last executing test programs: 57.375594144s ago: executing program 0 (id=69): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) syz_usb_connect$uac1(0x1, 0xa6, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010200000008adff01a04000010203010902940003010ca8000904b2d199080100"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) sendmmsg$inet(r1, &(0x7f0000006000)=[{{&(0x7f0000000380)={0x2, 0x4e28, @multicast2}, 0x10, &(0x7f0000003680)=[{&(0x7f0000000d40)="a38ba845ec4efadcef0748bc81c2b1e5871864cbd669dbeae919b80ed2cbe548fec9b69473db427a2f2e8e6e7c4c766444a00864121f6ee2ba4a23229ec0168a47176bb0a5bcb0f2755306372832f73ef0cd68b6f1579a637633db2d4efb1c66b1f17c0e06e6a5d58c7420a3e59452d125e53b7bc53aa594a451c4ff81840c1b3c7cc73f3bd32194441d8dc67f33f6b0dcc808c2ae12db6ee560d8aa8aa335f779b48d8be8821abb2d294aae2f69ed194ef5bcd2eca82b6b1f9cb1f0db166bd913c098a0aeac00ce81c0a0e7bb3281cec84a8560b0ac4c6e75913bcc9ff5a0b2ad32aac77d35137c79f0675a34e94bbe1540b700bfa1010eedb2946e56f2c583e1b9d27c1168224dd575d44bc6cae1f3fac5602d234a87a16f56ed6c289f2856d06095cadc3543d5240516ae90b73f49c30aa044a8b1c11e698ca4ca08075463a224b196ed8ac06923cf1ae96ceceb342bc2e83ab4b939c8a1b596f0ec03513a13bd37311d4401007f6dee043bc64db5231bb54ec21567f3479f62f43716a462225d3759eec053112bddc3889a70c5a766bf2877fdf8f948d031d98fbad1ca25b2c86c0ba90fd2114ab9e79674a81dbc162b43145c68fea3d0cfe31b33644d99e05c89b78257be2508f80473a8166fb984a22d96c26fc6f4524726bb90395ffbfafaf61cca0c0e20adbb9812e8ad7383cbaa7304ea83b5f6b67173432867ac4313625c91af7449ec6c84f172a2a6ee94269c7bbecce23389e5c808c8acad84b4e54de5cd4b480b4dd6f01ca4da2a6cf752f3a7bfba7e349d3ad6c4f3133df7d42748f428b0fa", 0x246}], 0x1}}], 0x1, 0x2000c044) writev(r1, &(0x7f00000023c0)=[{&(0x7f00000013c0)="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", 0x40c}], 0x1) 56.088103556s ago: executing program 0 (id=74): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000140)=ANY=[@ANYBLOB="1201100300000008cd0c350040000102030109026e00030112205d080b0100012630ee0900000000010130000a2401000a00ffffffff09040100000102300009040101010102300009050109ff030681fd0a252512ba0000a1bb8d090402000001023000090402010101023000090582091000bc081a0a252503000000050000"], 0x0) 55.613259758s ago: executing program 0 (id=80): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x0) r2 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r2, 0x5452, &(0x7f0000000240)=""/77) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket(0x10, 0x3, 0x0) r3 = fsmount(r0, 0x0, 0xa) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r4, &(0x7f0000002300)=""/4082, 0xff2) syz_usb_connect(0x3, 0x52, &(0x7f0000000280)=ANY=[@ANYBLOB="120100036ffa680863070120ff2c0102030109024000021109400c0904080601ff8bbd020a240107000d02010205240503219d"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 52.595098341s ago: executing program 0 (id=94): openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x88}, 0x80) pipe2(0x0, 0x0) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) wait4(r3, 0x0, 0xa, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0xd7) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001"], 0x6c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES64=0x0], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x4888) syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000340)={0x0, 0xc1, 0x0, 0xfff7fffd, 0x85}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x8000, 0x3, 0x20b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81b, 0x8000, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ec, 0x80, 0x4003bffb, 0x1d2, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x80, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 52.478824834s ago: executing program 0 (id=95): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000440)=[{0xa4, 0x0, 0x1, 0xfffffffc}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r2, 0x2201, &(0x7f0000000100)=0x3) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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"/472, 0x1d8, 0xffffffffffffffff) ioctl$KVM_CAP_HYPERV_VP_INDEX(r1, 0x4068aea3, &(0x7f0000000000)) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000060f70a00000000b100000000000080400002000000000000080000000000000000000000000000000044000500fc000000000000000000000000000001000000003c000000000000007f000001000000000000000000000000020000000400"], 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ec000000210001000400000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000020a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fc0000000000000000000000000000017f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c040000000000000a000a000a01210100000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000ac1414340000000000000000000000006c030000000000000a0002"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) 40.972889546s ago: executing program 0 (id=146): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x9c3#\x00', 0x80000, &(0x7f0000000040)={@_ha_fsid={[0x9, 0x1]}, {0xfffa, 0xffff, 0x7, 0x100}}, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0xfff}) ioctl$BLKRRPART(r0, 0x125f, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)={[{0x2d, 'perf_event'}, {0x2b, 'hugetlb'}]}, 0x15) time(&(0x7f0000000180)) time(&(0x7f00000001c0)) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)={[{0x2d, 'pids'}, {0x0, 'blkio'}]}, 0xd) time(&(0x7f0000000280)) ioctl$FIOCLEX(r0, 0x5451) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) time(&(0x7f0000000300)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x18, r2, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000050}, 0x4010) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4840}, 0x4) write$P9_RLERRORu(r0, &(0x7f00000005c0)={0xd, 0x7, 0x1, {{}, 0x400}}, 0xd) syz_usb_connect$midi(0x5, 0xa5, &(0x7f0000000600)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xccd, 0x35, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x1, 0x1, 0x4, 0x30, 0x9e, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x0, 0xfc, [@midi_out_jack={0x11, 0x24, 0x3, 0x3, 0xc, 0x5, [{0xa, 0x6}, {0x0, 0xfe}, {0xa}, {0x8, 0x2b}, {0xfb, 0x80}], 0x5}, @ms_header={0x7, 0x24, 0x1, 0x7, 0x7}, @ms_header={0x7, 0x24, 0x1, 0xc, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x7, 0x9}, @ms_header={0x7, 0x24, 0x1, 0xb63e, 0x7}], [{{0x9, 0x5, 0x3, 0x4, 0x40, 0x8, 0xf6, 0x74, {0x8, 0x25, 0x1, 0x4, "633bdaf0"}}}, {{0x9, 0x5, 0x8, 0xc, 0x3ff, 0x4, 0xff, 0x4, {0x14, 0x25, 0x1, 0x10, "a6700bfed700b1ed8cd22764e650926d"}}}, {{0x9, 0x5, 0x0, 0x11, 0x400, 0xa, 0x2, 0xfe, {0x11, 0x25, 0x1, 0xd, "2d5ffb6c656293075620be6f05"}}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x7f, 0x7, 0xfe, {0x4}}}]}}}}}]}}, &(0x7f0000000980)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x110, 0x67, 0x7, 0x40, 0x20}, 0x5, &(0x7f0000000700)={0x5, 0xf, 0x5}, 0x4, [{0x76, &(0x7f0000000740)=@string={0x76, 0x3, "6df069db4bf0f8dcdacc3d2307b1fe783db959cc0b478b49afa8d0ed204f1cf71dd3f9c27ebb880ea4b4eee2b4abf04cc35a4ff4a1b8391fb106cc46d5af86992da5d72380ae764d989da00f8fd987c15b70c27a92d84be05fd7ab6f7f1babe725c4fdddfa2711db5f1ba832bd2899ef30238b00"}}, {0x10, &(0x7f00000007c0)=@string={0x10, 0x3, "a6d55e20aa58d7ab4c640f0232d1"}}, {0x54, &(0x7f0000000800)=@string={0x54, 0x3, "d380bf824fed06f722ebc957841fcda63be5e76b7f9caede30d796ff24f4479d943367ac90d6d07967b26fce66ff97211724ad25604faa4d51e153502a6bf415c145ca7e3f4dfdfb5a0ebaaca3d309679dcd"}}, {0xf9, &(0x7f0000000880)=@string={0xf9, 0x3, "04e1c4967d48cd4e4294e0b922d596fe748231cff2d513f6eace650f4b6b45aa0a15fc5ec9ae8db5a9840b0abf2b2130802362a588e5f7e78b0dd747637c346d61d2d6368a3a74e49d12dee08682cb4082b2e9f0f791cda8f578815dd097901fe2c5f6755802a8a572853554d285be1dab84ee66a3e6f71fec424300b5e4209366e778e9cb7bf6756e9cf4ba43e31421527faab00c547c54c8997bf4efa0ae70227cb54da70801f8ec964ab7bdce1fd6f56fb3166e76309c3b8f634295c7549fff0708591cb3988308812be80acf44b13fcb5d6f83373694c1d71a66d561654e903b506a33f784ff3e9123238425123c3620784639a1bd"}}]}) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000a00)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x58, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x0, 0x8, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x4, 0x3, 0x7}}}}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x200, 0x24, 0x4, 0x3, 0x20, 0x2}, 0x19, &(0x7f0000000a80)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x4, 0x8800, 0x7, [0xc0, 0x180]}]}, 0x2, [{0xaa, &(0x7f0000000ac0)=@string={0xaa, 0x3, "add447cd9c1de4e463a64356a3e501ae0c173f2c1517249e068ace31d752e8b8f35e0802232d130ececd22ac67dc38cf9fdf6952e9700996f8ed6618259542dbd9cde320e8eafaced089213f69f1d1af8e4e42ac86c8c5f303de3879f5b6b3820cbfb19346224a2761a0fadf39c06a8033e09cf7abb32386073ba16c2bc37ef8c9f75c8dae9e4ae71c66bf79077002e18339493679b763562c99d574fe2666d07d1100b64ecf56be"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0xc0a}}]}) time(&(0x7f0000000c00)) time(&(0x7f0000000c40)) syz_usb_connect$midi(0x1, 0xc6, &(0x7f0000000c80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb4, 0x1, 0x1, 0x1, 0xf0, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x0, 0x3, [@midi_out_jack={0x9, 0x24, 0x3, 0x0, 0xd, 0x1, [{0xe7, 0xf7}], 0x10}], [{{0x9, 0x5, 0x0, 0x3, 0x3ff, 0xff, 0xc3, 0x81, {0x5, 0x25, 0x1, 0x1, "be"}}}, {{0x9, 0x5, 0xc, 0xc, 0x20, 0x0, 0x9, 0x9, {0xb, 0x25, 0x1, 0x7, "5faa456810e2ce"}}}, {{0x9, 0x5, 0x7, 0x4, 0x3ff, 0x2, 0x3, 0x5, {0xd, 0x25, 0x1, 0x9, "47a3dd40814ed2671b"}}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0xa, 0x7, 0xff, {0xa, 0x25, 0x1, 0x6, "767dc935eeb0"}}}, {{0x9, 0x5, 0x7, 0x8, 0x8, 0x3, 0x5, 0xc2, {0x6, 0x25, 0x1, 0x2, "9448"}}}, {{0x9, 0x5, 0xc, 0x0, 0x7ff, 0x6, 0x83, 0xfa, {0xc, 0x25, 0x1, 0x8, "bbfce3dc77f8eb0d"}}}, {{0x9, 0x5, 0xd, 0x4, 0x67fd839b55dfa892, 0x36, 0x8, 0x3, {0x10, 0x25, 0x1, 0xc, "bafaeacc869dd9fecdf43ed1"}}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x88, 0x0, 0x9, {0x8, 0x25, 0x1, 0x4, "47ab379e"}}}]}}}}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000d80)={0xa, 0x6, 0x0, 0x2, 0x8, 0xe0, 0x20, 0x9}, 0x1b, &(0x7f0000000dc0)={0x5, 0xf, 0x1b, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0xd2, 0xec, 0x9, 0x7, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x22, 0x50, 0x3, 0x47, 0xa}]}, 0x4, [{0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x42b}}, {0xe4, &(0x7f0000000e40)=@string={0xe4, 0x3, "3e10d118d1fd9878837e1f198c68b95edf1ef6e9d511dfa5df726123bd20c8b8ecf525326be1a7dea91794629d1219fba1089993df0abc091a864a5a68cde64a601c845f9170e202ddc8681e480828bb4873a966aca541e5966ea2f62b1b660cede1e94588174091aebf09cb38b83888707b5dcc4e0046d2552f07ca7a52a42b649a95a5c9fbb52e4abf8351bce850876766c617e66bac83266866ea998a75299d5358dd34841b2baa5b9013098386ece5f5df126c4f823ca7791b3d66f0a14786b8278cc1f8422c00dcd59864a2c8b4b53e26fd08cc7f74b0ceb62e93c88acad0ca"}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x1007}}, {0x4e, &(0x7f0000000f80)=@string={0x4e, 0x3, "22e76944c6eeea83363c65af494da1fed955bd82738e9b79ad8b86310cde647bb21a8f79cb5875f6117ee64bea99afe1bf27e98cf98a09ca9c4e88e9802929c53132db4172e27afe489e3cd5"}}]}) mount(&(0x7f0000001080)=@rnullb, &(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)='v7\x00', 0x800000, 0x0) time(&(0x7f0000001140)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffb}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x10}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x800) time(&(0x7f0000001280)) time(&(0x7f00000012c0)) time(&(0x7f0000001300)) r5 = syz_open_dev$loop(&(0x7f0000001340), 0x9, 0x4c0800) ioctl$BLKRRPART(r5, 0x125f, 0x0) 40.912475788s ago: executing program 32 (id=146): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x9c3#\x00', 0x80000, &(0x7f0000000040)={@_ha_fsid={[0x9, 0x1]}, {0xfffa, 0xffff, 0x7, 0x100}}, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0xfff}) ioctl$BLKRRPART(r0, 0x125f, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)={[{0x2d, 'perf_event'}, {0x2b, 'hugetlb'}]}, 0x15) time(&(0x7f0000000180)) time(&(0x7f00000001c0)) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)={[{0x2d, 'pids'}, {0x0, 'blkio'}]}, 0xd) time(&(0x7f0000000280)) ioctl$FIOCLEX(r0, 0x5451) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) time(&(0x7f0000000300)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x18, r2, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000050}, 0x4010) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4840}, 0x4) write$P9_RLERRORu(r0, &(0x7f00000005c0)={0xd, 0x7, 0x1, {{}, 0x400}}, 0xd) syz_usb_connect$midi(0x5, 0xa5, &(0x7f0000000600)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xccd, 0x35, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x1, 0x1, 0x4, 0x30, 0x9e, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x0, 0xfc, [@midi_out_jack={0x11, 0x24, 0x3, 0x3, 0xc, 0x5, [{0xa, 0x6}, {0x0, 0xfe}, {0xa}, {0x8, 0x2b}, {0xfb, 0x80}], 0x5}, @ms_header={0x7, 0x24, 0x1, 0x7, 0x7}, @ms_header={0x7, 0x24, 0x1, 0xc, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x7, 0x9}, @ms_header={0x7, 0x24, 0x1, 0xb63e, 0x7}], [{{0x9, 0x5, 0x3, 0x4, 0x40, 0x8, 0xf6, 0x74, {0x8, 0x25, 0x1, 0x4, "633bdaf0"}}}, {{0x9, 0x5, 0x8, 0xc, 0x3ff, 0x4, 0xff, 0x4, {0x14, 0x25, 0x1, 0x10, "a6700bfed700b1ed8cd22764e650926d"}}}, {{0x9, 0x5, 0x0, 0x11, 0x400, 0xa, 0x2, 0xfe, {0x11, 0x25, 0x1, 0xd, "2d5ffb6c656293075620be6f05"}}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x7f, 0x7, 0xfe, {0x4}}}]}}}}}]}}, &(0x7f0000000980)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x110, 0x67, 0x7, 0x40, 0x20}, 0x5, &(0x7f0000000700)={0x5, 0xf, 0x5}, 0x4, [{0x76, &(0x7f0000000740)=@string={0x76, 0x3, "6df069db4bf0f8dcdacc3d2307b1fe783db959cc0b478b49afa8d0ed204f1cf71dd3f9c27ebb880ea4b4eee2b4abf04cc35a4ff4a1b8391fb106cc46d5af86992da5d72380ae764d989da00f8fd987c15b70c27a92d84be05fd7ab6f7f1babe725c4fdddfa2711db5f1ba832bd2899ef30238b00"}}, {0x10, &(0x7f00000007c0)=@string={0x10, 0x3, "a6d55e20aa58d7ab4c640f0232d1"}}, {0x54, &(0x7f0000000800)=@string={0x54, 0x3, "d380bf824fed06f722ebc957841fcda63be5e76b7f9caede30d796ff24f4479d943367ac90d6d07967b26fce66ff97211724ad25604faa4d51e153502a6bf415c145ca7e3f4dfdfb5a0ebaaca3d309679dcd"}}, {0xf9, &(0x7f0000000880)=@string={0xf9, 0x3, "04e1c4967d48cd4e4294e0b922d596fe748231cff2d513f6eace650f4b6b45aa0a15fc5ec9ae8db5a9840b0abf2b2130802362a588e5f7e78b0dd747637c346d61d2d6368a3a74e49d12dee08682cb4082b2e9f0f791cda8f578815dd097901fe2c5f6755802a8a572853554d285be1dab84ee66a3e6f71fec424300b5e4209366e778e9cb7bf6756e9cf4ba43e31421527faab00c547c54c8997bf4efa0ae70227cb54da70801f8ec964ab7bdce1fd6f56fb3166e76309c3b8f634295c7549fff0708591cb3988308812be80acf44b13fcb5d6f83373694c1d71a66d561654e903b506a33f784ff3e9123238425123c3620784639a1bd"}}]}) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000a00)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x58, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x0, 0x8, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x4, 0x3, 0x7}}}}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x200, 0x24, 0x4, 0x3, 0x20, 0x2}, 0x19, &(0x7f0000000a80)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x4, 0x8800, 0x7, [0xc0, 0x180]}]}, 0x2, [{0xaa, &(0x7f0000000ac0)=@string={0xaa, 0x3, "add447cd9c1de4e463a64356a3e501ae0c173f2c1517249e068ace31d752e8b8f35e0802232d130ececd22ac67dc38cf9fdf6952e9700996f8ed6618259542dbd9cde320e8eafaced089213f69f1d1af8e4e42ac86c8c5f303de3879f5b6b3820cbfb19346224a2761a0fadf39c06a8033e09cf7abb32386073ba16c2bc37ef8c9f75c8dae9e4ae71c66bf79077002e18339493679b763562c99d574fe2666d07d1100b64ecf56be"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0xc0a}}]}) time(&(0x7f0000000c00)) time(&(0x7f0000000c40)) syz_usb_connect$midi(0x1, 0xc6, &(0x7f0000000c80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb4, 0x1, 0x1, 0x1, 0xf0, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x0, 0x3, [@midi_out_jack={0x9, 0x24, 0x3, 0x0, 0xd, 0x1, [{0xe7, 0xf7}], 0x10}], [{{0x9, 0x5, 0x0, 0x3, 0x3ff, 0xff, 0xc3, 0x81, {0x5, 0x25, 0x1, 0x1, "be"}}}, {{0x9, 0x5, 0xc, 0xc, 0x20, 0x0, 0x9, 0x9, {0xb, 0x25, 0x1, 0x7, "5faa456810e2ce"}}}, {{0x9, 0x5, 0x7, 0x4, 0x3ff, 0x2, 0x3, 0x5, {0xd, 0x25, 0x1, 0x9, "47a3dd40814ed2671b"}}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0xa, 0x7, 0xff, {0xa, 0x25, 0x1, 0x6, "767dc935eeb0"}}}, {{0x9, 0x5, 0x7, 0x8, 0x8, 0x3, 0x5, 0xc2, {0x6, 0x25, 0x1, 0x2, "9448"}}}, {{0x9, 0x5, 0xc, 0x0, 0x7ff, 0x6, 0x83, 0xfa, {0xc, 0x25, 0x1, 0x8, "bbfce3dc77f8eb0d"}}}, {{0x9, 0x5, 0xd, 0x4, 0x67fd839b55dfa892, 0x36, 0x8, 0x3, {0x10, 0x25, 0x1, 0xc, "bafaeacc869dd9fecdf43ed1"}}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x88, 0x0, 0x9, {0x8, 0x25, 0x1, 0x4, "47ab379e"}}}]}}}}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000d80)={0xa, 0x6, 0x0, 0x2, 0x8, 0xe0, 0x20, 0x9}, 0x1b, &(0x7f0000000dc0)={0x5, 0xf, 0x1b, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0xd2, 0xec, 0x9, 0x7, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x22, 0x50, 0x3, 0x47, 0xa}]}, 0x4, [{0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x42b}}, {0xe4, &(0x7f0000000e40)=@string={0xe4, 0x3, "3e10d118d1fd9878837e1f198c68b95edf1ef6e9d511dfa5df726123bd20c8b8ecf525326be1a7dea91794629d1219fba1089993df0abc091a864a5a68cde64a601c845f9170e202ddc8681e480828bb4873a966aca541e5966ea2f62b1b660cede1e94588174091aebf09cb38b83888707b5dcc4e0046d2552f07ca7a52a42b649a95a5c9fbb52e4abf8351bce850876766c617e66bac83266866ea998a75299d5358dd34841b2baa5b9013098386ece5f5df126c4f823ca7791b3d66f0a14786b8278cc1f8422c00dcd59864a2c8b4b53e26fd08cc7f74b0ceb62e93c88acad0ca"}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x1007}}, {0x4e, &(0x7f0000000f80)=@string={0x4e, 0x3, "22e76944c6eeea83363c65af494da1fed955bd82738e9b79ad8b86310cde647bb21a8f79cb5875f6117ee64bea99afe1bf27e98cf98a09ca9c4e88e9802929c53132db4172e27afe489e3cd5"}}]}) mount(&(0x7f0000001080)=@rnullb, &(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)='v7\x00', 0x800000, 0x0) time(&(0x7f0000001140)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffb}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x10}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x800) time(&(0x7f0000001280)) time(&(0x7f00000012c0)) time(&(0x7f0000001300)) r5 = syz_open_dev$loop(&(0x7f0000001340), 0x9, 0x4c0800) ioctl$BLKRRPART(r5, 0x125f, 0x0) 22.360738862s ago: executing program 2 (id=247): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000180)={@val={0x70, 0x8808}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x10, 0x2c, 0x1004, 0x4000, 0xb2, 0x2f, 0x0, @empty, @empty}, {0xd00, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x1, 0xffffa888}}}}}}}, 0x3e) (fail_nth: 2) 22.360209453s ago: executing program 2 (id=248): r0 = socket$vsock_stream(0x28, 0x1, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x0, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x3, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fffffff}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in=@dev={0xac, 0x14, 0x14, 0xe}, @in=@broadcast, 0x4e23, 0x591, 0x4e22, 0x2, 0xa, 0x80, 0x0, 0x5c}, {0x0, 0x1, 0x8aa0, 0x2, 0x0, 0x5, 0x1, 0x7}, {0x0, 0x3e77, 0x322, 0x4}, 0x9, 0x6e6bb1, 0x1, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x7f, 0x2b}, 0x2, @in6=@remote, 0x0, 0x1, 0x3, 0x1, 0x7, 0x1, 0x5}}, 0xe8) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) bind$vsock_stream(r0, &(0x7f0000000440), 0x3a) (async) listen(r0, 0x6d5) (async) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x1ff, 0xd, 0x13, 0x68}, {0x6b6, 0x3, 0xd, 0x5}]}) close_range(r10, 0xffffffffffffffff, 0x200000000000000) (async) r11 = socket$can_raw(0x1d, 0x3, 0x1) close_range(r11, r10, 0x0) 22.033467841s ago: executing program 2 (id=250): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000180)={@val={0x70, 0x8808}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x10, 0x2c, 0x1004, 0x4000, 0xb2, 0x2f, 0x0, @empty, @empty}, {0xd00, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x1, 0xffffa888}}}}}}}, 0x3e) 21.977316722s ago: executing program 2 (id=252): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x29) write(r1, &(0x7f0000000000)='7', 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async) r2 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x50900, 0x4) getdents(r2, &(0x7f0000000440)=""/204, 0xcc) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r5 = socket$packet(0x11, 0x3, 0x300) (async) setpriority(0x2, 0x0, 0xd2f4) getsockopt$packet_int(r5, 0x107, 0x8, 0x0, &(0x7f0000001600)) (async) connect$packet(r3, &(0x7f0000000000)={0x11, 0xd, r4, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) 21.64029952s ago: executing program 2 (id=256): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/kmsg\x00', 0xa80, 0x0) read$FUSE(r0, &(0x7f0000001e80)={0x2020}, 0x2020) write(r0, &(0x7f0000000180)="a5129b557ed2973f15509c4b31a35be7f0c2b819da2f70ee21ed25d7ee39a85f5bb348e330fc3e9c8305da5828e7b83c5508e9e040fe8347a70765fc9931a655662e1b086263c56480ab96a2a389328e5ec077d4119795dd", 0x58) 21.433586805s ago: executing program 2 (id=262): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x11c, 0x4, 0x3e0, 0x108, 0x1f0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100, 0x108}}}, {{@arp={@rand_addr, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setns(0xc9, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000001840)=""/198, 0xc6}], 0x1, 0x4c, 0xfffffffd) syz_io_uring_setup(0x36f7, &(0x7f00000002c0)={0x0, 0x612, 0x10000, 0x0, 0x1e6}, 0x0, 0x0, 0x0) 21.408594796s ago: executing program 33 (id=262): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x11c, 0x4, 0x3e0, 0x108, 0x1f0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100, 0x108}}}, {{@arp={@rand_addr, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setns(0xc9, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000001840)=""/198, 0xc6}], 0x1, 0x4c, 0xfffffffd) syz_io_uring_setup(0x36f7, &(0x7f00000002c0)={0x0, 0x612, 0x10000, 0x0, 0x1e6}, 0x0, 0x0, 0x0) 15.823520503s ago: executing program 4 (id=314): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @remote}) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000080)={0x5, 0xac0, 0x8, {0x10, 0xa}, {0x0, 0x1000}, @period={0x58, 0x200, 0x87, 0x8000, 0x0, {0x7, 0x6, 0x80, 0x1}, 0x4, &(0x7f0000000000)=[0x8, 0x2, 0x0, 0x97]}}) write$tun(r0, &(0x7f0000000180)={@val={0x70, 0x8808}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x10, 0x2c, 0x1004, 0x4000, 0xb2, 0x2f, 0x0, @empty, @empty}, {0xd00, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x1, 0xffffa888}}}}}}}, 0x3e) 15.764328235s ago: executing program 4 (id=315): write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000440)={0x7, 0x7b, 0x1}, 0x7) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='syscall\x00') (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='syscall\x00') pread64(r0, &(0x7f0000000100)=""/133, 0x85, 0x8) (async) pread64(r0, &(0x7f0000000100)=""/133, 0x85, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_io_uring_setup(0x25f8, &(0x7f0000000140)={0x0, 0x2a12, 0x8, 0x2, 0xef}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x916a, 0x8, 0x1, 0x51}, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x302e, 0x20, 0x0, 0xdb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1ee7, 0x40, 0x1, 0x197}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9ee7, 0x8, 0x2, 0x13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8d33, 0x80, 0x1, 0x1a1}}], 0x4, &(0x7f0000002dc0)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, '\x00', {0x4, 0xd58, 0x0, &(0x7f0000001dc0)=@buf_max_buf="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"}}, &(0x7f0000002e40)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r4) (async) r5 = dup(r4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x3, 'xfrm0\x00', {0x529}, 0x27c0}) syz_ublk_setup_queues(r5, r3, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) (async) syz_ublk_setup_queues(r5, r3, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x48}, 0x80) setfsuid(0xee01) setfsuid(0xee01) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 14.868408166s ago: executing program 4 (id=320): unshare(0x2040400) r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) unshare(0x2020000) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5005, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x7e, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x4c000000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') 13.341431594s ago: executing program 4 (id=323): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='-:p1 ./file0:', 0xd) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket(0x28, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xe8842, 0x4) fcntl$setstatus(r5, 0x4, 0x42000) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r6, &(0x7f00000002c0)=ANY=[], 0xc0) sendmsg$netlink(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000240005050000000000000000000000001800000000000100f1ffffff"], 0x30}], 0x1}, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(r7, 0xffffffffffffffff, 0x0) listen(r2, 0x0) r8 = socket(0x28, 0x5, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_SIGNAL_MSI(r10, 0x4020aea5, &(0x7f0000000040)={0x10000, 0xeeee8000, 0x2, 0x7416c288a9fb0573}) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r8, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r11, &(0x7f0000000280)={0x1f, 0x0, @none, 0xf, 0x3}, 0xe) 13.235131606s ago: executing program 4 (id=324): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r2) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1_to_hsr\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x44) (async) r5 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r5, &(0x7f00000001c0)={0x11, 0x0, r6, 0x1, 0x10}, 0x14) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000001100), r8) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r1, @ANYRESOCT=r9, @ANYRES32=r9, @ANYRES32=r1], 0xd40}, 0x1, 0x0, 0x0, 0x4004800}, 0x20000008) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r3, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x8}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x8}, @ETHTOOL_A_LINKMODES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x844) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x24, r11, 