last executing test programs: 3m34.375501428s ago: executing program 2 (id=84): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e01272a22fc54078fd5e64475993668980a9f95aff96492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef4201dbc11d36a0a0db52e84461c6fbb4aad62cf3c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec080000002b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270b36ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a7986cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9aee540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b231f7ffc441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25afd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e5706000", 0x1000}}, 0x1006) syz_usb_connect(0x4, 0x6aa, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xa7, 0x98, 0x5a, 0x20, 0x19d2, 0x1296, 0xca70, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x698, 0x1, 0xf0, 0x8, 0x10, 0x7, "", [{{0x9, 0x4, 0x38, 0x5, 0x10, 0xff, 0xff, 0xff, 0x4, [@uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x80, 0x9, 0xa6, 0x84}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x8, 0x6, 0x3, "45f00b"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x0, 0x6, 0x2}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xa3a, 0x9c, 0xf}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2, 0x1, 0xab, 0x21, "290f", 'd'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x6}]}, @generic={0xb5, 0x5, "738015f9b2f797a57463a903bcd8a8f4bf8d836d2a4ef44e5d1811b94ca70755b8f8d23e272e41f7b87c23a10a33e1572ca2bb4d5892eb7fa47bfccb3603574dcf2ed2a6b9a562a20bcdf1899696e1b36e389a9f1f678e83f69a0f087eb94e32765329c4c51b14f046a8383760a000220dc7c021c4646cb809dfd2d3ca6ffe71afafb7a2d1cad3d19abb1136dd709ab7f4eea93213f9edf9b5e832f561ac25a36166413390d6190fb7ef3c8ab0bfe1a1d7f1bd"}], [{{0x9, 0x5, 0x1, 0xc, 0x10, 0xff, 0xf6, 0x8}}, {{0x9, 0x5, 0x0, 0x8, 0x400, 0x1, 0x40, 0x8, [@generic={0x44, 0xb, "7b7c32c1bdb4970fcf112b1f0d435fb84c1b0555539af41fd04f23e15a01e01aec4ff626612850138025d4e79b300323fc01714852ac460b4ab898b7e49643835cb3"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x400, 0x7, 0x7, 0x28}}, {{0x9, 0x5, 0x9, 0x2, 0x10, 0x7, 0x3, 0x9}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x9, 0x1, 0x3}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0xf6, 0x4, 0xa, [@generic={0xc1, 0x1, "3edc996fe428d831f43ff92c64810e297cd4570ffe6b3f3913b1ca462f54bae16db99cc7a1e990f332f6f05a6762f74fa1f80c578ea9f433cedbc2ef0a253e9d5f9c5a3683535912fa1c260982bc5d57e2006ced9f41447e5239a1facf7327bdc9b0859941a42e9e95b27f45fadefe4c95d9f9f8b60fb9129fc21a71decc4f2cf91ac7f03b623ec551d63b2980bf822574c7a8dbb6fb4ce151e3a3ea5fe84306a8681d1311e959c2f821e2d9a09abecb1dc5dc971c52e9a0da8afe1b35abc4"}, @generic={0x7, 0x22, "07a2f63387"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x2, 0x4, 0x35}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x1, 0x9, 0x4}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x9, 0x4, 0x7, [@generic={0x101, 0x23, "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"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0xff, 0x4d, 0x0, [@generic={0xc3, 0x37, "28ebe191fff3fbc356077c9d10b414e5ce5750fb630c59d78dd908a0af2ad10d4eac8b3c8ea08457efe9227ac4c94a3a5850d226f41270d7f18f6161eed3beccbd5fcf932ab5f4cacbb90a321b013caa51128707f6f869e5fd56155f868c762272c902b50e6fcaa92c8104b762b705a068cb284793705ccd0cffe7e8f7d6ee314adefcb173caf3bb742504f9bad6223006989ab413c99f514e345b47b0f702bdf7cccbcf33577dc1af0174f41efc12e6428c2a6c0fbe8b43b51e57fd41ca70f473"}]}}, {{0x9, 0x5, 0x5, 0x14, 0x400, 0x4, 0x1, 0xfb}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x0, 0x4f, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xfff7}, @generic={0x91, 0xe, "cf701dfc9bae2d03a984c6552f71fdf37e16fdbd2495f556679210d044cd4ac1810f7ee7563e0566079400f3c0148ac22fda8d813f4f6176da609fb7c6e5bd69cf5ada1e289e9fbb53492fdebf5cc71a46f641c454a00ffce41172e6aa7d46110a7d2c180c1c237c9e65d35673114a3662972cfdcf617f251a18a680fef84c294c0a82e20b15399ae78510619c7013"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x2, 0x99, 0x3, [@generic={0x69, 0x9, "b901af2d0ac100ef9c7f63e8d4adca6b5a6272ee78a0d4c9d814e3ecab8b33471e7317b93b69faa0d0ff521510fd3a1800200f40611e17d69beff49b8430b3a6719dbda4ef24143d2743a6b16cb3e6427674c59189f013cd01bdfb9b314f3c9b980bfda948ba2c"}, @generic={0xe7, 0x0, "84bbc027780086086506a0f96991c7e82034e65aac9b73908aeaf8c116953c99450ab4cdd5774d576c5f93b3893cc5e56c6a8f320d6df70b4eac3b3796e9a123e7a66b9662eebb88209f126b026d30348442f5624775744fc45ae5c64b03da97c38500bb9b1fdef4ae425c74c8c305337f25831eb5664b22ee7b08cb816d697ba054d4f2b05e4288c1eedcf15ef3b61a982ca15a312f1384516e1045ac8bf5388d154dcaeb4b8e29bb34cae257f488eccd67a08e8a690a882cb49e6929631848f23b2b49db6be3850b9d521e91af548a051c372be6629c6acd2ed661dfa413f282727e1765"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0xb, 0xc, 0x4}}, {{0x9, 0x5, 0xc, 0xc, 0x40, 0xef, 0x8, 0x81, [@generic={0x45, 0x21, "9d4367ce20fb528865c9a8e69178f117f8b9eb0b350369053d5f11167bd2a4dbad348967b721a4ca008bb9564e98f1e4e0b5c4ef3fb36c983467ad7c0950b81af9500e"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x1}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x3, 0xb8, 0x80}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x200, 0xfa, 0x10, 0x89, 0x40, 0x96}, 0x110, &(0x7f0000000940)=ANY=[@ANYBLOB="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"]}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) futex(&(0x7f0000000000), 0x8, 0x1, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x200000, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendto$inet6(r3, 0x0, 0x0, 0x8000, 0x0, 0x0) symlinkat(&(0x7f0000003200)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') 3m33.840822013s ago: executing program 2 (id=93): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000000)='./file0/../file0/../file0\x00', 0x800, &(0x7f00000000c0)={0x1, 0x70, 0x100000}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') close(r2) ptrace(0x4206, r1) tkill(r1, 0x12) ptrace(0x4208, r1) ptrace(0x11, r1) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x1000) 3m33.838316543s ago: executing program 2 (id=94): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xc25, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x4}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000100)={0xc498, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r4, 0x10000000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setregid(0xffffffffffffffff, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r7 = dup(r3) syz_ublk_setup_queues(r7, r2, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x2, 0x33d, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x20, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="020000e70000000000000000040000000000000010000000fbba00002000000700000000"], 0x24, 0x0) rmdir(&(0x7f00000001c0)='./file0\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write$binfmt_script(r8, &(0x7f0000000440)={'#! ', './mnt/file0', [], 0xa, "c2bc5dfb33c2199b3febec6003b6ac1d07388becfecc8163b0b3567218ca093586ce717188bef0bac91548ade822044f0cf1fc1a60b1a1672dde2205bb617df1f9802bec"}, 0x53) 3m33.799583105s ago: executing program 2 (id=95): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) (async) clock_adjtime(0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000363000/0x4000)=nil, 0x4000, 0x17) (async) getsockopt$bt_hci(r2, 0x0, 0x3, 0x0, &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) (async) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000005800)={r1, 0x4}, 0x0, &(0x7f0000005840)="00000001", 0x0) 3m33.762936917s ago: executing program 2 (id=96): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') pread64(r1, &(0x7f0000000280)=""/168, 0xa8, 0xe0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x68411, 0x0, 0x17, 0x0, 0x0, 0x0) 3m33.69551904s ago: executing program 2 (id=97): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0xfffffffffffffcfb, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x0, 0x8, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_RULE_ID, @NFTA_RULE_HANDLE={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @payload={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @objref={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x0, 0x2, 'syz2\x00'}]}}}, {0x0, 0x1, 0x0, 0x1, @lookup={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @dup_ipv4={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x0, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x0, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x16}]}}}, {0x0, 0x1, 0x0, 0x1, @hash={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x0, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_SREG={0x0, 0x1, 0x1, 0x0, 0xf}, @NFTA_HASH_SEED={0x0, 0x5, 0x1, 0x0, 0x6}]}}}]}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}}, 0x20008000) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0x4, 0x0, 0x0, 0x40, 0x0, 0x81, 0x0, 0x0, 0x3, 0x1}, {0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x40}, {0x200000, 0xa, 0x21, 0x3, 0x9, 0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}], 0x2000003}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = fcntl$dupfd(r3, 0x406, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x0, 0x1, 0x0, 0x13, r4, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, 0x0, &(0x7f0000000080)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) getxattr(&(0x7f0000000280)='./mnt\x00', &(0x7f0000000380)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040490d0070010001020301090227000101008032090400000308065000070501020002000705820200020007058303fcb5"], 0x0) 3m17.927371452s ago: executing program 32 (id=97): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0xfffffffffffffcfb, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x0, 0x8, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_RULE_ID, @NFTA_RULE_HANDLE={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @payload={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @objref={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x0, 0x2, 'syz2\x00'}]}}}, {0x0, 0x1, 0x0, 0x1, @lookup={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @dup_ipv4={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x0, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x0, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x16}]}}}, {0x0, 0x1, 0x0, 0x1, @hash={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x0, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_SREG={0x0, 0x1, 0x1, 0x0, 0xf}, @NFTA_HASH_SEED={0x0, 0x5, 0x1, 0x0, 0x6}]}}}]}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}}, 0x20008000) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0x4, 0x0, 0x0, 0x40, 0x0, 0x81, 0x0, 0x0, 0x3, 0x1}, {0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x40}, {0x200000, 0xa, 0x21, 0x3, 0x9, 0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}], 0x2000003}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = fcntl$dupfd(r3, 0x406, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x0, 0x1, 0x0, 0x13, r4, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, 0x0, &(0x7f0000000080)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) getxattr(&(0x7f0000000280)='./mnt\x00', &(0x7f0000000380)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040490d0070010001020301090227000101008032090400000308065000070501020002000705820200020007058303fcb5"], 0x0) 3m0.885189365s ago: executing program 3 (id=222): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8931, &(0x7f0000000200)={'dummy0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x51e8994515ff0224, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f00000001c0)) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000100)={r1, &(0x7f0000000000)='dummy0\x00', 0x44000, &(0x7f0000000040)={@align=0x100, {0x0, 0x3ff, 0x5, 0x7ff}}, 0x602, &(0x7f0000000080), &(0x7f00000000c0)=0x10000}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) 3m0.868166255s ago: executing program 3 (id=223): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, 0x0, 0x20000000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x68, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9d85}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x8080) 3m0.807646688s ago: executing program 3 (id=224): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8) r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000010ef17ee6000000000000109022400010000a00209040005020300840009210000400c00000000000000ff03801587"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 2m57.825882999s ago: executing program 3 (id=232): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f00000003c0)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x806401, 0x0) 2m57.771160201s ago: executing program 3 (id=233): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$TCFLSH(r2, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405a04105201010102030109022000010100803209040000020806f500070581020002000705020200"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m57.667400616s ago: executing program 3 (id=234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r1, &(0x7f0000000140)=""/15, 0xf, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'wg1\x00', 0x2cd8505ede88913f}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000040)=0x7, 0x4) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0xb60, r0, 'id0\x00'}) r3 = syz_usb_connect(0x0, 0x17d, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r5, 0x4a, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r4, &(0x7f0000000140)="bf", 0xfd62, 0x0, 0x0, 0x2}]) 2m57.638392168s ago: executing program 33 (id=234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r1, &(0x7f0000000140)=""/15, 0xf, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'wg1\x00', 0x2cd8505ede88913f}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000040)=0x7, 0x4) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0xb60, r0, 'id0\x00'}) r3 = syz_usb_connect(0x0, 0x17d, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000fa5c531046084010c9d00102030109026b0101000000000904620202436f1f0009050802100000fa00cd08dfa9a5fd67f84bd21113acd7fc0e3b35824deb14c9ec5d483d62169d56171de8bc4bc98d302e503f95cf970fcea2490ec47e33f438ea21d7203978d5e2904b6966f7096cf08bba8ddb7691bcbc9ce2c5760af21822ed33fc12b88222be6b3b70d8595ba08893f644fa53c1c55ad648952a80f17ece8bff775682c9a5167111725b5484fd0ab5d334dcfbe28eb0e02bd0fa90c776e4997388fc9442fd3e8657ac92601fd61a184cf49d513b7bf7cdcebe6423101690e5269a5b2be351ef182d84744d9664f21b1c4bd8c72c0905820240"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r5, 0x4a, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r4, &(0x7f0000000140)="bf", 0xfd62, 0x0, 0x0, 0x2}]) 1m49.711814766s ago: executing program 4 (id=450): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0) write(r0, &(0x7f0000000c00)='0x', 0x2) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) 1m46.691604738s ago: executing program 4 (id=466): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000080)=0x200, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xc, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x200003}, 0x1c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe0000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000000c0)="0f06b9800000c00f3235010000000f30b9800000c00f3235008000000f300f01c966baf80cb80416268bed665cfcda66b869ecfe27d3b1d3b1b166400f6614a90fc7720cb9800000c00f3235000800000f303e3666450f38813b", 0x5a}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m46.533443045s ago: executing program 4 (id=468): sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000ed0300022abd7000fcdbdf25687ae8aea68433f642afe62ca2c066b29c2c6e618f92f542f862dec5c3e63ff9d036b972791cdaeee66e8cf20cd02cbb459dffb5bcc8171a44b649166ccc02e65fee40e3eeeca6806675004f"], 0x8c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001680)=""/4104, 0x1008}, {&(0x7f00000005c0)=""/189, 0xbd}], 0x2}}], 0x1, 0x40030002, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) (async) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000203030000000000000000f6000100000800010001ccc9718789af63f707e1ea64a9a79b15e4bb287db2155a88c8b4576e920fd31a988b58"], 0x1c}}, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad101020301090224"], 0x0) (async) ptrace$setsig(0x4203, r2, 0xa, &(0x7f0000000000)={0xd, 0x8, 0x8}) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x6, 0x8ae83) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r5 = syz_open_dev$loop(&(0x7f0000002500), 0x10000000008, 0xd18135cf55169abc) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000000)={r3, 0x0, {0x2a12, 0x80010000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x7, 0x1c, "0500000000000000d1f8a0e91ddaaca79603dda1af1ea80000000000edffffff0000deff00ffffffffffffffe300000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061acfc3fdc15dfb8ea28000000000400", "90be8b1c55f9640000000000000000000000000002000000efffffffff11e4ff", [0x800]}}) (async) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000000103011c66f708e22a7e7a00020000000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) 1m43.479447349s ago: executing program 4 (id=473): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x217, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x24, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x3e, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x630, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218"], 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0xc, &(0x7f0000000100)=0x13e60, 0x4) sendmsg$netlink(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="240000001e002907000000040007430000000c00"], 0x24}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, 0xffffffffffffff8c) 1m43.362210694s ago: executing program 5 (id=474): openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = syz_kvm_add_vcpu$x86(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000140)=[@code={0xa, 0x50, {"48c7c00000000148c7000000000048c740080000000048c740100000000048c740180100000048c740200100000048c7c11300020048c7c2000000010f01c1"}}], 0x50}) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x0, 0x0, 0x31237648}]}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000000, 0x0, 0x1}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)={0xf}) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f00000001c0)={0x6, 0x0, [{0x803500fad85f7eda, 0x5, 0x2, 0x6b, 0xc518, 0x0, 0xfff}, {0x1, 0x200, 0x2, 0x3, 0x4, 0x8, 0x4dd5}, {0x80000008, 0xc, 0x7, 0x4, 0x7, 0x5, 0x16}, {0x2, 0xdf4d, 0x7, 0x8, 0x4, 0x0, 0xa749}, {0x2, 0x8ff, 0x0, 0x7fffffff, 0x4f, 0x0, 0x1}, {0x80000019, 0x1, 0x5, 0x8d, 0x40000000, 0x2, 0x8}]}) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m43.259831659s ago: executing program 5 (id=475): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000240)="c4e1f55783000000000f01cb648f3566ed0f01df0f0143b84d001a750112120000eb800f01d96666d004ecf20f080fc2c5c754ca41009a8600000044240275000000c7442406000000000f011c24", 0x4e}], 0x1, 0x22, &(0x7f00000000c0)=[@cr4={0x1, 0x70861f}], 0x1) 1m43.123966706s ago: executing program 5 (id=476): setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x1}, 0x4) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x46900, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x0, 0x0, 0x4, 0x84, 0x0, 0x3, 0x7}, 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x90, 0x0, 0x2, {0x4, 0x3, 0xbd18, 0x5cd3f9da, 0x7, 0x7, {0x0, 0x5, 0x7, 0x6, 0x80000001, 0xf, 0xa732, 0x8, 0x7, 0x1000, 0x101, 0x0, 0x0, 0xffff0000, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/4098, 0x1f000}], 0x100000000000012a) 1m43.100944587s ago: executing program 5 (id=477): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m40.421735833s ago: executing program 4 (id=492): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x3, 0x6, @remote}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000020c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002100)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000003280)={'erspan0\x00', &(0x7f0000003240)={'syztnl2\x00', 0x0, 0x0, 0x10, 0xaa96, 0x5, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x66, 0x0, 0x8, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@generic={0x94, 0x8, "c2bf239701a8"}]}}}}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003a80)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000000)="baaa70a2c9b877c099a32ada6de84cbedcba13273d621a1856a3a4c83d430cb5e33f693df4a6df434097acf45dd6769259deb6aab4f58066e0b808f46dab0dc999cb47ec0af6ca24fa78d1ff1a5031078a970545a4384390d49070ee9952e6550d4f058091f5cca95c3a1dc1e475fcb253e89247624e6774b7fc5f812ef89cbd50ce11ffe5e0c0026230ba28401ee5d60ac565e561b6d0604c4b6531ab52bff720f1ed3e193b97c417c293fb7a32879fc9d21194a1c11b98e15eb02e11f1ba762aa653d380763ecbff713b28f71657ca80bf69ad8028cd9e5e55c49bc1e4", 0xde}, {&(0x7f0000000340)="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", 0x1000}], 0x2, &(0x7f0000001380)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xdac}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000013c0)="6c896cddb888a434c42945eda172cda5bb5c1973661619a306dd7cffec", 0x1d}, {&(0x7f0000001400)="6f39d0c6eb213b33c09a34602fe3bb2124773e2298bc0460855be6fffd43a81c27bffb6d661a728fd18ba6e25585e785bfbbce09a99a3c34322dd0050bda186115e5bcd5bea8ae493b610bc21c107cdf0efcbc4cb411a1fa2afb41c0f54493ab5db377829e3fe983bb12741a3737fb5b730d42cae90905a08bed1db30128f333b396990e3bb18ddffed3277d568b70191d61a5b7f9c4b261f421d4ab5602ed1157d0907eaf97070ec985df833b12bfaed1ec", 0xb2}, {&(0x7f0000000140)='P', 0x1}], 0x3, &(0x7f0000003c00)=[@ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0xff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @broadcast}}}, @ip_retopts={{0x64, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0xec, 0x1, 0x1, [{@loopback, 0xf5}, {@local, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote, 0x9}, {@loopback, 0xff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00}]}, @timestamp={0x44, 0x20, 0x5, 0x0, 0x9, [0xfffffffd, 0x4, 0x8, 0xf, 0x1ff, 0x9, 0x80000001]}]}}}], 0x100}}, {{&(0x7f0000001600)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f00000019c0)=[{&(0x7f0000001640)="33b21efda742def21480f9b3d61acb3d410937c67b796a06def83c6f0259b2dac196f70e6b8482e68e5d3473d9fcd0d9126ea1cc9ab46555b1c8192a1ca9c8bc4a7865048497b162bff50d1d5ef77efa5c314ca388dd463f5f4aebab27ba8e3ff2556277ec23a48479eb087cbdb6ecc20b97ce502beb6d7fc25b28aea9eda5abbda4874488250da7286010dc4ef84e75ef9d", 0x92}, {&(0x7f0000001700)="cd59834aec9bcd60d6190c11e9447fad44f938635086e577200f7a3a3971acc913d71de26c1b86a0693654b101ff2e046a5ceada79f1486eb43ac2990c5b89b8c6c6953cf7dd15c17d2c17e3e8d7633c9847d3160fedc9a4b75084d9cee9394a1b3cdb93f766cd110c01be1a4cdc0ecbf1caccc09a2803a6ebdf469b0d7a4d1637e61d6714976ea052b2139e82e41402bc580e27db7ecbe0ebdd6e86e77d9bdae78c5707c52bcc5b8ccde09b7c3729bddec2d04f4a60d70e308d0b1e08515d0d5a055c96a604529fda55b52e8afe16a2", 0xd0}, {&(0x7f0000001800)="2ccf2f5561ad554b5384b4805c9c72bb769cb965306642a37cad218ff76f331ece1472874b8467416c192ced8ef19fa4778095a3ac83059283c7cc5566e13918624d88d41ec2656669eb4c649cf0551a21615b03fee6fe415422bb220b6fd2", 0x5f}, {&(0x7f0000001880)="05aae90669ea947541b0c8a5639fb74285eb61b8599babf5d1c8ab0fec99e9d6d58d96e64645d1efbfa3f4308a34963742a8cf7d8af3d1bc061807191dab8b2d6a64dd1f6671a24c1c5ad8777d1ac5b20922d4e4ff313ab4f95e9371b085a5ec64ccf619793da51e2828691e0fa3862a7275", 0x72}, {&(0x7f0000001900)="64fdaed96d9ee7f38379f399497c029aba0b76dbe524d035c084ac88bf693fc3c1be3c06f89feb4c1add8f59db6d6b1896be6651798f0c931f57683f32ae148716e14a931f04de", 0x47}, {&(0x7f0000001980)="ab0f9262004055121e79bc425dddfd4c806b88c2f5aad86904", 0x19}], 0x6}}, {{&(0x7f0000001a40)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000002040)=[{&(0x7f0000001a80)="f1c892a3fc3b40c5481c", 0xa}, {&(0x7f0000001ac0)="3b61b9414560a7855adb3ed1969593d7d692c16afe096361b33e21af988fb1268e1cb9cad5d54c8bffc71ed4e3af2e493887d0a1960593368685a33564aff3582f156e6ce7ed68ee841c1db9c9dff8c42d4369d02bde370017a6b40acd13731772a17a21c535615794b6fa77d60fa7983e963eb2245a07ec7d8301264923305c267d8265c1b0f125b374f3162cfdd32032e6e72489dac3877bdfc1ab557ec1b407e884a7d7ef9cf55badb02eab48855ece38891d308509b42f74fdfa2e1f7fb618a37a5335e71abafad6331f1e8b820efe5fe66d0691368ac645776b1f30e1dcd14a48369b042d2c47ac5879b95000c8e1", 0xf1}, {&(0x7f0000001bc0)="561da34ecbdb99d69b9abcfe05f2c8ac7e09f2cfcb6b9627f671359675f0e115deb81c1d2113416e37d9391084f71fb8f24a8dcaa220584e9c268050cb069d4e1f3cb685a46214a7a8027193afa1721c0633f6e851a7e6ff386296f2998438298ef25d3bb098fcc78a951dbc356b5606b4cb374d731d519e1036fd088cb45243c628d4189a19a25b302fab538e0f5ee9c210f4f0c35311980c9069024be52176954be5885df51dc394b7f1a5dd39feee3ea6854eb4e5", 