last executing test programs: 5.703356874s ago: executing program 3 (id=35): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000002, 0x31, 0xffffffffffffffff, 0x1000000) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_open_procfs(0x0, 0x0) syz_usb_connect(0x3, 0x5d, &(0x7f0000000200)=ANY=[@ANYBLOB="120110008fcb2040c71b00309a690102030109024b0001020da007090424010002020509052406000105240009000d240f0102000000060006100906241a07001e0524010207052406000005010000000d240f"], 0x0) 5.48944129s ago: executing program 1 (id=39): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./debug\x00', &(0x7f0000000100)=@random={'system.', '\\\x82\'z'}) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./debug/kvm\x00', 0x100) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000020000000000000b00033264756d6d7930000008001f0004320000180012000a00010064756d6d79"], 0x4c}], 0x1}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x933, 0xfffffffd, 0x10000, 0xfffffffd}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x90001, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="f8000000160001"], 0xf8}, 0x1, 0x0, 0x0, 0x2400c8c0}, 0x48000) close_range(r4, 0xffffffffffffffff, 0x2) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001480)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_int(r6, &(0x7f0000000380)=0x9, 0x12) syz_usb_connect(0x2, 0xe02d93adfb4cffde, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x40, 0xa, 0x28, 0x10, 0x421, 0x475, 0xa160, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x57, 0x1, 0x0, 0xf, 0xa0, 0x37, "", [{{0x9, 0x4, 0x85, 0x40, 0x1, 0x2, 0x2, 0xff, 0x81, [], [{{0x9, 0x5, 0x9, 0x3, 0x3ff, 0x5, 0x4, 0x7}}]}}]}}]}}, 0x0) 4.785208928s ago: executing program 0 (id=46): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001580), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x14, r1, 0xb01, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x400c084}, 0x4000000) socket$xdp(0x2c, 0x3, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000013c0)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd2d, 0x25dfdbfc, 0x40}, 0x14}}, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000000)={'veth1_macvtap\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0xfe, 0x0}}}) 4.653666021s ago: executing program 0 (id=47): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201010000000020450c0b7600000002000109022c00010000302009040009030300030009210110ff012206000905810310007f0108"], 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@mcast1, @in6=@remote, 0x4e23, 0x6, 0x4e21, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x7, 0x7, 0x5, 0x95d, 0xfffffffffffffffb, 0x0, 0x0, 0x5c2}, {0xe, 0x5, 0xb1b}, 0x401, 0x0, 0x2, 0x1, 0x2, 0x2}, {{@in6=@empty, 0x4d4, 0x2a}, 0x39573c4e467c4e, @in=@loopback, 0x3502, 0x4, 0x0, 0x40, 0x9, 0x30, 0x7}}, 0xe8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x1fd, 0x0, &(0x7f0000000000/0x4000)=nil}) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) (rerun: 32) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async, rerun: 32) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) (rerun: 32) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e000197305e07af0300000000000000", @ANYBLOB="0400"], 0x1c}], 0x1}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000100000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00030000000000022c0211"], 0x27c}}, 0x0) (async) setsockopt$inet_buf(r5, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) 4.425227387s ago: executing program 3 (id=48): socket$inet_udp(0x2, 0x2, 0x0) r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0xffffffffffffffff, 0x1, 0x8000400}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000001c0)={0x0, 0x7, 0x0, 0x0, 0xd}) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000100)={0x8001, 0xa}) r3 = openat(r1, &(0x7f0000000340)='.\x00', 0x400, 0x0) lseek(r3, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$igmp(0x2, 0x3, 0x2) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x4, 0x3, 0x3, {0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}}}, 0xfffffe28) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x400800, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x39) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000040), 0x8) syz_usb_connect(0x3, 0x5a, &(0x7f0000000080)=ANY=[@ANYRES64=r4], 0x0) 2.38804625s ago: executing program 1 (id=53): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x3482, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x6) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer={0x400c630f}], 0x0, 0x0, 0x0}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x8, 0x4, 0x8, 0x15d, 0x1a, "41e5f1012e8a5c00"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x3482, 0x0) (async) ioctl$TCSBRKP(r0, 0x5425, 0x6) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer={0x400c630f}], 0x0, 0x0, 0x0}) (async) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x8, 0x4, 0x8, 0x15d, 0x1a, "41e5f1012e8a5c00"}) (async) 2.303800332s ago: executing program 2 (id=58): bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @auto=[0x61, 0x35, 0x7, 0x65, 0x37, 0x33, 0x36, 0x61, 0x38, 0x33, 0x32, 0x61, 0x3, 0x36, 0x35, 0x61]}, &(0x7f0000000180)={0x0, "7586da4c57436f80d451bd61fc76943e261e48bc665fb2bc196991d5d9b12f8a2aa211c518713da11c4fff1a59b98002f880e1be764e60cc929af61f5374e9d0", 0x21}, 0x48, 0xfffffffffffffffe) keyctl$revoke(0x3, r0) keyctl$search(0xa, r0, &(0x7f0000002540)='cifs.spnego\x00', &(0x7f0000002580)={'syz', 0x3}, r0) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0}, &(0x7f0000000140)=""/216, 0xd8, &(0x7f0000000340)={&(0x7f0000000240)={'md4\x00'}, &(0x7f00000002c0)="b6efefbfe81d90a0aa50f16355ee7ba7e0953a4852c23d7fe726760f79cde6abef8b1531956cc60ca743dc3712e3979408895abe8b024a1a8dfbca8e424e0495e11acd604a61ec87ed06d15eebb49f639b80d19afa", 0x55}) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092e1300833280102d12a0000000109022200010000000009040000000e010000082403"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000003c0), &(0x7f0000000400)=0x14) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x30000}}], 0x1, 0xf0c) 2.302758972s ago: executing program 1 (id=59): socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, {0x2, 0x4e20, @loopback}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0xc1, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x1, 0x40000000000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) prctl$PR_SET_THP_DISABLE(0x41, 0x3) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000008, 0x4000010, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x275a, 0x0) readahead(r1, 0xa282, 0x3) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x98, 0xc6, 0xdb, 0x8, 0x408, 0x4033, 0x5d62, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xfc, 0x8, 0xd0, 0x22, "", [{{0x9, 0x4, 0x32, 0x0, 0x1, 0xe, 0x1, 0x1, 0x1, [], [{{0x9, 0x5, 0xa, 0x10, 0x20, 0xd, 0x54, 0x81}}]}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 1.677450728s ago: executing program 0 (id=60): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000580)=""/118, 0x76}], 0x1, 0x5e, 0x100) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SEND_IPI(r4, 0x4068aea3, &(0x7f00000000c0)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181403, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000001c0)="65f3450f09c442cd9acdb805000000b9000000000f01c166450ff101b9800000c00f3235008000000f3066b8c6000f00d866ba2100b804000000ef6541da1e0fc733c481a957d7", 0x47}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r13 = syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000280)={0x2e, 0x56, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3ff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@new_dev={0x2, 0x67d, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x14}}}, &(0x7f0000000340)=0x0) syz_ublk_setup_queues(r13, r14, &(0x7f0000000700)={0x0, 0x0, 0x800}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1c9c, 0x0, 0x0, 0x32d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0xfffffffd}}, {}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1000}}], 0x1, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.405270715s ago: executing program 0 (id=61): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000000)=ANY=[@ANYBLOB="636f6e74657874cc"]) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0)={0x5}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, &(0x7f0000000180)=0x80, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) r4 = socket(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x6, 0xfff6}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x4000002, 0x1, 0x7f, 0x7, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x1000004, 0x7, 0x3, 0x1c5b, 0x1, 0x24, 0xffffffff, 0x100, 0x1f461e2c, 0x1, 0xe661, 0x2, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f09, 0x642, 0x3, 0xa, 0x0, 0x71, 0xe2, 0x7, 0x103, 0x0, 0x7, 0x3c, 0x91, 0x6, 0xfffffffd, 0xfffffff8, 0x5, 0x4, 0x8, 0x0, 0x82, 0x0, 0x5, 0x6, 0x8, 0xfffffff9, 0x1, 