0x1, 0x70bd30, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}]}, 0x24}}, 0x0) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) (async) r15 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x20, r14, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x4c, r11, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r16}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_VLANID={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000804}, 0x4804) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x38, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}]}, {0x4}]}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x818}, 0x4040400) 13.06835938s ago: executing program 4 (id=325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x30) sendfile(r3, r2, 0x0, 0x7fffffff) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000000c0), 0x3808804, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xa000}}) 13.06826074s ago: executing program 34 (id=325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x30) sendfile(r3, r2, 0x0, 0x7fffffff) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000000c0), 0x3808804, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xa000}}) 11.148961647s ago: executing program 1 (id=345): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000280)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) 11.083989659s ago: executing program 1 (id=346): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x408000) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x9299}, {r0, 0x9076}, {r0, 0x200}, {r0, 0x840}], 0x4, &(0x7f0000000080), &(0x7f00000000c0)={[0x47f0]}, 0x8) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getspdinfo={0x14, 0x25, 0x10, 0x70bd25, 0x25dfdbfc, 0xfffffff7, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x81) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x48100, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg0\x00', 0x0}) r4 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r4, &(0x7f0000000400)={&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000380), 0x0, &(0x7f00000003c0), 0x0, 0x40004}, 0x20004000) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000440)=0x8, 0x4) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = accept4$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000004c0)=0x1c, 0x80000) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000500), 0x4) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000540)) r7 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$VT_OPENQRY(r7, 0x5600, &(0x7f0000000580)) getsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f00000005c0)={@empty, 0x0}, &(0x7f0000000600)=0x14) sendmmsg$inet6(r6, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000640)="b35ec35a228d49c2bc8fa5c21db6f0ba51ba46d5d5233eae82fdd7b788c1126767b2fd4633343569288c6b834004f161f72887a21343f775d613b96e8038799d0ded6c87e0a4fcdc9344921be9156d21c9a1f4b0c90341bd8ceb608ba24aebd02e5c4ca66be9b1a72fcffb3e4e0e", 0x6e}, {&(0x7f00000006c0)="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", 0xfc}], 0x2, &(0x7f0000000800)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}], 0x30}}], 0x1, 0x4010) r9 = syz_io_uring_setup(0x3b54, &(0x7f0000000880)={0x0, 0x58bf, 0x8, 0x1, 0xfc}, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980)) mmap$IORING_OFF_CQ_RING(0x0, 0x7, 0x69de320bf71f1a4f, 0x20010, r9, 0x8000000) sendmmsg$inet6(r2, &(0x7f0000004f40)=[{{&(0x7f00000009c0)={0xa, 0x4e23, 0x7, @mcast1, 0x9}, 0x1c, &(0x7f0000000ec0)=[{&(0x7f0000000a00)="0e4450722c5ddf0bd15ea72644c70abc28eefad4eb2235a8f309f1b6f35aa31a937f60d9973abcf760d05cf4679f53767fd872913b2d74866eaddc1161d7454d62ec903f36905ce41bc89eb388c2c2c92b83e8ec8505775af6fc011ec1de", 0x5e}, {&(0x7f0000000a80)="0e81744bc7f6ed8c7cfb7ec5348bcf2d05974ad25e38fb5e334201027eb447dcdb309ee9ec6bbcf511f700f0f24f7f6c1521b80c6ce9177a9dc67df44a22923ee2", 0x41}, {&(0x7f0000000b00)="d2417e2c9f03b0b39855c70a53c9ac681c33492d1b66c073c48e93d0f8be9476147ca395f5e9d93e2fdd5b4dfbf31a14c72b0c62a0651bb207b03cb58c2476dcd57b23ce0afef4540873554989d8dc5915624c4c2d8fa55ae1cb47ca", 0x5c}, {&(0x7f0000000b80)}, {&(0x7f0000000bc0)="0882c31c15ffdccc1f4c6b663ad595d2e9a55e55fb3807d949a97c24419055c57fcb7545bc5e83bd86dfb5e7265646b1ed8894bb0ab9e9ceb4650ea42e65a515ece57bbdd7612ae2bb3c26fe048a856a147342eaf2be1bac99eb62d4c6cd316fd3b5058d309c1085041d9db7cbac9b29bc20f4754aab67f2ef1731fa703c198042a3817c4e6ed3d2a5374dd2de36d1485e271cc6b21fa38a1a5b5d2171b68258b21ac4bdddd4711d7db5efd3141d009d01ea06a21a85920b08a40e5151c125cce58d57655db3a8380212719b76cafea1650d2a639b23cb3afa547e644cbf34ccf2bf27262f04cba885c0fd6016", 0xed}, {&(0x7f0000000cc0)="87e3eda1ad34aef1fd7d00412b0c6185f0c7ac16b1e903e195a912326f799030b32260c3fc", 0x25}, {&(0x7f0000000d00)="cb946d4949b969e7a09ebe52539b59f9c03ee48fd2a518d3d8f2bd0de3ae5f9b42cee5257da18d12f5f327fd6e93633ab2e6ca924fc6873f355ce6d8443eab88f0008d992b626a903c731a692eb9c8d7d587e537c0e902da62dca6bb818b3f2b18847d764f0669928a8c7de8dce9ffde71c78ac3359db19fefef7f92dd25b3203492c78d086e92b66427c6cf4f74e26db59e4349a7772edc4eaf1ce27fbc08f05f8b37631edb14ed2a7de684674f1162390d3c5823b0f9212b18cf5968dc68f015de4310856236bb9676052b548e734ba610763771b8a94c469085a51b7a265de76731b1bde955dd5126e79d54458a76fb5046acaa", 0xf5}, {&(0x7f0000000e00)="b30b2e6c8a757897b18d67a6a984f533c5a80b3a012cc1db42c688875e11e4754a4104d9055a4c96af4c635a6ca7203ca2e2f1b162ec21b4e5cba7c17f9303da5f2282cd57505fab0414acb13092b48fc2f978fbd8210bcbd55b67c86ec13453369bc816a13592128152ac27c815ae82a6d82262190448c60ace6ca3cd95b7561a1e4887a2c6b8b443806cb829dbb39d846bad56f407086f5d5a90cc178dd9a729a711b88e6b217b5818", 0xaa}], 0x8}}, {{&(0x7f0000000f40)={0xa, 0x4e23, 0x4, @mcast2, 0x6}, 0x1c, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=[@rthdr={{0x68, 0x29, 0x39, {0x73, 0xa, 0x2, 0x80, 0x0, [@rand_addr=' \x01\x00', @mcast1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty]}}}, @tclass={{0x14, 0x29, 0x43, 0x8001}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x62, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x7}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @dontfrag={{0x14, 0x29, 0x3e, 0xf}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x3b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0x6}]}}}, @rthdr={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0xff, 0x0, [@private1]}}}, @hopopts_2292={{0x48, 0x29, 0x36, {0x16, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x81}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x10, {0x0, 0x2, 0x2, 0xfffc, [0x1]}}, @ra={0x5, 0x2, 0xf}, @enc_lim={0x4, 0x1, 0x1}]}}}], 0x190}}, {{&(0x7f0000001180)={0xa, 0x4e21, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f00000015c0)=[{&(0x7f00000011c0)="ac49421bb61b05006a9a0d13bb7fb01be9f96b43f194a090f96febf4bb2e821e161a441040725742f6033e4f33f31ab349de380fbed7bebb5a918b739208794c8f5d8c07cf1a2fadb3c8032e3e4a46dc1f2b434072437a5be2a0eff0b890da0e10bca8838c2b2d65cd2cea4dd95f1bd1600b83edcc20827df72f49395921e4abb0d5afdc305135498ba15662c54867f13f3d0764d9688822c358ec34af40a762bcd1461b5f35d1", 0xa7}, {&(0x7f0000001280)="a6f89c8cf1df2466bb1783ae042dea39885e6b63c4a81ece062dd8e47087d96f7792b8190d8bcc00d077c3a82ff3e381bbbdf0a021f4890fbd5dbea1a033599de7ca04c2664df316f6cdf376ff91dfa0b4c04d26ed1d8b69661448f2322d85573cb2737d483507cfcc0f73067ab0047f47be444e3340dde272661c12a06b6654d6b3637c63d554b1e35bb2760569c448af661849a29c5922009b28c22085c529fd2f4128bfd067ada514a995d2e4f13434bc581afde4618ad89a357a4beab93d30bb0846698138b7ce6111f8", 0xcc}, {&(0x7f0000001380)="e59ff465b1461d63b349d06c5c618e8bf4724c491326b4b9cfc8e00d009236c2f6aa03f70278a3b6edd2252b1517964a26080e7b06ec3c446f0ffe66574d5fbe11fe8ee6909e4d462eb31e901046a840c074ce2e29ea1c7176970851bf3604a2e3110f00882d32c4d7715c97f556a99d07ab992f97c57c36791b65bc8b085c631ac8bc12979f3c82657e2aabc379d1e98c4d2e2f18f3943c1bed05fa58d1515f6b640e8053963cd7120800c6ce386e041bc663ea04129af2009fe7467329", 0xbe}, {&(0x7f0000001440)="fa87353b2537c849a0ff0eada658ba292a2d33f9322911bd0706aca163ac1ab61ce7749dd06c19a9c85c2faf963d7efe47ef3b0835e6deccceca2fd50b4459a432ecea8a64809b7cc80ed3683b43abfc35d3e77f658ffb9cc308a82b17bc2017680554c25fb61245d698fa3dae45fec625e84e3ddf98cffa2d4469a671fa363916c19e5514fcf9edf29c2993bc1b8ca85fd7ed0261fe59ca1b803e128d3ed789f9cdf012d49bf12053", 0xa9}, {&(0x7f0000001500)="08c1a5f945d757677a6d6fcc3b4bc51f181a01893b5adad6fa824e7d957b9b8da41529091265480377c3a33e7c01d9b0f1630a71eab892f3c112624348c6ea6be0aac1d6fd1d278ddf623da78acba8f5c11bf0c0d9b6030bf99baab05e5d89e6a68214b374fe499c89194dbf1693750d3e85f96fea77542016be9377d14ff9dfcee803566890", 0x86}], 0x5, &(0x7f0000001640)=[@flowinfo={{0x14, 0x29, 0xb, 0xffffff85}}, @hopopts={{0x20, 0x29, 0x36, {0x5e, 0x0, '\x00', [@pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @dstopts_2292={{0x260, 0x29, 0x4, {0x3b, 0x49, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0xfb, 0xfff8, [0x9, 0x4, 0x2]}}, @calipso={0x7, 0x20, {0x1, 0x6, 0xd, 0x6, [0x3, 0x8000000000000000, 0x4]}}, @calipso={0x7, 0x28, {0x2, 0x8, 0x80, 0xa, [0x3, 0x5, 0x8f, 0x21]}}, @enc_lim={0x4, 0x1, 0xf7}, @generic={0x6, 0xfc, "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"}, @pad1, @generic={0xec, 0xd4, "4152fb9e7632ba91dd384a7aba68da2b88855b0ed1d6ec9c57cb360c76c30d2ce4f9a5908f04790c86fe85fb58e4aa880ed79b209f5e30bb1d4c302bb6180153dcc1a5208ee2167bd3ab3e6520c22f7075fac941da19a0e85df734de484bd6adaa40b0a88da76c13af42b88a0dac7b4afbcdc2724852ea99fcff300c525a1797224767388975f20451858c76c35c375274108f74ccb708248f3a2cb38aecb3eb72c6c16004895abf8e92012a5aa8d3e71965f3f466b02afc132fddb75d0e46a54d0afdc35b167821fc9269781ad4bc9229687732"}]}}}], 0x2b0}}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001900)="612ccf4bfc5041db4f93793b931a27ffbc2c0a24baf1a1f75bfb3fce4743db831d0f5fad75189960750b63d242df76447c3e970830922ec180c9bf15aced135a3b969cfb8b82bfeb44109efc0e", 0x4d}, {&(0x7f0000001980)="d23ee3c378d57be88e1ccd0a05a5a94a88b91b1d964d2296b43bc1b8907a91602d47f34482bb543d8992dc5a9a667710850f70511d7062dd5ba6f73d5aab801458fbf2873c3328a7139995f1ce93aba9389fdbcc9fd2a608dfe2cb797668d915e1ad1c85e411e3bccd87a80b04c5eb4e2be1366796e6", 0x76}], 0x2, &(0x7f0000001a40)=[@tclass={{0x14, 0x29, 0x43, 0x8}}, @hopopts_2292={{0x50, 0x29, 0x36, {0x3b, 0x6, '\x00', [@pad1, @generic={0xbb, 0x28, "ea0366279fd1dbbce2d38ec1719a2cbf256cb0e8c7221ab2c8f4896ae085e5766372c5be0079a872"}, @ra={0x5, 0x2, 0x30da}]}}}], 0x68}}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000001ac0)="3956da845527d2b6d04cb132278c6f881f862cccf7ffcc72c96dc28c292f1b7deda3802e6644e3318b79bf44795ca6b7f045d45fb36e0fd1e073c99c087cf483230e0a89cb78a670203ec6568df5ac9d555dd7b5813ba42f8d767c377f0bf76549a99883e82bc9bb666d14cd18c40d4fdbffc497eb779ec28b40774a7ca5f6bdeb2d7ce3d9b276b720cfbfffb4202dce37a29d0efd559231a490848654adaa41287e40fb3594b5094198c51dd8c1d389dc5c6abe86d7702ab44c", 0xba}, {&(0x7f0000001b80)="0ce021d7aba8b314379bb376d1411167abbab1353dfb1022d679e6a036977fb0236d944e0534bd27bd71cb39128084470a0f89523b3ee78dbb66115b3ac0a9183210081d3fca5218a685bbb7699deaf5d22b4a1b3ee03544e4b9d4e12bf4851a40f1627c853657c80a2ea929277b09317739184149baf84f62d74daaa64e7bd7a3c51ee97fa49cc40fbb70feafbfc6ed495743179c499da4f378639c2a6380482fed0898942c1ff85dbec13eec24f24f186c6d70ac7bda625f6f46fafe76445f46858e189b147084ffd1d959273b02cd3c903bce8a298b37", 0xd8}, {&(0x7f0000001c80)="f5049338d52f09bbeb04aca3b3a79f1aebc0ae1bd377435f7dea37d175c6f4e25034dc48d92cff5c1bb8b60424fee8f639249ec0d63ae93bc7cfe8035e954cf4af69597e449052ce4a", 0x49}, {&(0x7f0000001d00)="a4ce7fb2857b023652572c4c76197faa2600d35378559764962bc6dd11fa4742ad790a92f392a2568f6fc8e297306aa4f6973e0eb1f2249e64f660db9ebf4c066c72f9e2bee4911c24eb1cae454f14f8c96336eece96d763d15491ece036d224d9d4474eb01c6b0c7c504c37313473bbe853129a2234b91e2b7504909af2219fc576aa49af4e5d8a0cb7b70d8fc561231fc5cf882f01794d226a965a11f0dae21e4691fbc0b942efa106fe76d3edfac8de94d0b14d23c4447ec1c0b449d814f504ddda4888bc5a202e82", 0xca}, {&(0x7f0000001e00)="c2b92ede58d62d9167f72d26cadc8c08156e1ffc3f825a506401f50ce77cdb5ce050a27bc2c07336b06f1b66cdf7d56844b3c2b5d54c6dc36f690d9f725f8a70e8d92c1f37002443090157e4fd9955cab714b43edb0914eb3e736f2569b5a2397cb9cd1a1ea3bedf96f87a637090a08e40e37fdc924bb4e0f3038c4a1ea796199ad06fdde65999195664424091806ab3790c3bb63a2e70004e1b1f6de0dee3281e1e60e03fe6a38870c6843e8d586977fc868b616d0eca04c01faff157c020ce7a2765837f4a8b74a4d377cafe1a3393c61d2a2e4d6ef9afaa0babc45b83d7a3cbe82944f6933ca10e3519926624e8f67889bfd79a05cf610ce9b18ed505d8519376b8e87c407773eb3ca24f1c8a65f345e2b28b9d1a1419b55a464593384c3884efd07f6c867d59c6a9613c927595767150d4a14d9c1a9b71b33c58f708c56092cfea2cde1f417156a73f3da82d4a8e1d8b8dd3bf52ebe4f124d5cf275c163f01898a7b33be5a48c8874d9c25c6d05bf080ddcb0214dce37d57ceb44dac586f764342142986fa1e3971481c9decf1614865743e5c99de151c8db7996cdef6833224333c898ea7c597b3b14b34bef0de6f61cbd9ead2d9362bc756f4066fef99e1a07d229f7cc0bc285f83a552335fdf1b8193d87d61097006c1f863e7ad5f83a7bee68d653c3d8f870edcff5548640e75f0c2fe8c4443580d1ab169de9e561c69337112ea3527041a2b142792669fca72333b2f92c6f0c6d076495a06291a2b546801775b25491693037cb1dbed493d13660e17116746369bb64a673a09498271392f6872ffe93d60b632fe18ab529e7487d3c80727a7fdcc77d5c10a07470c484b6ae6a9ece353dc1e4b9facb4652bad2186cafd8e0ebe4abd9434180023b1ab92fca08c764b8d5399be9bac22149c2338f91760964969874710bb7c285dda3b7585ac3e81dce8177471b432c1a8ae98e7620e459d79e63907d91b00d6f86c973d7be97ca9b1702ea62ac685a6fd307d607d0f6d545db3c0b4aaa24ce84cfab08a5e7a31167b60d448018ae35160d98fe27421bcd53c8baaa77cbdde3971822cd6d101e430cdb41f91583fc2471552a3f594df21b439e723c91c6ce8b3341af1d8b6ba791e3a9499474148753abde0487f974fe654d5f4213ec7d835b39115263cab04aa4d08546cb448b18b2200c10b3011c96d4160f52711440803f0fce6142c7050087e9a933a6fc6f14c6ffa8ceffbd70700be0699ad2364dfd8f8ede91a7ea1f3507ae7d567abf926aaad7694017f33493ca611bd4090f1b5a47283a76b0d65d737a208a011c784b9e9c6b67a66c84845fe2a65cd0dec4399104901aa38226296cca0e6416d86a3fee2d132e8ec74087dfe598d2fc8fd5b7772dd167473bf74a6956872972409d1478e3e49955f25c9bb13102c97ed8ce26d68dad593fdc31efdaf649bd43f5cf2b07bce17e0e4f8afbcd4be66f87b75855faeb2e1f7f22017335ce2716246a66f6f9f47934f9c85b0331c838e405592ab28f5d4bd649e2e0cfc8b23e45d02fd3e1d2199c20605e83a3849eea6166e1d1e2750e23e69f57d43fbfe95457b203c39d76ea3bb6f194f5b0316f9446a0984cacd1b669a4ff5f173322d4ad49a9c2ad440cc213600502995b25a96b1828bb2123330f32fe7ce30e8a64926e47173738e0a61f611f72e3fd56cfedfa0d517e7888ec030d3ffc6d0aef231e27d41ec598cef4e7574afccbeec5f24db5e30ff01bbbcfe0582dd7be91495f449e6e1c88799079a877939ad6dd7d53cdfd2fade35c44d70ec18850ae5d1073cf0f8430b5f40142f11896d7a60d1649b294bd4db1877f287733aaf1e5fe12c65852f959ea63b0a05ace25e586f308588b9953217f048bb57eb4143dafa00e14a97e36389571d8f7956ae4d471350c9d2c8af8f047ebb1c56921cefddd6ea1f6816a3c5a7c75ce06f6634e15e8a5c65b0387c69453da8218aa2beac47cf0ad521518edeb24acd3f07d846e3ce8c405987033ff5d864030af45d365c3cfc2e400063eb1d37d4649e5530b53b18dffa56e8aa1b0c83b77b92fb5ddc25249f8fdeeb9872da44ddd9d4febbbcc2fb9dd8afb1387c2b64503864e83b5f8f2d6db23cda0cb1c6dcf82865697599835dae32513c05062771ba3c3d7a1d2ee54612440e77457fe3c162efae1326667e4d532ad032a2be06304ff9515e30bcc18fdcf69e04816bb85b7f1759c4b95c272326dddf85f3b4f892f91eaee71b20561dcd15c6eefa50ba3be838d7f9a181a168a3b613f1762fd1ef6bc485694eeaab106611002e6d9deeebf62f36ea6e7300e78c92bedecf0e1e3a2d260b92505e270276beb947219ac30fb4ad47691ef25a32f7032659af91e3715d72c314c53de511db89cc7d6b6041f3168124a3b6643c457734772ea6795a3b56fbb5819499aab85bdaf9eb2e253c48bc8fea36b6cdf57580a2a5d730037c5f0fabf43b990ab1b36ecf06fa85d21956399105861e3bb0b8c3200cd38b8f3c78ef2c5858995c67b445557c7721777a9a00c59d348b155d241c7f43ed171a96ca49f1afdee7262c4ffc465cb2afe3aa60bc3e47c6d2e088807c3c1b7a63b26aba163b155f4696d71038bcd1296cd47d7f2b01b8356155cec3f5a252a5c0f42fef0036a8c311268c863aabf304eaba3b312f80f497f3bc640be2cbac297942790763e9b6aa251d915fc9b9f8440e64adc576372cb874aeb79632fc4672dc53b1b458700533aa61cc5532d94dbe3d121b3a8eecec19c21284f962a45b942cfa64c0ae33d8b7bfa641132f979d8dd16b212198366b1bb576f83415c08a3168976b7af0de198df46314c58056c3f6650fb5c62c4eb3cd827cd83ef4c85609397bab7d59438563bc7b78ace7032070bea9c611dd8e82890dd47447ae9c3d26932dfa311693c0fb11b13afcb3fa6bdc60f25f74a31ef06a9ba921ca27acf7942fdb48fb9920278226620ef632b916272b298e63e37ca58bf8caf486438af8d62f934537bc697cd664469ce008031a9724a4b691deaf4acf2a9074e0b00add95c2f1ea8a2a80de2553b54b410180d02d95329df81ebdad70074d41b83ca93febf807f7a7e3241f48d9cbcc84acf8ea40c3968f9aed2f69a7b44cca700b46cac4ee0f0286ff14563b036d23ea0a62d2c8311be65befe51e462ac08ecea6ee766d9cf0a64e48a3c9bc79dc786ff2ce07accc2ca720273747387f4f950cc8a6b0728849801339ef63780a678eb3c7c045c26a7b6ec2fe7ee73cc8f8c0f0e05e32c7e919e41d0d920f1623b88dd021a7876b4cd075b7c100c977c80727bb9f58d29bdfdc516e1f985a89754c5d90992ea67c674831818c9fa645bed61bd1173f8ca2b668a27d8f3cd43ee7607f39dbbf02194eaa2e46fc599d08ecc26ab8604bf131b2bb6f00838e8d31f657df70260dbc8d796c51a6c97147b005dc35c87d1dfb33e000edb434341cf406de5d7a740dd2abc0768622a89b5a809da78ec127ff9eab35f28690d196f37bcd41d3041bff4ab47f29403106f4ab49f7687905b5b68b4c0baa224a44a6904464bc2057889e3284d14ab51c86745b3e6a3073ab6c3941e4ff7ee0ff902c6bf1994ca4c7e51665ed85a3840f002609258b8e60f058235472bdce3b1df5d735a6e30a0cf0877eeb03330b3a7d5378adc48c1beda290acd9f002b84a6695db8dbedadccca711624f38ab95a37ebdd265dc064d8b5158f037e0f813c58ac5120363c1368302d437af4b4c7d797f0b12c5e2135ca72dd618e6964648db45d9bd55aeb927be1db3cb275124122f121f73f928db1721071d1da2ec68c168eac7f0f46e1313d368819444265d6e63d030d9bf15befb64a1046ce4023f05ad438b2572bec7398896c54297c250ec84653f1b651d0c4221830ef9940ca569b46bb2e419fffe43a97b8685e4217ea9a34108f2169791a6745d00c78a2a8cc8f19841a5bc340937b51fa45779047b8e19ce2efad3203e63bcb00dafdb53fd8729842356610d93ae796b522bec868da4292a02141d606771d9b2defeeb88f4d95983201d3427a0058be0709858a51ca9d8729ddc130d0d70e8954ec1d5d7812ca8dd6e204b7044940153119eb3a15b66d5c408ac4fcb5c8227646007ff9964319a86111a28e89ba02cc9d55e833366bc009d45a3341db5e0e25e768567072e75804fab79fd6e7538a8bb35c39a09349943f5896e36b2452ee5eaa80d36fb8fffebf30c0518a7763d344061078632ac6e4caa9c292d5f8032f1e8e2b674497dbfec07f4cc4d5b74ecb34891cb860d79f7107ddcfa951fdb340b269881b9c4216b5dd77625e61d75ee20e86ad3734aa113eb9a349c2659dc97f9dd1f4202aff6021eea642276a1611168d8af58645a7d3db93078ce9f58750cb42f21de77f731b0ee6ed19258821c87c861511183bdd2aaf6dff77c5b9f5814b1f719b27d5824fda8699f09ceac59b137ceacb3af5a7b063ba8037745d7fea4855a76661170709683cb9b3e5332d66872afe24c0a32a49faeeeffbfdfb5048843bd76af4e86ebb1229578d3610ffa8288f4c0c5be129cd1f43e21115503bc018a01ac6da4921cf92308088dd2f8e9c830ba2258598378087ef705d2e82c041e6b0a58479dcd7b88b32568f2d7e7863f50a4b30908985badd20b7bedf5287396f3d06633b7eecee2e1d86ed168a933af9d8cbadda81633843b8eb1363aa518da9025554fd6b2504f5677bfa75aee93642ebe1fb605539b7b675e05ca3f82e4839576d243650ac331a86b1591cd9e9b1f883ab506fff5a0d4f2f760e729e92891e4c928dc3c0f85c4423785b4b164d70e34554e93b6f8e73dcbd76372290c101662457d8707ace1a48a5efe6485d9867810d88562ed9e149ac186dfb99ebaa3af1b51adcdd4ff0bfe22cf0b33e780bb8f68b456cf556b2fc424c0718be06f7fe317d6b6959d3f3e44ae625e6d819a98be549c9f5f0ffff9f2be2cb557582e7a102c90c121f1bdb4138f90112eba83cc30e74168dc7b03897b25f9c99d0f8dc8689dc62a1a10370edcfc7d85785c6b611b512994003cec8711d76b47a484aed71899459af1d837151e784894c9deb1e34d1af12cdc8283219cf9f3a0ed06db20844c107593ff831288835b2a5225b46e97cb26425850df01d4af8566abb0a9d2a74520bc6ecb2161feab691c47049fd8487a4f9d9b27dd22715e77d3ab0e8efcd0eb53985143adfa062730fad9148b1e79ee119de2e184ea9bd5032d9ebdfbe63aa731b7fd591e4f03089218373cbb426b116c62308ba7a902de1a4c67d340946c868266d3277969d82dc3c940383a20b7b1c38965f018467aecb2daa445803f1d18ca03b0d07f967dbd5a6a08892f97edbf0edccc53965d63028e50f1e4be0b10ee5ef0b76266b5ab119dcc2bac0a0f505c5e8ce82dac08021a1e8edb7b186cec1cfd97389359e5ab1adff8199c6e7607d2bb9df375514094167e1a7cf5e2cf4f587339c9a9fe0bd5c262e577d48c1b7029001a7e2b5b30e593fe49207b994a62683259f9471fc1e3ac1d57cf54e3586f3300fd6484fea59d8d5da057ec1c79686ecf9f734e772c79e81e1f2e9aa1f22a8f0b099da4de2862642dfa395bf80eb3efc15403eca5b69306ea94fa3c591a6e755c38b7f3f9f242fa697a4220644c26353a489e40116bec3a63cffecbaa4ec8c1d5151ccc0eb735b09035f34c485082fc2f4b9112d1bdd0d8eb165f7dcbf84ff69e2df04fe51a58039c1309c32ddfb23e6ddcb1cb5f9580320ec237719f4d74c4", 0x1000}, {&(0x7f0000002e00)="23922ad96b8229ad9a2ced272612f32a286cf1b765798c107513d7c088bc5da6388d4ba4d8cf375148177fa29794dd8fb12964d02528acd500c213b790c050b4cd327931ce", 0x45}, {&(0x7f0000002e80)="059cf5b837541b2ab539372d631877a58bdcb59c8bfc3296e5cf31994ff4c2db7d2bfcf2b5cdf2d69c9a1c1ee521267e08cf6994599aac21f67014266c880b250aba263e3a049e0920b766acbe8f8020eeca8fdada3219a5e2ee7a65196d9645a40f00608f31cb03d854f89eac17b07ee1f8adc676d2d66f7c6282ca630e0fdd8cc77a3a1b5a2658cac715df65aa6a4a7e6ac23f949a112d16fd6d93d4058ad45b6406a080ad9c870f9fe823ea1cd44fc40599f01fa19d68597461739b7f759678050cd4f72a1855bf8c6b579c35c261e7bbe39febaf78e3436fe6de693f1dd190b431ef8b8c6d2d26ce0a09fe42d8c181e0043fb1", 0xf5}, {&(0x7f0000002f80)="250e8d675f751991930bd201158178b31b82dd8acf9bb7abff14ec5217c43d48d7be3c524bf2f3f3bdf8c8d2992235c6", 0x30}], 0x8, &(0x7f0000003040)=[@rthdrdstopts={{0x40, 0x29, 0x37, {0xff, 0x4, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x20, {0x3, 0x6, 0x8, 0x7, [0x6, 0x5, 0x6]}}]}}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x5, 0x300}}]}}}], 0x68}}, {{&(0x7f00000030c0)={0xa, 0x5, 0x2, @local, 0x1ff}, 0x1c, &(0x7f0000003200)=[{&(0x7f0000003100)="1b96154525e7a8dc6ae8823ca97f7ef20a4525f7ca37f32a790c5fe4c6428d1eb100e99efdd2cc90737e6800c62d75d37bfdb9648f8001e2e38c655ef5b4102cce2a6740dd79c4609cd76a7d4040c6cdcea90d46e46476c11be8d2280faa383de0", 0x61}, {&(0x7f0000003180)="8bb50140bfca809f9b9c8903278eb97dbd1240260ea6124b9bee609243ac8e262c90bb8ec07521ad8a30e180964643c69b45455c490df84951d8ed3b12640aef66", 0x41}], 0x2, &(0x7f0000003240)=[@dstopts={{0x48, 0x29, 0x37, {0x32, 0x5, '\x00', [@pad1, @pad1, @enc_lim={0x4, 0x1, 0x28}, @jumbo={0xc2, 0x4, 0x91}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x10001}, @enc_lim={0x4, 0x1, 0x7}]}}}, @tclass={{0x14, 0x29, 0x43, 0x2}}, @dstopts_2292={{0x80, 0x29, 0x4, {0x2b, 0xc, '\x00', [@calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0x7, [0x7, 0xa48, 0xa5, 0x7fffffff]}}, @hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @jumbo={0xc2, 0x4, 0x10}]}}}], 0xe0}}, {{&(0x7f0000003340)={0xa, 0x4e21, 0x800, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7fff}, 0x1c, &(0x7f0000003600)=[{&(0x7f0000003380)="adc8bc3ce478a08efa3de33fed61d6a2a001d7bc40fb8ec4aae6480908bb01e928d06611ab795526c6521ca67a6c78d27be0635789229414c55454faffa22984d42b408c5dfb64112b7a610fa08751b1e449f67fa1f22e293feab8258f3cb677c15e", 0x62}, {&(0x7f0000003400)="b19df97ed05a310cbb8c26c2ddee32d59ca7dfe1e9a8931d388444defc24ef3c5f456e95f4711b", 0x27}, {&(0x7f0000003440)="483fc4bb07811ef3", 0x8}, {&(0x7f0000003480)="da69aab277a430fb0b62b5652402af1b33471968faf526e2a257f73fefcaf207156a33a1416fdb2906baddab43b56929a596ae48f59d86c2bb8a10195139d8453e2c4e8cc7f74d1b97573edbd3569bf4d35b6c8ef7fc8291ad946a1f994aefb888390cbdca752c0f7b5423bd73b51a1dfed8a354", 0x74}, {&(0x7f0000003500)="4318bdbad6fe9cda68db7f9a4e7d6db7e626be641c667747e790c887fac5460f1f9b9d04d6f36286aa185f33981e78bb19dd36231996127cc61a8170d21e263d39bbc18e3fdef076896f1520cd567c1925276f44028e0594bc2bf8ec5d0a60850743fcfce9cd86cba6df04694a9b5b5d0369a433155b71608184451c206013fe5bba3730636eeb80e18f5f7cc9beb4d765f14cc210de682e78fe0b4a2a48bde7f79751a811ae32fbf96c0c34557b5f00164858216de1bba1f4701cffecf2d166a4975af64dfe5f66047f1b5f4513592768354c17bd6eac82aee31ea2dd3b4a50944d1ff171ef37dee2f950034bf19c56", 0xf0}], 0x5, &(0x7f0000003680)=[@hoplimit={{0x14, 0x29, 0x34, 0x5}}], 0x18}}, {{&(0x7f00000036c0)={0xa, 0x4e24, 0x1d, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c, &(0x7f0000004900)=[{&(0x7f0000003700)="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", 0x1000}, {&(0x7f0000004700)="729f87d72df0bbb9e4b52e013fddfbec8a92303bb57c26e3314f4b88d17bf98f1c0af12e7761f96c3461570c313c053de86fd2a49f1a43ea791f525064e4f61753824e646e99b6bd969035f4289455f5f8ebf0c5a31d44b3c8cdcde53aea12cda5c2d91ae8e020a4bd4b9c0f99ae1d70b845052673c26f88256cad6b3ba5788d404b4ff6", 0x84}, {&(0x7f00000047c0)="dd975b13b78affc9b8ea253bedd7774e9d515020e5df66932fc0389d785b14b5f06fabe16ea42cd96b8ba1b1dd3220ccb53473b13be2eb430932e8e911d661e1a5aab25e2019b323aba61a89b2513de40e33bdc9cce3914f9d782341d9a07880d261827491edcef8a87f0053e33b843501de5044e3552ef10a614afa1a9a954b68ace1e35005f484899009fb07530875fef4190a31271c944ee9a597294f32e3d31b6779f2de0cb431cf8ffc77b3ac1588f2e638", 0xb4}, {&(0x7f0000004880)="cc8a601da5c9951ff16fcbb9e1adb33f45a2cc5822", 0x15}, {&(0x7f00000048c0)="4c02596551fa897f5a649fccb17d80bce91acb1b38428a29507a3a02fcec", 0x1e}], 0x5, &(0x7f0000004980)}}, {{&(0x7f00000049c0)={0xa, 0x4e22, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x33}, 0x2}, 0x1c, &(0x7f0000004a40)=[{&(0x7f0000004a00)="8da5226d7c550eda46ff9f550e32318a292ea3ea6a78a69e3caa241088fda39798dab02944", 0x25}], 0x1, &(0x7f0000004a80)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffffc}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7fff}}], 0x30}}, {{&(0x7f0000004ac0)={0xa, 0x4e22, 0x7d, @mcast2, 0x7a1d}, 0x1c, &(0x7f0000004e80)=[{&(0x7f0000004b00)="29c3a46ac62dafab93dcd62c6219a48379e89e3b007b7edb02be5eec159045546e150a61f9c8d6d6eafa962b2761e2380278dbd55af92ab4d294baec8904b376694727ae2d9fa588876ee6e8c4896a08b2d30639c766487784d6912a0d2ff4eadeb9d30e102b59a478e3ba9ffd1fadc4b742542f50b27ed731b7886790d7846be5f7cf0767f9a6a01b6a17a30abd84b86c842c31744e65df0ab4f6c5cf287c68a600c58bab7f8d7143e2974ff4a1a793620d47d55855c68389df4ad8c0ba7b839d0e", 0xc2}, {&(0x7f0000004c00)="2b1ff9c86c22f36d1b9df6d365c4846187bee0686fad989652b50992f62e6b18b68a8102c0869e1b3b63f13c536f5db6b8526260113e29ec8696cad15f10ac8b008a6fee0d009b3262deae8361601cc5dbe39f1b3ebe45d18ef20f0e1a9a7c6e2047340f767099cf01d34e8657fe1b385aaa7c809c59b744da858ddf1c028e2798dd39e7905d87cf1a5451ef8c89004ea61f77ea09e377d693821387b326e9744b9b4a56d41b74803c21ff4b28b3eea9a576c2505ac60ba4f1a33654c13d5b8358287ccc4bc2ba8fac6cd2558a8ef9569adc7abb82e30a821772b687fb81a3e42063eed2f1ed3febe4f407c8c3a58e21ca70fd3dfdc4440333", 0xf9}, {&(0x7f0000004d00)="bb30099876a2c8ddef3044624015df2269bfdac2b51539c5e3a5657e976b1731d662b1f0d45c117f210d980fc20f46fc790293b69f804dc60150434f974aeee9ae3d2b6d7daba17745a9644f792bb9384eb51e86d10029c4fc4031265b9082", 