0xb6}, {&(0x7f0000001c80)="bcef640023425d1e540962a764cf8413aa7abf13c8961d8ee00bafa09340f413a75d25d541cbe372458ba1e56c4ce06e65f07fbcd7cd8455fa14b07e608ef46eb9ebed52ac2f6c06d0c5b2d9cf6cc1b87c12bf04e7b301a2a33880dd25b70641b3317b64576c58b811284a380b9d443b7e8717e0090fe6f461b935c831a6a36f782e4b2efeb46115cf47d94b0da91b4346ffea557402b596d7628dccda2259ae777d6645ba933bafa92f312916f003e97c53d25352c57e8a3578b716ee69935d1e6cf44ef6d6550f182c", 0xca}, {&(0x7f0000001d80)="cce92dc25d8c25457e281812b4d4e0b8ed850a5e78e3da5fb1f5ef55477b7567887547ffe89818b9510864fe3a6aa57baee6a28d7c1ee8470a2acd75a79cf568ef10b23ed362067b45079380ab9d18a1dca594ba42b855517aba7796cd8932a2b98a17440483a357a68d94636b3e15d88378de42862366a4fb565e18818f8f3f0ce4722f6ef3d5d753065ba3c5205f89fe170a3e", 0x94}, {&(0x7f0000001e40)="8e04e387ab5767f4db1fe526c16a4a1edfaaa240d3cc23206b2abcd0bd8c8576c67616772bec7f7b409cc6d45154009676344f6643fc8f86a387626b440fe0a5b72b58d239262e6865b0bdf46a7583580d661144a179fb9cbf3de7741e12c9c23568a436a65399cb575da16c962ef1eb6dafc89f9de3ce0be4e26910ad132992c2949e64cf985837f46096877cf128854d7cb728e53d98235c66c1d8def1821d50e3e0fbc13aea02a142387cc049b28a3f4dbff505c31ab946060047af475f1758be0b30689945b7bbfd0cd53f0dd1c7b43b3ccb6c8690dc433ac61a80474f69c4ce3cd87aecc834329c1730cfe8635d659239fce36735", 0xf7}, {&(0x7f0000001f40)="d7a062946e171835725a65056c852e0e11c284fdeea98eab93c4935af7fa34cf338d83e63f8ceac31ce7cc75b1906c4c9921c13d495d434acc108cdb6ae00a350a80bf3ea7acc5e33b1f2cf5d55ff26540df7e0313c859b8cefb0bba0353206bf27126e6dadac4661e226decb1063a037965fc36f3d2d11c5d05f0dc1bca72fbcd199be25df0a0cfc598e7772edcb5ff26b00f97699e95772a75c75d6432594e0e0d05e236e219882b61571767af145f503e2cb045d5e3cf6d15737950d96b359f56e9b497a960945dd722f04fae863033c3a53c6ca59580d61ee43d79", 0xdd}], 0x7, &(0x7f0000002140)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @multicast1}}}], 0x50}}, {{&(0x7f00000021c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000003200)=[{&(0x7f0000002200)="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", 0x1000}], 0x1, &(0x7f00000032c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast2, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x80}}, {{&(0x7f0000003340)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000003900)=[{&(0x7f0000003380)="582e0f87cfde91", 0x7}, {&(0x7f00000033c0)="b36392f52a07c09d2f93e0e5b9f7ff129a31d3f00b53bbf802a070b509d54cd02a0aef51752cf3dfe31c91878924feec0790e4b89148211d9095262bcc3535aa8e656319887d54c4b1e1a8209d79c2d1dc2f10c4b88880fa30b896959b71c9fecf2f7eaf9f009b22580628a52b271417a515ed9a08c044dfb5cd7f12", 0x7c}, {&(0x7f0000003440)="4af216dc97d393c49d75b9013140ffc92b5bcea5b6490a19ef8fc1851e241e2254c95dd5445beed96db91bfe3f9f64bb", 0x30}, {&(0x7f0000003480)="73eceaf0627fd84003a56aa8c2a1da999dc8d73395baf5381783d5baa98bb3322263dc105235972d92c46fe659e34c5c7a8b02798bb3cb5ad00de2149e5a75bdc59e701332b36f459869ef6c370550097513c8d9990eb4800f272319a4e110e815c6f8a5c54114e247499de0912cab18592deb5b94a01fa04ba2ccdc9e05f2435252cd52cc11f77361016a1e044b59059747ec", 0x93}, {&(0x7f0000003540)="5f471587c1cf6ffae3fb489d7d0e0c449cda2f3134577f7f24c2f1f07cd7a969dc6d70ac31cfbdcd304e61656cfed4616b59ff55832aad052eda836feb152b94b3266c4fe4d205471ddf8b5a0ea7c3b6583fe095486f3767ce37619896cde68ad59b2602ce67375a306655bdfdbe28b2a4607a1ea5be402d03a7ed9a196390b6fd0d47230e0879f51b8c1a84c2a5a7246b77ffbc8096a5d46faf9174d3807bb0a62891", 0xa3}, {&(0x7f0000003600)="8124cfb777e9f70c1ecb05a9581469d2b673a8c7276c5c1cb70fe57e9dbf59a0fe60044efcb373309946f2aefba2924e73c4750326494e313eca03d305df4a454f6d98a9851e7487becd786446baea", 0x4f}, {&(0x7f0000003680)="a84b28b6d8fa9231ee831a0ecb324eb31554fc974e441b6f2b2f25a6536d4c235e76f172a43eab3cd87dbfe929336919b0f8b3fc4437d0ac0a4d2279817e9fe7d7209fd6915fddb77efde0887a8116b496129215b80c33bb29d9513984197c93ad80f813d8626c7598015f7e0e0a411396dffb192117c816426c30c17497650689ae16f5be99e180b8cc05a646b9d5e542f142f55b5e4346837d1fa8b63e526b0cf724ed1886421cdd6ca93fbb49c201a31466db7eed700a722c46b6c7aea44b81a4fbd2d8d179d7e603e8f878240c68071bb4125dbf9b9050e82408681c42d8faa216d3e608eb8f7f0932d05c3bd927f698", 0xf2}, {&(0x7f0000003780)="a066d5f7959874c5a4289bca12348897003a8a28487128cf88b8d2b06de998c90aae027686ec0a7b02389fbc8a68c571e852d0f03b5649bff74f5d0b733de9186a7fbf1e1fc65ccabb60153209259f57d8d8ef4c55efee5520", 0x59}, {&(0x7f0000003800)="2a726d295d70d42adffe4aa77ecc70ba2d5a7f0218b092033e611309f413608ef51e7621e5a7094fc832", 0x2a}, {&(0x7f0000003840)="8966d587cf77f1ca80a583b218629131649654eb1482f393fb4cd9b82288d1f3be03c0c6612e0a87f2f66df0cc037abb866f4b97523295db3d9b5cbe02f2aff2b1903805adfda9647746a6982f141dfe08d4b1d762f99101831d3761228db6b8521010f4b6cd75ee75999d970c3210e1125d651426d9788e2d56067ec5b267021049d6880c3a82d4510dfd893f", 0x8d}], 0xa, &(0x7f00000039c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff9}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0x70, 0x3, 0x2}]}}}, @ip_retopts={{0x70, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x41, 0x0, 0xf, [0x4, 0x9]}, @noop, @timestamp_prespec={0x44, 0x14, 0x9b, 0x3, 0x4, [{@multicast1, 0xfffffffd}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffe}]}, @timestamp={0x44, 0xc, 0xd6, 0x0, 0x7, [0x3, 0x8]}, @ssrr={0x89, 0x1f, 0xfc, [@multicast2, @dev={0xac, 0x14, 0x14, 0x1c}, @loopback, @loopback, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x86, 0x12, "193cb6f4c2a6e1d04a794aba419c0ae8"}]}}}], 0xa0}}], 0x6, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r6, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x68411, 0x0, 0x17, 0x0, 0x0, 0x0) syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) 1m40.378248705s ago: executing program 4 (id=493): r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$sock(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="64000000100001060000000000000000000000003f000000000000000000000010000300766574683000000000000000100012000800010076657468180002000a000100000002000000000d05e2cf6c50a3070010000300766574683100000000000000", 0x64}], 0x1}, 0x0) 1m38.952847062s ago: executing program 5 (id=499): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) (async, rerun: 64) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(0xffffffffffffffff, 0x40786e88, &(0x7f0000001540)={{&(0x7f0000001100), 0x0, 0x40, 0x5, 0x400000000000a1}, {0x0, 0x0, 0x10, 0xfff, 0x5}, {0x0, 0x0, 0x8, 0x3, 0x16}, {&(0x7f0000001340)=[{0x4, 0x8, 0x9, 0x9, 0x2}, {0x1e, 0xf2, 0x8, 0xfffffffffffffffc, 0x5}, {0x3, 0x6, 0xffffffffffff40a5, 0x5, 0x80000000}, {0x3, 0x0, 0x1, 0xa, 0xc}, {0x7fffffff, 0x2, 0x1, 0x200, 0xfffffffa}, {0x8, 0x5, 0x6b, 0x4, 0xfffffff9}, {0xf68, 0x0, 0x0, 0x0, 0x7}], 0x7, 0x28, 0x2, 0x2}, {&(0x7f0000001500)=[0x8, 0xfffffffffffffffc, 0xba, 0xffffffffffffffff], 0x4, 0x8, 0x8000}}) (async, rerun: 64) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000080)={0x200000, 0x200000, 0x9}) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) (async, rerun: 64) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xb, 0x0, 0x0, 0x0, @binary="56ccabd869c203"}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0xc, 0x102001) (async, rerun: 32) r3 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000008, 0x12, r3, 0x9bf8f000) openat$ttynull(0xffffffffffffff9c, 0x0, 0x82084, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) (async) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x3}, 0x20) (async, rerun: 32) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) (rerun: 32) r5 = accept(r0, &(0x7f0000000100)=@isdn, &(0x7f00000001c0)=0x80) recvmsg(r5, &(0x7f0000004880)={&(0x7f0000000200)=@l2, 0x80, &(0x7f0000004800)=[{&(0x7f0000000280)=""/48, 0x30}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/66, 0x42}, {&(0x7f0000003640)=""/159, 0x9f}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/212, 0xd4}], 0x7}, 0x10000) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m38.837859697s ago: executing program 5 (id=500): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0x0, 0x0, r0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000700)={'syz0\x00', {0x1, 0x400, 0x0, 0x7}, 0xe, [0x9b, 0x4, 0xbd, 0xffffffff, 0x1000, 0x8, 0x2, 0x9, 0x0, 0x2, 0x2, 0x6, 0x7, 0x1, 0x7f, 0xa, 0x3, 0x4, 0x3895, 0x100, 0xfff, 0x63, 0x1, 0x8, 0x2, 0x1000, 0x8, 0x200, 0xdc, 0x4, 0x1000009, 0x80, 0x8, 0x8, 0x3, 0x9, 0x0, 0x1, 0xc43, 0x5, 0x6, 0x5, 0xfffffff5, 0x1ff, 0xfffffff9, 0x8, 0x352f, 0x6, 0x0, 0x101, 0xb83, 0x8759, 0x9, 0x3, 0x0, 0x800921b, 0x54, 0x7fff, 0x6, 0x7, 0x9, 0xd, 0x6, 0x5], [0x9, 0x2, 0xfffffffa, 0x80000000, 0xf, 0x4988, 0x10000, 0x3, 0x1, 0x6bae, 0xffffffff, 0x4, 0x40, 0x6, 0x6, 0x1, 0x10, 0x1, 0x5, 0x2, 0x9, 0x81, 0x6, 0x1, 0x0, 0x5, 0x80, 0x2e7, 0x2, 0x200, 0x5, 0x201, 0x10000, 0xee9, 0xfff, 0x5, 0x4, 0x9, 0x80000000, 0xffff8000, 0x8, 0xfff, 0x4, 0x250c, 0x6, 0x3, 0xd, 0x9, 0x80, 0xd, 0x4, 0x2, 0x401, 0x1, 0x9, 0x330a, 0x1, 0x9, 0x1, 0xfffffffe, 0x6, 0x2, 0x7fff, 0x8001], [0x1, 0x7, 0x1000, 0x4, 0x3, 0x4, 0x7fff, 0x200, 0x9167, 0x2, 0x7, 0xb5, 0x10001, 0x7, 0x0, 0x6e, 0x6, 0x67, 0x6, 0x8, 0x1, 0x2, 0x5, 0x10, 0x7, 0x3, 0x9, 0x7, 0x7, 0x5, 0x0, 0xffff, 0xa, 0x7, 0x1, 0x1, 0xffffffff, 0x80, 0x1, 0x8, 0x8, 0x4, 0x63, 0x6, 0x81, 0xc, 0xfffffc01, 0x6fd6, 0xffffffff, 0x10000, 0x1000, 0x7, 0x5, 0x8, 0x2, 0x6, 0x101, 0xe, 0x80000001, 0x6, 0x7f, 0x4, 0x6, 0xdac4], [0x6, 0x40, 0x6, 0x80000001, 0x200, 0x400, 0x3, 0x80000000, 0x8, 0x9, 0xffff, 0x10, 0x9, 0x7, 0x5, 0x3, 0x0, 0x20c, 0x256c, 0x1, 0x7, 0xb, 0x7, 0x10000, 0x4, 0x0, 0x3, 0x8, 0x5, 0x4, 0x7, 0x9, 0x8, 0x8, 0x7, 0x8, 0x1, 0x3, 0xffffb6de, 0x7f, 0xb7, 0x212, 0x4, 0x5, 0x8, 0x7, 0x80000000, 0xff, 0x7, 0x100, 0x10, 0x1, 0x1, 0x6, 0x1, 0x3ff, 0xffff5c94, 0x3, 0x4, 0x9, 0xffffffb0, 0x200000, 0x2, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {0x2, 0xf, 0x2, 0x3}, 0x8, [0xa, 0x4, 0x401, 0x7, 0x8, 0x5, 0x3c, 0x4, 0x9, 0x1, 0xff, 0x2, 0x4, 0x1, 0x100001, 0x2, 0x7ff, 0x8, 0xfffffff2, 0xfffffffb, 0xf4b, 0x0, 0x1, 0x9, 0x2, 0x9, 0x5b, 0xa81, 0x10000, 0x8, 0x1, 0x5, 0xff, 0x7, 0x6, 0x3, 0x1ff, 0xfffffffa, 0x4, 0x3, 0xc, 0x400, 0xdf1c, 0x10000, 0x1, 0x80000000, 0x10000, 0xffffff37, 0x81d, 0x800004c, 0x16e0000, 0x0, 0x9, 0xffffffff, 0x3, 0x5, 0x5, 0x7, 0x101, 0x9d, 0x7, 0x6, 0x5120, 0xffff7ffe], [0x10000, 0x2, 0xffffffff, 0x4, 0x4, 0x8, 0x100, 0x5, 0x1, 0x8002, 0x4, 0x0, 0xe7f, 0x7, 0x1, 0x1c00, 0x54, 0x8001, 0x744, 0x5, 0x7d0, 0xea8, 0x5, 0x5, 0x4, 0x0, 0x401, 0x0, 0x4, 0x9, 0x5, 0x8, 0x1, 0xe, 0x8, 0x1, 0xfffffff7, 0x43f, 0x401, 0x1e1, 0x6, 0x5, 0x8, 0x8, 0x4, 0x6, 0x1000, 0x7, 0x7, 0x3, 0xc27, 0x6, 0x28d76d5b, 0x1, 0x3, 0x5, 0x0, 0x8, 0x4, 0x401, 0x8, 0x9, 0x9a38, 0x3], [0x7, 0xff, 0x8de, 0x5, 0x401, 0x0, 0x2, 0x6be2e0ae, 0x50, 0x2c1, 0x9, 0x3ff, 0x3, 0x1, 0x0, 0x8, 0x6, 0x3, 0x9, 0xa, 0x6d, 0x8, 0x7, 0x8, 0x4, 0x726, 0x5, 0x4, 0xcad5, 0x8, 0x6, 0x7ffffffe, 0x4, 0x3, 0xc27, 0xffffffff, 0x10000, 0xb6, 0x5, 0x6, 0x9, 0x4, 0xb2, 0x3, 0x3, 0x10001, 0x7eff, 0x3, 0x6, 0xa9, 0x7fff, 0x1b47af25, 0x7ffc, 0x300, 0x9, 0x10000005, 0x4, 0x8926, 0x7, 0x40, 0x7f, 0x3, 0x8, 0x5], [0x61ffd85e, 0x7, 0x1, 0x7, 0x8, 0x5faf, 0xfffffff7, 0x5, 0x6, 0x1, 0x40, 0x20000003, 0xffff, 0x400, 0x10000, 0x4, 0x4, 0x4c19, 0x2, 0x1ff, 0x401, 0x4, 0x8, 0xf3, 0xec, 0x1, 0x5, 0x51a, 0x10000, 0xde55, 0x4, 0x3, 0xa0000000, 0x673, 0x9, 0x2, 0x3, 0xffff, 0x2, 0x5, 0x9, 0x3, 0x7, 0x3, 0x60, 0x1, 0x2, 0x4, 0x7, 0x8000, 0x7, 0x401, 0x400, 0x7ff, 0x5, 0xffe, 0x6, 0xfffffffc, 0xd, 0x0, 0x7, 0x6, 0x7dc, 0x1]}, 0x45c) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r3, 0x29, 0x43, 0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) 1m24.596286788s ago: executing program 34 (id=493): r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$sock(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="64000000100001060000000000000000000000003f000000000000000000000010000300766574683000000000000000100012000800010076657468180002000a000100000002000000000d05e2cf6c50a3070010000300766574683100000000000000", 0x64}], 0x1}, 0x0) 1m23.646385203s ago: executing program 35 (id=500): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0x0, 0x0, r0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000700)={'syz0\x00', {0x1, 0x400, 0x0, 0x7}, 0xe, [0x9b, 0x4, 0xbd, 0xffffffff, 0x1000, 0x8, 0x2, 0x9, 0x0, 0x2, 0x2, 0x6, 0x7, 0x1, 0x7f, 0xa, 0x3, 0x4, 0x3895, 0x100, 0xfff, 0x63, 0x1, 0x8, 0x2, 0x1000, 0x8, 0x200, 0xdc, 0x4, 0x1000009, 0x80, 0x8, 0x8, 0x3, 0x9, 0x0, 0x1, 0xc43, 0x5, 0x6, 0x5, 0xfffffff5, 0x1ff, 0xfffffff9, 0x8, 0x352f, 0x6, 0x0, 0x101, 0xb83, 0x8759, 0x9, 0x3, 0x0, 0x800921b, 0x54, 0x7fff, 0x6, 0x7, 0x9, 0xd, 0x6, 0x5], [0x9, 0x2, 0xfffffffa, 0x80000000, 0xf, 0x4988, 0x10000, 0x3, 0x1, 0x6bae, 0xffffffff, 0x4, 0x40, 0x6, 0x6, 0x1, 0x10, 0x1, 0x5, 0x2, 0x9, 0x81, 0x6, 0x1, 0x0, 0x5, 0x80, 0x2e7, 0x2, 0x200, 0x5, 0x201, 0x10000, 0xee9, 0xfff, 0x5, 0x4, 0x9, 0x80000000, 0xffff8000, 0x8, 0xfff, 0x4, 0x250c, 0x6, 0x3, 0xd, 0x9, 0x80, 0xd, 0x4, 0x2, 0x401, 0x1, 0x9, 0x330a, 0x1, 0x9, 0x1, 0xfffffffe, 0x6, 0x2, 0x7fff, 0x8001], [0x1, 0x7, 0x1000, 0x4, 0x3, 0x4, 0x7fff, 0x200, 0x9167, 0x2, 0x7, 0xb5, 0x10001, 0x7, 0x0, 0x6e, 0x6, 0x67, 0x6, 0x8, 0x1, 0x2, 0x5, 0x10, 0x7, 0x3, 0x9, 0x7, 0x7, 0x5, 0x0, 0xffff, 0xa, 0x7, 0x1, 0x1, 0xffffffff, 0x80, 0x1, 0x8, 0x8, 0x4, 0x63, 0x6, 0x81, 0xc, 0xfffffc01, 0x6fd6, 0xffffffff, 0x10000, 0x1000, 0x7, 0x5, 0x8, 0x2, 0x6, 0x101, 0xe, 0x80000001, 0x6, 0x7f, 0x4, 0x6, 0xdac4], [0x6, 0x40, 0x6, 0x80000001, 0x200, 0x400, 0x3, 0x80000000, 0x8, 0x9, 0xffff, 0x10, 0x9, 0x7, 0x5, 0x3, 0x0, 0x20c, 0x256c, 0x1, 0x7, 0xb, 0x7, 0x10000, 0x4, 0x0, 0x3, 0x8, 0x5, 0x4, 0x7, 0x9, 0x8, 0x8, 0x7, 0x8, 0x1, 0x3, 0xffffb6de, 0x7f, 0xb7, 0x212, 0x4, 0x5, 0x8, 0x7, 0x80000000, 0xff, 0x7, 0x100, 0x10, 0x1, 0x1, 0x6, 0x1, 0x3ff, 0xffff5c94, 0x3, 0x4, 0x9, 0xffffffb0, 0x200000, 0x2, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {0x2, 0xf, 0x2, 0x3}, 0x8, [0xa, 0x4, 0x401, 0x7, 0x8, 0x5, 0x3c, 0x4, 0x9, 0x1, 0xff, 0x2, 0x4, 0x1, 0x100001, 0x2, 0x7ff, 0x8, 0xfffffff2, 0xfffffffb, 0xf4b, 0x0, 0x1, 0x9, 0x2, 0x9, 0x5b, 0xa81, 0x10000, 0x8, 0x1, 0x5, 0xff, 0x7, 0x6, 0x3, 0x1ff, 0xfffffffa, 0x4, 0x3, 0xc, 0x400, 0xdf1c, 0x10000, 0x1, 0x80000000, 0x10000, 0xffffff37, 0x81d, 0x800004c, 0x16e0000, 0x0, 0x9, 0xffffffff, 0x3, 0x5, 0x5, 0x7, 0x101, 0x9d, 0x7, 0x6, 0x5120, 0xffff7ffe], [0x10000, 0x2, 0xffffffff, 0x4, 0x4, 0x8, 0x100, 0x5, 0x1, 0x8002, 0x4, 0x0, 0xe7f, 0x7, 0x1, 0x1c00, 0x54, 0x8001, 0x744, 0x5, 0x7d0, 0xea8, 0x5, 0x5, 0x4, 0x0, 0x401, 0x0, 0x4, 0x9, 0x5, 0x8, 0x1, 0xe, 0x8, 0x1, 0xfffffff7, 0x43f, 0x401, 0x1e1, 0x6, 0x5, 0x8, 0x8, 0x4, 0x6, 0x1000, 0x7, 0x7, 0x3, 0xc27, 0x6, 0x28d76d5b, 0x1, 0x3, 0x5, 0x0, 0x8, 0x4, 0x401, 0x8, 0x9, 0x9a38, 0x3], [0x7, 0xff, 0x8de, 0x5, 0x401, 0x0, 0x2, 0x6be2e0ae, 0x50, 0x2c1, 0x9, 0x3ff, 0x3, 0x1, 0x0, 0x8, 0x6, 0x3, 0x9, 0xa, 0x6d, 0x8, 0x7, 0x8, 0x4, 0x726, 0x5, 0x4, 0xcad5, 0x8, 0x6, 0x7ffffffe, 0x4, 0x3, 0xc27, 0xffffffff, 0x10000, 0xb6, 0x5, 0x6, 0x9, 0x4, 0xb2, 0x3, 0x3, 0x10001, 0x7eff, 0x3, 0x6, 0xa9, 0x7fff, 0x1b47af25, 0x7ffc, 0x300, 0x9, 0x10000005, 0x4, 0x8926, 0x7, 0x40, 0x7f, 0x3, 0x8, 0x5], [0x61ffd85e, 0x7, 0x1, 0x7, 0x8, 0x5faf, 0xfffffff7, 0x5, 0x6, 0x1, 0x40, 0x20000003, 0xffff, 0x400, 0x10000, 0x4, 0x4, 0x4c19, 0x2, 0x1ff, 0x401, 0x4, 0x8, 0xf3, 0xec, 0x1, 0x5, 0x51a, 0x10000, 0xde55, 0x4, 0x3, 0xa0000000, 0x673, 0x9, 0x2, 0x3, 0xffff, 0x2, 0x5, 0x9, 0x3, 0x7, 0x3, 0x60, 0x1, 0x2, 0x4, 0x7, 0x8000, 0x7, 0x401, 0x400, 0x7ff, 0x5, 0xffe, 0x6, 0xfffffffc, 0xd, 0x0, 0x7, 0x6, 0x7dc, 0x1]}, 0x45c) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r3, 0x29, 0x43, 0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) 10.129187133s ago: executing program 1 (id=1070): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000000010104000000000000000002000001240001801400018008000100e0"], 0x44}, 0x1, 0x0, 0x0, 0x8014}, 0xc0c0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fspick(0xffffffffffffffff, 0x0, 0xccdd3aaf1369b769) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x7, 0xc, 0x6, 0xfffffffffffffffd, 0x8, 0x5, 0x4, 0x2, 0x8, 0x4, 0x3, 0x3, 0x1932be21, 0x100000000, 0x4, 0x4], 0xeeee0000, 0x40600}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x300b, 0x2}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x51, 0x0, &(0x7f0000000440)="64ace45ed6c393408bad899d69746bbf4fb9900f6ff89bcf3595ce60cff2b51c3728de99050d17de33e6d7c5c70f65b36af53d1f4f9968050c2ee2df7c37982cb4ca8c192a97f46ee7dfed1cc13d6842c8"}) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000001c0)=[{{0x3, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}], 0x8) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001f40)={0x8, 0x0, &(0x7f0000001e40)=[@increfs], 0x0, 0x0, 0x0}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0xc000) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x6, 0x1, 0x0, 0x8, 0x0, 0x10, 0x0, 0x4, 0x82, 0x9, 0x80, 0x0, 0xfffffffe, 0x5, 0x0, 0xff, 0xff, 0x6, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.030356818s ago: executing program 1 (id=1071): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) socket$inet6(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000001f40)={0x3, 0x7, 0xe, 0x0, 0x6, 0xffffffffffffffff, 0xc, 0x8000}, 0x0, &(0x7f0000001fc0)={0x8, 0x3, 0x6, 0x2, 0x2, 0x0, 0xfffffffffffffffc, 0x9}, 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x200000000009, 0xfffffffffffffffa, 0xfffffffffffffffe, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000003, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x3, 0xb3, 0x8d], 0xeeee8000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.049811095s ago: executing program 1 (id=1075): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)={0x80900, 0x4}, 0x18) openat(r0, &(0x7f0000000080)='./file0\x00', 0x10000, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000000c0)=0x122800, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0x3) r6 = socket$inet6(0xa, 0x3, 0x0) syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x10b080) r7 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r8, &(0x7f0000000000)='3', 0x4e) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000000280)=ANY=[@ANYRES8=r5, @ANYRESHEX=r5, @ANYBLOB="00b735a99e0c5452251a70fabb33b935137744f9255706368f2138483c", @ANYRESHEX=r7, @ANYRES64=r6]) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98000000", @ANYRESOCT=r1, @ANYBLOB="010027bd7000000000000100000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e4c0008804800008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c200004000a004e2100000006000000000000000000000000000000010000000014000200776732"], 0x98}, 0x1, 0x0, 0x0, 0x4084}, 0x2000c010) 8.659724593s ago: executing program 1 (id=1076): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000ac0)={0x18, 0x0, 0x3, 0x301, 0x70bd25, 0x25dfdbfb, {0x1, 0x0, 0x8}, [@generic="e7"]}, 0x18}, 0x1, 0x0, 0x0, 0x20008002}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="280000002100010002000000000000020a20"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) 8.659269733s ago: executing program 1 (id=1077): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) write(r1, &(0x7f0000000240)="6de7639dc322ff0dbff3a7d817fceba47f41b15020571fe42142a8f71a81fd3e7758449ce96bd1c56857cea336cf19805222b1129656cfde491e1f7e81607375633e2840ae206095793e35d5799599bc0d00bcef94fac7e18eb932c777f555c4e33b95", 0x63) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="38010000100033062cbd7000000000007f00012d65e71e00450a6d79910001000000000000000000000002000000000000000000000000000000000000000d0000fffd000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa0000000000000000000000000100000000000000030000000000000009000000000000000900000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a00000000000000010000000000000000000000000100000000000002000000230000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffff9, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x2, 0x938, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x102}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xffb5, 0x4, 0x0, 0x0}}, 0x0) setsockopt$MRT6_DEL_MFC(r6, 0x29, 0xcd, &(0x7f0000000380)={{0xa, 0x4e20, 0x4, @empty, 0x8}, {0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0xffffffffffffffff, {[0x3779, 0x8001, 0x21d7, 0x1, 0x10001, 0xac6f, 0x1, 0x7]}}, 0x5c) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000300)={&(0x7f0000000140), &(0x7f00000002c0)=""/56, 0x38}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001400010028bd7000ffdbdf25ac1e0101000000000000000000000000ff0200000000000000000000000000014e2301ff4e2400010a0000a02f000000", @ANYRES32=r9, @ANYRES32=0x0, @ANYRES16=r9, @ANYRES8=r9], 0x5c}}, 0x0) 8.578142197s ago: executing program 1 (id=1078): r0 = getpid() (async) pipe(&(0x7f0000000040)) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async) syz_pidfd_open(r0, 0x0) (async) r3 = socket(0x6, 0x800, 0x800) r4 = syz_open_dev$loop(&(0x7f0000000040), 0x7c9217d2, 0x6502) (async) syz_usb_connect(0x0, 0x59, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109024700010000080009046900000e010000082402010202"], 0x0) fremovexattr(r4, &(0x7f0000000000)=@random={'security.', '/\x00'}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="c4000000190001000000000010000000ff01000000000000000000000000000164010102000000000000000000000000000000004e2100000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000b8c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002d60000000000000000000000000000030000000000000000000000b86b6e0000010001000000000c0015005d0735000010"], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r7, 0x5220, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r8, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) (async) close(0x3) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r5) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010329bd700000dcdf252400000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f00000000c0)={@broadcast, @remote, 0x0}, &(0x7f0000000100)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) (async) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd4, r10, 0x800, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x2010) 4.078351169s ago: executing program 7 (id=1107): mkdir(&(0x7f0000000000)='./my_sysfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_sysfs\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_sysfs/bus/pci/devices/0000:00:03.0/resource0\x00', 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000000)=@sg0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002480)={0x2020}, 0x2020) 4.061631989s ago: executing program 7 (id=1108): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x14) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000480)={@void, @void, @eth={@broadcast, @multicast, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x7, 0x2c, 0x64, 0x0, 0x8, 0x11, 0x0, @empty, @broadcast}, {0x4e22, 0x4e23, 0x18, 0x0, @wg=@data={0x4, 0x10001, 0x1}}}}}}}, 0x3e) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x100, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x98, 0x33, @ctrl_frame=@ba={{}, {0x57b4}, @device_a, @broadcast, @basic={{0x1, 0x0, 0x0, 0x0, 0x8}, {0x3, 0xffe}, "3fd9f227a3c40307b0aac6d3a0868ac0e286af453b9c049c759455325744087ed698dd5ed9afb618a4256d8eb3098628a8965bbe3487b81122d506b565b278ccc85f4ec2b25e4569fc5e151353c62c6a06381541c50bb5b64aa0383e4fdd314d3814a014f579b04c3573a030c55c2de6581775c5e27e1b9fb780d66aadc35d2a"}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x3e, 0x33, @mgmt_frame=@action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x76f5}, @device_b, @device_b, @from_mac=@device_b, {0x7, 0x5}}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x16, {0x1, 0xf, @void, @val=0x3c, @val="7b7c2fc6348afcbcf0d03a40f26856f6"}}}}}}]}, 0x100}, 0x1, 0x0, 0x0, 0x880}, 0x40010) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x60, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x8015) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) (async) r9 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x4b4, 0xbca1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd8, 0x93, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xbf9f, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002218"], 0x0}, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc293, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x9, 0x4, 0x1, {0x22, 0x9c8}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0xa, 0x3}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x9c, 0x40, 0x6, 0x10, 0x6}, 0x40, &(0x7f0000000180)={0x5, 0xf, 0x40, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x13, 0x1c, 0x0, 0x3, 0x4f}, @ssp_cap={0x24, 0x10, 0xa, 0x4f, 0x6, 0x400, 0xff00, 0x1, [0x3f0f, 0x3f0f, 0x0, 0xff0000, 0xff3f30, 0xff3fcf]}, @ssp_cap={0xc, 0x10, 0xa, 0x9, 0x0, 0x1, 0xf, 0x9}]}, 0x1, [{0x92, &(0x7f00000001c0)=@string={0x92, 0x3, "1f17e9027b7af8976d6786eb6dee8dbcbdc5afc24f43f2a5da247f16a4836c49ecf70cbeba916d7d5ab06279464813a8b01061880344d49978d4ff569a4efa8a2c3f63e77b4a81373a5680362c99bde1239068c148abcfa60aabfae98330803e82cd3a44a9f57f9eae31958d8d2dc3fbebb3a2ebe697b72a5285109f704f391323c218fda004360476565ff54c4b4c4a"}}]}) 