590 [ 240.783374][ T5766] ? __cfi___io_uring_add_tctx_node+0x10/0x10 [ 240.783387][ T5766] ? anon_inode_create_getfile+0x3f/0x50 [ 240.783400][ T5766] io_uring_create+0xc78/0x13f0 [ 240.783413][ T5766] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 240.783427][ T5766] ? __se_sys_futex+0x13c/0x320 [ 240.783439][ T5766] ? __x64_sys_io_uring_setup+0x80/0x80 [ 240.783454][ T5766] ? __kasan_check_write+0x18/0x20 [ 240.783469][ T5766] __x64_sys_io_uring_setup+0x5f/0x80 [ 240.783483][ T5766] x64_sys_call+0x22c0/0x2ee0 [ 240.783494][ T5766] do_syscall_64+0x57/0xf0 [ 240.783505][ T5766] ? clear_bhb_loop+0x50/0xa0 [ 240.783520][ T5766] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 240.783534][ T5766] RIP: 0033:0x7f05f99a8fd9 [ 240.783545][ T5766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.783554][ T5766] RSP: 002b:00007f05fa8b8fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 240.783567][ T5766] RAX: ffffffffffffffda RBX: 0000200000000140 RCX: 00007f05f99a8fd9 [ 240.783576][ T5766] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000002 [ 240.783584][ T5766] RBP: 00007f05f9a37fed R08: 0000000000000000 R09: 0000000000000000 [ 240.783591][ T5766] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 240.783598][ T5766] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffddabeea98 [ 240.783606][ T5766] [ 241.285872][ T9] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 241.425656][ T9] usb 3-1: device descriptor read/64, error -71 [ 241.645659][ T384] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 241.665650][ T9] usb 3-1: device descriptor read/64, error -71 [ 241.796654][ T384] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 241.808369][ T384] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 241.819317][ T384] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 241.829082][ T384] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 241.842017][ T384] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 241.851142][ T384] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.860007][ T384] usb 1-1: config 0 descriptor?? [ 241.915669][ T9] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 242.045655][ T9] usb 3-1: device descriptor read/64, error -71 [ 242.269703][ T384] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 242.288774][ T9] usb 3-1: device descriptor read/64, error -71 [ 242.295171][ T384] plantronics 0003:047F:FFFF.0014: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 242.395742][ T9] usb usb3-port1: attempt power cycle [ 242.501659][ T5787] tipc: Started in network mode [ 242.506627][ T5787] tipc: Node identity 1284d1396996, cluster identity 4711 [ 242.513799][ T5787] tipc: Enabled bearer , priority 0 [ 242.539142][ T5787] syzkaller0: entered promiscuous mode [ 242.544765][ T5787] syzkaller0: entered allmulticast mode [ 242.553797][ T5787] tipc: Resetting bearer [ 242.580613][ T36] audit: type=1400 audit(2000000143.840:14450): avc: denied { lock } for pid=5788 comm="syz.4.1745" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 242.585770][ T5787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.621613][ T5787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.735664][ T9] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 242.756584][ T9] usb 3-1: device descriptor read/8, error -71 [ 242.886571][ T9] usb 3-1: device descriptor read/8, error -71 [ 243.125792][ T9] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 243.146612][ T9] usb 3-1: device descriptor read/8, error -71 [ 243.276604][ T9] usb 3-1: device descriptor read/8, error -71 [ 243.385798][ T9] usb usb3-port1: unable to enumerate USB device [ 243.555648][ T384] tipc: Node number set to 2064830777 [ 244.077181][ T36] audit: type=1326 audit(2000000145.340:14451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5801 comm="syz.0.1750" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2aa6ba8fd9 code=0x0 [ 244.335918][ T9] usb 1-1: USB disconnect, device number 19 [ 244.455756][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 244.605674][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 244.611845][ T10] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 244.620247][ T10] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 244.628812][ T10] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 244.639156][ T10] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 244.648443][ T10] usb 3-1: config 250 has no interface number 0 [ 244.654763][ T10] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 244.666581][ T10] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 244.677128][ T10] usb 3-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 244.690856][ T10] usb 3-1: config 250 interface 228 has no altsetting 0 [ 244.698793][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 244.707926][ T10] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 244.716208][ T10] usb 3-1: Product: syz [ 244.720441][ T10] usb 3-1: SerialNumber: syz [ 244.726492][ T10] hub 3-1:250.228: bad descriptor, ignoring hub [ 244.732839][ T10] hub 3-1:250.228: probe with driver hub failed with error -5 [ 245.035724][ T384] usb 3-1: USB disconnect, device number 34 [ 245.155676][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 245.212267][ T5787] tipc: Resetting bearer [ 245.218584][ T5787] tipc: Disabling bearer [ 245.308276][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 245.318169][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 245.328259][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 245.342174][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.351269][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 245.359354][ T10] usb 1-1: SerialNumber: syz [ 245.366963][ T10] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 245.494312][ T5833] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1762'. [ 245.523359][ T5835] device-mapper: table: 252:14: crypt: Error decoding and setting key (-EINVAL) [ 245.532494][ T36] audit: type=1400 audit(2000000146.780:14452): avc: denied { remount } for pid=5834 comm="syz.7.1763" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 245.532544][ T5835] device-mapper: ioctl: error adding target to table [ 245.568404][ T5846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.577219][ T5846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.586598][ T384] usb 1-1: USB disconnect, device number 20 [ 245.741013][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 245.895662][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 245.902174][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 245.909810][ T10] usb 3-1: can't read configurations, error -61 [ 246.045676][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 246.195649][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 246.202068][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 246.209944][ T10] usb 3-1: can't read configurations, error -61 [ 246.216344][ T10] usb usb3-port1: attempt power cycle [ 246.335705][ T384] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 246.414168][ T5858] x_tables: duplicate underflow at hook 1 [ 246.486655][ T384] usb 1-1: config 127 has an invalid interface number: 57 but max is 0 [ 246.494993][ T384] usb 1-1: config 127 has no interface number 0 [ 246.501346][ T384] usb 1-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 246.513967][ T384] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 246.523083][ T384] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.531083][ T384] usb 1-1: Product: syz [ 246.535281][ T384] usb 1-1: Manufacturer: syz [ 246.539875][ T384] usb 1-1: SerialNumber: syz [ 246.545407][ T5853] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 246.565717][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 246.586005][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 246.592390][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 246.600038][ T10] usb 3-1: can't read configurations, error -61 [ 246.735661][ T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 246.754341][ T384] asix 1-1:127.57: probe with driver asix failed with error -22 [ 246.763121][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 246.769593][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 246.777184][ T10] usb 3-1: can't read configurations, error -61 [ 246.783554][ T10] usb usb3-port1: unable to enumerate USB device [ 247.254778][ T5861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.263368][ T5861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.272543][ T5865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.281126][ T5865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.822770][ T10] input: syz0 as /devices/virtual/misc/uhid/0005:0B05:8502.0015/input/input23 [ 248.832829][ T10] hid-generic 0005:0B05:8502.0015: input,hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0 [ 248.855048][ T5889] fido_id[5889]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 248.895645][ T384] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 249.066720][ T384] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 249.077805][ T384] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 249.090735][ T384] usb 3-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 249.099868][ T384] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.111282][ T10] usb 1-1: USB disconnect, device number 21 [ 249.122391][ T384] usb 3-1: config 0 descriptor?? [ 249.455648][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 249.544582][ T384] wacom 0003:056A:0022.0016: Unknown device_type for 'HID 056a:0022'. Assuming pen. [ 249.554641][ T384] wacom 0003:056A:0022.0016: hidraw0: USB HID v0.05 Joystick [HID 056a:0022] on usb-dummy_hcd.2-1/input0 [ 249.566745][ T384] input: Wacom Intuos 9x12 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0022.0016/input/input24 [ 249.605708][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 249.611914][ T10] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 249.620251][ T10] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 249.628873][ T10] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 249.639224][ T10] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 249.648329][ T10] usb 1-1: config 250 has no interface number 0 [ 249.654677][ T10] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 249.666384][ T10] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 249.676944][ T10] usb 1-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 249.690421][ T10] usb 1-1: config 250 interface 228 has no altsetting 0 [ 249.698418][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 249.707614][ T10] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 249.715919][ T10] usb 1-1: Product: syz [ 249.720171][ T10] usb 1-1: SerialNumber: syz [ 249.726500][ T10] hub 1-1:250.228: bad descriptor, ignoring hub [ 249.732883][ T10] hub 1-1:250.228: probe with driver hub failed with error -5 [ 249.745700][ T5885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.754253][ T5885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.763345][ T10] usb 3-1: USB disconnect, device number 39 [ 249.908405][ T5923] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1790'. [ 250.035743][ T384] usb 1-1: USB disconnect, device number 22 [ 250.483279][ T5944] bridge0: port 3(gretap0) entered blocking state [ 250.499343][ T5944] bridge0: port 3(gretap0) entered disabled state [ 250.521325][ T384] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 250.529017][ T5944] gretap0: entered allmulticast mode [ 250.535444][ T5944] FAULT_INJECTION: forcing a failure. [ 250.535444][ T5944] name failslab, interval 1, probability 0, space 0, times 0 [ 250.542713][ T5951] fuse: Bad value for 'fd' [ 250.552574][ T5944] CPU: 0 UID: 0 PID: 5944 Comm: syz.0.1798 Not tainted syzkaller #0 86de5008f7c01450474dc95eb50061c1f601e771 [ 250.552603][ T5944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 250.552618][ T5944] Call Trace: [ 250.552626][ T5944] [ 250.552634][ T5944] __dump_stack+0x21/0x30 [ 250.552658][ T5944] dump_stack_lvl+0x140/0x1c0 [ 250.552678][ T5944] ? __cfi_dump_stack_lvl+0x10/0x10 [ 250.552706][ T5944] ? __kasan_check_write+0x18/0x20 [ 250.552737][ T5944] dump_stack+0x19/0x20 [ 250.552755][ T5944] should_fail_ex+0x3c2/0x510 [ 250.552774][ T5944] should_failslab+0xac/0x100 [ 250.552795][ T5944] kmem_cache_alloc_noprof+0x42/0x410 [ 250.552821][ T5944] ? __kernfs_new_node+0xf1/0x740 [ 250.552842][ T5944] ? __cfi_selinux_kernfs_init_security+0x10/0x10 [ 250.552868][ T5944] __kernfs_new_node+0xf1/0x740 [ 250.552889][ T5944] ? _raw_spin_lock+0x92/0x120 [ 