0x40], [0x10000007, 0x8, 0x5, 0x8000, 0x0, 0x8, 0x12b432e2, 0x40000cb, 0x5a, 0xb, 0x20, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x1, 0x7, 0x5, 0x2f, 0xe, 0x3, 0x78, 0xea4, 0x40, 0x3, 0x4000, 0x108000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7f, 0x2, 0x4, 0xfffffffe, 0x6, 0x2, 0x9, 0x20000004, 0x100009, 0x6, 0x9, 0x40000006, 0x5, 0x0, 0x0, 0xf, 0xffff, 0x2, 0x7c, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0x8, 0x9, 0x48c93690, 0x3, 0x102], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x40008ce, 0x9, 0x1, 0x1, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x5, 0x5, 0x82, 0x3, 0x10000009, 0x3e7, 0xfff, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x37, 0x3, 0x1fd, 0x80, 0x3, 0x4, 0x2, 0x0, 0x4ccd, 0x7, 0x53cf697b, 0x7, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0xfffffffe, 0x3, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x0, 0x3], [0x9, 0xbb2f, 0x3, 0x8, 0x5, 0xfffff000, 0x6, 0x3, 0xfffbfffd, 0x5, 0x1, 0x8f, 0x6, 0x200, 0x5, 0x3, 0x101, 0x10a0000, 0x6, 0x7fff, 0x7, 0xa620, 0x2, 0x8001, 0x6, 0x9, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x7ffffffe, 0x4f, 0x8, 0x0, 0x3, 0x3, 0xffff, 0x3, 0xb, 0xfe, 0x9602, 0x6, 0x97f, 0x2000001, 0x7ff, 0x1, 0x10000, 0x2, 0x8, 0x2b8d, 0x4, 0xffff572a, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x1ff, 0xb1c, 0x1, 0x203, 0x3, 0xbff]}, 0x45c) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="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"], 0x21c}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r5, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x3b, &(0x7f0000006780)={0x7, 0xfe4, 0xfff}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="44ddffffeb01e10400000010000000000a00000030"], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000006700)={0x0, 0x0}) recvmmsg(r4, &(0x7f0000006500)=[{{&(0x7f0000000280)=@rc, 0x80, &(0x7f0000000980)=[{&(0x7f0000000300)=""/31, 0x1f}, {&(0x7f0000000340)=""/7, 0x7}, {&(0x7f0000000380)=""/74, 0x4a}, {&(0x7f0000000880)=""/182, 0xb6}, {&(0x7f0000000940)=""/11, 0xb}], 0x5, &(0x7f0000000a00)=""/103, 0x67}, 0xc}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000a80)=""/235, 0xeb}, {&(0x7f0000000b80)=""/63, 0x3f}, {&(0x7f0000000bc0)=""/148, 0x94}, {&(0x7f0000000d00)=""/147, 0x93}, {&(0x7f0000000dc0)=""/4, 0x4}, {&(0x7f0000000e00)=""/158, 0x9e}], 0x6}, 0x2}, {{&(0x7f0000000f40)=@nfc_llcp, 0x80, &(0x7f0000002180)=[{&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/49, 0x31}, {&(0x7f0000002000)=""/157, 0x9d}, {&(0x7f00000020c0)=""/188, 0xbc}], 0x4}, 0x1}, {{&(0x7f00000021c0)=@ax25={{0x3, @null}, [@netrom, @rose, @bcast, @default, @rose, @rose, @rose, @bcast]}, 0x80, &(0x7f0000002400)=[{&(0x7f0000002240)=""/24, 0x18}, {&(0x7f0000002280)=""/90, 0x5a}, {&(0x7f0000002300)=""/238, 0xee}], 0x3}, 0x3}, {{&(0x7f0000002440)=@alg, 0x80, &(0x7f00000037c0)=[{&(0x7f00000024c0)=""/155, 0x9b}, {&(0x7f0000002580)=""/91, 0x5b}, {&(0x7f0000002600)=""/81, 0x51}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/121, 0x79}, {&(0x7f0000003700)=""/147, 0x93}], 0x6, &(0x7f0000003840)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000004840)=@generic, 0x80, &(0x7f0000006840)=[{&(0x7f00000048c0)=""/179, 0xb3}, {&(0x7f0000004980)=""/250, 0xfa}, {&(0x7f0000004a80)=""/85, 0x55}, {&(0x7f0000004b00)=""/79, 0x4f}, {&(0x7f0000004b80)=""/26, 0x1a}, {&(0x7f0000000c80)=""/12, 0xc}, {&(0x7f0000006800)=""/7, 0x7}], 0x7}, 0x10001}, {{&(0x7f0000004c40)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000005240)=[{&(0x7f0000004cc0)=""/67, 0x43}, {&(0x7f0000004d40)=""/17, 0x11}, {&(0x7f0000004d80)=""/150, 0x96}, {&(0x7f0000004e40)=""/132, 0x84}, {&(0x7f0000004f00)=""/224, 0xe0}, {&(0x7f0000005000)=""/168, 0xa8}, {&(0x7f00000050c0)=""/240, 0xf0}, {&(0x7f00000051c0)=""/117, 0x75}], 0x8, &(0x7f00000052c0)=""/99, 0x63}, 0x200}, {{&(0x7f0000005340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000006480)=[{&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f00000063c0)=""/82, 0x52}, {&(0x7f0000006440)=""/55, 0x37}], 0x3, &(0x7f00000064c0)=""/42, 0x2a}, 0x4}], 0x8, 0x2002, &(0x7f0000006740)={r7, r8+10000000}) sendto$inet6(r4, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0220be040205060506100a044300050018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 1.356023476s ago: executing program 3 (id=62): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_unlock', 0x141a82, 0x53) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) close(0x3) pwritev(r0, 0x0, 0x0, 0x41, 0x8da) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000080)=0xffffffff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000019c0)={0x2020}, 0x2020) write(r0, &(0x7f0000000040)="646c056477e8b7448b4d477b05c067f902f3cc744c005a73340dc7db69966459827a15ac4ad835e33f80d81a62c5ac", 0x2f) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000440)={0x0, 0x989680}, 0x0, 0x0) 1.355552036s ago: executing program 3 (id=63): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000300)='f2fs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='0', 0x1) write$binfmt_elf32(r0, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xc5, 0x6, 0xb5, 0x80000000, 0x2, 0x3e, 0xfcfa, 0x262, 0x38, 0x151, 0x57d7, 0x3, 0x20, 0x1, 0xcfc, 0x8, 0x9}, [{0x2, 0x0, 0x9, 0x4, 0x1, 0x9, 0x4, 0x5}], "81de2ffd3ee3949d81a2be14f10f5de361fe9cf22ea9d76334d68083399c13c089cc3e2c30a8978e0d1daff4806a9479ea141999773bb5ecc3b4ebef274c1500866e926c7c8c9cb0d99ede2718cf488455ac73f61afb2160628fb53d9f0e2b3df0cae9397146568d0ef905d997f8d8b7b6e47dff3cd0fc5262556e2d1cbda867e3609532b57f352242d2919474eb176f125ba6", ['\x00', '\x00', '\x00', '\x00']}, 0x4eb) syz_usb_connect$uac2(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100300000040532b310040000102030109026e0003010d0067080b0002010020ff09040000000101200009240100800c0e000005240b04000904010000010220000904010101010220000905010920000308fb082501010305f9ff090402000001022000090400010101022000090582"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) 1.093541283s ago: executing program 1 (id=64): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000054e000/0x400000)=nil) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffff9c, &(0x7f0000000600)='./my_config/usb_gadget/g1/functions/uac2.usb0/p_mute_present\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='0\x00', 0x2) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffff9c, &(0x7f0000000a00)='./my_config/usb_gadget/g1/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)='0\x00', 0x2) symlink(&(0x7f0000000e00)='./my_config/usb_gadget/g1/functions/uac2.usb0\x00', &(0x7f0000000f00)='./my_config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r2 = openat(0xffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000001100)='dummy_udc.0\n\x00', 0xc) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 1.061781664s ago: executing program 1 (id=65): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x20001, 0x18b) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f0000000000)={0x7, 0x101, 0x6, 0x3, 0xe410}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x15) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x800) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000280)) 921.221977ms ago: executing program 1 (id=66): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000000bc00), 0x8000, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/26, 0x1a}], 0x1) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r1, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000880)='idU\x88\xfe\xd7\x01y\xc1\v\xfd\x9c1\xa8y\'\xc0\x96\xf5r\xa2\x14v\xf3\xcb\xf5\x98\xba\x00\x1c~\xff\x01\x98Q\x06~\xf5U\tIx\xe9:\xc3\x1f\xff\x97\xc1\x05ZF\xb4\xe8\x84\x82\xcd\xec\xed\xa9\xcb<(\x15\x02l\x95\xa8\xf9z\xd6ZoL\xf1\x04c\xc6GE_}\xe29<\xbc\xab\x06\x1a\a\bH\xb3\x8a\xe4\x8d\xac\xe2\x85\xa8\xb2\xe4\xd6\xeb)\x14D\xae\xec\xfaV^\x9fJ#\xb6eN\xa4?