last executing test programs: 5m44.30831429s ago: executing program 32 (id=955): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000600)={0x14, 0x1, 0x2, 0x5, 0x0, 0x0, {0x7254fe0f887874c6, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 5m44.279177321s ago: executing program 33 (id=956): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x222a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x9, 0x40, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) 5m42.921082825s ago: executing program 4 (id=971): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x40, 0x10a) write(r0, &(0x7f0000000000)='3', 0x4e) prctl$PR_SET_KEEPCAPS(0x8, 0x1) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d0001010080320904000002030000000921110100012223000905810340000a0000090502"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x1, 0x0) write$make_it_fail(r2, &(0x7f0000000140)='0\x00', 0x2) write(r2, &(0x7f0000000080)='8', 0x1) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], 0x0}, 0x0) 5m41.296929096s ago: executing program 4 (id=996): r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000401, r1, &(0x7f0000000180)) sendmsg(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000001c0)=@in6={0xa, 0x4e23, 0x200, @private1, 0x7}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000240)="c32b5bd2ce6e0111e702ed4ee4aeb16bbe5b731659e8fa91c2ec6a2d481c25d119e783b3f0bdc0c9706fa8b3725829dc2847af16ed", 0x35}, {&(0x7f0000000280)="bd150183a13ed01a92e40758311dac3512ebe267b7fa9f155bff11ab5fa45d389fe48cdcbd9afd2a45f08308", 0x2c}, {&(0x7f00000002c0)="29b1895ce6b4c301ae1e0173803590e995d669e010712c0ae7db24832e1cf459a6f5c2e4559fcb5c834a3473b0a2bd2f0dc2a6a9754bbb29ceb7d512064f1b3ee2ab79d0c285094791cf1c585d24bfe1bc533acca76a98341c2134abe9bfb25480b8cf512ad638f56fabff8722043760a64c6322408a2c12746a513187415df78b9bfa5071700f9a4c4f9377385bfa550f559b7f1757ed31eeaf9bd1e36b9f96d32c57b9a5a73f77c6032c47781730940bbe8492f4bf3962edbaeeb5ebe36ebe8ea4ea1cefd158cc5fdfdc65bf8ec5716809872c877bd4", 0xd7}, {&(0x7f00000003c0)="f56ca4bddfbf5080083d8e8af96b7c2ae68b1b93336e05dc52853431f8b13757e124d41a23063d3124c531a937019a2e3784deebc61974149422d515b0d45250d0d73b63da3aedcd92c6cc853b14c9fdf680e68e20ef586b8d9fe55edc8b30ac1b0571e9ceb423ec2190b764486d87210c0e39bd1f696801513629e8c610987a8940e9990f91cd192641baaf889ccc64f5c50782e378ba68fc8c7fafed4c19d4ef004c37f434f2b89d5a", 0xaa}, {&(0x7f0000000480)="fd80681a0f", 0x5}, {&(0x7f00000004c0)="55d05f3cd47480c7e48643bf3471dd98d04f7bbb40992f330d6139e7806edd18ddd86c0629019a174fa39b21f9de36a3144071be59570e31eb2cf1c9dda208e1d59a900d1fc205", 0x47}], 0x6, &(0x7f00000005c0)=[{0xb8, 0x114, 0x1ff, "9e47d746cc8361b2643e350b4ea6ecfea7da2e2fa886b8598a95445508caa16ae3e3637092caf87dbd15b4c9299c510e4ecf091a82b2eb749bac908ae4bc47952e3e8cfc9900e6c5f91a06f702cf15670a5556a6ad054fb2043b5602434ef557e0fef2e730bdc664164606540878fd4d516273b278a515007b95481af25e37ebece9742f99ed0a757a83a46737fa37b2e7ba6f78f1e824e1fbdb8a6d7c4d522c4a0c"}, {0x108, 0x113, 0x2, "986113a507f6d3b5567a205eac6a2a004a30fe5a7ec859b4a29c1d5831bf54248a4762aa32644f2e95e4d14021319895a7bd30003a8f86fba32343fe15964a61a394ffe38420a6567e23501effff6c7194e17f8fd29ffd40bf55408cf3cfc35aa25e87e390cf3587e19e67cd52fb116262074c943d1fa1315ceffed08a1ea103da9abf60a345d01d5f48b5dbeb7ba458b3458c22671b2ee9f7e872793a0d1499121144c36adeab36f206a4a4a5b86b8700405ea06076d1808d3921e3e572403254c982264f913649c85492e1871d843878cdaaa78552fda2eafc8301c7950a5daf15344c9bc03bc5ff71296e50b47072fafdc6bceefb83"}, {0x110, 0x108, 0x4, "1c33b108d53d1cb253b98971bf8aee18281978ee747df5c165b4de7e16d32b518159e6208e60d33de286b768c28c6e4acb011233cf30b4245aec54239aeb0192343ce0ed87a85aeaa3707af24a8802fefde0cbe881a10e708db47c6655d0ccae69550057b6254100f4c71d24c41e3e16e3f7b6179e306e6e620c44e52fd37d688c09e7ab8dc33d5356cd34739f5e12c233f1cd928f72c2e73ceabebcc1163466d20891d458470cf128e1eb2d3f14f3099eb3e20a412478ba53b909e2dac3b92dec3e057a8fa579064593ab7929c848fdf5336509b302c814c1d14ff63ce6add4cadcf9768f6d7f55d5711fad571fee1af6aa628b28bdd5c6e63623"}], 0x2d0}, 0x40000) stat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000009c0)=@kern={0x10, 0x0, 0x0, 0x400}, 0xc) stat(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000ac0)) write(r2, &(0x7f0000000b00)="58003a0d2ac368827de8cca248229d483be72fae08684ee46186ec5d1ef6a28a467ae1f341206412a3e8c2bc36f88991ec61e690551afcacc3d3c8b06ac8de1d4cf8dc79e8a88678", 0x48) pipe2$9p(&(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) write$P9_RREADDIR(r4, &(0x7f0000000bc0)={0x122, 0x29, 0x2, {0x8000, [{{0x0, 0x1, 0x7}, 0x7, 0x8, 0x7, './file0'}, {{0x8, 0x3, 0x2}, 0x5, 0x0, 0x7, './file0'}, {{0x20, 0x2, 0x3}, 0x0, 0x3, 0x7, './file0'}, {{0x2, 0x0, 0x2}, 0x2, 0x80, 0x7, './file0'}, {{0x1, 0x3, 0x1}, 0xffffffffffff70fa, 0x0, 0x7, './file0'}, {{0x8, 0x0, 0x8}, 0xf76, 0xa, 0x7, './file0'}, {{0x0, 0x1, 0x7}, 0x8, 0x7, 0x7, './file0'}, {{0x4, 0x3, 0x2}, 0x40, 0x40, 0x7, './file0'}, {{0x2, 0x0, 0x6}, 0x74, 0x5, 0x7, './file0'}]}}, 0x122) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000d00)={0x73622a85, 0x0, 0x3}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x12) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x24, r5, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40895) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000e80), r6) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000ec0)={0x0, 0x4, 0x4}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f00000012c0)={r7, 0x5, 0x6}) ioctl$XFS_IOC_GET_RESBLKS(r4, 0x80105873, &(0x7f00000016c0)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r8, &(0x7f00000018c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001780)={0xf8, r9, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:getty_log_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:inetd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:usb_device_t:s0\x00'}]}, 0xf8}}, 0xc004) openat$kvm(0xffffffffffffff9c, &(0x7f0000001900), 0x4880, 0x0) r10 = add_key$keyring(&(0x7f0000001a80), &(0x7f0000001ac0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000001940)='rxrpc_s\x00', &(0x7f0000001980)={'syz', 0x2}, &(0x7f00000019c0)="608a1009865f1cc8bca19c35cc8f6e27e51057d473540f3b454921bca0d6eea4ca578cfddc9639b3f63db3e86cad1ba0ca420cd11b3f03570322b9b9daf7e9055a8cbdf2465707be2b5c3dec42076aa48b1ca5bb25d57992a04fc787667ba7ce5f3ceb1ab7489d36904fd1ead8d5b257d5e7a22adb51d199793be74676b4a02b47fd0a15db31634e872ecf76b4f598ffa7bbab3cd06abc0edaf0d9031c7b886c1d08d4b2feabfc6fe61fde54f0c846a97751019a338ae2eaa7c3", 0xba, r10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), r6) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x2c, r11, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0xa, 0xa, "ad1ad5d9276a"}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) 5m41.279291716s ago: executing program 4 (id=997): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='0', 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, 0x0, &(0x7f00000000c0)) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r2) syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc02010111240201010200000000000000000200000924030201016a4c"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 5m40.099583566s ago: executing program 4 (id=1000): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = gettid() r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r3, 0x2400000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22']) r4 = openat(r0, &(0x7f0000000080)='./sys/bus/pci/drivers/virtio-pci/new_id\x00', 0x1, 0xe1e65c125bd04593) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201010200000040f003040040000102030109021b00010100120e090423c8f36a2306556700000207019ca8b01729d0a0656cb00f"], &(0x7f00000010c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x2, 0x6, 0x3, 0x8, 0x9}, 0x124, &(0x7f0000001240)={0x5, 0xf, 0x124, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x9, 0xfffe}, @ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x9, 0xf00, 0x17}, @generic={0xf0, 0x10, 0x1, "61d9e784d4398e6fa6df24b054d315e6b53f7469930915b5ac8436b42703379915a4bdc732f61b914bcd79fabe4647521f10f2d477b7331ce72a6da00b92f006c6968de0079e4de6515180679a6c840a6be8cfbdbd8f9c61f77d4181e5677d9baf53ed036ed15d6ee2e6b9f9d9bad6d5543b9dbd6d403829795b15ed1f265a6125e5d2ea7e31c550a30cb393ac8476698859db331e1fdba5ace4a03ddf15e2ea343e9125734dc622c132777f58f51b488d726cb7b70cefcb3dd3807195b3d8d403f7a3f914787c04de8ce29fad9e7c613f8b2ae6800be23122a25710f63e31c8dd685f18ae0f514b4148fb2028"}, @ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x81, 0x0, 0x1000, [0xc000, 0xc0, 0x0, 0xff000f]}]}, 0x6, [{0x2, &(0x7f0000000380)=@string={0x2}}, {0x8b, &(0x7f0000000800)=@string={0x8b, 0x3, "410e1265bc2bd298ac0488e2300393614c3a4fa26b6a9993242d7503a78c359861964bb378057008a395e20309680c7102ba27814d457d13ee9280c551492b696c5fddc0a542d684dd674d2f6cb7187028b282cd38f4e42e1a30084d46c214f9f4c94937a44f745a8e6d6f57ceb3a8a3d2e9cf42dead1b4b32a679d82999d64a07feaa3e8a9609e0c2"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x1401}}, {0xf8, &(0x7f0000000ec0)=@string={0xf8, 0x3, "17c6cd837b57556c857d5893785f820c9db734b49e127bb2bb4d6b9e80b6ba28c4feec84ca1e958de67ddbd7996f8ba5c896ec18dcfce88a67bb1c13fdd4328f43d45cd7cca1d452f7f9b04305cbd31f8a88cf0a76d66ecfa3ffa751b72d8c057b4be32e5fc1da30f31a04b32e60ad682aa256b213db27063d50ecf9edcfb606ab34183b97f49c76d93efbce9dba02edaeec658073b96c9a24bb5a582a205c77aac8b948dc75040bcfdc2ed17c313bf2c919daf607f39c637b6f0b72bcd14323af9f4f7daaece8e0e69fb463628539ad200f13dd4ff40593163088f5cfdcf5faf27ac3b6836661618530395cef9c309a2414877d87d9"}}, {0xc4, &(0x7f0000000fc0)=ANY=[@ANYBLOB="c40370500285e2390a5a4daadbe97d22e25d78ebb35665d68631d52164460b0c078207408e90d1309a8d61046f156396d03e3000000000000053093e0e4e19c780c011245fa694b4f57a32f9f0946e69e66717d8537ac5b64dcffcd73c25a479719cebc75a355d57fab1d5224aa8c723cb3644294b8d786fea813f5c4dae4e893b8f8d35c96c8fab55f29a0c575bb4f99434cf4b8837da7674bf1223cfa25f158fec957e0882ac6ede848be18000000065d1d1b5d6ad72a1ec1be17ba52e"]}]}) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x0, 0x2, 0x10, 0x1a, 0x1, 0x9}, {0x9, 0x5, 0x80, 0x2, 0x200, 0x4, 0x80, 0x7}, {0x9, 0x5, 0x8, 0x3, 0x200, 0x3, 0x9}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r6, &(0x7f0000000540)={0x14, &(0x7f0000000240)={0x40, 0x31, 0xda, {0xda, 0x0, "625935442a2c438144e1092e164a53ec0898a2fce5f1e4261dd9231d75b157ea8d6a23b266429f061547dd53949dd1b31bb7af9b48f67c916cd54d02a3d40e252e2a1fe048abd775ab08cbfb058944c3313c9c2c2b77c0f24bf5964b0987405eba084a2ecd5eefc524784b76d7eb73057059b0f0ae8b5f647361b6823e89c07b071e81b5e96784df5d43223de0753e9da0efb9ed5ef63f5cc8f1b09508b5107518130abcf1327806cae91465920aba613f949d771c62eb5207c8ca2a09a2a5fe81bd22addf7c11485553e17d5194b29334da62ce749da6f3"}}, &(0x7f0000000440)=ANY=[@ANYBLOB="0003b7000000b70312d9122d11fe165c82a8cd29695f12445580bcbc0f9ccb795a5c170ab15222d63242ecf6d54c8ae9af5f37ca1abdc9d8c22f8b093839042b48b2fe011d0c8e59d2cf818af4aedf445047cbf5250f3fafc01e5f618386fc0535f33b2303ca4a3a1a8b43a7437e39fd4902426cccfaae7f18ba93115d4132ca2912b65eb7f6742b31c49c3595d9f9c8e5bd77b37a94c731d7dde0e8cb20ff21f47b947df07fbc9c6d5b8e08eabbb191c4b8f8f918cf6626cc69cff85a"]}, &(0x7f0000000e40)={0x1c, &(0x7f0000001140)=ANY=[@ANYBLOB="2016900000009d1eb891a1efcb72307ae1f302b6ac585df1a6b1af2c75d1ee2cf2b1f79729962c0a32a2ae62c2a7cc6399016a48e9b3ac018f914d597dac599af4c8b5ade445f87e955f8a9588166d800a3f04403e3b798bc66ca0233ea3bc23e739cab057bc5619941fd4f4134c7046262fc4794ab89f3b56a327c4124f56b26c27772acd05f4e66f0b93bfc1080c702b56cc4ea968cc06dfa2e3def627378351094df686b3afb0c89b4975b18a4d478f35f8fd7371d7fdfbe2cf27852088e3d276b76fde2eb15f765eb3e6f3389699005bf7f52d6a07acac69fbb3ad95bcd892418f09cb812a2fa43affac4b2e20bed52595"], &(0x7f00000009c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000e00)={0x21, 0x0, 0x4, "42e827eb"}}) write$P9_RGETATTR(r4, &(0x7f0000000900)={0xa0, 0x19, 0x2, {0x429c2901309946c9, {0x10, 0x2, 0x2}, 0xb2, 0x0, 0x0, 0x80, 0x1c6, 0x3, 0x1002, 0x3, 0x3, 0x401, 0x7, 0x5, 0xb5, 0xfffffffffffffffe, 0xa, 0xb5, 0x2}}, 0xa0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000080), 0x7) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) 5m25.067356734s ago: executing program 34 (id=1000): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = gettid() r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r3, 0x2400000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22']) r4 = openat(r0, &(0x7f0000000080)='./sys/bus/pci/drivers/virtio-pci/new_id\x00', 0x1, 0xe1e65c125bd04593) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201010200000040f003040040000102030109021b00010100120e090423c8f36a2306556700000207019ca8b01729d0a0656cb00f"], &(0x7f00000010c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x2, 0x6, 0x3, 0x8, 0x9}, 0x124, &(0x7f0000001240)={0x5, 0xf, 0x124, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x9, 0xfffe}, @ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x9, 0xf00, 0x17}, @generic={0xf0, 0x10, 0x1, "61d9e784d4398e6fa6df24b054d315e6b53f7469930915b5ac8436b42703379915a4bdc732f61b914bcd79fabe4647521f10f2d477b7331ce72a6da00b92f006c6968de0079e4de6515180679a6c840a6be8cfbdbd8f9c61f77d4181e5677d9baf53ed036ed15d6ee2e6b9f9d9bad6d5543b9dbd6d403829795b15ed1f265a6125e5d2ea7e31c550a30cb393ac8476698859db331e1fdba5ace4a03ddf15e2ea343e9125734dc622c132777f58f51b488d726cb7b70cefcb3dd3807195b3d8d403f7a3f914787c04de8ce29fad9e7c613f8b2ae6800be23122a25710f63e31c8dd685f18ae0f514b4148fb2028"}, @ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x81, 0x0, 0x1000, [0xc000, 0xc0, 0x0, 0xff000f]}]}, 0x6, [{0x2, &(0x7f0000000380)=@string={0x2}}, {0x8b, &(0x7f0000000800)=@string={0x8b, 0x3, "410e1265bc2bd298ac0488e2300393614c3a4fa26b6a9993242d7503a78c359861964bb378057008a395e20309680c7102ba27814d457d13ee9280c551492b696c5fddc0a542d684dd674d2f6cb7187028b282cd38f4e42e1a30084d46c214f9f4c94937a44f745a8e6d6f57ceb3a8a3d2e9cf42dead1b4b32a679d82999d64a07feaa3e8a9609e0c2"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x1401}}, {0xf8, &(0x7f0000000ec0)=@string={0xf8, 0x3, "17c6cd837b57556c857d5893785f820c9db734b49e127bb2bb4d6b9e80b6ba28c4feec84ca1e958de67ddbd7996f8ba5c896ec18dcfce88a67bb1c13fdd4328f43d45cd7cca1d452f7f9b04305cbd31f8a88cf0a76d66ecfa3ffa751b72d8c057b4be32e5fc1da30f31a04b32e60ad682aa256b213db27063d50ecf9edcfb606ab34183b97f49c76d93efbce9dba02edaeec658073b96c9a24bb5a582a205c77aac8b948dc75040bcfdc2ed17c313bf2c919daf607f39c637b6f0b72bcd14323af9f4f7daaece8e0e69fb463628539ad200f13dd4ff40593163088f5cfdcf5faf27ac3b6836661618530395cef9c309a2414877d87d9"}}, {0xc4, &(0x7f0000000fc0)=ANY=[@ANYBLOB="c40370500285e2390a5a4daadbe97d22e25d78ebb35665d68631d52164460b0c078207408e90d1309a8d61046f156396d03e3000000000000053093e0e4e19c780c011245fa694b4f57a32f9f0946e69e66717d8537ac5b64dcffcd73c25a479719cebc75a355d57fab1d5224aa8c723cb3644294b8d786fea813f5c4dae4e893b8f8d35c96c8fab55f29a0c575bb4f99434cf4b8837da7674bf1223cfa25f158fec957e0882ac6ede848be18000000065d1d1b5d6ad72a1ec1be17ba52e"]}]}) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x0, 0x2, 0x10, 0x1a, 0x1, 0x9}, {0x9, 0x5, 0x80, 0x2, 0x200, 0x4, 0x80, 0x7}, {0x9, 0x5, 0x8, 0x3, 0x200, 0x3, 0x9}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r6, &(0x7f0000000540)={0x14, &(0x7f0000000240)={0x40, 0x31, 0xda, {0xda, 0x0, "625935442a2c438144e1092e164a53ec0898a2fce5f1e4261dd9231d75b157ea8d6a23b266429f061547dd53949dd1b31bb7af9b48f67c916cd54d02a3d40e252e2a1fe048abd775ab08cbfb058944c3313c9c2c2b77c0f24bf5964b0987405eba084a2ecd5eefc524784b76d7eb73057059b0f0ae8b5f647361b6823e89c07b071e81b5e96784df5d43223de0753e9da0efb9ed5ef63f5cc8f1b09508b5107518130abcf1327806cae91465920aba613f949d771c62eb5207c8ca2a09a2a5fe81bd22addf7c11485553e17d5194b29334da62ce749da6f3"}}, &(0x7f0000000440)=ANY=[@ANYBLOB="0003b7000000b70312d9122d11fe165c82a8cd29695f12445580bcbc0f9ccb795a5c170ab15222d63242ecf6d54c8ae9af5f37ca1abdc9d8c22f8b093839042b48b2fe011d0c8e59d2cf818af4aedf445047cbf5250f3fafc01e5f618386fc0535f33b2303ca4a3a1a8b43a7437e39fd4902426cccfaae7f18ba93115d4132ca2912b65eb7f6742b31c49c3595d9f9c8e5bd77b37a94c731d7dde0e8cb20ff21f47b947df07fbc9c6d5b8e08eabbb191c4b8f8f918cf6626cc69cff85a"]}, &(0x7f0000000e40)={0x1c, &(0x7f0000001140)=ANY=[@ANYBLOB="2016900000009d1eb891a1efcb72307ae1f302b6ac585df1a6b1af2c75d1ee2cf2b1f79729962c0a32a2ae62c2a7cc6399016a48e9b3ac018f914d597dac599af4c8b5ade445f87e955f8a9588166d800a3f04403e3b798bc66ca0233ea3bc23e739cab057bc5619941fd4f4134c7046262fc4794ab89f3b56a327c4124f56b26c27772acd05f4e66f0b93bfc1080c702b56cc4ea968cc06dfa2e3def627378351094df686b3afb0c89b4975b18a4d478f35f8fd7371d7fdfbe2cf27852088e3d276b76fde2eb15f765eb3e6f3389699005bf7f52d6a07acac69fbb3ad95bcd892418f09cb812a2fa43affac4b2e20bed52595"], &(0x7f00000009c0)={0xa1, 0x1, 0x400, "9c21bab24b0d999a361f120f241586e582b0309e17c6ff9bdc0e1af9457dbf15dbfaf802bd590d50a419df00c0112bb8555e081e7976e328df301063bb1236c317c9c20705a4441c97a5d27f0a5aa36e03b0fa951e329805256289ab14cf7e016fc2e660642fdbc85fa941b5ebca2806967d86990454a20235dc8fac33dabbe5bd18b0bdbd26102cfd89f70a13653cd47e0e1b3af666786988e30b2e0685bb235139c2271b2d1a1b3ff30865bacb83457bb5de5c099dbc31a92aeb81e6e73882bd81d5e4df5f30a048b950b4548c96835ed29b446ea5374dcbd56bb8fcebb70c3b36e0655438105038661f49395c5d0483a3d65ba4aa94ea700cdd6039ce483d7f3165b4ea20c61cc4de27bb96693ce5481fca88dcb46cabdf8ba0cecc34b1515edd0c47a8c81821720f5107ef1bc94aff8b5930cdd816d72967486a0af94a2fe39d11062097837281b2ff3673fbc2f7e1762a458e02aa790fd2c8d5495495bdfa47573e135730e20868cf56a6c34f97bc03d444a297fa05db1507f9ab5ff65aca33b31b73fe1d87bfac8f0a40fb0b93c39d017bdebd4705a89106e78acf02a9300d1606f6a8f73d2181dc23fe6cac878c20321cb5e1e8ef4ed0b1a86fe01955f49f0d2a3310cc0f7c922d88a09f79d97288f3055fc1523257f412ada6fa3e46afd3a38a7160562fe4f46b98c32e8e656efedeacc9ed397b98221acc4ac9eeab5d004f2ff5987349975452d5dfce2dd3d30748d235f560cb5c031aa1475dd6dc0886c286abc3ee375c3648f7e860538545712a7d8dcef8dd9bbdc8f04246bef10e12dab0e239f68e01f66c3c517904ddeea5a61e774bed4fc02b1b577442e75e199c287653279de09921e2edeacf3a176d2ae56f0513f30cf1226115d366d92b91b405919dafe79f1eba16c80ad7184bb9d2522d915726fdb7d00f4b1c77be235c85a4072022d9deaa7a1011422d3e065a2aa235398ead1d9fab2df1f37d6e1b4a7280964c91a948988f869c7397e6b0d37a38127ed61302ec0c3e61635b8536f22245b12b6fed50bc4eff2512e2cfbd54cb0e9af0e9c9df12f023721e7e52df9e3125f9d9e309796fa188d597cd0f69603c5d58ccb2ca1c7482d538bd1751ea54a8eb27316595a985acb76e2edee034aea4ca302be310ba0cc7ef44e29f6c8fbc26d77fb69e1f3044ba06024da04a4294e46d7e5a7623679adf57a60a99b7840f535a903f3d68b12ee8e6b1c0b1272f7ee324042bbfd37c6c3af0af219c2098f57a718e381e34661c422950309cb0d8b6ebe5d36ab4861006672520c25406fce9cbd972c415c9a8afb7078347df6ea09987ca3209ca9ce8b173505965d7ea384db269b68d6970b6856f01d3b543142a1e1eb6232d4796855da08932fc69f2b1e48695ac109b5dd3ae7c167f5c6eee48d4f39e236e737595e2c3358af5158cff"}, &(0x7f0000000e00)={0x21, 0x0, 0x4, "42e827eb"}}) write$P9_RGETATTR(r4, &(0x7f0000000900)={0xa0, 0x19, 0x2, {0x429c2901309946c9, {0x10, 0x2, 0x2}, 0xb2, 0x0, 0x0, 0x80, 0x1c6, 0x3, 0x1002, 0x3, 0x3, 0x401, 0x7, 0x5, 0xb5, 0xfffffffffffffffe, 0xa, 0xb5, 0x2}}, 0xa0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000080), 0x7) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) 5m17.093247405s ago: executing program 1 (id=1198): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) (async) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) write(r1, &(0x7f0000001240)="62f5ff6ccf3d2ec97f0e4bc8a900d2e75067a5109d749cdf1ba00926335fdca4d2df9c6093533dbe86131af765f8be39df30e3e4f257006bf1826c92170c0a", 0x3f) (async) write$P9_RWRITE(r1, 0x0, 0x0) 5m17.031194016s ago: executing program 1 (id=1199): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="64000000100001060000000000000000000000003f000000000000000000000010000300766574683000000000007fff100012000800010076657468180002000a000100000002000000000d05e2cf6c50a3070010000300766574683100000000000000", 0x64}], 0x1}, 0x0) 5m16.966707798s ago: executing program 1 (id=1200): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wg1\x00', &(0x7f0000000380)=@ethtool_rx_ntuple={0x35, {0x3, @tcp_ip4_spec={@empty, @multicast1, 0x4e22, 0x4e20, 0x28}, @tcp_ip4_spec={@private=0xa010102, @multicast2, 0x4e22, 0x4e24, 0x3}, 0x2, 0x7fff, 0x8, 0x10000, 0xfffffffffffffffe}}}) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5005, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x7e, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=0x0]) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="4d01", 0x2, 0x4000085, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r2, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16]) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000040)=""/95) syz_usb_connect$uac2(0x3, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000403512018240000102030109027a00030100f003080b0002010920060904000000010120000924"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 5m16.389156323s ago: executing program 1 (id=1208): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="64000000100001060000000000000000000000003f00000000000000000000001000030076657468300000000000ffff100012000800010076657468180002000a000100000002000000000d05e2cf6c50a3070010000300766574683100000000000000", 0x64}], 0x1}, 0x0) 5m16.377349033s ago: executing program 1 (id=1210): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x4, 0x0, 0x4a}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x29}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48841}, 0x3004c020) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2], 0x1c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f0000000140)=ANY=[@ANYBLOB='fd}', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$P9_RLERRORu(r3, &(0x7f0000000140)=ANY=[], 0xd) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000000)={0x0}) syz_open_procfs(r5, &(0x7f00000000c0)='net/arp\x00') connect$bt_l2cap(r4, &(0x7f0000000b80)={0x1f, 0x0, @none, 0x100, 0x2}, 0xe) syz_usb_connect$uac3(0x3, 0xed, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040820582054000010203010902db000301008032080b0003010020000904000000010120000a2401003d00000000000c240b03030000000000000014240201010200030000000000000000000000001324030201030001"], 0x0) 5m15.793744158s ago: executing program 1 (id=1214): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="38010000100001000000000000000000fc010000000000000000000000000001fc0100000000000000000000000000014e2000004e2000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000032320004d26c000000fc01000000000000000000000000000100000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000300"], 0x138}}, 0x0) 5m0.381242395s ago: executing program 35 (id=1214): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="38010000100001000000000000000000fc010000000000000000000000000001fc0100000000000000000000000000014e2000004e2000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000032320004d26c000000fc01000000000000000000000000000100000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000300"], 0x138}}, 0x0) 4m43.50567245s ago: executing program 7 (id=1477): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x1, 0x50) write(r2, &(0x7f0000000100)="703a7330c05f025f202e2f66696c65303a30", 0x12) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) socket$inet6(0xa, 0x5, 0x80000006) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4m43.411641332s ago: executing program 7 (id=1478): io_setup(0x800, &(0x7f0000000440)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 4m43.265129616s ago: executing program 7 (id=1479): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) (async) setuid(0xee01) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) (async) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8e4, 0x17f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xa, 0xb0, 0xf, {0x8, 0xb, 0x0, 0x2, 0x1, 0x26, 0x30, 0x9e}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x120, 0x4, 0xa, 0x14, {0xa, 0x25, 0x25, 0x1ff, 0x50, 0xff6f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0xe2, 0x1, {0xa, 0x25, 0x25, 0x2, 0xd, 0x1}}}}}}}}]}}, 0x0) 4m41.372867654s ago: executing program 5 (id=1508): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000b28000)=0x20000000000000ff) fcntl$setsig(r0, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r1}], 0x2c, 0xffffffffffbffff8) dup2(r0, r1) read(r1, &(0x7f0000000180)=""/209, 0xd1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) listen(r5, 0x0) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a"], 0x4c}}, 0x80) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x2, r6, 0x0, r2}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xea3493d67e392594, 0x11, r2, 0x100000000) 4m41.188281649s ago: executing program 6 (id=1511): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4004800) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="7801000010000100ffffffff00000000fc000000000000000000000000000001fe8000000000000000000000000000bb000400004e2300000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e00010000000000000000000000000000000032000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00000000000000000000000000000000000000000000000000000000000000000000000800000040000200000000000000000000000000000200000000000000000000000a000000cd00000000000000680002"], 0x178}}, 0x800) 4m40.929228205s ago: executing program 6 (id=1513): r0 = epoll_create1(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xe000202b}) 4m40.906473625s ago: executing program 6 (id=1514): r0 = open(0x0, 0x80140, 0x38) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x1, 0x50) write(r3, &(0x7f0000000100)="703a7330c05f025f202e2f66696c65303a30", 0x12) fcntl$setsig(r0, 0xa, 0x21) socket$inet6(0xa, 0x5, 0x80000006) close_range(r0, 0xffffffffffffffff, 0x0) 4m40.766827979s ago: executing program 6 (id=1515): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405a04105201010102030109022000010100803209040000020806f50007058102000200070502020002"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405a04105201010102030109022000010100803209040000020806f50007058102000200070502020002"], 0x0) syz_usb_ep_read(r0, 0x2, 0x28, &(0x7f0000000100)=""/8) lseek(0xffffffffffffffff, 0xffffffffffff0000, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) (async) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) (async) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) (async) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) (async) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r1, 0x0) (async) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) (async) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) fcntl$setlease(r5, 0x400, 0x0) (async) fcntl$setlease(r5, 0x400, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x108843, 0x98) syz_usb_ep_write(r0, 0x81, 0x200, &(0x7f0000000200)="00000000000100"/16) (async) syz_usb_ep_write(r0, 0x81, 0x200, &(0x7f0000000200)="00000000000100"/16) 4m40.476847556s ago: executing program 5 (id=1518): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="500f02"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000640)=ANY=[@ANYBLOB="4000010086b9a9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/mmu_shadow_zapped\x00', 0x0, 0x0) read(r3, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@uuid_null}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="500f02"], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000640)=ANY=[@ANYBLOB="4000010086b9a9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) (async) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/mmu_shadow_zapped\x00', 0x0, 0x0) (async) read(r3, 0x0, 0x0) (async) mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@uuid_null}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) (async) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) (async) 4m40.368127039s ago: executing program 2 (id=1521): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4004800) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="7801000010000100ffffffff00000000fc000000000000000000000000000001fe8000000000000000000000000000bb000400004e2300000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e00010000000000000000000000000000000032000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014000000000000000000000000000000000000000000000000000000000000000000000800000040000200000000000000000000000000000200000000000000000000000a000000cd00000000000000680002"], 0x178}}, 0x800) 4m40.361273709s ago: executing program 2 (id=1522): mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8e8102, 0x0) ioctl$TUNSETIFF(r0, 0x40086607, 0x0) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405a04105201010102030109022000010100803209040000020806f50007058102000200070502020002"], 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r3}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@multicast2, @local, r3}, 0xc) r4 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) mmap$usbmon(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x1000006, 0x110, r5, 0x0) fremovexattr(r0, &(0x7f0000000180)=@known='com.apple.system.Security\x00') syz_usb_ep_read(r1, 0x2, 0x28, &(0x7f0000000100)=""/8) 4m40.285977601s ago: executing program 7 (id=1523): r0 = open(0x0, 0x80140, 0x38) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x1, 0x50) write(r3, &(0x7f0000000100)="703a7330c05f025f202e2f66696c65303a30", 0x12) fcntl$setsig(r0, 0xa, 0x21) socket$inet6(0xa, 0x5, 0x80000006) close_range(r0, 0xffffffffffffffff, 0x0) 4m40.146714704s ago: executing program 7 (id=1524): r0 = socket(0x2, 0x1, 0x0) listen(r0, 0x0) shutdown(r0, 0x1) (async) shutdown(r0, 0x1) syz_usb_connect(0x0, 0x68, &(0x7f0000000600)=ANY=[], 0x0) 4m39.853114792s ago: executing program 5 (id=1525): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="38010000100001000000000000000000fc010000000000000000000000000001fc0100000000000000000000000000014e2000004e2000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000032320004d26c000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000190000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000300"], 0x138}}, 0x0) 4m39.852557492s ago: executing program 5 (id=1526): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) unshare(0x60000600) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff"], 0x610) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x804) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f00000001c0)=0x8, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54010000210001000000000000000000e0000001000000000000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000001c0004005c07000000000000e0000002000000000000000000000000e80011"], 0x154}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) r5 = dup(r0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000006480)={0x28, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd}, @nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x28}], 0x1}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000100)={0x0, r9, 'id1\x00'}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x8, 0xc, 0x0, 0xe9, 0x4, 0xfc, 0x38}}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000000)={[0x5, 0xf8, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000001040), 0x4, &(0x7f0000000000)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@afid={'afid', 0x3d, 0x1000}}]}}) syz_clone3(&(0x7f00000002c0)={0x1042000, &(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140), {0x3}, &(0x7f0000000180)=""/55, 0x37, &(0x7f00000001c0)=""/113, &(0x7f0000000240)=[0x0], 0x1, {r5}}, 0x58) capset(&(0x7f0000000340)={0x19980330, r12}, &(0x7f0000000380)={0x1000, 0x2, 0x5, 0x800, 0x9, 0x5}) sendmsg$NL80211_CMD_DEL_TX_TS(r10, &(0x7f0000000580)={&(0x7f00000004c0), 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="00022bbd7000fd5bdf256a0000000c009900ffffff7f0d0000000500d2000e000000"], 0x28}}, 0x80) 4m39.844665232s ago: executing program 2 (id=1527): openat(0xffffffffffffffff, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x40a400, 0x13) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r3 = open(&(0x7f0000000100)='./file0\x00', 0x141bc2, 0xeb) copy_file_range(r3, 0x0, r3, &(0x7f0000000180)=0xffffffdffffffffe, 0x2, 0x0) fspick(r2, &(0x7f00000000c0)='.\x00', 0x0) openat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) sendmsg$can_raw(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x1d, r6}, 0x10, &(0x7f0000000040)={&(0x7f0000000280)=@can={{0x0, 0x0, 0x0, 0x1}, 0x9, 0x1, 0x4}, 0x10}, 0x1, 0x0, 0x0, 0x240c408c}, 0xc008004) sendto$inet(r4, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 4m39.830044543s ago: executing program 2 (id=1528): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) fremovexattr(r1, &(0x7f0000000380)=@known='system.posix_acl_default\x00') r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 4m37.760039265s ago: executing program 6 (id=1529): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_ublk_setup_io_uring(0x1e22, &(0x7f00000000c0)={0x0, 0xa223, 0x1, 0x0, 0x2e5}, &(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f0000000200)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) shutdown(r3, 0x1) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x3b) recvmmsg(r4, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x400}], 0x1, 0x40000002, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$SNAPSHOT_S2RAM(r5, 0x330b) write$snapshot(r5, 0x0, 0x2000) syz_ublk_setup_queues(r0, 0x0, &(0x7f0000000240)={0x0, 0xcbf7, 0x10, 0x3, 0x3c8, 0x0, r0}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9621, 0x10000, 0x3, 0x298, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9242, 0x1, 0x3, 0x3b4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4e4d, 0x20000, 0x0, 0x379}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa3af, 0x8000, 0x1, 0x0, 0x0, r0}, 0xffffffffffffffff, 0x0, 0x0}], 0x4, &(0x7f0000001540)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x800}, 0x0, 0x0, '\x00', {0x2, 0xbd5, 0x0, &(0x7f0000000540)=@buf_4k="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"}}, &(0x7f00000015c0)) syz_io_uring_setup(0x2f6, &(0x7f0000001600)={0x0, 0x5da0, 0x80, 0x3, 0x20a, 0x0, r0}, &(0x7f0000001680), &(0x7f00000016c0), &(0x7f0000003740)=0x0) syz_ublk_add_dev(r0, r2, r6, r7, &(0x7f00000037c0)={0x2e, 0x8, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000003780)=@new_dev={0x4, 0x9b6, 0x0, 0x0, 0x1000, 0xffffffff, r1, 0x0, 0x40}}}, &(0x7f0000003840)) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/rescan\x00', 0x1, 0x0) write$make_it_fail(r9, &(0x7f0000000000)='0\x00', 0x2) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a7a0083"], 0x0}, 0x0) 4m36.724836511s ago: executing program 7 (id=1530): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x501201, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24040010}, 0x20004040) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x1000) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYBLOB="2a7db9a76382f39f082e71ce60ec0b32c23c5e8de18a8aabe0b4c5e9b38edbdf89020fa34f32858c6820bf900d1519641b1b388a86c7f877b58348a292a788fc98baae20aa52c4934ca63d2b0f1ed937eb7abb0e16b22caeba5ff086a7a06f73e1c61f11ddc717774e4d60e09fe916ccb12137ae3bf174f336671a8dc5d8b2a04e1758c14259410edd4a3b57341732fd7a017b46b0ad7606d61d9df4a157bfba83b9e435ac27112f26e5d477c2f6ff8ee1d8a83f6dc9f3205f692a87c2cf1b0d9d3c1818d511df1631b30aa41043bf3d6d1fd2c2690bb540a4f10e221235004766b00fc1802c0da8", @ANYRESDEC=r0], 0x0) 4m35.954903s ago: executing program 5 (id=1531): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4004800) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="7801000010000100ffffffff00000000fc000000000000000000000000000001fe8000000000000000000000000000bb000400004e2300000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e00010000000000000000000000000000000032000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000800000040000200000000000000000000000000000200000000000000000000000a000000cd00000000000000680002"], 0x178}}, 0x800) 4m34.622611523s ago: executing program 2 (id=1532): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x1, 0x50) write(r3, &(0x7f0000000100)="703a7330c05f025f202e2f66696c65303a30", 0x12) fcntl$setsig(r0, 0xa, 0x21) socket$inet6(0xa, 0x5, 0x80000006) close_range(r0, 0xffffffffffffffff, 0x0) 4m30.864648628s ago: executing program 5 (id=1533): mkdir(&(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs/trace_options\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') preadv(r1, &(0x7f0000001240)=[{&(0x7f0000000040)=""/110, 0x6e}, {&(0x7f00000000c0)=""/150, 0x96}, {&(0x7f0000000180)=""/100, 0x64}], 0x3, 0x2, 0x3e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x8, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 4m29.925853432s ago: executing program 2 (id=1534): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="38010000100001000000000000000000fc010000000000000000000000000001fc0100000000000000000000000000014e2000004e2000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000032320004d26c000000fc010000000000000000000000000001000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000300"], 0x138}}, 0x0) 4m26.231962555s ago: executing program 6 (id=1535): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x8, 0xf8, 0x40000}, 0x20) openat2(r1, &(0x7f0000000080)='./cgroup/../file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x10}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="0600ad165374d9cd522b1e50fba36bdb05401c73db052ce74e628d72c4e1252f248b8b9bbca5692c4314992f3ec6ca11dd1f724a99dc623d3d3d1a3d9a2a546427902f4a4ca38a1c7f5477239f5ad34c10386736d247ba424fea9fc6e94a1a527c4f97defe531fcd418ae6eac9656c13fae17b62d6ca5ec1fb47cd701e3aca5182fb4e75e37ed10e3af9063b098fa119537eca6245beb62daf4da5b33980eabc0b89b1cac45a3afd0992cfbda98dc6831cd6e66f000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x100000, 0x0, &(0x7f0000000000), 0x3000000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x7800, 0x0, 0x4aff, 0x8, {{0x33, 0x4, 0x1, 0x5, 0xcc, 0x68, 0x0, 0xf2, 0x4, 0x0, @rand_addr=0x64010102, @empty, {[@ssrr={0x89, 0xb, 0xc, [@multicast1, @remote]}, @rr={0x7, 0x23, 0x82, [@dev={0xac, 0x14, 0x14, 0x20}, @private=0xa010101, @multicast1, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x36}, @remote, @empty]}, @end, @ssrr={0x89, 0x23, 0xdf, [@empty, @empty, @loopback, @rand_addr=0x64010102, @remote, @empty, @loopback, @loopback]}, @lsrr={0x83, 0x2b, 0x49, [@local, @multicast1, @multicast2, @loopback, @private=0xa010101, @empty, @multicast2, @remote, @multicast1, @multicast2]}, @timestamp={0x44, 0x10, 0x65, 0x0, 0x3, [0x3, 0x4, 0xffffffce]}, @cipso={0x86, 0x2b, 0x1, [{0x2, 0x3, "dd"}, {0x2, 0xb, "8960c7a82a00ce30ee"}, {0x5, 0x11, "5cf962b71f121ef9e69e47d024d808"}, {0x7, 0x6, "c33a2c37"}]}]}}}}}) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r3, 0x180, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x4000) 4m20.350070045s ago: executing program 36 (id=1530): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x501201, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24040010}, 0x20004040) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x1000) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYBLOB="2a7db9a76382f39f082e71ce60ec0b32c23c5e8de18a8aabe0b4c5e9b38edbdf89020fa34f32858c6820bf900d1519641b1b388a86c7f877b58348a292a788fc98baae20aa52c4934ca63d2b0f1ed937eb7abb0e16b22caeba5ff086a7a06f73e1c61f11ddc717774e4d60e09fe916ccb12137ae3bf174f336671a8dc5d8b2a04e1758c14259410edd4a3b57341732fd7a017b46b0ad7606d61d9df4a157bfba83b9e435ac27112f26e5d477c2f6ff8ee1d8a83f6dc9f3205f692a87c2cf1b0d9d3c1818d511df1631b30aa41043bf3d6d1fd2c2690bb540a4f10e221235004766b00fc1802c0da8", @ANYRESDEC=r0], 0x0) 4m9.51387128s ago: executing program 37 (id=1535): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x8, 0xf8, 0x40000}, 0x20) openat2(r1, &(0x7f0000000080)='./cgroup/../file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x10}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="0600ad165374d9cd522b1e50fba36bdb05401c73db052ce74e628d72c4e1252f248b8b9bbca5692c4314992f3ec6ca11dd1f724a99dc623d3d3d1a3d9a2a546427902f4a4ca38a1c7f5477239f5ad34c10386736d247ba424fea9fc6e94a1a527c4f97defe531fcd418ae6eac9656c13fae17b62d6ca5ec1fb47cd701e3aca5182fb4e75e37ed10e3af9063b098fa119537eca6245beb62daf4da5b33980eabc0b89b1cac45a3afd0992cfbda98dc6831cd6e66f000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x100000, 0x0, &(0x7f0000000000), 0x3000000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x7800, 0x0, 0x4aff, 0x8, {{0x33, 0x4, 0x1, 0x5, 0xcc, 0x68, 0x0, 0xf2, 0x4, 0x0, @rand_addr=0x64010102, @empty, {[@ssrr={0x89, 0xb, 0xc, [@multicast1, @remote]}, @rr={0x7, 0x23, 0x82, [@dev={0xac, 0x14, 0x14, 0x20}, @private=0xa010101, @multicast1, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x36}, @remote, @empty]}, @end, @ssrr={0x89, 0x23, 0xdf, [@empty, @empty, @loopback, @rand_addr=0x64010102, @remote, @empty, @loopback, @loopback]}, @lsrr={0x83, 0x2b, 0x49, [@local, @multicast1, @multicast2, @loopback, @private=0xa010101, @empty, @multicast2, @remote, @multicast1, @multicast2]}, @timestamp={0x44, 0x10, 0x65, 0x0, 0x3, [0x3, 0x4, 0xffffffce]}, @cipso={0x86, 0x2b, 0x1, [{0x2, 0x3, "dd"}, {0x2, 0xb, "8960c7a82a00ce30ee"}, {0x5, 0x11, "5cf962b71f121ef9e69e47d024d808"}, {0x7, 0x6, "c33a2c37"}]}]}}}}}) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r3, 0x180, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x4000) 4m9.119206861s ago: executing program 38 (id=1534): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="38010000100001000000000000000000fc010000000000000000000000000001fc0100000000000000000000000000014e2000004e2000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000032320004d26c000000fc010000000000000000000000000001000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000300"], 0x138}}, 0x0) 4m6.327690923s ago: executing program 39 (id=1533): mkdir(&(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs/trace_options\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') preadv(r1, &(0x7f0000001240)=[{&(0x7f0000000040)=""/110, 0x6e}, {&(0x7f00000000c0)=""/150, 0x96}, {&(0x7f0000000180)=""/100, 0x64}], 0x3, 0x2, 0x3e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x8, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 41.99260988s ago: executing program 3 (id=2463): syz_usb_connect$midi(0x1, 0x31, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x9e8, 0x62, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x18, 0x10, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x6, [], [{{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0x3, 0x83, {0x4}}}]}}}}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 38.969938557s ago: executing program 3 (id=2477): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb4, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in=@private=0xa010102, @in=@multicast2, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x2, 0x8, 0x2000000000000, 0x40, 0xfffffffffffffdfd, 0x50}, {0x5, 0x6}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x50) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) socket(0x1e, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps_rollup\x00') exit(0x3) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') socket$netlink(0x10, 0x3, 0x6) open(0x0, 0x143142, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000040)=ANY=[@ANYBLOB="a1"]) 38.110778802s ago: executing program 3 (id=2481): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="64000000100001060000000000000000000000003f000000000000000000000010000300766574683000000000000000100012000803080076657468180002000a000100000002000000000d05e2cf6c50a3070010000300766574683100000000000000", 0x64}], 0x1}, 0x0) 37.997122636s ago: executing program 3 (id=2483): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4004800) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="7801000010000100ffffffff00000000fc000000000000000000000000000001fe8000000000000000000000000000bb000400004e2300000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e00010000000000000000000000000000000032000000fc010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000800000040000200000000000000000000000000000200000000000000000000000a000000cd00000000000000680002"], 0x178}}, 0x800) 37.978996057s ago: executing program 3 (id=2484): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r2, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)=""/238, 0xee}, {&(0x7f0000000280)=""/105, 0x69}, {&(0x7f0000000ec0)=""/166, 0xa6}, {&(0x7f0000001540)=""/4089, 0xff9}], 0x4}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000a00)={'bridge0\x00', &(0x7f0000000880)=@ethtool_drvinfo={0x3, "772cb15b3fe3aae9ce18c16d5f08956f46ff59d308cffc581b5e00b3c49b60bd", "b0d5ecae490e190fc22f8ddf47b6004b8fd571b3266a6cd231ae356610027920", "2bc667952d169f4403ef2914cd77bf2f7139fe5129207d4ab43a77908c1713be", "263874be6a4b5a5622326bbaed390208d92fa1cd722ced4c597a9346964c9aa2", "8f0df14f4a11041ceb20fd0f6b4d6c716e0802b3faee625ff9a6ab2331d9592f", "f238473df572e2aa9c810f98", 0x8e2f, 0xfffffff8, 0x0, 0x6, 0xe}}) 37.919733168s ago: executing program 3 (id=2485): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="38010000100001000000000000000000fc010000000000000000000000000001fc0100000000000000000000000000014e2000004e2000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000032320004d26c000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000300"], 