3.560210773s ago: executing program 7 (id=1113): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20100, 0x4) r2 = openat$incfs(r1, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, &(0x7f00000000c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) close(r5) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405a04105201010102030109022000010100803209040000020806f500"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.479399356s ago: executing program 0 (id=1114): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$xdp(0x2c, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}, 0x80) r4 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r5 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r5, &(0x7f00000009c0)={0x0, &(0x7f00000005c0)=[@uexit={0x0, 0x18, 0x8}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x5ea, 0xb, 0x0, 0x3}}, @uexit={0x0, 0x18, 0x10001}, @nested_create_vm={0x12d, 0x18, 0x3}, @wr_drn={0x68, 0x20, {0x1, 0x25765436}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x587, 0x3, 0xfffffffffffffff7, 0x5}}, @wrmsr={0x65, 0x20, {0xaaf, 0xc}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x4a, 0x0, 0xd, 0x3}}, @set_irq_handler={0xc8, 0x20, {0x78, 0x1}}, @wr_drn={0x68, 0x20, {0x1, 0x2}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x62b, 0x8, 0x7, 0x1}}, @nested_load_code={0x12e, 0x6b, {0x3, "36470f01c3b90e040000b817590000ba000000000f30b99c0a00000f3266b8ed008ee8400f796bfac4026d166006400f01ca66baf80cb82af8cf80ef66bafc0c66ed450f009a00280000c4a2859e1500600000"}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_amd_clgi={0x17f, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host16=0xc0c, 0x7, 0x37, 0x7fffffffffffffff}}, @wrmsr={0x65, 0x20, {0x3b9, 0x8}}, @cpuid={0x64, 0x18, {0x8, 0xe5}}, @cpuid={0x64, 0x18, {0x2, 0x6}}, @nested_amd_clgi={0x17f, 0x10}, @rdmsr={0x66, 0x18, {0x1dc}}, @wrmsr={0x65, 0x20, {0x2f4, 0x4}}, @nested_amd_clgi={0x17f, 0x10}, @nested_create_vm={0x12d, 0x18, 0x2}, @cpuid={0x64, 0x18, {0x9, 0x9}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_vmlaunch={0x12f, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x1, 0xd80, 0x1}}, @nested_amd_stgi={0x17e, 0x10}], 0x3cb}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000a40)=0x8) (async) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) clock_settime(0x0, 0x0) (async) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) (async) bind$inet(r6, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000040)=0xd, 0x4) (async) connect$inet(r6, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) write$evdev(r8, &(0x7f0000000380)=[{{}, 0x17, 0x3, 0x8}, {{0x77359400}, 0x16, 0x8, 0x5}, {{}, 0x4, 0x72ec, 0x6}], 0x48) syz_io_uring_submit$UBLK(0x0, r4, 0x0, 0x0) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x31f2552d984251b8, 0xffffffffffffffff, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r7, &(0x7f0000000280)={0x0, 0x4fa5, 0x8000, 0x4, 0x38c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x2, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x32ee, 0x20, 0x0, 0x1fe}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7333, 0x2, 0x40040081, 0x335}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x40000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r11) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r11, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000280)=ANY=[@ANYBLOB="94000000", @ANYRES16=r12, @ANYBLOB="010027bd7000fedbdf25460000000e0001"], 0x94}, 0x1, 0x0, 0x0, 0x41}, 0x10) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x88, r12, 0x300, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40004}, 0x40) 3.478817156s ago: executing program 0 (id=1115): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_getfd(r1, r1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x128}}, {{&(0x7f0000000380)={0xa, 0x4e20, 0x925, @empty, 0x8}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000480)="b68f81c634c68044ed6f8b33ea9df2000bb9605196ec49233060627b3a76d782c59210cde0b7818b79ea7ca716ab1bb915f26583ce96932793f19d2293ba0700e36bdb9a0a92cce37b898b7e5f0000000000000000b30c17f73d295a42eb91502decb691475ae2d77401fa954760942fb5c306aae5d6505d0806f0250e6eea96acff7b84b16b5f2b5e7bdfa6b99594ffbe17c61808d92bd0c96ba08e3dc1691647181e9b2e5d976ffc9340bf3b7f8f6cd435c0c1b78bff9dab68f350b4ac36be87e5fad1b9484a443c2f9e3bd9ec65a6a405d50b1a0041106ad7c97be1001000"/245, 0xf5}], 0x1, &(0x7f00000005c0)}}, {{&(0x7f0000000600)={0xa, 0x4e22, 0x209fc922, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000640)="67010e40bfdac2ca23a09f6d98c3a421eb", 0x11}], 0x1}}], 0x3, 0x240088c0) r2 = socket(0x2, 0x2, 0x1) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB=',version=9']) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e21, 0x3, @local, 0x4000}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vxcan1\x00'}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x22, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dca, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x5481, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x7c, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x0, 0x16, 0x8, 0x1, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x806, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0xfffffffe, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x100004, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0x9, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x103, 0x4000009, 0x400081, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100104, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x7, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x7, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) socket$xdp(0x2c, 0x3, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x8000000000000000, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x7000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 3.432904489s ago: executing program 0 (id=1116): mkdir(&(0x7f0000000000)='./my_sysfs\x00', 0x1ff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x1, 0x1, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @remote}, 0x10) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010306bd700000000000014000004e214e2400000000000000000000000000000000000000000100"/56, @ANYRES32=0x0, @ANYBLOB="0100ffe6dfffffff80fffff0000000000800030011"], 0x54}, 0x1, 0x0, 0x0, 0x40086}, 0x20000000) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'nr0\x00', 0x1}) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), r3) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x100) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x328000, 0x800, 0x9, 0x3}, 0x20) utimes(&(0x7f0000000080)='./my_sysfs/bus/pci/devices/0000:00:03.0/resource0\x00', &(0x7f0000000400)={{0x77359400}}) mount(0x0, &(0x7f0000000040)='./my_sysfs/bus/pci/devices/0000:00:03.0/resource0\x00', &(0x7f00000000c0)='sysfs\x00', 0x400, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_sysfs/bus/pci/devices/0000:00:03.0/resource0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) pselect6(0x40, &(0x7f0000000100)={0x3, 0x1, 0x3, 0x5, 0x8, 0x0, 0x7, 0x200}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x989680}, 0x0) read$FUSE(r8, &(0x7f0000002480)={0x2020}, 0x2020) 3.361677192s ago: executing program 0 (id=1117): r0 = open_tree(0xffffffffffffffff, 0x0, 0x5000) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x8, [{0x99, &(0x7f0000000500)=@string={0x99, 0x3, "87caf91634551b9b8488d4c3ca91236b5d1dcf30cecc3122a98bdd64ebeae81bce75f31f332a0335c7386ac57eedc636200d36771a2bc83005eaf676df9d9c01ccc7a25f4d36baf6448552e4ffd2967ca08cb20c10ca9777874d94f7c297f014fb697788619abe76fc8efad636e1b89fbb293030f4061e370a56dce37145f9fc6076838e0000000000000000"}}, {0x96, &(0x7f0000000140)=@string={0x96, 0x3, "e8b7f9614aa4372d75f76f0aca96738b0b2cdeeb3ccbd48335a4998afee514640713b20617bf75107b37e5198ff262478c63251759e6ca233abc98ebeca63cb4b731e49829c594cfe9872fb393080bc0164aa635bfec144a7e1e451ecb28a2ef01b93dc239d4cbcda2d10786f6c5e7a202e492dbd241c2082f973969c135163ad10ce3295436cbf828d421880bca53f0fd3b2e94"}}, {0xb1, &(0x7f0000000280)=@string={0xb1, 0x3, "57c0367772660f163206f2bf64fa34cc6313482eace502c5305a1d3e9fb7cbeb8f80402298f63e24711ffffb6ae11b69e2f782579093a0f91f32b012ace5d580228fb4afbd71aaa2ddca2e2e0de07dd83bfbe6ca21e8ca4cc0db78ab09651fe41637cb10dc1768c5012c04ce6486a45ca70c0004cc8e50f76e87da7cd5e8ed93a50fd18232b530436a46f75e1208602e64c4234716d3cfd80553b0efb0b35337f8785edceff089b7535fa6cd912dae"}}, {0x102, &(0x7f0000000780)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000040)=@string={0x0, 0x3, "b4d76537a2800fb3277ec57c7267e9cd98e466ac6cf384982a"}}, {0x57, &(0x7f0000000480)=@string={0x64, 0x3, "62e5689b4562a8378fc11b7f6278ac5d9cd8e3184420abe59114a1cdc2503edb8a14cbf6c0d9484897a13b9e38259fe09b5e6c6e243ae0391d49a210bfa747a8b0e79bb6ebf531298d1a04c1f27e292f088586b24e"}}, {0xa8, &(0x7f0000000080)=@string={0xa8, 0x3, "9af4b4faab0839760c6f71119cf2b9e4d572f44597c0be53400ea3045985d6d99c44ee5339c15b7da7527836341ab460d1e2acdb3f848d54dbaa829eacc031e7b93a2c0c6e37bf514b6d5e0619f9310b5ad8585d1e9bc7568d93aefb16644cdd834870636b5fcfb0a7dae09ed0ae9b10cd91391ea5f5f5725f5c5593528c799b27b05353e343bdd3577ce8333353615dcbe52860de4f06481be8a998ee8e2797b1a8a193ead0"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x42b}}, {0x0, &(0x7f0000000200)=@string={0x0, 0x3, "b6b5db5eb86079f6000980218f113c7a"}}, {0x0, &(0x7f0000000240)=@lang_id={0x0, 0x3, 0x1009}}, {0x0, &(0x7f0000000340)=@lang_id={0x0, 0x3, 0x430}}]}) 3.034536898s ago: executing program 7 (id=1120): sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000004, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @empty, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x19, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 731.748446ms ago: executing program 6 (id=1133): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) fsetxattr$security_evm(r2, &(0x7f0000000080), 0x0, 0xffffffffffffff4f, 0x2) r3 = socket$tipc(0x1e, 0x2, 0x0) ioctl$OCFS2_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x2, 0x0, 0x10000000003, 0x0, 0x9, 0xffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) fsetxattr$security_evm(r2, &(0x7f0000000080), 0x0, 0xffffffffffffff4f, 0x2) (async) socket$tipc(0x1e, 0x2, 0x0) (async) ioctl$OCFS2_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x2, 0x0, 0x10000000003, 0x0, 0x9, 0xffffffff}) (async) 470.245578ms ago: executing program 6 (id=1134): prctl$PR_SET_SECUREBITS(0x1c, 0x30) setuid(0xee00) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) writev(r0, &(0x7f0000001200)=[{&(0x7f0000000000)="bc7a6ef68f7830c1b9ce03bd6e8dcc935b6451576d904be06686f06b258a6b14fb25bf3f9a4980afce8b068282e5e31c01e6e20393111aeb4213153de9a2b7df3f2be19caf503acd944fa62e23dc7648edf2b16be1419a98459784c4fddd5f16ae9579785ad4bba679131d7d0c059e6c52505b859c59ae9ceec63b81cab8fd953d8b618178618982e1ee70891405365b1fc6", 0x92}, {&(0x7f0000000100)="2a79ed443f0ecc2e1203ebad58ddfd459fbaabf5937b293d2681e7a12bdbd1b8ab4d54b20d0793129a27515bd9f7436e6f55b619e98bbb3ff3fd22de64421738e02741d653124d1b8e36a6b424141321fbd7660478e763a8c13f9936a2d5dc0466c0c34a1e858810e4fd79590c48107eca7c144ae641d38231a49e08e49c6b769fe4b6ceedba2539d95e196c75e76780e74a6ce17a311d485871e4cedf2435c366c1c425c48e0fc407c60b511f4969f367bf6be3fde5093501f04779c4a1081a9d8373aecdc58f1da3cb2670de9ff65f6b2356e3b80d2190b648b6222f8b754c8a91a7eb8240add434eecb71efd53c416a6d860bb6669ab9c83ab4929f2609e503aabc985986074e44c04cf0803864b120046435eaada182cc248633e2bce6d55c8d0e0078fa05aafd68f5808cfd33cfafbaeab8eb4bdccb3e0913eb5086196ee0f4c1697493edb716b257d9f50cf38687d11cc2bb34b42574d2610bec46ba6611c8d12add483cdd3b01776ebf1a4f8db8781b6e72a68ca35ffcdb681ea10da632b39dfb360427b06b094d180e8a16910162bee81aaffc6f60ba44d140e426f705d0fefa6b31be6ce26a5fc2756dbd19e4b9e18372524faaacfb78529dc1b6459c3c2a2a802d62b1f493acc2e8bb30804a5e3d42b28a341dea37278bc2360d87aa4c8addd42332abfbca44dce16f26bfcd396032f205c293b750f0b153f2684d5b56b09a21f3503d70a87adf743bd65920d03e0b3f87a9e4c48cae3ea2ec1aa64cb949fbb9aeab7ee2e2d21bad5b16bb910206221df6070a486abb46db12998d7e4ba8b1f36c1694c9d3479e4dd1fe7af862d6afd9fda7f3ee72d11e7e681c1e0074155bd18863c6295f80b9e9ea8b5a20bcbe64a60786625f22a2a24a90d3fbdb0c2b287606b926cab057b56062107dfbe8cd8787f1431aad8de8b15a26c2f6b9423812fa67cb8ba5076f68e5530622ce6bd477e2ceda7fab7ca10298517124d9a704ff09fb6233a82654859bae3f80c2b186116c53af9356929c915e5432cf65012d2afcd7c40d7c04a49c7229b7f4d1172d040ff16b8b1ce099240016328c81915f24c001c9ca5ac3a210fbbde6d00dc739ae802a29512db8223f807c5673dd937f0cd0cea54dafebfd8ddd994b85c9a39d0109db3e61c7980402a722a7a14d38ee8862cbca3cf913dbaa1c185304fb04565f178e26decf7d66e6c556b70225b4fb2f36e14cebb33a625256e21a3d2264a90008720b2feaaf936376d0bfe8e72ebc365fabb183cb55a22ea07d6082b5c5c5167352d1f730de9ca73b7ad1f071bd52411a74a95acd0566debd4eac4ac8d504f446af8d3f5d07125bafa0b918ea9f96b1c01eac158023ea601de7df2a9df51676a6959fc12f838f7327a955713460acbd1593031a9da3aaab1c74e5333224ea47daf84724c8c0d5e4819921bcc5d0129935cd5d4ef67ca20e91bd3017466215d27610ab76c5d21640d1b103820c37f2b9dbe2dc1de4da7a0afab1fda0d21bd5319705ec8f85d676bfc3ea20f6d1538071253c863a2c0c74e571cde274dbad6ae08e255e818de9c52f9c8465af5aab9f785367cb9787495dda229bb0d8d264bf3ab7dfc511786178043e708867f66c6063aeb3f1ed11bdcb40be8d8b50ebed51da2d67b5faed869c7e40390bdece5e76b98289e79acb787de9793af5c953486c2b3fc26797cd9e23e447da6dacbfde30d57ca976b79fddc0fc463afbd9d5a9043cb946810c3723c534f0f0e2ba37c81d8c7c5fbc69728638f0d63727505901e833ae59aeb1a8855505d1df6b9e766b36e5afa583ed2b3729bb3788bcef289948f5680f4d09ca977f3a6003e10abf4a621ecdd943549c1a57b1ee1032c53493485e0d8b7532b0816cd95e2d8163a2ff46d1095b1268942973e9e97bdff20dff58906290c8a31ac53074fca45a63063ad22be157f0b8452ff9c1ec8354737794591fa27cb8f94fa989de57780f8e6b527090095c2d75fc76ee569d8af6510a946e693eed15b98515bf7262652ed889d976b3a5f7a3ae0dc930b896943d06e325bd8e47a868b618315e4240313c1a7d4f77a20d8bae1bd12ff17ac76117901168de384888d86067324037cc0523e20891df64e76aca4d61da5166b250739780fcde91df4e57ed480e2e736aa728980dac4303a858b47bb70f6313547e2933737b5f7d943ce5e1f43e93d85cf1a0a78fbe4b09141424ce2cb5f79c213f2d7effd5c009b46c9a73d72b8d7e5b44816626e1505ef111a512d65b2d884e4460b3878c4720ca5180da296a0df4830a37a4c220998e5dc0dfbe1fbcd3c2322dbca0c61b0d493b8dcdb58b5b70ca72ef0661aa694e35027e9a9dd3cab3848f5519e2a941840795f5ecb24c7335b240be80c8a58a0593a6c52741c5fafb314045da0a86f4b904d904793097d3f8cd3dfc4498b2829d10f6133fef00760c81def0090f7e3d892e82d39d267c4a3430eb4fc80efc71cc8cec3975e91e3272fec457560ed0596c0ccb9c64b7d3fe59929fbe2f41f6f6b5601bc7e92265c5f7a7ae5f707ce07ad883c510ef811adbf4aaedc12ae812a451dc260af484beb53ad91357cb755094fb044f95215cf1f2eae88d03fa65461d623d6970d60cfa101b63b68294db680f14ffb79fc24e982c60fe67b9e2d61ebe72f6c54e3eac125225457c3ffa603e0b15019eabc9a9559ef733c513377bea2939db227fe16ad0e20c5fdba5b53af4f3c85bc078b14a1f3fa312b110b8bce2ef138d63a85e80dbbf5d1e2d20b08ec7fd1a68246e684207f56ff8d69ba9e145581f9b5cc9bdbe609194e451926fbb2c0ba2408caf0c8f998a5463faee7f7561eece938bb048999c6ba0d2bae1a1d3a36adb0b7a01f2fbffdea5d564f330dfe7470d12046e4b728104b7ef26ddc51267b385fd09847e0154c30838d8ea7aedcb581de50f732bc1b00b55bb0c05513b51f0dc9964ff6b5bb6ffed06df3639d3072ff8e26f19e3833642589d39009b7a6224ae428cc05d1f1b2883860bde1ba287ac12bd576b1b795dfc3fb57c90ed56517d3b0633aa2f33eaa52a81371ce68a1e89142916c279f55f4d3b1873f3923751ab32ee47bdf3b9955e6168a35c0cdc1b4551b96c668a88a54cc8f15612c44049290fdedfe38387eae9b4e02965c473ae608b7829032c88ffdbb7a126923c6ffc52a25b292a7f4819d15c07d457f41a257b41a4be264de0594d0ee4b814d028b6e5f664887763950dd21de1903ba9475ea9fe81d0a142b8f5fb10e61a3ffdb7d3a14ce7167e9fe34579d1f4ec6b75779504c47b1049737f776045e629e1f9f82b5487a0b8ac9aa70be53b400bd5144ead1d7dc9d3d9e98a8e28fdb15e36440a2d733cc37fd3d1b6818fd5f75b684292701785ca0a75e3c2e413cf31e67b5afc1d5f30d7cd47ec355451a72c76a779fffaa35a6211272eeee9257f3dd80292371e198e64be371f6ae74936c81c6d58d854b4e99b5e1ecaedc9b1c218ea383875eb304409592fb423b4064b2fab39e8e2febb1fd52c1d9095d9102e302023c5027ec3622923f2ad8227f60f7db55d0e2698362dc4db0b94502a263037ac8992e80eedd7011d70716c20fd5fc0f571d0b218ca73590ce7f73f556af04b0140c97144791122ef39e44aad64f4e681c3204210f33da9b1d33cff74d95e23875c26a2823844512a1dd90d09ccc43fd4a8575be7f9e7125101463613acb8f622ada8b7b98829f7cac6d4e96833fd62a58f162b523a864131ca4552ba387ffcd5207ba946f6158f4e88773786ed4ba71c606925543b45404bf8089d40aa0db332c8e3caf0d73cbf617d83e5edd62c5f7312d6996616fcfd7ea2ba56ad40e76fc9b8e7bafd03f6765cbc3de5154d37cdf606dbc022fded9c7474a9121ff4bbc7bf99903a6039c253805b517b3b0392654d07ade48c93ec79ec9de80cd0620f827047955fd2ca247582cec429ae8c8ed394b866ad2e60a74467a7f917b8e8eeb6d2bab119db28a8523d8f6ee2280a4b1ab0c6b378d2d0f13b251cc1e32565061b79bd331d95b24f66d3311c56d0d1e0327a7b774c1ec4dd037877fe325a18b17c54a5d00e40dd5e7089b4975409308d4831cbf40660b709f9990d7ecae5781918a2a247eacd9e219dbfd0ad8bcc8c2d6c674a9711ae0a7125d9c207ef97ccd374891659947adbdbfdede5a014837ceb1889461790e86da00f984b07110deb888a95b71d030da3da7bd04f583ce6833743d80c4b58d283cd00ec3f7e22f9e57f1e485102f81f52d5bbe361a9fe64c621326f38998bddbb9cd37baf4a3aa0ba416b68e03eccfe1af7abb00c07d056062b2cf0c920e913bc6683944cbc8edb71a4790ccd2e51de726900731ccbae1e04179aefbb9cb0d4fbfdd470cd2448f2573b6c3d76c8323c34fa152ed39ee8da34e3bb7987e4cb53c3772a726781467d01098dbc0c648539f5c5fa74e9e41e30b9d8a6ee2457e8d8b4366a5880f3ecbff97c8e89fb3c397f72d9f9337d572c2fda5f9bdcc3e557dd0a47d370fcd022652aafb4c98eed1a49f35c9c43b2cf10bb5b0ca81ce071408e62ed2cfe331bb3c03b720dc532fdd01911646bd66d3470450b4e2d1aace36f3e93e40c4516a21374667f0d6354b6914ee7121c896377050f448d9b7eb2775633659320b4ecffeaa8727a53fb520389621a7afd51fe943711cc1ab47d3e79a5e3fa17754d6b62b5103e75f5e5d7841ded0a32c33fd132d1db123e9b7fe78d504fcc0fde751d2feba2dacbd73480f6fdea964f7e30c148604c84bd8873eb5a55c628ade6b216e06e4beab754030ee7b7967838f9f8369130d30cd49e4622ba92e5e1392da26d019d071f6fab60a03e3310810773fac6631bf60a142c543d730e0971adff15f4617d9235f5d8580fe07b0a2c711b048d53a1f3455d2a3040da0bdf27f7d41441e529296cd8604dedefb21decd377e0958825e44d84a4d8ba385d87220bfe78543819e95f23f0d06196b00d6031a4ddf3a26e9fa2d3e657fb65649cc00debde90520fd1e3b916b1d746f2320f62800554018267938a039912e3ebf7032a13485810a2229957af6c9b428749bd75e8c5a6a7493848814e01303057a1bb0b1e02bef42bb75a3087ed81e0ada32587f2401f1b94b2c30c3b10cd0bd4b8866aca2e7afce91a8def2569b2b7586fbdd45ef2bae736757616a71d23f7fa73fdfbcc46b4c56da17885e16b747499054fe2ad4a6d1b1fa11fb95f67fd50122f0e5577411f0f5573317751a31d6faf430386dbd2b4dd3cb175f06e603cda343e8157e38285d3d0a2fdd3193794c51401a4216bbef86015e30113c784a5d6c76654572bf8d482471f60dc0d9f15f3b8d0611c3e7ccf8067f348faffb3b5b974bb5533a2a0ad1507994f569c744516af58f85d509eaea10e6bdd8bd6f72317d555203b61b32108c1bedaa0503597e2fdfd5c6e00807dc956ad70c6725c4f0a811b2dc9bbff68b91bafb855e5a2b7c17f3fb3d794827ac3037044f6af3965d8131236463bdf3f0ac4062c17078e13576eef3383bcc9c2b20db634426d64e3589a53873322c95570f874ea6bfb7fa241e504a6c03a9e7886a080e01305c8f9c4c365142d57ca7a59befa6df7eddf5efb3aa97e8d86398a7f5bd930baeb3cfe7236d8f1ea39f2b222292669c9f47c47f471ad777b4f1a14b6a7dc779b193bf126aaf53ad2c4d9bf96673453ad7467c2d8e7486dc752f25bf07951338d314b1224fd2a7d603133dd4c129ce821520f9331c4a12c70372ff34f094df67a86dc4f51f5", 0x1000}, {&(0x7f0000001100)="719284d8ca7b433ed9c3e6d535c228971cf73b46ec0f427e790a6ef56a20085ae755b896b2b5d16196d4f20018e14cd2a6afa1d759be829eade0081c5e3f4c9fb625d58995e6295ba88780570b2375b64b90e0c271579130b01972ff4e711a46cc15d964d5a70de4ae08a76aa157c96ff9c8709ea841f6396d2caff9e2a010c5c3f992a43efbb1670187a8a667e9ec076e77e50e0b8206a807bbea33b3c01449bb0135739ae9c956239df357e1f4ac4fddf3dae997a03c10e6187442676ea844c104df81571f6258078db08b2c", 0xcd}], 0x3) prctl$PR_SET_SECUREBITS(0x1c, 0x2) ioctl$TIOCGPTPEER(r0, 0x5441, 0x786d) 414.169391ms ago: executing program 6 (id=1135): mkdir(&(0x7f00000004c0)='./my_sysfs\x00', 0x1ff) syz_open_dev$MSR(&(0x7f0000000440), 0x2, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000480), 0x2) r1 = memfd_create(&(0x7f0000000840)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\n%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\x9dR\xde\xf6\xc9!R#\xd7\xc0\xea\x9a\x04v\x85\xbcx\x9ai\xd2\r\x05ZY\x0e\"d\xc7\xd7\x02v32Z\xe0\n3\x8b\xa0\x83z\v\x90\x8ce\x12\xbcw\x1e\x7f \xdaPh: \x8e\x95\xb2\xee\xd9\xd9\xe47\x1c\xab\x97P\x86\x8c\xcb]Q\x83\xaaM\xc0\xd4\tQ\xee\x9c\x98\xe4\x18cb\xbd/\xd8\xe95\x7f\x00\xfd6#\x87\x8c\xf9\xa3\x041U\xb9\x14\xce\x9b', 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x57) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/70, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000002880)={0x1, 0x0, [{0x7000, 0x6a, &(0x7f0000000140)=""/106}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x4008af04, &(0x7f0000000040)) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) close(0x3) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x2000}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x82401, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4020ae46, &(0x7f0000000240)={0x80000007, 0x9000, 0x3, r3, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f0000000080)='ufs\x00', 0x4a0000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/regulator/regulator_summary\x00', 0x40000, 0x0) readv(r6, &(0x7f0000001500)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) read$FUSE(r3, &(0x7f00000040c0)={0x2020}, 0x2020) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/cgroup.procs\x00', 0x2, 0x128) pread64(r7, &(0x7f00000002c0)=""/195, 0xc3, 0x5) mount(0x0, &(0x7f0000000200)='./my_sysfs\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_sysfs/bus/pci/devices/0000:00:03.0/resource0\x00', 0x0, 0x0) 413.777651ms ago: executing program 6 (id=1136): r0 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) fcntl$addseals(r0, 0x409, 0x7) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x1, 0x9, 0x7}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xfffffffffffffffe) r3 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) write$cgroup_pid(r3, &(0x7f0000000d40), 0x12) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x400000b5, 0x0, 0x7ff}]}) r5 = memfd_secret(0x80000) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) dup2(r6, r5) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, 0x0, 0x0) 413.006661ms ago: executing program 6 (id=1137): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) ftruncate(0xffffffffffffffff, 0x200002) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0xe6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000003, 0x12, r0, 0x0) truncate(&(0x7f0000000140)='./file1\x00', 0x8000e) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r1, 0x1) recvfrom(r1, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$XFS_IOC_BULKSTAT(r2, 0x8040587f, &(0x7f0000000300)={{0xd7, 0x1b63203e0d7eeca, 0x4, 0x9, 0x2e5}, 0x0}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x69, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 299.743587ms ago: executing program 0 (id=1138): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) read(r0, &(0x7f0000000040)=""/166, 0xa6) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) (async, rerun: 32) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) (rerun: 32) r3 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r2) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r3}, &(0x7f00000007c0)=ANY=[@ANYBLOB='enc=pkcs1 hash=%'], 0x0, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="050000001e0500"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000004001"], 0x48}}, 0x2400c808) close(r1) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x4002, 0x14) openat(r4, &(0x7f0000000140)='./file0\x00', 0x2000, 0x40) 299.430307ms ago: executing program 6 (id=1139): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x0) syz_open_dev$hidraw(0x0, 0x82, 0x2) 299.189227ms ago: executing program 0 (id=1140): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$XFS_IOC_BULKSTAT(r4, 0x8040587f, &(0x7f0000000300)={{0xd7, 0x1b63203e0d7eeca, 0x4, 0x9, 0x88}, 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r5) sendmsg$IEEE802154_DISASSOCIATE_REQ(r5, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001480)={0x14, r6, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x20000000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xfffffffffffffffc], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000340)="9991", 0x2}], 0x1, &(0x7f0000000600)=ANY=[], 0x28}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)='9', 0x1}], 0x1}}], 0x2, 0x4008c04) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18.00108ms ago: executing program 7 (id=1141): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x5, 