\x13\xd0\xc1y\xac#\xf8=L&d\xcd=\xdaq\xb1\xa7\xf0=v0y\xef\x9cI\xcdm\xebn\xc1E\xbc\xdbLD\xc7\xb8\xde\xea\x9b`\x1am\xc9\xd7\x90\xa1c\x82\xbc\x9e\x92\xfb\x03r\x80}\xb6 \nK\x87\x80\xd5\x92\xcb\xb5T\xc2\xdc\xcb,7\xa7\xfdp\x161\n\xdaoT\xbbv\\\xbb$\x1d/\xa4\xber\\[}\xd2\x81\x93\xa4\t\xa6\xb4#[\x0e\x15DQ\xb7|\\\xb37\x10{\xb0\xa8v\xa19\x16\xbe\x8f\xfe\xd0\xc9\xee\x99Q\\\xce\xf8W(\xbd\xf0\x1bh\xbcyX5\x8a\x8a\x97\x17\xeb\n]\xb2\xec\x96\xec\x9e\v\x9d\xb2\xe2\xef\x98\xf8\xbd\x81\x99`\xe13)Y\xa6C\xaf\x14s\x14py\x16o\xa0\x15\xf5\xb3\rW\xf0\xab\xb5\xe6\xcd9l\rO\x8d\x05\xafm]\x0f\xc4>^U\xda\xb0Dk7D\x0flc9F\x85\x00'/352) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x80004, 0x6) fsetxattr(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="0100ebffffff00002e00"], 0x0, 0x0, 0x3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x700, 0x0, 0x94, 0x7fffffff, {{0x42, 0x4, 0x2, 0x0, 0x108, 0x64, 0x0, 0xd, 0x29, 0x0, @remote, @multicast1, {[@rr={0x7, 0xf, 0xb9, [@remote, @loopback, @private=0xa010102]}, @noop, @timestamp_prespec={0x44, 0x24, 0xb, 0x3, 0x7, [{@private=0xa010102, 0x5}, {@private=0xa010102, 0x1ff}, {@remote, 0x9}, {@private=0xa010100, 0x7}]}, @end, @ssrr={0x89, 0x17, 0xc9, [@multicast1, @broadcast, @multicast1, @broadcast, @broadcast]}, @cipso={0x86, 0x3f, 0x3, [{0x1, 0xb, "dc1ffa3c06488445da"}, {0x7, 0x11, "929ccde8c95ab97d7535fcce1999ab"}, {0x5, 0xa, "a15a0f3cf5885e7e"}, {0x0, 0xa, "c2a734e2b2574582"}, {0x5, 0x9, "6aefa588a44090"}]}, @timestamp={0x44, 0x1c, 0x68, 0x0, 0x7, [0xb49e, 0x6, 0x3, 0x3, 0x1, 0x2]}, @noop, @timestamp_prespec={0x44, 0x44, 0x10, 0x3, 0x1, [{@private=0xa010102, 0x1}, {@loopback, 0xfffff944}, {@rand_addr=0x64010101, 0x4}, {@rand_addr=0x64010102}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@remote, 0x40d2}, {@rand_addr=0x64010100, 0x401}, {@local, 0xea}]}, @lsrr={0x83, 0x7, 0x17, [@empty]}]}}}}}) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) setreuid(0xffffffffffffffff, r7) sendmsg$nl_xfrm(r4, &(0x7f0000000840)={&(0x7f0000000100), 0xc, &(0x7f0000000800)={&(0x7f0000000600)=@updpolicy={0x1f4, 0x19, 0x18, 0x70bd26, 0x25dfdbfb, {{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x4e21, 0x0, 0x4e20, 0x8, 0x2, 0xa0, 0x0, 0x1d, r5, r7}, {0x400, 0x5dd80000000, 0x2eb5, 0x2, 0xffffffff, 0xfffffffffffffffd, 0x5, 0x6}, {0x6, 0xfff, 0xfffffffffffffff9, 0xfffffffffffffffd}, 0x7, 0x0, 0x0, 0x1, 0x2}, [@algo_crypt={0x119, 0x2, {{'ctr-serpent-avx\x00'}, 0x688, "0e0ece4469d39738c5514e4a9b9da5fa6811452c05ac36a9a572e77abdc44fd9639d83fad4f571b4b62adc7e6d2dfd5ff06c448147ce74e0a22d3673c4351e6b52c228281b8168af5cce71c1c4926af940515413269d05be532ade28efd1929d1e5c937dabfefa242f1f6020a25336f18c634ef1a4a96d38a739793ae9ae936f3ebf3da37967c08339b377862c61a05b22f4c934b491fc2ff10a50c1f776ca91222ebdc2f7c29d48641845ed2d123a4a48defda66ed86d1667b85f392d00b534f2a27ea104d94713335a9bfee318797dde"}}, @coaddr={0x14, 0xe, @in=@empty}, @lastused={0xc, 0xf, 0x3}]}, 0x1f4}}, 0x20000000) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000013c0)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x73, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000d44ebb40ec188832cf690102030109021b00010000000009040000010e01000009058103", @ANYBLOB='\"'], 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'caif0\x00'}) 920.713737ms ago: executing program 2 (id=67): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0xf4240) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="fbf4", 0x2}], 0x1, 0x7, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000080)={{0x0, @rand_addr=0x64010101, 0x0, 0x3, 'sh\x00'}, {@private=0xa010100, 0x4, 0x0, 0x0, 0x100000, 0xfffffffe}}, 0x44) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000005c0)={[0x400000000007, 0x7, 0x2, 0x4000000000000e52, 0x800000000001, 0x5459, 0x1041, 0x200200000006, 0x5, 0x400000001, 0x4, 0x100000000, 0xba, 0x401, 0x8000000000005, 0x800040068], 0x50000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 677.178073ms ago: executing program 2 (id=68): r0 = fsmount(0xffffffffffffffff, 0x0, 0x80) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000040)=0x80) (async) ioctl$XFS_IOC_FSGEOMETRY(r1, 0x8100587e, &(0x7f0000000080)) (async, rerun: 64) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000180)=0x2) (async, rerun: 64) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000200)=""/189) (async, rerun: 64) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) (async, rerun: 64) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r1, 0x40186e8d, &(0x7f0000000300)={&(0x7f00000002c0)=[{0x5, 0x0, 0x0, {0x4, 0x6}}, {0x401, 0x2, 0x0, {0x6, 0xfffffff7, 0x2}}], 0x2, 0x20, 0x5, 0x8f}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000400)={0x0, 0x15, 0x0, 0x8, 0x91, 0x9, &(0x7f0000000340)="c8d73abad963d405a22bd2fa93b6f97904918981fb914c620c80e09b1c13a5ba835a68d3e851b26aaddf906c5155ab84f6a8b2cd06aed76ed0df9c03168c67b47bee53736acf3d72aad1223116125759306a5da96680173bb642170a802dc84e357de0496b1e367ba661ed13054fe5f7390cbfd833e8e0e9ed8b86b2c2f0716477f42401f148fc3dd6c01c9d20cab7b751"}) (async, rerun: 64) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) (async, rerun: 64) r3 = signalfd(r1, &(0x7f0000000440)={[0x2]}, 0x8) (async) setsockopt$MRT6_PIM(r2, 0x29, 0xcf, &(0x7f0000000480)=0x3, 0x4) (async, rerun: 64) ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, &(0x7f00000004c0)={0x1f, 0x158, 0x6, 0x0, 0x1}) (rerun: 64) r4 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x18, 0x5ac, 0x21e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0xb0, 0xf5, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x4f, {0x9, 0x21, 0xf, 0x8, 0x1, {0x22, 0x3a4}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0x3, 0xa}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x4, 0x5, 0x8}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x250, 0x8, 0x4, 0x2, 0x10, 0xb}, 0x3a, &(0x7f0000000580)={0x5, 0xf, 0x3a, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x0, 0x5}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0xe, 0xf, 0x8de, [0xffff00]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x2, 0x3, 0x63, 0x6}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0xb, 0xf, 0xfbff, [0xff00cf]}]}, 0x3, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x3}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x43f}}]}) syz_usb_control_io$hid(r4, &(0x7f0000000840)={0x24, &(0x7f00000006c0)={0x20, 0x11, 0x13, {0x13, 0x4, "5f0603d2ddf7c42dd082c435b98fe425c1"}}, &(0x7f0000000700)={0x0, 0x3, 0x8c, @string={0x8c, 0x3, "3be87a4afdd635c4c444602d378cda366337fef06ea39bf434fcb004143413e1adb612f48c61b1857f9d7580b26378b5fc1ad5a0f05849786ea24608a8f3f75aa0b94f5eca971564f2659977b84a644dc1fbe109aad2bdb40ebd7bdee109a0c3d3e41e791ea510d7ae7bb1a29865a8a054a14f32da0fc4170baf950371a7d07fd5a0e9b814b7c1de9326"}}, &(0x7f00000007c0)={0x0, 0x22, 0x14, {[@local=@item_012={0x1, 0x2, 0x7, "f5"}, @local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0x5, "f257720a"}, @global=@item_4={0x3, 0x1, 0x8e39ec8d3837fe8e, "51c89f08"}, @local, @global=@item_012={0x0, 0x1, 0x1}, @local=@item_4={0x3, 0x2, 0x1, "61868fa3"}]}}, &(0x7f0000000800)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x68d}}}}, &(0x7f0000000a40)={0x2c, &(0x7f0000000880)={0x20, 0xa, 0x15, "539e11ba3c3f9e2b6c5da9985ea1c5fd97dc6e2724"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0xd9}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000940)={0x20, 0x1, 0x88, "1aad7d3af3401345a09f1e9d1f412647364805d24c68030e30626fb90359a6152d2cb6d1972035eca041ee5fdccf9cbe0aaf6d50557d01e513fac294c8a3cba59793c86db30bff4f5c04c503e9a6be584f5589efcf04245ec3a09b38d358a1aa376b697f5b149f86c1c8de4f66daf65fdc9aa858ddb990c1c0b0ab4793141fb1ad10a82679306dd0"}, &(0x7f0000000a00)={0x20, 0x3, 0x1, 0x1}}) r5 = dup2(r0, r1) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000a80)={'veth0_to_team\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$HIDIOCSREPORT(r5, 0x400c4808, &(0x7f0000000ac0)={0x2, 0x100, 0xffffffff}) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000b00)={0x7, 'wlan1\x00', {0x2}, 0x9}) (async) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000b40)={'nat\x00', 0x0, 0x0, 0x0, [0xffff, 0xffff, 0x3, 0x4b3, 0x6, 0xea6]}, &(0x7f0000000bc0)=0x78) ioctl$FAT_IOCTL_GET_VOLUME_ID(r5, 0x80047213, &(0x7f0000000c00)) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), r5) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x44, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x75}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xd}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r5) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x30, r7, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x24044005}, 0x8000) (async, rerun: 32) r8 = openat$random(0xffffffffffffff9c, &(0x7f0000000f00), 0x8040, 0x0) (rerun: 32) ioctl$RNDCLEARPOOL(r8, 0x5206, &(0x7f0000000f40)=0x8) 647.985044ms ago: executing program 2 (id=69): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0xe70, &(0x7f0000000000)={0x0, 0x6f14, 0x80000, 0x0, 0x37e}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x10000000000, 0x24, 0x2000008, 0x10, r1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f0000002b40)=0x9, 0x4) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001a00010000000000000000000200fc003a2a5e247b0000fb0c001b8006"], 0x28}], 0x1}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$cont(0x20, r3, 0x0, 0x0) ptrace$cont(0x1f, r3, 0xff, 0x7) capget(&(0x7f0000000140)={0x20080522, r3}, &(0x7f0000000180)={0x8, 0xd, 0x6, 0xd, 0xffff8000, 0x9}) 584.924805ms ago: executing program 2 (id=70): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)={@val={0xa, 0x10}, @val={0x1, 0x4, 0x9, 0x9, 0x8, 0x6}, @eth={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "17007e", 0x50, 0x3c, 0x0, @private2={0xfc, 0x2, '\x00', 0x6}, @mcast2, {[@routing={0x3b, 0x8, 0x2, 0x40, 0x0, [@remote, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @remote}]}, @fragment={0xff, 0x0, 0xc0, 0x1, 0x0, 0xd, 0x64}]}}}}}}, 0x94) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x49) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x168) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000000)={{0xffffffffffffffff, 