0x138}}, 0x0) 22.461191537s ago: executing program 40 (id=2485): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="38010000100001000000000000000000fc010000000000000000000000000001fc0100000000000000000000000000014e2000004e2000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000032320004d26c000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000300"], 0x138}}, 0x0) 9.370754648s ago: executing program 9 (id=2597): r0 = socket(0x1d, 0xa, 0xfffffffa) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000a40)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, 0x2, 0x8, 0x603, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x6e6}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x884c}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x4044) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="300000001000012026bd700000000000100000000c00000000000000000000000d002e"], 0x30}], 0x1}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x0, 0x4e24, 0xfffc, 0x2, 0x0, 0x0, 0x5c}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x3}, {0x800000000000, 0x2, 0x1ffffffffffd}, 0x0, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x2b}, 0x2, @in=@remote, 0x0, 0x0, 0x3, 0xff, 0x2, 0x2, 0x40}, {{@in=@remote, 0x4d5, 0x3c}, 0x2, @in=@multicast1, 0x7, 0x2, 0x3, 0x9, 0xfffffff9, 0x0, 0x3}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) r6 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r6, 0x29, 0x24, &(0x7f0000000040)=0x9, 0x4) (async) sendto$inet6(r6, &(0x7f0000000180)="c412", 0xffe6, 0x40, &(0x7f0000000240)={0xa, 0x4ea2, 0x5, @empty, 0x401}, 0x1c) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000140)={0x608, r4, 0x20, 0x70bd2a, 0x3, {}, [@ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x334, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xcf, 0x4, "1d1dc82f7b4311fa4b7d87ffd1f239cca692f9657a030fbcb0031fad41257ff59793c1bbfeafc1de058a18c2d82480842b10275fb099c48c000a2f4df13b2f9e1aa2526e7c1fdd1bb5aa5e4f7892486f6cfcfb5749c47b7932c0bbccbb0dbdf9d50d2b0ecba03756335832e515ba6bf3e8ebe43f2b31d17fa797b3c8dee2eeb7bedd92c24c88d7b43091145705a0169a1c7b8b139ce0bd3f5250d2d8472fe2199d17f48df9acf8b60fee5b45344ce8b69e31995d31ce46506888136a9d53a995a6b858263ec357a0504201"}, @ETHTOOL_A_BITSET_VALUE={0xdc, 0x4, "6f470a1039c7d60b1789fe700e6dd0db2dea00ee8c28e570899c7ef1aa7e3e67f34ab37d2cdc3b7f0a1ffddad8f58e87e2a77ae9263b78f8971b1b724567fe63d4809cd8d7bff8588b3a3f707667641ee4ff98b24b15098bb9dee5d295b6c3cf3c89fcf508d6fb01e5e950d4b3baf65018ee381124eb07c838d76c0e6c563bb181738502faa0bc531cc97e4aca2a714d02bb6d7e1e5b46ee61f50df4e19596ca71e67850085a68938ee29bbfb455c998aa9ffc17184357b67f62a29477f9ea4a5b5dbd076dfe40f960993fe015d05ac6435a3ab78bf831dd"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbcc9}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x75, 0x4, "041c06fb8edecabb99a8c2cd29ce2c6994d6a862cf36cf3774587ab1efc913f5ec39da1c9b708497d003466735708edb0c4a0d0f373273d62d2a8b2de42812e65ff2ac51bbbf403880d9c0094f96dba44361e6cc53ddc416138c9dc9dadde589b3ea57af12d128843c56c29aa3fe33052b"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x40, 0x4, "612a0fa71558387aba30cea49271cdf6168d8e8094979ecae1144a691c58aa3c140902dd6d236e0147046cf467a2eb200aaeddd766167f685ef3c702"}, @ETHTOOL_A_BITSET_VALUE={0x46, 0x4, "561a24897284b12aa89338596a1d0c1860d3cbb112a342971f03e14bec356733138a23e0c9ce88541d69e81efb68bdb2669138b6e74b6bbb94dcc4207471d60bbae2"}]}, @ETHTOOL_A_FEATURES_WANTED={0x268, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0xda, 0x5, "66d459437b503cb74f0aa4612bf2c3d4159ece9b48d81789c7890b4d77741a8c11d7e9b5b503de1980859767c529f3e1cce937a669b38822ecfe0de744dbfc256f7a368998c7f81b7481e26d7b3952dbbf34ffc8940023cbd47ea1dcd0b4d6fadcfc9ad13f122f19c25a7af38ce7a629b18f5d16c174232b2796cabe9d8ab118edcf83c978438f89e5396e430ee2362b16c3cc5fa5c7da60173a54036276ac0384d1a1cbaf4fa15a76183c8c45eb5220d1e4df729456854865e3d525c93de3d8af696ad8da35fd9f7804f4f92f93b3a56f2fce22b661"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xb8, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfc}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '{^:!&.:\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x68}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5a69}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\b!\\C[\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0xbc, 0x3, 0x0, 0x1, [{0x4}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd4d1}]}]}, 0x608}, 0x1, 0x0, 0x0, 0x404c840}, 0x4) 7.811336653s ago: executing program 9 (id=2598): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000040b4550182195f57584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f00000000c0)={0x3, 0x100, 0x9, 0x7fffffff, 0x2, 0x3, 0x52e, 0xf762, 0xfffffff1, 0xd, 0xb1, 0xc0, 0x3ff, 0x1}) (async) r2 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/make-it-fail\x00', 0x1, 0x0) write$make_it_fail(r2, &(0x7f0000000100)='N\x00', 0x2) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, 0x0) 6.024421595s ago: executing program 9 (id=2600): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) 6.022826815s ago: executing program 8 (id=2601): r0 = socket(0x1, 0x1, 0x1) syz_open_pts(0xffffffffffffffff, 0x10000) (async) getsockopt$SO_COOKIE(r0, 0x1, 0x47, &(0x7f0000000080), &(0x7f0000000180)=0x8) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) fsetxattr$trusted_overlay_opaque(r1, &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'tunl0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="f7f39cc3", 0xe, 0x4000840, &(0x7f00000000c0)={0x11, 0xf7, r3, 0x1, 0x80}, 0x14) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r5, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) (async) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000180)={r5, 0x1, 0x6, @multicast}, 0x10) getpeername$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) (async) r7 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r7, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) (async) sendmsg$inet(r7, &(0x7f00000001c0)={&(0x7f0000000100)={0x2, 0x4c22, @multicast2}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000140)="0800101d89b5eb00", 0x8}], 0x1, &(0x7f0000000080)}, 0x400c4) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB=' \x00\x00 ', @ANYRES16=r10, @ANYBLOB="29042cbd7000fedbdf25030000000c00018008000100", @ANYRES32=r12, @ANYBLOB="ced9747e36a27039ab10efac6ba83b9b08e2a3e61c763d274df3d1e04e793ee56453a7f633b7606ff577a08ac723d1f2b6b0643f5fb30d69e3b7616a3551bd760343d485f1d7d801e6d8b92876b327de9b8cc9465ef58e58b23dc7a1225a94c7b52790e1e8046885519fc5abddbf"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x10, 0x80, 0x5, 0x1, 0x7d, @remote, @mcast1, 0x8000, 0x7800, 0x7fffffff, 0xd}}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000380)={'wg2\x00'}) (async) r14 = socket(0x11, 0x2, 0x0) bind$packet(r14, &(0x7f00000001c0)={0x11, 0x4, 0x0, 0x1, 0x1c, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x7800, 0x700, 0x6, 0x0, {{0x7, 0x4, 0x1, 0x7, 0x1c, 0x66, 0x0, 0x80, 0x29, 0x0, @rand_addr=0x64010102, @multicast2, {[@generic={0x82, 0x7, "16c9be198d"}, @end]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000b00)=ANY=[@ANYBLOB="b401100046e0e84ef96cdbd1620904c5de523180d5b3d1b1e001e236871871efcbfe4bd67b0b6004dff2c8b9efbafaa6e44b58af234bc557b945c291253472d7b080d16fc764ed6b501d0b51949e0d162f914dff08615558ab5d40aca43401f6f67bf82b705b9a7e705c9b507d470a5ffa96c687fb05e3286d05", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fedbdf25190000003800018008000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000080003000300000008000100", @ANYRES32=r3, @ANYBLOB="1400020073797a5f74756e0000000000000200004800018008001900", @ANYRES32=r5, @ANYRES16=r13, @ANYRES32=r6, @ANYBLOB="14000200626f6e645f736c6176655f3100000000080003000200000008000100", @ANYRES32=r8, @ANYBLOB="06000000", @ANYRES32=r12, @ANYBLOB="080003000300000020000180080003000100000014000200766c616e3000000000000000000000003800018008000300000000000800030001000000140002006261746164763000000000000000000008000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="000014000200626f6e645f736c6176655f300000000008000100"/36, @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="1400020070696d7265673000000000000000000044000180140002006d6163766c616e30000000000000000014000200766c616e3000000000000000000000000800031a5282dbfc5a0002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="40000180140002006d6163766c616e30000000000000000014000200677265746170300000000000000000001400020070696d36726567310000000000000000"], 0x1b4}, 0x1, 0x0, 0x0, 0x4008054}, 0x4000000) ioctl$XFS_IOC_GETBMAP(r1, 0xc0205826, &(0x7f0000000040)={0x7fffffff, 0x0, 0x5, 0x70, 0x5}) (async) copy_file_range(r1, 0x0, r1, &(0x7f0000000100)=0xf160, 0x4, 0x0) 6.020413075s ago: executing program 0 (id=2602): write$selinux_load(0xffffffffffffffff, &(0x7f0000000040)={0xf97cff8c, 0x8}, 0x10) 5.916981658s ago: executing program 0 (id=2603): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000400)=0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) io_setup(0x66, &(0x7f0000000400)=0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xe, r2, &(0x7f00000000c0)='-5', 0x12, 0x0, 0x0, 0x4}]) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r7 = dup2(r6, r6) read$FUSE(r7, 0x0, 0x0) getsockopt$sock_int(r5, 0x1, 0x4b, 0x0, &(0x7f0000000440)) r8 = dup(r4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x128}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r9, 0xc028aa03, &(0x7f0000000400)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x1, 0x18100}) syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) syz_ublk_setup_queues(r8, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x2, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40840001, 0x1f8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 4.1504026s ago: executing program 9 (id=2604): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="64000000100001060000000000000000000000003f000000000000000000000010000300766574683000000000000000100012000800fe0076657468180002000a000100000002000000000d05e2cf6c50a3070010000300766574683100000000000000", 0x64}], 0x1}, 0x0) 4.149891689s ago: executing program 8 (id=2605): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0001, 0x0) pwrite64(r0, &(0x7f0000000200)="7d6e4785046d89d9d9450e2eff58c3e4041848c6dabea4e438a1e7ae5a8ab057779431b5bb1227c629cd7b9ecb150b83e5826578c35a53367a957d1988c2932b89334fb63e4f348e67b01704cae7eada96736d4ebfd9ebae029b9fde248859b3128b7c2cc57b51139f7ad26de3e5271a1288f3784967c46d50d9d47e03005ec0805b1f17c80bdae5fea822f3f3beb9fb34a4bb3e7d440e072d5b217395662054d035fd8dabc9974550da1634af02c23f9e0b5c52730947e9e6106fedd1ee5fd6655997653001573f3cabcb20e7a9392ac8b807a4a132119f81e3258aef76ec02fb6e496e39b94f96d5b062b04fd46b6de4f081d4b0cbea1366f3dde44c2df62638d43b474b265352dd0c2d057ce23a06f9eae4de55f7d2c4805cf47cae86bdd2493ffd9f37b0e39d211ebae302c3e6aaa3d74b6ec96571bb8b19a5280367816d8c5ffda61cd57ebdaa55e5846ab4", 0x14e, 0xc1de) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) 4.14913884s ago: executing program 0 (id=2606): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) lseek(r0, 0xfffffffffffffffe, 0x4) socketpair(0xa, 0x2, 0x20008, &(0x7f0000000600)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000740)=0x14) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000640), &(0x7f0000000680)=0x4) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) poll(&(0x7f00000006c0)=[{r1, 0x1}], 0x1, 0x4) add_key(&(0x7f0000000040)='cifs.idmap\x00', 0x0, &(0x7f0000000080)="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", 0x559, r2) 4.027073483s ago: executing program 0 (id=2607): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@private=0xa010101, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x1, 0x4000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}, 0x1, 0x300}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) r2 = syz_open_procfs(0x0, &(0x7f0000000840)='net/dev_snmp6\x00') lseek(r2, 0x43, 0x0) getdents(r2, 0x0, 0x51) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x100000}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000200)) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x5}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 3.980780194s ago: executing program 8 (id=2608): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xc, 0x0, 0x2}) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x3b, 0x629f, 0x4, 0x401, 0x7, 0x401, "bb4076afbaaf9be35d36c904c2be4b88b26aee5a87ad0c1dde83138fa34ced0593bf7a0d44b4d9e8326b67b913fde3d830c5c5b578d089abf00cbc"}}, 0x153) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f00000001c0)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000200)={0x2, 'ipvlan1\x00', {0x2}}) ioctl$KVM_NMI(r0, 0xae9a) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xa14409}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x104, 0xb, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80000000}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x7fffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x68, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xfffffffffffffffa}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x100000000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x4}}]}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000440)='devices.allow\x00', 0x2, 0x0) ioctl$XFS_IOC_INUMBERS(r1, 0x80405880, &(0x7f0000000480)={{0x9, 0x2, 0x8001, 0x421, 0x7}, [{0x2, 0xeb, 0x9e, 0x2}]}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) ppoll(&(0x7f0000000500)=[{r1, 0x200}, {r1, 0x208}, {r0, 0x8c}], 0x3, &(0x7f0000000580)={r2, r3+60000000}, &(0x7f00000005c0)={[0x81]}, 0x8) close(r0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000600)={0xd, 0x8}) sendto$inet(r0, &(0x7f0000000640)="a0d1e63a9924e4a4981480945508155c5dd7cf51b3d3c8ca2b4e649c6613278e3db13b36951e2be9dcb5778e004edea3eb766a8fc8d6782590714c48a8ea75c9da13ef9eea76c13a53124b9ed6540e6c03d6bbbc9473bb2ec002c5f4d9ca9110b443d75b78b9d722914587761dbf6b", 0x6f, 0x4008005, &(0x7f00000006c0)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x8, 0x9, @l2={'eth', 0x3a, 'sit0\x00'}}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4004010) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) r5 = fsmount(r0, 0x0, 0x70) ioctl$UI_BEGIN_FF_ERASE(r5, 0xc00c55ca, &(0x7f0000000840)={0x9, 0x2, 0x9c}) r6 = dup(r1) pread64(r6, &(0x7f0000000880)=""/4096, 0x1000, 0x7ff) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r7, 0x942e, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000018c0), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000019c0)={'sit0\x00', &(0x7f0000001900)={'syztnl2\x00', 0x0, 0x20, 0x40, 0x5, 0x1000, {{0x20, 0x4, 0x1, 0x4, 0x80, 0x65, 0x0, 0x0, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0xc, 0x4e, 0x0, 0x8, [0x6, 0x707]}, @cipso={0x86, 0x51, 0x3, [{0x2, 0x4, "5b9d"}, {0x5, 0x12, "1ab37569d6fd26bed990afa0c7ada0f3"}, {0x7, 0x9, "ac9f10b32a6a8c"}, {0x5, 0x11, "ea1254bf6e7e92a41b63f2d9ac44ef"}, {0x4, 0x2}, {0x7, 0x11, "34afadddd4f93e237e8f790c9f9a5b"}, {0x7, 0x8, "00f13632251d"}]}, @timestamp={0x44, 0x8, 0x73, 0x0, 0x8, [0x6]}, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001a00)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000001a40)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001a80)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000002000)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001e40)={0x15c, r8, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4004004}, 0x20000080) 2.120943858s ago: executing program 9 (id=2609): r0 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x60000001}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000080)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0xdddd0000, 0x10000, 0x1}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4f, 0x10001, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0xffdfffff, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001]}}) r4 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, r4) (async) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_NMI(r6, 0xae9a) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x4000, 0x200}) (async) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)="40554111fb74abf35737cd7caf746f65115456c7ab0ebf98ef9c5b228c421ee75a67b9431ccb9cd3eaf3107b81cb350ae895d4394b336d3ca0ffaebfe12ac8730112", 0x42) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x20002000}) 2.120648428s ago: executing program 8 (id=2610): write$selinux_load(0xffffffffffffffff, &(0x7f0000000040)={0xf97cff8c, 0x8}, 0x10) 2.120127328s ago: executing program 0 (id=2611): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) tkill(r2, 0xc) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r4 = getpgrp(0x0) (async) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$PPPIOCGMRU(r5, 0x80047453, 0x0) (async) socket$inet6(0xa, 0x80002, 0x0) (async) socket$netlink(0x10, 0x3, 0xf) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) (async) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r6], 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async) wait4(r4, 0x0, 0x20000000, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) (async) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000000)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) (async) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) 2.0554346s ago: executing program 8 (id=2612): r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=12544 wIndex=0 wLength', 0x37) r2 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) writev(r0, 0x0, 0x0) syz_usb_connect$midi(0x5, 0x31, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x7104, 0x2202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x6, 0xa0, 0x7f, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0xd, [], [{{0x9, 0x5, 0xe, 0x2, 0x10, 0x5, 0x9, 0x5, {0x4}}}]}}}}}]}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x12, 0x2, 0x801, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0xc810}, 0x40000) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000000)=0x7) fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) (async) write(r1, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=12544 wIndex=0 wLength', 0x37) (async) socket$packet(0x11, 0x2, 0x300) (async) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) (async) writev(r0, 0x0, 0x0) (async) syz_usb_connect$midi(0x5, 0x31, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x7104, 0x2202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x6, 0xa0, 0x7f, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0xd, [], [{{0x9, 0x5, 0xe, 0x2, 0x10, 0x5, 0x9, 0x5, {0x4}}}]}}}}}]}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_netfilter(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x12, 0x2, 0x801, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0xc810}, 0x40000) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000000)=0x7) (async) 592.1µs ago: executing program 9 (id=2613): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) r0 = socket$inet6(0x10, 0x2, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080012c000000001", 0x1c, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r1, 0x8919, &(0x7f0000000040)="76657468303a3000000000000000000002") syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f00000007c0)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="90e302faff0002035ae7ef9c312dc94907334fb4552b7935ad90de9100e6e9979ed1e4c2f13f09fd73893fdc041a6cd884dbffff00000000d83b22431035da0000de4df35bdaab61fe20bd1f9b478afdba39e7c34e503f60b99c931ac5a2cc22c34542ea6cd543501e4aede0c2158f7c21575aa3e280c0a867"]}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fsopen(&(0x7f00000000c0)='smb3\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0xb) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) close(r5) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r2, 0xc008aec1, &(0x7f0000000300)={0xa, 0x0, [{0xa, 0x1, 0x1, 0xf, 0x63, 0x0, 0x5}, {0x0, 0x10e98e07, 0x1, 0x5, 0x0, 0x0, 0x101}, {0x1, 0x8, 0x6, 0x137e, 0xfa87, 0x4, 0x10000}, {0xc0000001, 0x7, 0x1, 0x7, 0x2, 0x2, 0xff}, {0x2, 0x800, 0x7, 0x2, 0x9, 0xfffffffc, 0x7}, {0x9, 0x8, 0x1, 0x8, 0x5, 0xf4de, 0x7}, {0xa, 0xe8, 0x5, 0x7, 0x1, 0x200, 0x6}, {0x6, 0x5, 0x4, 0x7fff, 0x4, 0x4, 0x80000001}, {0x80000019, 0x9, 0x5, 0x9, 0x5, 0x81, 0x773}, {0x0, 0x8, 0x4, 0xff, 0x0, 0x9, 0x4d}]}) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) write$char_usb(r8, &(0x7f0000000040)="e2", 0x2250) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000008fcff", 0x58}], 0x1) sendmsg$AUDIT_GET_FEATURE(r7, &(0x7f0000000180)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3fb, 0x200, 0x70bd28, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x400c0c0) r10 = socket$packet(0x11, 0x3, 0x300) connect$packet(r10, &(0x7f00000001c0)={0x11, 0x3, 0x0, 0x1, 0xb, 0x6, @remote}, 0x14) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r3, 0x4068aea3, &(0x7f0000000240)) syz_usb_connect(0x5, 0x94b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000001400)={0xa, &(0x7f0000001180)={0xa, 0x6, 0x201, 0x3, 0xb, 0xa, 0x8, 0x7}, 0x18c, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x2, [{0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0x380a}}]}) 191.85µs ago: executing program 8 (id=2614): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0xcb, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @mcast1, 0x10001}, 0x1c) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x1, r2}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_int(r5, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000240)="c4", 0xffffffffffffff95, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x5}, 0x1c) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0xc000, 0x10000, 0x4, 0x9, 0xf9, 0xe4, 0x3d, 0x6, 0x0, 0x0, 0x16, 0x4}, {0xd535c1c88a4e070, 0xa000, 0xd, 0x0, 0x40, 0x34, 0x7d, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0x100000, 0x25000, 0x8, 0x5, 0x83, 0x7, 0x0, 0x9, 0x1, 0x6, 0x4, 0xe4}, {0xfec00000, 0x2, 0x9, 0x6, 0x4, 0xb0, 0xb, 0xff, 0x1c, 0x31, 0xe}, {0x9000, 0xe000, 0xb, 0x3, 0x3, 0x6, 0xa3, 0x7f, 0x7, 0x2, 0xdb, 0x5}, {0x9000, 0x8080000, 0xc, 0xc, 0xb1, 0xc, 0x3e, 0xe, 0x7, 0x0, 0x1}, {0x3000, 0x8000000, 0x8, 0x1, 0x0, 0x3, 0x7, 0x3, 0x5, 0x0, 0x1, 0x70}, {0x2, 0x60000, 0x4, 0x5, 0xf, 0x7, 0xc, 0x16, 0x2, 0xc, 0xb0, 0x9}, {0x10000, 0x1000}, {0x2000, 0x5}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x5, 0x500, 0x7000, [0xf8fffffffffe, 0x4, 0x80, 0x1000]}) syz_io_uring_setup(0x3d3b, &(0x7f0000000040)={0x0, 0x1137, 0x8, 0x2, 0x248, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000300)) 0s