250.552909][ T5944] ? kernfs_new_node+0x280/0x280 [ 250.552930][ T5944] ? bpf_lsm_kernfs_init_security+0xd/0x20 [ 250.552952][ T5944] ? security_kernfs_init_security+0x39/0xf0 [ 250.552980][ T5944] ? make_kgid+0x1d0/0x690 [ 250.552999][ T5944] ? __cfi_make_kgid+0x10/0x10 [ 250.553017][ T5944] kernfs_new_node+0x154/0x280 [ 250.553039][ T5944] __kernfs_create_file+0x52/0x280 [ 250.553064][ T5944] sysfs_add_file_mode_ns+0x1d2/0x280 [ 250.553092][ T5944] sysfs_create_file_ns+0x12c/0x1b0 [ 250.553117][ T5944] ? __kasan_check_write+0x18/0x20 [ 250.553143][ T5944] ? __cfi_sysfs_create_file_ns+0x10/0x10 [ 250.553169][ T5944] ? sysfs_do_create_link_sd+0xe9/0x120 [ 250.553189][ T5944] br_sysfs_addif+0xcf/0x250 [ 250.553216][ T5944] br_add_if+0x39e/0xe70 [ 250.553234][ T5944] ? bpf_lsm_capable+0xd/0x20 [ 250.553259][ T5944] br_dev_siocdevprivate+0xe46/0x1500 [ 250.553281][ T5944] ? __cfi_br_dev_siocdevprivate+0x10/0x10 [ 250.553302][ T5944] ? has_cap_mac_admin+0xd0/0xd0 [ 250.553323][ T5944] ? full_name_hash+0xa1/0xf0 [ 250.553343][ T5944] dev_ifsioc+0x94e/0xc10 [ 250.553367][ T5944] dev_ioctl+0xa62/0x1000 [ 250.553390][ T5944] sock_ioctl+0x74e/0x7e0 [ 250.553408][ T5944] ? __cfi_sock_ioctl+0x10/0x10 [ 250.553427][ T5944] ? __fget_files+0x2bc/0x330 [ 250.553448][ T5944] ? bpf_lsm_file_ioctl+0xd/0x20 [ 250.553468][ T5944] ? security_file_ioctl+0x3e/0x110 [ 250.553494][ T5944] ? __cfi_sock_ioctl+0x10/0x10 [ 250.553512][ T5944] __se_sys_ioctl+0x126/0x1b0 [ 250.553532][ T5944] __x64_sys_ioctl+0x7f/0xa0 [ 250.553552][ T5944] x64_sys_call+0x1878/0x2ee0 [ 250.553574][ T5944] do_syscall_64+0x57/0xf0 [ 250.553594][ T5944] ? clear_bhb_loop+0x50/0xa0 [ 250.553621][ T5944] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 250.553646][ T5944] RIP: 0033:0x7f2aa6ba8fd9 [ 250.553664][ T5944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.553683][ T5944] RSP: 002b:00007f2aa7b3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.553714][ T5944] RAX: ffffffffffffffda RBX: 00007f2aa6e25fa0 RCX: 00007f2aa6ba8fd9 [ 250.553731][ T5944] RDX: 0000200000000180 RSI: 00000000000089f0 RDI: 0000000000000006 [ 250.553745][ T5944] RBP: 00007f2aa6c37fed R08: 0000000000000000 R09: 0000000000000000 [ 250.553759][ T5944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.553772][ T5944] R13: 00007f2aa6e26038 R14: 00007f2aa6e25fa0 R15: 00007fffbf258328 [ 250.553790][ T5944] [ 250.553838][ T5944] gretap0: left allmulticast mode [ 250.572535][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1801'. [ 250.642830][ T5957] netlink: 140 bytes leftover after parsing attributes in process `syz.7.1801'. [ 250.901968][ T5957] netlink: 140 bytes leftover after parsing attributes in process `syz.7.1801'. [ 250.911399][ T5957] netlink: 140 bytes leftover after parsing attributes in process `syz.7.1801'. [ 250.920675][ T5957] netlink: 140 bytes leftover after parsing attributes in process `syz.7.1801'. [ 250.929846][ T5957] netlink: 140 bytes leftover after parsing attributes in process `syz.7.1801'. [ 250.938935][ T5957] netlink: 140 bytes leftover after parsing attributes in process `syz.7.1801'. [ 250.948092][ T5957] netlink: 140 bytes leftover after parsing attributes in process `syz.7.1801'. [ 250.957155][ T5957] netlink: 140 bytes leftover after parsing attributes in process `syz.7.1801'. [ 250.966438][ T5957] netlink: 140 bytes leftover after parsing attributes in process `syz.7.1801'. [ 251.025675][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 251.177873][ T10] usb 1-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.00 [ 251.187010][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.194981][ T10] usb 1-1: Product: syz [ 251.199234][ T10] usb 1-1: Manufacturer: syz [ 251.203821][ T10] usb 1-1: SerialNumber: syz [ 251.209877][ T10] ums-jumpshot 1-1:1.0: USB Mass Storage device detected [ 251.217635][ T10] ums-jumpshot 1-1:1.0: Quirks match for vid 05dc pid 0001: 2 [ 251.443933][ T10] usb 1-1: USB disconnect, device number 23 [ 251.453497][ T5962] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 251.470874][ T5962] 9p: Unknown uid 00000000004294967295 [ 251.571528][ T36] audit: type=1400 audit(2000000152.830:14453): avc: denied { ioctl } for pid=5965 