0x5f}, {&(0x7f0000004d80)="07ba028507b0a33c61dd6969a33953bf8e9767fd9b0d4255068433fddb6eedaed4b9bd235fa7f2fedf8457c1bf629dd08acaf93499189de359d24fdd7d1593f64f2efd51b354c13646917a16fbfb26ef2664f3269e09b4c13104c5909014568aacb77f7b61bce785ee6d8629a5ae2f969854ae0cfb1186374bbf4223d51a7c38bb98fb2264e8a16ba894ec1f25898e35480a2d97e8c5631bfa6fe0cfd3c09cd2b6ba7b6ee9e0f79cc163b0f79e8db3eb80bc164dd3806556c01ce6acfad7f27027d3695530a3dc87af22024fd89c5d08d6ff56b367c575e6dd", 0xd9}], 0x4, &(0x7f0000004ec0)=[@dstopts={{0x48, 0x29, 0x37, {0x1, 0x5, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x9}, @jumbo={0xc2, 0x4, 0x800}, @calipso={0x7, 0x18, {0x1, 0x4, 0xa, 0x4, [0x1, 0x2c3]}}, @pad1]}}}], 0x48}}], 0xa, 0x115d6e84dd00fae) write$P9_RLERROR(0xffffffffffffffff, &(0x7f00000051c0)={0xa, 0x7, 0x1, {0x1, '\x00'}}, 0xa) ioctl$TCXONC(r7, 0x540a, 0x2) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000005240), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000052c0)={'syztnl0\x00', &(0x7f0000005280)={'gre0\x00', r3, 0x1, 0x700, 0x58, 0x5, {{0x6, 0x4, 0x1, 0x1c, 0x18, 0x67, 0x0, 0x5, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x32}, {[@ra={0x94, 0x4}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000054c0)={&(0x7f0000005200), 0xc, &(0x7f0000005480)={&(0x7f0000005300)={0x148, r10, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x840}, 0x20044800) 11.05713649s ago: executing program 1 (id=347): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x4004040}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004}}], 0x2, 0x40015) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x15}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) syz_usb_connect(0x5, 0x24, &(0x7f0000002f80)={{0x12, 0x1, 0x250, 0x74, 0x24, 0x88, 0x20, 0x1a0a, 0x102, 0x376a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0xe4, 0x0, 0x3, "", [{{0x9, 0x4, 0x83, 0x0, 0x0, 0x75, 0x41, 0x2e, 0x1}}]}}]}}, &(0x7f00000034c0)={0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 9.80086414s ago: executing program 1 (id=361): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf250500000014000380040004000400010008000200000000000c00018008000100", @ANYRES32=r4, @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100024, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) accept$unix(r5, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008080}, 0x4404c010) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'}) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf250500000014000380040004000400010008000200000000000c00018008000100", @ANYRES32=r4, @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) (async) pipe(&(0x7f0000000340)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100024, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) (async) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) (async) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) (async) accept$unix(r5, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008080}, 0x4404c010) (async) 9.778214161s ago: executing program 1 (id=362): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6) mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) write(r0, &(0x7f0000000540)='drop=\'', 0x6) (async) r1 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'pimreg0\x00', 0x13400}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0xb30004, &(0x7f0000000080)={[], [], 0x2c}) 9.692346943s ago: executing program 1 (id=363): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./mnt\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000280)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x5dc, 0x1, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x80, 0x32, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x6, 0xf3}}]}}]}}, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, 0x0) 9.686968373s ago: executing program 35 (id=363): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./mnt\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000280)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x5dc, 0x1, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x80, 0x32, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x6, 0xf3}}]}}]}}, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, 0x0) 9.280745443s ago: executing program 7 (id=371): setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) (async) keyctl$session_to_parent(0x12) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1000, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000880)={0x2c, &(0x7f0000000580)={0x40, 0x31, 0x5, "59e14022c9"}, 0x0, 0x0, 0x0, 0x0}) 6.263170767s ago: executing program 7 (id=370): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) futex(&(0x7f00000000c0)=0x2, 0x0, 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000240)=0x1, 0x2) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) syz_usb_control_io(r1, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000180)='\x0e\xb7<\xfb\x92\xaf\xe3\x89\x97\x8d\x83\x12\xfb\x89$P\xf6[P\xe5\xd9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\xb2\x90\x13\x92\xb5|\xb1\xbd\x84|\xf9{\xa8\xcc\xe2\x8c\x0f6\xe8\xbe/\x1e\x9eYd&\x8a\x82\xb4&\x8a\xa9\xe4\xfb\x12\xf8\xf7\xf5\xf0$\xef\x91\xb2\x82\xf9\x16\xef\x85\xb0\x9aW\xf5WO\x89E\x8a\xf0\x90tk\xbf\xa0\xef\xfb\x7f\xa1\xd8u\xe6V\x9e\xfe\n\xf2_\x96\xa3\x11,\xe3\xd0\xdf9c{\xb1\xe4\x1b\xb2\xb6\xca\x06v\xee\xfc \xecU]+cb+\xe0\xc4\x9c\t\xceWv\x1f\xb1D\xde\xfa\xda2\x94\b\xc9\xa1\xebY@', 0x0, r0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 5.993172854s ago: executing program 5 (id=372): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x3, 0x0, 0x600}}, 0x30) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000100)=0x100000000000000) syz_usb_connect$uac1(0x5, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x582, 0xa3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x8, 0x80, 0x9b, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x41, 0x6, 0x7, {0x7, 0x25, 0x1, 0xc, 0xf, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x6, 0xff, 0x26, {0x7, 0x25, 0x1, 0x4, 0x8, 0x144}}}}}}}}]}}, 0x0) syz_usb_connect$uac2(0x2, 0xee, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1235, 0xe, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0x7, 0xc0, 0x7, {0x8, 0xb, 0x0, 0x0, 0x1, 0x6, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8, 0xc, 0x40, 0x7}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x400, 0x80, 0x3, 0xe3, 0x5, 0x8}, @multiply_unit={0x7, 0x24, 0xc, 0x10, 0x2, 0x1, 0xff}, @effect_unit={0x9, 0x24, 0x7, 0x2, 0x3, 0x5, [0x3]}, @effect_unit={0x13, 0x24, 0x7, 0x6, 0x2, 0x2, [0x2, 0x3, 0x0, 0x2, 0x0, 0x3]}, @source_unit={0x8, 0x24, 0xa, 0x5, 0x0, 0x9, 0xff, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xfff7, 0x2, 0x0, "418b40a9"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x1d, 0x77, 0xd0, {0x8, 0x25, 0x1, 0x3, 0x0, 0x6, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x4, 0x3, 0x5, "", 'iI'}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x80, 0x1, 0x98}, @as_header={0x10, 0x24, 0x1, 0x3, 0x4, 0x3, 0x2, 0x5, 0x4, 0xe}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x2}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xeb, 0xdf, 0x8, {0x8, 0x25, 0x1, 0x81, 0x35, 0xf7, 0xa}}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x3, 0x3, 0x7f, 0x0, 0xf9}, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="050f2d00060a10030208000f1013480b1001040600060300000403100b"], 0x2, [{0x9b, &(0x7f00000002c0)=@string={0x9b, 0x3, "34eed3285a2d32c5b4577a0400568b19ed9cd82cdcac345f5b51cf1717aaf06b07588bbd56d257a842cf04e8189f25a5685231648ef25c9e344781dde81a5ef376eb371d8ab0792fd1968d9a26243f879d46acf469b1e34433c7d29b3b7ac9826fbcf2edcdc909d55fbb015d3606bba28737c77d3dc1cfe05612aa2738f3df545ffe2c8b0c8d1f1a2f53ce22265b90e4fada1e690797c3dd37"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2409}}]}) socket(0x22, 0x5, 0x3ff) 5.395641858s ago: executing program 6 (id=376): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @main=@item_012={0x1, 0x0, 0x8, '>'}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x0, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x80004, 0x6) fsetxattr(r1, &(0x7f0000000040)=@random={'security.', '\x00'}, 0x0, 0x0, 0x3) syz_ublk_setup_io_uring(0x707, &(0x7f0000000080)={0x0, 0x27cb, 0x40000, 0x1, 0x1d2}, &(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) (async) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r8 = signalfd(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, 0x0) (async) r9 = syz_clone(0x2000000, &(0x7f0000000200)="15c58cca4fc5580ffc9f9d7ff5e088a66648087192096586a2eee57d6ad745cbad40279115b17b1b27f2793060645c67de5c83bc6d484953a9aeac7024cf2d63a22903d9ab1a40ba2d05730cc5d037a8a1134a579ef0be054c7fd81f6d021835317b7554cddc0137151534594c5d294fa58e211cfabcc2", 0x77, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="99c8110d182e72167fa88796ba60a2badb49d74488d5a96b08c340466a8637a737fab0c13c4db9a40df4037d6109a76f06c653b7c0c091cf8bdde9aa5243b28cc57988e3bcec068212c907849244fc554d7785d0f6f61582898aaf6f358da64e7d21a4414415550de3bcc6b0191f8c714bb6ae3dc5085f077cd31c2529374fad8cb7cd878c504192e3749bfbd0c2b8770f426283384572554eb05917e2c3fc") syz_ublk_add_dev(r1, r2, r5, r7, &(0x7f0000000400)={0x2e, 0x31, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x3, 0x8ad, 0x0, 0x0, 0x1000, 0xffffffff, r9, 0x0, 0x9d}}}, &(0x7f0000000480)) 5.084374576s ago: executing program 3 (id=377): r0 = epoll_create(0x3) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="70008808ffffffffffff0180c200000308004540002c6cb35659b22f86b9f2994d00876ea0d542bb0088be00189083340000000000f8046138da1381dfa02f91bedcfef933163c2a20653da80739d18dd41d44a481f39bdc6be12b96bb05de1c83e66bec58f2fbe95515c9c4b681bd"], 0x3e) 5.030061687s ago: executing program 3 (id=378): r0 = socket$key(0xf, 0x3, 0x2) unshare(0x4000480) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xffffe000) prctl$PR_SET_THP_DISABLE(0x41, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$packet(0x11, 0x2, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_int(r2, 0x107, 0xe, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000200)={@rand_addr=0x64010100, 0x1, 0x0, 0x30, 0x0, [{@dev}, {@initdev}, {@multicast2}]}}) getsockname$packet(r0, 0x0, 0x0) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f00000001c0)={r0, &(0x7f0000000280)='\xd9%\x80\xecM\xd9\x80\xa0\x0fv0@]\x11', 0x401, &(0x7f00000000c0)={@align=0x800, {0x3, 0x3, 0x8, 0x7fffffffffffffff}}, 0x2, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000180)=0x6}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) 4.988837248s ago: executing program 3 (id=379): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x151081, 0x100) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000000c0)=0x16, 0x4) unshare(0x60000600) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x7, 0x10, 0x10, 0x1ef, 0x10, 0x14, 0x210, 0x10, 0x10, 0x100, 0x11, 0x5}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f00000001000132428bd700000000000e0000001000000000000000000000000ac1e0101000000000000000000000000030000004e"], 0xf0}}, 0x804) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000140001b66fb1b313ba36db000a0000000400000014000100fd010000000000000000000000000001150006"], 0x44}, 0x1, 0x0, 0x0, 0x4018}, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 4.644149217s ago: executing program 5 (id=380): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x4, 0x5}) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000000)=@fragment={0x88, 0x0, 0x5, 0x1, 0x0, 0x1b, 0x65}, 0x8) getsockopt$inet6_tcp_int(r1, 0x6, 0x2a, 0x0, &(0x7f0000001e80)) (async) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000040)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x3ffd, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6518, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x9, 0x0, @void}}}}}}}}, 0x32) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) (async) pipe2(0x0, 0x0) syz_ublk_add_dev(r9, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000140)={0x0, 0xc1, 0x1, 0xfffffffd, 0x7f}, &(0x7f0000000340)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x0, 0x2b9, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 4.631588987s ago: executing program 5 (id=381): sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2100, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301010009210000000122010009058103"], 0x0) r3 = syz_open_dev$evdev(&(0x7f0000002780), 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000000)=0x4) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000440)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @local=@item_012={0x2, 0x2, 0x4, "4bfa"}, @global=@item_4={0x3, 0x1, 0x6}, @global=@item_4={0x3, 0x1, 0x1, "416500c3"}, @local=@item_4={0x3, 0x2, 0xa, "54ed8759"}, @local=@item_012={0x1, 0x2, 0x1, "01"}, @main=@item_012={0x1, 0x0, 0x8, "1e"}]}}, 0x0}, 0x0) 3.993957983s ago: executing program 6 (id=382): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) read$rfkill(r2, &(0x7f0000000040), 0x8) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000004, 0x4000010, r1, 0x0) (async, rerun: 64) prctl$PR_SET_NAME(0xf, &(0x7f0000000800)='new_name\x00') (async, rerun: 64) write$rfkill(r2, &(0x7f0000000100)={0x2, 0x1, 0x2, 0x1, 0x1}, 0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) ioctl$OCFS2_IOC_REFLINK(r1, 0x40186f04, &(0x7f0000000280)={&(0x7f0000000200)='\x00', &(0x7f0000000240)='\x00', 0x1}) (async, rerun: 64) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/mem_sleep', 0x2, 0xa5) (async, rerun: 64) syz_usb_connect$uac1(0x2, 0x9a, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010200000020050b431740000102030109028800031a09403f0904000000010100000a2401d2000a00020102090401000001020000090401010101020000072401080805000f2402020002ff0f00f441a4440fb209050109ff037808ba072501080403000904020000010200000904020101010200000b240201fc030801371fc807240108050210090582092000030201072501000e0300"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r4 = getpid() (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) (async) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) (async) recvmmsg(r5, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0) (async) sendto$inet6(r5, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r6 = syz_pidfd_open(r4, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f00000002c0)={0x1, 0x9, 0xd3ec}) (async) setns(r6, 0x24020000) (async, rerun: 32) r7 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) (rerun: 32) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x174) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) 3.173724263s ago: executing program 7 (id=383): r0 = socket$netlink(0x10, 0x3, 0x7) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160009000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r3 = epoll_create1(0x80000) r4 = socket$tipc(0x1e, 0x5, 0x0) listen(r4, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmsg(r4, &(0x7f0000007d00)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000240)=""/83, 0x53}], 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0x40000000}) write$vga_arbiter(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='lock io'], 0xc) r5 = socket(0x10, 0x3, 0x0) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @multicast2}, 0x0, 0x0, 0x4, 0x1}}, 0x2e) write$vga_arbiter(r1, &(0x7f0000000180)=@unlock_all, 0xb) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_ALM_SET(r6, 0x40247007, 0x0) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000004c0), &(0x7f0000000500)=0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRES64=r6, @ANYRES32=r5, @ANYRESOCT=r3, @ANYBLOB="0927e1c658416f17106cd09944d1b5fbc24e6add34dc86713f469c96f3c0d10444a9f915a5b79f1e8c5b11b61fc8d83461da97cf569772fd2a5948e4692cd3c8ccdd83f2ce1d817dadc8d0475bf22cf427961262b98a0229d706146c06e4b5a868f62e859db0339ae980e6337b4ed4893b1d32b06acf7b9e7ce0c615f42490667b8c2e0a13cba77c43165154cdadf89c560e5a79ca88bde5845fc1417310ca30bd01321481ca88e2afc70b0b63f43debd9c52759ced6a3c4b69197029d203fb07dba71ea10fb068373252feb9a1e3855ce65a9c1a96bdfd3f7bd02988c9dee5f2ba9fd0ee520beb64be10162ede5355a88eb974cefaa63b3f76d41768b31", @ANYRESHEX=r1, @ANYRESDEC], 0x3c}}, 0x4040040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r7, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2d}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x201}]}, 0x28}, 0x1, 0x0, 0x0, 0x44080}, 0x10) unshare(0x6040480) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0x8, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x60, 0x0) 3.142813444s ago: executing program 7 (id=384): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r1 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001180)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB="400400000000000000fc5a1c3bc65fdc7f34cf1c5bc15812da7481e4c75d6e5dab4b14469da6d676066f742aab0a6f28f4bb8f375a6880f12749d0f3eb99dd2f17bdb8324f75013b9731eab2f187dffa1b7f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000019c0)={0x84, &(0x7f0000001500)=ANY=[@ANYBLOB="6011060200000043217c3289"], 0x0, &(0x7f0000001640)={0x0, 0x8, 0x1, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000001980)={0x40, 0x21, 0x1, 0xf6}}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x804) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20040880}, 0x40050) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000d80)=""/4125, 0x101d}, {&(0x7f0000004200)=""/4113, 0x1011}, {&(0x7f00000001c0)=""/89, 0x59}, {&(0x7f0000000340)=""/186, 0xba}], 0x4}, 0x2000) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000100)={[0x4e, 0x1000008, 0x23e, 0x5, 0x20000010000, 0x8, 0x8, 0xa, 0x200005, 0x0, 0x3, 0x0, 0x401, 0x9, 0x9, 0x10000008d], 0xddcd0000, 0x1300c0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x82401, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x100000, 0x80000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) ioctl$KVM_IOEVENTFD(r4, 0x4020ae46, &(0x7f00000001c0)={0x33b, 0x26000, 0xc00000, r5}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$OCFS2_IOC_RESVSP64(0xffffffffffffffff, 0x4030582a, &(0x7f0000000000)={0x2, 0x2, 0x4, 0x400, 0x9, 0x3}) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000040)={0x2, 0xa, 0x0, 0x20000000000003, 0x1005}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r8, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x8000060000000001}) write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) preadv(r9, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 3.068448485s ago: executing program 5 (id=385): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) socket$tipc(0x1e, 0x5, 0x0) (async) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0xc0) write$UHID_INPUT(r0, &(0x7f0000000640)={0x8, {"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", 0x1000}}, 0x1006) 3.012340517s ago: executing program 5 (id=386): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000400)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x91, @string={0x91, 0x3, "3781657a079c1a4806e43393a68f54433ed0cdccae04c199f90c03191f69227377edb326d0b635768a6fa800b5ceab7658aac8d88141862eda3dc7434ca1a0b44c7839b68a60a975bda1b8ab5803ef8ae640bd2dba4fbe583ef1b27362524158fd1a3703267caf4bee5aa4edace21c56021872bc809e8e3edb53f3bf00e3023c1b1163de84c7fa502b2b446ee5550a"}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) userfaultfd(0x80001) modify_ldt$write(0x2000, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$loop(&(0x7f0000000000), 0xff, 0x101000) ioctl$BLKFRAGET(r2, 0x1265, 0x0) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x448}}, 0x0) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) (async) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000400)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x91, @string={0x91, 0x3, "3781657a079c1a4806e43393a68f54433ed0cdccae04c199f90c03191f69227377edb326d0b635768a6fa800b5ceab7658aac8d88141862eda3dc7434ca1a0b44c7839b68a60a975bda1b8ab5803ef8ae640bd2dba4fbe583ef1b27362524158fd1a3703267caf4bee5aa4edace21c56021872bc809e8e3edb53f3bf00e3023c1b1163de84c7fa502b2b446ee5550a"}}}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) userfaultfd(0x80001) (async) modify_ldt$write(0x2000, 0x0, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) syz_open_dev$loop(&(0x7f0000000000), 0xff, 0x101000) (async) ioctl$BLKFRAGET(r2, 0x1265, 0x0) (async) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x448}}, 0x0) (async) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async) 2.89502142s ago: executing program 3 (id=387): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) futex(&(0x7f0000000100)=0x1, 0x7, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000240)=0x1, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x2000006, 0x10003) copy_file_range(r4, &(0x7f0000000000), r4, &(0x7f00000000c0)=0x1, 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r5) r6 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r6, &(0x7f0000000400)='auxv\x00') io_setup(0x5, &(0x7f00000000c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000100)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r3}]) fsopen(&(0x7f00000001c0)='sysfs\x00', 0x0) close(0x3) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x2000) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x98, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r8, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000040001000003be8c5ee17688a8003200030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xee) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2c02e4d8eb3a414, 0x4) r10 = openat$incfs(r9, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) poll(&(0x7f0000000180)=[{r10, 0x7e0a4d274f23a8d4}], 0x1, 0xa140) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@loopback, @in=@loopback}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xfffffffffffffe75) 2.052114s ago: executing program 3 (id=388): syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000001c0)={0x80, 0x1, 0x0, 0x0, 0x5995}, 0x10032, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r2, 0x4004550c, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r3, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="68c9", 0x2}], 0x1, &(0x7f00000000c0)=[@ip_ttl={{0x14, 0x11a, 0x1, 0x1}}], 0x18}, 0x0) 1.208246251s ago: executing program 7 (id=389): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x8, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x2, 0x0, 0x8, "008c"}, @global=@item_012={0x1, 0x1, 0x0, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x2, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x11, "6220f94fa2aa557f82c38331915adedd7d"}, 0x0}) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x0, 0x22, 0x7c, {0x7c, 0xb, "bb28e65b6f110e9ef3b9f6dc3126be8367d3bec056b4d068ad1d825e0973dda45aa15d431e53b1bacc706a0ac8f9f7add9192301f91ab51cfe58b053ae79ac3a5decb64bfbc754c89835e6523cd697ada0f55486d206bf751a06b8f11029b0a7a6d68e7b12191f3a24a1b6f1e059bc719c9def6e03cd43531c55"}}, &(0x7f0000000180)={0x0, 0x3, 0xb7, @string={0xb7, 0x3, "c088d5300900caafcecda373be65e9c45b92d99e9d3fc3ca37bea167281644bbc3af0ae986565b39d4883b290b6221c68c998b9fedf40f1197a9ab6e394c17c903f93196c07920ea21047840826dcd48f1c05835e2e273830653322b8d6106e7793cbc8872a436978734a353bcd0886014142e1246e9d299c41df2c7dae14fff949c69bf22943be6f040683d14d7ec8da79ad12756840b7ad367125cd3822473cb61d0b88716f99b77604d8c7ca0970b4a1beec295"}}}, &(0x7f0000000940)={0x1c, &(0x7f0000000280)={0x0, 0xc, 0x8e, "1a1a616199048bb9ab566ed345aa3bc8123c2d6dbea018d5b6e93230116b5dd40a43e0bf90c23bfc45e7b1cf614eade858f9d011790ba4e9e128f2c3fab1eb09005bdc0e4e8447ac1752c78c2015779882b7f5a514e3a439709cbd40cfd9e2bbe969ecdc37caa5951f39ab81e09bf8c638d1384f59e7c74bfc276ca583917db81928a2a48482fbe721bf98cbd3c6"}, &(0x7f00000004c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000900)={0x21, 0x0, 0x4, "98111eda"}}) 865.916619ms ago: executing program 6 (id=390): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x30, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0xa) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000002c0)={0x20, r4}, 0x0) landlock_restrict_self(r2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x45, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe880000000000000000000000000001ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000023500000a00000000000000000000004c001400726d64313630"], 0x13c}, 0x1, 0x0, 0x0, 0x40000010}, 0x0) 824.32058ms ago: executing program 6 (id=391): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) close(r3) socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@mcast1, 0x1, 0x394, 0x4e24, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x9, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3502, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) accept4$packet(r3, 0x0, 0x0, 0x80800) r5 = socket(0x11, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r6, 0x107, 0x1, 0x0, 0x0) bind$packet(r5, &(0x7f0000000500)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14) writev(r0, &(0x7f0000000a00)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 664.330805ms ago: executing program 6 (id=392): r0 = socket(0x1e, 0x6, 0xffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x3, 0xc000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="48b801b89734000000004d9823c80f23f835080050000f23f8c744240004000000c744240200000000c7442406000000000f06670f2107c74424002a010000ff2c24b8010000000f01c10f23c00f21f835020002000f23f8260f01d1f341f4c4017d10e548b8c0770c90f03a5f344b0fc76f000f20e035004000000f22e035080000000f23f8", 0xfffffffffffffeec}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_GET_SREGS2(r3, 0x8140aecc, &(0x7f00000001c0)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f00000003c0)={0x2001, {{0x2, 0x4e23, @multicast1}}, {{0x2002, 0x4e24, @loopback}}}, 0x108) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000080)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000000100)={0x0, 0x0, 0x800, 0x1, r5}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000500)={0x60002005}) 637.429545ms ago: executing program 3 (id=393): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="08002200000036287cf2081299a572645900c87f2d6c4cef43207a95ad5096672cc02bbc3b7e78fd7f6fff34792138"], 