0x400) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000200)=""/38) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2a) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x67dd) ioctl$KVM_CAP_PTP_KVM(r2, 0x4068aea3, &(0x7f0000000240)) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f00000002c0)=0x3) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RRENAMEAT(r3, &(0x7f0000000340)={0x7, 0x4b, 0x1}, 0x7) ioctl$HIDIOCGPHYS(r3, 0x80404812, &(0x7f0000000380)) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f00000003c0)=0xf000) ioctl$XFS_IOC_FSGETXATTRA(r2, 0x801c582d, &(0x7f0000000400)) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000440)) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="660fe2200f0171ed66b9800000c00f326635010000000f300f01730067660fdbbef7ffffff0f78ac00002e0f01cbf4673e0ffb5feabaf80c66b8883dc98666efbafc0cb81200ef", 0x47}], 0x1, 0x42, &(0x7f0000000540)=[@efer={0x2, 0x4100}, @dstype3={0x7, 0x2}], 0x2) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2c0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r4) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r5, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000900)={{r6, &(0x7f0000000700)='%[&%^\x00', 0x21a67d0646142424, &(0x7f0000000740)={@_ha_fsid={[0x5, 0x100000]}, {0x7, 0x4, 0x4, 0x3}}, 0xfffffffc, &(0x7f0000000780), &(0x7f00000007c0)=0x10}, 0x1, &(0x7f00000008c0)=[{0x1, 0xc88, &(0x7f0000000800)='/dev/input/event#\x00', &(0x7f0000000840)="e79cc0431235d0b65a6d8e77d993dc1b5726e9cc949304f0d56a177929b5d13ec44bc5142b9393ba6ccd853bbefa4976681a14fab4028012550cb9672f86104f24c35206cf8d4eef2ab1a7", 0x4b, 0x20}]}) ioctl$KVM_TDX_GET_CPUID(r7, 0xc008aeba, &(0x7f0000000ac0)={0x5, 0x0, &(0x7f0000000980)={0x7, 0x0, [{0x4, 0x8, 0x5, 0x1, 0x5, 0x6, 0xdd1a}, {0xb, 0x7, 0x5, 0x7, 0x3ff, 0x9, 0x7}, {0x4, 0xfffffff8, 0x7, 0x40fd, 0x601, 0x9, 0x3ff}, {0xb, 0xfff, 0x5, 0x6, 0x4, 0x4, 0x5}, {0x3eb36d6b3988e688, 0x81, 0x2, 0xa4db, 0x7, 0xb7, 0x7}, {0xb, 0x7, 0x3, 0x7, 0xffff, 0xf, 0x8}, {0xd, 0x81, 0x7, 0x3, 0xbb25, 0xffff, 0x5}]}}) ioctl$BTRFS_IOC_BALANCE_V2(r7, 0xc4009420, &(0x7f0000000b00)={0x10, 0x2, {0x5e8, @usage=0x7, 0x0, 0x4, 0x2536, 0x5, 0x5, 0x8, 0xf6, @struct={0x8, 0x80000}, 0x40, 0x9, [0x855, 0x9, 0x6, 0x1, 0x8, 0xf]}, {0x5, @usage=0x3f3e, 0x0, 0x81, 0x1000, 0x3, 0x2, 0x8, 0x1d, @usage=0x4, 0x9, 0x1, [0x3ff, 0x2, 0x80010000, 0x5, 0x5c, 0x3]}, {0x4, @struct={0x9, 0x10}, 0x0, 0x35, 0x7, 0x9506, 0x2, 0xfffffffffffffff9, 0x90, @usage=0xfffffffffffffff0, 0x48, 0x0, [0xffffffffffffff31, 0x0, 0xb7, 0x0, 0x10000]}, {0xfffffffffffffffe, 0x101, 0x1}}) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000f00)={{r7}, {@val={r8}, @actul_num={@val=0x2d, 0x5, 0x6d}}}) ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000000f40)=""/227) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f0000001040)={{&(0x7f0000fe7000/0x12000)=nil, 0x12000}}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r7, 0x8982, &(0x7f0000001080)={0x7, 'wg1\x00', {0x1ff}, 0x1000}) openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x800, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r4, 0x4068aea3, &(0x7f0000001100)={0xbc, 0x0, 0x5}) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000001200)={&(0x7f0000001180)='\x00', &(0x7f00000011c0)='-)\x00', 0x7f}) 0s ago: executing program 7 (id=1142): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f000000010000104fdffffff00000000ff020000000000000000000000000001000000000000000000000000000000011234009a0000fffd0a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcb90700000000000000000000000001000004d233000000fe80000000000000005ca6cd8273481760ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff575b000000000000ffffffffffffffff000000000000000000000000000000000000000000000000e1ffffffffffffff0000000000000000000000002bbd7000000000000a00"/168], 0xf0}}, 0x4000800) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x4e24, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x7, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb47b, 0x2}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x85}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x3a, 0x6e6bc0}}, 0xb8}}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000001c0)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0), 0x8000, &(0x7f0000000240)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r3]) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=@updpolicy={0x294, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in=@dev={0xac, 0x14, 0x14, 0x24}, 0x0, 0x800, 0x1000, 0x0, 0xa, 0x20, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}, [@policy={0xac, 0x7, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@mcast1, 0x4e20, 0x9, 0x4e20, 0x9, 0xa, 0x2a261281e6e533a5, 0x20, 0x3c, r1, r3}, {0x200, 0xf, 0x9, 0x4, 0x6173, 0xc, 0xc, 0x8}, {0x0, 0x7, 0x8001, 0x7d7cc62}, 0x2, 0x6e6bb9, 0x3, 0x1, 0x3, 0x3}}, @tfcpad={0x8, 0x16, 0x4}, @iptfs_init_delay={0x8, 0x27, 0x1}, @algo_comp={0x105, 0x3, {{'lzs\x00'}, 0x5e8, "01fbae9e7321853c40358588236675e9660effac9cbebc8ff755c551c77cc21b555a2f157dc92a8a8e635e4f79b3fae1b61761fbfba8a40f3ac8b14f269a5ba7ba4d38cd9d9ae2cd18316604101408b0681975f46394f4e12531486fe9cb90790558390e2d870b6bc60cadd49619181318f38236caafc5d86cc867b98a66e0a9383999e42fc7857c9b89d27a12131c64b333f1729cdabe8f529a85c89f08514440b8fb74f48e1cc9e2ed0dbbfe9c730ef9a92d1e96dc1d269d31ee178e"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}, @sec_ctx={0xf, 0x8, {0xb, 0x8, 0x1, 0x80, 0x3, "089bea"}}]}, 0x294}}, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0), 0xc00000000000000, 0x505040) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20000, 0x4) r6 = syz_create_resource$binfmt(&(0x7f0000000280)='./file0\x00') execveat$binfmt(r5, r6, &(0x7f00000004c0)={[&(0x7f0000000300)='\x00', &(0x7f0000000340)='/dev/loop#\x00', &(0x7f0000000380)='/dev/loop#\x00', &(0x7f00000003c0)='/dev/loop#\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='}\x00']}, &(0x7f0000000580)={[&(0x7f0000000500)='.]-@&($\r\x00', &(0x7f0000000540)='^*\x00']}, 0x800) ioctl$BLKBSZSET(r4, 0x40081271, &(0x7f0000000100)=0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r7) 0s ago: executing program 7 (id=1143): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r1}, &(0x7f0000000040)={'enc=', 'pkcs1', ' hash=', {'sha512\x00'}}, 0x0, 0x0) kernel console output (not intermixed with test programs): 165.334926][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 165.341171][ T646] Bluetooth: hci1: command 0x1003 tx timeout [ 165.654920][ T54] Bluetooth: hci0: command tx timeout [ 165.977478][ T36] audit: type=1400 audit(1789324173.570:13588): avc: denied { create } for pid=2230 comm="syz.1.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 166.300033][ T2202] Bluetooth: hci0: Reading QCA version information failed (-4) [ 166.314375][ T2202] Bluetooth: hci0: Retry BT power ON:0 Hü[ 166.635095][ T2202] Bluetooth: hci0: Reading QCA version information failed (-4) ü[ 166.644963][ T2202] Bluetooth: hci0: Retry BT power ON:1 Hü[ 166.985102][ T2202] Bluetooth: hci0: Reading QCA version information failed (-4) [ 166.992691][ T2202] Bluetooth: hci0: Retry BT power ON:2 Hü[ 167.024961][ T343] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 167.184945][ T343] usb 2-1: Using ep0 maxpacket: 16 [ 167.215400][ T343] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 167.223644][ T343] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.274932][ T343] usb 2-1: config 0 has no interface number 0 [ 167.305324][ T343] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 167.314437][ T343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.325055][ T2202] Bluetooth: hci0: Reading QCA version information failed (-4) [ 167.344921][ T343] usb 2-1: Product: syz [ 167.349167][ T343] usb 2-1: Manufacturer: syz [ 167.353790][ T343] usb 2-1: SerialNumber: syz [ 167.363717][ T615] usb 1-1: USB disconnect, device number 55 [ 167.805503][ T2244] SELinux: policydb magic number 0xfec00000 does not match expected magic number 0xf97cff8c [ 167.815804][ T36] audit: type=1400 audit(1789324175.410:13589): avc: denied { load_policy } for pid=2241 comm="syz.0.516" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 167.863175][ T2244] SELinux: failed to load policy [ 169.338116][ T750] Bluetooth: hci1: Frame reassembly failed (-84) [ 169.344624][ T2272] Bluetooth: hci0: setting up ROME/QCA6390 Hü[ 169.574837][ T343] usb 2-1: USB disconnect, device number 48 [ 169.634942][ T322] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 169.705291][ T36] audit: type=1400 audit(1789324177.310:13590): avc: denied { write } for pid=2274 comm="syz.1.523" name="events" dev="tracefs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 ü[ 169.771705][ T36] audit: type=1400 audit(1789324177.330:13591): avc: denied { add_name } for pid=2274 comm="syz.1.523" name="enable" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 169.812494][ T322] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.822794][ T322] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 169.839077][ T36] audit: type=1400 audit(1789324177.330:13592): avc: denied { create } for pid=2274 comm="syz.1.523" name="enable" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 169.875693][ T322] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 169.887872][ T322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.905493][ T322] usb 1-1: Product: syz [ 169.915545][ T322] usb 1-1: Manufacturer: syz [ 169.926393][ T322] usb 1-1: SerialNumber: syz [ 171.135486][ T2279] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2279 comm=syz.1.525 [ 171.414917][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 171.414943][ T332] Bluetooth: hci1: command 0x1003 tx timeout [ 171.554942][ T322] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 171.726023][ T322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.748383][ T322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.768591][ T322] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 171.785061][ T322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.824907][ T646] Bluetooth: hci0: command tx timeout [ 172.318645][ T2272] Bluetooth: hci0: Reading QCA version information failed (-4) [ 172.326507][ T2272] Bluetooth: hci0: Retry BT power ON:0 Hü[ 172.635116][ T2272] Bluetooth: hci0: Reading QCA version information failed (-4) ü[ 172.642909][ T2272] Bluetooth: hci0: Retry BT power ON:1 Hü[ 172.955101][ T2272] Bluetooth: hci0: Reading QCA version information failed (-4) [ 172.964945][ T2272] Bluetooth: hci0: Retry BT power ON:2 Hü[ 173.305053][ T2272] Bluetooth: hci0: Reading QCA version information failed (-4) [ 173.322206][ T615] usb 1-1: USB disconnect, device number 56 [ 173.410157][ T36] audit: type=1400 audit(1789324181.010:13593): avc: denied { write } for pid=2282 comm="syz.0.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 173.434988][ T2283] netlink: 20 bytes leftover after parsing attributes in process `syz.0.527'. [ 173.494950][ T36] audit: type=1400 audit(1789324181.010:13594): avc: denied { nlmsg_write } for pid=2282 comm="syz.0.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 173.634928][ T36] audit: type=1400 audit(1789324181.230:13595): avc: denied { create } for pid=2286 comm="syz.0.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 173.839687][ T2292] netlink: 132 bytes leftover after parsing attributes in process `syz.0.529'. [ 174.301245][ T322] usb 2-1: USB disconnect, device number 49 [ 174.551549][ T36] audit: type=1400 audit(1789324182.150:13596): avc: denied { mounton } for pid=2310 comm="syz.1.533" path="/129/file0" dev="tmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 174.588465][ T2311] netlink: 100 bytes leftover after parsing attributes in process `syz.1.533'. [ 174.662800][ T2311] netlink: 37 bytes leftover after parsing attributes in process `syz.1.533'. [ 174.974923][ T10] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 175.135973][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 175.164944][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 175.184948][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.226279][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 175.247933][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 175.264438][ T10] usb 2-1: Product: syz [ 175.273836][ T10] usb 2-1: Manufacturer: syz [ 175.285736][ T10] usb 2-1: SerialNumber: syz [ 175.944741][ T750] bridge_slave_1: left allmulticast mode [ 175.960852][ T750] bridge_slave_1: left promiscuous mode [ 175.970910][ T750] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.986300][ T750] bridge_slave_0: left allmulticast mode [ 176.002342][ T750] bridge_slave_0: left promiscuous mode [ 176.012504][ T750] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.131500][ T2316] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.147004][ T2316] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.164835][ T2316] bridge_slave_0: entered allmulticast mode [ 176.171289][ T2316] bridge_slave_0: entered promiscuous mode [ 176.185422][ T750] tipc: Left network mode [ 176.190189][ T2316] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.204907][ T2316] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.222312][ T2316] bridge_slave_1: entered allmulticast mode [ 176.232705][ T2316] bridge_slave_1: entered promiscuous mode [ 176.245924][ T750] veth1_macvtap: left promiscuous mode [ 176.251477][ T750] veth0_vlan: left promiscuous mode [ 176.509008][ T2316] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.516154][ T2316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.523505][ T2316] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.530633][ T2316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.590530][ T747] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.607374][ T747] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.636997][ T1717] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.644086][ T1717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.705463][ T1717] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.712584][ T1717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.800087][ T2316] veth0_vlan: entered promiscuous mode [ 176.822052][ T2316] veth1_macvtap: entered promiscuous mode [ 176.882743][ T750] bridge_slave_1: left allmulticast mode [ 176.890450][ T750] bridge_slave_1: left promiscuous mode [ 176.898209][ T750] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.908426][ T750] bridge_slave_0: left allmulticast mode [ 176.914110][ T750] bridge_slave_0: left promiscuous mode [ 176.920112][ T750] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.971843][ T2332] overlayfs: conflicting options: userxattr,verity=on [ 177.064577][ T747] Bluetooth: hci1: Frame reassembly failed (-84) [ 177.075336][ T2334] Bluetooth: hci0: setting up ROME/QCA6390 Hü[ 177.092798][ T750] veth1_macvtap: left promiscuous mode [ 177.098505][ T750] veth0_vlan: left promiscuous mode [ 177.212387][ T2329] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.219787][ T10] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 177.241572][ T2329] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.259043][ T2329] bridge_slave_0: entered allmulticast mode [ 177.269581][ T2329] bridge_slave_0: entered promiscuous mode [ 177.286199][ T2329] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.303417][ T2329] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.313551][ T2329] bridge_slave_1: entered allmulticast mode [ 177.321846][ T2329] bridge_slave_1: entered promiscuous mode [ 177.374929][ T322] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 177.396602][ T10] usb 1-1: Using ep0 maxpacket: 32 ü[ 177.402842][ T2329] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.410433][ T2329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.417955][ T2329] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.425024][ T2329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.430339][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 177.443000][ T10] usb 1-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 177.473329][ T10] usb 1-1: Dual-Role OTG device on HNP port [ 177.489949][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 177.511110][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.523997][ T1717] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.534934][ T10] usb 1-1: Product: syz [ 177.539221][ T10] usb 1-1: Manufacturer: syz [ 177.544402][ T1717] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.555239][ T322] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.564180][ T10] usb 1-1: SerialNumber: syz [ 177.575434][ T322] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 177.588216][ T1717] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.595499][ T1717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.606221][ T322] usb 7-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 177.614103][ T1717] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.622365][ T1717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.624978][ T322] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.647901][ T322] usb 7-1: Product: syz [ 177.652145][ T322] usb 7-1: Manufacturer: syz [ 177.672729][ T322] usb 7-1: SerialNumber: syz [ 177.693664][ T2329] veth0_vlan: entered promiscuous mode [ 177.713100][ T2329] veth1_macvtap: entered promiscuous mode [ 177.744853][ T10] usb 2-1: USB disconnect, device number 50 [ 177.990439][ T2386] kvm: pic: non byte write [ 178.026392][ T2386] SELinux: failed to load policy [ 178.094978][ T10] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 178.276815][ T10] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 178.284276][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 178.300040][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 178.309578][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 178.317818][ T10] usb 2-1: SerialNumber: syz [ 179.094953][ T54] Bluetooth: hci1: command 0x1003 tx timeout [ 179.101062][ T646] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 179.424989][ T646] Bluetooth: hci0: command tx timeout [ 179.964006][ T322] usb 1-1: USB disconnect, device number 57 [ 180.044755][ T2334] Bluetooth: hci0: Reading QCA version information failed (-4) [ 180.059294][ T2410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.065247][ T2334] Bluetooth: hci0: Retry BT power ON:0 [ 180.074726][ T2410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 Hü[ 180.385113][ T2334] Bluetooth: hci0: Reading QCA version information failed (-4) [ 180.392853][ T2334] Bluetooth: hci0: Retry BT power ON:1 [ 180.398725][ T322] usb 1-1: new high-speed USB device number 58 using dummy_hcd Hü[ 180.554930][ T322] usb 1-1: Using ep0 maxpacket: 16 [ 180.561444][ T322] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 180.569875][ T322] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 180.577419][ T322] usb 1-1: config 0 has no interface number 0 [ 180.585180][ T322] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 180.594566][ T322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.602826][ T322] usb 1-1: Product: syz [ 180.607347][ T322] usb 1-1: Manufacturer: syz [ 180.612017][ T322] usb 1-1: SerialNumber: syz [ 180.715364][ T2334] Bluetooth: hci0: Reading QCA version information failed (-4) [ 180.723086][ T2334] Bluetooth: hci0: Retry BT power ON:2 Hü[ 180.781520][ T322] usb 2-1: USB disconnect, device number 51 [ 181.035311][ T2334] Bluetooth: hci0: Reading QCA version information failed (-4) [ 181.064297][ T322] usb 7-1: USB disconnect, device number 2 [ 181.140648][ T36] audit: type=1400 audit(1789324188.740:13597): avc: denied { bind } for pid=2426 comm="syz.6.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 181.232940][ T2431] FAULT_INJECTION: forcing a failure. [ 181.232940][ T2431] name failslab, interval 1, probability 0, space 0, times 0 [ 181.252080][ T36] audit: type=1400 audit(1789324188.850:13598): avc: denied { create } for pid=2432 comm="syz.7.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 181.272544][ T2431] CPU: 0 UID: 0 PID: 2431 Comm: syz.6.553 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 181.272586][ T2431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.272602][ T2431] Call Trace: [ 181.272609][ T2431] [ 181.272619][ T2431] __dump_stack+0x21/0x30 [ 181.272659][ T2431] dump_stack_lvl+0x140/0x1c0 [ 181.272688][ T2431] ? __cfi_dump_stack_lvl+0x10/0x10 [ 181.272721][ T2431] dump_stack+0x19/0x20 [ 181.272752][ T2431] should_fail_ex+0x3c2/0x510 [ 181.272782][ T2431] should_failslab+0xac/0x100 [ 181.272808][ T2431] kmem_cache_alloc_noprof+0x42/0x410 [ 181.272835][ T2431] ? __kernfs_new_node+0xf1/0x740 [ 181.272868][ T2431] __kernfs_new_node+0xf1/0x740 [ 181.272896][ T2431] ? make_kgid+0x1d0/0x690 [ 181.272923][ T2431] ? kernfs_new_node+0x280/0x280 [ 181.272951][ T2431] ? __cfi_make_kgid+0x10/0x10 [ 181.272978][ T2431] ? stack_depot_save_flags+0x38/0x800 [ 181.273011][ T2431] ? net_ns_get_ownership+0xfc/0x180 [ 181.273033][ T2431] kernfs_new_node+0x154/0x280 [ 181.273064][ T2431] kernfs_create_dir_ns+0x4b/0x130 [ 181.273096][ T2431] sysfs_create_dir_ns+0x127/0x210 [ 181.273122][ T2431] ? __cfi_sysfs_create_dir_ns+0x10/0x10 [ 181.273148][ T2431] ? net_namespace+0x11/0x50 [ 181.273171][ T2431] kobject_add_internal+0x71f/0xc20 [ 181.273196][ T2431] kobject_add+0x169/0x240 [ 181.273229][ T2431] ? mutex_unlock+0x90/0x240 [ 181.273257][ T2431] ? __cfi_kobject_add+0x10/0x10 [ 181.273290][ T2431] ? kobject_put+0x1cc/0x2a0 [ 181.273310][ T2431] ? get_device_parent+0x43d/0x470 [ 181.273347][ T2431] device_add+0x3b5/0xbf0 [ 181.273380][ T2431] netdev_register_kobject+0x196/0x330 [ 181.273416][ T2431] register_netdevice+0x1042/0x1a80 [ 181.273452][ T2431] ? __cfi_register_netdevice+0x10/0x10 [ 181.273475][ T2431] ? alloc_netdev_mqs+0xda9/0x13d0 [ 181.273499][ T2431] ? __asan_memcpy+0x5a/0x80 [ 181.273523][ T2431] ip6gre_tunnel_locate+0x323/0x6b0 [ 181.273558][ T2431] ? ip6gre_tnl_link_config+0x240/0x240 [ 181.273593][ T2431] ? selinux_capable+0x38/0x50 [ 181.273624][ T2431] ? ip6gre_changelink_common+0x4a0/0x4a0 [ 181.273659][ T2431] ? ip6gre_tnl_parm_from_user+0x21d/0x420 [ 181.273682][ T2431] ip6gre_tunnel_siocdevprivate+0x542/0x870 [ 181.273705][ T2431] ? __cfi_ip6gre_tunnel_siocdevprivate+0x10/0x10 [ 181.273731][ T2431] ? full_name_hash+0xa1/0xf0 [ 181.273758][ T2431] dev_ifsioc+0x951/0xc10 [ 181.273786][ T2431] dev_ioctl+0xa62/0x1000 [ 181.273814][ T2431] sock_ioctl+0x74e/0x7e0 [ 181.273835][ T2431] ? __cfi_sock_ioctl+0x10/0x10 [ 181.273856][ T2431] ? __fget_files+0x2bc/0x330 [ 181.273883][ T2431] ? bpf_lsm_file_ioctl+0xd/0x20 [ 181.273931][ T2431] ? security_file_ioctl+0x3e/0x110 [ 181.273955][ T2431] ? __cfi_sock_ioctl+0x10/0x10 [ 181.273975][ T2431] __se_sys_ioctl+0x126/0x1b0 [ 181.274005][ T2431] __x64_sys_ioctl+0x7f/0xa0 [ 181.274033][ T2431] x64_sys_call+0x1878/0x2ee0 [ 181.274055][ T2431] do_syscall_64+0x57/0xf0 [ 181.274075][ T2431] ? clear_bhb_loop+0x50/0xa0 [ 181.274104][ T2431] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 181.274129][ T2431] RIP: 0033:0x7fabc4f9e159 [ 181.274148][ T2431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.274168][ T2431] RSP: 002b:00007fabc5e92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.274192][ T2431] RAX: ffffffffffffffda RBX: 00007fabc5225fa0 RCX: 00007fabc4f9e159 [ 181.274210][ T2431] RDX: 0000200000000140 RSI: 00000000000089f1 RDI: 0000000000000005 [ 181.274225][ T2431] RBP: 00007fabc503503b R08: 0000000000000000 R09: 0000000000000000 [ 181.274239][ T2431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.274253][ T2431] R13: 00007fabc5226038 R14: 00007fabc5225fa0 R15: 00007fff5b9c9a88 [ 181.274272][ T2431] [ 181.274573][ T2431] kobject: kobject_add_internal failed for syztnl1 (error: -12 parent: net) [ 181.525057][ T31] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 181.527493][ T2045] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 181.674912][ T31] usb 7-1: Using ep0 maxpacket: 8 [ 181.682936][ T31] usb 7-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 181.692719][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.700818][ T31] usb 7-1: Product: syz [ 181.705252][ T31] usb 7-1: Manufacturer: syz [ 181.709922][ T31] usb 7-1: SerialNumber: syz [ 181.844922][ T2045] usb 2-1: Using ep0 maxpacket: 32 [ 181.854942][ T2045] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.865879][ T2045] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.875805][ T2045] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 181.885064][ T2045] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.101464][ T2438] 9pnet_fd: Insufficient options for proto=fd [ 183.067370][ T322] usb 1-1: USB disconnect, device number 58 [ 183.086534][ T2442] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 