ago: executing program 0 (id=2615): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xc000, 0x10000, 0x4, 0x9, 0xf9, 0xe4, 0x3d, 0x6, 0x0, 0x0, 0x16, 0x4}, {0xd535c1c88a4e070, 0xa000, 0xd, 0x0, 0x40, 0x34, 0x7d, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0x100000, 0x25000, 0x8, 0x5, 0x83, 0x7, 0x0, 0x9, 0x1, 0x6, 0x4, 0xe4}, {0xfec00000, 0x2, 0x9, 0x6, 0x4, 0xb0, 0xb, 0xff, 0x1c, 0x31, 0xe}, {0x9000, 0xe000, 0xb, 0x3, 0x3, 0x6, 0xa3, 0x7f, 0x7, 0x2, 0xdb, 0x5}, {0x9000, 0x8080000, 0xc, 0xc, 0xb1, 0xc, 0x3e, 0xe, 0x80, 0x0, 0x1}, {0x3000, 0x8000000, 0x8, 0x1, 0x0, 0x3, 0x7, 0x3, 0x5, 0x0, 0x1, 0x70}, {0xb000, 0x60000, 0x4, 0x5, 0xf, 0x7, 0xc, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x10000, 0x1000}, {0x2000, 0x5}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x5, 0x500, 0x7000, [0xf8fffffffffe, 0x4, 0x80, 0x1000]}) kernel console output (not intermixed with test programs): T6927] should_fail_ex+0x3c2/0x510 [ 421.105451][ T6927] ? __cfi_cgroup_show_path+0x10/0x10 [ 421.105480][ T6927] should_failslab+0xac/0x100 [ 421.105512][ T6927] __kmalloc_cache_noprof+0x41/0x470 [ 421.105542][ T6927] ? cgroup_show_path+0xc4/0x4a0 [ 421.105568][ T6927] ? seq_printf+0x1e3/0x290 [ 421.105603][ T6927] ? __cfi_cgroup_show_path+0x10/0x10 [ 421.105630][ T6927] cgroup_show_path+0xc4/0x4a0 [ 421.105657][ T6927] ? __cfi_cgroup_show_path+0x10/0x10 [ 421.105685][ T6927] kernfs_sop_show_path+0x120/0x160 [ 421.105724][ T6927] ? __cfi_kernfs_sop_show_path+0x10/0x10 [ 421.105753][ T6927] show_path+0xa4/0xe0 [ 421.105784][ T6927] show_mountinfo+0x1ce/0xbb0 [ 421.105824][ T6927] ? __cfi_show_mountinfo+0x10/0x10 [ 421.105861][ T6927] ? __check_object_size+0x54c/0x870 [ 421.105892][ T6927] m_show+0x7f/0x90 [ 421.105914][ T6927] seq_read_iter+0xa7d/0xf30 [ 421.105946][ T6927] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 421.105988][ T6927] vfs_read+0x60b/0xc70 [ 421.106017][ T6927] ? __cfi_vfs_read+0x10/0x10 [ 421.106047][ T6927] ksys_pread64+0x170/0x270 [ 421.106076][ T6927] ? __cfi_ksys_pread64+0x10/0x10 [ 421.106107][ T6927] __x64_sys_pread64+0x9f/0xb0 [ 421.106136][ T6927] x64_sys_call+0x2a34/0x2ee0 [ 421.106158][ T6927] do_syscall_64+0x57/0xf0 [ 421.106194][ T6927] ? clear_bhb_loop+0x50/0xa0 [ 421.106234][ T6927] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 421.106268][ T6927] RIP: 0033:0x7f86ba39e159 [ 421.106290][ T6927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.106313][ T6927] RSP: 002b:00007f86bb1d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 421.106341][ T6927] RAX: ffffffffffffffda RBX: 00007f86ba625fa0 RCX: 00007f86ba39e159 [ 421.106380][ T6927] RDX: 0000000000000fe4 RSI: 0000200000002280 RDI: 0000000000000003 [ 421.106397][ T6927] RBP: 00007f86bb1d3090 R08: 0000000000000000 R09: 0000000000000000 [ 421.106416][ T6927] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 421.106433][ T6927] R13: 00007f86ba626038 R14: 00007f86ba625fa0 R15: 00007fffc1b82198 [ 421.106457][ T6927] [ 421.372411][ T453] asix 10-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 421.383154][ T453] asix 10-1:2.88: probe with driver asix failed with error -71 [ 421.392927][ T453] usb 10-1: USB disconnect, device number 24 [ 421.428686][ T65] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 421.599912][ T65] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 421.609440][ T65] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.648649][ T339] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 421.708716][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 421.714968][ T6871] Bluetooth: hci0: command 0x1003 tx timeout [ 421.738507][ T6933] x_tables: unsorted underflow at hook 2 [ 421.775764][ T6936] bridge0: port 3(veth1_to_team) entered blocking state [ 421.782850][ T6936] bridge0: port 3(veth1_to_team) entered disabled state [ 421.790238][ T6936] veth1_to_team: entered allmulticast mode [ 421.796943][ T6936] veth1_to_team: entered promiscuous mode [ 421.829498][ T65] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 421.837332][ T339] usb 4-1: unable to get BOS descriptor or descriptor too short [ 421.846346][ T339] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 421.864432][ T339] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 421.875113][ T339] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 421.887848][ T339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.908649][ T339] usb 4-1: Product: syz [ 421.912909][ T339] usb 4-1: Manufacturer: syz [ 421.917710][ T339] usb 4-1: SerialNumber: syz [ 421.925045][ T339] usb 4-1: selecting invalid altsetting 1 [ 421.931332][ T339] usb 4-1: unit 6 not found! [ 422.019832][ T6948] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2215'. [ 422.128754][ T65] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 422.290348][ T65] usb 1-1: unable to get BOS descriptor or descriptor too short [ 422.299326][ T65] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.309526][ T65] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 422.320529][ T65] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 422.330228][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.332347][ T339] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2) [ 422.338387][ T65] usb 1-1: Product: syz [ 422.350839][ T65] usb 1-1: Manufacturer: syz [ 422.355545][ T65] usb 1-1: SerialNumber: syz [ 422.358749][ T335] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 422.369841][ T339] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 422.383037][ T339] usb 4-1: USB disconnect, device number 66 [ 422.539798][ T335] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.550209][ T335] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 422.560523][ T335] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 422.569749][ T65] usb 1-1: 0:1 : does not exist [ 422.570108][ T335] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 422.574637][ T65] usb 1-1: 0:2 : does not exist [ 422.588061][ T335] usb 10-1: SerialNumber: syz [ 422.594146][ T65] usb 1-1: USB disconnect, device number 31 [ 422.797322][ T335] usb 10-1: skipping empty audio interface (v1) [ 422.805943][ T335] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 422.816302][ T335] usb 10-1: USB disconnect, device number 25 [ 423.103353][ T6980] FAULT_INJECTION: forcing a failure. [ 423.103353][ T6980] name failslab, interval 1, probability 0, space 0, times 0 [ 423.119101][ T6980] CPU: 0 UID: 0 PID: 6980 Comm: syz.0.2224 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 423.119148][ T6980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 423.119165][ T6980] Call Trace: [ 423.119172][ T6980] [ 423.119181][ T6980] __dump_stack+0x21/0x30 [ 423.119218][ T6980] dump_stack_lvl+0x140/0x1c0 [ 423.119246][ T6980] ? __cfi_dump_stack_lvl+0x10/0x10 [ 423.119275][ T6980] ? vsnprintf+0x7b4/0x1ad0 [ 423.119305][ T6980] dump_stack+0x19/0x20 [ 423.119330][ T6980] should_fail_ex+0x3c2/0x510 [ 423.119355][ T6980] ? __cfi_cgroup_show_path+0x10/0x10 [ 423.119378][ T6980] should_failslab+0xac/0x100 [ 423.119423][ T6980] __kmalloc_cache_noprof+0x41/0x470 [ 423.119448][ T6980] ? cgroup_show_path+0xc4/0x4a0 [ 423.119470][ T6980] ? seq_printf+0x1e3/0x290 [ 423.119500][ T6980] ? __cfi_cgroup_show_path+0x10/0x10 [ 423.119521][ T6980] cgroup_show_path+0xc4/0x4a0 [ 423.119543][ T6980] ? __cfi_cgroup_show_path+0x10/0x10 [ 423.119566][ T6980] kernfs_sop_show_path+0x120/0x160 [ 423.119591][ T6980] ? __cfi_kernfs_sop_show_path+0x10/0x10 [ 423.119616][ T6980] show_path+0xa4/0xe0 [ 423.119640][ T6980] show_mountinfo+0x1ce/0xbb0 [ 423.119673][ T6980] ? __cfi_show_mountinfo+0x10/0x10 [ 423.119703][ T6980] ? __check_object_size+0x54c/0x870 [ 423.119728][ T6980] m_show+0x7f/0x90 [ 423.119747][ T6980] seq_read_iter+0xa7d/0xf30 [ 423.119775][ T6980] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 423.119809][ T6980] vfs_read+0x60b/0xc70 [ 423.119833][ T6980] ? __cfi_vfs_read+0x10/0x10 [ 423.119859][ T6980] ksys_pread64+0x170/0x270 [ 423.119881][ T6980] ? __cfi_ksys_pread64+0x10/0x10 [ 423.119907][ T6980] __x64_sys_pread64+0x9f/0xb0 [ 423.119929][ T6980] x64_sys_call+0x2a34/0x2ee0 [ 423.119947][ T6980] do_syscall_64+0x57/0xf0 [ 423.119975][ T6980] ? clear_bhb_loop+0x50/0xa0 [ 423.119997][ T6980] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 423.120020][ T6980] RIP: 0033:0x7fbb8e99e159 [ 423.120038][ T6980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.120063][ T6980] RSP: 002b:00007fbb8f79a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 423.120096][ T6980] RAX: ffffffffffffffda RBX: 00007fbb8ec25fa0 RCX: 00007fbb8e99e159 [ 423.120111][ T6980] RDX: 0000000000000fe4 RSI: 0000200000002280 RDI: 0000000000000003 [ 423.120124][ T6980] RBP: 00007fbb8f79a090 R08: 0000000000000000 R09: 0000000000000000 [ 423.120154][ T6980] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 423.120167][ T6980] R13: 00007fbb8ec26038 R14: 00007fbb8ec25fa0 R15: 00007ffeb0f935b8 [ 423.120187][ T6980] [ 423.411371][ T6982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2225'. [ 423.431302][ T6982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2225'. [ 423.446555][ T6984] tipc: Can't bind to reserved service type 0 [ 423.510809][ T6995] tipc: Enabling of bearer rejected, failed to enable media [ 423.534765][ T6994] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2229'. [ 423.548022][ T6990] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2017099156 (16136793248 ns) > initial count (14120929200 ns). Using initial count to start timer. [ 423.581576][ T6990] netlink: 'syz.9.2231': attribute type 11 has an invalid length. [ 423.659251][ T36] audit: type=1400 audit(1787969907.150:544): avc: denied { link } for pid=7004 comm="syz.3.2235" name="#19" dev="tmpfs" ino=1208 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 423.706311][ T7007] FAULT_INJECTION: forcing a failure. [ 423.706311][ T7007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.727482][ T7003] FAULT_INJECTION: forcing a failure. [ 423.727482][ T7003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.744540][ T36] audit: type=1400 audit(1787969907.170:545): avc: denied { rename } for pid=7004 comm="syz.3.2235" name="#1a" dev="tmpfs" ino=1208 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 423.758810][ T7007] CPU: 0 UID: 0 PID: 7007 Comm: syz.3.2236 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 423.758913][ T7007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 423.758951][ T7007] Call Trace: [ 423.758971][ T7007] [ 423.758991][ T7007] __dump_stack+0x21/0x30 [ 423.759113][ T7007] dump_stack_lvl+0x140/0x1c0 [ 423.759181][ T7007] ? __cfi_dump_stack_lvl+0x10/0x10 [ 423.759262][ T7007] ? vsnprintf+0x7b4/0x1ad0 [ 423.759372][ T7007] ? check_stack_object+0x10f/0x150 [ 423.759430][ T7007] dump_stack+0x19/0x20 [ 423.759505][ T7007] should_fail_ex+0x3c2/0x510 [ 423.759580][ T7007] should_fail+0xf/0x20 [ 423.759642][ T7007] should_fail_usercopy+0x1e/0x30 [ 423.759714][ T7007] _copy_from_user+0x20/0xa0 [ 423.759797][ T7007] kstrtouint_from_user+0xde/0x170 [ 423.759861][ T7007] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 423.759932][ T7007] ? selinux_file_permission+0x318/0xb60 [ 423.760001][ T7007] ? __cfi_selinux_file_permission+0x10/0x10 [ 423.760089][ T7007] proc_fail_nth_write+0x8f/0x220 [ 423.760200][ T7007] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 423.760286][ T7007] ? bpf_lsm_file_permission+0xd/0x20 [ 423.760367][ T7007] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 423.760451][ T7007] vfs_write+0x3c1/0xfd0 [ 423.760516][ T7007] ? __cfi_vfs_write+0x10/0x10 [ 423.760589][ T7007] ? __kasan_check_write+0x18/0x20 [ 423.760661][ T7007] ? mutex_lock+0x97/0x1d0 [ 423.760718][ T7007] ? __cfi_mutex_lock+0x10/0x10 [ 423.760783][ T7007] ksys_write+0x145/0x260 [ 423.760839][ T7007] ? __cfi_ksys_write+0x10/0x10 [ 423.760890][ T7007] ? __kasan_check_read+0x15/0x20 [ 423.760940][ T7007] __x64_sys_write+0x7f/0x90 [ 423.760996][ T7007] x64_sys_call+0x271c/0x2ee0 [ 423.761045][ T7007] do_syscall_64+0x57/0xf0 [ 423.761115][ T7007] ? clear_bhb_loop+0x50/0xa0 [ 423.761186][ T7007] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 423.761254][ T7007] RIP: 0033:0x7f86ba35e98e [ 423.761304][ T7007] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 423.761347][ T7007] RSP: 002b:00007f86bb1d2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 423.761413][ T7007] RAX: ffffffffffffffda RBX: 00007f86bb1d36c0 RCX: 00007f86ba35e98e [ 423.761468][ T7007] RDX: 0000000000000001 RSI: 00007f86bb1d30a0 RDI: 0000000000000004 [ 423.761514][ T7007] RBP: 00007f86bb1d3090 R08: 0000000000000000 R09: 0000000000000000 [ 423.761561][ T7007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.761606][ T7007] R13: 00007f86ba626038 R14: 00007f86ba625fa0 R15: 00007fffc1b82198 [ 423.761656][ T7007] [ 423.809496][ T7003] CPU: 0 UID: 0 PID: 7003 Comm: syz.0.2234 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 423.809655][ T7003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 423.809704][ T7003] Call Trace: [ 423.809727][ T7003] [ 423.809750][ T7003] __dump_stack+0x21/0x30 [ 423.809855][ T7003] dump_stack_lvl+0x140/0x1c0 [ 423.809943][ T7003] ? __cfi_dump_stack_lvl+0x10/0x10 [ 423.810044][ T7003] ? check_stack_object+0x138/0x150 [ 423.810115][ T7003] dump_stack+0x19/0x20 [ 423.810189][ T7003] should_fail_ex+0x3c2/0x510 [ 423.810260][ T7003] should_fail+0xf/0x20 [ 423.810322][ T7003] should_fail_usercopy+0x1e/0x30 [ 423.810393][ T7003] _copy_to_user+0x24/0xa0 [ 423.810484][ T7003] simple_read_from_buffer+0xed/0x160 [ 423.810536][ T7003] proc_fail_nth_read+0x1aa/0x220 [ 423.810565][ T7003] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 423.810594][ T7003] ? bpf_lsm_file_permission+0xd/0x20 [ 423.810619][ T7003] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 423.810649][ T7003] vfs_read+0x288/0xc70 [ 423.810668][ T7003] ? __kasan_slab_free+0x6a/0x80 [ 423.810695][ T7003] ? __cfi_vfs_read+0x10/0x10 [ 423.810717][ T7003] ? __kasan_check_write+0x18/0x20 [ 423.810789][ T7003] ? mutex_lock+0x97/0x1d0 [ 423.810871][ T7003] ? __cfi_mutex_lock+0x10/0x10 [ 423.810944][ T7003] ksys_read+0x145/0x260 [ 423.811002][ T7003] ? xfd_validate_state+0x68/0x140 [ 423.811082][ T7003] ? __cfi_ksys_read+0x10/0x10 [ 423.811141][ T7003] ? __kasan_check_write+0x18/0x20 [ 423.811200][ T7003] ? fpregs_restore_userregs+0x11c/0x260 [ 423.811261][ T7003] __x64_sys_read+0x7f/0x90 [ 423.811335][ T7003] x64_sys_call+0x2638/0x2ee0 [ 423.811369][ T7003] do_syscall_64+0x57/0xf0 [ 423.811454][ T7003] ? clear_bhb_loop+0x50/0xa0 [ 423.811527][ T7003] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 423.811586][ T7003] RIP: 0033:0x7fbb8e95e98e [ 423.811639][ T7003] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 423.811691][ T7003] RSP: 002b:00007fbb8f799fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 423.811758][ T7003] RAX: ffffffffffffffda RBX: 00007fbb8f79a6c0 RCX: 00007fbb8e95e98e [ 423.811801][ T7003] RDX: 000000000000000f RSI: 00007fbb8f79a0a0 RDI: 0000000000000004 [ 423.811846][ T7003] RBP: 00007fbb8f79a090 R08: 0000000000000000 R09: 0000000000000000 [ 423.811888][ T7003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 423.811923][ T7003] R13: 00007fbb8ec26038 R14: 00007fbb8ec25fa0 R15: 00007ffeb0f935b8 [ 423.811984][ T7003] [ 424.087777][ T535] usb 9-1: USB disconnect, device number 22 [ 424.312339][ T7019] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2238'. [ 424.649282][ T7047] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2253'. [ 424.662856][ T7051] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2255'. [ 424.748658][ T535] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 424.756784][ T36] audit: type=1326 audit(1787969908.240:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7046 comm="syz.9.2253" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd1a519e159 code=0x0 [ 424.783661][ T7056] netlink: 'syz.9.2253': attribute type 27 has an invalid length. [ 424.920408][ T535] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 424.932450][ T535] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 424.968656][ T535] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 424.987578][ T535] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 424.998631][ T535] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.018907][ T535] usb 4-1: Product: syz [ 425.024381][ T535] usb 4-1: Manufacturer: syz [ 425.033454][ T535] usb 4-1: SerialNumber: syz [ 425.045502][ T535] hub 4-1:1.0: bad descriptor, ignoring hub [ 425.057141][ T535] hub 4-1:1.0: probe with driver hub failed with error -5 [ 425.248827][ T535] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 67 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 425.534947][ T7070] FAULT_INJECTION: forcing a failure. [ 425.534947][ T7070] name failslab, interval 1, probability 0, space 0, times 0 [ 425.567588][ T7070] CPU: 0 UID: 0 PID: 7070 Comm: syz.9.2261 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 425.567631][ T7070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 425.567646][ T7070] Call Trace: [ 425.567655][ T7070] [ 425.567666][ T7070] __dump_stack+0x21/0x30 [ 425.567704][ T7070] dump_stack_lvl+0x140/0x1c0 [ 425.567737][ T7070] ? __cfi_dump_stack_lvl+0x10/0x10 [ 425.567772][ T7070] ? _parse_integer_limit+0x195/0x1e0 [ 425.567801][ T7070] dump_stack+0x19/0x20 [ 425.567833][ T7070] should_fail_ex+0x3c2/0x510 [ 425.567862][ T7070] should_failslab+0xac/0x100 [ 425.567894][ T7070] __kmalloc_cache_noprof+0x41/0x470 [ 425.567920][ T7070] ? __kasan_check_write+0x18/0x20 [ 425.567942][ T7070] ? input_allocate_device+0x62/0x400 [ 425.568084][ T7070] ? mutex_lock_interruptible+0x97/0x1d0 [ 425.568111][ T7070] ? __cfi_mutex_lock_interruptible+0x10/0x10 [ 425.568138][ T7070] input_allocate_device+0x62/0x400 [ 425.568159][ T7070] ? selinux_file_permission+0x318/0xb60 [ 425.568181][ T7070] uinput_write+0x97c/0xf10 [ 425.568251][ T7070] ? __cfi_uinput_write+0x10/0x10 [ 425.568272][ T7070] ? proc_fail_nth_write+0x184/0x220 [ 425.568305][ T7070] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 425.568338][ T7070] ? bpf_lsm_file_permission+0xd/0x20 [ 425.568369][ T7070] ? __cfi_uinput_write+0x10/0x10 [ 425.568390][ T7070] vfs_write+0x3c1/0xfd0 [ 425.568423][ T7070] ? __cfi_vfs_write+0x10/0x10 [ 425.568461][ T7070] ? __fget_files+0x2bc/0x330 [ 425.568492][ T7070] ksys_write+0x145/0x260 [ 425.568517][ T7070] ? __cfi_ksys_write+0x10/0x10 [ 425.568543][ T7070] ? __kasan_check_read+0x15/0x20 [ 425.568568][ T7070] __x64_sys_write+0x7f/0x90 [ 425.568596][ T7070] x64_sys_call+0x271c/0x2ee0 [ 425.568616][ T7070] do_syscall_64+0x57/0xf0 [ 425.568649][ T7070] ? clear_bhb_loop+0x50/0xa0 [ 425.568676][ T7070] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 425.568703][ T7070] RIP: 0033:0x7fd1a519e159 [ 425.568723][ T7070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.568743][ T7070] RSP: 002b:00007fd1a3be3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 425.568780][ T7070] RAX: ffffffffffffffda RBX: 00007fd1a5425fa0 RCX: 00007fd1a519e159 [ 425.568797][ T7070] RDX: 000000000000045c RSI: 0000200000000a00 RDI: 0000000000000003 [ 425.568812][ T7070] RBP: 00007fd1a3be3090 R08: 0000000000000000 R09: 0000000000000000 [ 425.568827][ T7070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.568841][ T7070] R13: 00007fd1a5426038 R14: 00007fd1a5425fa0 R15: 00007ffed11dc3e8 [ 425.568861][ T7070] [ 425.648986][ T314] usb 4-1: USB disconnect, device number 67 [ 425.871390][ T314] usblp0: removed [ 426.089539][ T339] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 426.249773][ T339] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.274417][ T339] usb 1-1: config 0 has no interfaces? [ 426.288770][ T339] usb 1-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00 [ 426.315307][ T339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.335637][ T339] usb 1-1: config 0 descriptor?? [ 426.549759][ T7110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.580782][ T7110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.611484][ T453] usb 1-1: USB disconnect, device number 32 [ 427.167903][ T7121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2280'. [ 427.188718][ T7125] FAULT_INJECTION: forcing a failure. [ 427.188718][ T7125] name failslab, interval 1, probability 0, space 0, times 0 [ 427.193581][ T7121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2280'. [ 427.240385][ T7125] CPU: 0 UID: 0 PID: 7125 Comm: syz.9.2281 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 427.240423][ T7125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 427.240438][ T7125] Call Trace: [ 427.240445][ T7125] [ 427.240455][ T7125] __dump_stack+0x21/0x30 [ 427.240493][ T7125] dump_stack_lvl+0x140/0x1c0 [ 427.240524][ T7125] ? __cfi_dump_stack_lvl+0x10/0x10 [ 427.240557][ T7125] dump_stack+0x19/0x20 [ 427.240586][ T7125] should_fail_ex+0x3c2/0x510 [ 427.240613][ T7125] should_failslab+0xac/0x100 [ 427.240641][ T7125] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 427.240668][ T7125] ? kvasprintf_const+0xf6/0x250 [ 427.240692][ T7125] kvasprintf+0xf1/0x260 [ 427.240714][ T7125] ? __cfi_kvasprintf+0x10/0x10 [ 427.240739][ T7125] kvasprintf_const+0xf6/0x250 [ 427.240771][ T7125] kobject_set_name_vargs+0x65/0x120 [ 427.240806][ T7125] dev_set_name+0xe3/0x140 [ 427.240834][ T7125] ? __hrtimer_init+0x74/0x1c0 [ 427.240952][ T7125] ? input_allocate_device+0x232/0x400 [ 427.240977][ T7125] ? __cfi_dev_set_name+0x10/0x10 [ 427.241004][ T7125] ? pm_runtime_init+0x281/0x370 [ 427.241032][ T7125] ? swiotlb_dev_init+0x1f/0x100 [ 427.241123][ T7125] input_allocate_device+0x253/0x400 [ 427.241146][ T7125] ? selinux_file_permission+0x318/0xb60 [ 427.241165][ T7125] uinput_write+0x97c/0xf10 [ 427.241185][ T7125] ? __cfi_uinput_write+0x10/0x10 [ 427.241202][ T7125] ? proc_fail_nth_write+0x184/0x220 [ 427.241229][ T7125] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 427.241257][ T7125] ? bpf_lsm_file_permission+0xd/0x20 [ 427.241282][ T7125] ? __cfi_uinput_write+0x10/0x10 [ 427.241300][ T7125] vfs_write+0x3c1/0xfd0 [ 427.241320][ T7125] ? __cfi_vfs_write+0x10/0x10 [ 427.241339][ T7125] ? __fget_files+0x2bc/0x330 [ 427.241364][ T7125] ksys_write+0x145/0x260 [ 427.241383][ T7125] ? __cfi_ksys_write+0x10/0x10 [ 427.241403][ T7125] ? __kasan_check_read+0x15/0x20 [ 427.241422][ T7125] __x64_sys_write+0x7f/0x90 [ 427.241441][ T7125] x64_sys_call+0x271c/0x2ee0 [ 427.241458][ T7125] do_syscall_64+0x57/0xf0 [ 427.241483][ T7125] ? clear_bhb_loop+0x50/0xa0 [ 427.241505][ T7125] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 427.241525][ T7125] RIP: 0033:0x7fd1a519e159 [ 427.241541][ T7125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.241558][ T7125] RSP: 002b:00007fd1a3be3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 427.241579][ T7125] RAX: ffffffffffffffda RBX: 00007fd1a5425fa0 RCX: 00007fd1a519e159 [ 427.241593][ T7125] RDX: 000000000000045c RSI: 0000200000000a00 RDI: 0000000000000003 [ 427.241605][ T7125] RBP: 00007fd1a3be3090 R08: 0000000000000000 R09: 0000000000000000 [ 427.241617][ T7125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.241629][ T7125] R13: 00007fd1a5426038 R14: 00007fd1a5425fa0 R15: 00007ffed11dc3e8 [ 427.241646][ T7125] [ 427.293142][ T7133] usb usb8: usbfs: process 7133 (syz.8.2286) did not claim interface 0 before use [ 427.690743][ T7156] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2293'. [ 427.818002][ T36] audit: type=1400 audit(1787969911.300:547): avc: denied { connect } for pid=7166 comm="syz.9.2299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 427.930348][ T36] audit: type=1400 audit(1787969911.420:548): avc: denied { nlmsg_tty_audit } for pid=7176 comm="syz.8.