0x2, 0x9, 0x3, 0x1000}}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r4, 0x40046f01, &(0x7f0000000040)=0x7f) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 568.098036ms ago: executing program 2 (id=71): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)='/dev/mapper/control', 0x13) lseek(r0, 0x1ff, 0x5) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="120110030000004035121682400001020301090269000301053009080b00010107208c090400000001012000"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) read(r0, &(0x7f0000000100), 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x11c, 0x4, 0x3e0, 0x108, 0x1f0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100, 0x108}}}, {{@arp={@rand_addr, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) fstatfs(r0, &(0x7f0000000440)=""/61) write(r3, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl(r2, 0xc138fd00, &(0x7f0000000200)) 460.062349ms ago: executing program 0 (id=72): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x5}, 0x1c) (async) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa960bffffd, 0x13012, r0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000780)={0x0, {{0xa, 0x4e20, 0x7, @mcast2, 0x4}}, 0x1}, 0x90) 384.051491ms ago: executing program 0 (id=73): socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0xe, 0xba, 0xca, 0x8, 0xaf0, 0x6300, 0xdc72, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xffffffea, 0x1, 0xfc, 0x8, 0xd0, 0x22, "", [{{0x9, 0x4, 0x6, 0x0, 0x1, 0x16, 0xd4, 0x45, 0x1, [], [{{0x9, 0x5, 0x0, 0xc, 0x40, 0x2, 0x2, 0x7, [@generic={0x0, 0xb, "19b08b8679543c8dd62e3849bce895c0af4729af13dfc74166dcdbfc645734ca7ea444a6cd236ff00b36353ed40f32ca404e3143e3c35d806e94a2d9378187db06f1e3a8e95925a5e331946a2672b49292f551732216b70b42705fb1fe4bc761283a6e26ba26888d5cdbe1c6210c5237f28c3459135c64b90fafbd48ceb4fc37804fafd872154b96363e15d8ce978e6d8d1d01f18b57c46172d4f902233e5ad0e104d5ac5896c195643776b93ce4cd37b4925cd6e0ba522f6564c6fad448c9eb4e93f22af977029c"}, @generic={0x0, 0x24, "77a42c7030cc96b91e6376499c8c158e5f58a6784dd21408d22025904b3fbbfe7afd185a8f18f238f74ef225b869ee86d335da6c6344"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x2, 0x8b, 0x43, [@generic={0x0, 0x3, "49fddb15b22a54519cb24125225623662728f9bcbd3f77ce57ab7a339e4577c7923ffa8c405c9a44253016dccea08b1504fe4f2bbcef701b97f5cf65ca59f34c26b9c25d9012a4c5e53e2cdd5840"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x6, 0xe, 0xe5, [@generic={0x0, 0xc7ab244478c7f7cf, "d9a4f30fa95d5b074430ac00342383d9274afc5e77207f6b6a46bdea5ba17b191d61737f9ebdcddbdc41bf24"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x400, 0x2, 0x0, 0x8, [@uac_iso={0x0, 0x25, 0x1, 0x8, 0x3, 0x3}, @generic={0x0, 0x0, "bbab26de6af5b26623befe863e20ece34364e1a102116a992dd1af5b656d00d1536dc473156bcd6cf77e45c10eac8fa30fd3d8bc4878d9fded3fb41dada8423b04972c206e48b840140edd5d367f0359ddb4876b008307b8a3a52655821cdcaf58029a4ef371fa620f3a280cad3f9e8245f91c86810c2bcde087b47c4cb3ccf5631c6371414f5fbca648c2bec1e6c490c3b9d9a5fd37f3c706461939091b4267260c79900bdd919bf0"}]}}, {{0x9, 0x5, 0x1, 0x8, 0x40, 0x3, 0x77, 0x8, [@uac_iso={0x0, 0x25, 0x1, 0x0, 0x6, 0x5}]}}, {{0x9, 0x5, 0x80, 0x1, 0x60, 0x7, 0x0, 0x8, [@generic={0x0, 0xe, "d6a5f1e720be7a6da4b2fdd8d5d2ed940fdb0418202e77bc10cba735f0b07dee8ddb34574b9308ad1ce88f7654e4abf86f37ede27b43f497467e238da051463f1c16c80ea6819d58e7add2d983753e446b37e9601c7f72bf4f731d5fe521cea0887336cd9ddaa6f3f7a398cb22c2886b5453ffb4f8d02a3f96"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x81, 0x3, 0xb7}}, {{0x9, 0x5, 0xf, 0xc, 0x40, 0x6, 0x4, 0x7, [@uac_iso={0x0, 0x25, 0x1, 0x4, 0xec, 0xc2f2}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x80, 0x73, 0x3}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x0, 0xd, 0x2, [@uac_iso={0x0, 0x25, 0x1, 0xc, 0x1, 0x3}, @generic={0x0, 0x31, "a8ad2cd40cb4d8a3c190f83da90671ccd4cc1534bc656fdc977eee8b93a0b82f86f3fdd42ed0730cf59d7cde68b5afaebb3926bd28358bf6eb20df4cd38078b00d34d79879278739e7dd82c46a015aa704f8124fd78aa96669859fe42b309a18fcb2dc07834c38b9a868e8687f0a058b5fe532963a"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0xc9, 0x10, 0xf8}}]}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x21, [{0x0, &(0x7f0000000040)=@lang_id={0x0, 0x3, 0x1c01}}, {0x0, &(0x7f00000000c0)=@lang_id={0x0, 0x3, 0x406}}]}) 90.385298ms ago: executing program 3 (id=74): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680), 0x103000, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x5452, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r3, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r1, 0x407, 0x4100004) write$eventfd(r1, &(0x7f0000001100)=0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) recvfrom$inet_nvme(r0, &(0x7f0000000340)=""/110, 0x6e, 0x10000, &(0x7f0000000440)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-neon\x00'}, 0x80) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0/file1'}}]}) mount$incfs(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000040)='./bus\x00', &(0x7f0000000100), 0x2080400, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) mount$bind(&(0x7f0000000180)='./cgroup.cpu/memory.limit_in_bytes\x00', &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x140012, 0x0) write$binfmt_format(r4, &(0x7f00000001c0)='-1\x00', 0x3) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 0s ago: executing program 3 (id=75): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x5, 0x7a, &(0x7f0000000740)=ANY=[@ANYBLOB="e6fb195730b68b6c8c8f86f67fffad158963c382981166f9ebfc2d196061a0f297ece912b23abbae0dbf21df9b5be61ab6f17a233c3b6d5e2eda9c16bc1ce56209f87a473a187d803b1d3b7adc7c7c0bafbbbcd21292059620f78154a0bb", @ANYRES64=0x0, @ANYBLOB="e78046fc2adb6e00cd802f3564fc55fb4d08483179b64014342c2957e061ef4e6641f02c014f6b4df95d6eefdaf92d3047733cd8a0114fb3809f949245b4ddc086fb2a5a51f8793dcb795a44b4f9dfcdfd85f6dcb3da4cd550d900ab60c66e138c45c1198aad0d23da10d0aba6c096310fae39d2acc62f87433f0a05a24596d345808e7b5cbba071a3959f33", @ANYRESDEC=r0, @ANYRES8=r0, @ANYRES8=r0], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0xfffffffc, 0xdc64}}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000006c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x9, 0xea5, 0x2, 0x5, 0x66f9, 0x0, 0xfd2e, 0x4be, 0x5, 0x2a, 0x3, 0x800}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000ff8000/0x8000)=nil, 0x8000}, 0x3}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000040)={{&(0x7f00005f0000/0x1000)=nil, 0x1000}, 0x1}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, r3, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f0000000000)={0x20, 0x19, 0xbf, {0xbf, 0x21, "9cba69100d40a09bf7dd56989a56629089802ee2a7077a6dc6db08ca3830319b71891b3d2bd63df5c916d3f824a59bdf3e1d1b779b252edaf83140f83d1c0a74f699b8448d6fbe738d7c693615b3e0b51ccda12982864f6eb6d894228394356faff2fd76e9090051345b81ccb618ae75e90a70b069c9125dc2d79a737ac2972343fd88cb8eb2cc6d9a5cbbc18e9a722eaafdda127832f7bed121c4fb4eaf1734dbd11570474b9b947f3fd9d200b4aab0056bc4255ef811a485fbf450ca"}}, &(0x7f0000000100)={0x0, 0x3, 0xc2, @string={0xc2, 0x3, "a9e5c75d12c4ed23404c67e186a7595fe99887649f1b3896c0cbfa8d29b0077be988674000ccaddbaec8d9b1f862514e3465b516fa32d5f55c2118c20bcf58450306be8371e681b6d128d3c6c914865ff96c4d9b94c4c1feed1db5849de15597840db2edbc7ee138ccb8237b7ca95918a86578b83f557f686e9ca54e08a8da163462bf0fe0943e688a3c1b33b3fd22d672055b8ee490aa35e5d9d2d473d5cc6a6041b70bf0650b6af4f82645f0663229161aef0b8654790139c953fbba1015cf"}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x20, 0x0, 0x34, "4407426dba9bde6afcd39564a664ffdd122cd4026f8c452473402e556b76f0177b16155cb8193879b2a20e5ab8fc30d78cc15e45"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000300)={0x20, 0x81, 0x1, "dc"}, &(0x7f0000000340)={0x20, 0x82, 0x1, "b5"}, &(0x7f0000000380)={0x20, 0x83, 0x1, "06"}, &(0x7f00000003c0)={0x20, 0x84, 0x2, "ba15"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "c450ec"}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.180' (ED25519) to the list of known hosts. [ 27.642995][ T36] audit: type=1400 audit(1785656557.139:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.644114][ T286] cgroup: Unknown subsys name 'net' [ 27.665742][ T36] audit: type=1400 audit(1785656557.139:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.693040][ T36] audit: type=1400 audit(1785656557.169:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.693218][ T286] cgroup: Unknown subsys name 'devices' [ 27.800853][ T286] cgroup: Unknown subsys name 'hugetlb' [ 27.806476][ T286] cgroup: Unknown subsys name 'rlimit' [ 27.898530][ T36] audit: type=1400 audit(1785656557.389:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.921756][ T36] audit: type=1400 audit(1785656557.389:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.930032][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.946632][ T36] audit: type=1400 audit(1785656557.389:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.978173][ T36] audit: type=1400 audit(1785656557.449:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.003772][ T36] audit: type=1400 audit(1785656557.449:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.013451][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.029480][ T36] audit: type=1400 audit(1785656557.509:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.063538][ T36] audit: type=1400 audit(1785656557.509:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.877864][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.885049][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.892219][ T296] bridge_slave_0: entered allmulticast mode [ 28.898399][ T296] bridge_slave_0: entered promiscuous mode [ 28.908942][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.916057][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.923152][ T296] bridge_slave_1: entered allmulticast mode [ 28.929373][ T296] bridge_slave_1: entered promiscuous mode [ 28.935382][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.942721][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.949821][ T293] bridge_slave_0: entered allmulticast mode [ 28.955988][ T293] bridge_slave_0: entered promiscuous mode [ 28.969241][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.976282][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.983395][ T293] bridge_slave_1: entered allmulticast mode [ 28.989568][ T293] bridge_slave_1: entered promiscuous mode [ 29.025846][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.032936][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.040027][ T295] bridge_slave_0: entered allmulticast mode [ 29.046167][ T295] bridge_slave_0: entered promiscuous mode [ 29.052544][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.059595][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.066649][ T295] bridge_slave_1: entered allmulticast mode [ 29.072967][ T295] bridge_slave_1: entered promiscuous mode [ 29.139934][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.146988][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.154185][ T294] bridge_slave_0: entered allmulticast mode [ 29.160390][ T294] bridge_slave_0: entered promiscuous mode [ 29.179364][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.186410][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.193719][ T294] bridge_slave_1: entered allmulticast mode [ 29.199966][ T294] bridge_slave_1: entered promiscuous mode [ 29.267044][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.274129][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.281423][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.288439][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.296753][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.303805][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.311099][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.318114][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.356364][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.363435][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.370714][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.377729][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.402909][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.409977][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.417237][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.424290][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.452155][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.460223][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.467947][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.476377][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.506073][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.513138][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.526038][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.533102][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.542062][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.549112][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.571872][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.578917][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.602261][ T296] veth0_vlan: entered promiscuous mode [ 29.617894][ T293] veth0_vlan: entered promiscuous mode [ 29.638887][ T296] veth1_macvtap: entered promiscuous mode [ 29.646938][ T293] veth1_macvtap: entered promiscuous mode [ 29.660293][ T295] veth0_vlan: entered promiscuous mode [ 29.675426][ T294] veth0_vlan: entered promiscuous mode [ 29.699398][ T295] veth1_macvtap: entered promiscuous mode [ 29.706802][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.735758][ T294] veth1_macvtap: entered promiscuous mode [ 29.751949][ T314] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 29.774550][ T314] kvm_intel: kvm [312]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3ff [ 29.778751][ T316] netlink: 'syz.2.3': attribute type 27 has an invalid length. [ 29.873396][ T334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=334 comm=syz.0.6 [ 29.914595][ T337] process 'syz.3.7' launched './file0' with NULL argv: empty string added [ 30.079084][ T64] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.119060][ T311] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.219164][ T64] usb 3-1: device descriptor read/64, error -71 [ 30.269168][ T311] usb 1-1: Using ep0 maxpacket: 8 [ 30.275229][ T311] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.285674][ T311] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.296225][ T311] usb 1-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 30.306201][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.314542][ T311] usb 1-1: Product: syz [ 30.318763][ T311] usb 1-1: Manufacturer: syz [ 30.323532][ T311] usb 1-1: SerialNumber: syz [ 30.462436][ T64] usb 3-1: device descriptor read/64, error -71 [ 30.479021][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 30.514269][ T346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 30.532905][ T311] usb 1-1: 0:1 : does not exist [ 30.555018][ T311] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 30.567933][ T311] usb 1-1: USB disconnect, device number 2 [ 30.630308][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.640625][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 30.645028][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.650785][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 30.680143][ T45] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 30.689212][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.697222][ T45] usb 2-1: Product: syz [ 30.701402][ T45] usb 2-1: Manufacturer: syz [ 30.705986][ T45] usb 2-1: SerialNumber: syz [ 30.710704][ T64] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 30.719353][ T45] usb 2-1: config 0 descriptor?? [ 30.849045][ T64] usb 3-1: device descriptor read/64, error -71 [ 31.099043][ T64] usb 3-1: device descriptor read/64, error -71 [ 31.117898][ T352] overlayfs: conflicting lowerdir path [ 31.219083][ T64] usb usb3-port1: attempt power cycle [ 31.549082][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 31.579015][ T64] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 31.609987][ T64] usb 3-1: device descriptor read/8, error -71 [ 31.699151][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 31.705398][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 31.716575][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 31.726414][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 31.735816][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.744519][ T9] usb 4-1: config 0 descriptor?? [ 31.752560][ T64] usb 3-1: device descriptor read/8, error -71 [ 31.753033][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 31.765215][ T9] hub 4-1:0.0: probe with driver hub failed with error -5 [ 31.772735][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 31.960855][ T356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.969414][ T356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.999072][ T64] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 32.020013][ T64] usb 3-1: device descriptor read/8, error -71 [ 32.079161][ T9] usb 4-1: USB disconnect, device number 2 [ 32.149999][ T64] usb 3-1: device descriptor read/8, error -71 [ 32.259102][ T64] usb usb3-port1: unable to enumerate USB device [ 32.299022][ T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 32.450374][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 32.458507][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 32.467060][ T10] usb 1-1: config 1 interface 0 altsetting 45 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 32.478389][ T10] usb 1-1: config 1 interface 0 altsetting 45 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 32.491543][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 32.500412][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.512225][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.520288][ T10] usb 1-1: Product: syz [ 32.524500][ T10] usb 1-1: Manufacturer: syz [ 32.529179][ T10] usb 1-1: SerialNumber: syz [ 32.534818][ T374] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 32.617716][ T381] capability: warning: `syz.3.21' uses deprecated v2 capabilities in a way that may be insecure [ 32.649826][ T36] kauditd_printk_skb: 1539 callbacks suppressed [ 32.649841][ T36] audit: type=1326 audit(1785656562.149:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=339 comm="syz.1.8" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e3cb5e84e code=0x7ffc0000 [ 32.681394][ T36] audit: type=1326 audit(1785656562.149:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=339 comm="syz.1.8" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e3cb5e84e code=0x7ffc0000 [ 32.706529][ T36] audit: type=1326 audit(1785656562.149:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=339 comm="syz.1.8" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e3cb5e84e code=0x7ffc0000 [ 32.731686][ T36] audit: type=1326 audit(1785656562.149:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=339 comm="syz.1.8" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e3cb5e84e code=0x7ffc0000 [ 32.758464][ T36] audit: type=1326 audit(1785656562.149:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=339 comm="syz.1.8" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e3cb5e84e code=0x7ffc0000 [ 32.783805][ T36] audit: type=1326 audit(1785656562.149:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=339 comm="syz.1.8" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e3cb5e84e code=0x7ffc0000 [ 32.810390][ T36] audit: type=1326 audit(1785656562.149:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=339 comm="syz.1.8" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e3cb5e84e code=0x7ffc0000 [ 32.835571][ T36] audit: type=1326 audit(1785656562.159:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=339 comm="syz.1.8" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e3cb5e84e code=0x7ffc0000 [ 32.860941][ T36] audit: type=1326 audit(1785656562.159:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=339 comm="syz.1.8" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e3cb5e84e code=0x7ffc0000 [ 32.886954][ T36] audit: type=1326 audit(1785656562.159:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=339 comm="syz.1.8" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e3cb5e84e code=0x7ffc0000 [ 32.903740][ T393] overlayfs: missing 'workdir' [ 32.987114][ T10] usb 1-1: bad CDC descriptors [ 32.997469][ T10] usb 1-1: USB disconnect, device number 3 [ 33.239029][ T311] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 33.269217][ T45] usb 2-1: USB disconnect, device number 2 [ 33.288468][ T359] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 33.307135][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.324321][ T401] ======================================================= [ 33.324321][ T401] WARNING: The mand mount option has been deprecated and [ 33.324321][ T401] and is ignored by this kernel. Remove the mand [ 33.324321][ T401] option from the mount to silence this warning. [ 33.324321][ T401] ======================================================= [ 33.401027][ T311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 33.408698][ T311] usb 3-1: too many configurations: 50, using maximum allowed: 8 [ 33.417652][ T311] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 33.425258][ T311] usb 3-1: can't read configurations, error -61 [ 33.439113][ T359] usb 4-1: device descriptor read/64, error -71 [ 33.559030][ T311] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 33.599027][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 33.619024][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 33.699024][ T359] usb 4-1: device descriptor read/64, error -71 [ 33.730320][ T311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 33.738012][ T311] usb 3-1: too many configurations: 50, using maximum allowed: 8 [ 33.746838][ T311] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 33.749117][ T45] usb 2-1: device descriptor read/64, error -71 [ 33.754700][ T311] usb 3-1: can't read configurations, error -61 [ 33.767013][ T311] usb usb3-port1: attempt power cycle [ 33.773541][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.784445][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.794226][ T10] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 33.803251][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.811981][ T10] usb 1-1: config 0 descriptor?? [ 33.939028][ T359] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 33.999022][ T45] usb 2-1: device descriptor read/64, error -71 [ 34.020171][ T10] usb 1-1: string descriptor 0 read error: -22 [ 34.069175][ T359] usb 4-1: device descriptor read/64, error -71 [ 34.109048][ T311] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 34.130629][ T311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 34.138355][ T311] usb 3-1: too many configurations: 50, using maximum allowed: 8 [ 34.147120][ T311] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 34.154735][ T311] usb 3-1: can't read configurations, error -61 [ 34.219930][ T404] usb usb9: usbfs: process 404 (syz.0.27) did not claim interface 0 before use [ 34.222467][ T10] input: HID 256c:006d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0001/input/input4 [ 34.249897][ T10] input: HID 256c:006d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0001/input/input5 [ 34.252848][ T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 34.272840][ T10] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0001/input/input6 [ 34.286438][ T10] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0001/input/input7 [ 34.299086][ T311] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 34.328507][ T10] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 34.342014][ T311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 34.349038][ T359] usb 4-1: device descriptor read/64, error -71 [ 34.349749][ T311] usb 3-1: too many configurations: 50, using maximum allowed: 8 [ 34.364763][ T10] usb 1-1: USB disconnect, device number 4 [ 34.372781][ T311] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 34.384475][ T412] fido_id[412]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 34.399970][ T311] usb 3-1: can't read configurations, error -61 [ 34.406404][ T311] usb usb3-port1: unable to enumerate USB device [ 34.419038][ T45] usb 2-1: device descriptor read/64, error -71 [ 34.459195][ T359] usb usb4-port1: attempt power cycle [ 34.659076][ T45] usb 2-1: device descriptor read/64, error -71 [ 34.769131][ T45] usb usb2-port1: attempt power cycle [ 34.799038][ T359] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 34.799234][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 34.819988][ T359] usb 4-1: device descriptor read/8, error -71 [ 34.950332][ T359] usb 4-1: device descriptor read/8, error -71 [ 34.969025][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 34.975154][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 34.984194][ T10] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 34.993849][ T10] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 35.003529][ T10] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 35.013255][ T10] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 35.022980][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 35.029831][ T10] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 35.038841][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.048644][ T10] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 35.119055][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 35.140015][ T45] usb 2-1: device descriptor read/8, error -71 [ 35.189246][ T359] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 35.210077][ T359] usb 4-1: device descriptor read/8, error -71 [ 35.253992][ T10] scsi host1: usb-storage 1-1:1.0 [ 35.270323][ T45] usb 2-1: device descriptor read/8, error -71 [ 35.340008][ T359] usb 4-1: device descriptor read/8, error -71 [ 35.449186][ T359] usb usb4-port1: unable to enumerate USB device [ 35.458271][ T409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.467148][ T409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.475937][ T311] usb 1-1: USB disconnect, device number 5 [ 35.519033][ T45] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 35.539995][ T45] usb 2-1: device descriptor read/8, error -71 [ 35.669991][ T45] usb 2-1: device descriptor read/8, error -71 [ 35.779097][ T45] usb usb2-port1: unable to enumerate USB device [ 35.877929][ T417] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 35.887267][ T417] Zero length message leads to an empty skb [ 35.956910][ T421] SELinux: failed to load policy [ 36.019889][ T425] overlayfs: statfs failed on './file0' [ 36.026203][ T425] overlayfs: conflicting options: userxattr,redirect_dir=on [ 36.301648][ T439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'. [ 36.369027][ T45] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 36.469022][ T311] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 36.528172][ T446] netlink: 20 bytes leftover after parsing attributes in process `syz.0.41'. [ 36.530078][ T45] usb 4-1: config 2 has an invalid interface number: 36 but max is 0 [ 36.537098][ T446] netlink: 32 bytes leftover after parsing attributes in process `syz.0.41'. [ 36.545128][ T45] usb 4-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 36.557880][ T446] netlink: 'syz.0.41': attribute type 16 has an invalid length. [ 36.562564][ T45] usb 4-1: config 2 has no interface number 0 [ 36.571087][ T446] netlink: 'syz.0.41': attribute type 25 has an invalid length. [ 36.576333][ T45] usb 4-1: config 2 interface 36 has no altsetting 0 [ 36.583943][ T446] netlink: 64094 bytes leftover after parsing attributes in process `syz.0.41'. [ 36.592398][ T45] usb 4-1: New USB device found, idVendor=1bc7, idProduct=3000, bcdDevice=69.9a [ 36.608774][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.616794][ T45] usb 4-1: Product: syz [ 36.620998][ T45] usb 4-1: Manufacturer: syz [ 36.625578][ T45] usb 4-1: SerialNumber: syz [ 36.629014][ T311] usb 3-1: Using ep0 maxpacket: 8 [ 36.636814][ T311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 36.645421][ T311] usb 3-1: config 252 has an invalid interface number: 50 but max is 0 [ 36.653836][ T311] usb 3-1: config 252 has no interface number 0 [ 36.662012][ T311] usb 3-1: New USB device found, idVendor=0408, idProduct=4033, bcdDevice=5d.62 [ 36.669116][ T446] 9pnet_fd: Insufficient options for proto=fd [ 36.671320][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.685162][ T311] usb 3-1: Product: љ [ 36.689257][ T311] usb 3-1: Manufacturer: з [ 36.693753][ T311] usb 3-1: SerialNumber: 㐂 [ 36.699015][ T10] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 36.743622][ T449] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.837274][ T45] cdc_acm 4-1:2.36: More than one union descriptor, skipping ... [ 36.845542][ T45] cdc_acm 4-1:2.36: skipping garbage [ 36.861138][ T45] usb 4-1: USB disconnect, device number 7 [ 36.861786][ T10] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 36.874974][ T10] usb 2-1: can't read configurations, error -22 [ 37.027657][ T10] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 37.108943][ T311] usb 3-1: Found UVC 0.00 device љ (0408:4033) [ 37.116752][ T311] usb 3-1: Forcing UVC version to 1.0a [ 37.122599][ T311] usb 3-1: No valid video chain found. [ 37.129672][ T311] usb 3-1: USB disconnect, device number 10 [ 37.200367][ T10] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 37.208297][ T10] usb 2-1: can't read configurations, error -22 [ 37.214752][ T10] usb usb2-port1: attempt power cycle [ 37.329033][ T310] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 37.459020][ T310] usb 1-1: device descriptor read/64, error -71 [ 37.559020][ T10] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 37.580702][ T10] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 37.588639][ T10] usb 2-1: can't read configurations, error -22 [ 37.609012][ T45] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 37.678805][ T478] cgroup: Unknown subsys name 'measure' [ 37.709067][ T310] usb 1-1: device descriptor read/64, error -71 [ 37.719020][ T10] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 37.739021][ T45] usb 4-1: device descriptor read/64, error -71 [ 37.740768][ T10] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 37.753303][ T10] usb 2-1: can't read configurations, error -22 [ 37.762740][ T10] usb usb2-port1: unable to enumerate USB device [ 37.774062][ T36] kauditd_printk_skb: 362 callbacks suppressed [ 37.774078][ T36] audit: type=1400 audit(1785656567.259:1985): avc: denied { ioctl } for pid=483 comm="syz.2.51" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x5462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.805904][ T36] audit: type=1400 audit(1785656567.269:1986): avc: denied { mount } for pid=483 comm="syz.2.51" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 37.828000][ T36] audit: type=1400 audit(1785656567.269:1987): avc: denied { search } for pid=483 comm="syz.2.51" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 37.849644][ T36] audit: type=1400 audit(1785656567.269:1988): avc: denied { write } for pid=483 comm="syz.2.51" name="instances" dev="tracefs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 37.872360][ T36] audit: type=1400 audit(1785656567.269:1989): avc: denied { add_name } for pid=483 comm="syz.2.51" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 37.892699][ T36] audit: type=1400 audit(1785656567.269:1990): avc: denied { create } for pid=483 comm="syz.2.51" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 37.912629][ T36] audit: type=1400 audit(1785656567.289:1991): avc: denied { write } for pid=483 comm="syz.2.51" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 37.936416][ T36] audit: type=1400 audit(1785656567.289:1992): avc: denied { open } for pid=483 comm="syz.2.51" path="/10/tracing/events/irq_vectors/local_timer_exit/enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 37.949037][ T310] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 37.963199][ T36] audit: type=1400 audit(1785656567.409:1993): avc: denied { getopt } for pid=483 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.029030][ T45] usb 4-1: device descriptor read/64, error -71 [ 38.099024][ T310] usb 1-1: device descriptor read/64, error -71 [ 38.269034][ T45] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 38.339039][ T310] usb 1-1: device descriptor read/64, error -71 [ 38.399025][ T45] usb 4-1: device descriptor read/64, error -71 [ 38.449153][ T310] usb usb1-port1: attempt power cycle [ 38.514821][ T36] audit: type=1400 audit(1785656568.009:1994): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 38.639037][ T45] usb 4-1: device descriptor read/64, error -71 [ 38.749098][ T45] usb usb4-port1: attempt power cycle [ 38.789033][ T310] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 38.809985][ T310] usb 1-1: device descriptor read/8, error -71 [ 38.940059][ T310] usb 1-1: device descriptor read/8, error -71 [ 39.089028][ T45] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 39.120166][ T45] usb 4-1: device descriptor read/8, error -71 [ 39.179050][ T310] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 39.200017][ T310] usb 1-1: device descriptor read/8, error -71 [ 39.250019][ T45] usb 4-1: device descriptor read/8, error -71 [ 39.330066][ T310] usb 1-1: device descriptor read/8, error -71 [ 39.407761][ T495] rust_binder: Write failure EFAULT in pid:13 [ 39.440669][ T310] usb usb1-port1: unable to enumerate USB device [ 39.489032][ T45] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 39.510126][ T45] usb 4-1: device descriptor read/8, error -71 [ 39.639992][ T45] usb 4-1: device descriptor read/8, error -71 [ 39.719034][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 39.726650][ T311] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 39.749132][ T45] usb usb4-port1: unable to enumerate USB device [ 39.879020][ T311] usb 2-1: Using ep0 maxpacket: 8 [ 39.884116][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 39.890522][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 39.900656][ T311] usb 2-1: unable to get BOS descriptor or descriptor too short [ 39.908353][ T10] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d1 [ 39.917421][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.925812][ T311] usb 2-1: config 252 has an invalid interface number: 50 but max is 0 [ 39.934106][ T311] usb 2-1: config 252 has no interface number 0 [ 39.940592][ T10] usb 3-1: config 0 descriptor?? [ 39.948275][ T311] usb 2-1: New USB device found, idVendor=0408, idProduct=4033, bcdDevice=5d.62 [ 39.957520][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.965528][ T311] usb 2-1: Product: syz [ 39.969702][ T311] usb 2-1: Manufacturer: syz [ 39.974275][ T311] usb 2-1: SerialNumber: syz [ 40.183058][ T311] usb 2-1: Found UVC 0.00 device syz (0408:4033) [ 40.189479][ T311] usb 2-1: Forcing UVC version to 1.0a [ 40.195016][ T311] usb 2-1: No valid video chain found. [ 40.201740][ T311] usb 2-1: USB disconnect, device number 11 [ 40.215980][ T397] udevd[397]: setting mode of /dev/bus/usb/002/011 to 020664 failed: No such file or directory [ 40.226499][ T397] udevd[397]: setting owner of /dev/bus/usb/002/011 to uid=0, gid=0 failed: No such file or directory [ 40.304872][ T45] usb 3-1: USB disconnect, device number 11 [ 40.383786][ T517] binder: Unknown parameter 'context' [ 40.533338][ T526] netlink: 'syz.0.61': attribute type 5 has an invalid length. [ 40.540956][ T526] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.61'. [ 40.726569][ T530] loop7: detected capacity change from 0 to 7 [ 40.769057][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 40.799576][ T397] Buffer I/O error on dev loop7, logical block 0, async page read [ 