183.245871][ T1717] Bluetooth: hci1: Frame reassembly failed (-84) [ 183.252771][ T2451] Bluetooth: hci0: setting up ROME/QCA6390 Hü[ 183.544945][ T2045] usb 1-1: new high-speed USB device number 59 using dummy_hcd ü[ 183.696146][ T2045] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.706470][ T2045] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 183.721348][ T2045] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 183.730771][ T2045] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.738955][ T2045] usb 1-1: Product: syz [ 183.743286][ T2045] usb 1-1: Manufacturer: syz [ 183.748226][ T2045] usb 1-1: SerialNumber: syz [ 184.064300][ T31] usb 2-1: USB disconnect, device number 52 [ 184.194035][ T2459] netlink: 188 bytes leftover after parsing attributes in process `syz.1.562'. [ 184.224756][ T2045] usb 7-1: USB disconnect, device number 3 [ 184.282980][ T2468] loop0: detected capacity change from 0 to 28 [ 184.319001][ T2468] loop0: [ 184.337037][ T111] loop0: [ 184.494927][ T31] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 184.654917][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 184.661234][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.677635][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 184.692314][ T31] usb 2-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 184.701463][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.814941][ T2045] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 184.966499][ T2045] usb 7-1: unable to get BOS descriptor or descriptor too short [ 184.975315][ T2045] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.987946][ T2045] usb 7-1: string descriptor 0 read error: -22 [ 184.994248][ T2045] usb 7-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 185.003741][ T2045] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.254934][ T646] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 185.574940][ T54] Bluetooth: hci0: command tx timeout [ 186.241277][ T2451] Bluetooth: hci0: Reading QCA version information failed (-4) [ 186.249117][ T2451] Bluetooth: hci0: Retry BT power ON:0 Hü[ 186.565111][ T2451] Bluetooth: hci0: Reading QCA version information failed (-4) ü[ 186.573045][ T2451] Bluetooth: hci0: Retry BT power ON:1 Hü[ 186.885108][ T2451] Bluetooth: hci0: Reading QCA version information failed (-4) [ 186.892844][ T2451] Bluetooth: hci0: Retry BT power ON:2 Hü[ 187.205067][ T2451] Bluetooth: hci0: Reading QCA version information failed (-4) [ 187.231067][ T615] usb 1-1: USB disconnect, device number 59 [ 187.317999][ T335] usb 2-1: USB disconnect, device number 53 [ 187.340390][ T2490] deleting an unspecified loop device is not supported. [ 187.358613][ T343] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 187.375098][ T343] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 187.418975][ T2495] fido_id[2495]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 187.525193][ T335] usb 7-1: USB disconnect, device number 4 [ 187.568185][ T2504] FAULT_INJECTION: forcing a failure. [ 187.568185][ T2504] name failslab, interval 1, probability 0, space 0, times 0 [ 187.581612][ T2506] overlayfs: missing 'lowerdir' [ 187.586855][ T2504] CPU: 1 UID: 0 PID: 2504 Comm: syz.6.575 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 187.586888][ T2504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.586901][ T2504] Call Trace: [ 187.586907][ T2504] [ 187.586914][ T2504] __dump_stack+0x21/0x30 [ 187.586949][ T2504] dump_stack_lvl+0x140/0x1c0 [ 187.586977][ T2504] ? __cfi_dump_stack_lvl+0x10/0x10 [ 187.587006][ T2504] ? stack_trace_save+0xaa/0x100 [ 187.587028][ T2504] dump_stack+0x19/0x20 [ 187.587053][ T2504] should_fail_ex+0x3c2/0x510 [ 187.587079][ T2504] should_failslab+0xac/0x100 [ 187.587103][ T2504] __kmalloc_cache_noprof+0x41/0x470 [ 187.587125][ T2504] ? proc_self_get_link+0x119/0x290 [ 187.587153][ T2504] proc_self_get_link+0x119/0x290 [ 187.587181][ T2504] ? security_inode_follow_link+0x7e/0x180 [ 187.587209][ T2504] ? __cfi_proc_self_get_link+0x10/0x10 [ 187.587237][ T2504] pick_link+0x6d4/0xe80 [ 187.587257][ T2504] step_into+0xc33/0xf10 [ 187.587275][ T2504] ? read_word_at_a_time+0x1a/0x40 [ 187.587300][ T2504] ? set_root+0x420/0x420 [ 187.587318][ T2504] ? inode_permission+0xf3/0x4c0 [ 187.587340][ T2504] link_path_walk+0x746/0xeb0 [ 187.587363][ T2504] path_openat+0x298/0x35a0 [ 187.587390][ T2504] ? kasan_save_alloc_info+0x3a/0x50 [ 187.587407][ T2504] ? __kasan_slab_alloc+0x73/0x90 [ 187.587430][ T2504] ? getname+0x1b/0x30 [ 187.587450][ T2504] ? x64_sys_call+0xe69/0x2ee0 [ 187.587467][ T2504] ? do_syscall_64+0x57/0xf0 [ 187.587486][ T2504] ? do_filp_open+0x440/0x440 [ 187.587522][ T2504] do_filp_open+0x1f2/0x440 [ 187.587549][ T2504] ? __cfi_do_filp_open+0x10/0x10 [ 187.587579][ T2504] ? alloc_fd+0x4c1/0x570 [ 187.587604][ T2504] do_sys_openat2+0x134/0x1d0 [ 187.587632][ T2504] ? fput+0x1a4/0x230 [ 187.587657][ T2504] ? do_sys_open+0x100/0x100 [ 187.587687][ T2504] __x64_sys_openat+0x13a/0x170 [ 187.587716][ T2504] x64_sys_call+0xe69/0x2ee0 [ 187.587733][ T2504] do_syscall_64+0x57/0xf0 [ 187.587749][ T2504] ? clear_bhb_loop+0x50/0xa0 [ 187.587772][ T2504] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 187.587793][ T2504] RIP: 0033:0x7fabc4f5e98e [ 187.587810][ T2504] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 187.587826][ T2504] RSP: 002b:00007fabc5e91f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 187.587846][ T2504] RAX: ffffffffffffffda RBX: 00007fabc5e926c0 RCX: 00007fabc4f5e98e [ 187.587860][ T2504] RDX: 0000000000000000 RSI: 00007fabc5034776 RDI: ffffffffffffff9c [ 187.587874][ T2504] RBP: 00007fabc503503b R08: 0000000000000000 R09: 0000000000000000 [ 187.587886][ T2504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.587897][ T2504] R13: 00007fabc5226038 R14: 00007fabc5225fa0 R15: 00007fff5b9c9a88 [ 187.587915][ T2504] [ 187.934950][ T615] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 187.957044][ T2511] ªªªªªª: renamed from vlan0 (while UP) [ 188.084900][ T615] usb 1-1: Using ep0 maxpacket: 16 [ 188.090499][ T615] usb 1-1: too many configurations: 112, using maximum allowed: 8 [ 188.104666][ T615] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 188.113787][ T615] usb 1-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 188.122281][ T615] usb 1-1: Product: syz [ 188.126494][ T615] usb 1-1: Manufacturer: syz [ 188.306008][ T335] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 188.466054][ T335] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 188.483727][ T335] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.509865][ T335] usb 7-1: config 0 interface 0 has no altsetting 0 [ 188.523213][ T335] usb 7-1: New USB device found, idVendor=04b3, idProduct=3100, bcdDevice= 0.00 [ 188.542329][ T335] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.588596][ T2528] netlink: 8 bytes leftover after parsing attributes in process `syz.7.583'. [ 188.662126][ T36] audit: type=1400 audit(1789324196.260:13599): avc: denied { mount } for pid=2527 comm="syz.7.583" name="/" dev="pstore" ino=1258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 188.894204][ T2538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=2538 comm=syz.1.585 [ 190.054948][ T2559] input: syz0 as /devices/virtual/input/input12 [ 190.170723][ T36] audit: type=1400 audit(1789324197.770:13600): avc: denied { write } for pid=2560 comm="syz.1.593" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 190.397063][ T615] usb 1-1: USB disconnect, device number 60 [ 190.412657][ T36] audit: type=1400 audit(1789324198.010:13601): avc: denied { write } for pid=2564 comm="syz.0.595" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 190.496954][ T335] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 190.666083][ T335] usb 2-1: config 1 has an invalid interface number: 1 but max is 0 [ 190.674237][ T335] usb 2-1: config 1 has an invalid descriptor of length 215, skipping remainder of the config [ 190.684969][ T335] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 190.693990][ T335] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 190.710978][ T335] usb 2-1: config 1 interface 1 has no altsetting 0 [ 190.719424][ T335] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 190.728809][ T335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.744966][ T335] usb 2-1: Product: syz [ 190.749357][ T335] usb 2-1: Manufacturer: syz [ 190.754366][ T335] usb 2-1: SerialNumber: syz [ 190.851704][ T36] audit: type=1400 audit(1789324198.450:13602): avc: denied { mounton } for pid=2582 comm="syz.0.600" path="/156/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 190.877877][ T2583] random: crng reseeded on system resumption [ 190.942157][ T36] audit: type=1400 audit(1789324198.540:13603): avc: denied { execute_no_trans } for pid=2585 comm="syz.0.601" path="/157/file0" dev="tmpfs" ino=925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 191.029866][ T335] usb 7-1: USB disconnect, device number 5 [ 191.056108][ T36] audit: type=1400 audit(1789324198.660:13604): avc: denied { bind } for pid=2589 comm="syz.6.603" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 191.077334][ T2590] netlink: 8 bytes leftover after parsing attributes in process `syz.6.603'. [ 191.092442][ T36] audit: type=1400 audit(1789324198.680:13605): avc: denied { name_bind } for pid=2589 comm="syz.6.603" src=1028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 191.115350][ T36] audit: type=1400 audit(1789324198.680:13606): avc: denied { node_bind } for pid=2589 comm="syz.6.603" saddr=100.1.1.0 src=1028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 191.294963][ T31] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 191.454897][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 191.471197][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.491551][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 191.506610][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 191.524891][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 191.533050][ T31] usb 1-1: SerialNumber: syz [ 192.434941][ T31] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 192.564958][ T31] usb 7-1: device descriptor read/64, error -71 [ 192.804942][ T31] usb 7-1: device descriptor read/64, error -71 [ 193.044933][ T31] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 193.185072][ T31] usb 7-1: device descriptor read/64, error -71 [ 193.257129][ T2045] usb 2-1: USB disconnect, device number 54 [ 193.316208][ T36] audit: type=1400 audit(1789324200.920:13607): avc: denied { audit_write } for pid=2617 comm="syz.7.610" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 193.444915][ T31] usb 7-1: device descriptor read/64, error -71 [ 193.555032][ T31] usb usb7-port1: attempt power cycle [ 193.904958][ T31] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 193.945987][ T31] usb 7-1: device descriptor read/8, error -71 [ 194.066019][ T343] usb 1-1: USB disconnect, device number 61 [ 194.075945][ T31] usb 7-1: device descriptor read/8, error -71 [ 194.171393][ T2637] netlink: 4 bytes leftover after parsing attributes in process `syz.7.615'. [ 194.247179][ T36] audit: type=1400 audit(1789324201.850:13608): avc: denied { remount } for pid=2638 comm="syz.0.616" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 194.314921][ T31] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 194.327559][ T36] audit: type=1400 audit(1789324201.930:13609): avc: denied { map } for pid=2642 comm="syz.0.618" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 194.355986][ T31] usb 7-1: device descriptor read/8, error -71 [ 194.394238][ T2647] FAULT_INJECTION: forcing a failure. [ 194.394238][ T2647] name failslab, interval 1, probability 0, space 0, times 0 [ 194.425147][ T2647] CPU: 1 UID: 0 PID: 2647 Comm: syz.7.620 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 194.425193][ T2647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 194.425210][ T2647] Call Trace: [ 194.425219][ T2647] [ 194.425229][ T2647] __dump_stack+0x21/0x30 [ 194.425273][ T2647] dump_stack_lvl+0x140/0x1c0 [ 194.425309][ T2647] ? __cfi_dump_stack_lvl+0x10/0x10 [ 194.425344][ T2647] ? __kasan_check_write+0x18/0x20 [ 194.425371][ T2647] ? _raw_spin_lock+0x92/0x120 [ 194.425396][ T2647] dump_stack+0x19/0x20 [ 194.425429][ T2647] should_fail_ex+0x3c2/0x510 [ 194.425460][ T2647] should_failslab+0xac/0x100 [ 194.425493][ T2647] __kmalloc_cache_noprof+0x41/0x470 [ 194.425521][ T2647] ? down_write+0xee/0x2b0 [ 194.425552][ T2647] ? dummy_alloc_request+0x8e/0x1f0 [ 194.425578][ T2647] ? __cfi_down_write+0x10/0x10 [ 194.425610][ T2647] dummy_alloc_request+0x8e/0x1f0 [ 194.425636][ T2647] usb_ep_alloc_request+0x75/0x1c0 [ 194.425668][ T2647] gadget_bind+0xe5/0x590 [ 194.425693][ T2647] ? __cfi_mutex_unlock+0x10/0x10 [ 194.425721][ T2647] ? kernfs_put+0x314/0x360 [ 194.425755][ T2647] ? __cfi_gadget_bind+0x10/0x10 [ 194.425778][ T2647] gadget_bind_driver+0x301/0x9c0 [ 194.425810][ T2647] ? sysfs_create_link+0x6c/0x90 [ 194.425840][ T2647] ? __cfi_gadget_bind_driver+0x10/0x10 [ 194.425872][ T2647] really_probe+0x2e1/0x8b0 [ 194.425897][ T2647] __driver_probe_device+0x193/0x280 [ 194.425921][ T2647] driver_probe_device+0x54/0x3f0 [ 194.425947][ T2647] __driver_attach+0x422/0x5e0 [ 194.425969][ T2647] bus_for_each_dev+0x249/0x2d0 [ 194.426000][ T2647] ? __cfi___driver_attach+0x10/0x10 [ 194.426024][ T2647] ? __cfi_bus_for_each_dev+0x10/0x10 [ 194.426053][ T2647] ? __kasan_kmalloc+0x96/0xb0 [ 194.426084][ T2647] ? _raw_spin_unlock+0x45/0x60 [ 194.426108][ T2647] ? klist_add_tail+0x1dd/0x220 [ 194.426145][ T2647] driver_attach+0x46/0x50 [ 194.426166][ T2647] bus_add_driver+0x393/0x730 [ 194.426200][ T2647] driver_register+0x2b7/0x3c0 [ 194.426228][ T2647] usb_gadget_register_driver_owner+0xfc/0x270 [ 194.426258][ T2647] raw_ioctl+0x144c/0x37a0 [ 194.426283][ T2647] ? __cfi_raw_ioctl+0x10/0x10 [ 194.426305][ T2647] ? selinux_file_ioctl+0x732/0x1480 [ 194.426333][ T2647] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 194.426366][ T2647] ? __fget_files+0x2bc/0x330 [ 194.426397][ T2647] ? bpf_lsm_file_ioctl+0xd/0x20 [ 194.426429][ T2647] ? security_file_ioctl+0x3e/0x110 [ 194.426454][ T2647] ? __cfi_raw_ioctl+0x10/0x10 [ 194.426474][ T2647] __se_sys_ioctl+0x126/0x1b0 [ 194.426506][ T2647] __x64_sys_ioctl+0x7f/0xa0 [ 194.426537][ T2647] x64_sys_call+0x1878/0x2ee0 [ 194.426561][ T2647] do_syscall_64+0x57/0xf0 [ 194.426583][ T2647] ? clear_bhb_loop+0x50/0xa0 [ 194.426615][ T2647] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 194.426645][ T2647] RIP: 0033:0x7f67d1f9ddeb [ 194.426674][ T2647] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 194.426697][ T2647] RSP: 002b:00007f67d2d82f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.426724][ T2647] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f67d1f9ddeb [ 194.426744][ T2647] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 194.426761][ T2647] RBP: 00007f67d2d83fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 194.426779][ T2647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.426795][ T2647] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 194.426815][ T2647] [ 194.433546][ T2647] raw-gadget.0 gadget.7: usb_ep_alloc_request failed [ 194.786487][ T2647] udc dummy_udc.7: failed to start USB Raw Gadget: -12 [ 194.793403][ T2647] raw-gadget.0 gadget.7: probe with driver raw-gadget.0 failed with error -12 [ 194.803118][ T2647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.812476][ T2647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.820354][ T31] usb 7-1: device descriptor read/8, error -71 [ 194.889184][ T36] audit: type=1400 audit(1789324202.490:13610): avc: denied { map } for pid=2653 comm="syz.0.621" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 194.915874][ T2654] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 194.935042][ T31] usb usb7-port1: unable to enumerate USB device [ 194.956547][ T2654] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 195.144928][ T343] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 195.184927][ T31] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 195.275176][ T343] usb 7-1: device descriptor read/64, error -71 [ 195.334938][ T31] usb 2-1: device descriptor read/64, error -71 [ 195.512302][ T2675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=2675 comm=syz.6.628 [ 195.525852][ T2675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=2675 comm=syz.6.628 [ 195.546006][ T36] audit: type=1400 audit(1789324203.150:13611): avc: denied { ioctl } for pid=2674 comm="syz.6.628" path="socket:[26773]" dev="sockfs" ino=26773 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 195.584913][ T31] usb 2-1: device descriptor read/64, error -71 [ 195.732164][ T36] audit: type=1326 audit(1789324203.330:13612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2678 comm="syz.6.629" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc4f9e159 code=0x7ff00000 [ 195.757740][ T36] audit: type=1326 audit(1789324203.330:13613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2678 comm="syz.6.629" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc4f9e159 code=0x7ff00000 [ 195.783531][ T36] audit: type=1326 audit(1789324203.330:13614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2678 comm="syz.6.629" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc4f9e159 code=0x7ff00000 [ 195.809149][ T36] audit: type=1326 audit(1789324203.330:13615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2678 comm="syz.6.629" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc4f9e159 code=0x7ff00000 [ 195.834906][ T31] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 195.835800][ T36] audit: type=1326 audit(1789324203.330:13616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2678 comm="syz.6.629" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc4f9e159 code=0x7ff00000 [ 195.870358][ T36] audit: type=1326 audit(1789324203.330:13617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2678 comm="syz.6.629" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc4f9e159 code=0x7ff00000 [ 195.984916][ T31] usb 2-1: device descriptor read/64, error -71 [ 196.176758][ T2683] FAULT_INJECTION: forcing a failure. [ 196.176758][ T2683] name failslab, interval 1, probability 0, space 0, times 0 [ 196.210580][ T2683] CPU: 0 UID: 0 PID: 2683 Comm: syz.0.630 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 196.210618][ T2683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 196.210635][ T2683] Call Trace: [ 196.210643][ T2683] [ 196.210654][ T2683] __dump_stack+0x21/0x30 [ 196.210700][ T2683] dump_stack_lvl+0x140/0x1c0 [ 196.210737][ T2683] ? __cfi_dump_stack_lvl+0x10/0x10 [ 196.210776][ T2683] dump_stack+0x19/0x20 [ 196.210809][ T2683] should_fail_ex+0x3c2/0x510 [ 196.210843][ T2683] should_failslab+0xac/0x100 [ 196.210875][ T2683] kmem_cache_alloc_noprof+0x42/0x410 [ 196.210902][ T2683] ? security_file_alloc+0x49/0x220 [ 196.210925][ T2683] ? kasan_save_alloc_info+0x3a/0x50 [ 196.210950][ T2683] security_file_alloc+0x49/0x220 [ 196.210975][ T2683] init_file+0x9e/0x210 [ 196.211011][ T2683] alloc_empty_file+0xd9/0x270 [ 196.211044][ T2683] path_openat+0xf4/0x35a0 [ 196.211079][ T2683] ? stack_depot_save_flags+0x38/0x800 [ 196.211121][ T2683] ? do_pte_missing+0x28e9/0x4440 [ 196.211155][ T2683] ? schedule+0xc5/0x240 [ 196.211183][ T2683] ? kasan_save_track+0x4f/0x80 [ 196.211212][ T2683] ? kasan_save_track+0x3e/0x80 [ 196.211241][ T2683] ? kasan_save_alloc_info+0x3a/0x50 [ 196.211265][ T2683] ? __kasan_slab_alloc+0x73/0x90 [ 196.211296][ T2683] ? getname+0x1b/0x30 [ 196.211322][ T2683] ? do_sys_openat2+0xda/0x1d0 [ 196.211357][ T2683] ? __x64_sys_openat+0x13a/0x170 [ 196.211392][ T2683] ? x64_sys_call+0xe69/0x2ee0 [ 196.211415][ T2683] ? do_syscall_64+0x57/0xf0 [ 196.211440][ T2683] ? do_filp_open+0x440/0x440 [ 196.211475][ T2683] do_filp_open+0x1f2/0x440 [ 196.211510][ T2683] ? __cfi_do_filp_open+0x10/0x10 [ 196.211548][ T2683] ? alloc_fd+0x4c1/0x570 [ 196.211579][ T2683] do_sys_openat2+0x134/0x1d0 [ 196.211614][ T2683] ? do_sys_open+0x100/0x100 [ 196.211649][ T2683] ? __kasan_check_write+0x18/0x20 [ 196.211674][ T2683] ? do_user_addr_fault+0xbf5/0x1230 [ 196.211714][ T2683] ? __cfi_ksys_write+0x10/0x10 [ 196.211741][ T2683] __x64_sys_openat+0x13a/0x170 [ 196.211779][ T2683] x64_sys_call+0xe69/0x2ee0 [ 196.211802][ T2683] do_syscall_64+0x57/0xf0 [ 196.211824][ T2683] ? clear_bhb_loop+0x50/0xa0 [ 196.211854][ T2683] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 196.211883][ T2683] RIP: 0033:0x7f00fe55e98e [ 196.211905][ T2683] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 196.211927][ T2683] RSP: 002b:00007f00fcfe0ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 196.211956][ T2683] RAX: ffffffffffffffda RBX: 00007f00fcfe36c0 RCX: 00007f00fe55e98e [ 196.211975][ T2683] RDX: 0000000000000002 RSI: 00007f00fe6343da RDI: ffffffffffffff9c [ 196.211992][ T2683] RBP: 00007f00fe63503b R08: 0000000000000000 R09: 0000000000000000 [ 196.212007][ T2683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000097 [ 196.212022][ T2683] R13: 0000200000000000 R14: 0000000000000000 R15: 00007fffcd95bda8 [ 196.212043][ T2683] [ 196.235063][ T31] usb 2-1: device descriptor read/64, error -71 [ 196.625101][ T31] usb usb2-port1: attempt power cycle [ 196.657602][ T2685] overlay: ./file0 is not a directory [ 196.955423][ T2688] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 196.965239][ T2688] SELinux: failed to load policy [ 196.974952][ T31] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 197.005921][ T31] usb 2-1: device descriptor read/8, error -71 [ 197.136017][ T31] usb 2-1: device descriptor read/8, error -71 [ 197.381251][ T2701] cgroup: noprefix used incorrectly [ 197.386609][ T31] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 197.425974][ T31] usb 2-1: device descriptor read/8, error -71 [ 197.555990][ T31] usb 2-1: device descriptor read/8, error -71 [ 197.623506][ T2709] No source specified [ 197.665111][ T31] usb usb2-port1: unable to enumerate USB device [ 197.974919][ T343] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 198.124928][ T343] usb 7-1: Using ep0 maxpacket: 8 [ 198.131202][ T343] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 198.144738][ T343] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 198.157768][ T343] usb 7-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 198.167012][ T343] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.310859][ T2721] tmpfs: Unknown parameter '' [ 198.510707][ T2735] fuse: root generation should be zero [ 198.674958][ T66] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 198.860825][ T66] usb 1-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 198.870091][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.878663][ T66] usb 1-1: Product: syz [ 198.882986][ T66] usb 1-1: Manufacturer: syz [ 198.887809][ T66] usb 1-1: SerialNumber: syz [ 200.733309][ T31] usb 7-1: USB disconnect, device number 12 [ 200.982922][ T2772] rust_binder: Write failure EFAULT in pid:103 [ 201.032568][ T36] kauditd_printk_skb: 4571 callbacks suppressed [ 201.032592][ T36] audit: type=1400 audit(1789324208.630:18189): avc: denied { listen } for pid=2771 comm="syz.6.