0x0, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ppoll(0x0, 0x0, 0x0, &(0x7f0000000180)={[0xffffffffffffff68]}, 0x8) setresuid(0x0, 0xee01, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000039c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x83, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000000}, 0x1c, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x4004000) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 619.457535ms ago: executing program 6 (id=394): sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2100, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301010009210000000122010009058103"], 0x0) r3 = syz_open_dev$evdev(&(0x7f0000002780), 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000000)=0x4) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000440)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0xea, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1106, 0x3, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xfc, 0x7}}}}}]}}]}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) syz_usb_control_io$hid(r4, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @local=@item_012={0x2, 0x2, 0x4, "4bfa"}, @global=@item_4={0x3, 0x1, 0x6}, @global=@item_4={0x3, 0x1, 0x1, "416500c3"}, @local=@item_4={0x3, 0x2, 0xa, "54ed8759"}, @local=@item_012={0x1, 0x2, 0x1, "01"}, @main=@item_012={0x1, 0x0, 0x8, "1e"}]}}, 0x0}, 0x0) 0s ago: executing program 5 (id=395): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fd4000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000007c0)="f081550000a000000fef0048181845000fbe252e8a094d3642df0f7056260000660f3a176a4b00b9800000c00f3267420f01c30f5966ba2c0cb8c087678eef66ba470f080ced45c1947166baf80cb817d27c8bef66bafc0cb02cee0000058a3bc4827dbc65450f01ca009008f2", 0x67}], 0x1, 0x8, 0x0, 0x4b) socket$inet_tcp(0x2, 0x1, 0x0) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x44, &(0x7f00000000c0)=[@cr4={0x1, 0x9e2}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a0304004e22"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x20044010) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='aufs\x00', 0x220062, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x1, 0x0) write$tcp_mem(r6, &(0x7f0000001000)={0xffffffffffffffff, 0x20, 0x0, 0x20, 0x9}, 0x48) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x8000000, 0x50) socket$nl_generic(0x11, 0x3, 0x10) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f00000006c0)={[0x8, 0x7, 0x7, 0x5, 0x103, 0x4, 0xfffffffc, 0x800000, 0x7364, 0x53, 0x5, 0xfffffffb, 0x3, 0x9, 0x5, 0x2b, 0x5e11, 0x6, 0x3, 0x6, 0x1, 0x81, 0x9, 0x2, 0x5, 0x4, 0x1, 0x40, 0x0, 0x1b94, 0x9, 0x6, 0x5, 0x4c16, 0x7, 0xd9f, 0xd, 0x7581, 0x1a, 0x2b, 0x9, 0x4, 0x3ff, 0x1, 0xb2c3, 0x9, 0x6, 0x7ff, 0x9, 0xa0, 0x0, 0x0, 0x1000, 0x3, 0x100, 0x8, 0x9f, 0x7fff, 0x80000000, 0x3, 0x9, 0x7f, 0xc4, 0xffff8cad, 0x4, 0x9, 0x9, 0xffff9716, 0xf0f00aa, 0x40, 0xe04, 0x9, 0x1, 0x3, 0x1e3, 0xf3e2, 0xd2f, 0x28b9, 0x39, 0x1, 0x9, 0x0, 0xcdb0, 0x8001, 0x8, 0x1, 0x7fff, 0x9, 0x0, 0xb3, 0xfffffff8, 0x3, 0x7, 0x6, 0x5da, 0xc0000000, 0x7, 0x1, 0x4, 0x96b3, 0x1, 0x10000, 0x6f, 0x80, 0x7, 0x8, 0x7f, 0x4, 0x10, 0x1, 0x6, 0x5, 0x28, 0x9, 0x5, 0x7fffffff, 0x9, 0x3, 0x8, 0x8, 0x2, 0x2, 0xff, 0x3558, 0x4, 0x0, 0x1, 0x3, 0x10, 0xfffffffe, 0x4, 0x3, 0x9, 0x6, 0x3ff, 0x1000, 0x26da, 0x5, 0x6, 0x2, 0x7, 0x3, 0x20000, 0x10000, 0x0, 0x3, 0xffff95a3, 0xffffffeb, 0x1, 0x1, 0x2, 0x8, 0x8, 0x6, 0x81, 0xfffffff8, 0x9a, 0x80, 0x8000, 0x7f, 0x8, 0x6, 0x2, 0x7, 0x7ff, 0x5, 0x37, 0x9, 0x9, 0x101, 0x7ff, 0x2, 0x8, 0x8, 0x6, 0x7, 0x7, 0x5, 0x2, 0x3ff, 0x8, 0xe23, 0x3, 0x6c2d, 0x7, 0xec3, 0x2, 0x1, 0xfffffffd, 0x8, 0x9, 0x7f, 0x6, 0x8, 0x4, 0x800, 0x8, 0x5, 0x7, 0xf50, 0x53, 0x1ff, 0xffff, 0x6, 0x8, 0x6, 0x6, 0x9, 0x101, 0x4, 0xf, 0x8, 0x200, 0x4, 0x4, 0x401, 0x4, 0x0, 0x2, 0xfffffffc, 0xe0000, 0x8, 0xffffffeb, 0x0, 0xf, 0x80, 0xfffffffe, 0x80000007, 0xa, 0x401, 0x7fff, 0x1ff, 0x6, 0x9, 0x10001, 0x2, 0x5, 0x5a928bb2, 0x8, 0x7, 0x0, 0xfffffff9, 0x1, 0x1000, 0x8, 0x7ff, 0x2, 0x52, 0x5, 0x401, 0x70, 0x0, 0x7, 0x4, 0x2c4, 0xc5, 0x8, 0xe, 0x1, 0x81, 0x5, 0x4, 0x3, 0x4, 0xc, 0x2, 0x3, 0x8001, 0x8, 0xd1, 0x7, 0x2, 0x7fff, 0x0, 0xfffffffa, 0x450c000, 0x4, 0x8, 0x8, 0xd82, 0x7, 0xfff, 0x5, 0x34a, 0x61b9, 0x2, 0xfffffffd, 0x3, 0x5, 0x91e6, 0x1, 0x380000, 0x800, 0x68, 0x0, 0x8000, 0x0, 0x3, 0x46d, 0x5, 0xbc, 0x9, 0x3, 0x6ee8, 0xb40, 0x7, 0x4, 0x3fa, 0x2806, 0x6, 0x1ff, 0x7, 0x91f6, 0x7fff, 0x51d, 0x3, 0x8, 0x9, 0x6, 0x8, 0x7ff, 0x2a, 0x1, 0xa, 0x6, 0xdba0, 0x7, 0xab, 0x7fff, 0x6, 0x10000, 0xfff, 0x4, 0x37c580b, 0x2, 0xff, 0x4, 0x6, 0x0, 0x101, 0x9, 0x6, 0x5, 0x8000, 0x2, 0x3, 0x3, 0xf, 0x263d, 0x480e, 0xa, 0x7ff, 0xff, 0x0, 0x5, 0x8, 0x3, 0x7fff, 0x9, 0x6, 0x4, 0x10, 0x7, 0x8, 0x5, 0xa540, 0xc, 0x7f, 0x4, 0x0, 0x0, 0x80, 0x2edf, 0x8000, 0x97cf, 0x8, 0x8, 0x0, 0x5f, 0x3, 0x2d, 0xf6b6, 0x1, 0x4, 0x8, 0xf, 0x5, 0x7, 0x81, 0x3, 0x9842, 0xe, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6, 0x42362a2c, 0x1, 0xd, 0x6, 0x4, 0x1, 0x8, 0xc, 0x7f80000, 0x401, 0x2, 0x400, 0x5, 0x5, 0x9, 0xa, 0x3, 0x0, 0x5, 0xfffffe01, 0x8, 0xfffffffa, 0x9, 0x7bb8, 0xac, 0x0, 0x6d, 0x800, 0x0, 0x1, 0x5, 0x10000, 0x40fc, 0x0, 0x400, 0x8, 0x8, 0x5, 0xfa, 0xfffff579, 0xb1, 0xfffffff7, 0x80000001, 0x6, 0x80, 0x4537, 0x6, 0x101, 0x2, 0x5, 0x81, 0x2, 0x2, 0x400, 0xe23f, 0x1, 0x0, 0x4, 0xbf0, 0x10, 0x7fffffff, 0x0, 0xb978, 0x6, 0x1, 0xb, 0x3, 0x5b3, 0x6, 0x1, 0x6, 0x5, 0x8, 0x7, 0x2, 0xfffffff7, 0x3, 0xfffffffe, 0x8, 0x0, 0x9, 0x1, 0x179b9c17, 0x1, 0x663b, 0x10, 0x7ff, 0x3, 0x3ff, 0x1000, 0x4, 0xfacb, 0x4, 0x3, 0xffffffff, 0x7, 0x10000, 0x10001, 0xa, 0x6, 0x3, 0x81, 0x7, 0x7, 0x5, 0x9, 0x0, 0x2, 0x101, 0xd234, 0xd0c, 0x5, 0x800, 0x4, 0x6, 0xc170, 0x9, 0x2, 0x81, 0x5, 0x9, 0x5, 0x4, 0x6, 0xffffffff, 0x8000, 0x2, 0x2, 0x9, 0x80000001, 0x9, 0x3, 0x6, 0x4, 0xfffffff0, 0x80000000, 0x1, 0x2, 0x2, 0x8, 0x1000, 0x1400000, 0x1, 0x10000, 0xa, 0xd, 0x5, 0x3ff, 0x81, 0x4, 0x1, 0xc000, 0x10000, 0x100, 0x7ff, 0x4, 0x400, 0x4, 0x9, 0x3, 0x3, 0x6, 0x4, 0x18000000, 0xd75b, 0xf, 0x0, 0x2ab8, 0x6, 0x2, 0x5532, 0x7, 0x400, 0x93, 0xffff, 0x3, 0x7d9, 0x9, 0x6, 0x5, 0x8, 0x4, 0x9, 0x4, 0xee6e, 0x80000000, 0x1, 0x2, 0x80000000, 0xe7, 0x5, 0x9, 0x4459e81c, 0xffff, 0x9, 0xf, 0x6, 0x4, 0x8ae, 0xfffffffb, 0x0, 0x20, 0x1, 0x2, 0x2, 0xd2da, 0x10001, 0x9, 0x2, 0x0, 0xa, 0x7, 0xa3, 0x4, 0xb32, 0x0, 0x6, 0x7f, 0xfffffffc, 0x2, 0x4, 0xf, 0x3, 0x9, 0x9, 0x6, 0xfffffe01, 0x2, 0x51, 0x83f, 0x6, 0xfffffff7, 0x7, 0xb5, 0x3, 0x82c6, 0xffffffff, 0x0, 0x9, 0x5, 0x5, 0x4, 0x80000001, 0x0, 0x8001, 0xc, 0x4, 0xb, 0x5, 0x533, 0x6, 0xd, 0x0, 0x0, 0x80, 0x5, 0x8, 0x15, 0x81, 0x9, 0x7, 0x6, 0x40, 0x7fff, 0xfffffff9, 0x0, 0x463, 0x7, 0x5, 0xfff, 0x99d4, 0x7, 0x100, 0x6, 0x0, 0x9, 0x4, 0x8, 0x0, 0x8, 0x40, 0x80000001, 0xf8b, 0x6cf, 0x8, 0x6, 0x4fb74246, 0xb, 0x6, 0xfff, 0x4, 0x10, 0x2, 0x4, 0x7, 0x5, 0x0, 0x8000, 0x5, 0x9, 0x1, 0x6, 0x8, 0x5, 0x67d, 0x1, 0xff, 0x7, 0x1, 0x80000000, 0xff, 0x6, 0x3, 0x4, 0x3, 0x99, 0xc, 0x8000, 0xe, 0x7, 0x10001, 0x80000000, 0x5, 0xda, 0x7, 0x4, 0x1, 0x1, 0x8, 0x4, 0x521, 0x2, 0x2, 0x3, 0xd40, 0x0, 0x7, 0xfffffffb, 0x5, 0x2, 0xe713, 0x5, 0x9, 0x7, 0xe5c, 0x0, 0x6, 0x7, 0xa, 0x20, 0x80000001, 0x2, 0x7, 0x80000001, 0x8, 0xfff, 0x6, 0x7, 0x6, 0x7, 0x0, 0x80000000, 0xb, 0x6, 0x0, 0xffff, 0xaa32, 0x5, 0x1, 0x1, 0xfffffff5, 0x800, 0x7fffffff, 0x795bf19c, 0x9, 0xce82, 0x1, 0x2, 0x7, 0xc17a, 0x3, 0x0, 0x3, 0x4, 0xc00, 0x7, 0x2, 0xfffffff4, 0xc, 0xfffffffb, 0x0, 0x3, 0xb, 0x4000007, 0xe9c9, 0xffffff7f, 0x0, 0x9, 0x0, 0x70, 0x5, 0x1, 0x1, 0x7f, 0xfffffff1, 0x0, 0x9, 0x6, 0x8004, 0x2, 0x1c00000, 0x5, 0x2, 0x3f, 0x2, 0x0, 0x5, 0x400, 0x3, 0x9a6, 0x4, 0x1, 0x3, 0x698, 0x8f7, 0x7, 0x8, 0x1, 0x0, 0x6, 0x0, 0x435f, 0x2, 0x9, 0x5, 0x7f, 0x1, 0x3, 0x8d8b, 0x3, 0x8, 0x2, 0xc272, 0x9, 0xfd0c, 0x9, 0x7fffffff, 0x8, 0x9, 0x5, 0x0, 0x4f3, 0x40, 0xd9, 0xe, 0xf3, 0x7, 0xe2bf, 0x9, 0x6, 0xffff, 0x2, 0x5, 0x2c03, 0x4, 0x8000, 0x1a35a3e6, 0x9, 0x6, 0x9, 0x4, 0x1, 0x5, 0x7, 0x2, 0x1, 0x4, 0x0, 0x7f, 0x6, 0x7, 0x9, 0x7, 0x5, 0x9, 0x4, 0x5, 0x6, 0x2, 0x7, 0x4, 0x8, 0x10000010, 0x9, 0x4, 0x7f, 0xb, 0x4, 0x8000, 0x10001, 0xdb2, 0x7fff, 0xddd, 0x739, 0x4, 0x3, 0x401, 0x1, 0x6, 0xe, 0x2, 0x4, 0x5, 0x2, 0x401, 0x4, 0x9, 0x0, 0xffffffff, 0x4ada, 0x1435, 0xfffffffd, 0x9, 0x100, 0x91, 0x3, 0xe388, 0xffc6, 0x5, 0x2, 0x1, 0x8, 0xe, 0x5, 0x6, 0xf, 0xfffffffb, 0x5, 0x4, 0x7, 0x21e0, 0x1, 0x5, 0xfffffffc, 0x0, 0x5efd, 0x0, 0x14, 0x6, 0x7fffffff, 0x35, 0x8, 0x0, 0x594, 0x480000, 0xff, 0x0, 0x2c3, 0x5, 0xfffffffd, 0x0, 0x7, 0x5, 0x4, 0xd94, 0x3, 0x6, 0x7, 0x8, 0xb668, 0x12e4, 0x1000, 0x6, 0x5, 0x205, 0x2, 0x4, 0xfab, 0x3, 0xa3b0, 0x8, 0x2, 0xd, 0x2, 0xfffff801, 0xfffffff7, 0xffff183d, 0x3, 0x80, 0x2, 0x1, 0x10001, 0x7, 0x4, 0x8, 0x2, 0x9, 0x10000, 0xd, 0x6, 0x80000000, 0x4, 0xc66f, 0xff, 0x9, 0x7, 0x3, 0xffff7fff, 0x10001, 0x7, 0x2, 0x9db4, 0x5, 0x9, 0x1425, 0x8, 0xf, 0xe, 0x9, 0x7, 0x6, 0x3, 0x80, 0x4]}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r10) sendmsg$TIPC_NL_PEER_REMOVE(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="18010000", @ANYRES16=r11, @ANYBLOB="0100230100003402000014000000180007800c0003000001020304050607080002"], 0x118}}, 0x0) connect$unix(r8, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) kernel console output (not intermixed with test programs): 0x0 [ 43.505818][ T65] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 43.528827][ T65] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 43.535840][ T65] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 43.548309][ T65] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 43.566129][ T717] overlayfs: failed to resolve './file0': -2 [ 43.568841][ T65] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 43.580926][ T65] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 43.599219][ T65] aureal 0003:0755:2626.0004: hidraw0: USB HID vff.fd Device [HID 0755:2626] on usb-dummy_hcd.2-1/input0 [ 43.631099][ T65] usb 3-1: USB disconnect, device number 18 [ 43.664354][ T723] ./dev/sda1: Can't lookup blockdev [ 43.716485][ T45] logitech-hidpp-device 0003:046D:C082.0005: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 43.739408][ T726] fido_id[726]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 44.119490][ T45] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 44.268839][ T45] usb 4-1: device descriptor read/64, error -71 [ 44.388843][ T591] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 44.508835][ T45] usb 4-1: device descriptor read/64, error -71 [ 44.518954][ T591] usb 3-1: device descriptor read/64, error -71 [ 44.665687][ T741] netlink: 'syz.1.130': attribute type 6 has an invalid length. [ 44.673720][ T741] netlink: 'syz.1.130': attribute type 6 has an invalid length. [ 44.681616][ T741] netlink: 'syz.1.130': attribute type 6 has an invalid length. [ 44.690378][ T741] netlink: 'syz.1.130': attribute type 6 has an invalid length. [ 44.698115][ T741] netlink: 'syz.1.130': attribute type 6 has an invalid length. [ 44.706278][ T741] netlink: 'syz.1.130': attribute type 6 has an invalid length. [ 44.714145][ T741] netlink: 'syz.1.130': attribute type 6 has an invalid length. [ 44.722083][ T741] netlink: 'syz.1.130': attribute type 6 has an invalid length. [ 44.729969][ T741] netlink: 'syz.1.130': attribute type 6 has an invalid length. [ 44.737854][ T741] netlink: 'syz.1.130': attribute type 6 has an invalid length. [ 44.748833][ T45] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 44.758832][ T591] usb 3-1: device descriptor read/64, error -71 [ 44.878840][ T483] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 44.886513][ T45] usb 4-1: device descriptor read/64, error -71 [ 44.998851][ T591] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 45.018863][ T483] usb 2-1: device descriptor read/64, error -71 [ 45.138859][ T45] usb 4-1: device descriptor read/64, error -71 [ 45.145222][ T591] usb 3-1: device descriptor read/64, error -71 [ 45.248969][ T45] usb usb4-port1: attempt power cycle [ 45.278832][ T483] usb 2-1: device descriptor read/64, error -71 [ 45.388846][ T591] usb 3-1: device descriptor read/64, error -71 [ 45.498962][ T591] usb usb3-port1: attempt power cycle [ 45.518838][ T483] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 45.588842][ T45] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 45.609978][ T45] usb 4-1: device descriptor read/8, error -71 [ 45.648836][ T483] usb 2-1: device descriptor read/64, error -71 [ 45.739923][ T45] usb 4-1: device descriptor read/8, error -71 [ 45.848840][ T591] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 45.870220][ T591] usb 3-1: device descriptor read/8, error -71 [ 45.888827][ T483] usb 2-1: device descriptor read/64, error -71 [ 45.978863][ T45] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 45.998928][ T483] usb usb2-port1: attempt power cycle [ 46.005185][ T591] usb 3-1: device descriptor read/8, error -71 [ 46.011692][ T45] usb 4-1: device descriptor read/8, error -71 [ 46.139959][ T45] usb 4-1: device descriptor read/8, error -71 [ 46.248841][ T591] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 46.256546][ T45] usb usb4-port1: unable to enumerate USB device [ 46.279896][ T591] usb 3-1: device descriptor read/8, error -71 [ 46.348832][ T483] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 46.369919][ T483] usb 2-1: device descriptor read/8, error -71 [ 46.419937][ T591] usb 3-1: device descriptor read/8, error -71 [ 46.509932][ T483] usb 2-1: device descriptor read/8, error -71 [ 46.528942][ T591] usb usb3-port1: unable to enumerate USB device [ 46.758848][ T483] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 46.779928][ T483] usb 2-1: device descriptor read/8, error -71 [ 46.929868][ T483] usb 2-1: device descriptor read/8, error -71 [ 47.038912][ T483] usb usb2-port1: unable to enumerate USB device [ 47.208819][ T65] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 47.289502][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 47.289518][ T36] audit: type=1400 audit(1788184431.959:259): avc: denied { setopt } for pid=754 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.399950][ T65] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 47.411089][ T65] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 47.424158][ T65] usb 4-1: config 0 interface 0 has no altsetting 0 [ 47.430829][ T65] usb 4-1: New USB device found, idVendor=04b3, idProduct=3103, bcdDevice= 0.00 [ 47.439986][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.450190][ T65] usb 4-1: config 0 descriptor?? [ 47.687234][ T36] audit: type=1400 audit(1788184432.349:260): avc: denied { append } for pid=756 comm="syz.2.135" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 47.852841][ T36] audit: type=1400 audit(1788184432.519:261): avc: denied { bind } for pid=767 comm="syz.1.138" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.876582][ T65] lenovo 0003:04B3:3103.0006: unknown main item tag 0x6 [ 47.883688][ T65] lenovo 0003:04B3:3103.0006: unknown main item tag 0x3 [ 47.890890][ T36] audit: type=1400 audit(1788184432.519:262): avc: denied { name_bind } for pid=767 comm="syz.1.138" src=19997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 47.911746][ T65] lenovo 0003:04B3:3103.0006: item fetching failed at offset 22/24 [ 47.919859][ T65] lenovo 0003:04B3:3103.0006: hid_parse failed [ 47.926163][ T65] lenovo 0003:04B3:3103.0006: probe with driver lenovo failed with error -22 [ 47.935017][ T36] audit: type=1400 audit(1788184432.539:263): avc: denied { node_bind } for pid=767 comm="syz.1.138" saddr=224.0.0.1 src=19997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 48.124135][ T36] audit: type=1400 audit(1788184432.789:264): avc: denied { listen } for pid=749 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 48.638827][ T65] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 48.800948][ T65] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 48.810083][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.818083][ T65] usb 2-1: Product: syz [ 48.822413][ T65] usb 2-1: Manufacturer: syz [ 48.827016][ T65] usb 2-1: SerialNumber: syz [ 48.835602][ T65] ums-karma 2-1:1.0: USB Mass Storage device detected [ 48.844193][ T65] ums-karma 2-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 48.844193][ T65] Please send a copy of this message to and [ 49.272256][ T65] ums-karma 2-1:1.0: probe with driver ums-karma failed with error -5 [ 49.283608][ T65] usb 2-1: USB disconnect, device number 18 [ 49.878454][ T420] usb 4-1: USB disconnect, device number 20 [ 49.900232][ T440] bridge_slave_1: left allmulticast mode [ 49.905897][ T440] bridge_slave_1: left promiscuous mode [ 49.928967][ T440] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.948928][ T36] audit: type=1326 audit(1788184434.599:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=781 comm="syz.3.142" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2a39e159 code=0x7ff00000 [ 49.974280][ T440] bridge_slave_0: left allmulticast mode [ 49.979953][ T440] bridge_slave_0: left promiscuous mode [ 49.985605][ T440] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.002007][ T36] audit: type=1326 audit(1788184434.599:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=781 comm="syz.3.142" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2a39e159 code=0x7ff00000 [ 50.034992][ T36] audit: type=1326 audit(1788184434.609:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=781 comm="syz.3.142" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2a39e159 code=0x7ff00000 [ 50.061089][ T454] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 50.072322][ T36] audit: type=1326 audit(1788184434.609:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=781 comm="syz.3.142" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2a39e159 code=0x7ff00000 [ 50.115643][ T9] logitech-hidpp-device 0003:046D:C082.0007: item fetching failed at offset 0/2 [ 50.130149][ T9] logitech-hidpp-device 0003:046D:C082.0007: hidpp_probe:parse failed [ 50.140597][ T785] incfs: Error accessing: ./file0. [ 50.145733][ T785] incfs: mount failed -20 [ 50.159432][ T9] logitech-hidpp-device 0003:046D:C082.0007: probe with driver logitech-hidpp-device failed with error -22 [ 50.185178][ T440] veth1_macvtap: left promiscuous mode [ 50.190843][ T440] veth0_vlan: left promiscuous mode [ 50.229508][ T454] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 53, changing to 7 [ 50.262039][ T454] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1568, setting to 1024 [ 50.289880][ T454] usb 2-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice= 0.40 [ 50.308636][ T454] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.316806][ T454] usb 2-1: Product: syz [ 50.321005][ T454] usb 2-1: Manufacturer: syz [ 50.325596][ T454] usb 2-1: SerialNumber: syz [ 50.381715][ T788] FAULT_INJECTION: forcing a failure. [ 50.381715][ T788] name failslab, interval 1, probability 0, space 0, times 0 [ 50.408829][ T788] CPU: 1 UID: 0 PID: 788 Comm: syz.2.144 Not tainted syzkaller #0 4c7c6fabea823c7a50d4a31162f440126d0e7a76 [ 50.408859][ T788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.408872][ T788] Call Trace: [ 50.408879][ T788] [ 50.408886][ T788] __dump_stack+0x21/0x30 [ 50.408921][ T788] dump_stack_lvl+0x140/0x1c0 [ 50.408947][ T788] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.408974][ T788] dump_stack+0x19/0x20 [ 50.408998][ T788] should_fail_ex+0x3c2/0x510 [ 50.409021][ T788] should_failslab+0xac/0x100 [ 50.409044][ T788] kmem_cache_alloc_noprof+0x42/0x410 [ 50.409065][ T788] ? key_alloc+0x2ee/0x1060 [ 50.409090][ T788] ? key_user_lookup+0x263/0x4f0 [ 50.409116][ T788] key_alloc+0x2ee/0x1060 [ 50.409142][ T788] keyring_alloc+0x4b/0xc0 [ 50.409160][ T788] lookup_user_key+0x515/0x1230 [ 50.409183][ T788] ? __kasan_kmalloc+0x96/0xb0 [ 50.409206][ T788] ? __kmalloc_node_noprof+0x252/0x500 [ 50.409227][ T788] ? __cfi_lookup_user_key+0x10/0x10 [ 50.409250][ T788] ? check_stack_object+0x81/0x150 [ 50.409270][ T788] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 50.409296][ T788] ? __kasan_check_write+0x18/0x20 [ 50.409315][ T788] __se_sys_add_key+0x317/0x4b0 [ 50.409336][ T788] ? __x64_sys_add_key+0xf0/0xf0 [ 50.409356][ T788] ? __kasan_check_write+0x18/0x20 [ 50.409375][ T788] ? fpregs_restore_userregs+0x11c/0x260 [ 50.409407][ T788] __x64_sys_add_key+0xc3/0xf0 [ 50.409427][ T788] x64_sys_call+0x195f/0x2ee0 [ 50.409445][ T788] do_syscall_64+0x57/0xf0 [ 50.409471][ T788] ? clear_bhb_loop+0x50/0xa0 [ 50.409492][ T788] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.409510][ T788] RIP: 0033:0x7f741219e159 [ 50.409525][ T788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.409539][ T788] RSP: 002b:00007f7412fef028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 50.409561][ T788] RAX: ffffffffffffffda RBX: 00007f7412425fa0 RCX: 00007f741219e159 [ 50.409575][ T788] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 50.409589][ T788] RBP: 00007f7412235024 R08: fffffffffffffffe R09: 0000000000000000 [ 50.409601][ T788] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 50.409613][ T788] R13: 00007f7412426038 R14: 00007f7412425fa0 R15: 00007ffc8b6dc098 [ 50.409628][ T788] [ 50.538878][ T454] usb 2-1: Can't get UAC3 power state for id 10 [ 50.608920][ T420] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 50.713059][ T454] usb 2-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 50.733037][ T454] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 50.761446][ T454] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 50.788928][ T454] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 50.810238][ T454] usb 2-1: USB disconnect, device number 19 [ 50.825889][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 50.849716][ T420] usb 4-1: Using ep0 maxpacket: 8 [ 50.861176][ T420] usb 4-1: unable to get BOS descriptor or descriptor too short [ 50.890829][ T420] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 50.908834][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 50.911867][ T420] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 50.959905][ T420] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 50.988801][ T420] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 51.008833][ T420] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 51.019658][ T420] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 8192, setting to 1024 [ 51.031246][ T420] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 51.042611][ T420] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 51.051720][ T420] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.059725][ T420] usb 4-1: Product: syz [ 51.063929][ T420] usb 4-1: Manufacturer: syz [ 51.068536][ T420] usb 4-1: SerialNumber: syz [ 51.074151][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 51.083145][ T420] usb 4-1: config 0 descriptor?? [ 51.090677][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.094731][ T786] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 51.110949][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 51.140932][ T9] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 51.160127][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.168128][ T9] usb 3-1: Product: syz [ 51.182388][ T9] usb 3-1: Manufacturer: syz [ 51.187059][ T9] usb 3-1: SerialNumber: syz [ 51.194767][ T9] usb 3-1: selecting invalid altsetting 1 [ 51.207210][ T9] usb 3-1: unit 6 not found! [ 51.237999][ T797] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.241823][ T796] netlink: 32 bytes leftover after parsing attributes in process `syz.1.149'. [ 51.245117][ T797] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.261061][ T797] bridge_slave_0: entered allmulticast mode [ 51.267183][ T797] bridge_slave_0: entered promiscuous mode [ 51.273545][ T797] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.280613][ T797] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.287709][ T797] bridge_slave_1: entered allmulticast mode [ 51.293960][ T797] bridge_slave_1: entered promiscuous mode [ 51.358186][ T445] Bluetooth: hci0: Frame reassembly failed (-84) [ 51.367451][ T797] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.374501][ T797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.381764][ T797] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.388768][ T797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.406940][ T811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.416194][ T811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.429844][ T440] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.437377][ T440] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.447203][ T440] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.454259][ T440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.463671][ T445] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.470719][ T445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.494427][ T797] veth0_vlan: entered promiscuous mode [ 51.504769][ T797] veth1_macvtap: entered promiscuous mode [ 51.608822][ T420] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 51.618002][ T9] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 51.627012][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 51.636864][ T9] usb 3-1: USB disconnect, device number 23 [ 51.645096][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 51.758944][ T420] usb 2-1: device descriptor read/64, error -71 [ 51.818826][ T591] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 51.969531][ T591] usb 5-1: not running at top speed; connect to a high speed hub [ 51.977954][ T591] usb 5-1: config 192 has an invalid interface number: 74 but max is 0 [ 51.986244][ T591] usb 5-1: config 192 has no interface number 0 [ 51.993852][ T591] usb 5-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=8e.1f [ 52.002933][ T420] usb 2-1: device descriptor read/64, error -71 [ 52.009211][ T591] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.017209][ T591] usb 5-1: Product: syz [ 52.021725][ T591] usb 5-1: Manufacturer: syz [ 52.026309][ T591] usb 5-1: SerialNumber: syz [ 52.160509][ T829] rust_binder: 828:829 error while translating object: EPERM [ 52.168062][ T829] rust_binder: Failure in copy_transaction_data: EPERM [ 52.168079][ T829] rust_binder: 828:829 transaction call to 828:0 failed EPERM, code 0 size 80-24 [ 52.184858][ T830] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.191587][ T830] rust_binder: 828:830 error while translating object: EPERM [ 52.199976][ T830] rust_binder: Failure in copy_transaction_data: EPERM [ 52.200000][ T830] rust_binder: 828:830 transaction call to 828:0 failed EPERM, code 0 size 80-24 [ 52.216363][ T45] rust_binder: 828: undelivered TRANSACTION_ERROR: 29201 [ 52.223550][ T45] rust_binder: 828: undelivered TRANSACTION_ERROR: 29201 [ 52.237409][ T591] usb 5-1: USB disconnect, device number 2 [ 52.261110][ T420] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 52.398910][ T420] usb 2-1: device descriptor read/64, error -71 [ 52.489957][ T36] kauditd_printk_skb: 108 callbacks suppressed [ 52.489974][ T36] audit: type=1400 audit(1788184437.159:377): avc: denied { shutdown } for pid=844 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.638839][ T420] usb 2-1: device descriptor read/64, error -71 [ 52.748091][ T853] binder: Unknown parameter 'defcontext01777777777777777777777' [ 52.748091][ T36] audit: type=1400 audit(1788184437.409:378): avc: denied { remount } for pid=852 comm="syz.4.162" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 52.775777][ T420] usb usb2-port1: attempt power cycle [ 52.777319][ T856] binder: Unknown parameter 'defcontext01777777777777777777777' [ 52.788975][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 52.906732][ T36] audit: type=1400 audit(1788184437.569:379): avc: denied { write } for pid=864 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.928191][ T36] audit: type=1400 audit(1788184437.589:380): avc: denied { ioctl } for pid=864 comm="syz.4.165" path="mnt:[4026532302]" dev="nsfs" ino=4026532302 ioctlcmd=0x542b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.949882][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 52.961921][ T9] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 52.971023][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.980562][ T9] usb 3-1: config 0 descriptor?? [ 53.118874][ T420] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 53.139894][ T420] usb 2-1: device descriptor read/8, error -71 [ 53.188661][ T36] audit: type=1400 audit(1788184437.849:381): avc: denied { create } for pid=850 comm="syz.2.