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 427.987625][ T7182] overlayfs: option "workdir=work" is useless in a non-upper mount, ignore [ 428.003401][ T7182] overlayfs: missing 'lowerdir' [ 428.038693][ T7187] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2307'. [ 428.058530][ T7189] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2308'. [ 428.147654][ T7195] FAULT_INJECTION: forcing a failure. [ 428.147654][ T7195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.177359][ T7195] CPU: 1 UID: 0 PID: 7195 Comm: syz.8.2310 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 428.177394][ T7195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 428.177413][ T7195] Call Trace: [ 428.177421][ T7195] [ 428.177430][ T7195] __dump_stack+0x21/0x30 [ 428.177466][ T7195] dump_stack_lvl+0x140/0x1c0 [ 428.177496][ T7195] ? __cfi_dump_stack_lvl+0x10/0x10 [ 428.177526][ T7195] ? check_stack_object+0x81/0x150 [ 428.177549][ T7195] ? __virt_addr_valid+0x2a1/0x370 [ 428.177582][ T7195] dump_stack+0x19/0x20 [ 428.177609][ T7195] should_fail_ex+0x3c2/0x510 [ 428.177634][ T7195] should_fail+0xf/0x20 [ 428.177656][ T7195] should_fail_usercopy+0x1e/0x30 [ 428.177682][ T7195] _copy_from_user+0x20/0xa0 [ 428.177715][ T7195] memdup_user+0x81/0x170 [ 428.177736][ T7195] ? uinput_write+0x9a0/0xf10 [ 428.177761][ T7195] uinput_write+0x22b/0xf10 [ 428.177790][ T7195] ? __cfi_uinput_write+0x10/0x10 [ 428.177815][ T7195] ? proc_fail_nth_write+0x184/0x220 [ 428.177855][ T7195] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 428.177893][ T7195] ? bpf_lsm_file_permission+0xd/0x20 [ 428.177944][ T7195] ? __cfi_uinput_write+0x10/0x10 [ 428.177972][ T7195] vfs_write+0x3c1/0xfd0 [ 428.178004][ T7195] ? __cfi_vfs_write+0x10/0x10 [ 428.178025][ T7195] ? __fget_files+0x2bc/0x330 [ 428.178071][ T7195] ksys_write+0x145/0x260 [ 428.178092][ T7195] ? __cfi_ksys_write+0x10/0x10 [ 428.178115][ T7195] ? __kasan_check_read+0x15/0x20 [ 428.178137][ T7195] __x64_sys_write+0x7f/0x90 [ 428.178160][ T7195] x64_sys_call+0x271c/0x2ee0 [ 428.178180][ T7195] do_syscall_64+0x57/0xf0 [ 428.178227][ T7195] ? clear_bhb_loop+0x50/0xa0 [ 428.178258][ T7195] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 428.178281][ T7195] RIP: 0033:0x7f4cf039e159 [ 428.178300][ T7195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.178319][ T7195] RSP: 002b:00007f4cf131a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 428.178368][ T7195] RAX: ffffffffffffffda RBX: 00007f4cf0625fa0 RCX: 00007f4cf039e159 [ 428.178396][ T7195] RDX: 000000000000045c RSI: 0000200000000a00 RDI: 0000000000000003 [ 428.178412][ T7195] RBP: 00007f4cf131a090 R08: 0000000000000000 R09: 0000000000000000 [ 428.178428][ T7195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.178443][ T7195] R13: 00007f4cf0626038 R14: 00007f4cf0625fa0 R15: 00007ffffd91fdd8 [ 428.178463][ T7195] [ 428.819925][ T7218] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2320'. [ 428.830669][ T7218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2320'. [ 428.918666][ T339] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 428.938647][ T535] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 429.079783][ T339] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 145, changing to 11 [ 429.091170][ T535] usb 4-1: device descriptor read/64, error -71 [ 429.108819][ T339] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 25088, setting to 1024 [ 429.138626][ T339] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 429.158632][ T339] usb 10-1: config 0 interface 0 has no altsetting 0 [ 429.175746][ T339] usb 10-1: New USB device found, idVendor=0ee7, idProduct=72c4, bcdDevice= 0.00 [ 429.198105][ T339] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.217349][ T339] usb 10-1: config 0 descriptor?? [ 429.328670][ T535] usb 4-1: device descriptor read/64, error -71 [ 429.568651][ T535] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 429.625477][ T339] hid-generic 0003:0EE7:72C4.0018: unknown main item tag 0x0 [ 429.643347][ T339] hid-generic 0003:0EE7:72C4.0018: unknown main item tag 0x0 [ 429.663568][ T339] hid-generic 0003:0EE7:72C4.0018: unknown main item tag 0x0 [ 429.678659][ T335] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 429.686640][ T339] hid-generic 0003:0EE7:72C4.0018: unknown main item tag 0x0 [ 429.698634][ T339] hid-generic 0003:0EE7:72C4.0018: unexpected long global item [ 429.706475][ T339] hid-generic 0003:0EE7:72C4.0018: probe with driver hid-generic failed with error -22 [ 429.718745][ T535] usb 4-1: device descriptor read/64, error -71 [ 429.827483][ T314] usb 10-1: USB disconnect, device number 26 [ 429.840164][ T335] usb 9-1: unable to get BOS descriptor or descriptor too short [ 429.849535][ T335] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 429.873805][ T335] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 429.884334][ T335] usb 9-1: New USB device found, idVendor=2d35, idProduct=6715, bcdDevice= 0.40 [ 429.884791][ T7229] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=72 sclass=netlink_xfrm_socket pid=7229 comm=syz.0.2325 [ 429.893576][ T335] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.915737][ T36] audit: type=1400 audit(1787969913.400:549): avc: denied { getopt } for pid=7228 comm="syz.0.2325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 429.935366][ T335] usb 9-1: Product: syz [ 429.936575][ T7229] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2325'. [ 429.945573][ T335] usb 9-1: Manufacturer: syz [ 429.955321][ T335] usb 9-1: SerialNumber: syz [ 429.978671][ T535] usb 4-1: device descriptor read/64, error -71 [ 430.088860][ T535] usb usb4-port1: attempt power cycle [ 430.162919][ T335] usb 9-1: USB disconnect, device number 23 [ 430.448687][ T535] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 430.463970][ T7239] netlink: 9 bytes leftover after parsing attributes in process `syz.9.2328'. [ 430.474187][ T7239] gretap0: entered promiscuous mode [ 430.474248][ T535] usb 4-1: device descriptor read/8, error -71 [ 430.558135][ T7249] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2332'. [ 430.569897][ T7249] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2332'. [ 430.629729][ T535] usb 4-1: device descriptor read/8, error -71 [ 430.878640][ T535] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 430.899688][ T535] usb 4-1: device descriptor read/8, error -71 [ 431.004550][ T7261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.028859][ T7261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.039690][ T535] usb 4-1: device descriptor read/8, error -71 [ 431.048811][ T453] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 431.150499][ T535] usb usb4-port1: unable to enumerate USB device [ 431.218632][ T453] usb 9-1: Using ep0 maxpacket: 8 [ 431.229766][ T453] usb 9-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 431.238754][ T339] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 431.240751][ T453] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.270489][ T453] usb 9-1: Product: syz [ 431.278769][ T453] usb 9-1: Manufacturer: syz [ 431.288783][ T453] usb 9-1: SerialNumber: syz [ 431.401335][ T339] usb 1-1: unable to get BOS descriptor or descriptor too short [ 431.413197][ T339] usb 1-1: config 129 has an invalid interface number: 80 but max is 0 [ 431.423943][ T339] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 431.440819][ T339] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 431.458652][ T339] usb 1-1: config 129 has no interface number 0 [ 431.467177][ T339] usb 1-1: config 129 has no interface number 1 [ 431.478119][ T339] usb 1-1: config 129 interface 80 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 431.500821][ T339] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 431.526004][ T339] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 431.553039][ T339] usb 1-1: config 129 interface 80 has no altsetting 0 [ 431.566691][ T339] usb 1-1: config 129 interface 5 has no altsetting 0 [ 431.601193][ T339] usb 1-1: string descriptor 0 read error: -22 [ 431.607504][ T339] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 431.616649][ T339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.669727][ T7266] FAULT_INJECTION: forcing a failure. [ 431.669727][ T7266] name failslab, interval 1, probability 0, space 0, times 0 [ 431.682771][ T7266] CPU: 1 UID: 0 PID: 7266 Comm: syz.9.2338 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 431.682817][ T7266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 431.682835][ T7266] Call Trace: [ 431.682844][ T7266] [ 431.682854][ T7266] __dump_stack+0x21/0x30 [ 431.682901][ T7266] dump_stack_lvl+0x140/0x1c0 [ 431.682933][ T7266] ? __cfi_dump_stack_lvl+0x10/0x10 [ 431.682969][ T7266] ? kasan_save_track+0x4f/0x80 [ 431.683000][ T7266] ? kasan_save_alloc_info+0x3a/0x50 [ 431.683024][ T7266] ? __kasan_kmalloc+0x96/0xb0 [ 431.683056][ T7266] dump_stack+0x19/0x20 [ 431.683087][ T7266] should_fail_ex+0x3c2/0x510 [ 431.683116][ T7266] should_failslab+0xac/0x100 [ 431.683146][ T7266] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 431.683173][ T7266] ? __d_alloc+0x42/0x8c0 [ 431.683196][ T7266] ? expand_files+0xda/0x6f0 [ 431.683228][ T7266] __d_alloc+0x42/0x8c0 [ 431.683250][ T7266] d_alloc_pseudo+0x23/0xc0 [ 431.683273][ T7266] alloc_file_pseudo+0xde/0x1f0 [ 431.683319][ T7266] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 431.683352][ T7266] ? _raw_spin_unlock+0x45/0x60 [ 431.683394][ T7266] anon_inode_getfile+0xaa/0x190 [ 431.683517][ T7266] __se_sys_timerfd_create+0x31d/0x590 [ 431.683556][ T7266] ? __x64_sys_timerfd_create+0x80/0x80 [ 431.683595][ T7266] ? __kasan_check_write+0x18/0x20 [ 431.683622][ T7266] __x64_sys_timerfd_create+0x5f/0x80 [ 431.683661][ T7266] x64_sys_call+0x2e54/0x2ee0 [ 431.683687][ T7266] do_syscall_64+0x57/0xf0 [ 431.683725][ T7266] ? clear_bhb_loop+0x50/0xa0 [ 431.683754][ T7266] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 431.683784][ T7266] RIP: 0033:0x7fd1a519e159 [ 431.683809][ T7266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.683832][ T7266] RSP: 002b:00007fd1a3be3028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 431.683861][ T7266] RAX: ffffffffffffffda RBX: 00007fd1a5425fa0 RCX: 00007fd1a519e159 [ 431.683882][ T7266] RDX: 0000000000000000 RSI: 0000000000080800 RDI: 0000000000000000 [ 431.683899][ T7266] RBP: 00007fd1a5235024 R08: 0000000000000000 R09: 0000000000000000 [ 431.683915][ T7266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.683931][ T7266] R13: 00007fd1a5426038 R14: 00007fd1a5425fa0 R15: 00007ffed11dc3e8 [ 431.683973][ T7266] [ 431.926287][ T453] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 431.933507][ T453] usb 9-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8204); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 431.949562][ T453] usb 9-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 431.994335][ T453] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 431.999223][ T339] usb 1-1: MIDIStreaming interface descriptor not found [ 432.010917][ T453] usb 9-1: USB disconnect, device number 24 [ 432.027863][ T339] usb 1-1: USB disconnect, device number 33 [ 432.065824][ T7277] SELinux: Context Ï is not valid (left unmapped). [ 432.215891][ T7290] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2345'. [ 432.385561][ T339] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 432.528647][ T339] usb 4-1: device descriptor read/64, error -71 [ 432.788638][ T339] usb 4-1: device descriptor read/64, error -71 [ 433.028645][ T339] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 433.134731][ T7321] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2356'. [ 433.188647][ T339] usb 4-1: device descriptor read/64, error -71 [ 433.204270][ T7324] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2357'. [ 433.213591][ T7324] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2357'. [ 433.260460][ T36] audit: type=1326 audit(1787969916.750:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7327 comm="syz.9.2359" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1a519e159 code=0x0 [ 433.297204][ T7330] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 433.328901][ T7331] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 433.448694][ T339] usb 4-1: device descriptor read/64, error -71 [ 433.488619][ T7346] netlink: 'syz.0.2367': attribute type 11 has an invalid length. [ 433.519206][ T7346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2306 sclass=netlink_route_socket pid=7346 comm=syz.0.2367 [ 433.558809][ T339] usb usb4-port1: attempt power cycle [ 433.648636][ T314] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 433.715241][ T7349] FAULT_INJECTION: forcing a failure. [ 433.715241][ T7349] name failslab, interval 1, probability 0, space 0, times 0 [ 433.749750][ T7349] CPU: 1 UID: 0 PID: 7349 Comm: syz.0.2368 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 433.749810][ T7349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 433.749829][ T7349] Call Trace: [ 433.749839][ T7349] [ 433.749850][ T7349] __dump_stack+0x21/0x30 [ 433.749895][ T7349] dump_stack_lvl+0x140/0x1c0 [ 433.749934][ T7349] ? __cfi_dump_stack_lvl+0x10/0x10 [ 433.749972][ T7349] ? __cfi_do_futex+0x10/0x10 [ 433.750028][ T7349] ? mutex_unlock+0x90/0x240 [ 433.750065][ T7349] dump_stack+0x19/0x20 [ 433.750104][ T7349] should_fail_ex+0x3c2/0x510 [ 433.750140][ T7349] should_failslab+0xac/0x100 [ 433.750178][ T7349] __kmalloc_cache_noprof+0x41/0x470 [ 433.750208][ T7349] ? do_epoll_create+0x85/0x3f0 [ 433.750246][ T7349] do_epoll_create+0x85/0x3f0 [ 433.750282][ T7349] __x64_sys_epoll_create1+0x3b/0x50 [ 433.750320][ T7349] x64_sys_call+0x1761/0x2ee0 [ 433.750352][ T7349] do_syscall_64+0x57/0xf0 [ 433.750393][ T7349] ? clear_bhb_loop+0x50/0xa0 [ 433.750426][ T7349] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 433.750456][ T7349] RIP: 0033:0x7fbb8e99e159 [ 433.750481][ T7349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.750522][ T7349] RSP: 002b:00007fbb8f79a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123 [ 433.750551][ T7349] RAX: ffffffffffffffda RBX: 00007fbb8ec25fa0 RCX: 00007fbb8e99e159 [ 433.750578][ T7349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 433.750597][ T7349] RBP: 00007fbb8ea35024 R08: 0000000000000000 R09: 0000000000000000 [ 433.750621][ T7349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.750642][ T7349] R13: 00007fbb8ec26038 R14: 00007fbb8ec25fa0 R15: 00007ffeb0f935b8 [ 433.750669][ T7349] [ 433.898843][ T339] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 433.902795][ T314] usb 9-1: device descriptor read/64, error -71 [ 433.950474][ T339] usb 4-1: device descriptor read/8, error -71 [ 433.963572][ T7351] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2369'. [ 433.975391][ T7351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2369'. [ 434.091559][ T339] usb 4-1: device descriptor read/8, error -71 [ 434.208652][ T314] usb 9-1: device descriptor read/64, error -71 [ 434.339244][ T339] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 434.365864][ T36] audit: type=1400 audit(1787969917.850:551): avc: denied { mount } for pid=7363 comm="syz.9.2374" name="/" dev="incremental-fs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 434.370961][ T339] usb 4-1: device descriptor read/8, error -71 [ 434.406580][ T36] audit: type=1400 audit(1787969917.890:552): avc: denied { unmount } for pid=5028 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 434.464272][ T314] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 434.529791][ T339] usb 4-1: device descriptor read/8, error -71 [ 434.608652][ T314] usb 9-1: device descriptor read/64, error -71 [ 434.638779][ T339] usb usb4-port1: unable to enumerate USB device [ 434.858666][ T314] usb 9-1: device descriptor read/64, error -71 [ 434.968735][ T314] usb usb9-port1: attempt power cycle [ 435.218976][ T7366] FAULT_INJECTION: forcing a failure. [ 435.218976][ T7366] name failslab, interval 1, probability 0, space 0, times 0 [ 435.233984][ T7366] CPU: 1 UID: 0 PID: 7366 Comm: syz.3.2375 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 435.234026][ T7366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 435.234043][ T7366] Call Trace: [ 435.234051][ T7366] [ 435.234061][ T7366] __dump_stack+0x21/0x30 [ 435.234104][ T7366] dump_stack_lvl+0x140/0x1c0 [ 435.234137][ T7366] ? __cfi_dump_stack_lvl+0x10/0x10 [ 435.234170][ T7366] ? vfs_write+0xbcf/0xfd0 [ 435.234196][ T7366] dump_stack+0x19/0x20 [ 435.234240][ T7366] should_fail_ex+0x3c2/0x510 [ 435.234269][ T7366] should_failslab+0xac/0x100 [ 435.234300][ T7366] __kmalloc_cache_noprof+0x41/0x470 [ 435.234326][ T7366] ? __se_sys_timerfd_create+0x1c6/0x590 [ 435.234364][ T7366] __se_sys_timerfd_create+0x1c6/0x590 [ 435.234399][ T7366] ? xfd_validate_state+0x68/0x140 [ 435.234433][ T7366] ? __x64_sys_timerfd_create+0x80/0x80 [ 435.234469][ T7366] ? __kasan_check_write+0x18/0x20 [ 435.234493][ T7366] __x64_sys_timerfd_create+0x5f/0x80 [ 435.234529][ T7366] x64_sys_call+0x2e54/0x2ee0 [ 435.234551][ T7366] do_syscall_64+0x57/0xf0 [ 435.234585][ T7366] ? clear_bhb_loop+0x50/0xa0 [ 435.234613][ T7366] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 435.234639][ T7366] RIP: 0033:0x7f86ba39e159 [ 435.234659][ T7366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.234678][ T7366] RSP: 002b:00007f86bb1d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 435.234704][ T7366] RAX: ffffffffffffffda RBX: 00007f86ba625fa0 RCX: 00007f86ba39e159 [ 435.234723][ T7366] RDX: 0000000000000000 RSI: 0000000000080800 RDI: 0000000000000000 [ 435.234739][ T7366] RBP: 00007f86ba435024 R08: 0000000000000000 R09: 0000000000000000 [ 435.234755][ T7366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.234770][ T7366] R13: 00007f86ba626038 R14: 00007f86ba625fa0 R15: 00007fffc1b82198 [ 435.234791][ T7366] [ 435.498664][ T314] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 435.519613][ T314] usb 9-1: device descriptor read/8, error -71 [ 435.542411][ T7372] SELinux: failed to load policy [ 435.649682][ T314] usb 9-1: device descriptor read/8, error -71 [ 435.688670][ T335] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 435.852328][ T335] usb 10-1: unable to get BOS descriptor or descriptor too short [ 435.862690][ T335] usb 10-1: config 129 has an invalid interface number: 80 but max is 0 [ 435.873548][ T335] usb 10-1: config 129 has an invalid interface number: 5 but max is 0 [ 435.882182][ T335] usb 10-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 435.891806][ T335] usb 10-1: config 129 has no interface number 0 [ 435.898410][ T335] usb 10-1: config 129 has no interface number 1 [ 435.905029][ T335] usb 10-1: config 129 interface 80 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 435.908864][ T314] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 435.919858][ T335] usb 10-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 435.938025][ T535] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 435.945942][ T335] usb 10-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 435.960254][ T314] usb 9-1: device descriptor read/8, error -71 [ 435.960809][ T335] usb 10-1: config 129 interface 80 has no altsetting 0 [ 435.973625][ T335] usb 10-1: config 129 interface 5 has no altsetting 0 [ 435.982877][ T335] usb 10-1: string descriptor 0 read error: -22 [ 435.989430][ T335] usb 10-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 435.998830][ T335] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.010028][ T335] usb 10-1: MIDIStreaming interface descriptor not found [ 436.089755][ T314] usb 9-1: device descriptor read/8, error -71 [ 436.118674][ T535] usb 4-1: Using ep0 maxpacket: 8 [ 436.125032][ T535] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 436.133896][ T535] usb 4-1: config 179 has no interface number 0 [ 436.140983][ T535] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 436.152804][ T535] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 436.165390][ T535] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 436.177396][ T535] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 436.189491][ T535] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 436.203056][ T535] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 436.212805][ T535] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.218827][ T314] usb usb9-port1: unable to enumerate USB device [ 436.224525][ T7377] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 436.257229][ T314] usb 10-1: USB disconnect, device number 27 [ 436.453808][ T535] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input59 [ 436.664667][ T46] usb 4-1: USB disconnect, device number 76 [ 436.664711][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 436.680208][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 436.681519][ T7388] netlink: 'syz.8.2382': attribute type 11 has an invalid length. [ 436.709152][ T46] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 436.778117][ T7391] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2384'. [ 436.868920][ T7397] x_tables: unsorted entry at hook 1 [ 437.038642][ T535] usb 10-1: new full-speed USB device number 28 using dummy_hcd [ 437.085196][ T7400] SELinux: failed to load policy [ 437.209663][ T535] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 437.246716][ T535] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 