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 201.232937][ T2783] FAULT_INJECTION: forcing a failure. [ 201.232937][ T2783] name failslab, interval 1, probability 0, space 0, times 0 [ 201.254750][ T2783] CPU: 1 UID: 0 PID: 2783 Comm: syz.6.659 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 201.254797][ T2783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.254814][ T2783] Call Trace: [ 201.254824][ T2783] [ 201.254835][ T2783] __dump_stack+0x21/0x30 [ 201.254880][ T2783] dump_stack_lvl+0x140/0x1c0 [ 201.254913][ T2783] ? __cfi_dump_stack_lvl+0x10/0x10 [ 201.254949][ T2783] dump_stack+0x19/0x20 [ 201.254980][ T2783] should_fail_ex+0x3c2/0x510 [ 201.255010][ T2783] should_failslab+0xac/0x100 [ 201.255040][ T2783] kmem_cache_alloc_noprof+0x42/0x410 [ 201.255066][ T2783] ? security_inode_alloc+0x51/0x230 [ 201.255097][ T2783] ? __cfi_make_kgid+0x10/0x10 [ 201.255126][ T2783] security_inode_alloc+0x51/0x230 [ 201.255157][ T2783] inode_init_always_gfp+0x756/0x9e0 [ 201.255188][ T2783] ? __cfi_sock_alloc_inode+0x10/0x10 [ 201.255214][ T2783] alloc_inode+0xc5/0x270 [ 201.255243][ T2783] ? bpf_lsm_socket_create+0xd/0x20 [ 201.255271][ T2783] new_inode_pseudo+0x19/0x40 [ 201.255301][ T2783] sock_create_lite+0x8f/0x500 [ 201.255327][ T2783] __netlink_kernel_create+0xcf/0x8a0 [ 201.255362][ T2783] ? __netlink_kernel_create+0x6ff/0x8a0 [ 201.255396][ T2783] ? __cfi___netlink_kernel_create+0x10/0x10 [ 201.255430][ T2783] ? __asan_memcpy+0x5a/0x80 [ 201.255457][ T2783] genl_pernet_init+0xb8/0x170 [ 201.255482][ T2783] ? __cfi_genl_pernet_init+0x10/0x10 [ 201.255506][ T2783] ? rtnetlink_net_init+0xbf/0x140 [ 201.255534][ T2783] ? __cfi_genl_rcv+0x10/0x10 [ 201.255557][ T2783] ? __cfi_genl_bind+0x10/0x10 [ 201.255579][ T2783] ? __cfi_genl_unbind+0x10/0x10 [ 201.255614][ T2783] ? __cfi_genl_release+0x10/0x10 [ 201.255639][ T2783] ? __cfi_rtnetlink_rcv+0x10/0x10 [ 201.255665][ T2783] ? __cfi_rtnetlink_bind+0x10/0x10 [ 201.255694][ T2783] ? __kasan_check_write+0x18/0x20 [ 201.255721][ T2783] ? __mutex_init+0xa6/0x1a0 [ 201.255759][ T2783] ops_init+0x2ff/0x5d0 [ 201.255785][ T2783] ? __kasan_check_write+0x18/0x20 [ 201.255810][ T2783] ? rwsem_read_trylock+0x275/0x5a0 [ 201.255850][ T2783] setup_net+0x227/0x9b0 [ 201.255873][ T2783] ? copy_net_ns+0xa20/0xa20 [ 201.255897][ T2783] ? down_read_killable+0x7f/0x100 [ 201.255931][ T2783] ? __cfi_down_read_killable+0x10/0x10 [ 201.255967][ T2783] copy_net_ns+0x4fc/0xa20 [ 201.255990][ T2783] create_new_namespaces+0x390/0x6f0 [ 201.256030][ T2783] unshare_nsproxy_namespaces+0x124/0x180 [ 201.256070][ T2783] ksys_unshare+0x4f9/0x920 [ 201.256103][ T2783] ? fput+0x1a4/0x230 [ 201.256139][ T2783] ? __cfi_ksys_unshare+0x10/0x10 [ 201.256174][ T2783] ? __kasan_check_write+0x18/0x20 [ 201.256202][ T2783] __x64_sys_unshare+0x3c/0x50 [ 201.256236][ T2783] x64_sys_call+0x2998/0x2ee0 [ 201.256261][ T2783] do_syscall_64+0x57/0xf0 [ 201.256284][ T2783] ? clear_bhb_loop+0x50/0xa0 [ 201.256316][ T2783] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 201.256347][ T2783] RIP: 0033:0x7fabc4f9e159 [ 201.256370][ T2783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.256392][ T2783] RSP: 002b:00007fabc5e92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 201.256421][ T2783] RAX: ffffffffffffffda RBX: 00007fabc5225fa0 RCX: 00007fabc4f9e159 [ 201.256442][ T2783] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042040400 [ 201.256459][ T2783] RBP: 00007fabc503503b R08: 0000000000000000 R09: 0000000000000000 [ 201.256477][ T2783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.256494][ T2783] R13: 00007fabc5226038 R14: 00007fabc5225fa0 R15: 00007fff5b9c9a88 [ 201.256517][ T2783] [ 201.609534][ T36] audit: type=1400 audit(1789324209.210:18190): avc: denied { mounton } for pid=2782 comm="syz.6.659" path="/36/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 201.633893][ T2788] x_tables: arp_tables: NFLOG target: not valid for this family [ 201.844952][ T322] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 201.894923][ T2045] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 201.974933][ T322] usb 2-1: device descriptor read/64, error -71 [ 202.034927][ T2045] usb 7-1: device descriptor read/64, error -71 [ 202.234927][ T322] usb 2-1: device descriptor read/64, error -71 [ 202.284936][ T2045] usb 7-1: device descriptor read/64, error -71 [ 202.494933][ T322] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 202.534928][ T2045] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 202.624939][ T322] usb 2-1: device descriptor read/64, error -71 [ 202.674186][ T31] usb 1-1: USB disconnect, device number 62 [ 202.675021][ T2045] usb 7-1: device descriptor read/64, error -71 [ 202.704489][ T2792] rust_binder: 2791:2792 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 202.713091][ T2792] rust_binder: Write failure EINVAL in pid:706 [ 202.884938][ T322] usb 2-1: device descriptor read/64, error -71 [ 202.944958][ T2045] usb 7-1: device descriptor read/64, error -71 [ 202.982207][ T36] audit: type=1400 audit(1789324210.580:18191): avc: denied { accept } for pid=2801 comm="syz.0.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 203.005151][ T322] usb usb2-port1: attempt power cycle [ 203.064945][ T2045] usb usb7-port1: attempt power cycle [ 203.344939][ T322] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 203.376532][ T322] usb 2-1: device descriptor read/8, error -71 [ 203.394940][ T335] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 203.424934][ T2045] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 203.446041][ T2045] usb 7-1: device descriptor read/8, error -71 [ 203.506023][ T322] usb 2-1: device descriptor read/8, error -71 [ 203.546153][ T335] usb 1-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.559325][ T335] usb 1-1: config 0 interface 0 has no altsetting 0 [ 203.566030][ T335] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 203.575504][ T335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.584313][ T2045] usb 7-1: device descriptor read/8, error -71 [ 203.774921][ T322] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 203.796039][ T322] usb 2-1: device descriptor read/8, error -71 [ 203.825008][ T2045] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 203.846027][ T2045] usb 7-1: device descriptor read/8, error -71 [ 203.925997][ T322] usb 2-1: device descriptor read/8, error -71 [ 203.976150][ T2045] usb 7-1: device descriptor read/8, error -71 [ 204.045042][ T322] usb usb2-port1: unable to enumerate USB device [ 204.094936][ T2045] usb usb7-port1: unable to enumerate USB device [ 204.644917][ T2045] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 204.814917][ T2045] usb 2-1: Using ep0 maxpacket: 16 [ 204.827757][ T2045] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 204.844907][ T2045] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.852975][ T2045] usb 2-1: Product: ᙋ솋擜봶ç¿é±ä ­æ¬½à³šêªá¸½è¸¦çµ§åŸ„é’›é“놅è°ë¼­æ›£ë³®ëªŒå´¾ìµ´éºœã™´ç‡„犥惕 [ 204.884912][ T2045] usb 2-1: Manufacturer: ã° [ 204.889594][ T2045] usb 2-1: SerialNumber: syz [ 205.159562][ T2817] rust_binder: 2814:2817 transaction call to 0:0 failed EINVAL, code 0 size 0-0 [ 205.960395][ T2832] can: request_module (can-proto-0) failed. [ 205.992928][ T2832] kvm_intel: kvm [2831]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x2 [ 206.012401][ T335] rust_binder: 2814: undelivered TRANSACTION_ERROR: 29201 [ 206.173306][ T335] usb 1-1: USB disconnect, device number 63 [ 206.205043][ T2837] syz.0.677: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 206.221223][ T2837] CPU: 1 UID: 0 PID: 2837 Comm: syz.0.677 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 206.221263][ T2837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 206.221281][ T2837] Call Trace: [ 206.221291][ T2837] [ 206.221302][ T2837] __dump_stack+0x21/0x30 [ 206.221348][ T2837] dump_stack_lvl+0x140/0x1c0 [ 206.221387][ T2837] ? __cfi_dump_stack_lvl+0x10/0x10 [ 206.221426][ T2837] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 206.221456][ T2837] dump_stack+0x19/0x20 [ 206.221491][ T2837] warn_alloc+0x1e7/0x2c0 [ 206.221527][ T2837] ? stack_depot_save_flags+0x38/0x800 [ 206.221563][ T2837] ? __cfi_warn_alloc+0x10/0x10 [ 206.221600][ T2837] ? kasan_save_track+0x3e/0x80 [ 206.221631][ T2837] ? kasan_save_alloc_info+0x3a/0x50 [ 206.221657][ T2837] ? xsk_init_queue+0xb2/0x120 [ 206.221683][ T2837] ? xsk_setsockopt+0x411/0x760 [ 206.221708][ T2837] ? do_sock_setsockopt+0x27f/0x410 [ 206.221742][ T2837] ? __x64_sys_setsockopt+0x18c/0x220 [ 206.221776][ T2837] ? x64_sys_call+0x2adc/0x2ee0 [ 206.221800][ T2837] ? do_syscall_64+0x57/0xf0 [ 206.221822][ T2837] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 206.221854][ T2837] __vmalloc_node_range_noprof+0x136/0x1300 [ 206.221899][ T2837] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 206.221940][ T2837] ? kasan_save_alloc_info+0x3a/0x50 [ 206.221965][ T2837] ? __kasan_kmalloc+0x96/0xb0 [ 206.222008][ T2837] ? __kmalloc_cache_noprof+0x23c/0x470 [ 206.222039][ T2837] vmalloc_user_noprof+0x77/0x90 [ 206.222061][ T2837] ? xskq_create+0xdb/0x290 [ 206.222091][ T2837] xskq_create+0xdb/0x290 [ 206.222120][ T2837] xsk_init_queue+0xb2/0x120 [ 206.222148][ T2837] xsk_setsockopt+0x411/0x760 [ 206.222175][ T2837] ? __cfi_xsk_setsockopt+0x10/0x10 [ 206.222202][ T2837] ? do_futex+0x32a/0x510 [ 206.222238][ T2837] ? errseq_sample+0x48/0x70 [ 206.222276][ T2837] ? file_init_path+0x434/0x590 [ 206.222310][ T2837] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 206.222340][ T2837] ? security_socket_setsockopt+0x3d/0x100 [ 206.222377][ T2837] ? __cfi_xsk_setsockopt+0x10/0x10 [ 206.222404][ T2837] do_sock_setsockopt+0x27f/0x410 [ 206.222439][ T2837] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 206.222473][ T2837] ? __fget_files+0x2bc/0x330 [ 206.222506][ T2837] __x64_sys_setsockopt+0x18c/0x220 [ 206.222541][ T2837] x64_sys_call+0x2adc/0x2ee0 [ 206.222565][ T2837] do_syscall_64+0x57/0xf0 [ 206.222588][ T2837] ? clear_bhb_loop+0x50/0xa0 [ 206.222619][ T2837] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 206.222650][ T2837] RIP: 0033:0x7f00fe59e159 [ 206.222673][ T2837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.222696][ T2837] RSP: 002b:00007f00fcfe3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 206.222724][ T2837] RAX: ffffffffffffffda RBX: 00007f00fe825fa0 RCX: 00007f00fe59e159 [ 206.222745][ T2837] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 206.222762][ T2837] RBP: 00007f00fe63503b R08: 0000000000000004 R09: 0000000000000000 [ 206.222778][ T2837] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.222795][ T2837] R13: 00007f00fe826038 R14: 00007f00fe825fa0 R15: 00007fffcd95bda8 [ 206.222817][ T2837] [ 206.222845][ T2837] Mem-Info: [ 206.543930][ T36] audit: type=1400 audit(1789324214.140:18192): avc: denied { getopt } for pid=2836 comm="syz.0.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 206.543978][ T2837] active_anon:23248 inactive_anon:0 isolated_anon:0 [ 206.543978][ T2837] active_file:16200 inactive_file:13518 isolated_file:0 [ 206.543978][ T2837] unevictable:0 dirty:23 writeback:0 [ 206.543978][ T2837] slab_reclaimable:5012 slab_unreclaimable:73885 [ 206.543978][ T2837] mapped:24587 shmem:16890 pagetables:1037 [ 206.543978][ T2837] sec_pagetables:0 bounce:0 [ 206.543978][ T2837] kernel_misc_reclaimable:0 [ 206.543978][ T2837] free:1495678 free_pcp:2411 free_cma:0 [ 206.566885][ T2837] Node 0 active_anon:92992kB inactive_anon:0kB active_file:64800kB inactive_file:54072kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98348kB dirty:92kB writeback:0kB shmem:67560kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6068kB pagetables:4148kB sec_pagetables:0kB all_unreclaimable? no [ 206.643109][ T2837] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963372kB mlocked:0kB bounce:0kB free_pcp:5208kB local_pcp:5208kB free_cma:0kB [ 206.682390][ T2837] lowmem_reserve[]: 0 3921 3921 [ 206.687643][ T2837] Normal free:3023700kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:92992kB inactive_anon:0kB active_file:64800kB inactive_file:54072kB unevictable:0kB writepending:92kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:5116kB local_pcp:1724kB free_cma:0kB [ 206.719217][ T36] audit: type=1400 audit(1789324214.300:18193): avc: denied { setopt } for pid=2841 comm="syz.6.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 206.740528][ T2837] lowmem_reserve[]: 0 0 0 [ 206.745114][ T2837] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 206.767276][ T2837] Normal: 8*4kB (UME) 37*8kB (U) 180*16kB (UM) 340*32kB (UME) 106*64kB (UME) 137*128kB (UME) 87*256kB (UME) 40*512kB (UME) 13*1024kB (UME) 10*2048kB (UME) 710*4096kB (UM) = 3023112kB [ 206.786005][ T2837] 46604 total pagecache pages [ 206.790989][ T2837] 0 pages in swap cache [ 206.795457][ T2837] Free swap = 124316kB [ 206.804918][ T343] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 206.812489][ T2837] Total swap = 124996kB [ 206.817036][ T2837] 2097051 pages RAM [ 206.820875][ T2837] 0 pages HighMem/MovableOnly [ 206.825924][ T2837] 352242 pages reserved [ 206.830111][ T2837] 0 pages cma reserved [ 206.837394][ T2837] Memory allocations: [ 206.841489][ T2837] 0 B 0 init/main.c:1477 func:do_initcalls [ 206.849042][ T2837] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 206.857293][ T2837] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 206.866334][ T2837] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 206.874282][ T2837] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 206.882686][ T2837] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 206.903727][ T2837] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 206.911968][ T2837] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 206.922991][ T2837] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 206.931124][ T2837] 0 B 0 init/initramfs.c:101 func:find_link [ 206.976841][ T343] usb 1-1: unable to get BOS descriptor or descriptor too short [ 206.995317][ T343] usb 1-1: not running at top speed; connect to a high speed hub [ 207.004007][ T343] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 207.012730][ T343] usb 1-1: config 0 has no interface number 0 [ 207.019070][ T343] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 207.040778][ T343] usb 1-1: config 0 interface 88 has no altsetting 0 [ 207.057034][ T343] usb 1-1: language id specifier not provided by device, defaulting to English [ 207.069330][ T343] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 207.078854][ T343] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 207.099746][ T343] usb 1-1: Product: syz [ 207.104371][ T343] usb 1-1: SerialNumber: syz [ 207.267956][ T2045] usb 2-1: USB disconnect, device number 63 [ 207.296072][ T36] audit: type=1400 audit(1789324214.900:18194): avc: denied { read } for pid=2853 comm="syz.1.682" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 207.448242][ T2859] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 207.455980][ T2859] SELinux: failed to load policy [ 207.675075][ T310] Bluetooth: hci1: Frame reassembly failed (-84) [ 207.681581][ T2875] Bluetooth: hci0: setting up ROME/QCA6390 [ 207.681830][ T2530] Bluetooth: hci1: Frame reassembly failed (-84) Hü[ 207.965136][ T2045] usb 2-1: new high-speed USB device number 64 using dummy_hcd ü[ 208.116134][ T2045] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.128082][ T2045] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 208.137455][ T2045] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.145866][ T2045] usb 2-1: Product: syz [ 208.150165][ T2045] usb 2-1: Manufacturer: syz [ 208.154828][ T2045] usb 2-1: SerialNumber: syz [ 208.818785][ T36] audit: type=1400 audit(1789324216.420:18195): avc: denied { write } for pid=2880 comm="syz.6.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 209.222272][ T343] usb 1-1: USB disconnect, device number 64 [ 209.734980][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 209.741438][ T646] Bluetooth: hci1: command 0x1003 tx timeout [ 209.774920][ T335] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 209.934897][ T335] usb 7-1: Using ep0 maxpacket: 32 [ 209.946014][ T335] usb 7-1: unable to get BOS descriptor or descriptor too short [ 209.964639][ T335] usb 7-1: config index 0 descriptor too short (expected 37, got 36) [ 209.973325][ T335] usb 7-1: config 254 has an invalid interface number: 236 but max is 0 [ 209.994893][ T335] usb 7-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 210.005551][ T335] usb 7-1: config 254 has no interface number 0 [ 210.011850][ T335] usb 7-1: config 254 interface 236 has no altsetting 0 [ 210.020724][ T335] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=64.5b [ 210.031024][ T335] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.039304][ T335] usb 7-1: Product: syz [ 210.043613][ T335] usb 7-1: Manufacturer: syz [ 210.049222][ T335] usb 7-1: SerialNumber: syz [ 210.058845][ T646] Bluetooth: hci0: command tx timeout [ 210.339184][ T2937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=2937 comm=syz.7.711 [ 210.351906][ T2937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=2937 comm=syz.7.711 [ 210.364727][ T2937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=2937 comm=syz.7.711 [ 210.378726][ T2937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=2937 comm=syz.7.711 [ 210.391465][ T2937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=2937 comm=syz.7.711 [ 210.417019][ T335] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 210.425863][ T36] audit: type=1400 audit(1789324218.030:18196): avc: denied { ioctl } for pid=2939 comm="syz.7.712" path="pid:[4026532385]" dev="nsfs" ino=4026532385 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 210.578634][ T335] usb 1-1: unable to get BOS descriptor or descriptor too short [ 210.590222][ T335] usb 1-1: not running at top speed; connect to a high speed hub [ 210.602267][ T335] usb 1-1: config 1 has an invalid interface number: 81 but max is 0 [ 210.611643][ T335] usb 1-1: config 1 has no interface number 0 [ 210.618132][ T36] audit: type=1400 audit(1789324218.220:18197): avc: denied { create } for pid=2956 comm="syz.7.717" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 210.625733][ T335] usb 1-1: config 1 interface 81 altsetting 215 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 210.664915][ T335] usb 1-1: config 1 interface 81 has no altsetting 0 [ 210.675096][ T2875] Bluetooth: hci0: Reading QCA version information failed (-4) [ 210.682709][ T2875] Bluetooth: hci0: Retry BT power ON:0 [ 210.696713][ T335] usb 1-1: New USB device found, idVendor=0499, idProduct=7862, bcdDevice=3b.d1 [ 210.707018][ T335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 Hü[ 210.715705][ T335] usb 1-1: Product: syz [ 210.720194][ T335] usb 1-1: Manufacturer: syz [ 210.724825][ T335] usb 1-1: SerialNumber: syz [ 210.731677][ T36] audit: type=1400 audit(1789324218.330:18198): avc: denied { remove_name } for pid=2956 comm="syz.7.717" name="foo" dev="tracefs" ino=30742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 210.759000][ T36] audit: type=1400 audit(1789324218.330:18199): avc: denied { rmdir } for pid=2956 comm="syz.7.717" name="foo" dev="tracefs" ino=30742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 211.025109][ T2875] Bluetooth: hci0: Reading QCA version information failed (-4) ü[ 211.032893][ T2875] Bluetooth: hci0: Retry BT power ON:1 Hü[ 211.345101][ T2875] Bluetooth: hci0: Reading QCA version information failed (-4) [ 211.352789][ T2875] Bluetooth: hci0: Retry BT power ON:2 Hü[ 211.665100][ T2875] Bluetooth: hci0: Reading QCA version information failed (-4) [ 211.680684][ T2045] usb 2-1: USB disconnect, device number 64 [ 211.781830][ T2972] validate_nla: 55 callbacks suppressed [ 211.781859][ T2972] netlink: 'syz.1.721': attribute type 27 has an invalid length. [ 211.809786][ T2972] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.817229][ T2972] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.501566][ T2045] usb 7-1: USB disconnect, device number 17 [ 212.884922][ T31] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 213.034957][ T31] usb 2-1: device descriptor read/64, error -71 [ 213.090870][ T44] Bluetooth: hci1: Frame reassembly failed (-84) [ 213.098699][ T3030] Bluetooth: hci0: setting up ROME/QCA6390 Hü[ 213.185495][ T335] usb 1-1: USB disconnect, device number 65 [ 213.274909][ T31] usb 2-1: device descriptor read/64, error -71 [ 213.384910][ T343] usb 7-1: new high-speed USB device number 18 using dummy_hcd ü[ 213.524906][ T31] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 213.545896][ T343] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.557748][ T343] usb 7-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 213.567253][ T343] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.575624][ T343] usb 7-1: Product: syz [ 213.580001][ T343] usb 7-1: Manufacturer: syz [ 213.584748][ T343] usb 7-1: SerialNumber: syz [ 213.664922][ T31] usb 2-1: device descriptor read/64, error -71 [ 213.914947][ T31] usb 2-1: device descriptor read/64, error -71 [ 214.025081][ T31] usb usb2-port1: attempt power cycle [ 214.140035][ T3041] 9pnet_fd: Insufficient options for proto=fd [ 214.147222][ T3041] netlink: 72 bytes leftover after parsing attributes in process `syz.0.733'. [ 214.377430][ T31] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 214.405926][ T31] usb 2-1: device descriptor read/8, error -71 [ 214.494068][ T3055] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 214.545939][ T31] usb 2-1: device descriptor read/8, error -71 [ 214.804918][ T31] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 214.826038][ T31] usb 2-1: device descriptor read/8, error -71 [ 214.864918][ T2045] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 214.956042][ T31] usb 2-1: device descriptor read/8, error -71 [ 215.026130][ T2045] usb 1-1: config index 0 descriptor too short (expected 8251, got 59) [ 215.034547][ T2045] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.044960][ T2045] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 215.058938][ T2045] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 215.068278][ T2045] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 215.075701][ T31] usb usb2-port1: unable to enumerate USB device [ 215.076992][ T2045] usb 1-1: SerialNumber: syz [ 215.094944][ T646] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 215.495662][ T54] Bluetooth: hci0: command tx timeout [ 216.088266][ T3030] Bluetooth: hci0: Reading QCA version information failed (-4) [ 216.096050][ T3030] Bluetooth: hci0: Retry BT power ON:0 Hüü[ 216.405799][ T3030] Bluetooth: hci0: Reading QCA version information failed (-4) [ 216.413884][ T3030] Bluetooth: hci0: Retry BT power ON:1 Hü[ 216.725128][ T3030] Bluetooth: hci0: Reading QCA version information failed (-4) [ 216.732843][ T3030] Bluetooth: hci0: Retry BT power ON:2 Hü[ 216.918420][ T36] audit: type=1400 audit(1700006404.360:18200): avc: denied { bind } for pid=3096 comm="syz.7.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 216.990683][ T36] audit: type=1400 audit(1700006404.430:18201): avc: denied { associate } for pid=3106 comm="syz.7.757" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 217.045270][ T3030] Bluetooth: hci0: Reading QCA version information failed (-4) [ 217.070512][ T335] usb 7-1: USB disconnect, device number 18 [ 217.349992][ T3113] syz.6.758: attempt to access beyond end of device [ 217.349992][ T3113] loop6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 217.420507][ T3113] exFAT-fs (loop6): unable to read boot sector [ 217.429000][ T3113] exFAT-fs (loop6): failed to read boot sector [ 217.444908][ T3113] exFAT-fs (loop6): failed to recognize exfat type [ 217.621897][ T2045] usb 1-1: USB disconnect, device number 66 [ 217.740301][ T36] audit: type=1400 audit(1700006405.180:18202): avc: denied { sys_nice } for pid=3128 comm="syz.7.763" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 218.199882][ T3137] Bluetooth: hci0: setting up ROME/QCA6390 [ 218.199904][ T740] Bluetooth: hci1: Frame reassembly failed (-84) Hü[ 218.486548][ T31] usb 7-1: new high-speed USB device number 19 using dummy_hcd ü[ 218.517993][ T3140] rust_binder: Write failure EFAULT in pid:772 [ 218.518492][ T36] audit: type=1400 audit(1700006405.960:18203): avc: denied { create } for pid=3139 comm="syz.0.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 218.593685][ T36] audit: type=1400 audit(1700006406.030:18204): avc: denied { write } for pid=3144 comm="syz.0.768" name="usbmon4" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 218.644908][ T36] audit: type=1400 audit(1700006406.030:18205): avc: denied { create } for pid=3146 comm="syz.7.