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 53.209279][ T591] usb 4-1: USB disconnect, device number 21 [ 53.216814][ T36] audit: type=1400 audit(1788184437.869:382): avc: denied { sys_admin } for pid=850 comm="syz.2.161" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 53.241698][ T65] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 53.252661][ T869] validate_nla: 55 callbacks suppressed [ 53.252676][ T869] netlink: 'syz.2.161': attribute type 32 has an invalid length. [ 53.279838][ T420] usb 2-1: device descriptor read/8, error -71 [ 53.378827][ T65] usb 5-1: device descriptor read/64, error -71 [ 53.398842][ T807] Bluetooth: hci0: command 0x1003 tx timeout [ 53.404887][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 53.478689][ T353] usb 3-1: USB disconnect, device number 24 [ 53.518870][ T420] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 53.539819][ T420] usb 2-1: device descriptor read/8, error -71 [ 53.618848][ T65] usb 5-1: device descriptor read/64, error -71 [ 53.669884][ T420] usb 2-1: device descriptor read/8, error -71 [ 53.778907][ T420] usb usb2-port1: unable to enumerate USB device [ 53.820377][ T36] audit: type=1400 audit(1788184438.489:383): avc: denied { getopt } for pid=872 comm="syz.3.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.839720][ T36] audit: type=1400 audit(1788184438.489:384): avc: denied { ioctl } for pid=872 comm="syz.3.168" path="socket:[7010]" dev="sockfs" ino=7010 ioctlcmd=0x586d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.867050][ T36] audit: type=1400 audit(1788184438.529:385): avc: denied { bind } for pid=876 comm="syz.3.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.868828][ T65] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 53.896154][ T36] audit: type=1400 audit(1788184438.559:386): avc: denied { getopt } for pid=876 comm="syz.3.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.018889][ T65] usb 5-1: device descriptor read/64, error -71 [ 54.238825][ T591] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 54.258825][ T65] usb 5-1: device descriptor read/64, error -71 [ 54.278955][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 54.368882][ T65] usb usb5-port1: attempt power cycle [ 54.389807][ T591] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.400726][ T591] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 54.410201][ T591] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.418612][ T591] usb 4-1: config 0 descriptor?? [ 54.428895][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 54.435384][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 54.443812][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 51, changing to 7 [ 54.456322][ T9] usb 3-1: New USB device found, idVendor=17cc, idProduct=1915, bcdDevice= 0.40 [ 54.470892][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.479101][ T9] usb 3-1: Product: ▘韙唢诌ᯇâ–â¹’ä¶ïŸ«â¦¸Ç·ä¶ƒæ€¬ï–¦ë‰€á¬šæ©•å¤è«‚걯埫ꮔ迦퓰ﭸ⊃픨䴻䶲㇋뉒䵾葦é‘㮞`酙៘ [ 54.493498][ T9] usb 3-1: Manufacturer: á [ 54.498092][ T9] usb 3-1: SerialNumber: 꼿臼㒆諉垙냻îŸë…ﲡ㘬傼鼆烑뫫赇猠뫀á»ï³œâ¡©æ§á˜â¨—å®î¦‡ã“¤ï£Œà —ä¦®ï£²á›¿à¨¥â©½â»…ê°žì”æº‡ëœ£ä³è ‘殤ǚ쵌霧襑鿉é¢ê“¿ì…†ã­£à¤±ê²±ä“´ë¤°è«ãš…ä²î³™ç¹–컖涺㕿走玡歓肼 [ 54.708845][ T483] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 54.724612][ T9] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 54.731403][ T65] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 54.738950][ T9] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc [ 54.747667][ T9] usb 3-1: USB disconnect, device number 25 [ 54.756031][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.775203][ T65] usb 5-1: device descriptor read/8, error -71 [ 54.825479][ T591] usbhid 4-1:0.0: can't add hid device: -71 [ 54.831575][ T591] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 54.841336][ T591] usb 4-1: USB disconnect, device number 22 [ 54.868882][ T483] usb 2-1: Using ep0 maxpacket: 16 [ 54.875350][ T483] usb 2-1: unable to get BOS descriptor or descriptor too short [ 54.883811][ T483] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.893936][ T483] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 54.904741][ T483] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 54.917146][ T483] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 54.919845][ T65] usb 5-1: device descriptor read/8, error -71 [ 54.926275][ T483] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.940364][ T483] usb 2-1: Product: syz [ 54.944521][ T483] usb 2-1: Manufacturer: syz [ 54.949117][ T483] usb 2-1: SerialNumber: syz [ 55.168834][ T65] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 55.189852][ T65] usb 5-1: device descriptor read/8, error -71 [ 55.319830][ T65] usb 5-1: device descriptor read/8, error -71 [ 55.353024][ T892] overlay: ./file0 is not a directory [ 55.428910][ T65] usb usb5-port1: unable to enumerate USB device [ 55.560317][ T483] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 55.568590][ T483] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 55.580763][ T483] usb 2-1: USB disconnect, device number 24 [ 55.618836][ T454] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 55.769773][ T454] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.779935][ T454] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 27 [ 55.793616][ T454] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.804038][ T454] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 27 [ 55.817621][ T454] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.827759][ T454] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 27 [ 55.840731][ T454] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice= 0.02 [ 55.849777][ T454] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.858207][ T454] usb 4-1: config 0 descriptor?? [ 55.863938][ T454] usb 4-1: bad CDC descriptors [ 56.002871][ T896] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=896 comm=syz.4.179 [ 56.066908][ T420] usb 4-1: USB disconnect, device number 23 [ 56.129618][ T901] netlink: 24 bytes leftover after parsing attributes in process `syz.1.181'. [ 56.139154][ T901] netlink: 24 bytes leftover after parsing attributes in process `syz.1.181'. [ 56.388849][ T591] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 56.538856][ T591] usb 5-1: Using ep0 maxpacket: 32 [ 56.545080][ T591] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.555222][ T591] usb 5-1: config 0 has no interfaces? [ 56.818829][ T454] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 56.968820][ T454] usb 4-1: Using ep0 maxpacket: 16 [ 56.974985][ T454] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.985245][ T454] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.995575][ T454] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 57.004677][ T454] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.012679][ T454] usb 4-1: Product: syz [ 57.016827][ T454] usb 4-1: Manufacturer: syz [ 57.021417][ T454] usb 4-1: SerialNumber: syz [ 57.178864][ T65] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 57.229030][ T454] usb 4-1: 0:2 : does not exist [ 57.235839][ T454] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 57.247161][ T454] usb 4-1: USB disconnect, device number 24 [ 57.255286][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.331504][ T65] usb 2-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 57.341043][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.349188][ T65] usb 2-1: Product: syz [ 57.353352][ T65] usb 2-1: Manufacturer: syz [ 57.357925][ T65] usb 2-1: SerialNumber: syz [ 57.566089][ T65] usb 2-1: MIDIStreaming interface descriptor not found [ 57.576831][ T65] usb 2-1: USB disconnect, device number 25 [ 57.588327][ T357] udevd[357]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.752684][ T914] netlink: 'syz.3.186': attribute type 15 has an invalid length. [ 57.760473][ T914] netlink: 24 bytes leftover after parsing attributes in process `syz.3.186'. [ 57.818076][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 57.818092][ T36] audit: type=1400 audit(1788184442.479:394): avc: denied { ioctl } for pid=915 comm="syz.3.187" path="socket:[9247]" dev="sockfs" ino=9247 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.848307][ T36] audit: type=1400 audit(1788184442.479:395): avc: denied { write } for pid=915 comm="syz.3.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.867508][ T36] audit: type=1400 audit(1788184442.479:396): avc: denied { setopt } for pid=915 comm="syz.3.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.075701][ T36] audit: type=1400 audit(1788184442.739:397): avc: denied { execute } for pid=917 comm="syz.1.188" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 58.105067][ T918] netlink: 100 bytes leftover after parsing attributes in process `syz.1.188'. [ 58.130049][ T921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.138518][ T921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.368818][ T65] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 58.508827][ T65] usb 2-1: device descriptor read/64, error -71 [ 58.692233][ T929] tipc: Started in network mode [ 58.697163][ T929] tipc: Node identity aa3a, cluster identity 4711 [ 58.703640][ T929] tipc: Node number set to 43578 [ 58.748831][ T65] usb 2-1: device descriptor read/64, error -71 [ 58.988828][ T65] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 59.072462][ T591] usb 5-1: string descriptor 0 read error: -71 [ 59.078840][ T591] usb 5-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.40 [ 59.083183][ T36] audit: type=1400 audit(1788184443.749:398): avc: denied { read } for pid=933 comm="syz.4.193" name="file0" dev="tmpfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 59.087902][ T591] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.122427][ T591] usb 5-1: config 0 descriptor?? [ 59.127930][ T591] usb 5-1: can't set config #0, error -71 [ 59.128926][ T65] usb 2-1: device descriptor read/64, error -71 [ 59.137697][ T591] usb 5-1: USB disconnect, device number 7 [ 59.378824][ T65] usb 2-1: device descriptor read/64, error -71 [ 59.428830][ T591] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 59.448823][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 59.488914][ T65] usb usb2-port1: attempt power cycle [ 59.578845][ T9] usb 3-1: device descriptor read/64, error -71 [ 59.580173][ T591] usb 5-1: unable to get BOS descriptor or descriptor too short [ 59.593464][ T591] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.599588][ T940] FAULT_INJECTION: forcing a failure. [ 59.599588][ T940] name failslab, interval 1, probability 0, space 0, times 0 [ 59.605561][ T591] usb 5-1: string descriptor 0 read error: -22 [ 59.616389][ T940] CPU: 0 UID: 0 PID: 940 Comm: syz.3.196 Not tainted syzkaller #0 4c7c6fabea823c7a50d4a31162f440126d0e7a76 [ 59.616420][ T940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.616437][ T940] Call Trace: [ 59.616444][ T940] [ 59.616451][ T940] __dump_stack+0x21/0x30 [ 59.616482][ T940] dump_stack_lvl+0x140/0x1c0 [ 59.616506][ T940] ? __cfi_dump_stack_lvl+0x10/0x10 [ 59.616532][ T940] dump_stack+0x19/0x20 [ 59.616555][ T940] should_fail_ex+0x3c2/0x510 [ 59.616576][ T940] should_failslab+0xac/0x100 [ 59.616598][ T940] kmem_cache_alloc_noprof+0x42/0x410 [ 59.616618][ T940] ? security_file_alloc+0x49/0x220 [ 59.616635][ T940] ? kasan_save_alloc_info+0x3a/0x50 [ 59.616653][ T940] security_file_alloc+0x49/0x220 [ 59.616669][ T940] init_file+0x9e/0x210 [ 59.616692][ T940] alloc_empty_file+0xd9/0x270 [ 59.616714][ T940] ? _raw_spin_unlock+0x45/0x60 [ 59.616741][ T940] alloc_file_pseudo+0x142/0x1f0 [ 59.616765][ T940] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 59.616791][ T940] sock_alloc_file+0xbe/0x2b0 [ 59.616808][ T940] __sys_socket+0x14c/0x1c0 [ 59.616828][ T940] __x64_sys_socket+0x7e/0x90 [ 59.616847][ T940] x64_sys_call+0x2608/0x2ee0 [ 59.616864][ T940] do_syscall_64+0x57/0xf0 [ 59.616889][ T940] ? clear_bhb_loop+0x50/0xa0 [ 59.616910][ T940] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 59.616931][ T940] RIP: 0033:0x7f5f2a39e159 [ 59.616946][ T940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.616962][ T940] RSP: 002b:00007f5f2b2a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 59.616989][ T940] RAX: ffffffffffffffda RBX: 00007f5f2a625fa0 RCX: 00007f5f2a39e159 [ 59.617004][ T940] RDX: 0000000000000300 RSI: 0000000000000003 RDI: 0000000000000011 [ 59.617017][ T940] RBP: 00007f5f2a435024 R08: 0000000000000000 R09: 0000000000000000 [ 59.617030][ T940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.617042][ T940] R13: 00007f5f2a626038 R14: 00007f5f2a625fa0 R15: 00007ffca4a4a988 [ 59.617059][ T940] [ 59.828815][ T9] usb 3-1: device descriptor read/64, error -71 [ 59.830867][ T591] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 59.846076][ T591] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.849055][ T65] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 59.879864][ T65] usb 2-1: device descriptor read/8, error -71 [ 59.960410][ T36] audit: type=1400 audit(1788184444.629:399): avc: denied { accept } for pid=943 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.009824][ T65] usb 2-1: device descriptor read/8, error -71 [ 60.078851][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 60.175741][ T948] input input8: cannot allocate more than FF_MAX_EFFECTS effects [ 60.209372][ T9] usb 3-1: device descriptor read/64, error -71 [ 60.248837][ T65] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 60.269812][ T65] usb 2-1: device descriptor read/8, error -71 [ 60.399822][ T65] usb 2-1: device descriptor read/8, error -71 [ 60.438943][ T353] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 60.448927][ T9] usb 3-1: device descriptor read/64, error -71 [ 60.508964][ T65] usb usb2-port1: unable to enumerate USB device [ 60.558915][ T9] usb usb3-port1: attempt power cycle [ 60.589884][ T353] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.600814][ T353] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.610579][ T353] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 60.619640][ T353] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.628248][ T353] usb 4-1: config 0 descriptor?? [ 60.908818][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 60.929824][ T9] usb 3-1: device descriptor read/8, error -71 [ 61.035788][ T353] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 61.045683][ T353] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0008/input/input9 [ 61.059822][ T9] usb 3-1: device descriptor read/8, error -71 [ 61.111951][ T353] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 61.238355][ T65] usb 4-1: USB disconnect, device number 25 [ 61.298834][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 61.319801][ T9] usb 3-1: device descriptor read/8, error -71 [ 61.459866][ T9] usb 3-1: device descriptor read/8, error -71 [ 61.538830][ T65] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 61.546437][ T353] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 61.568901][ T9] usb usb3-port1: unable to enumerate USB device [ 61.698846][ T353] usb 2-1: Using ep0 maxpacket: 16 [ 61.704979][ T65] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.715895][ T65] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 61.728733][ T353] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 61.741672][ T65] usb 4-1: config 0 interface 0 has no altsetting 0 [ 61.748258][ T65] usb 4-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 61.757298][ T353] usb 2-1: config 0 interface 0 has no altsetting 0 [ 61.763936][ T353] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 61.772997][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.780997][ T353] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.789909][ T65] usb 4-1: config 0 descriptor?? [ 61.795138][ T353] usb 2-1: config 0 descriptor?? [ 62.006432][ T955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.014962][ T955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.131448][ T591] usb 5-1: 1:1: cannot get freq at ep 0x1 [ 62.142515][ T591] usb 5-1: USB disconnect, device number 8 [ 62.198633][ T65] lg-g15 0003:046D:0A07.0009: hidraw0: USB HID v11.06 Device [HID 046d:0a07] on usb-dummy_hcd.3-1/input0 [ 62.225130][ T353] itetech 0003:06CB:73F4.000A: unknown main item tag 0x1 [ 62.238810][ T353] itetech 0003:06CB:73F4.000A: unknown main item tag 0x0 [ 62.249104][ T353] itetech 0003:06CB:73F4.000A: unknown main item tag 0x0 [ 62.256217][ T353] itetech 0003:06CB:73F4.000A: unknown main item tag 0x0 [ 62.263648][ T353] itetech 0003:06CB:73F4.000A: unknown main item tag 0x0 [ 62.274819][ T353] itetech 0003:06CB:73F4.000A: unknown main item tag 0x1 [ 62.282153][ T353] itetech 0003:06CB:73F4.000A: unknown main item tag 0x0 [ 62.289267][ T353] itetech 0003:06CB:73F4.000A: unknown main item tag 0x0 [ 62.296382][ T353] itetech 0003:06CB:73F4.000A: unknown main item tag 0x0 [ 62.303653][ T353] itetech 0003:06CB:73F4.000A: unknown main item tag 0x0 [ 62.310817][ T36] audit: type=1400 audit(1788184446.979:400): avc: denied { map } for pid=964 comm="syz.2.204" path="socket:[9479]" dev="sockfs" ino=9479 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.311043][ T353] itetech 0003:06CB:73F4.000A: unknown main item tag 0x0 [ 62.334011][ T36] audit: type=1400 audit(1788184446.979:401): avc: denied { read } for pid=964 comm="syz.2.204" path="socket:[9479]" dev="sockfs" ino=9479 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.341034][ T353] itetech 0003:06CB:73F4.000A: unknown main item tag 0x2 [ 62.370736][ T353] itetech 0003:06CB:73F4.000A: unknown main item tag 0x0 [ 62.377837][ T353] itetech 0003:06CB:73F4.000A: unknown main item tag 0x0 [ 62.384924][ T353] itetech 0003:06CB:73F4.000A: unknown main item tag 0x0 [ 62.391984][ T353] itetech 0003:06CB:73F4.000A: unknown main item tag 0x0 [ 62.401478][ T353] itetech 0003:06CB:73F4.000A: unknown main item tag 0x0 [ 62.408729][ T353] itetech 0003:06CB:73F4.000A: unknown main item tag 0x0 [ 62.415813][ T353] itetech 0003:06CB:73F4.000A: unknown main item tag 0x0 [ 62.422856][ T353] itetech 0003:06CB:73F4.000A: unknown main item tag 0x1 [ 62.432074][ T353] itetech 0003:06CB:73F4.000A: hidraw1: USB HID vff.fe Device [HID 06cb:73f4] on usb-dummy_hcd.1-1/input0 [ 62.446191][ T353] usb 2-1: USB disconnect, device number 30 [ 62.455084][ T966] fido_id[966]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 62.912337][ T591] usb 4-1: USB disconnect, device number 26 [ 62.931213][ T36] audit: type=1400 audit(1788184447.599:402): avc: denied { load_policy } for pid=979 comm="syz.3.210" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 62.952402][ T980] SELinux: failed to load policy [ 62.998988][ T353] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 63.016662][ T983] netlink: 182 bytes leftover after parsing attributes in process `syz.1.211'. [ 63.038405][ T985] netlink: 16 bytes leftover after parsing attributes in process `syz.2.212'. [ 63.048383][ T990] netlink: 16 bytes leftover after parsing attributes in process `syz.2.212'. [ 63.130252][ T1004] No source specified [ 63.160552][ T353] usb 5-1: unable to get BOS descriptor or descriptor too short [ 63.168541][ T353] usb 5-1: not running at top speed; connect to a high speed hub [ 63.176980][ T353] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 63.189349][ T353] usb 5-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 63.198510][ T353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.206713][ T353] usb 5-1: Product: syz [ 63.210890][ T353] usb 5-1: Manufacturer: syz [ 63.215475][ T353] usb 5-1: SerialNumber: syz [ 63.288818][ T591] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 63.388823][ T483] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 63.422205][ T978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.430651][ T1010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.430793][ T978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.439038][ T591] usb 4-1: Using ep0 maxpacket: 16 [ 63.447722][ T1010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.453645][ T591] usb 4-1: unable to get BOS descriptor or descriptor too short [ 63.463318][ T353] usb 5-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 63.468055][ T591] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 64 [ 63.476513][ T353] usb 5-1: found format II with max.bitrate = 512, frame size=4095 [ 63.485660][ T591] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 63.493554][ T353] usb 5-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 63.504394][ T591] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 63.511513][ T353] usb 5-1: found format II with max.bitrate = 512, frame size=4095 [ 63.520474][ T591] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.531297][ T353] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 63.536327][ T591] usb 4-1: Product: syz [ 63.549414][ T591] usb 4-1: Manufacturer: syz [ 63.554098][ T591] usb 4-1: SerialNumber: syz [ 63.556898][ T353] usb 5-1: USB disconnect, device number 9 [ 63.559631][ T483] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.575579][ T483] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.586046][ T483] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 63.595868][ T363] udevd[363]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 63.596021][ T980] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 63.619742][ T483] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.620954][ T980] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 63.628668][ T483] usb 3-1: config 0 descriptor?? [ 63.844076][ T1013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.220'. [ 63.852913][ T591] usb 4-1: MIDIStreaming interface descriptor not found [ 63.867796][ T591] usb 4-1: USB disconnect, device number 27 [ 64.060778][ T483] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 64.070457][ T483] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000B/input/input10 [ 64.147088][ T483] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 64.198831][ T353] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 64.228832][ T31] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 64.267894][ T65] usb 3-1: USB disconnect, device number 30 [ 64.349871][ T353] usb 2-1: config index 0 descriptor too short (expected 57892, got 36) [ 64.358271][ T353] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 64.369463][ T353] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 64.382195][ T31] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.382477][ T353] usb 2-1: config 0 interface 0 has no altsetting 0 [ 64.394440][ T31] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 64.403208][ T353] usb 2-1: New USB device found, idVendor=04b3, idProduct=3103, bcdDevice= 0.00 [ 64.413015][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 64.421836][ T353] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.428620][ T31] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 64.440343][ T353] usb 2-1: config 0 descriptor?? [ 64.445464][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.459213][ T31] usb 5-1: config 0 descriptor?? [ 64.588837][ T65] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 64.638825][ T454] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 64.669561][ T31] hid-multitouch 0003:0EEF:72C4.000C: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.4-1/input0 [ 64.739819][ T65] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.750779][ T65] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 64.763966][ T65] usb 3-1: config 0 interface 0 has no altsetting 0 [ 64.770635][ T65] usb 3-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 64.779785][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.788318][ T65] usb 3-1: config 0 descriptor?? [ 64.801138][ T454] usb 4-1: unable to get BOS descriptor or descriptor too short [ 64.809523][ T454] usb 4-1: config 1 has an invalid interface number: 120 but max is 2 [ 64.817688][ T454] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.827793][ T454] usb 4-1: config 1 has no interface number 2 [ 64.833905][ T454] usb 4-1: too many endpoints for config 1 interface 120 altsetting 124: 46, using maximum allowed: 30 [ 64.844953][ T454] usb 4-1: config 1 interface 120 altsetting 124 has 0 endpoint descriptors, different from the interface descriptor's value: 46 [ 64.858265][ T454] usb 4-1: config 1 interface 120 has no altsetting 0 [ 64.866974][ T454] usb 4-1: string descriptor 0 read error: -22 [ 64.873168][ T454] usb 4-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 64.882253][ T454] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.892241][ T454] usb 4-1: unit 4 not found! [ 64.896849][ T454] usb 4-1: unit 0 not found! [ 65.065929][ T36] audit: type=1400 audit(1788184449.729:403): avc: denied { read } for pid=1012 comm="syz.1.