437.268614][ T535] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 437.291256][ T7416] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2394'. [ 437.308737][ T535] usb 10-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 437.328154][ T535] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.336420][ T36] audit: type=1400 audit(1787969920.810:553): avc: denied { write } for pid=7411 comm="syz.0.2392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 437.366350][ T535] usb 10-1: config 0 descriptor?? [ 437.378872][ T7393] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 437.508688][ T46] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 437.532463][ T7426] overlay: ./file1 is not a directory [ 437.663848][ T46] usb 9-1: config 0 has an invalid interface number: 128 but max is -1 [ 437.673489][ T46] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 437.683346][ T46] usb 9-1: config 0 has no interface number 0 [ 437.691065][ T46] usb 9-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=86.34 [ 437.700573][ T46] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.710661][ T46] usb 9-1: config 0 descriptor?? [ 437.797179][ T7439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.798001][ T535] apple 0003:05AC:029C.0019: unknown main item tag 0x0 [ 437.806300][ T7439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.831290][ T535] apple 0003:05AC:029C.0019: hidraw0: USB HID v0.05 Device [HID 05ac:029c] on usb-dummy_hcd.9-1/input0 [ 437.928235][ T46] usb 9-1: USB disconnect, device number 29 [ 437.997681][ T453] usb 10-1: USB disconnect, device number 28 [ 438.534579][ T7450] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2405'. [ 438.548634][ T453] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 438.708627][ T453] usb 4-1: Using ep0 maxpacket: 32 [ 438.715457][ T453] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.727797][ T453] usb 4-1: New USB device found, idVendor=0e41, idProduct=4242, bcdDevice= 0.40 [ 438.737379][ T453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.751432][ T453] usb 4-1: Product: syz [ 438.756036][ T453] usb 4-1: Manufacturer: syz [ 438.768877][ T453] usb 4-1: SerialNumber: syz [ 438.835254][ T7460] FAULT_INJECTION: forcing a failure. [ 438.835254][ T7460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.850290][ T7460] CPU: 1 UID: 0 PID: 7460 Comm: syz.0.2410 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 438.850332][ T7460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 438.850349][ T7460] Call Trace: [ 438.850358][ T7460] [ 438.850368][ T7460] __dump_stack+0x21/0x30 [ 438.850413][ T7460] dump_stack_lvl+0x140/0x1c0 [ 438.850446][ T7460] ? __cfi_dump_stack_lvl+0x10/0x10 [ 438.850482][ T7460] dump_stack+0x19/0x20 [ 438.850513][ T7460] should_fail_ex+0x3c2/0x510 [ 438.850543][ T7460] should_fail+0xf/0x20 [ 438.850570][ T7460] should_fail_usercopy+0x1e/0x30 [ 438.850600][ T7460] _copy_from_user+0x20/0xa0 [ 438.850634][ T7460] proc_control_compat+0xb2/0x190 [ 438.850661][ T7460] ? proc_submiturb+0x1c0/0x1c0 [ 438.850685][ T7460] ? mutex_lock+0x97/0x1d0 [ 438.850713][ T7460] ? __kasan_check_write+0x18/0x20 [ 438.850739][ T7460] ? mutex_unlock+0x90/0x240 [ 438.850766][ T7460] usbdev_ioctl+0x13d8/0x2120 [ 438.850791][ T7460] ? __cfi_usbdev_ioctl+0x10/0x10 [ 438.850814][ T7460] ? __fget_files+0x2bc/0x330 [ 438.850843][ T7460] ? bpf_lsm_file_ioctl+0xd/0x20 [ 438.850875][ T7460] ? security_file_ioctl+0x3e/0x110 [ 438.850899][ T7460] ? __cfi_usbdev_ioctl+0x10/0x10 [ 438.850922][ T7460] __se_sys_ioctl+0x123/0x1b0 [ 438.850963][ T7460] __x64_sys_ioctl+0x7f/0xa0 [ 438.850993][ T7460] x64_sys_call+0x1878/0x2ee0 [ 438.851016][ T7460] do_syscall_64+0x57/0xf0 [ 438.851050][ T7460] ? clear_bhb_loop+0x50/0xa0 [ 438.851079][ T7460] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 438.851106][ T7460] RIP: 0033:0x7fbb8e99e159 [ 438.851127][ T7460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.851149][ T7460] RSP: 002b:00007fbb8f79a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 438.851177][ T7460] RAX: ffffffffffffffda RBX: 00007fbb8ec25fa0 RCX: 00007fbb8e99e159 [ 438.851196][ T7460] RDX: 0000200000000040 RSI: 00000000c0105500 RDI: 0000000000000003 [ 438.851213][ T7460] RBP: 00007fbb8f79a090 R08: 0000000000000000 R09: 0000000000000000 [ 438.851230][ T7460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.851246][ T7460] R13: 00007fbb8ec26038 R14: 00007fbb8ec25fa0 R15: 00007ffeb0f935b8 [ 438.851268][ T7460] [ 438.878800][ T535] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 439.101345][ T7466] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2411'. [ 439.111212][ T7466] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2411'. [ 439.147751][ T36] audit: type=1400 audit(1787969922.630:554): avc: denied { mount } for pid=7469 comm="syz.8.2414" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 439.659787][ T535] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.680420][ T535] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 439.689728][ T535] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.698207][ T535] usb 10-1: Product: syz [ 439.718628][ T535] usb 10-1: Manufacturer: syz [ 439.723428][ T535] usb 10-1: SerialNumber: syz [ 440.269880][ T7481] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2418'. [ 440.464578][ T7494] FAULT_INJECTION: forcing a failure. [ 440.464578][ T7494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.478804][ T7494] CPU: 1 UID: 0 PID: 7494 Comm: syz.0.2422 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 440.478844][ T7494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 440.478860][ T7494] Call Trace: [ 440.478869][ T7494] [ 440.478879][ T7494] __dump_stack+0x21/0x30 [ 440.478924][ T7494] dump_stack_lvl+0x140/0x1c0 [ 440.478958][ T7494] ? __cfi_dump_stack_lvl+0x10/0x10 [ 440.478992][ T7494] ? vsnprintf+0x7b4/0x1ad0 [ 440.479025][ T7494] ? check_stack_object+0x10f/0x150 [ 440.479052][ T7494] dump_stack+0x19/0x20 [ 440.479085][ T7494] should_fail_ex+0x3c2/0x510 [ 440.479115][ T7494] should_fail+0xf/0x20 [ 440.479139][ T7494] should_fail_usercopy+0x1e/0x30 [ 440.479168][ T7494] _copy_from_user+0x20/0xa0 [ 440.479203][ T7494] kstrtouint_from_user+0xde/0x170 [ 440.479230][ T7494] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 440.479258][ T7494] ? selinux_file_permission+0x318/0xb60 [ 440.479286][ T7494] ? __cfi_selinux_file_permission+0x10/0x10 [ 440.479311][ T7494] proc_fail_nth_write+0x8f/0x220 [ 440.479356][ T7494] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 440.479402][ T7494] ? bpf_lsm_file_permission+0xd/0x20 [ 440.479434][ T7494] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 440.479468][ T7494] vfs_write+0x3c1/0xfd0 [ 440.479495][ T7494] ? __cfi_vfs_write+0x10/0x10 [ 440.479519][ T7494] ? __kasan_check_write+0x18/0x20 [ 440.479544][ T7494] ? mutex_lock+0x97/0x1d0 [ 440.479569][ T7494] ? __cfi_mutex_lock+0x10/0x10 [ 440.479597][ T7494] ksys_write+0x145/0x260 [ 440.479621][ T7494] ? __cfi_ksys_write+0x10/0x10 [ 440.479646][ T7494] ? fdget+0x188/0x1e0 [ 440.479675][ T7494] ? __kasan_check_read+0x15/0x20 [ 440.479699][ T7494] __x64_sys_write+0x7f/0x90 [ 440.479725][ T7494] x64_sys_call+0x271c/0x2ee0 [ 440.479748][ T7494] do_syscall_64+0x57/0xf0 [ 440.479781][ T7494] ? clear_bhb_loop+0x50/0xa0 [ 440.479826][ T7494] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 440.479852][ T7494] RIP: 0033:0x7fbb8e95e98e [ 440.479873][ T7494] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 440.479907][ T7494] RSP: 002b:00007fbb8d3f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 440.479933][ T7494] RAX: ffffffffffffffda RBX: 00007fbb8d3f76c0 RCX: 00007fbb8e95e98e [ 440.479952][ T7494] RDX: 0000000000000001 RSI: 00007fbb8d3f70a0 RDI: 0000000000000004 [ 440.479968][ T7494] RBP: 00007fbb8d3f7090 R08: 0000000000000000 R09: 0000000000000000 [ 440.479983][ T7494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.479998][ T7494] R13: 00007fbb8ec26128 R14: 00007fbb8ec26090 R15: 00007ffeb0f935b8 [ 440.480019][ T7494] [ 440.648829][ T430] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 440.778794][ T535] cdc_ncm 10-1:1.0: failed to get mac address [ 440.938654][ T430] usb 9-1: Using ep0 maxpacket: 32 [ 440.948996][ T430] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.966977][ T535] cdc_ncm 10-1:1.0: bind() failure [ 440.973665][ T535] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 440.980840][ T535] cdc_ncm 10-1:1.1: bind() failure [ 440.998643][ T430] usb 9-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 441.007913][ T430] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.016178][ T430] usb 9-1: Product: syz [ 441.020508][ T430] usb 9-1: Manufacturer: syz [ 441.025167][ T430] usb 9-1: SerialNumber: syz [ 441.031568][ T430] usb 9-1: config 0 descriptor?? [ 441.037428][ T430] usb 9-1: bad CDC descriptors [ 441.042635][ T430] usb 9-1: unsupported MDLM descriptors [ 441.174663][ T46] usb 10-1: USB disconnect, device number 29 [ 441.325582][ T453] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 441.350045][ T453] usb-storage 4-1:1.2: USB Mass Storage device detected [ 441.353370][ T7506] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2427'. [ 441.379467][ T7506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2427'. [ 441.430836][ T453] usb 4-1: USB disconnect, device number 77 [ 441.440143][ T7510] fuse: Unknown parameter 'f­+mÒúw×[•¢gÙ/vœ ²~÷¡m™¾' [ 441.442709][ T36] audit: type=1400 audit(1787969924.930:555): avc: denied { mounton } for pid=7509 comm="syz.3.2428" path="/250/tracing/uprobe_events" dev="tracefs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 441.713423][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2431'. [ 441.802601][ T7519] usb usb9: usbfs: process 7519 (syz.3.2432) did not claim interface 1 before use [ 441.907559][ T7523] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=7523 comm=syz.9.2434 [ 442.188664][ T314] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 442.228657][ T453] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 442.243588][ T7530] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2437'. [ 442.252915][ T7530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2437'. [ 442.338640][ T314] usb 4-1: device descriptor read/64, error -71 [ 442.388652][ T453] usb 10-1: Using ep0 maxpacket: 32 [ 442.395657][ T453] usb 10-1: config 0 has an invalid interface number: 196 but max is 0 [ 442.405265][ T453] usb 10-1: config 0 has no interface number 0 [ 442.411925][ T453] usb 10-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 442.423014][ T453] usb 10-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 442.433669][ T453] usb 10-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 442.444414][ T453] usb 10-1: config 0 interface 196 has no altsetting 0 [ 442.453304][ T453] usb 10-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 442.463070][ T453] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.471682][ T453] usb 10-1: Product: syz [ 442.476158][ T453] usb 10-1: Manufacturer: syz [ 442.481209][ T453] usb 10-1: SerialNumber: syz [ 442.487562][ T453] usb 10-1: config 0 descriptor?? [ 442.493534][ T7525] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 442.598789][ T314] usb 4-1: device descriptor read/64, error -71 [ 442.858652][ T314] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 442.902490][ T453] ipheth 10-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 442.917079][ T453] ipheth 10-1:0.196: probe with driver ipheth failed with error -22 [ 442.998691][ T314] usb 4-1: device descriptor read/64, error -71 [ 443.102957][ T36] audit: type=1326 audit(1787969926.590:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7524 comm="syz.9.2435" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd1a519e159 code=0x0 [ 443.159436][ T7535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.164127][ T36] audit: type=1326 audit(1787969926.650:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7524 comm="syz.9.2435" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd1a519e159 code=0x0 [ 443.168447][ T7535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.288703][ T314] usb 4-1: device descriptor read/64, error -71 [ 443.296322][ T7543] Dead loop on virtual device ip6_vti0, fix it urgently! [ 443.312470][ T7546] Dead loop on virtual device ip6_vti0, fix it urgently! [ 443.369490][ T453] usb 9-1: USB disconnect, device number 30 [ 443.408776][ T314] usb usb4-port1: attempt power cycle [ 443.758680][ T314] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 443.799625][ T314] usb 4-1: device descriptor read/8, error -71 [ 443.929710][ T314] usb 4-1: device descriptor read/8, error -71 [ 444.178632][ T314] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 444.209792][ T314] usb 4-1: device descriptor read/8, error -71 [ 444.253762][ T7568] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2447'. [ 444.278620][ T7568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2447'. [ 444.342916][ T7570] sock: sock_timestamping_bind_phc: sock not bind to device [ 444.361055][ T314] usb 4-1: device descriptor read/8, error -71 [ 444.479382][ T314] usb usb4-port1: unable to enumerate USB device [ 444.608662][ T453] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 444.778627][ T453] usb 1-1: Using ep0 maxpacket: 8 [ 444.799674][ T453] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 444.807336][ T453] usb 1-1: can't read configurations, error -61 [ 444.817852][ T7577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7577 comm=syz.8.2451 [ 444.833350][ T7577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30234 sclass=netlink_route_socket pid=7577 comm=syz.8.2451 [ 444.938667][ T453] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 445.007284][ T430] usb 10-1: USB disconnect, device number 30 [ 445.108641][ T453] usb 1-1: Using ep0 maxpacket: 8 [ 445.118672][ T314] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 445.128471][ T453] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 445.148869][ T453] usb 1-1: can't read configurations, error -61 [ 445.155419][ T453] usb usb1-port1: attempt power cycle [ 445.298628][ T314] usb 9-1: Using ep0 maxpacket: 8 [ 445.304923][ T314] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 445.313527][ T314] usb 9-1: config 0 has no interface number 0 [ 445.321432][ T314] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 445.331175][ T314] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.339470][ T314] usb 9-1: Product: syz [ 445.343862][ T314] usb 9-1: Manufacturer: syz [ 445.348806][ T314] usb 9-1: SerialNumber: syz [ 445.354935][ T314] usb 9-1: config 0 descriptor?? [ 445.498658][ T453] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 445.529026][ T453] usb 1-1: Using ep0 maxpacket: 8 [ 445.537827][ T453] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 445.547436][ T453] usb 1-1: can't read configurations, error -61 [ 445.562918][ T7580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.572142][ T7580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.581241][ T7580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.590177][ T7580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.600266][ T314] usb 9-1: USB disconnect, device number 31 [ 445.678717][ T453] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 445.699049][ T453] usb 1-1: Using ep0 maxpacket: 8 [ 445.706932][ T453] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 445.715117][ T453] usb 1-1: can't read configurations, error -61 [ 445.722058][ T453] usb usb1-port1: unable to enumerate USB device [ 446.608641][ T430] usb 9-1: new full-speed USB device number 32 using dummy_hcd [ 446.781655][ T430] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 446.800556][ T430] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 96, setting to 64 [ 446.817427][ T430] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 446.832306][ T430] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 446.842485][ T7609] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2462'. [ 446.851581][ T430] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 446.860261][ T430] usb 9-1: SerialNumber: syz [ 446.865075][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2462'. [ 446.875719][ T7607] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 446.883875][ T430] hub 9-1:1.0: bad descriptor, ignoring hub [ 446.893215][ T430] hub 9-1:1.0: probe with driver hub failed with error -5 [ 447.090584][ T7607] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 447.158642][ T453] usb 4-1: new low-speed USB device number 82 using dummy_hcd [ 447.318633][ T453] usb 4-1: Invalid ep0 maxpacket: 32 [ 447.419009][ T430] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 447.458625][ T453] usb 4-1: new low-speed USB device number 83 using dummy_hcd [ 447.459741][ T430] usb 9-1: USB disconnect, device number 32 [ 447.628623][ T453] usb 4-1: Invalid ep0 maxpacket: 32 [ 447.638492][ T453] usb usb4-port1: attempt power cycle [ 447.908656][ T430] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 448.008632][ T453] usb 4-1: new low-speed USB device number 84 using dummy_hcd [ 448.049054][ T453] usb 4-1: Invalid ep0 maxpacket: 32 [ 448.063483][ T7626] usb usb9: usbfs: process 7626 (syz.8.2468) did not claim interface 0 before use [ 448.076769][ T430] usb 1-1: Using ep0 maxpacket: 8 [ 448.085716][ T430] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 448.101834][ T430] usb 1-1: config 179 has no interface number 0 [ 448.110228][ T430] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 448.137054][ T7628] FAULT_INJECTION: forcing a failure. [ 448.137054][ T7628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.150251][ T430] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 448.162207][ T430] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 448.173711][ T7628] CPU: 0 UID: 0 PID: 7628 Comm: syz.8.2469 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 448.173760][ T7628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 448.173776][ T7628] Call Trace: [ 448.173786][ T7628] [ 448.173796][ T7628] __dump_stack+0x21/0x30 [ 448.173841][ T7628] dump_stack_lvl+0x140/0x1c0 [ 448.173876][ T7628] ? __cfi_dump_stack_lvl+0x10/0x10 [ 448.173913][ T7628] ? check_stack_object+0x81/0x150 [ 448.173942][ T7628] ? __virt_addr_valid+0x2a1/0x370 [ 448.173974][ T7628] dump_stack+0x19/0x20 [ 448.174008][ T7628] should_fail_ex+0x3c2/0x510 [ 448.174039][ T7628] should_fail+0xf/0x20 [ 448.174065][ T7628] should_fail_usercopy+0x1e/0x30 [ 448.174097][ T7628] _copy_from_user+0x20/0xa0 [ 448.174133][ T7628] __se_sys_memfd_create+0x308/0x8f0 [ 448.174162][ T7628] ? __x64_sys_memfd_create+0x80/0x80 [ 448.174190][ T7628] ? __kasan_check_write+0x18/0x20 [ 448.174218][ T7628] __x64_sys_memfd_create+0x5f/0x80 [ 448.174245][ T7628] x64_sys_call+0x29f8/0x2ee0 [ 448.174268][ T7628] do_syscall_64+0x57/0xf0 [ 448.174305][ T7628] ? clear_bhb_loop+0x50/0xa0 [ 448.174335][ T7628] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 448.174364][ T7628] RIP: 0033:0x7f4cf039e159 [ 448.174387][ T7628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.174410][ T7628] RSP: 002b:00007f4cf131a028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 448.174438][ T7628] RAX: ffffffffffffffda RBX: 00007f4cf0625fa0 RCX: 00007f4cf039e159 [ 448.174456][ T7628] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 448.174474][ T7628] RBP: 00007f4cf0435024 R08: 0000000000000000 R09: 0000000000000000 [ 448.174491][ T7628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.174508][ T7628] R13: 00007f4cf0626038 R14: 00007f4cf0625fa0 R15: 00007ffffd91fdd8 [ 448.174530][ T7628] [ 448.177868][ T430] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 448.200378][ T453] usb 4-1: new low-speed USB device number 85 using dummy_hcd [ 448.206393][ T430] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 448.249245][ T453] usb 4-1: Invalid ep0 maxpacket: 32 [ 448.257869][ T430] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 448.269042][ T453] usb usb4-port1: unable to enumerate USB device [ 448.270867][ T430] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.433976][ T7622] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 448.652797][ T430] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input66 [ 449.338622][ T430] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 449.519746][ T430] usb 9-1: config index 0 descriptor too short (expected 7768, got 18) [ 449.528403][ T430] usb 9-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 449.537947][ T430] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.547328][ T430] usb 9-1: config 0 descriptor?? [ 449.555487][ T430] ftdi_sio 9-1:0.0: Ignoring interface reserved for JTAG [ 449.757073][ T36] audit: type=1400 audit(1787969933.240:558): avc: denied { create } for pid=7634 comm="syz.8.2471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 449.990758][ T7656] usb usb9: usbfs: process 7656 (syz.3.2477) did not claim interface 1 before use [ 450.688650][ T535] usb 1-1: USB disconnect, device number 38 [ 450.694677][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 450.694719][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 450.745742][ T535] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 450.798754][ T7662] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2481'. [ 450.829005][ T7662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2481'. [ 450.874014][ T7667] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2483'. [ 451.088665][ T314] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 451.248655][ T314] usb 10-1: Using ep0 maxpacket: 8 [ 451.263195][ T314] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.276920][ T314] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 451.300662][ T314] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 451.332165][ T314] usb 10-1: config 0 interface 0 has no altsetting 0 [ 451.346889][ T314] usb 10-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 451.366303][ T314] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.383983][ T314] usb 10-1: config 0 descriptor?? [ 451.397395][ T7664] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 451.809120][ T7664] Unsupported ieee802154 address type: 0 [ 451.825220][ T314] ntrig 0003:1B96:000A.001A: unknown main item tag 0x0 [ 451.840944][ T314] ntrig 0003:1B96:000A.001A: unknown main item tag 0x0 [ 451.862959][ T314] ntrig 0003:1B96:000A.001A: unknown main item tag 0x0 [ 451.875883][ T314] ntrig 0003:1B96:000A.001A: unknown main item tag 0x0 [ 451.889767][ T314] ntrig 0003:1B96:000A.001A: unknown main item tag 0x0 [ 451.906983][ T314] ntrig 0003:1B96:000A.001A: unknown main item tag 0x0 [ 451.920888][ T314] ntrig 0003:1B96:000A.001A: unknown main item tag 0x0 [ 451.925476][ T7675] netlink: 'syz.0.2487': attribute type 1 has an invalid length. [ 451.935890][ T314] ntrig 0003:1B96:000A.001A: unknown main item tag 0x0 [ 451.946039][ T7675] netlink: 'syz.0.2487': attribute type 32 has an invalid length. [ 451.950973][ T314] ntrig 0003:1B96:000A.001A: unknown main item tag 0x0 [ 451.974101][ T314] ntrig 0003:1B96:000A.001A: unknown main item tag 0x0 [ 451.988626][ T314] ntrig 0003:1B96:000A.001A: unknown main item tag 0x0 [ 452.005914][ T314] ntrig 0003:1B96:000A.001A: unknown main item tag 0x0 [ 452.017251][ T430] usb 9-1: USB disconnect, device number 33 [ 452.018829][ T314] ntrig 0003:1B96:000A.001A: unknown main item tag 0x0 [ 452.048637][ T314] ntrig 0003:1B96:000A.001A: unknown main item tag 0x0 [ 452.058768][ T314] ntrig 0003:1B96:000A.001A: unknown main item tag 0x0 [ 452.065691][ T314] ntrig 0003:1B96:000A.001A: unknown main item tag 0x0 [ 452.088644][ T314] ntrig 0003:1B96:000A.001A: unbalanced collection at end of report description [ 452.108894][ T314] ntrig 0003:1B96:000A.001A: parse failed [ 452.114812][ T314] ntrig 0003:1B96:000A.001A: probe with driver ntrig failed with error -22 [ 452.378651][ T430] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 452.549711][ T430] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 452.561505][ T430] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 452.583009][ T430] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 452.611076][ T430] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 452.620548][ T430] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.633317][ T430] usb 9-1: Product: syz [ 452.643064][ T430] usb 9-1: Manufacturer: syz [ 452.652313][ T430] usb 9-1: SerialNumber: syz [ 452.665155][ T430] hub 9-1:1.0: bad descriptor, ignoring hub [ 452.677745][ T430] hub 9-1:1.0: probe with driver hub failed with error -5 [ 452.866754][ T430] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 452.925423][ T7691] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2491'. [ 452.948614][ T7691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2491'. [ 453.228750][ T430] usb 9-1: USB disconnect, device number 34 [ 453.235867][ T430] usblp0: removed [ 453.549595][ T7695] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2493'. [ 453.623843][ T7697] FAULT_INJECTION: forcing a failure. [ 453.623843][ T7697] name failslab, interval 1, probability 0, space 0, times 0 [ 453.653847][ T7697] CPU: 1 UID: 0 PID: 7697 Comm: syz.0.2494 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 453.653892][ T7697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 453.653909][ T7697] Call Trace: [ 453.653919][ T7697] [ 453.653930][ T7697] __dump_stack+0x21/0x30 [ 453.653975][ T7697] dump_stack_lvl+0x140/0x1c0 [ 453.654012][ T7697] ? __cfi_dump_stack_lvl+0x10/0x10 [ 453.654048][ T7697] ? vfs_write+0xbcf/0xfd0 [ 453.654079][ T7697] dump_stack+0x19/0x20 [ 453.654113][ T7697] should_fail_ex+0x3c2/0x510 [ 453.654144][ T7697] ? __se_sys_memfd_create+0x2cb/0x8f0 [ 453.654171][ T7697] should_failslab+0xac/0x100 [ 453.654203][ T7697] __kmalloc_noprof+0x69/0x510 [ 453.654243][ T7697] ? __se_sys_futex+0x13c/0x320 [ 453.654277][ T7697] ? __se_sys_memfd_create+0x2cb/0x8f0 [ 453.654304][ T7697] ? strnlen_user+0xaa/0x180 [ 453.654429][ T7697] __se_sys_memfd_create+0x2cb/0x8f0 [ 453.654458][ T7697] ? __x64_sys_memfd_create+0x80/0x80 [ 453.654485][ T7697] ? __kasan_check_write+0x18/0x20 [ 453.654523][ T7697] __x64_sys_memfd_create+0x5f/0x80 [ 453.654549][ T7697] x64_sys_call+0x29f8/0x2ee0 [ 453.654570][ T7697] do_syscall_64+0x57/0xf0 [ 453.654605][ T7697] ? clear_bhb_loop+0x50/0xa0 [ 453.654632][ T7697] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 453.654658][ T7697] RIP: 0033:0x7fbb8e99e159 [ 453.654680][ T7697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.654701][ T7697] RSP: 002b:00007fbb8f79a028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 453.654728][ T7697] RAX: ffffffffffffffda RBX: 00007fbb8ec25fa0 RCX: 00007fbb8e99e159 [ 453.654746][ T7697] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 453.654763][ T7697] RBP: 00007fbb8ea35024 R08: 0000000000000000 R09: 0000000000000000 [ 453.654778][ T7697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.654793][ T7697] R13: 00007fbb8ec26038 R14: 00007fbb8ec25fa0 R15: 00007ffeb0f935b8 [ 453.654813][ T7697] [ 453.946639][ T339] usb 10-1: USB disconnect, device number 31 [ 454.699231][ T7712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.724227][ T7712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.788672][ T453] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 454.928660][ T314] usb 9-1: new full-speed USB device number 35 using dummy_hcd [ 454.936735][ T453] usb 1-1: device descriptor read/64, error -71 [ 455.089662][ T314] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 455.108630][ T314] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 455.129730][ T314] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 455.139262][ T314] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.158621][ T314] usb 9-1: Product: syz [ 455.168751][ T314] usb 9-1: Manufacturer: syz [ 455.178647][ T314] usb 9-1: SerialNumber: syz [ 455.188621][ T453] usb 1-1: device descriptor read/64, error -71 [ 455.399351][ T314] usb 9-1: 0:2 : does not exist [ 455.406364][ T36] audit: type=1400 audit(1787969938.890:559): avc: denied { watch watch_reads } for pid=7723 comm="syz.9.2500" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 455.431814][ T453] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 455.456624][ T314] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 455.479796][ T314] usb 9-1: USB disconnect, device number 35 [ 455.588623][ T453] usb 1-1: device descriptor read/64, error -71 [ 455.595246][ T7726] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2501'. [ 455.615518][ T7726] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2501'. [ 455.791972][ T7734] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2503'. [ 455.828646][ T453] usb 1-1: device descriptor read/64, error -71 [ 455.948782][ T453] usb usb1-port1: attempt power cycle [ 456.108630][ T314] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 456.278638][ T314] usb 10-1: Using ep0 maxpacket: 32 [ 456.289715][ T314] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.308643][ T453] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 456.326477][ T314] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.349970][ T314] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 456.368730][ T314] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 456.378124][ T453] usb 1-1: device descriptor read/8, error -71 [ 456.387428][ T314] usb 10-1: Product: syz [ 456.397534][ T314] usb 10-1: Manufacturer: syz [ 456.409618][ T314] hub 10-1:4.0: USB hub found [ 456.510032][ T453] usb 1-1: device descriptor read/8, error -71 [ 456.618662][ T314] hub 10-1:4.0: 9 ports detected [ 456.633979][ T314] hub 10-1:4.0: insufficient power available to use all downstream ports [ 456.758668][ T453] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 456.789694][ T453] usb 1-1: device descriptor read/8, error -71 [ 456.815602][ T314] hub 10-1:4.0: hub_hub_status failed (err = -71) [ 456.822384][ T314] hub 10-1:4.0: config failed, can't get hub status (err -71) [ 456.860188][ T314] usb 10-1: USB disconnect, device number 32 [ 456.919657][ T453] usb 1-1: device descriptor read/8, error -71 [ 457.028773][ T453] usb usb1-port1: unable to enumerate USB device [ 457.237772][ T7749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=7749 comm=syz.8.2507 [ 457.251705][ T7749] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2507'. [ 457.490718][ T7761] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2510'. [ 457.508642][ T430] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 457.518813][ T7761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2510'. [ 457.658648][ T430] usb 9-1: device descriptor read/64, error -71 [ 457.910673][ T430] usb 9-1: device descriptor read/64, error -71 [ 458.042266][ T36] audit: type=1400 audit(1787969941.530:560): avc: denied { create } for pid=7774 comm="syz.0.2516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 458.173963][ T430] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 458.338623][ T430] usb 9-1: device descriptor read/64, error -71 [ 458.579386][ T7782] FAULT_INJECTION: forcing a failure. [ 458.579386][ T7782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.598709][ T430] usb 9-1: device descriptor read/64, error -71 [ 458.629013][ T7782] CPU: 0 UID: 0 PID: 7782 Comm: syz.0.2517 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 458.629076][ T7782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 458.629092][ T7782] Call Trace: [ 458.629100][ T7782] [ 458.629110][ T7782] __dump_stack+0x21/0x30 [ 458.629152][ T7782] dump_stack_lvl+0x140/0x1c0 [ 458.629185][ T7782] ? __cfi_dump_stack_lvl+0x10/0x10 [ 458.629219][ T7782] ? avc_has_perm_noaudit+0x289/0x360 [ 458.629252][ T7782] dump_stack+0x19/0x20 [ 458.629283][ T7782] should_fail_ex+0x3c2/0x510 [ 458.629311][ T7782] should_fail+0xf/0x20 [ 458.629332][ T7782] should_fail_usercopy+0x1e/0x30 [ 458.629358][ T7782] _copy_from_user+0x20/0xa0 [ 458.629390][ T7782] hci_dev_cmd+0xae/0x770 [ 458.629508][ T7782] ? __cfi_hci_dev_cmd+0x10/0x10 [ 458.629536][ T7782] ? bpf_lsm_capable+0xd/0x20 [ 458.629607][ T7782] ? __x64_sys_lsm_set_self_attr+0x30/0x140 [ 458.629636][ T7782] hci_sock_ioctl+0x69a/0x9e0 [ 458.629713][ T7782] sock_do_ioctl+0x115/0x330 [ 458.629738][ T7782] ? sock_show_fdinfo+0xd0/0xd0 [ 458.629761][ T7782] ? __cfi_vfs_write+0x10/0x10 [ 458.629787][ T7782] ? __kasan_check_write+0x18/0x20 [ 458.629814][ T7782] ? mutex_unlock+0x90/0x240 [ 458.629842][ T7782] sock_ioctl+0x568/0x7e0 [ 458.629877][ T7782] ? __cfi_sock_ioctl+0x10/0x10 [ 458.629912][ T7782] ? __fget_files+0x2bc/0x330 [ 458.629943][ T7782] ? bpf_lsm_file_ioctl+0xd/0x20 [ 458.629974][ T7782] ? security_file_ioctl+0x3e/0x110 [ 458.629998][ T7782] ? __cfi_sock_ioctl+0x10/0x10 [ 458.630054][ T7782] __se_sys_ioctl+0x123/0x1b0 [ 458.630084][ T7782] __x64_sys_ioctl+0x7f/0xa0 [ 458.630113][ T7782] x64_sys_call+0x1878/0x2ee0 [ 458.630135][ T7782] do_syscall_64+0x57/0xf0 [ 458.630168][ T7782] ? clear_bhb_loop+0x50/0xa0 [ 458.630196][ T7782] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 458.630222][ T7782] RIP: 0033:0x7fbb8e99e159 [ 458.630242][ T7782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.630263][ T7782] RSP: 002b:00007fbb8f79a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 458.630289][ T7782] RAX: ffffffffffffffda RBX: 00007fbb8ec25fa0 RCX: 00007fbb8e99e159 [ 458.630308][ T7782] RDX: 0000000000000000 RSI: 00000000400448e3 RDI: 0000000000000004 [ 458.630323][ T7782] RBP: 00007fbb8f79a090 R08: 0000000000000000 R09: 0000000000000000 [ 458.630339][ T7782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.630354][ T7782] R13: 00007fbb8ec26038 R14: 00007fbb8ec25fa0 R15: 00007ffeb0f935b8 [ 458.630375][ T7782] [ 458.917562][ T430] usb usb9-port1: attempt power cycle [ 459.108722][ T7792] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2520'. [ 459.268615][ T430] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 459.299603][ T430] usb 9-1: device descriptor read/8, error -71 [ 459.429657][ T430] usb 9-1: device descriptor read/8, error -71 [ 459.460655][ T7803] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #2: comm syz.9.2523: No space for directory leaf checksum. Please run e2fsck -D. [ 459.500427][ T7803] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #2: comm syz.9.2523: checksumming directory block 0 [ 459.668633][ T430] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 459.689603][ T430] usb 9-1: device descriptor read/8, error -71 [ 459.758622][ T453] usb 10-1: new full-speed USB device number 33 using dummy_hcd [ 459.819660][ T430] usb 9-1: device descriptor read/8, error -71 [ 459.827095][ T7808] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 459.908651][ T453] usb 10-1: device descriptor read/64, error -71 [ 459.928725][ T430] usb usb9-port1: unable to enumerate USB device [ 459.938816][ T7810] FAULT_INJECTION: forcing a failure. [ 459.938816][ T7810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.978633][ T7810] CPU: 0 UID: 0 PID: 7810 Comm: syz.0.2526 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 459.978677][ T7810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 459.978691][ T7810] Call Trace: [ 459.978699][ T7810] [ 459.978721][ T7810] __dump_stack+0x21/0x30 [ 459.978758][ T7810] dump_stack_lvl+0x140/0x1c0 [ 459.978799][ T7810] ? __cfi_dump_stack_lvl+0x10/0x10 [ 459.978828][ T7810] ? check_stack_object+0x138/0x150 [ 459.978852][ T7810] dump_stack+0x19/0x20 [ 459.978886][ T7810] should_fail_ex+0x3c2/0x510 [ 459.978911][ T7810] should_fail+0xf/0x20 [ 459.978933][ T7810] should_fail_usercopy+0x1e/0x30 [ 459.978959][ T7810] _copy_to_user+0x24/0xa0 [ 459.978988][ T7810] simple_read_from_buffer+0xed/0x160 [ 459.979018][ T7810] proc_fail_nth_read+0x1aa/0x220 [ 459.979049][ T7810] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 459.979079][ T7810] ? bpf_lsm_file_permission+0xd/0x20 [ 459.979108][ T7810] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 459.979137][ T7810] vfs_read+0x288/0xc70 [ 459.979160][ T7810] ? __cfi_vfs_read+0x10/0x10 [ 459.979180][ T7810] ? __kasan_check_write+0x18/0x20 [ 459.979202][ T7810] ? mutex_lock+0x97/0x1d0 [ 459.979225][ T7810] ? __cfi_mutex_lock+0x10/0x10 [ 459.979250][ T7810] ksys_read+0x145/0x260 [ 459.979272][ T7810] ? __cfi_ksys_read+0x10/0x10 [ 459.979293][ T7810] ? __kasan_check_write+0x18/0x20 [ 459.979313][ T7810] ? fput+0x1a4/0x230 [ 459.979340][ T7810] ? __kasan_check_read+0x15/0x20 [ 459.979361][ T7810] __x64_sys_read+0x7f/0x90 [ 459.979383][ T7810] x64_sys_call+0x2638/0x2ee0 [ 459.979403][ T7810] do_syscall_64+0x57/0xf0 [ 459.979432][ T7810] ? clear_bhb_loop+0x50/0xa0 [ 459.979457][ T7810] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 459.979480][ T7810] RIP: 0033:0x7fbb8e95e98e [ 459.979497][ T7810] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 459.979516][ T7810] RSP: 002b:00007fbb8f799fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 459.979539][ T7810] RAX: ffffffffffffffda RBX: 00007fbb8f79a6c0 RCX: 00007fbb8e95e98e [ 459.979556][ T7810] RDX: 000000000000000f RSI: 00007fbb8f79a0a0 RDI: 0000000000000003 [ 459.979571][ T7810] RBP: 00007fbb8f79a090 R08: 0000000000000000 R09: 0000000000000000 [ 459.979602][ T7810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.979617][ T7810] R13: 00007fbb8ec26038 R14: 00007fbb8ec25fa0 R15: 00007ffeb0f935b8 [ 459.979637][ T7810] [ 460.082106][ T36] audit: type=1400 audit(1787969943.570:561): avc: denied { mounton } for pid=7811 comm="syz.0.2527" path="/257/file0" dev="ramfs" ino=65042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 460.266658][ T7812] overlayfs: workdir and upperdir must reside under the same mount [ 460.288052][ T36] audit: type=1400 audit(1787969943.770:562): avc: denied { unmount } for pid=5027 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 460.328614][ T453] usb 10-1: device descriptor read/64, error -71 [ 460.568625][ T453] usb 10-1: new full-speed USB device number 34 using dummy_hcd [ 460.598685][ T31] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 460.708684][ T453] usb 10-1: device descriptor read/64, error -71 [ 460.759390][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 460.774615][ T31] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 460.798617][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 460.828664][ T31] usb 1-1: New USB device found, idVendor=0000, idProduct=d970, bcdDevice= 1.80 [ 460.858628][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.968677][ T453] usb 10-1: device descriptor read/64, error -71 [ 461.078792][ T453] usb usb10-port1: attempt power cycle [ 461.092038][ T31] usb 1-1: string descriptor 0 read error: -71 [ 461.098286][ T31] usb 1-1: Found UVC 1.00 device (0000:d970) [ 461.128743][ T31] usb 1-1: No valid video chain found. [ 461.135388][ T31] usb 1-1: USB disconnect, device number 43 [ 461.317492][ T7826] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2530'. [ 461.428643][ T453] usb 10-1: new full-speed USB device number 35 using dummy_hcd [ 461.469696][ T453] usb 10-1: device descriptor read/8, error -71 [ 461.599662][ T453] usb 10-1: device descriptor read/8, error -71 [ 461.648923][ T7836] kvm: kvm [7835]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0xffffffffffffffff [ 461.838660][ T453] usb 10-1: new full-speed USB device number 36 using dummy_hcd [ 461.879605][ T453] usb 10-1: device descriptor read/8, error -71 [ 461.943598][ T7846] overlayfs: maximum fs stacking depth exceeded [ 461.951501][ T36] audit: type=1400 audit(1787969945.430:563): avc: denied { getattr } for pid=7845 comm="syz.0.2536" name="/" dev="incremental-fs" ino=1454 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 462.009646][ T453] usb 10-1: device descriptor read/8, error -71 [ 462.128763][ T453] usb usb10-port1: unable to enumerate USB device [ 462.373122][ T7856] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2539'. [ 462.444897][ T36] audit: type=1400 audit(1787969945.930:564): avc: denied { nlmsg_read } for pid=7857 comm="syz.8.2540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 462.508927][ T36] audit: type=1400 audit(1787969945.990:565): avc: denied { cmd } for pid=7860 comm="syz.9.2541" path="/205/file0" dev="tmpfs" ino=1116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=io_uring permissive=1 [ 462.878622][ T36] audit: type=1326 audit(1787969947.341:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7869 comm="syz.9.2544" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1a519e159 code=0x0 [ 462.998669][ T339] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 463.176994][ T339] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 463.185837][ T339] usb 9-1: config 0 has no interface number 0 [ 463.192295][ T7883] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2548'. [ 463.208654][ T339] usb 9-1: config 0 interface 8 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.231185][ T339] usb 9-1: config 0 interface 8 has no altsetting 0 [ 463.237881][ T339] usb 9-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 463.268629][ T339] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.278473][ T339] usb 9-1: config 0 descriptor?? [ 463.377817][ T36] audit: type=1400 audit(1787969947.851:567): avc: denied { append } for pid=7895 comm="syz.0.2551" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 463.437138][ T133] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1947: comm dbus-daemon: No space for directory leaf checksum. Please run e2fsck -D. [ 463.466264][ T133] EXT4-fs error (device sda1): htree_dirblock_to_tree:1083: inode #1947: comm dbus-daemon: Directory block failed checksum [ 463.485171][ T36] audit: type=1400 audit(1787969947.971:568): avc: denied { ioctl } for pid=7872 comm="syz.8.2545" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 463.578650][ T36] audit: type=1400 audit(1787969948.021:569): avc: denied { read } for pid=7898 comm="syz.9.2553" dev="nsfs" ino=4026533142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 463.628825][ T36] audit: type=1400 audit(1787969948.021:570): avc: denied { open } for pid=7898 comm="syz.9.2553" path="cgroup:[4026533142]" dev="nsfs" ino=4026533142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 463.683917][ T36] audit: type=1400 audit(1787969948.021:571): avc: denied { create } for pid=7898 comm="syz.9.2553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 463.739325][ T36] audit: type=1400 audit(1787969948.021:572): avc: denied { write } for pid=7898 comm="syz.9.2553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 463.968630][ T535] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 464.111474][ T339] usbhid 9-1:0.8: can't add hid device: -71 [ 464.117614][ T339] usbhid 9-1:0.8: probe with driver usbhid failed with error -71 [ 464.148203][ T339] usb 9-1: USB disconnect, device number 40 [ 464.157680][ T535] usb 10-1: unable to get BOS descriptor or descriptor too short [ 464.172934][ T535] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 36, changing to 7 [ 464.190069][ T535] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 464.215330][ T535] usb 10-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 464.228598][ T535] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.247287][ T535] usb 10-1: Product: syz [ 464.255094][ T535] usb 10-1: Manufacturer: syz [ 464.260103][ T535] usb 10-1: SerialNumber: syz [ 464.578752][ T535] usb 10-1: 1:1 : sample bitwidth 62 in over sample bytes 2 [ 464.596620][ T535] usb 10-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 464.617395][ T535] usb 10-1: unit 2 not found! [ 464.626675][ T535] usb 10-1: unit 0 not found! [ 464.645712][ T535] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 464.677918][ T535] usb 10-1: USB disconnect, device number 37 [ 464.829769][ T7917] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2558'. [ 464.899958][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2559'. [ 466.469361][ T7939] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 466.508599][ T7939] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 466.538681][ T7941] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2567'. [ 466.623565][ T7942] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 466.687670][ T7942] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 466.739150][ T7948] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 466.769049][ T339] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 466.785617][ T7948] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 466.829353][ T987] bridge_slave_1: left allmulticast mode [ 466.835171][ T987] bridge_slave_1: left promiscuous mode [ 466.851068][ T987] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.877132][ T7949] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 466.898852][ T987] bridge_slave_0: left allmulticast mode [ 466.928637][ T987] bridge_slave_0: left promiscuous mode [ 466.938951][ T7949] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 466.951769][ T987] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.053227][ T7924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.089895][ T36] kauditd_printk_skb: 47 callbacks suppressed [ 467.089916][ T36] audit: type=1400 audit(1787969951.571:620): avc: denied { create } for pid=7945 comm="syz.0.2569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 467.129975][ T7924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.148911][ T36] audit: type=1400 audit(1787969951.571:621): avc: denied { write } for pid=7945 comm="syz.0.2569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 467.183426][ T987] veth1_macvtap: left promiscuous mode [ 467.218694][ T987] veth0_vlan: left promiscuous mode [ 467.224199][ T36] audit: type=1400 audit(1787969951.571:622): avc: denied { mmap_zero } for pid=7945 comm="syz.0.2569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 467.407865][ T7951] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 467.445282][ T7951] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 467.638644][ T65] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 467.788824][ T65] usb 1-1: device descriptor read/64, error -71 [ 467.902538][ T7924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.949805][ T7924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.007611][ T7954] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 468.028636][ T65] usb 1-1: device descriptor read/64, error -71 [ 468.058885][ T7954] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 468.078618][ T36] audit: type=1400 audit(1787969952.561:623): avc: denied { setopt } for pid=7922 comm="syz.9.2561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 468.288637][ T65] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 468.428644][ T65] usb 1-1: device descriptor read/64, error -71 [ 468.678635][ T65] usb 1-1: device descriptor read/64, error -71 [ 468.736104][ T7955] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 468.773289][ T36] audit: type=1400 audit(1787969953.251:624): avc: denied { create } for pid=7956 comm="syz.8.2571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 468.801786][ T7955] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 468.809403][ T7957] usb usb9: usbfs: process 7957 (syz.8.2571) did not claim interface 1 before use [ 468.815682][ T65] usb usb1-port1: attempt power cycle [ 468.843698][ T36] audit: type=1400 audit(1787969953.281:625): avc: denied { ioctl } for pid=7956 comm="syz.8.2571" path="socket:[66835]" dev="sockfs" ino=66835 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 468.869137][ T36] audit: type=1400 audit(1787969953.281:626): avc: denied { write } for pid=7956 comm="syz.8.2571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 469.198597][ T65] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 469.239668][ T65] usb 1-1: device descriptor read/8, error -71 [ 469.369634][ T65] usb 1-1: device descriptor read/8, error -71 [ 469.557143][ T7958] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 469.581055][ T7958] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 469.608670][ T65] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 469.640145][ T65] usb 1-1: device descriptor read/8, error -71 [ 469.769714][ T65] usb 1-1: device descriptor read/8, error -71 [ 469.878814][ T65] usb usb1-port1: unable to enumerate USB device [ 470.416934][ T7962] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 470.437297][ T7964] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2573'. [ 470.437298][ T7962] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 470.468711][ T7964] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2573'. [ 470.908705][ T6871] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 471.372219][ T7969] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 471.400459][ T7972] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2576'. [ 471.421620][ T7969] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 471.464119][ T36] audit: type=1400 audit(1787969955.941:627): avc: denied { write } for pid=7979 comm="syz.8.2579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 471.708651][ T344] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 471.868636][ T344] usb 10-1: Using ep0 maxpacket: 8 [ 471.876499][ T344] usb 10-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 471.886405][ T344] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.894808][ T344] usb 10-1: Product: syz [ 471.899312][ T344] usb 10-1: Manufacturer: syz [ 471.904083][ T344] usb 10-1: SerialNumber: syz [ 472.110835][ T7977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.120578][ T7977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.128974][ T7977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.137832][ T7977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.146309][ T7977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.154997][ T7977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.163473][ T7977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.172176][ T7977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.180702][ T7977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.189423][ T7977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.204335][ T344] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 472.211528][ T344] usb 10-1: unit 3 not found! [ 472.220249][ T344] usb 10-1: USB disconnect, device number 39 [ 472.465880][ T7981] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 472.499554][ T7981] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 472.738692][ T535] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 472.888647][ T535] usb 1-1: Using ep0 maxpacket: 16 [ 472.910936][ T535] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice= 0.40 [ 472.920596][ T535] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.928844][ T535] usb 1-1: Product: syz [ 472.933208][ T535] usb 1-1: Manufacturer: syz [ 472.938208][ T535] usb 1-1: SerialNumber: syz [ 473.147006][ T535] usb 1-1: selecting invalid altsetting 1 [ 473.154361][ T535] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 473.164487][ T535] usb 1-1: selecting invalid altsetting 1 [ 473.170606][ T535] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 473.180728][ T535] usb 1-1: selecting invalid altsetting 1 [ 473.188527][ T535] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 473.198804][ T535] usb 1-1: USB disconnect, device number 48 [ 473.628872][ T7989] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2582'. [ 473.633245][ T7987] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 473.655302][ T7989] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2582'. [ 473.655381][ T7987] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 473.699249][ T36] audit: type=1400 audit(1787969958.161:628): avc: denied { ioctl } for pid=7990 comm="syz.8.2583" path="socket:[68120]" dev="sockfs" ino=68120 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 473.724656][ T7995] usb usb9: usbfs: process 7995 (syz.0.2584) did not claim interface 1 before use [ 473.748603][ T36] audit: type=1400 audit(1787969958.161:629): avc: denied { create } for pid=7990 comm="syz.8.2583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 473.755271][ T7995] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 473.771871][ T36] audit: type=1400 audit(1787969958.161:630): avc: denied { ioctl } for pid=7990 comm="syz.8.2583" path="socket:[68123]" dev="sockfs" ino=68123 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 473.803096][ T36] audit: type=1400 audit(1787969958.231:631): avc: denied { remount } for pid=7994 comm="syz.0.2584" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 474.956629][ T7998] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 474.981651][ T36] audit: type=1400 audit(1787969959.451:632): avc: denied { read append } for pid=8000 comm="syz.8.2587" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 475.006893][ T7998] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 475.021645][ T36] audit: type=1400 audit(1787969959.451:633): avc: denied { open } for pid=8000 comm="syz.8.2587" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 475.051984][ T36] audit: type=1400 audit(1787969959.461:634): avc: denied { map } for pid=8000 comm="syz.8.2587" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 475.076208][ T36] audit: type=1400 audit(1787969959.461:635): avc: denied { execute } for pid=8000 comm="syz.8.2587" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 475.123638][ T36] audit: type=1400 audit(1787969959.481:636): avc: denied { mount } for pid=7999 comm="syz.9.2586" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 475.150581][ T36] audit: type=1400 audit(1787969959.621:637): avc: denied { setopt } for pid=8003 comm="syz.0.2588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 475.238662][ T31] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 475.390068][ T31] usb 10-1: unable to get BOS descriptor or descriptor too short [ 475.398805][ T31] usb 10-1: config 1 has an invalid interface descriptor of length 5, skipping [ 475.408186][ T31] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 475.418651][ T31] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 475.433559][ T31] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 475.443184][ T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.451598][ T31] usb 10-1: Product: syz [ 475.455971][ T31] usb 10-1: Manufacturer: syz [ 475.460917][ T31] usb 10-1: SerialNumber: syz [ 475.733390][ T31] cdc_ncm 10-1:1.0: NCM or ECM functional descriptors missing [ 475.741080][ T31] cdc_ncm 10-1:1.0: bind() failure [ 475.748089][ T31] usb 10-1: USB disconnect, device number 40 [ 476.367299][ T8012] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 476.379147][ T8016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.392860][ T8020] overlayfs: missing 'workdir' [ 476.398466][ T8012] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 476.411219][ T8022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.420456][ T8016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.430806][ T8022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.618622][ T344] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 476.658639][ T339] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 476.788623][ T344] usb 10-1: Using ep0 maxpacket: 16 [ 476.795092][ T344] usb 10-1: config index 0 descriptor too short (expected 51443, got 18) [ 476.803881][ T339] usb 1-1: device descriptor read/64, error -71 [ 476.811790][ T344] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 476.821324][ T344] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.829644][ T344] usb 10-1: Product: syz [ 476.834022][ T344] usb 10-1: Manufacturer: syz [ 476.839084][ T344] usb 10-1: SerialNumber: syz [ 476.849982][ T344] r8152-cfgselector 10-1: Unknown version 0x0000 [ 476.856558][ T344] r8152-cfgselector 10-1: config 0 descriptor?? [ 477.078627][ T339] usb 1-1: device descriptor read/64, error -71 [ 477.318675][ T339] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 477.448639][ T339] usb 1-1: device descriptor read/64, error -71 [ 477.698619][ T339] usb 1-1: device descriptor read/64, error -71 [ 477.808797][ T339] usb usb1-port1: attempt power cycle [ 477.863081][ T8031] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 477.880238][ T8031] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 477.888886][ T8033] SELinux: failed to load policy [ 478.148653][ T339] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 478.179648][ T339] usb 1-1: device descriptor read/8, error -71 [ 478.309749][ T339] usb 1-1: device descriptor read/8, error -71 [ 478.568654][ T339] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 478.589734][ T339] usb 1-1: device descriptor read/8, error -71 [ 478.719764][ T339] usb 1-1: device descriptor read/8, error -71 [ 478.838783][ T339] usb usb1-port1: unable to enumerate USB device [ 479.373188][ T344] r8152-cfgselector 10-1: Unknown version 0x0000 [ 479.382693][ T344] r8152-cfgselector 10-1: bad CDC descriptors [ 479.391260][ T344] r8152-cfgselector 10-1: USB disconnect, device number 41 [ 479.416321][ T8036] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2594'. [ 479.427123][ T8034] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 479.443933][ T8036] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2594'. [ 479.453138][ T8034] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 479.481964][ T8042] netlink: 'syz.9.2597': attribute type 46 has an invalid length. [ 479.492314][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 479.492332][ T36] audit: type=1400 audit(1787969963.971:643): avc: denied { ioctl } for pid=8041 comm="syz.9.2597" path="socket:[67124]" dev="sockfs" ino=67124 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 479.530516][ T36] audit: type=1400 audit(1787969964.001:644): avc: denied { sys_module } for pid=8041 comm="syz.9.2597" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 479.570563][ T36] audit: type=1400 audit(1787969964.011:645): avc: denied { setopt } for pid=8041 comm="syz.9.2597" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 479.592498][ T36] audit: type=1400 audit(1787969964.011:646): avc: denied { write } for pid=8041 comm="syz.9.2597" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 479.678647][ T453] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 479.829923][ T453] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 479.839785][ T453] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 479.852330][ T453] usb 9-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 479.861892][ T453] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.870185][ T453] usb 9-1: Product: syz [ 479.874434][ T453] usb 9-1: Manufacturer: syz [ 479.879273][ T453] usb 9-1: SerialNumber: syz [ 480.098814][ T453] usblp 9-1:1.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 480.288951][ T36] audit: type=1400 audit(1787969964.771:647): avc: denied { read } for pid=8037 comm="syz.8.2595" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 480.314345][ T8038] rust_binder: Write failure EFAULT in pid:730 [ 480.316630][ T36] audit: type=1400 audit(1787969964.791:648): avc: denied { open } for pid=8037 comm="syz.8.2595" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 480.347734][ T36] audit: type=1400 audit(1787969964.791:649): avc: denied { ioctl } for pid=8037 comm="syz.8.2595" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 481.092699][ T8048] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 481.093321][ T36] audit: type=1400 audit(1787969965.571:650): avc: denied { mount } for pid=8049 comm="syz.9.2598" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 481.112585][ T8048] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 481.180808][ T36] audit: type=1400 audit(1787969965.661:651): avc: denied { create } for pid=8051 comm="syz.0.2599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 481.378632][ T344] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 481.559452][ T344] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.570619][ T344] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.580797][ T344] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 481.594377][ T344] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 481.603841][ T344] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.612989][ T344] usb 10-1: config 0 descriptor?? [ 481.830553][ T344] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 481.840113][ T344] plantronics 0003:047F:FFFF.001B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 482.099679][ T36] audit: type=1400 audit(1787969966.581:652): avc: denied { read write } for pid=8049 comm="syz.9.2598" name="sda" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 482.123972][ T8050] sd 0:0:1:0: PR command failed: 1026 [ 482.129875][ T8050] sd 0:0:1:0: Sense Key : 0x5 [current] [ 482.135562][ T8050] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 482.141715][ T31] usb 10-1: USB disconnect, device number 42 [ 482.479990][ T344] usb 9-1: USB disconnect, device number 41 [ 482.492487][ T344] usblp0: removed [ 482.899767][ T8059] veth1_to_bond: entered allmulticast mode [ 482.905888][ T8054] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 482.927028][ T8054] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 482.946565][ T8055] veth1_to_bond: left allmulticast mode [ 483.388678][ T344] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 483.539873][ T344] usb 1-1: config 0 has no interfaces? [ 483.545426][ T344] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 483.558853][ T344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.578908][ T344] usb 1-1: config 0 descriptor?? [ 484.503952][ T31] usb 1-1: USB disconnect, device number 53 [ 484.757047][ T8068] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 484.775999][ T8071] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2604'. [ 484.785029][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 484.785047][ T36] audit: type=1400 audit(1787969969.261:663): avc: denied { write } for pid=8070 comm="syz.8.2605" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 484.795480][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2604'. [ 484.819760][ T8068] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 484.844131][ T36] audit: type=1400 audit(1787969969.261:664): avc: denied { open } for pid=8070 comm="syz.8.2605" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 484.872165][ T36] audit: type=1400 audit(1787969969.261:665): avc: denied { ioctl } for pid=8070 comm="syz.8.2605" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 484.921301][ T8079] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2607'. [ 486.789885][ T36] audit: type=1400 audit(1787969971.271:666): avc: denied { name_bind } for pid=8084 comm="syz.0.2611" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 486.805757][ T8081] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 486.833865][ T8081] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 486.851319][ T36] audit: type=1400 audit(1787969971.301:667): avc: denied { create } for pid=8084 comm="syz.0.2611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 486.872915][ T36] audit: type=1400 audit(1787969971.301:668): avc: denied { ioctl } for pid=8084 comm="syz.0.2611" path="socket:[67337]" dev="sockfs" ino=67337 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 487.148645][ T31] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 487.298693][ T31] usb 9-1: Using ep0 maxpacket: 32 [ 487.305063][ T31] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 16 [ 487.316642][ T31] usb 9-1: New USB device found, idVendor=7104, idProduct=2202, bcdDevice= 0.40 [ 487.325946][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.334263][ T31] usb 9-1: Product: syz [ 487.338458][ T31] usb 9-1: Manufacturer: syz [ 487.343331][ T31] usb 9-1: SerialNumber: syz [ 487.359129][ T8098] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 487.567975][ T36] audit: type=1400 audit(1787969972.041:669): avc: denied { mounton } for pid=8097 comm="syz.8.2612" path="/289/trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 487.592043][ T8098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.600800][ T8098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.620381][ T31] usb 9-1: USB disconnect, device number 42 SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: repeatedly failed to execute the program proc=4 req=2566 state=1 status=67 (errno 9: Bad file descriptor) [ 488.873875][ T8102] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 488.881693][ T36] audit: type=1400 audit(1787969973.361:670): avc: denied { bind } for pid=8104 comm="syz.8.2614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 488.909083][ T8102] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 488.938343][ T286] EXT4-fs error (device sda1): ext4_ext_remove_space:3019: inode #2036: comm syz-executor: pblk 33723 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 488.956566][ T286] EXT4-fs error (device sda1): ext4_evict_inode:270: comm syz-executor: couldn't truncate inode 2036 (err -117) [ 488.968707][ T36] audit: type=1400 audit(1787969973.361:671): avc: denied { name_bind } for pid=8104 comm="syz.8.2614" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 488.979010][ T286] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:105: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 489.013529][ T36] audit: type=1400 audit(1787969973.361:672): avc: denied { node_bind } for pid=8104 comm="syz.8.2614" saddr=ff01::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 489.048466][ T286] EXT4-fs error (device sda1) in ext4_free_inode:361: Filesystem failed CRC [ 489.138631][ T453] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 489.361404][ T7683] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.8.2489: bg 1: bad block bitmap checksum [ 489.373738][ T7683] EXT4-fs error (device sda1) in ext4_mb_clear_bb:6630: Filesystem failed CRC [ 489.383114][ T7683] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 489.400963][ T7683] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 489.423941][ T8106] EXT4-fs error (device sda1): ext4_ext_remove_space:3019: inode #2034: comm syz.0.2615: pblk 33724 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 489.446377][ T1021] veth1_to_team: left allmulticast mode [ 489.458633][ T1021] veth1_to_team: left promiscuous mode [ 489.466135][ T1021] bridge0: port 3(veth1_to_team) entered disabled state [ 489.473972][ T1021] bridge_slave_1: left allmulticast mode [ 489.479686][ T1021] bridge_slave_1: left promiscuous mode [ 489.485720][ T1021] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.493867][ T1021] bridge_slave_0: left allmulticast mode [ 489.499749][ T1021] bridge_slave_0: left promiscuous mode [ 489.505643][ T1021] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.514141][ T1021] bridge_slave_1: left allmulticast mode [ 489.519922][ T1021] bridge_slave_1: left promiscuous mode [ 489.525583][ T1021] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.533730][ T1021] bridge_slave_0: left allmulticast mode [ 489.539611][ T1021] bridge_slave_0: left promiscuous mode [ 489.545287][ T1021] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.704227][ T1021] tipc: Left network mode [ 489.710436][ T1021] veth1_macvtap: left promiscuous mode [ 489.715992][ T1021] veth0_vlan: left promiscuous mode [ 489.721943][ T1021] veth1_macvtap: left promiscuous mode [ 489.727663][ T1021] veth0_vlan: left promiscuous mode