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 218.684900][ T36] audit: type=1400 audit(1700006406.060:18206): avc: denied { map } for pid=3144 comm="syz.0.768" path="pipe:[1506]" dev="pipefs" ino=1506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 218.725721][ T31] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.753393][ T31] usb 7-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 218.765152][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.790494][ T31] usb 7-1: Product: syz [ 218.794727][ T31] usb 7-1: Manufacturer: syz [ 218.801567][ T3157] overlayfs: failed to resolve './bus/file0': -2 [ 218.808038][ T31] usb 7-1: SerialNumber: syz [ 218.927729][ T3164] 2N: renamed from vcan0 [ 219.125239][ T3180] can0: slcan on ttynull. [ 219.257011][ T3179] can0 (unregistered): slcan off ttynull. [ 219.296883][ T3210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.787'. [ 219.331241][ T3210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.787'. [ 219.346206][ T3210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.787'. [ 219.356006][ T3210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.787'. [ 219.366572][ T3210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.787'. [ 219.386083][ T3210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.787'. [ 219.420355][ T3210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.787'. [ 219.430057][ T3210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.787'. [ 219.453613][ T3210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.787'. [ 219.464452][ T3210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.787'. [ 220.123212][ T3278] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 220.179081][ T3283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=3283 comm=syz.7.806 [ 220.214979][ T646] Bluetooth: hci1: command 0x1003 tx timeout [ 220.221395][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 220.232611][ T36] audit: type=1400 audit(1700006407.666:18207): avc: denied { bind } for pid=3287 comm="syz.7.808" laddr=fe80::a8aa:aaff:feaa:aa10 lport=5 faddr=ff02::1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 220.259323][ T3288] fuse: Bad value for 'fd' [ 220.276184][ T36] audit: type=1400 audit(1700006407.706:18208): avc: denied { name_bind } for pid=3287 comm="syz.7.808" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 220.318932][ T36] audit: type=1400 audit(1700006407.706:18209): avc: denied { node_bind } for pid=3287 comm="syz.7.808" saddr=::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 220.524972][ T3300] rust_binder: 3298:3300 error while translating object: EPERM [ 220.532651][ T3300] rust_binder: Failure in copy_transaction_data: EPERM [ 220.532682][ T3300] rust_binder: 3298:3300 transaction call to 3298:0 failed EPERM, code 0 size 72-24 [ 220.545324][ T54] Bluetooth: hci0: command tx timeout [ 220.593002][ T322] rust_binder: 3298: undelivered TRANSACTION_ERROR: 29201 [ 220.697838][ T3308] cgroup2: Unknown parameter 'nsd9¿>R¶bı' [ 220.717462][ T3308] cgroup2: Unknown parameter 'nsd9¿>R¶bı' [ 220.723618][ T3308] cgroup2: Unknown parameter 'nsd9¿>R¶bı' [ 220.742356][ T3308] cgroup2: Unknown parameter 'nsd9¿>R¶bı' [ 220.758643][ T3308] cgroup2: Unknown parameter 'nsd9¿>R¶bı' [ 220.773158][ T3308] cgroup2: Unknown parameter 'nsd9¿>R¶bı' [ 220.780300][ T3308] cgroup2: Unknown parameter 'nsd9¿>R¶bı' [ 220.795060][ T3308] cgroup2: Unknown parameter 'nsd9¿>R¶bı' [ 220.801045][ T3308] cgroup2: Unknown parameter 'nsd9¿>R¶bı' [ 220.814989][ T3308] cgroup2: Unknown parameter 'nsd9¿>R¶bı' [ 220.831538][ T3308] cgroup2: Unknown parameter 'nsd9¿>R¶bı' [ 220.837554][ T3308] cgroup2: Unknown parameter 'nsd9¿>R¶bı' [ 220.843558][ T3308] cgroup2: Unknown parameter 'nsd9¿>R¶bı' [ 220.849559][ T3308] cgroup2: Unknown parameter 'nsd9¿>R¶bı' [ 220.857048][ T3308] cgroup2: Unknown parameter 'nsd9¿>R¶bı' [ 220.863030][ T3308] cgroup2: Unknown parameter 'nsd9¿>R¶bı' [ 220.869017][ T3308] cgroup2: Unknown parameter 'nsd9¿>R¶bı' [ 220.875627][ T3308] cgroup2: Unknown parameter 'nsd9¿>R¶bı' [ 220.885006][ T3308] cgroup2: Unknown parameter 'nsd9¿>R¶bı' [ 220.903834][ T3308] cgroup2: Unknown parameter 'nsd9¿>R¶bı' [ 220.921290][ T3308] cgroup2: Unknown parameter 'nsd9¿>R¶bı' [ 220.928931][ T3315] fuse: Bad value for 'fd' [ 220.933236][ T3308] cgroup2: Unknown parameter 'nsd9¿>R¶bı' [ 220.944971][ T3308] cgroup2: Unknown parameter 'nsd9¿>R¶bı' [ 220.953412][ T3308] cgroup2: Unknown parameter 'nsd9¿>R¶bı' [ 220.970230][ T3308] cgroup2: Unknown parameter 'nsd9¿>R¶bı' [ 220.979196][ T3308] cgroup2: Unknown parameter 'nsd9¿>R¶bı' [ 220.985332][ T3308] cgroup2: Unknown parameter 'nsd9¿>R¶bı' [ 220.993497][ T3308] cgroup2: Unknown parameter 'nsd9¿>R¶bı' [ 220.999753][ T3308] cgroup2: Unknown parameter 'nsd9¿>R¶bı' [ 221.009366][ T3308] cgroup2: Unknown parameter 'nsd9¿>R¶bı' [ 221.015652][ T3308] cgroup2: Unknown parameter 'nsd9¿>R¶bı' [ 221.021652][ T3308] cgroup2: Unknown parameter 'nsd9¿>R¶bı' [ 221.027986][ T3308] cgroup2: Unknown parameter 'nsd9¿>R¶bı' [ 221.185539][ T3137] Bluetooth: hci0: Reading QCA version information failed (-4) [ 221.193297][ T3137] Bluetooth: hci0: Retry BT power ON:0 Hü[ 221.415610][ T3339] veth1: entered allmulticast mode [ 221.422559][ T3338] veth1: left allmulticast mode [ 221.515085][ T3137] Bluetooth: hci0: Reading QCA version information failed (-4) ü[ 221.522950][ T3137] Bluetooth: hci0: Retry BT power ON:1 Hü[ 221.845086][ T3137] Bluetooth: hci0: Reading QCA version information failed (-4) [ 221.853641][ T3137] Bluetooth: hci0: Retry BT power ON:2 Hü[ 221.905153][ T3347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.914437][ T3347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.144918][ T322] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 222.155226][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 222.155247][ T36] audit: type=1400 audit(1700006409.596:18211): avc: denied { read } for pid=3349 comm="syz.1.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 222.182863][ T3137] Bluetooth: hci0: Reading QCA version information failed (-4) [ 222.199017][ T31] usb 7-1: USB disconnect, device number 19 [ 222.294911][ T322] usb 1-1: Using ep0 maxpacket: 8 [ 222.301914][ T322] usb 1-1: config 10 has an invalid interface number: 91 but max is 0 [ 222.310513][ T322] usb 1-1: config 10 has no interface number 0 [ 222.317761][ T322] usb 1-1: config 10 interface 91 has no altsetting 0 [ 222.327172][ T322] usb 1-1: string descriptor 0 read error: -22 [ 222.343563][ T322] usb 1-1: New USB device found, idVendor=097b, idProduct=61f6, bcdDevice=d4.9a [ 222.359549][ T322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.385433][ T36] audit: type=1400 audit(1700006409.826:18212): avc: denied { read } for pid=3357 comm="syz.6.832" path="socket:[34161]" dev="sockfs" ino=34161 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 222.427013][ T36] audit: type=1400 audit(1700006409.866:18213): avc: denied { create } for pid=3359 comm="syz.7.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 223.204945][ T2045] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 223.354903][ T2045] usb 2-1: Using ep0 maxpacket: 32 [ 223.367370][ T2045] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 223.385067][ T2045] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 223.405829][ T2045] usb 2-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 223.415361][ T2045] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.423398][ T2045] usb 2-1: Product: syz [ 223.436253][ T2045] usb 2-1: Manufacturer: syz [ 223.440949][ T2045] usb 2-1: SerialNumber: syz [ 223.734955][ T2045] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 223.884909][ T2045] usb 7-1: Using ep0 maxpacket: 32 [ 223.891678][ T2045] usb 7-1: unable to get BOS descriptor or descriptor too short [ 223.900553][ T2045] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.910822][ T2045] usb 7-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 223.924032][ T2045] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 223.935315][ T2045] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 223.946836][ T2045] usb 7-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 223.956205][ T2045] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.971751][ T2045] usb 7-1: Product: syz [ 223.981612][ T2045] usb 7-1: Manufacturer: syz [ 223.986551][ T2045] usb 7-1: SerialNumber: syz [ 224.955259][ T2045] usb 1-1: USB disconnect, device number 67 [ 225.528666][ T36] audit: type=1326 audit(1700006412.966:18214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3415 comm="syz.7.853" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f67d1f97ed7 code=0x0 [ 225.968972][ T66] usb 2-1: USB disconnect, device number 69 [ 226.270667][ T1719] Bluetooth: hci1: Frame reassembly failed (-84) [ 226.280471][ T3431] Bluetooth: hci0: setting up ROME/QCA6390 Hü[ 226.514919][ T322] usb 7-1: USB disconnect, device number 20 [ 226.554927][ T335] usb 2-1: new high-speed USB device number 70 using dummy_hcd ü[ 226.655439][ T3455] loop2: detected capacity change from 0 to 7 [ 226.709920][ T3459] 9pnet_fd: p9_fd_create_unix (3459): problem connecting socket: ./cgroup/file0: -2 [ 226.720605][ T335] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.734369][ T335] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 226.752112][ T335] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 226.771487][ T335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.787997][ T335] usb 2-1: Product: syz [ 226.796333][ T335] usb 2-1: Manufacturer: syz [ 226.802853][ T335] usb 2-1: SerialNumber: syz [ 227.004935][ T66] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 227.154952][ T66] usb 7-1: Using ep0 maxpacket: 16 [ 227.165981][ T66] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.185062][ T66] usb 7-1: config 0 interface 0 has no altsetting 0 [ 227.191854][ T66] usb 7-1: New USB device found, idVendor=04b3, idProduct=3105, bcdDevice= 0.00 [ 227.201331][ T66] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.318841][ T3491] raw_sendmsg: syz.0.877 forgot to set AF_INET. Fix it! [ 227.466182][ T3505] __nla_validate_parse: 25 callbacks suppressed [ 227.466206][ T3505] netlink: 140 bytes leftover after parsing attributes in process `syz.7.880'. [ 228.233300][ T3531] ./dev/sda1: Can't lookup blockdev [ 228.294976][ T646] Bluetooth: hci1: command 0x1003 tx timeout [ 228.301155][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 228.614897][ T54] Bluetooth: hci0: command tx timeout [ 229.267393][ T3431] Bluetooth: hci0: Reading QCA version information failed (-4) [ 229.284911][ T3431] Bluetooth: hci0: Retry BT power ON:0 Hü[ 229.427716][ T36] audit: type=1400 audit(1700006416.866:18215): avc: denied { setopt } for pid=3558 comm="syz.7.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 229.605050][ T3431] Bluetooth: hci0: Reading QCA version information failed (-4) ü[ 229.612670][ T3431] Bluetooth: hci0: Retry BT power ON:1 Hü[ 229.651478][ T36] audit: type=1400 audit(1700006417.086:18216): avc: denied { setattr } for pid=3568 comm="syz.7.898" path="socket:[35968]" dev="sockfs" ino=35968 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 229.721910][ T2045] usb 7-1: USB disconnect, device number 21 [ 229.854983][ T3572] netlink: 'syz.0.899': attribute type 4 has an invalid length. [ 229.864553][ T3572] netlink: 'syz.0.899': attribute type 5 has an invalid length. [ 229.882429][ T3572] netlink: 'syz.0.899': attribute type 5 has an invalid length. [ 229.902434][ T3572] netlink: 3269 bytes leftover after parsing attributes in process `syz.0.899'. [ 229.942473][ T3578] kvm: apic: phys broadcast and lowest prio [ 229.955070][ T3431] Bluetooth: hci0: Reading QCA version information failed (-4) [ 229.972340][ T3431] Bluetooth: hci0: Retry BT power ON:2 Hü[ 230.223710][ T3590] rust_binder: Write failure EFAULT in pid:931 [ 230.256826][ T3596] netlink: 196 bytes leftover after parsing attributes in process `syz.7.907'. [ 230.300514][ T3431] Bluetooth: hci0: Reading QCA version information failed (-4) [ 230.331820][ T322] usb 2-1: USB disconnect, device number 70 [ 230.357969][ T3596] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3596 comm=syz.7.907 [ 230.499478][ T36] audit: type=1400 audit(1700006417.936:18217): avc: denied { connect } for pid=3606 comm="syz.1.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 230.774897][ T322] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 230.936113][ T322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.946316][ T322] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.959627][ T322] usb 2-1: New USB device found, idVendor=056a, idProduct=0100, bcdDevice= 0.00 [ 230.969137][ T322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.310091][ T36] audit: type=1400 audit(1700006418.746:18218): avc: denied { setattr } for pid=3625 comm="syz.6.919" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 231.340752][ T335] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 231.348778][ T36] audit: type=1400 audit(1700006418.776:18219): avc: denied { unmount } for pid=2316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 231.380252][ T3628] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 231.388708][ T36] audit: type=1400 audit(1700006418.816:18220): avc: denied { mounton } for pid=3627 comm="syz.6.920" path="/85/my_sys/devices/pci0000:00/0000:00:03.0/resource1" dev="sysfs" ino=35603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 231.494907][ T335] usb 1-1: device descriptor read/64, error -71 [ 231.734930][ T335] usb 1-1: device descriptor read/64, error -71 [ 231.762645][ T3647] netlink: 'syz.7.928': attribute type 4 has an invalid length. [ 231.924954][ T66] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 231.987789][ T335] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 232.086258][ T66] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 20480, setting to 1024 [ 232.097600][ T66] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 232.109748][ T66] usb 7-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 232.119136][ T66] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.127340][ T335] usb 1-1: device descriptor read/64, error -71 [ 232.134478][ T66] usb 7-1: Product: syz [ 232.139536][ T66] usb 7-1: Manufacturer: syz [ 232.145595][ T66] usb 7-1: SerialNumber: syz [ 232.384909][ T335] usb 1-1: device descriptor read/64, error -71 [ 232.505013][ T335] usb usb1-port1: attempt power cycle [ 232.854959][ T335] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 232.876226][ T335] usb 1-1: device descriptor read/8, error -71 [ 233.016110][ T335] usb 1-1: device descriptor read/8, error -71 [ 233.254938][ T335] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 233.286097][ T335] usb 1-1: device descriptor read/8, error -71 [ 233.416056][ T335] usb 1-1: device descriptor read/8, error -71 [ 233.514122][ T343] usb 2-1: USB disconnect, device number 71 [ 233.525319][ T335] usb usb1-port1: unable to enumerate USB device [ 233.654761][ T36] audit: type=1400 audit(1700006421.086:18221): avc: denied { setattr } for pid=3679 comm="syz.7.941" name="NETLINK" dev="sockfs" ino=36302 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 234.392115][ T36] audit: type=1400 audit(1700006421.826:18222): avc: denied { map } for pid=3693 comm="syz.7.947" path="socket:[36327]" dev="sockfs" ino=36327 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 234.438915][ T36] audit: type=1400 audit(1700006421.876:18223): avc: denied { read } for pid=3695 comm="syz.7.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 234.475067][ T66] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 234.630234][ T335] usb 7-1: USB disconnect, device number 22 [ 234.637273][ T66] usb 1-1: Using ep0 maxpacket: 16 [ 234.650309][ T66] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 234.673268][ T66] usb 1-1: config 0 interface 0 has no altsetting 0 [ 234.687875][ T66] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 234.706141][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.926224][ T3704] FAULT_INJECTION: forcing a failure. [ 234.926224][ T3704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.939441][ T3704] CPU: 0 UID: 0 PID: 3704 Comm: syz.6.951 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 234.939479][ T3704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 234.939497][ T3704] Call Trace: [ 234.939507][ T3704] [ 234.939517][ T3704] __dump_stack+0x21/0x30 [ 234.939559][ T3704] dump_stack_lvl+0x140/0x1c0 [ 234.939593][ T3704] ? __cfi_dump_stack_lvl+0x10/0x10 [ 234.939628][ T3704] ? __kasan_check_read+0x15/0x20 [ 234.939655][ T3704] ? vmx_read_guest_seg_ar+0x179/0x350 [ 234.939689][ T3704] dump_stack+0x19/0x20 [ 234.939721][ T3704] should_fail_ex+0x3c2/0x510 [ 234.939752][ T3704] should_fail+0xf/0x20 [ 234.939779][ T3704] should_fail_usercopy+0x1e/0x30 [ 234.939811][ T3704] __kvm_read_guest_page+0x177/0x210 [ 234.939840][ T3704] kvm_vcpu_read_guest_page+0x31c/0x400 [ 234.939869][ T3704] kvm_fetch_guest_virt+0x146/0x190 [ 234.939894][ T3704] ? __cfi_kvm_fetch_guest_virt+0x10/0x10 [ 234.939917][ T3704] __do_insn_fetch_bytes+0x57d/0x740 [ 234.939945][ T3704] ? x86_decode_insn+0x50b0/0x50b0 [ 234.939972][ T3704] x86_decode_insn+0x326/0x50b0 [ 234.939996][ T3704] ? make_mmio_spte+0x100/0x1d0 [ 234.940029][ T3704] ? __cfi_x86_decode_insn+0x10/0x10 [ 234.940054][ T3704] ? __kasan_check_write+0x18/0x20 [ 234.940079][ T3704] ? vmx_read_guest_seg_ar+0x1c8/0x350 [ 234.940108][ T3704] ? __asan_memset+0x39/0x50 [ 234.940134][ T3704] ? init_decode_cache+0x7c/0x90 [ 234.940160][ T3704] ? init_emulate_ctxt+0x403/0x540 [ 234.940189][ T3704] ? kvm_inject_realmode_interrupt+0x2d0/0x2d0 [ 234.940219][ T3704] ? __kasan_check_write+0x18/0x20 [ 234.940243][ T3704] ? kvm_release_pfn_clean+0x31/0x60 [ 234.940271][ T3704] x86_decode_emulated_instruction+0x66/0x180 [ 234.940302][ T3704] x86_emulate_instruction+0x2d7/0x19f0 [ 234.940333][ T3704] ? is_bpf_text_address+0x17b/0x1a0 [ 234.940381][ T3704] ? __kernel_text_address+0x11/0x40 [ 234.940415][ T3704] ? unwind_get_return_address+0x51/0x90 [ 234.940447][ T3704] ? arch_stack_walk+0x10a/0x170 [ 234.940472][ T3704] kvm_mmu_page_fault+0x341/0x9a0 [ 234.940503][ T3704] handle_ept_violation+0x256/0x450 [ 234.940530][ T3704] ? vmx_vcpu_run+0x1116/0x1f70 [ 234.940565][ T3704] ? __cfi_handle_ept_violation+0x10/0x10 [ 234.940594][ T3704] vmx_handle_exit+0x1376/0x1c00 [ 234.940630][ T3704] ? __cfi_vmx_vcpu_run+0x10/0x10 [ 234.940665][ T3704] ? inode_init_always_gfp+0x756/0x9e0 [ 234.940699][ T3704] vcpu_run+0x4c14/0x7830 [ 234.940747][ T3704] ? signal_pending+0xc0/0xc0 [ 234.940777][ T3704] ? __kasan_check_write+0x18/0x20 [ 234.940802][ T3704] ? xfd_validate_state+0x68/0x140 [ 234.940836][ T3704] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 234.940865][ T3704] ? __kasan_check_write+0x18/0x20 [ 234.940889][ T3704] ? fpregs_mark_activate+0x68/0x160 [ 234.940919][ T3704] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 234.940948][ T3704] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 234.940978][ T3704] kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0 [ 234.941014][ T3704] ? _parse_integer_limit+0x195/0x1e0 [ 234.941043][ T3704] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 234.941077][ T3704] ? kstrtoull+0x13b/0x1e0 [ 234.941104][ T3704] ? kstrtouint+0x78/0xf0 [ 234.941130][ T3704] ? ioctl_has_perm+0x1bc/0x500 [ 234.941157][ T3704] ? __asan_memcpy+0x5a/0x80 [ 234.941180][ T3704] ? ioctl_has_perm+0x408/0x500 [ 234.941206][ T3704] ? has_cap_mac_admin+0xd0/0xd0 [ 234.941233][ T3704] ? __kasan_check_write+0x18/0x20 [ 234.941257][ T3704] ? mutex_lock_killable+0x97/0x1d0 [ 234.941289][ T3704] ? __cfi_mutex_lock_killable+0x10/0x10 [ 234.941321][ T3704] ? proc_fail_nth_write+0x184/0x220 [ 234.941364][ T3704] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 234.941401][ T3704] kvm_vcpu_ioctl+0xa43/0x1000 [ 234.941426][ T3704] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 234.941451][ T3704] ? __cfi_vfs_write+0x10/0x10 [ 234.941476][ T3704] ? __kasan_check_write+0x18/0x20 [ 234.941501][ T3704] ? mutex_unlock+0x90/0x240 [ 234.941529][ T3704] ? __cfi_mutex_unlock+0x10/0x10 [ 234.941561][ T3704] ? __fget_files+0x2bc/0x330 [ 234.941591][ T3704] ? bpf_lsm_file_ioctl+0xd/0x20 [ 234.941624][ T3704] ? security_file_ioctl+0x3e/0x110 [ 234.941648][ T3704] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 234.941673][ T3704] __se_sys_ioctl+0x126/0x1b0 [ 234.941703][ T3704] __x64_sys_ioctl+0x7f/0xa0 [ 234.941733][ T3704] x64_sys_call+0x1878/0x2ee0 [ 234.941756][ T3704] do_syscall_64+0x57/0xf0 [ 234.941778][ T3704] ? clear_bhb_loop+0x50/0xa0 [ 234.941809][ T3704] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 234.941838][ T3704] RIP: 0033:0x7fabc4f9e159 [ 234.941859][ T3704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.941881][ T3704] RSP: 002b:00007fabc5e92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.941908][ T3704] RAX: ffffffffffffffda RBX: 00007fabc5225fa0 RCX: 00007fabc4f9e159 [ 234.941927][ T3704] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 234.941943][ T3704] RBP: 00007fabc5e92090 R08: 0000000000000000 R09: 0000000000000000 [ 234.941960][ T3704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.941976][ T3704] R13: 00007fabc5226038 R14: 00007fabc5225fa0 R15: 00007fff5b9c9a88 [ 234.941998][ T3704] [ 235.611188][ T3711] FAULT_INJECTION: forcing a failure. [ 235.611188][ T3711] name failslab, interval 1, probability 0, space 0, times 0 [ 235.624058][ T3711] CPU: 1 UID: 0 PID: 3711 Comm: syz.6.954 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 235.624087][ T3711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 235.624100][ T3711] Call Trace: [ 235.624107][ T3711] [ 235.624115][ T3711] __dump_stack+0x21/0x30 [ 235.624149][ T3711] dump_stack_lvl+0x140/0x1c0 [ 235.624176][ T3711] ? __cfi_dump_stack_lvl+0x10/0x10 [ 235.624205][ T3711] dump_stack+0x19/0x20 [ 235.624232][ T3711] should_fail_ex+0x3c2/0x510 [ 235.624256][ T3711] ? kernfs_fop_read_iter+0x169/0x570 [ 235.624292][ T3711] should_failslab+0xac/0x100 [ 235.624318][ T3711] __kmalloc_noprof+0x69/0x510 [ 235.624338][ T3711] ? kernfs_fop_read_iter+0x169/0x570 [ 235.624367][ T3711] ? __kasan_check_write+0x18/0x20 [ 235.624387][ T3711] ? proc_fail_nth_write+0x184/0x220 [ 235.624417][ T3711] kernfs_fop_read_iter+0x169/0x570 [ 235.624447][ T3711] vfs_read+0x60e/0xc70 [ 235.624468][ T3711] ? __cfi_vfs_read+0x10/0x10 [ 235.624488][ T3711] ? __cfi_mutex_lock+0x10/0x10 [ 235.624513][ T3711] ksys_read+0x145/0x260 [ 235.624533][ T3711] ? __cfi_ksys_read+0x10/0x10 [ 235.624555][ T3711] ? __kasan_check_read+0x15/0x20 [ 235.624575][ T3711] __x64_sys_read+0x7f/0x90 [ 235.624595][ T3711] x64_sys_call+0x2638/0x2ee0 [ 235.624614][ T3711] do_syscall_64+0x57/0xf0 [ 235.624631][ T3711] ? clear_bhb_loop+0x50/0xa0 [ 235.624655][ T3711] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 235.624678][ T3711] RIP: 0033:0x7fabc4f9e159 [ 235.624695][ T3711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.624712][ T3711] RSP: 002b:00007fabc5e92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 235.624733][ T3711] RAX: ffffffffffffffda RBX: 00007fabc5225fa0 RCX: 00007fabc4f9e159 [ 235.624749][ T3711] RDX: 0000000000002020 RSI: 0000200000002480 RDI: 0000000000000003 [ 235.624762][ T3711] RBP: 00007fabc5e92090 R08: 0000000000000000 R09: 0000000000000000 [ 235.624774][ T3711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.624788][ T3711] R13: 00007fabc5226038 R14: 00007fabc5225fa0 R15: 00007fff5b9c9a88 [ 235.624805][ T3711] [ 235.876453][ T36] audit: type=1400 audit(1700006423.306:18224): avc: denied { getopt } for pid=3712 comm="syz.6.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 235.918258][ T36] audit: type=1400 audit(1700006423.346:18225): avc: denied { watch watch_reads } for pid=3714 comm="syz.6.956" path="/97/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 236.214908][ T335] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 236.381650][ T335] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.391968][ T335] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 236.406842][ T335] usb 7-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 236.416188][ T335] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.424250][ T335] usb 7-1: Product: syz [ 236.428691][ T335] usb 7-1: Manufacturer: syz [ 236.433362][ T335] usb 7-1: SerialNumber: syz [ 236.924914][ T343] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 237.054935][ T343] usb 2-1: device descriptor read/64, error -71 [ 237.140072][ T31] usb 1-1: USB disconnect, device number 72 [ 237.176987][ T753] Bluetooth: hci1: Frame reassembly failed (-84) [ 237.183711][ T3721] Bluetooth: hci0: setting up ROME/QCA6390 Hü[ 237.314926][ T343] usb 2-1: device descriptor read/64, error -71 ü[ 237.554915][ T343] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 237.594920][ T31] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 237.695033][ T343] usb 2-1: device descriptor read/64, error -71 [ 237.746142][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.756494][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 237.771286][ T31] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 237.780549][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.788840][ T31] usb 1-1: Product: syz [ 237.793170][ T31] usb 1-1: Manufacturer: syz [ 237.798004][ T31] usb 1-1: SerialNumber: syz [ 237.944931][ T343] usb 2-1: device descriptor read/64, error -71 [ 238.055061][ T343] usb usb2-port1: attempt power cycle [ 238.394930][ T343] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 238.416085][ T343] usb 2-1: device descriptor read/8, error -71 [ 238.546068][ T343] usb 2-1: device descriptor read/8, error -71 [ 238.668988][ T3749] netlink: 100 bytes leftover after parsing attributes in process `syz.7.972'. [ 238.742958][ T36] audit: type=1400 audit(1700006426.176:18226): avc: denied { create } for pid=3758 comm="syz.7.