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 65.094593][ T36] audit: type=1400 audit(1788184449.759:404): avc: denied { create } for pid=1021 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 65.114791][ T36] audit: type=1400 audit(1788184449.759:405): avc: denied { bind } for pid=1021 comm="syz.3.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 65.120289][ T1022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.135061][ T36] audit: type=1400 audit(1788184449.759:406): avc: denied { ioctl } for pid=1021 comm="syz.3.223" path="socket:[8843]" dev="sockfs" ino=8843 ioctlcmd=0x8954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 65.143700][ T1022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.168232][ T36] audit: type=1400 audit(1788184449.759:407): avc: denied { read } for pid=1021 comm="syz.3.223" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 65.181233][ T31] usb 4-1: USB disconnect, device number 28 [ 65.197910][ T36] audit: type=1400 audit(1788184449.759:408): avc: denied { open } for pid=1021 comm="syz.3.223" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 65.227287][ T36] audit: type=1400 audit(1788184449.759:409): avc: denied { ioctl } for pid=1021 comm="syz.3.223" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 65.256548][ T65] lg-g15 0003:046D:0A07.000D: hidraw1: USB HID v11.06 Device [HID 046d:0a07] on usb-dummy_hcd.2-1/input0 [ 65.376075][ T483] usb 5-1: USB disconnect, device number 10 [ 65.808518][ T1041] No source specified [ 65.880581][ T1048] netlink: 'syz.3.230': attribute type 1 has an invalid length. [ 65.933255][ T432] usb 3-1: USB disconnect, device number 31 [ 65.963952][ T36] audit: type=1400 audit(1788184450.629:410): avc: denied { mounton } for pid=1049 comm="syz.2.231" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.027375][ T36] audit: type=1400 audit(1788184450.689:411): avc: denied { read write } for pid=1055 comm="syz.2.234" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 66.128909][ T65] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 66.280573][ T65] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 66.290683][ T65] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 66.301761][ T65] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 66.310880][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.318923][ T65] usb 4-1: Product: syz [ 66.323092][ T65] usb 4-1: Manufacturer: syz [ 66.327684][ T65] usb 4-1: SerialNumber: syz [ 66.338829][ T432] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 66.428830][ T483] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 66.488813][ T432] usb 3-1: Using ep0 maxpacket: 16 [ 66.494978][ T432] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.505107][ T432] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.515315][ T432] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 66.524468][ T432] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.532476][ T432] usb 3-1: Product: syz [ 66.536684][ T432] usb 3-1: Manufacturer: syz [ 66.542781][ T432] usb 3-1: SerialNumber: syz [ 66.548147][ T65] cdc_ncm 4-1:1.0: bind() failure [ 66.555295][ T65] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 66.562103][ T65] cdc_ncm 4-1:1.1: bind() failure [ 66.568096][ T65] usb 4-1: USB disconnect, device number 29 [ 66.578836][ T483] usb 5-1: Using ep0 maxpacket: 16 [ 66.585105][ T483] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 66.593243][ T483] usb 5-1: config 0 has no interface number 0 [ 66.599416][ T483] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 66.609479][ T483] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 66.620760][ T483] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 66.629838][ T483] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.637840][ T483] usb 5-1: Product: syz [ 66.642026][ T483] usb 5-1: Manufacturer: syz [ 66.646613][ T483] usb 5-1: SerialNumber: syz [ 66.651864][ T483] usb 5-1: config 0 descriptor?? [ 66.657094][ T1058] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 66.664410][ T1058] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 66.762176][ T432] usb 3-1: 0:2 : does not exist [ 66.769211][ T432] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 66.780331][ T432] usb 3-1: USB disconnect, device number 32 [ 66.788473][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 66.850443][ T353] usbhid 2-1:0.0: can't add hid device: -71 [ 66.862291][ T353] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 66.872993][ T353] usb 2-1: USB disconnect, device number 31 [ 66.875606][ T1058] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 66.886301][ T1058] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 66.891688][ T1060] No source specified [ 66.910829][ T1062] FAULT_INJECTION: forcing a failure. [ 66.910829][ T1062] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 66.924012][ T1062] CPU: 0 UID: 0 PID: 1062 Comm: syz.1.237 Not tainted syzkaller #0 4c7c6fabea823c7a50d4a31162f440126d0e7a76 [ 66.924039][ T1062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.924050][ T1062] Call Trace: [ 66.924056][ T1062] [ 66.924062][ T1062] __dump_stack+0x21/0x30 [ 66.924089][ T1062] dump_stack_lvl+0x140/0x1c0 [ 66.924113][ T1062] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.924137][ T1062] dump_stack+0x19/0x20 [ 66.924158][ T1062] should_fail_ex+0x3c2/0x510 [ 66.924177][ T1062] should_fail+0xf/0x20 [ 66.924195][ T1062] should_fail_usercopy+0x1e/0x30 [ 66.924215][ T1062] _copy_from_iter+0x1a6/0x1520 [ 66.924240][ T1062] ? __cfi__copy_from_iter+0x10/0x10 [ 66.924263][ T1062] tun_get_user+0x231/0x3720 [ 66.924288][ T1062] ? arch_stack_walk+0x10a/0x170 [ 66.924306][ T1062] ? ptr_ring_consume+0x430/0x430 [ 66.924323][ T1062] ? _parse_integer+0x2e/0x40 [ 66.924340][ T1062] ? kstrtoull+0x13b/0x1e0 [ 66.924357][ T1062] ? __kasan_check_write+0x18/0x20 [ 66.924376][ T1062] ? ref_tracker_alloc+0x32b/0x5b0 [ 66.924397][ T1062] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 66.924417][ T1062] ? selinux_file_permission+0x318/0xb60 [ 66.924436][ T1062] ? __kasan_check_write+0x18/0x20 [ 66.924452][ T1062] ? proc_fail_nth_write+0x184/0x220 [ 66.924478][ T1062] tun_chr_write_iter+0x1fa/0x310 [ 66.924495][ T1062] vfs_write+0x75f/0xfd0 [ 66.924514][ T1062] ? __cfi_vfs_write+0x10/0x10 [ 66.924534][ T1062] ksys_write+0x145/0x260 [ 66.924551][ T1062] ? __cfi_ksys_write+0x10/0x10 [ 66.924569][ T1062] ? __kasan_check_read+0x15/0x20 [ 66.924586][ T1062] __x64_sys_write+0x7f/0x90 [ 66.924604][ T1062] x64_sys_call+0x271c/0x2ee0 [ 66.924619][ T1062] do_syscall_64+0x57/0xf0 [ 66.924644][ T1062] ? clear_bhb_loop+0x50/0xa0 [ 66.924663][ T1062] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.924681][ T1062] RIP: 0033:0x7fc7aab9e159 [ 66.924695][ T1062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.924711][ T1062] RSP: 002b:00007fc7aba8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 66.924730][ T1062] RAX: ffffffffffffffda RBX: 00007fc7aae25fa0 RCX: 00007fc7aab9e159 [ 66.924743][ T1062] RDX: 000000000000003e RSI: 0000200000000180 RDI: 0000000000000003 [ 66.924754][ T1062] RBP: 00007fc7aba8b090 R08: 0000000000000000 R09: 0000000000000000 [ 66.924767][ T1062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.924779][ T1062] R13: 00007fc7aae26038 R14: 00007fc7aae25fa0 R15: 00007fff81607618 [ 66.924794][ T1062] [ 67.096066][ T483] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 67.292423][ T445] Bluetooth: hci0: Frame reassembly failed (-84) [ 67.301465][ T483] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 67.311514][ T483] asix 5-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 67.322042][ T483] asix 5-1:0.34: probe with driver asix failed with error -61 [ 67.332912][ T1064] input: syz0 as /devices/virtual/input/input11 [ 67.508836][ T353] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 67.659802][ T353] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.670713][ T353] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.680456][ T353] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 67.689491][ T353] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.698011][ T353] usb 2-1: config 0 descriptor?? [ 68.104780][ T353] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 68.114219][ T353] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000E/input/input12 [ 68.181783][ T353] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 68.307182][ T353] usb 2-1: USB disconnect, device number 32 [ 68.608840][ T353] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 68.759909][ T353] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.770876][ T353] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.783698][ T353] usb 2-1: config 0 interface 0 has no altsetting 0 [ 68.790319][ T353] usb 2-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 68.799366][ T353] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.807885][ T353] usb 2-1: config 0 descriptor?? [ 69.216221][ T353] lg-g15 0003:046D:0A07.000F: hidraw0: USB HID v11.06 Device [HID 046d:0a07] on usb-dummy_hcd.1-1/input0 [ 69.235284][ T65] usb 5-1: USB disconnect, device number 11 [ 69.318869][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 69.360422][ T1091] FAULT_INJECTION: forcing a failure. [ 69.360422][ T1091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.373613][ T1091] CPU: 0 UID: 0 PID: 1091 Comm: syz.2.247 Not tainted syzkaller #0 4c7c6fabea823c7a50d4a31162f440126d0e7a76 [ 69.373639][ T1091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.373656][ T1091] Call Trace: [ 69.373662][ T1091] [ 69.373668][ T1091] __dump_stack+0x21/0x30 [ 69.373696][ T1091] dump_stack_lvl+0x140/0x1c0 [ 69.373717][ T1091] ? __cfi_dump_stack_lvl+0x10/0x10 [ 69.373739][ T1091] ? vsnprintf+0x7b4/0x1ad0 [ 69.373761][ T1091] ? check_stack_object+0x10f/0x150 [ 69.373779][ T1091] dump_stack+0x19/0x20 [ 69.373800][ T1091] should_fail_ex+0x3c2/0x510 [ 69.373819][ T1091] should_fail+0xf/0x20 [ 69.373836][ T1091] should_fail_usercopy+0x1e/0x30 [ 69.373855][ T1091] _copy_from_user+0x20/0xa0 [ 69.373877][ T1091] kstrtouint_from_user+0xde/0x170 [ 69.373895][ T1091] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 69.373913][ T1091] ? selinux_file_permission+0x318/0xb60 [ 69.373931][ T1091] ? __cfi_selinux_file_permission+0x10/0x10 [ 69.373948][ T1091] proc_fail_nth_write+0x8f/0x220 [ 69.373971][ T1091] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 69.373995][ T1091] ? bpf_lsm_file_permission+0xd/0x20 [ 69.374016][ T1091] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 69.374038][ T1091] vfs_write+0x3c1/0xfd0 [ 69.374056][ T1091] ? __cfi_vfs_write+0x10/0x10 [ 69.374072][ T1091] ? __kasan_check_write+0x18/0x20 [ 69.374089][ T1091] ? mutex_lock+0x97/0x1d0 [ 69.374106][ T1091] ? __cfi_mutex_lock+0x10/0x10 [ 69.374125][ T1091] ksys_write+0x145/0x260 [ 69.374142][ T1091] ? __cfi_ksys_write+0x10/0x10 [ 69.374160][ T1091] ? __kasan_check_read+0x15/0x20 [ 69.374176][ T1091] __x64_sys_write+0x7f/0x90 [ 69.374193][ T1091] x64_sys_call+0x271c/0x2ee0 [ 69.374209][ T1091] do_syscall_64+0x57/0xf0 [ 69.374230][ T1091] ? clear_bhb_loop+0x50/0xa0 [ 69.374249][ T1091] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.374267][ T1091] RIP: 0033:0x7f741215e98e [ 69.374281][ T1091] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 69.374296][ T1091] RSP: 002b:00007f7412feefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 69.374314][ T1091] RAX: ffffffffffffffda RBX: 00007f7412fef6c0 RCX: 00007f741215e98e [ 69.374327][ T1091] RDX: 0000000000000001 RSI: 00007f7412fef0a0 RDI: 0000000000000006 [ 69.374338][ T1091] RBP: 00007f7412fef090 R08: 0000000000000000 R09: 0000000000000000 [ 69.374349][ T1091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.374360][ T1091] R13: 00007f7412426038 R14: 00007f7412425fa0 R15: 00007ffc8b6dc098 [ 69.374374][ T1091] [ 69.684824][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 69.684834][ T36] audit: type=1400 audit(1788184454.349:414): avc: denied { mount } for pid=1101 comm="syz.4.249" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.713057][ T36] audit: type=1400 audit(1788184454.359:415): avc: denied { search } for pid=150 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.740915][ T36] audit: type=1400 audit(1788184454.409:416): avc: denied { read } for pid=1106 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.767411][ T36] audit: type=1400 audit(1788184454.409:417): avc: denied { open } for pid=1106 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.792575][ T36] audit: type=1400 audit(1788184454.409:418): avc: denied { getattr } for pid=1106 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.817998][ T36] audit: type=1400 audit(1788184454.479:419): avc: denied { write } for pid=1105 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.841050][ T36] audit: type=1400 audit(1788184454.479:420): avc: denied { add_name } for pid=1105 comm="dhcpcd-run-hook" name="resolv.conf.syzkaller1.dhcp" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.865362][ T36] audit: type=1400 audit(1788184454.499:421): avc: denied { remove_name } for pid=1116 comm="rm" name="resolv.conf.syzkaller1.dhcp" dev="tmpfs" ino=2027 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.928621][ T36] audit: type=1400 audit(1788184454.589:422): avc: denied { unmount } for pid=797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.961033][ T1131] FAULT_INJECTION: forcing a failure. [ 69.961033][ T1131] name failslab, interval 1, probability 0, space 0, times 0 [ 69.992060][ T1131] CPU: 0 UID: 0 PID: 1131 Comm: syz.2.252 Not tainted syzkaller #0 4c7c6fabea823c7a50d4a31162f440126d0e7a76 [ 69.992091][ T1131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.992103][ T1131] Call Trace: [ 69.992110][ T1131] [ 69.992118][ T1131] __dump_stack+0x21/0x30 [ 69.992148][ T1131] dump_stack_lvl+0x140/0x1c0 [ 69.992174][ T1131] ? __cfi_dump_stack_lvl+0x10/0x10 [ 69.992200][ T1131] ? avc_has_perm+0x155/0x240 [ 69.992224][ T1131] dump_stack+0x19/0x20 [ 69.992248][ T1131] should_fail_ex+0x3c2/0x510 [ 69.992271][ T1131] should_failslab+0xac/0x100 [ 69.992294][ T1131] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 69.992315][ T1131] ? selinux_socket_create+0x188/0x290 [ 69.992339][ T1131] ? sock_alloc_inode+0x48/0x150 [ 69.992357][ T1131] sock_alloc_inode+0x48/0x150 [ 69.992375][ T1131] ? __cfi_sock_alloc_inode+0x10/0x10 [ 69.992393][ T1131] alloc_inode+0x7a/0x270 [ 69.992417][ T1131] ? bpf_lsm_socket_create+0xd/0x20 [ 69.992437][ T1131] new_inode_pseudo+0x19/0x40 [ 69.992460][ T1131] __sock_create+0x130/0x810 [ 69.992481][ T1131] __sys_socketpair+0x221/0x5c0 [ 69.992502][ T1131] __x64_sys_socketpair+0x9f/0xc0 [ 69.992523][ T1131] x64_sys_call+0x2081/0x2ee0 [ 69.992542][ T1131] do_syscall_64+0x57/0xf0 [ 69.992568][ T1131] ? clear_bhb_loop+0x50/0xa0 [ 69.992590][ T1131] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.992612][ T1131] RIP: 0033:0x7f741219e159 [ 69.992628][ T1131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.992645][ T1131] RSP: 002b:00007f7412fef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 69.992666][ T1131] RAX: ffffffffffffffda RBX: 00007f7412425fa0 RCX: 00007f741219e159 [ 69.992681][ T1131] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 69.992693][ T1131] RBP: 00007f7412235024 R08: 0000000000000000 R09: 0000000000000000 [ 69.992706][ T1131] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 69.992720][ T1131] R13: 00007f7412426038 R14: 00007f7412425fa0 R15: 00007ffc8b6dc098 [ 69.992737][ T1131] [ 69.992745][ T1131] socket: no more sockets [ 70.004342][ T36] audit: type=1400 audit(1788184454.669:423): avc: denied { getopt } for pid=1130 comm="syz.2.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.163582][ T65] usb 2-1: USB disconnect, device number 33 [ 70.302877][ T1174] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.386612][ T1184] rust_binder: Write failure EFAULT in pid:235 [ 70.396214][ T445] bridge_slave_1: left allmulticast mode [ 70.409663][ T445] bridge_slave_1: left promiscuous mode [ 70.415814][ T445] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.423637][ T445] bridge_slave_0: left allmulticast mode [ 70.429732][ T445] bridge_slave_0: left promiscuous mode [ 70.435347][ T445] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.558835][ T31] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 70.568809][ T445] veth1_macvtap: left promiscuous mode [ 70.574330][ T445] veth0_vlan: left promiscuous mode [ 70.652355][ T1192] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.659545][ T1192] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.666581][ T1192] bridge_slave_0: entered allmulticast mode [ 70.673109][ T1192] bridge_slave_0: entered promiscuous mode [ 70.679391][ T1192] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.686429][ T1192] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.693597][ T1192] bridge_slave_1: entered allmulticast mode [ 70.699736][ T1192] bridge_slave_1: entered promiscuous mode [ 70.728841][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 70.735466][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 70.738614][ T1192] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.749777][ T31] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 64 [ 70.750131][ T1192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.759930][ T31] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 70.767078][ T1192] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.778421][ T31] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 70.783757][ T1192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.800162][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.808159][ T31] usb 5-1: Product: syz [ 70.808223][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.812375][ T31] usb 5-1: Manufacturer: syz [ 70.823982][ T31] usb 5-1: SerialNumber: syz [ 70.829826][ T483] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 70.832529][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.838580][ T1174] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 70.844438][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.853256][ T1174] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 70.877492][ T1192] veth0_vlan: entered promiscuous mode [ 70.891279][ T1192] veth1_macvtap: entered promiscuous mode [ 70.979786][ T483] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.990760][ T483] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.000558][ T483] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 71.009790][ T483] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.018472][ T483] usb 4-1: config 0 descriptor?? [ 71.073024][ T31] usb 5-1: MIDIStreaming interface descriptor not found [ 71.085804][ T31] usb 5-1: USB disconnect, device number 12 [ 71.092961][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.362113][ T1205] veth1_to_hsr: entered allmulticast mode [ 71.425780][ T483] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 71.436079][ T483] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0010/input/input15 [ 71.501352][ T483] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 71.629914][ T483] usb 4-1: USB disconnect, device number 30 [ 71.638506][ T1226] netlink: 'syz.4.272': attribute type 9 has an invalid length. [ 71.648743][ T1226] netlink: 'syz.4.272': attribute type 2 has an invalid length. [ 71.758897][ T31] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 71.909873][ T31] usb 2-1: config 1 has an invalid interface number: 112 but max is 2 [ 71.931380][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.945366][ T483] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 71.960639][ T31] usb 2-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 71.974956][ T31] usb 2-1: config 1 has no interface number 3 [ 71.989469][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 72.006302][ T31] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 72.016593][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.026701][ T31] usb 2-1: Product: syz [ 72.031646][ T31] usb 2-1: Manufacturer: syz [ 72.036253][ T31] usb 2-1: SerialNumber: syz [ 72.130544][ T483] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.148807][ T483] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 72.168527][ T483] usb 4-1: config 0 interface 0 has no altsetting 0 [ 72.175344][ T483] usb 4-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 72.184582][ T483] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.196918][ T483] usb 4-1: config 0 descriptor?? [ 72.398870][ T45] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 72.548849][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 72.554910][ T45] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 72.563190][ T45] usb 5-1: config 0 has no interface number 0 [ 72.571208][ T45] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 72.583058][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.591280][ T45] usb 5-1: Product: syz [ 72.595557][ T45] usb 5-1: Manufacturer: syz [ 72.600257][ T45] usb 5-1: SerialNumber: syz [ 72.605646][ T45] usb 5-1: config 0 descriptor?? [ 72.613510][ T483] lg-g15 0003:046D:0A07.0011: hidraw0: USB HID v11.06 Device [HID 046d:0a07] on usb-dummy_hcd.3-1/input0 [ 72.918837][ T432] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 73.068828][ T432] usb 6-1: Using ep0 maxpacket: 32 [ 73.075109][ T432] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.086282][ T432] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.097029][ T432] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 73.106266][ T432] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 73.114613][ T432] usb 6-1: Product: syz [ 73.118827][ T432] usb 6-1: Manufacturer: syz [ 73.125347][ T432] hub 6-1:4.0: USB hub found [ 73.317460][ T65] usb 4-1: USB disconnect, device number 31 [ 73.329126][ T432] hub 6-1:4.0: 9 ports detected [ 73.336939][ T432] hub 6-1:4.0: insufficient power available to use all downstream ports [ 73.358926][ T45] usb 5-1: USB disconnect, device number 13 [ 73.375298][ T483] hid-generic 0000:0000:0001.0012: item fetching failed at offset 5/8 [ 73.386434][ T483] hid-generic 0000:0000:0001.0012: probe with driver hid-generic failed with error -22 [ 73.535910][ T432] hub 6-1:4.0: hub_hub_status failed (err = -71) [ 73.543227][ T432] hub 6-1:4.0: config failed, can't get hub status (err -71) [ 73.569195][ T432] usb 6-1: USB disconnect, device number 2 [ 73.758842][ T45] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 73.908809][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 73.914948][ T45] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.925851][ T45] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.935592][ T45] usb 5-1: config 0 interface 0 has no altsetting 0 [ 73.942204][ T45] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 73.951241][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.959916][ T45] usb 5-1: config 0 descriptor?? [ 74.054830][ T1334] sit0: entered promiscuous mode [ 74.060999][ T1334] netlink: 'syz.5.295': attribute type 1 has an invalid length. [ 74.068637][ T1334] netlink: 1 bytes leftover after parsing attributes in process `syz.5.295'. [ 74.077534][ T1334] netlink: 'syz.5.295': attribute type 1 has an invalid length. [ 74.085207][ T1334] netlink: 1 bytes leftover after parsing attributes in process `syz.5.295'. [ 74.094064][ T1334] netlink: 'syz.5.295': attribute type 1 has an invalid length. [ 74.101812][ T1334] netlink: 1 bytes leftover after parsing attributes in process `syz.5.295'. [ 74.110668][ T1334] netlink: 'syz.5.295': attribute type 1 has an invalid length. [ 74.118297][ T1334] netlink: 1 bytes leftover after parsing attributes in process `syz.5.295'. [ 74.127123][ T1334] netlink: 'syz.5.295': attribute type 1 has an invalid length. [ 74.134775][ T1334] netlink: 1 bytes leftover after parsing attributes in process `syz.5.295'. [ 74.143614][ T1334] netlink: 'syz.5.295': attribute type 1 has an invalid length. [ 74.151257][ T1334] netlink: 1 bytes leftover after parsing attributes in process `syz.5.295'. [ 74.160084][ T1334] netlink: 'syz.5.295': attribute type 1 has an invalid length. [ 74.167710][ T1334] netlink: 1 bytes leftover after parsing attributes in process `syz.5.295'. [ 74.176552][ T1334] netlink: 'syz.5.295': attribute type 1 has an invalid length. [ 74.184195][ T1334] netlink: 1 bytes leftover after parsing attributes in process `syz.5.295'. [ 74.193158][ T1334] netlink: 1 bytes leftover after parsing attributes in process `syz.5.295'. [ 74.203168][ T1334] netlink: 1 bytes leftover after parsing attributes in process `syz.5.295'. [ 74.425083][ T45] hid (null): unknown global tag 0xe [ 74.431668][ T45] hid (null): unknown global tag 0xe [ 74.437383][ T45] hid (null): report_id 0 is invalid [ 74.443046][ T45] hid (null): unknown global tag 0xd [ 74.448429][ T45] hid (null): bogus close delimiter [ 74.478489][ T31] usb 2-1: Can't get UAC3 power state for id 10 [ 74.487435][ T1348] fuse: Bad value for 'fd' [ 74.488633][ T31] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 74.501684][ T31] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 74.542291][ T31] usb 2-1: USB disconnect, device number 34 [ 74.548813][ T353] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 74.695150][ T45] usb 5-1: USB disconnect, device number 14 [ 74.709845][ T353] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.720782][ T353] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.730692][ T353] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 74.739926][ T353] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.748563][ T353] usb 6-1: config 0 descriptor?? [ 75.156258][ T353] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 75.175390][ T353] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0014/input/input16 [ 75.198237][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 75.198252][ T36] audit: type=1400 audit(1788184459.859:440): avc: denied { map } for pid=1364 comm="syz.3.306" path="socket:[10601]" dev="sockfs" ino=10601 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 75.241520][ T353] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 75.258339][ T36] audit: type=1400 audit(1788184459.859:441): avc: denied { accept } for pid=1364 comm="syz.3.306" path="socket:[10601]" dev="sockfs" ino=10601 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 75.279663][ T65] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 75.370077][ T353] usb 6-1: USB disconnect, device number 3 [ 75.449805][ T65] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 75.461512][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 75.478905][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 75.488655][ T65] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.510683][ T65] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.528800][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.538345][ T65] usb 2-1: config 0 descriptor?? [ 75.688815][ T353] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 75.840785][ T353] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.851762][ T353] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 75.864606][ T353] usb 6-1: config 0 interface 0 has no altsetting 0 [ 75.871265][ T353] usb 6-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 75.880586][ T353] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.889437][ T353] usb 6-1: config 0 descriptor?? [ 75.948955][ T65] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x1 [ 75.956411][ T65] plantronics 0003:047F:FFFF.0015: item fetching failed at offset 12/15 [ 75.965009][ T65] plantronics 0003:047F:FFFF.0015: parse failed [ 75.971332][ T65] plantronics 0003:047F:FFFF.0015: probe with driver plantronics failed with error -22 [ 76.112667][ T1407] syzkaller1: entered allmulticast mode [ 76.150318][ T65] usb 2-1: USB disconnect, device number 35 [ 76.175424][ T36] audit: type=1400 audit(1788184460.839:442): avc: denied { cmd } for pid=1408 comm="iou-wrk-1410" path="socket:[11636]" dev="sockfs" ino=11636 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 76.298096][ T353] lg-g15 0003:046D:0A07.0016: hidraw0: USB HID v11.06 Device [HID 046d:0a07] on usb-dummy_hcd.5-1/input0 [ 76.568842][ T353] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 76.669302][ T1423] validate_nla: 25 callbacks suppressed [ 76.669315][ T1423] netlink: 'syz.1.317': attribute type 6 has an invalid length. [ 76.708816][ T353] usb 4-1: device descriptor read/64, error -71 [ 76.958844][ T353] usb 4-1: device descriptor read/64, error -71 [ 77.001117][ T65] usb 6-1: USB disconnect, device number 4 [ 77.048852][ T45] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 77.119763][ T1443] SELinux: policydb version 1180827720 does not match my version range 15-33 [ 77.128676][ T1443] SELinux: failed to load policy [ 77.208827][ T353] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 77.208837][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 77.209997][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.231506][ T45] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 77.240465][ T45] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 77.251318][ T45] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 77.260358][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.268332][ T45] usb 2-1: Product: syz [ 77.272515][ T31] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 77.280110][ T45] usb 2-1: Manufacturer: syz [ 77.284696][ T45] usb 2-1: SerialNumber: syz [ 77.338830][ T353] usb 4-1: device descriptor read/64, error -71 [ 77.439803][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.452645][ T31] usb 5-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 77.461697][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.470306][ T31] usb 5-1: config 0 descriptor?? [ 77.578859][ T353] usb 4-1: device descriptor read/64, error -71 [ 77.688900][ T353] usb usb4-port1: attempt power cycle [ 77.881417][ T31] input: HID 0458:5005 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5005.0017/input/input18 [ 77.894209][ T31] input: HID 0458:5005 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5005.0017/input/input19 [ 77.909835][ T31] kye 0003:0458:5005.0017: input,hiddev96,hidraw0: USB HID v7f.fd Device [HID 0458:5005] on usb-dummy_hcd.4-1/input0 [ 78.028831][ T353] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 78.049787][ T353] usb 4-1: device descriptor read/8, error -71 [ 78.105938][ T1431] netlink: 'syz.1.318': attribute type 10 has an invalid length. [ 78.179846][ T353] usb 4-1: device descriptor read/8, error -71 [ 78.418846][ T353] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 78.439817][ T353] usb 4-1: device descriptor read/8, error -71 [ 78.570237][ T353] usb 4-1: device descriptor read/8, error -71 [ 78.583261][ T31] usb 5-1: USB disconnect, device number 15 [ 78.630798][ T36] audit: type=1400 audit(1788184463.299:443): avc: denied { connect } for pid=1445 comm="syz.4.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.678899][ T353] usb usb4-port1: unable to enumerate USB device [ 78.693813][ T36] audit: type=1400 audit(1788184463.359:444): avc: denied { read } for pid=797 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 78.715448][ T36] audit: type=1400 audit(1788184463.359:445): avc: denied { open } for pid=797 comm="syz-executor" path="/43/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 78.737920][ T36] audit: type=1400 audit(1788184463.359:446): avc: denied { write } for pid=797 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 78.759678][ T36] audit: type=1400 audit(1788184463.359:447): avc: denied { setattr } for pid=797 comm="syz-executor" path="/43/tracing/instances" dev="tracefs" ino=1123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 78.801237][ T51] bridge_slave_1: left allmulticast mode [ 78.807018][ T51] bridge_slave_1: left promiscuous mode [ 78.813105][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.821704][ T51] bridge_slave_0: left allmulticast mode [ 78.827400][ T51] bridge_slave_0: left promiscuous mode [ 78.833309][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.939692][ T1449] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.946748][ T1449] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.955250][ T1449] bridge_slave_0: entered allmulticast mode [ 78.961831][ T1449] bridge_slave_0: entered promiscuous mode [ 78.968800][ T51] veth1_macvtap: left promiscuous mode [ 78.974307][ T51] veth0_vlan: left promiscuous mode [ 79.019919][ T1449] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.027009][ T1449] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.038205][ T1449] bridge_slave_1: entered allmulticast mode [ 79.044621][ T1449] bridge_slave_1: entered promiscuous mode [ 79.091999][ T1449] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.099072][ T1449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.106305][ T1449] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.113325][ T1449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.133909][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.141251][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.150693][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.157766][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.167260][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.174304][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.199205][ T1449] veth0_vlan: entered promiscuous mode [ 79.210821][ T1449] veth1_macvtap: entered promiscuous mode [ 79.297729][ T36] audit: type=1400 audit(1788184463.959:448): avc: denied { read write } for pid=1453 comm="syz.6.326" name="file0" dev="fuse" ino=16390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 79.321106][ T36] audit: type=1400 audit(1788184463.959:449): avc: denied { open } for pid=1453 comm="syz.6.326" path="/0/file0/file0" dev="fuse" ino=16390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 79.403163][ T1457] incfs: Options parsing error. -22 [ 79.408450][ T1457] incfs: mount failed -22 [ 79.531827][ T1473] __nla_validate_parse: 25 callbacks suppressed [ 79.531844][ T1473] netlink: 132 bytes leftover after parsing attributes in process `syz.3.332'. [ 79.566341][ T1501] FAULT_INJECTION: forcing a failure. [ 79.566341][ T1501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.579850][ T1501] CPU: 0 UID: 0 PID: 1501 Comm: syz.3.333 Not tainted syzkaller #0 4c7c6fabea823c7a50d4a31162f440126d0e7a76 [ 79.579879][ T1501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.579887][ T1501] Call Trace: [ 79.579890][ T1501] [ 79.579895][ T1501] __dump_stack+0x21/0x30 [ 79.579915][ T1501] dump_stack_lvl+0x140/0x1c0 [ 79.579930][ T1501] ? __cfi_dump_stack_lvl+0x10/0x10 [ 79.579956][ T1501] dump_stack+0x19/0x20 [ 79.579980][ T1501] should_fail_ex+0x3c2/0x510 [ 79.580002][ T1501] should_fail+0xf/0x20 [ 79.580018][ T1501] should_fail_usercopy+0x1e/0x30 [ 79.580033][ T1501] _copy_from_user+0x20/0xa0 [ 79.580046][ T1501] do_vfs_ioctl+0xa44/0x2010 [ 79.580060][ T1501] ? arch_stack_walk+0x10a/0x170 [ 79.580071][ T1501] ? __ia32_compat_sys_ioctl+0x980/0x980 [ 79.580093][ T1501] ? _parse_integer+0x2e/0x40 [ 79.580115][ T1501] ? ioctl_has_perm+0x39a/0x500 [ 79.580134][ T1501] ? has_cap_mac_admin+0xd0/0xd0 [ 79.580154][ T1501] ? proc_fail_nth_write+0x184/0x220 [ 79.580170][ T1501] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 79.580185][ T1501] ? selinux_file_ioctl+0x732/0x1480 [ 79.580195][ T1501] ? vfs_write+0xbcf/0xfd0 [ 79.580205][ T1501] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 79.580216][ T1501] ? __cfi_vfs_write+0x10/0x10 [ 79.580234][ T1501] ? __kasan_check_write+0x18/0x20 [ 79.580254][ T1501] ? mutex_unlock+0x90/0x240 [ 79.580274][ T1501] ? __cfi_mutex_unlock+0x10/0x10 [ 79.580296][ T1501] ? __fget_files+0x2bc/0x330 [ 79.580310][ T1501] ? bpf_lsm_file_ioctl+0xd/0x20 [ 79.580324][ T1501] ? security_file_ioctl+0x3e/0x110 [ 79.580334][ T1501] __se_sys_ioctl+0x97/0x1b0 [ 79.580346][ T1501] __x64_sys_ioctl+0x7f/0xa0 [ 79.580358][ T1501] x64_sys_call+0x1878/0x2ee0 [ 79.580372][ T1501] do_syscall_64+0x57/0xf0 [ 79.580397][ T1501] ? clear_bhb_loop+0x50/0xa0 [ 79.580419][ T1501] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.580439][ T1501] RIP: 0033:0x7f5f2a39e159 [ 79.580449][ T1501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.580465][ T1501] RSP: 002b:00007f5f2b2a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.580484][ T1501] RAX: ffffffffffffffda RBX: 00007f5f2a625fa0 RCX: 00007f5f2a39e159 [ 79.580499][ T1501] RDX: 0000000000000000 RSI: 00000000c020660b RDI: 0000000000000003 [ 79.580512][ T1501] RBP: 00007f5f2b2a3090 R08: 0000000000000000 R09: 0000000000000000 [ 79.580525][ T1501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.580545][ T1501] R13: 00007f5f2a626038 R14: 00007f5f2a625fa0 R15: 00007ffca4a4a988 [ 79.580562][ T1501] [ 79.853052][ T45] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 79.867692][ T45] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 79.882111][ T45] usb 2-1: USB disconnect, device number 36 [ 79.892027][ T1509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.336'. [ 79.900898][ T65] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 79.910887][ T357] udevd[357]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 79.947179][ T1509] netlink: 32 bytes leftover after parsing attributes in process `syz.3.336'. [ 79.957788][ T1509] can: request_module (can-proto-5) failed. [ 80.045424][ T1524] FAULT_INJECTION: forcing a failure. [ 80.045424][ T1524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.058553][ T1524] CPU: 1 UID: 0 PID: 1524 Comm: syz.3.342 Not tainted syzkaller #0 4c7c6fabea823c7a50d4a31162f440126d0e7a76 [ 80.058581][ T1524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.058592][ T1524] Call Trace: [ 80.058597][ T1524] [ 80.058604][ T1524] __dump_stack+0x21/0x30 [ 80.058631][ T1524] dump_stack_lvl+0x140/0x1c0 [ 80.058654][ T1524] ? __cfi_dump_stack_lvl+0x10/0x10 [ 80.058675][ T1524] ? check_stack_object+0x138/0x150 [ 80.058703][ T1524] dump_stack+0x19/0x20 [ 80.058726][ T1524] should_fail_ex+0x3c2/0x510 [ 80.058747][ T1524] should_fail+0xf/0x20 [ 80.058768][ T1524] should_fail_usercopy+0x1e/0x30 [ 80.058789][ T1524] _copy_to_user+0x24/0xa0 [ 80.058814][ T1524] simple_read_from_buffer+0xed/0x160 [ 80.058839][ T1524] proc_fail_nth_read+0x1aa/0x220 [ 80.058865][ T1524] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 80.058890][ T1524] ? bpf_lsm_file_permission+0xd/0x20 [ 80.058914][ T1524] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 80.058940][ T1524] vfs_read+0x288/0xc70 [ 80.058958][ T1524] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 80.058978][ T1524] ? __cfi_vfs_read+0x10/0x10 [ 80.058994][ T1524] ? __kasan_check_write+0x18/0x20 [ 80.059012][ T1524] ? mutex_lock+0x97/0x1d0 [ 80.059030][ T1524] ? __cfi_mutex_lock+0x10/0x10 [ 80.059051][ T1524] ksys_read+0x145/0x260 [ 80.059070][ T1524] ? __cfi_ksys_read+0x10/0x10 [ 80.059089][ T1524] ? __kasan_check_write+0x18/0x20 [ 80.059104][ T1524] ? fput+0x1a4/0x230 [ 80.059117][ T1524] ? __kasan_check_read+0x15/0x20 [ 80.059127][ T1524] __x64_sys_read+0x7f/0x90 [ 80.059138][ T1524] x64_sys_call+0x2638/0x2ee0 [ 80.059147][ T1524] do_syscall_64+0x57/0xf0 [ 80.059161][ T1524] ? clear_bhb_loop+0x50/0xa0 [ 80.059173][ T1524] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 80.059184][ T1524] RIP: 0033:0x7f5f2a35e98e [ 80.059194][ T1524] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 80.059204][ T1524] RSP: 002b:00007f5f2b2a2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 80.059216][ T1524] RAX: ffffffffffffffda RBX: 00007f5f2b2a36c0 RCX: 00007f5f2a35e98e [ 80.059224][ T1524] RDX: 000000000000000f RSI: 00007f5f2b2a30a0 RDI: 0000000000000004 [ 80.059230][ T1524] RBP: 00007f5f2b2a3090 R08: 0000000000000000 R09: 0000000000000000 [ 80.059237][ T1524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.059244][ T1524] R13: 00007f5f2a626038 R14: 00007f5f2a625fa0 R15: 00007ffca4a4a988 [ 80.059252][ T1524] [ 80.120513][ T65] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.318214][ T65] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.328873][ T65] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 80.337996][ T65] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.346585][ T65] usb 7-1: config 0 descriptor?? [ 80.387254][ T1531] futex_wake_op: syz.3.344 tries to shift op by 144; fix this program [ 80.753605][ T65] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor [ 80.763209][ T65] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0018/input/input20 [ 80.808166][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 80.808182][ T36] audit: type=1400 audit(1788184465.469:457): avc: denied { accept } for pid=1536 comm="syz.1.346" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.834656][ T36] audit: type=1400 audit(1788184465.479:458): avc: denied { execute } for pid=1536 comm="syz.1.346" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 80.851744][ T65] keytouch 0003:0926:3333.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 80.882103][ T1540] netlink: 16 bytes leftover after parsing attributes in process `syz.1.347'. [ 80.961920][ T65] usb 7-1: USB disconnect, device number 2 [ 81.128832][ T45] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 81.190075][ T36] audit: type=1400 audit(1788184465.859:459): avc: denied { read append } for pid=1556 comm="syz.5.353" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 81.190125][ T1557] random: crng reseeded on system resumption [ 81.216480][ T36] audit: type=1400 audit(1788184465.859:460): avc: denied { ioctl } for pid=1556 comm="syz.5.353" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 81.298830][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 81.305681][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 81.316114][ T45] usb 2-1: config 8 has an invalid interface number: 131 but max is 0 [ 81.324623][ T45] usb 2-1: config 8 has no interface number 0 [ 81.331923][ T36] audit: type=1400 audit(1788184465.999:461): avc: denied { read } for pid=1560 comm="syz.3.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 81.332790][ T45] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=37.6a [ 81.360440][ T36] audit: type=1400 audit(1788184466.029:462): avc: denied { shutdown } for pid=1560 comm="syz.3.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 81.361391][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.388152][ T45] usb 2-1: Product: syz [ 81.392472][ T45] usb 2-1: Manufacturer: syz [ 81.397060][ T45] usb 2-1: SerialNumber: syz [ 81.478851][ T65] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 81.500789][ T36] audit: type=1400 audit(1788184466.169:463): avc: denied { write } for pid=1568 comm="syz.6.357" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 81.601237][ T36] audit: type=1400 audit(1788184466.269:464): avc: denied { setopt } for pid=1575 comm="syz.3.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.617367][ T45] usb_ehset_test 2-1:8.131: probe with driver usb_ehset_test failed with error -32 [ 81.621733][ T65] usb 6-1: device descriptor read/64, error -71 [ 81.646977][ T45] usb 2-1: USB disconnect, device number 37 [ 81.868841][ T65] usb 6-1: device descriptor read/64, error -71 [ 81.908835][ T31] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 82.058886][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 82.065027][ T31] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 82.073210][ T31] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.083293][ T31] usb 7-1: config 0 has no interface number 0 [ 82.090791][ T31] usb 7-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 82.099846][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.107805][ T31] usb 7-1: Product: syz [ 82.111962][ T31] usb 7-1: Manufacturer: syz [ 82.116548][ T31] usb 7-1: SerialNumber: syz [ 82.122249][ T31] usb 7-1: config 0 descriptor?? [ 82.130555][ T65] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 82.181289][ T12] bridge_slave_1: left allmulticast mode [ 82.186965][ T12] bridge_slave_1: left promiscuous mode [ 82.192785][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.201472][ T12] bridge_slave_0: left allmulticast mode [ 82.207162][ T12] bridge_slave_0: left promiscuous mode [ 82.213105][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.288842][ T65] usb 6-1: device descriptor read/64, error -71 [ 82.321565][ T12] veth1_macvtap: left promiscuous mode [ 82.327104][ T12] veth0_vlan: left promiscuous mode [ 82.332917][ T31] usb 7-1: Found UVC 0.00 device syz (046d:08d3) [ 82.339364][ T31] usb 7-1: No valid video chain found. [ 82.387918][ T1588] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.394977][ T1588] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.402182][ T1588] bridge_slave_0: entered allmulticast mode [ 82.408512][ T1588] bridge_slave_0: entered promiscuous mode [ 82.417804][ T1588] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.424859][ T1588] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.431946][ T1588] bridge_slave_1: entered allmulticast mode [ 82.438306][ T1588] bridge_slave_1: entered promiscuous mode [ 82.452987][ T36] audit: type=1400 audit(1788184467.119:465): avc: denied { ioctl } for pid=1592 comm="syz.3.364" path="/dev/usbmon7" dev="devtmpfs" ino=111 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 82.496632][ T1588] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.503687][ T1588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.510949][ T1588] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.517970][ T1588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.536638][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.544458][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.548834][ T65] usb 6-1: device descriptor read/64, error -71 [ 82.564863][ T445] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.569624][ T353] usb 7-1: USB disconnect, device number 3 [ 82.571931][ T445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.586269][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.593337][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.617219][ T1588] veth0_vlan: entered promiscuous mode [ 82.627151][ T1588] veth1_macvtap: entered promiscuous mode [ 82.668951][ T65] usb usb6-port1: attempt power cycle [ 82.688958][ T31] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 82.818872][ T31] usb 4-1: device descriptor read/64, error -71 [ 82.888896][ T591] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 83.018841][ T65] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 83.038836][ T591] usb 8-1: Using ep0 maxpacket: 32 [ 83.045010][ T591] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.049910][ T65] usb 6-1: device descriptor read/8, error -71 [ 83.056103][ T591] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.071857][ T31] usb 4-1: device descriptor read/64, error -71 [ 83.078129][ T591] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 83.088017][ T591] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.098728][ T591] usb 8-1: config 0 descriptor?? [ 83.104675][ T591] hub 8-1:0.0: USB hub found [ 83.190030][ T65] usb 6-1: device descriptor read/8, error -71 [ 83.305327][ T591] hub 8-1:0.0: 1 port detected [ 83.310161][ T31] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 83.368906][ T353] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 83.429154][ T591] hub 8-1:0.0: activate --> -90 [ 83.438818][ T65] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 83.448817][ T31] usb 4-1: device descriptor read/64, error -71 [ 83.459825][ T65] usb 6-1: device descriptor read/8, error -71 [ 83.506633][ T591] hub 8-1:0.0: hub_ext_port_status failed (err = -32) [ 83.518832][ T353] usb 7-1: Using ep0 maxpacket: 32 [ 83.525118][ T353] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 83.533247][ T353] usb 7-1: config 0 has no interface number 0 [ 83.540742][ T353] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 83.549820][ T353] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.557839][ T353] usb 7-1: Product: syz [ 83.562521][ T353] usb 7-1: Manufacturer: syz [ 83.567102][ T353] usb 7-1: SerialNumber: syz [ 83.572626][ T353] usb 7-1: config 0 descriptor?? [ 83.578302][ T353] smsc95xx v2.0.0 [ 83.589780][ T65] usb 6-1: device descriptor read/8, error -71 [ 83.688827][ T31] usb 4-1: device descriptor read/64, error -71 [ 83.698932][ T65] usb usb6-port1: unable to enumerate USB device [ 83.799084][ T31] usb usb4-port1: attempt power cycle [ 84.138851][ T31] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 84.159973][ T31] usb 4-1: device descriptor read/8, error -71 [ 84.289850][ T31] usb 4-1: device descriptor read/8, error -71 [ 84.430360][ T353] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 84.441579][ T353] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 84.450981][ T353] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 84.461802][ T353] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 84.470950][ T353] usb 7-1: USB disconnect, device number 4 [ 84.538848][ T31] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 84.559861][ T31] usb 4-1: device descriptor read/8, error -71 [ 84.608815][ T591] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 84.689902][ T31] usb 4-1: device descriptor read/8, error -71 [ 84.760158][ T591] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.771094][ T591] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.780869][ T591] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 84.789913][ T591] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.798443][ T591] usb 6-1: config 0 descriptor?? [ 84.803586][ T31] usb usb4-port1: unable to enumerate USB device [ 85.211495][ T591] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 85.220933][ T591] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0019/input/input21 [ 85.288827][ T353] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 85.302196][ T591] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 85.414434][ T454] usb 6-1: USB disconnect, device number 9 [ 85.448851][ T353] usb 7-1: Using ep0 maxpacket: 32 [ 85.460302][ T353] usb 7-1: unable to get BOS descriptor or descriptor too short [ 85.472266][ T353] usb 7-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 85.481803][ T353] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.489814][ T353] usb 7-1: Product: syz [ 85.493967][ T353] usb 7-1: Manufacturer: syz [ 85.498535][ T353] usb 7-1: SerialNumber: syz [ 85.669083][ T36] audit: type=1400 audit(1788184470.339:466): avc: denied { write } for pid=1613 comm="syz.7.370" name="mcfilter6" dev="proc" ino=4026532362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 85.706094][ T353] usb 7-1: Fast Track Pro switching to config #2 [ 85.713356][ T353] usb 7-1: USB disconnect, device number 5 [ 85.879620][ T432] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 85.918962][ T45] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 85.927034][ T45] usb 8-1: device reset changed ep0 maxpacket size! [ 85.934578][ T45] usb 8-1: USB disconnect, device number 2 [ 86.028830][ T432] usb 4-1: Using ep0 maxpacket: 8 [ 86.036262][ T432] usb 4-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 86.045361][ T432] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.053570][ T432] usb 4-1: Product: syz [ 86.057719][ T432] usb 4-1: Manufacturer: syz [ 86.062314][ T432] usb 4-1: SerialNumber: syz [ 86.178817][ T353] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 86.238826][ T45] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 86.271411][ T432] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 86.279435][ T432] usb 4-1: unit 2 not found! [ 86.288865][ T36] audit: type=1400 audit(1788184470.949:467): avc: denied { shutdown } for pid=1617 comm="syz.6.