comm="syz.2.1804" path="socket:[48609]" dev="sockfs" ino=48609 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 252.195666][ T384] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 252.345693][ T384] usb 1-1: Using ep0 maxpacket: 8 [ 252.352027][ T384] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 252.368263][ T384] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 252.383227][ T384] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 252.393567][ T384] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 252.402647][ T384] usb 1-1: config 250 has no interface number 0 [ 252.409050][ T384] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 252.424128][ T384] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 252.441905][ T384] usb 1-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 252.455388][ T384] usb 1-1: config 250 interface 228 has no altsetting 0 [ 252.463311][ T384] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 252.472418][ T384] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 252.480672][ T384] usb 1-1: Product: syz [ 252.484867][ T384] usb 1-1: SerialNumber: syz [ 252.491907][ T384] hub 1-1:250.228: bad descriptor, ignoring hub [ 252.498249][ T384] hub 1-1:250.228: probe with driver hub failed with error -5 [ 252.675695][ T352] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 252.795780][ T384] usb 1-1: USB disconnect, device number 24 [ 252.826989][ T352] usb 3-1: unable to get BOS descriptor or descriptor too short [ 252.835363][ T352] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.845524][ T352] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 252.854492][ T352] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 252.865426][ T352] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 252.878628][ T352] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 252.889475][ T352] usb 3-1: config 1 interface 1 has no altsetting 0 [ 252.898172][ T352] usb 3-1: string descriptor 0 read error: -22 [ 252.904415][ T352] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 252.913466][ T352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.971823][ T36] audit: type=1400 audit(2000000154.230:14454): avc: denied { add_name } for pid=5974 comm="syz.4.1808" name="filter" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 252.992646][ T36] audit: type=1400 audit(2000000154.230:14455): avc: denied { create } for pid=5974 comm="syz.4.1808" name="filter" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 253.013438][ T5975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5975 comm=syz.4.1808 [ 253.078935][ T5976] FAULT_INJECTION: forcing a failure. [ 253.078935][ T5976] name failslab, interval 1, probability 0, space 0, times 0 [ 253.091679][ T5976] CPU: 0 UID: 0 PID: 5976 Comm: syz.4.1808 Not tainted syzkaller #0 86de5008f7c01450474dc95eb50061c1f601e771 [ 253.091700][ T5976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 253.091708][ T5976] Call Trace: [ 253.091715][ T5976] [ 253.091720][ T5976] __dump_stack+0x21/0x30 [ 253.091735][ T5976] dump_stack_lvl+0x140/0x1c0 [ 253.091745][ T5976] ? __cfi_dump_stack_lvl+0x10/0x10 [ 253.091756][ T5976] dump_stack+0x19/0x20 [ 253.091766][ T5976] should_fail_ex+0x3c2/0x510 [ 253.091777][ T5976] should_failslab+0xac/0x100 [ 253.091789][ T5976] __kmalloc_cache_noprof+0x41/0x470 [ 253.091805][ T5976] ? __kasan_kmalloc+0x96/0xb0 [ 253.091816][ T5976] ? binderfs_init_fs_context+0x62/0x1c0 [ 253.091831][ T5976] binderfs_init_fs_context+0x62/0x1c0 [ 253.091843][ T5976] ? __cfi_binderfs_init_fs_context+0x10/0x10 [ 253.091856][ T5976] alloc_fs_context+0x5c7/0x800 [ 253.091869][ T5976] fs_context_for_mount+0x26/0x40 [ 253.091881][ T5976] do_new_mount+0x116/0xb40 [ 253.091896][ T5976] ? security_capable+0x44/0x130 [ 253.091908][ T5976] path_mount+0x66a/0xff0 [ 253.091922][ T5976] ? putname+0x113/0x150 [ 253.091932][ T5976] __se_sys_mount+0x2bf/0x480 [ 253.091942][ T5976] ? __x64_sys_mount+0xf0/0xf0 [ 253.091955][ T5976] ? __kasan_check_write+0x18/0x20 [ 253.091970][ T5976] ? fpregs_restore_userregs+0x11c/0x260 [ 253.091985][ T5976] __x64_sys_mount+0xc3/0xf0 [ 253.091995][ T5976] x64_sys_call+0x2021/0x2ee0 [ 253.092006][ T5976] do_syscall_64+0x57/0xf0 [ 253.092018][ T5976] ? clear_bhb_loop+0x50/0xa0 [ 253.092033][ T5976] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 253.092046][ T5976] RIP: 0033:0x7f03813a8fd9 [ 253.092057][ T5976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.092066][ T5976] RSP: 002b:00007f0382218028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 253.092079][ T5976] RAX: ffffffffffffffda RBX: 00007f0381626090 RCX: 00007f03813a8fd9 [ 253.092087][ T5976] RDX: 0000200000001ac0 RSI: 0000200000001a80 RDI: 0000000000000000 [ 253.092095][ T5976] RBP: 00007f0381437fed R08: 0000000000000000 R09: 0000000000000000 [ 253.092102][ T5976] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000000 [ 253.092109][ T5976] R13: 00007f0381626128 R14: 00007f0381626090 R15: 00007ffd84a33568 [ 253.092118][ T5976] [ 253.327528][ T352] usb 3-1: 2:0: failed to get current value for ch 0 (-32) [ 253.615344][ T36] audit: type=1400 audit(2000000154.870:14456): avc: denied { execute } for pid=5990 comm="syz.7.1813" path="/file1" dev="ramfs" ino=47513 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 253.674545][ T6001] overlay: filesystem on ./bus not supported as upperdir [ 253.886790][ T352] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 253.900741][ T352] usb 3-1: USB disconnect, device number 41 [ 253.935650][ T384] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 254.095652][ T384] usb 1-1: Using ep0 maxpacket: 8 [ 254.104947][ T384] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 254.117570][ T384] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 254.135671][ T384] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 254.155660][ T384] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 254.174876][ T384] usb 1-1: config 250 has no interface number 0 [ 254.193651][ T384] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 254.215477][ T384] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 254.229978][ T384] usb 1-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 254.243521][ T384] usb 1-1: config 250 interface 228 has no altsetting 0 [ 254.252247][ T384] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 254.261454][ T384] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 254.275664][ T384] usb 1-1: Product: syz [ 254.279839][ T384] usb 1-1: SerialNumber: syz [ 254.294808][ T384] hub 1-1:250.228: bad descriptor, ignoring hub [ 254.301107][ T384] hub 1-1:250.228: probe with driver hub failed with error -5 [ 254.466788][ T6017] fuse: Bad value for 'fd' [ 254.605728][ T384] usb 1-1: USB disconnect, device number 25 [ 254.645671][ T352] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 254.805643][ T352] usb 3-1: Using ep0 maxpacket: 16 [ 254.815045][ T352] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.831404][ T352] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 254.851099][ T352] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 254.870941][ T352] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 254.897999][ T352] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 254.909350][ T352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 254.925664][ T352] usb 3-1: SerialNumber: syz [ 254.936235][ T6013] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 254.945576][ T6013] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 254.961466][ T352] hub 3-1:1.0: bad descriptor, ignoring hub [ 254.973956][ T352] hub 3-1:1.0: probe with driver hub failed with error -5 [ 255.015180][ T36] audit: type=1326 audit(2000000156.270:14457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.0.1829" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2aa6ba8fd9 code=0x0 [ 255.068933][ T36] audit: type=1326 audit(2000000156.330:14458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.0.1829" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2aa6ba8fd9 code=0x0 [ 255.162014][ T6013] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 255.177762][ T6013] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 255.587683][ T352] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 255.801958][ T352] usb 3-1: USB disconnect, device number 42 [ 255.808672][ T352] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device