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 238.784899][ T343] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 238.814167][ T3766] ./dev/sda1: Can't lookup blockdev [ 238.820303][ T36] audit: type=1400 audit(1700006426.256:18227): avc: denied { create } for pid=3765 comm="syz.7.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 238.845979][ T343] usb 2-1: device descriptor read/8, error -71 [ 238.976472][ T343] usb 2-1: device descriptor read/8, error -71 [ 238.985035][ T335] usb 7-1: USB disconnect, device number 23 [ 239.095263][ T343] usb usb2-port1: unable to enumerate USB device [ 239.254901][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 239.332437][ T36] audit: type=1400 audit(1700006426.766:18228): avc: denied { shutdown } for pid=3776 comm="syz.6.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 239.467805][ T36] audit: type=1400 audit(1700006426.906:18229): avc: denied { audit_read } for pid=3786 comm="syz.6.989" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 239.543675][ T36] audit: type=1400 audit(1700006426.976:18230): avc: denied { cmd } for pid=3791 comm="iou-wrk-3792" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 239.574899][ T646] Bluetooth: hci0: command tx timeout [ 239.605196][ T745] Bluetooth: hci2: Frame reassembly failed (-84) [ 239.717591][ T3796] sock: sock_set_timeout: `syz.1.991' (pid 3796) tries to set negative timeout [ 240.040933][ T3806] ./dev/sda1: Can't lookup blockdev [ 240.097231][ T3808] overlayfs: failed to clone lowerpath [ 240.109811][ T3809] overlayfs: failed to clone lowerpath [ 240.109814][ T3808] overlayfs: failed to clone lowerpath [ 240.165050][ T3721] Bluetooth: hci0: Reading QCA version information failed (-4) [ 240.176071][ T3721] Bluetooth: hci0: Retry BT power ON:0 Hü[ 240.254911][ T335] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 240.425937][ T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.444874][ T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.454662][ T335] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 240.494906][ T335] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 240.504004][ T335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.512793][ T3721] Bluetooth: hci0: Reading QCA version information failed (-4) ü[ 240.520556][ T3721] Bluetooth: hci0: Retry BT power ON:1 Hü[ 240.845098][ T3721] Bluetooth: hci0: Reading QCA version information failed (-4) [ 240.852851][ T3721] Bluetooth: hci0: Retry BT power ON:2 Hü[ 241.165087][ T3721] Bluetooth: hci0: Reading QCA version information failed (-4) [ 241.181937][ T322] usb 1-1: USB disconnect, device number 73 [ 241.584926][ T322] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 241.655264][ T54] Bluetooth: hci2: command 0x1003 tx timeout [ 241.661641][ T646] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 241.737804][ T322] usb 1-1: Using ep0 maxpacket: 16 [ 241.750798][ T322] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.785999][ T322] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.814877][ T322] usb 1-1: config 0 interface 0 has no altsetting 0 [ 241.831735][ T322] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 241.849314][ T322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.944779][ T3839] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1007'. [ 241.971953][ T3841] Bluetooth: hci0: setting up ROME/QCA6390 Hüü[ 243.026746][ T322] usb 2-1: USB disconnect, device number 76 [ 243.085960][ T3848] fuse: Unknown parameter 'us%r_id' [ 243.377586][ T36] audit: type=1400 audit(1700006430.816:18231): avc: denied { setattr } for pid=3850 comm="syz.7.1012" name="secretmem" dev="secretmem" ino=38024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 243.464923][ T322] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 243.614957][ T322] usb 2-1: Using ep0 maxpacket: 8 [ 243.621906][ T322] usb 2-1: unable to get BOS descriptor or descriptor too short [ 243.635366][ T322] usb 2-1: no configurations [ 243.640068][ T322] usb 2-1: can't read configurations, error -22 [ 244.272916][ T31] usb 1-1: USB disconnect, device number 74 [ 244.294892][ T646] Bluetooth: hci0: command tx timeout [ 244.445661][ T3869] x_tables: unsorted entry at hook 1 [ 244.523767][ T3876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1024'. [ 244.714914][ T322] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 244.804909][ T335] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 244.866114][ T322] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 244.877829][ T322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 244.889166][ T322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 244.901980][ T322] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 244.911405][ T322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.919618][ T322] usb 2-1: Product: syz [ 244.923937][ T322] usb 2-1: Manufacturer: syz [ 244.928850][ T322] usb 2-1: SerialNumber: syz [ 244.944904][ T335] usb 1-1: device descriptor read/64, error -71 [ 244.974595][ T3841] Bluetooth: hci0: Reading QCA version information failed (-4) [ 244.982461][ T3841] Bluetooth: hci0: Retry BT power ON:0 Hü[ 245.184913][ T335] usb 1-1: device descriptor read/64, error -71 ü[ 245.295356][ T3841] Bluetooth: hci0: Reading QCA version information failed (-4) [ 245.303259][ T3841] Bluetooth: hci0: Retry BT power ON:1 Hü[ 245.434909][ T335] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 245.584908][ T335] usb 1-1: device descriptor read/64, error -71 [ 245.615076][ T3841] Bluetooth: hci0: Reading QCA version information failed (-4) [ 245.622741][ T3841] Bluetooth: hci0: Retry BT power ON:2 Hü[ 245.824930][ T335] usb 1-1: device descriptor read/64, error -71 [ 245.935255][ T335] usb usb1-port1: attempt power cycle [ 245.940781][ T3841] Bluetooth: hci0: Reading QCA version information failed (-4) [ 245.992345][ T3891] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1030'. [ 246.114900][ T3896] fuse: Bad value for 'rootmode' [ 246.153567][ T3900] can: request_module (can-proto-0) failed. [ 246.294911][ T335] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 246.316019][ T335] usb 1-1: device descriptor read/8, error -71 [ 246.446050][ T335] usb 1-1: device descriptor read/8, error -71 [ 246.684911][ T335] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 246.717646][ T335] usb 1-1: device descriptor read/8, error -71 [ 246.821967][ T3912] netlink: 'syz.6.1039': attribute type 3 has an invalid length. [ 246.855881][ T335] usb 1-1: device descriptor read/8, error -71 [ 246.974986][ T335] usb usb1-port1: unable to enumerate USB device Hü[ 246.981492][ T3918] Bluetooth: hci0: setting up ROME/QCA6390 ü[ 247.343173][ T335] usb 2-1: USB disconnect, device number 78 [ 247.361860][ T3928] netlink: 1072 bytes leftover after parsing attributes in process `syz.7.1043'. [ 247.371200][ T3928] netlink: 280 bytes leftover after parsing attributes in process `syz.7.1043'. [ 247.699376][ T3939] device-mapper: ioctl: Invalid ioctl structure: name m2 ™óS, dev fc01 [ 248.287906][ T36] audit: type=1400 audit(1700006435.726:18232): avc: denied { setcurrent } for pid=3942 comm="syz.7.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 249.014879][ T335] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 249.140652][ T3965] 9pnet_fd: Insufficient options for proto=fd [ 249.165959][ T335] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.186341][ T335] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 249.197343][ T335] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.212161][ T335] usb 1-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40 [ 249.221386][ T335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.229516][ T335] usb 1-1: Product: syz [ 249.233822][ T335] usb 1-1: Manufacturer: syz [ 249.238696][ T335] usb 1-1: SerialNumber: syz [ 249.342116][ T646] Bluetooth: hci0: command tx timeout [ 249.986299][ T3918] Bluetooth: hci0: Reading QCA version information failed (-4) [ 249.994077][ T3918] Bluetooth: hci0: Retry BT power ON:0 Hü[ 250.212954][ T4001] rust_binder: 4000:4001 got transaction to invalid handle 1 [ 250.220614][ T4001] rust_binder: 4000:4001 transaction call to 0:0 failed ENOENT, code 0 size 0-0 ü[ 250.230213][ T4001] rust_binder: Write failure EINVAL in pid:760 [ 250.345335][ T3918] Bluetooth: hci0: Reading QCA version information failed (-4) [ 250.374892][ T3918] Bluetooth: hci0: Retry BT power ON:1 Hü[ 250.695297][ T3918] Bluetooth: hci0: Reading QCA version information failed (-4) [ 250.702906][ T3918] Bluetooth: hci0: Retry BT power ON:2 Hü[ 250.745931][ T36] audit: type=1326 audit(1700006438.186:18233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4009 comm="syz.7.1073" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67d1f9e159 code=0x0 [ 251.015366][ T3918] Bluetooth: hci0: Reading QCA version information failed (-4) [ 251.280927][ T4015] FAULT_INJECTION: forcing a failure. [ 251.280927][ T4015] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 251.294259][ T4015] CPU: 1 UID: 0 PID: 4015 Comm: syz.1.1075 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 251.294302][ T4015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.294320][ T4015] Call Trace: [ 251.294331][ T4015] [ 251.294342][ T4015] __dump_stack+0x21/0x30 [ 251.294386][ T4015] dump_stack_lvl+0x140/0x1c0 [ 251.294421][ T4015] ? __cfi_dump_stack_lvl+0x10/0x10 [ 251.294456][ T4015] ? chrdev_open+0x4e8/0x610 [ 251.294487][ T4015] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 251.294528][ T4015] dump_stack+0x19/0x20 [ 251.294562][ T4015] should_fail_ex+0x3c2/0x510 [ 251.294595][ T4015] should_fail_alloc_page+0xec/0x110 [ 251.294637][ T4015] __alloc_pages_noprof+0x1c0/0x7e0 [ 251.294674][ T4015] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 251.294715][ T4015] ? __kasan_kmalloc+0x96/0xb0 [ 251.294748][ T4015] get_zeroed_page_noprof+0x1f/0x50 [ 251.294786][ T4015] mon_alloc_buff+0x6a/0x280 [ 251.294821][ T4015] mon_bin_open+0x1fd/0x540 [ 251.294857][ T4015] chrdev_open+0x4e8/0x610 [ 251.294886][ T4015] ? __cfi_chrdev_open+0x10/0x10 [ 251.294916][ T4015] ? bpf_lsm_file_open+0xd/0x20 [ 251.294950][ T4015] ? __cfi_chrdev_open+0x10/0x10 [ 251.294980][ T4015] do_dentry_open+0x97c/0x1510 [ 251.295019][ T4015] vfs_open+0x86/0x240 [ 251.295052][ T4015] ? __cfi_vfs_open+0x10/0x10 [ 251.295088][ T4015] ? may_open+0x352/0x430 [ 251.295120][ T4015] path_openat+0x2c49/0x35a0 [ 251.295157][ T4015] ? kasan_save_alloc_info+0x3a/0x50 [ 251.295181][ T4015] ? getname+0x1b/0x30 [ 251.295209][ T4015] ? x64_sys_call+0xe69/0x2ee0 [ 251.295233][ T4015] ? do_syscall_64+0x57/0xf0 [ 251.295261][ T4015] ? do_filp_open+0x440/0x440 [ 251.295298][ T4015] do_filp_open+0x1f2/0x440 [ 251.295332][ T4015] ? __cfi_do_filp_open+0x10/0x10 [ 251.295371][ T4015] ? alloc_fd+0x4c1/0x570 [ 251.295404][ T4015] do_sys_openat2+0x134/0x1d0 [ 251.295440][ T4015] ? fput+0x1a4/0x230 [ 251.295475][ T4015] ? do_sys_open+0x100/0x100 [ 251.295515][ T4015] __x64_sys_openat+0x13a/0x170 [ 251.295554][ T4015] x64_sys_call+0xe69/0x2ee0 [ 251.295577][ T4015] do_syscall_64+0x57/0xf0 [ 251.295601][ T4015] ? clear_bhb_loop+0x50/0xa0 [ 251.295640][ T4015] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 251.295671][ T4015] RIP: 0033:0x7f9bb2f5e98e [ 251.295694][ T4015] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 251.295717][ T4015] RSP: 002b:00007f9bb3efab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 251.295748][ T4015] RAX: ffffffffffffffda RBX: 00007f9bb3efb6c0 RCX: 00007f9bb2f5e98e [ 251.295768][ T4015] RDX: 0000000000000000 RSI: 00007f9bb3efac00 RDI: ffffffffffffff9c [ 251.295785][ T4015] RBP: 00007f9bb3efac00 R08: 0000000000000000 R09: 0000000000000000 [ 251.295802][ T4015] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 251.295819][ T4015] R13: 00007f9bb3226038 R14: 00007f9bb3225fa0 R15: 00007ffff7738638 [ 251.295840][ T4015] [ 251.608766][ T4018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1076'. [ 251.618257][ T4018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1076'. [ 251.654491][ T4020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1077'. [ 251.725030][ T66] usb 1-1: USB disconnect, device number 79 [ 251.848440][ T36] audit: type=1400 audit(1700006439.286:18234): avc: denied { getopt } for pid=4033 comm="syz.6.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 251.994895][ T335] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 252.154930][ T335] usb 2-1: Using ep0 maxpacket: 16 [ 252.161686][ T335] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 252.176209][ T335] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.193545][ T335] usb 2-1: config 0 has no interface number 0 [ 252.201385][ T335] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 252.217325][ T335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.225730][ T335] usb 2-1: Product: syz [ 252.230270][ T335] usb 2-1: Manufacturer: syz [ 252.235149][ T335] usb 2-1: SerialNumber: syz [ 252.651180][ T4053] netlink: 'syz.6.1087': attribute type 4 has an invalid length. [ 252.659223][ T4053] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1087'. [ 252.668508][ T335] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 252.676248][ T4054] netlink: 'syz.6.1087': attribute type 4 has an invalid length. [ 252.684167][ T4054] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1087'. [ 252.750596][ T4056] SELinux: Context -,%-!Œ!/&'*-*(b)#$%0# is not valid (left unmapped). [ 252.760003][ T36] audit: type=1400 audit(1700006440.206:18235): avc: denied { relabelto } for pid=4055 comm="syz.6.1088" name="my_sysfs" dev="tmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2D2C252D218C212F26272A2D2A286229232425308123 [ 252.801715][ T36] audit: type=1400 audit(1700006440.206:18236): avc: denied { associate } for pid=4055 comm="syz.6.1088" name="my_sysfs" dev="tmpfs" ino=654 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2D2C252D218C212F26272A2D2A286229232425308123 [ 252.830906][ T36] audit: type=1400 audit(1700006440.236:18237): avc: denied { mounton } for pid=4055 comm="syz.6.1088" path="/117/my_sysfs" dev="tmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2D2C252D218C212F26272A2D2A286229232425308123 [ 252.859813][ T36] audit: type=1400 audit(1700006440.236:18238): avc: denied { rmdir } for pid=2316 comm="syz-executor" name="my_sysfs" dev="tmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2D2C252D218C212F26272A2D2A286229232425308123 [ 252.888948][ T335] usb 1-1: not running at top speed; connect to a high speed hub [ 252.897657][ T335] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 252.912469][ T335] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 252.926051][ T335] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 252.939601][ T335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.947920][ T335] usb 1-1: Product: syz [ 252.952381][ T335] usb 1-1: Manufacturer: à¡  [ 252.957292][ T335] usb 1-1: SerialNumber: syz [ 253.556782][ T4065] 9pnet_fd: Insufficient options for proto=fd [ 253.763821][ T4067] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1093'. [ 254.080644][ T4071] x_tables: duplicate underflow at hook 2 [ 254.101742][ T36] audit: type=1400 audit(1700006441.536:18239): avc: denied { create } for pid=4073 comm="syz.6.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 254.393688][ T4081] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1098'. [ 255.441717][ T335] usb 1-1: USB disconnect, device number 80 [ 256.449987][ T36] audit: type=1400 audit(1700006443.886:18240): avc: denied { write } for pid=4113 comm="syz.0.1110" name="kmsg" dev="proc" ino=4026532040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 256.473117][ T36] audit: type=1400 audit(1700006443.886:18241): avc: denied { open } for pid=4113 comm="syz.0.1110" path="/270/dev/kmsg" dev="proc" ino=4026532040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 256.507207][ T36] audit: type=1400 audit(1700006443.886:18242): avc: denied { write } for pid=4113 comm="syz.0.1110" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 256.531113][ T36] audit: type=1400 audit(1700006443.886:18243): avc: denied { mounton } for pid=4113 comm="syz.0.1110" path="/270/dev/kmsg" dev="proc" ino=4026532040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 256.792338][ T4132] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1114'. [ 256.827269][ T4137] 9pnet: Unknown protocol version 9 [ 257.194918][ T66] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 257.334901][ T66] usb 1-1: device descriptor read/64, error -71 [ 257.584912][ T66] usb 1-1: device descriptor read/64, error -71 [ 257.834895][ T66] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 257.914437][ T36] audit: type=1400 audit(1700006445.346:18244): avc: denied { create } for pid=4153 comm="syz.6.1122" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 257.935313][ T4154] size and base must be multiples of 4 kiB [ 257.941466][ T4154] CPU: 0 UID: 0 PID: 4154 Comm: syz.6.1122 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 257.941510][ T4154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 257.941529][ T4154] Call Trace: [ 257.941539][ T4154] [ 257.941549][ T4154] __dump_stack+0x21/0x30 [ 257.941604][ T4154] dump_stack_lvl+0x140/0x1c0 [ 257.941642][ T4154] ? __cfi_dump_stack_lvl+0x10/0x10 [ 257.941682][ T4154] dump_stack+0x19/0x20 [ 257.941716][ T4154] mtrr_add+0xd8/0x100 [ 257.941746][ T4154] mtrr_ioctl+0xbd8/0x1170 [ 257.941776][ T4154] ? do_futex+0x37d/0x510 [ 257.941810][ T4154] ? __cfi_mtrr_ioctl+0x10/0x10 [ 257.941845][ T4154] ? __fget_files+0x2bc/0x330 [ 257.941877][ T4154] ? __cfi_mtrr_ioctl+0x10/0x10 [ 257.941906][ T4154] proc_reg_unlocked_ioctl+0x1f3/0x2f0 [ 257.941936][ T4154] ? __cfi_proc_reg_unlocked_ioctl+0x10/0x10 [ 257.941965][ T4154] __se_sys_ioctl+0x126/0x1b0 [ 257.941999][ T4154] __x64_sys_ioctl+0x7f/0xa0 [ 257.942030][ T4154] x64_sys_call+0x1878/0x2ee0 [ 257.942054][ T4154] do_syscall_64+0x57/0xf0 [ 257.942077][ T4154] ? clear_bhb_loop+0x50/0xa0 [ 257.942109][ T4154] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 257.942139][ T4154] RIP: 0033:0x7fabc4f9e159 [ 257.942162][ T4154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.942185][ T4154] RSP: 002b:00007fabc5e92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.942214][ T4154] RAX: ffffffffffffffda RBX: 00007fabc5225fa0 RCX: 00007fabc4f9e159 [ 257.942235][ T4154] RDX: 0000000000000000 RSI: 00000000400c4d01 RDI: 0000000000000006 [ 257.942253][ T4154] RBP: 00007fabc503503b R08: 0000000000000000 R09: 0000000000000000 [ 257.942270][ T4154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.942287][ T4154] R13: 00007fabc5226038 R14: 00007fabc5225fa0 R15: 00007fff5b9c9a88 [ 257.942310][ T4154] [ 258.135715][ T66] usb 1-1: device descriptor read/64, error -71 [ 258.213658][ T36] audit: type=1400 audit(1700006445.646:18245): avc: denied { setopt } for pid=4165 comm="syz.6.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 258.385026][ T66] usb 1-1: device descriptor read/64, error -71 [ 258.495084][ T66] usb usb1-port1: attempt power cycle [ 258.829721][ T4177] fuse: Bad value for 'fd' [ 258.835097][ T66] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 258.842990][ T4177] fuse: Bad value for 'fd' [ 258.865931][ T66] usb 1-1: device descriptor read/8, error -71 [ 258.979193][ T4182] cgroup: fork rejected by pids controller in /syz6 [ 259.015911][ T66] usb 1-1: device descriptor read/8, error -71 [ 259.284916][ T66] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 259.325911][ T66] usb 1-1: device descriptor read/8, error -71 [ 259.466019][ T66] usb 1-1: device descriptor read/8, error -71 [ 259.575675][ T66] usb usb1-port1: unable to enumerate USB device [ 260.307495][ T4276] netlink: 580 bytes leftover after parsing attributes in process `syz.7.1142'. [ 260.333712][ T4278] ------------[ cut here ]------------ [ 260.339302][ T4278] WARNING: CPU: 0 PID: 4278 at crypto/rsa-pkcs1pad.c:560 pkcs1pad_verify+0x4e4/0x700 [ 260.348869][ T4278] Modules linked in: [ 260.352806][ T4278] CPU: 0 UID: 0 PID: 4278 Comm: syz.7.1143 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 260.364639][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.374804][ T4278] RIP: 0010:pkcs1pad_verify+0x4e4/0x700 [ 260.380600][ T4278] Code: 11 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 0a 33 06 ff 0f 0b b8 ea ff ff ff eb de e8 fc 32 06 ff <0f> 0b b8 ea ff ff ff eb d0 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 5d [ 260.400345][ T4278] RSP: 0018:ffffc90005a87728 EFLAGS: 00010287 [ 260.406840][ T4278] RAX: ffffffff82814714 RBX: ffff888114ea2400 RCX: 0000000000080000 [ 260.414874][ T4278] RDX: ffffc90012b66000 RSI: 000000000000068a RDI: 000000000000068b [ 260.422878][ T4278] RBP: ffffc90005a87770 R08: ffffc90005a8782f R09: 0000000000000000 [ 260.430950][ T4278] R10: 0000000000000000 R11: ffffffff82814230 R12: ffff8881042d6b88 [ 260.438980][ T4278] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888114ea2438 [ 260.447015][ T4278] FS: 00007f67d2d856c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 260.456029][ T4278] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.462651][ T4278] CR2: 000000110c25692d CR3: 000000013055a000 CR4: 00000000003526b0 [ 260.470698][ T4278] DR0: 000000000000000c DR1: 0000000000000000 DR2: 0000000000000000 [ 260.478733][ T4278] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 260.486775][ T4278] Call Trace: [ 260.490082][ T4278] [ 260.493046][ T4278] ? __asan_memcpy+0x5a/0x80 [ 260.497710][ T4278] crypto_sig_verify+0x1d0/0x260 [ 260.502692][ T4278] ? __cfi_crypto_sig_verify+0x10/0x10 [ 260.508284][ T4278] ? crypto_sig_set_pubkey+0x9d/0xb0 [ 260.513618][ T4278] public_key_verify_signature+0x654/0xa40 [ 260.519532][ T4278] ? __cfi_public_key_verify_signature+0x10/0x10 [ 260.525932][ T4278] ? keyctl_pkey_params_get+0x3b8/0x4c0 [ 260.531523][ T4278] ? __cfi_public_key_verify_signature_2+0x10/0x10 [ 260.538101][ T4278] public_key_verify_signature_2+0x47/0x60 [ 260.543961][ T4278] verify_signature+0xf3/0x120 [ 260.548817][ T4278] asymmetric_key_verify_signature+0x160/0x200 [ 260.555042][ T4278] ? __cfi_asymmetric_key_verify_signature+0x10/0x10 [ 260.561795][ T4278] ? should_fail+0xf/0x20 [ 260.566222][ T4278] ? __kasan_check_write+0x18/0x20 [ 260.571382][ T4278] ? _copy_from_user+0x87/0xa0 [ 260.576248][ T4278] ? memdup_user+0xb1/0x170 [ 260.580835][ T4278] keyctl_pkey_verify+0x203/0x290 [ 260.585938][ T4278] ? __cfi_keyctl_pkey_verify+0x10/0x10 [ 260.591533][ T4278] __se_sys_keyctl+0x743/0xe40 [ 260.596400][ T4278] ? __x64_sys_keyctl+0xf0/0xf0 [ 260.601305][ T4278] ? __cfi_do_futex+0x10/0x10 [ 260.606094][ T4278] ? kvfree_sensitive+0x51/0x70 [ 260.611027][ T4278] ? __se_sys_futex+0x13c/0x320 [ 260.615975][ T4278] ? xfd_validate_state+0x68/0x140 [ 260.621144][ T4278] ? __kasan_check_write+0x18/0x20 [ 260.626337][ T4278] ? fpregs_restore_userregs+0x11c/0x260 [ 260.632014][ T4278] __x64_sys_keyctl+0xc3/0xf0 [ 260.636781][ T4278] x64_sys_call+0x996/0x2ee0 [ 260.641405][ T4278] do_syscall_64+0x57/0xf0 [ 260.645889][ T4278] ? clear_bhb_loop+0x50/0xa0 [ 260.650608][ T4278] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 260.656589][ T4278] RIP: 0033:0x7f67d1f9e159 [ 260.661040][ T4278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.680725][ T4278] RSP: 002b:00007f67d2d85028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 260.689348][ T4278] RAX: ffffffffffffffda RBX: 00007f67d2225fa0 RCX: 00007f67d1f9e159 [ 260.697445][ T4278] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 000000000000001c [ 260.705471][ T4278] RBP: 00007f67d203503b R08: 0000000000000000 R09: 0000000000000000 [ 260.713515][ T4278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.721562][ T4278] R13: 00007f67d2226038 R14: 00007f67d2225fa0 R15: 00007ffd4b6fa988 [ 260.729621][ T4278] [ 260.732677][ T4278] ---[ end trace 0000000000000000 ]--- [ 260.738446][ T66] usb 1-1: new low-speed USB device number 85 using dummy_hcd [ 260.874910][ T66] usb 1-1: device descriptor read/64, error -71 [ 261.114913][ T66] usb 1-1: device descriptor read/64, error -71 [ 261.374908][ T66] usb 1-1: new low-speed USB device number 86 using dummy_hcd [ 261.514896][ T66] usb 1-1: device descriptor read/64, error -71 [ 261.754905][ T66] usb 1-1: device descriptor read/64, error -71 [ 261.874901][ T66] usb usb1-port1: attempt power cycle [ 262.234931][ T66] usb 1-1: new low-speed USB device number 87 using dummy_hcd [ 262.266031][ T66] usb 1-1: device descriptor read/8, error -71 [ 262.403818][ T66] usb 1-1: device descriptor read/8, error -71 [ 262.644911][ T66] usb 1-1: new low-speed USB device number 88 using dummy_hcd [ 262.666126][ T66] usb 1-1: device descriptor read/8, error -71 [ 262.806067][ T66] usb 1-1: device descriptor read/8, error -71 [ 262.924909][ T66] usb usb1-port1: unable to enumerate USB device