40.807901][ T397] Buffer I/O error on dev loop7, logical block 0, async page read [ 40.825439][ T397] Buffer I/O error on dev loop7, logical block 0, async page read [ 40.835738][ T397] Buffer I/O error on dev loop7, logical block 0, async page read [ 40.845377][ T397] Buffer I/O error on dev loop7, logical block 0, async page read [ 40.852242][ T534] kvm: user requested TSC rate below hardware speed [ 40.920296][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 40.929892][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.940693][ T10] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 40.952007][ T10] usb 4-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 40.961243][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.969274][ T10] usb 4-1: Product: syz [ 40.973509][ T10] usb 4-1: Manufacturer: syz [ 40.978100][ T10] usb 4-1: SerialNumber: syz [ 41.120448][ T45] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 41.167655][ T547] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 41.187317][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 41.198139][ T10] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 41.216942][ T10] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 41.229564][ T10] usb 4-1: USB disconnect, device number 12 [ 41.244139][ T411] udevd[411]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.289998][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 41.303868][ T45] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 41.313098][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.321462][ T45] usb 2-1: Product: syz [ 41.326836][ T45] usb 2-1: Manufacturer: syz [ 41.331820][ T45] usb 2-1: SerialNumber: syz [ 41.337159][ T45] usb 2-1: config 0 descriptor?? [ 41.343230][ T45] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 41.354437][ T45] usb 2-1: No valid video chain found. [ 41.469032][ T403] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 41.599035][ T359] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 41.620286][ T403] usb 3-1: unable to get BOS descriptor or descriptor too short [ 41.628718][ T403] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.638923][ T403] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 41.649167][ T403] usb 3-1: New USB device found, idVendor=1235, idProduct=8216, bcdDevice= 0.40 [ 41.658189][ T403] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.666253][ T403] usb 3-1: Product: syz [ 41.670435][ T403] usb 3-1: Manufacturer: syz [ 41.675039][ T403] usb 3-1: SerialNumber: syz [ 41.749472][ T359] usb 1-1: Using ep0 maxpacket: 8 [ 41.753296][ T557] overlayfs: failed to resolve './file0/file1': -2 [ 41.756867][ T359] usb 1-1: unable to get BOS descriptor or descriptor too short [ 41.772554][ T359] usb 1-1: config index 0 descriptor too short (expected 65514, got 27) [ 41.788100][ T359] usb 1-1: config 252 has an invalid interface number: 6 but max is 0 [ 41.796553][ T359] usb 1-1: config 252 has no interface number 0 [ 41.803621][ T359] usb 1-1: config 252 interface 6 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 41.816501][ T359] usb 1-1: string descriptor 0 read error: -22 [ 41.822761][ T359] usb 1-1: New USB device found, idVendor=0af0, idProduct=6300, bcdDevice=dc.72 [ 41.831802][ T359] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.881275][ T549] x_tables: unsorted underflow at hook 3 [ 41.888308][ T549] dummy_hcd dummy_hcd.0: remove, state 1 [ 41.894022][ T549] usb usb1: USB disconnect, device number 1 [ 41.899948][ T549] usb 1-1: USB disconnect, device number 10 [ 41.911148][ T549] dummy_hcd dummy_hcd.0: stopped [ 41.916460][ T549] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 41.927433][ T403] usb 3-1: Focusrite Vocaster Mixer Driver enabled (pid=0x8216); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 41.941996][ T403] usb 3-1: Error initialising Vocaster Mixer Driver: -22 [ 41.950456][ T403] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 41.961659][ T403] usb 3-1: USB disconnect, device number 12 [ 41.971966][ T397] udevd[397]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.029033][ T311] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 42.043357][ T553] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 42.055965][ T553] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 42.064367][ T553] CPU: 1 UID: 0 PID: 553 Comm: syz.0.73 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 42.075630][ T553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.085672][ T553] RIP: 0010:set_link_state+0x2a/0x1240 [ 42.091137][ T553] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 9d 00 ce fd 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 78 c3 26 fe 4d 8b 75 00 49 8d 95 93 [ 42.110736][ T553] RSP: 0018:ffffc9000dc07ad8 EFLAGS: 00010046 [ 42.116990][ T553] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88811e341300 [ 42.124972][ T553] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.132929][ T553] RBP: ffffc9000dc07b60 R08: 0000000000000003 R09: 0000000000000004 [ 42.140891][ T553] R10: dffffc0000000000 R11: fffff52001b80f58 R12: 0000000000000000 [ 42.148853][ T553] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8881053bc000 [ 42.156815][ T553] FS: 000055556e9c5500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 42.159037][ T311] usb 4-1: device descriptor read/64, error -71 [ 42.165817][ T553] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.165836][ T553] CR2: 000000110c34fd04 CR3: 000000011e9b2000 CR4: 00000000003526b0 [ 42.165852][ T553] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.165863][ T553] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 42.202475][ T553] Call Trace: [ 42.205772][ T553] [ 42.208692][ T553] ? __kasan_check_write+0x18/0x20 [ 42.213788][ T553] dummy_pullup+0xd1/0x130 [ 42.218193][ T553] ? __cfi_dummy_pullup+0x10/0x10 [ 42.223201][ T553] usb_gadget_disconnect_locked+0x151/0x400 [ 42.229108][ T553] gadget_unbind_driver+0xaf/0x3f0 [ 42.234212][ T553] ? __cfi_gadget_unbind_driver+0x10/0x10 [ 42.239925][ T553] device_release_driver_internal+0x4ad/0x830 [ 42.245977][ T553] driver_detach+0x1f5/0x2d0 [ 42.250549][ T553] bus_remove_driver+0x254/0x2b0 [ 42.255472][ T553] driver_unregister+0x79/0xb0 [ 42.260215][ T553] usb_gadget_unregister_driver+0x52/0x80 [ 42.265921][ T553] raw_release+0xdb/0x280 [ 42.270248][ T553] ? __cfi_raw_release+0x10/0x10 [ 42.275185][ T553] __fput+0x208/0xa30 [ 42.279154][ T553] ____fput+0x20/0x30 [ 42.283141][ T553] task_work_run+0x1e8/0x260 [ 42.287723][ T553] ? __cfi_task_work_run+0x10/0x10 [ 42.292820][ T553] ? __kasan_check_read+0x15/0x20 [ 42.297825][ T553] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 42.303876][ T553] resume_user_mode_work+0x35/0x50 [ 42.308970][ T553] syscall_exit_to_user_mode+0x63/0xb0 [ 42.314456][ T553] do_syscall_64+0x63/0xf0 [ 42.318861][ T553] ? clear_bhb_loop+0x50/0xa0 [ 42.323539][ T553] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.329434][ T553] RIP: 0033:0x7f0df159e019 [ 42.333846][ T553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.353449][ T553] RSP: 002b:00007fffe3f2b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 42.361869][ T553] RAX: 0000000000000000 RBX: 00007fffe3f2b110 RCX: 00007f0df159e019 [ 42.369951][ T553] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 42.377934][ T553] RBP: 000000000000a176 R08: 0000000000000001 R09: 0000000000000000 [ 42.385901][ T553] R10: 0000001b2e120000 R11: 0000000000000246 R12: 00007fffe3f2b150 [ 42.393872][ T553] R13: 00007f0df1825fac R14: 000000000000ad62 R15: 00007f0df1825fa0 [ 42.401839][ T553] [ 42.404853][ T553] Modules linked in: [ 42.408753][ T553] ---[ end trace 0000000000000000 ]--- [ 42.409072][ T311] usb 4-1: device descriptor read/64, error -71 [ 42.414204][ T553] RIP: 0010:set_link_state+0x2a/0x1240 [ 42.425892][ T553] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 9d 00 ce fd 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 78 c3 26 fe 4d 8b 75 00 49 8d 95 93 [ 42.445485][ T553] RSP: 0018:ffffc9000dc07ad8 EFLAGS: 00010046 [ 42.451539][ T553] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88811e341300 [ 42.459584][ T553] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.467563][ T553] RBP: ffffc9000dc07b60 R08: 0000000000000003 R09: 0000000000000004 [ 42.475551][ T553] R10: dffffc0000000000 R11: fffff52001b80f58 R12: 0000000000000000 [ 42.483507][ T553] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8881053bc000 [ 42.491493][ T553] FS: 000055556e9c5500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 42.500414][ T553] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.507153][ T553] CR2: 000000110c34fd04 CR3: 000000011e9b2000 CR4: 00000000003526b0 [ 42.515109][ T553] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.523085][ T553] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 42.531048][ T553] Kernel panic - not syncing: Fatal exception [ 42.537342][ T553] Kernel Offset: disabled [ 42.541657][ T553] Rebooting in 86400 seconds..