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.335854][ T432] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 86.345062][ T353] usb 6-1: Using ep0 maxpacket: 8 [ 86.351721][ T432] usb 4-1: USB disconnect, device number 40 [ 86.360328][ T353] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 65, changing to 7 [ 86.372602][ T353] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 86.381437][ T1011] udevd[1011]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 86.384730][ T353] usb 6-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 86.407346][ T45] usb 8-1: Using ep0 maxpacket: 16 [ 86.413804][ T45] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.424844][ T353] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.434859][ T45] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.436142][ T353] usb 6-1: Product: syz [ 86.445267][ T45] usb 8-1: config 0 interface 0 has no altsetting 0 [ 86.458812][ T353] usb 6-1: Manufacturer: syz [ 86.463427][ T353] usb 6-1: SerialNumber: syz [ 86.465556][ T45] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 86.479604][ T45] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.491211][ T45] usb 8-1: config 0 descriptor?? [ 86.693017][ T1616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.703236][ T1616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.727881][ T353] usb 6-1: USB disconnect, device number 10 [ 86.734369][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 86.785523][ T65] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 86.902806][ T1634] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.915382][ T36] audit: type=1400 audit(1788184471.579:468): avc: denied { getattr } for pid=1633 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 86.959855][ T65] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.970775][ T65] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.980710][ T65] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.993532][ T65] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.002804][ T65] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.011357][ T65] usb 7-1: config 0 descriptor?? [ 87.188823][ T353] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 87.218242][ T36] audit: type=1400 audit(1788184471.879:469): avc: denied { create } for pid=1627 comm="syz.6.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 87.369873][ T353] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.380196][ T353] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.392677][ T353] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 87.402810][ T353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.411136][ T353] usb 4-1: Product: syz [ 87.415435][ T353] usb 4-1: Manufacturer: syz [ 87.420609][ T353] usb 4-1: SerialNumber: syz [ 87.488067][ T65] usbhid 7-1:0.0: can't add hid device: -71 [ 87.494285][ T65] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 87.504594][ T65] usb 7-1: USB disconnect, device number 6 [ 87.548831][ T454] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 87.699786][ T454] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.710719][ T454] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.720475][ T454] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 87.729608][ T454] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.738310][ T454] usb 6-1: config 0 descriptor?? [ 88.145906][ T454] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor [ 88.155397][ T454] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.001B/input/input22 [ 88.224649][ T454] keytouch 0003:0926:3333.001B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 88.242776][ T65] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 88.348977][ T591] usb 6-1: USB disconnect, device number 11 [ 88.400096][ T65] usb 7-1: unable to get BOS descriptor or descriptor too short [ 88.408150][ T65] usb 7-1: not running at top speed; connect to a high speed hub [ 88.416638][ T65] usb 7-1: config 26 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 88.429042][ T65] usb 7-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 88.438158][ T65] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.446394][ T65] usb 7-1: Product: syz [ 88.450986][ T1636] netlink: 9 bytes leftover after parsing attributes in process `syz.3.379'. [ 88.451158][ T65] usb 7-1: Manufacturer: syz [ 88.460472][ T1636] gretap0: entered promiscuous mode [ 88.464568][ T65] usb 7-1: SerialNumber: syz [ 88.472216][ T1636] netlink: 5 bytes leftover after parsing attributes in process `syz.3.379'. [ 88.483020][ T1636] 0ªî{X¹¦: renamed from gretap0 [ 88.488565][ T1636] 0ªî{X¹¦: left promiscuous mode [ 88.493657][ T1636] 0ªî{X¹¦: entered allmulticast mode [ 88.499416][ T1636] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 88.680528][ T432] usb 8-1: USB disconnect, device number 3 [ 88.697577][ T36] audit: type=1400 audit(1788184473.359:470): avc: denied { read write } for pid=1657 comm="syz.7.383" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 88.697641][ T1658] netlink: 'syz.7.383': attribute type 4 has an invalid length. [ 88.722277][ T36] audit: type=1400 audit(1788184473.359:471): avc: denied { open } for pid=1657 comm="syz.7.383" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 88.729952][ T1658] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.383'. [ 89.022787][ T353] cdc_ncm 4-1:1.0: bind() failure [ 89.037138][ T353] usb 4-1: USB disconnect, device number 41 [ 89.052848][ T36] audit: type=1400 audit(1788184473.719:472): avc: denied { associate } for pid=1668 comm="syz.3.387" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 89.073940][ T36] audit: type=1400 audit(1788184473.739:473): avc: denied { mounton } for pid=1666 comm="syz.3.387" path="/proc/361/task" dev="proc" ino=12901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 89.096474][ T432] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 89.108828][ T45] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 89.130200][ T1669] SELinux: policydb magic number 0x636f7270 does not match expected magic number 0xf97cff8c [ 89.140538][ T1669] SELinux: failed to load policy [ 89.251263][ T432] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 89.260458][ T432] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.268452][ T432] usb 8-1: Product: syz [ 89.268817][ T45] usb 6-1: Using ep0 maxpacket: 16 [ 89.272862][ T432] usb 8-1: Manufacturer: syz [ 89.278880][ T45] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.282365][ T432] usb 8-1: SerialNumber: syz [ 89.293457][ T45] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.307536][ T45] usb 6-1: config 0 interface 0 has no altsetting 0 [ 89.314164][ T45] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 89.323772][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.332378][ T45] usb 6-1: config 0 descriptor?? [ 89.740003][ T45] hid (null): global environment stack underflow [ 89.751994][ T45] hid (null): unknown global tag 0xe [ 89.757365][ T45] hid (null): global environment stack underflow [ 89.763760][ T45] hid (null): global environment stack underflow [ 89.770127][ T45] hid (null): report_id 55854 is invalid [ 89.775772][ T45] hid (null): unknown global tag 0xe [ 89.783718][ T45] hid (null): global environment stack underflow [ 89.790076][ T45] hid (null): unknown global tag 0xe [ 89.939637][ T1665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.950016][ T1665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.349698][ T432] (unnamed net_device) (uninitialized): Assigned a random MAC address: 8a:e6:87:1e:e2:15 [ 90.362128][ T432] rtl8150 8-1:1.0: eth1: rtl8150 is detected [ 90.371161][ T432] usb 8-1: USB disconnect, device number 4 [ 90.918981][ T420] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 91.018375][ T65] usb 7-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 91.026841][ T65] usb 7-1: found format II with max.bitrate = 512, frame size=4095 [ 91.034925][ T65] usb 7-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 91.043389][ T65] usb 7-1: found format II with max.bitrate = 512, frame size=4095 [ 91.052176][ T65] usb 7-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 91.073082][ T65] usb 7-1: USB disconnect, device number 7 [ 91.078815][ T420] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.095081][ T363] udevd[363]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:26.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 91.110844][ T420] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.123697][ T420] usb 8-1: config 0 interface 0 has no altsetting 0 [ 91.124329][ T36] audit: type=1400 audit(1788184475.789:474): avc: denied { accept } for pid=1689 comm="syz.6.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 91.130336][ T420] usb 8-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 91.150002][ T1690] netlink: 'syz.6.391': attribute type 4 has an invalid length. [ 91.158536][ T420] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.167954][ T36] audit: type=1400 audit(1788184475.819:475): avc: denied { bind } for pid=1689 comm="syz.6.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.179274][ T420] usb 8-1: config 0 descriptor?? [ 91.202713][ T1690] netlink: 'syz.6.391': attribute type 4 has an invalid length. [ 91.558824][ T45] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 91.618853][ T65] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 91.709771][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.720863][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.730619][ T45] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 91.739728][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.748195][ T45] usb 7-1: config 0 descriptor?? [ 91.779876][ T65] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 91.788976][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.797758][ T65] usb 4-1: config 0 descriptor?? [ 91.879592][ T432] usb 6-1: USB disconnect, device number 12 [ 91.937335][ T1699] netlink: 236 bytes leftover after parsing attributes in process `syz.5.395'. [ 92.003248][ T420] sony 0003:054C:0268.001D: can't set operational mode: step 1 [ 92.010889][ T420] sony 0003:054C:0268.001D: Failed to set controller into operational mode [ 92.020848][ T420] sony 0003:054C:0268.001D: hiddev96,hidraw0: USB HID v80.00 Joystick [HID 054c:0268] on usb-dummy_hcd.7-1/input0 [ 92.032872][ T420] sony 0003:054C:0268.001D: failed to claim input [ 92.041361][ T1701] ================================================================== [ 92.044650][ T420] usb 8-1: USB disconnect, device number 5 [ 92.049438][ T1701] BUG: KASAN: slab-use-after-free in read_report_descriptor+0xb4/0x100 [ 92.049469][ T1701] Read of size 24 at addr ffff888116a11100 by task fido_id/1701 [ 92.049487][ T1701] [ 92.073399][ T1701] CPU: 0 UID: 0 PID: 1701 Comm: fido_id Not tainted syzkaller #0 4c7c6fabea823c7a50d4a31162f440126d0e7a76 [ 92.073422][ T1701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.073429][ T1701] Call Trace: [ 92.073434][ T1701] [ 92.073438][ T1701] __dump_stack+0x21/0x30 [ 92.073463][ T1701] dump_stack_lvl+0x140/0x1c0 [ 92.073488][ T1701] ? __cfi_dump_stack_lvl+0x10/0x10 [ 92.073515][ T1701] print_address_description+0x71/0x210 [ 92.073541][ T1701] print_report+0x4a/0x70 [ 92.073554][ T1701] kasan_report+0x162/0x1a0 [ 92.073568][ T1701] ? read_report_descriptor+0xb4/0x100 [ 92.073580][ T1701] ? read_report_descriptor+0xb4/0x100 [ 92.073591][ T1701] kasan_check_range+0x25a/0x2b0 [ 92.073608][ T1701] ? read_report_descriptor+0xb4/0x100 [ 92.073628][ T1701] __asan_memcpy+0x31/0x80 [ 92.073648][ T1701] read_report_descriptor+0xb4/0x100 [ 92.073669][ T1701] ? __cfi_read_report_descriptor+0x10/0x10 [ 92.073688][ T1701] sysfs_kf_bin_read+0x1c6/0x200 [ 92.073700][ T1701] ? __cfi_sysfs_kf_bin_read+0x10/0x10 [ 92.073710][ T1701] kernfs_fop_read_iter+0x2fa/0x570 [ 92.073725][ T1701] vfs_read+0x60b/0xc70 [ 92.073736][ T1701] ? __cfi_vfs_read+0x10/0x10 [ 92.073754][ T1701] ? __kasan_slab_free+0x6a/0x80 [ 92.073777][ T1701] ? putname+0x113/0x150 [ 92.073799][ T1701] ? putname+0x113/0x150 [ 92.073820][ T1701] ? __kasan_check_read+0x15/0x20 [ 92.073835][ T1701] ksys_read+0x145/0x260 [ 92.073846][ T1701] ? xfd_validate_state+0x68/0x140 [ 92.073860][ T1701] ? __cfi_ksys_read+0x10/0x10 [ 92.073871][ T1701] ? __kasan_check_write+0x18/0x20 [ 92.073881][ T1701] ? fpregs_restore_userregs+0x11c/0x260 [ 92.073897][ T1701] __x64_sys_read+0x7f/0x90 [ 92.073916][ T1701] x64_sys_call+0x2638/0x2ee0 [ 92.073934][ T1701] do_syscall_64+0x57/0xf0 [ 92.073960][ T1701] ? clear_bhb_loop+0x50/0xa0 [ 92.073980][ T1701] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 92.073992][ T1701] RIP: 0033:0x7fd1798a7407 [ 92.074002][ T1701] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 92.074011][ T1701] RSP: 002b:00007fff46539900 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 92.074023][ T1701] RAX: ffffffffffffffda RBX: 00007fd179f43880 RCX: 00007fd1798a7407 [ 92.074031][ T1701] RDX: 0000000000001000 RSI: 00007fff46539950 RDI: 0000000000000004 [ 92.074040][ T1701] RBP: 0000557b0a8772c0 R08: 0000000000000000 R09: 0000000000000000 [ 92.074052][ T1701] R10: 0000000000000000 R11: 0000000000000202 R12: 0000557b0a8764c0 [ 92.074065][ T1701] R13: 00007fff46539950 R14: 0000000000000004 R15: 0000557aea35a4d8 [ 92.074082][ T1701] [ 92.074089][ T1701] [ 92.155862][ T45] keytouch 0003:0926:3333.001E: fixing up Keytouch IEC report descriptor [ 92.160794][ T1701] Allocated by task 420: [ 92.160807][ T1701] kasan_save_track+0x3e/0x80 [ 92.160832][ T1701] kasan_save_alloc_info+0x3a/0x50 [ 92.168487][ T45] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.001E/input/input24 [ 92.171620][ T1701] __kasan_kmalloc+0x96/0xb0 [ 92.171646][ T1701] __kmalloc_node_track_caller_noprof+0x24e/0x4f0 [ 92.218404][ T45] keytouch 0003:0926:3333.001E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 92.218686][ T1701] kmemdup_noprof+0x31/0x80 [ 92.362654][ T1695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.369163][ T1701] hid_open_report+0x200/0x1120 [ 92.369197][ T1701] sony_probe+0x18a/0x5f0 [ 92.374103][ T1695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.380156][ T1701] hid_device_probe+0x2ce/0x5f0 [ 92.426515][ T1701] really_probe+0x2e4/0x8b0 [ 92.431017][ T1701] __driver_probe_device+0x193/0x280 [ 92.436294][ T1701] driver_probe_device+0x54/0x3f0 [ 92.441318][ T1701] __device_attach_driver+0x2f1/0x4b0 [ 92.446674][ T1701] bus_for_each_drv+0x267/0x300 [ 92.451515][ T1701] __device_attach+0x2c4/0x3c0 [ 92.456279][ T1701] device_initial_probe+0x1e/0x30 [ 92.461290][ T1701] bus_probe_device+0x18b/0x270 [ 92.466135][ T1701] device_add+0x7fd/0xbf0 [ 92.470456][ T1701] hid_add_device+0x3c4/0x5a0 [ 92.475110][ T1701] usbhid_probe+0xdca/0x1310 [ 92.479679][ T1701] usb_probe_interface+0x6ab/0xbf0 [ 92.484782][ T1701] really_probe+0x2e4/0x8b0 [ 92.489275][ T1701] __driver_probe_device+0x193/0x280 [ 92.494543][ T1701] driver_probe_device+0x54/0x3f0 [ 92.499558][ T1701] __device_attach_driver+0x2f1/0x4b0 [ 92.504911][ T1701] bus_for_each_drv+0x267/0x300 [ 92.509758][ T1701] __device_attach+0x2c4/0x3c0 [ 92.514499][ T1701] device_initial_probe+0x1e/0x30 [ 92.519525][ T1701] bus_probe_device+0x18b/0x270 [ 92.524357][ T1701] device_add+0x7fd/0xbf0 [ 92.528670][ T1701] usb_set_configuration+0x1aad/0x2080 [ 92.534145][ T1701] usb_generic_driver_probe+0x95/0x160 [ 92.539591][ T1701] usb_probe_device+0x1ef/0x3b0 [ 92.544441][ T1701] really_probe+0x2e4/0x8b0 [ 92.548933][ T1701] __driver_probe_device+0x193/0x280 [ 92.554206][ T1701] driver_probe_device+0x54/0x3f0 [ 92.559209][ T1701] __device_attach_driver+0x2f1/0x4b0 [ 92.564564][ T1701] bus_for_each_drv+0x267/0x300 [ 92.569411][ T1701] __device_attach+0x2c4/0x3c0 [ 92.574171][ T1701] device_initial_probe+0x1e/0x30 [ 92.579174][ T1701] bus_probe_device+0x18b/0x270 [ 92.584004][ T1701] device_add+0x7fd/0xbf0 [ 92.588317][ T1701] usb_new_device+0x98d/0x1500 [ 92.593057][ T1701] hub_event+0x2dbd/0x4360 [ 92.597466][ T1701] process_scheduled_works+0x7f4/0x1060 [ 92.602990][ T1701] worker_thread+0xc99/0x13f0 [ 92.607651][ T1701] kthread+0x2c4/0x360 [ 92.611718][ T1701] ret_from_fork+0x64/0xa0 [ 92.616128][ T1701] ret_from_fork_asm+0x1a/0x30 [ 92.620874][ T1701] [ 92.623174][ T1701] Freed by task 420: [ 92.627040][ T1701] kasan_save_track+0x3e/0x80 [ 92.631703][ T1701] kasan_save_free_info+0x44/0x50 [ 92.636717][ T1701] __kasan_slab_free+0x5f/0x80 [ 92.641474][ T1701] kfree+0x158/0x440 [ 92.645361][ T1701] hid_close_report+0x628/0x6f0 [ 92.650214][ T1701] hid_device_probe+0x538/0x5f0 [ 92.655050][ T1701] really_probe+0x2e4/0x8b0 [ 92.659537][ T1701] __driver_probe_device+0x193/0x280 [ 92.664828][ T1701] driver_probe_device+0x54/0x3f0 [ 92.669854][ T1701] __device_attach_driver+0x2f1/0x4b0 [ 92.675230][ T1701] bus_for_each_drv+0x267/0x300 [ 92.680081][ T1701] __device_attach+0x2c4/0x3c0 [ 92.684852][ T1701] device_initial_probe+0x1e/0x30 [ 92.689871][ T1701] bus_probe_device+0x18b/0x270 [ 92.694701][ T1701] device_add+0x7fd/0xbf0 [ 92.699024][ T1701] hid_add_device+0x3c4/0x5a0 [ 92.703683][ T1701] usbhid_probe+0xdca/0x1310 [ 92.708297][ T1701] usb_probe_interface+0x6ab/0xbf0 [ 92.713411][ T1701] really_probe+0x2e4/0x8b0 [ 92.717897][ T1701] __driver_probe_device+0x193/0x280 [ 92.723190][ T1701] driver_probe_device+0x54/0x3f0 [ 92.728207][ T1701] __device_attach_driver+0x2f1/0x4b0 [ 92.733578][ T1701] bus_for_each_drv+0x267/0x300 [ 92.738423][ T1701] __device_attach+0x2c4/0x3c0 [ 92.743190][ T1701] device_initial_probe+0x1e/0x30 [ 92.748210][ T1701] bus_probe_device+0x18b/0x270 [ 92.753051][ T1701] device_add+0x7fd/0xbf0 [ 92.757386][ T1701] usb_set_configuration+0x1aad/0x2080 [ 92.762854][ T1701] usb_generic_driver_probe+0x95/0x160 [ 92.768315][ T1701] usb_probe_device+0x1ef/0x3b0 [ 92.773169][ T1701] really_probe+0x2e4/0x8b0 [ 92.777668][ T1701] __driver_probe_device+0x193/0x280 [ 92.782952][ T1701] driver_probe_device+0x54/0x3f0 [ 92.787954][ T1701] __device_attach_driver+0x2f1/0x4b0 [ 92.793316][ T1701] bus_for_each_drv+0x267/0x300 [ 92.798150][ T1701] __device_attach+0x2c4/0x3c0 [ 92.802913][ T1701] device_initial_probe+0x1e/0x30 [ 92.807916][ T1701] bus_probe_device+0x18b/0x270 [ 92.812742][ T1701] device_add+0x7fd/0xbf0 [ 92.817059][ T1701] usb_new_device+0x98d/0x1500 [ 92.821819][ T1701] hub_event+0x2dbd/0x4360 [ 92.826235][ T1701] process_scheduled_works+0x7f4/0x1060 [ 92.831764][ T1701] worker_thread+0xc99/0x13f0 [ 92.836423][ T1701] kthread+0x2c4/0x360 [ 92.840483][ T1701] ret_from_fork+0x64/0xa0 [ 92.844884][ T1701] ret_from_fork_asm+0x1a/0x30 [ 92.849622][ T1701] [ 92.851938][ T1701] The buggy address belongs to the object at ffff888116a11100 [ 92.851938][ T1701] which belongs to the cache kmalloc-32 of size 32 [ 92.865813][ T1701] The buggy address is located 0 bytes inside of [ 92.865813][ T1701] freed 32-byte region [ffff888116a11100, ffff888116a11120) [ 92.879344][ T1701] [ 92.881665][ T1701] The buggy address belongs to the physical page: [ 92.888078][ T1701] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x116a11 [ 92.896914][ T1701] anon flags: 0x4000000000000000(zone=1) [ 92.902543][ T1701] page_type: f5(slab) [ 92.906510][ T1701] raw: 4000000000000000 ffff888100041780 0000000000000000 dead000000000001 [ 92.915081][ T1701] raw: 0000000000000000 0000000000400040 00000001f5000000 0000000000000000 [ 92.923641][ T1701] page dumped because: kasan: bad access detected [ 92.930049][ T1701] page_owner tracks the page as allocated [ 92.935742][ T1701] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 295, tgid 295 (syz-executor), ts 46472275152, free_ts 46472264340 [ 92.954753][ T1701] post_alloc_hook+0x37d/0x3b0 [ 92.959534][ T1701] prep_new_page+0x2d/0x180 [ 92.964035][ T1701] get_page_from_freelist+0x4aea/0x4ba0 [ 92.969577][ T1701] __alloc_pages_noprof+0x35a/0x7e0 [ 92.974761][ T1701] alloc_slab_page+0x6b/0x1e0 [ 92.979434][ T1701] allocate_slab+0x69/0x430 [ 92.983930][ T1701] ___slab_alloc+0x591/0x8c0 [ 92.988505][ T1701] __kmalloc_noprof+0x2fc/0x510 [ 92.993351][ T1701] ovl_alloc_entry+0x42/0x110 [ 92.998030][ T1701] ovl_lookup+0x1493/0x1d20 [ 93.002533][ T1701] __lookup_slow+0x2e5/0x420 [ 93.007115][ T1701] lookup_slow+0x57/0x80 [ 93.011372][ T1701] walk_component+0x308/0x450 [ 93.016057][ T1701] path_lookupat+0x155/0x440 [ 93.020646][ T1701] filename_lookup+0x22d/0x5a0 [ 93.025410][ T1701] user_path_at+0x42/0x60 [ 93.029723][ T1701] page last free pid 295 tgid 295 stack trace: [ 93.035856][ T1701] free_unref_page+0xbb8/0xf70 [ 93.040623][ T1701] __free_pages+0x6b/0x3b0 [ 93.045025][ T1701] free_pages+0x86/0x90 [ 93.049163][ T1701] selinux_genfs_get_sid+0x209/0x2d0 [ 93.054427][ T1701] inode_doinit_with_dentry+0x8f8/0xde0 [ 93.059955][ T1701] selinux_d_instantiate+0x2b/0x40 [ 93.065054][ T1701] security_d_instantiate+0xb8/0xf0 [ 93.070239][ T1701] d_splice_alias+0x71/0x3a0 [ 93.074808][ T1701] kernfs_iop_lookup+0x2c6/0x320 [ 93.079747][ T1701] __lookup_slow+0x2e5/0x420 [ 93.084319][ T1701] lookup_one_unlocked+0x188/0x2d0 [ 93.089417][ T1701] ovl_lookup_single+0x1de/0xb20 [ 93.094340][ T1701] ovl_lookup_layer+0x355/0x420 [ 93.099193][ T1701] ovl_lookup+0x8c0/0x1d20 [ 93.103606][ T1701] __lookup_slow+0x2e5/0x420 [ 93.108196][ T1701] lookup_slow+0x57/0x80 [ 93.112434][ T1701] [ 93.114733][ T1701] Memory state around the buggy address: [ 93.120344][ T1701] ffff888116a11000: 00 00 00 00 fc fc fc fc 00 00 01 fc fc fc fc fc [ 93.128395][ T1701] ffff888116a11080: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 93.136431][ T1701] >ffff888116a11100: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 93.144465][ T1701] ^ [ 93.148523][ T1701] ffff888116a11180: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 93.156561][ T1701] ffff888116a11200: 00 00 00 fc fc fc fc fc fa fb fb fb fc fc fc fc [ 93.164592][ T1701] ================================================================== [ 93.183112][ T1701] Disabling lock debugging due to kernel taint [ 93.196635][ T36] audit: type=1400 audit(1788184477.839:476): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 93.233921][ T591] usb 7-1: USB disconnect, device number 8 [ 93.251945][ T65] usb 4-1: Cannot set MAC address [ 93.258071][ T65] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 93.270326][ T36] audit: type=1400 audit(1788184477.839:477): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.303483][ T36] audit: type=1400 audit(1788184477.849:478): avc: denied { write } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.306228][ T65] usb 4-1: USB disconnect, device number 42 [ 93.325077][ T1703] fido_id[1703]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 93.345151][ T36] audit: type=1400 audit(1788184477.849:479): avc: denied { add_name } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.370171][ T36] audit: type=1400 audit(1788184477.849:480): avc: denied { create } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 93.428342][ T36] audit: type=1400 audit(1788184477.849:482): avc: denied { write } for pid=287 comm="syz-executor" path="pipe:[3205]" dev="pipefs" ino=3205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 93.462582][ T36] audit: type=1400 audit(1788184477.849:481): avc: denied { append open } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 93.485574][ T36] audit: type=1400 audit(1788184477.849:483): avc: denied { getattr } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 93.516260][ T310] bridge_slave_1: left allmulticast mode [ 93.528856][ T310] bridge_slave_1: left promiscuous mode [ 93.534584][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.544371][ T310] bridge_slave_0: left allmulticast mode [ 93.550171][ T310] bridge_slave_0: left promiscuous mode [ 93.555776][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.680953][ T310] veth1_macvtap: left promiscuous mode [ 93.686458][ T310] veth0_vlan: left promiscuous mode [ 93.881307][ T310] bridge_slave_1: left allmulticast mode [ 93.886959][ T310] bridge_slave_1: left promiscuous mode [ 93.892588][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.900048][ T310] bridge_slave_0: left allmulticast mode [ 93.905676][ T310] bridge_slave_0: left promiscuous mode [ 93.911274][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.918722][ T310] bridge_slave_1: left allmulticast mode [ 93.924384][ T310] bridge_slave_1: left promiscuous mode [ 93.930019][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.937300][ T310] bridge_slave_0: left allmulticast mode [ 93.943005][ T310] bridge_slave_0: left promiscuous mode [ 93.948575][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.956076][ T310] bridge_slave_1: left allmulticast mode [ 93.961741][ T310] bridge_slave_1: left promiscuous mode [ 93.967308][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.974693][ T310] bridge_slave_0: left allmulticast mode [ 93.980368][ T310] bridge_slave_0: left promiscuous mode [ 93.985923][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.221391][ T310] tipc: Left network mode [ 94.227476][ T310] veth1_macvtap: left promiscuous mode [ 94.232995][ T310] veth0_vlan: left promiscuous mode [ 94.238469][ T310] veth1_macvtap: left promiscuous mode [ 94.244002][ T310] veth0_vlan: left promiscuous mode [ 94.249466][ T310] veth1_macvtap: left promiscuous mode [ 94.254925][ T310] veth0_vlan: left promiscuous mode