last executing test programs: 4m2.078807126s ago: executing program 0 (id=152): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 4m0.765656069s ago: executing program 0 (id=159): open(&(0x7f0000002180)='./file0\x00', 0x398103, 0x19a) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f0000002000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x29, 0x8, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x4, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f74010000000100000030303030303030303030303030303034303030302c757300725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r2, &(0x7f0000006e80)={0x2020}, 0x2082) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r3, 0x400, 0x1) fcntl$setlease(r0, 0x400, 0x1) 4m0.73198988s ago: executing program 0 (id=160): socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000010c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc82c00fe8000000000000000f5ffffff0000aaff020000000000000000000000000001", @ANYRES16=r0], 0xffe) 4m0.632076153s ago: executing program 0 (id=161): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000004c0)='./file1\x00', 0x5) 4m0.626674863s ago: executing program 0 (id=162): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) (async) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(r1, 0x0, 0x2) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x4b564d01, 0x0, 0xaf}]}) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x4b564d01, 0x0, 0xaf}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{}]}) r5 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) write$cgroup_pid(r5, &(0x7f0000000d40), 0x12) chdir(&(0x7f0000000080)='my_sys\x00') mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x8030}, 0x50) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x8030}, 0x50) sendmsg$DEVLINK_CMD_RELOAD(r0, 0x0, 0x8) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) syz_clone(0x61a0a000, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x8, 0x0) ioctl$TIOCCONS(r7, 0x541d) (async) ioctl$TIOCCONS(r7, 0x541d) ioctl$BTRFS_IOC_SYNC(r7, 0x9408, 0x0) (async) ioctl$BTRFS_IOC_SYNC(r7, 0x9408, 0x0) syz_clone(0x2280, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40000121, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x46900, 0x0) readv(r8, 0x0, 0x0) (async) readv(r8, 0x0, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 4m0.414752618s ago: executing program 0 (id=165): gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x0, @thr={&(0x7f0000000080)="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", &(0x7f0000001180)="f485c2e6336ce1ac6494ea0b97a14e6210f64c1b97a4c62f4490798749fc5ece25f3573e16d31cf9093464a2d47885cc4436c3aa966b6eed8d3afb1a362359d9406c77abfb7f1b9887957c680b6cfb25ed1ee0d7808e532744e236fcb26548470c94b7d874756f5b8fe8d0120075766572fcb59274e3b9c09ed47734dff5de4b326aafa86c80300f489561151496cc54db2f4f90fcf2b2c277595996b0fc79568cd44a3d5acd00c36c3246af7db4b5b41b99eeee3e3d4093b45f49929dd0ccf88574d57784fccd08945d04dcc5393cf671e390851b9f79e3529742b64f63a1a6694ce5c94ca7f31af1cc83"}}, &(0x7f0000bbdffc)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) (async) mkdir(&(0x7f0000000000)='./sys\x00', 0x143) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0xc02, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) (async) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/tty/ttyS1/console\x00', 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x59, 0x5, 0x0, {0x0, 0x4a6, 0xec6b, 0x54}}, 0x30) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 3m44.9635164s ago: executing program 32 (id=165): gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x0, @thr={&(0x7f0000000080)="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", &(0x7f0000001180)="f485c2e6336ce1ac6494ea0b97a14e6210f64c1b97a4c62f4490798749fc5ece25f3573e16d31cf9093464a2d47885cc4436c3aa966b6eed8d3afb1a362359d9406c77abfb7f1b9887957c680b6cfb25ed1ee0d7808e532744e236fcb26548470c94b7d874756f5b8fe8d0120075766572fcb59274e3b9c09ed47734dff5de4b326aafa86c80300f489561151496cc54db2f4f90fcf2b2c277595996b0fc79568cd44a3d5acd00c36c3246af7db4b5b41b99eeee3e3d4093b45f49929dd0ccf88574d57784fccd08945d04dcc5393cf671e390851b9f79e3529742b64f63a1a6694ce5c94ca7f31af1cc83"}}, &(0x7f0000bbdffc)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) (async) mkdir(&(0x7f0000000000)='./sys\x00', 0x143) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0xc02, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @flat=@weak_binder={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) (async) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/tty/ttyS1/console\x00', 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x59, 0x5, 0x0, {0x0, 0x4a6, 0xec6b, 0x54}}, 0x30) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 2m40.805764571s ago: executing program 2 (id=645): socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000010c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc82c00fe8000000000000000000000000000aaff020000000000000002000000000001", @ANYRES16=r0], 0xffe) 2m40.699989024s ago: executing program 2 (id=647): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0xbffffffffffffffc) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './bus/file1\x00'}, 0x6e) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0xbffffffffffffffc) (async) epoll_create1(0x80000) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './bus/file1\x00'}, 0x6e) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) 2m40.699811194s ago: executing program 2 (id=648): syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e70102030109024400020000000009049700010dd5ce0008240201000000000905000000000000000705a3f6d2fb5b09040000014106cf0008240201000000000905c926", @ANYRES64=0x0, @ANYRESHEX=0x0, @ANYRES8, @ANYRESOCT=0x0, @ANYRESHEX=0x0], 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000100)=0x1) 2m39.294936509s ago: executing program 2 (id=655): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)={0x1c, 0x1a, 0x1, 0x70bd2a, 0x0, "", [@typed={0xff81, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x5c, 0x1b, 0x0, 0x1, [@typed={0x57, 0x0, 0x0, 0x0, @str='}\x00\xc6&\x17\xdd\xe4\xc8\x8f\xa6\x0f\x1aTu\xda\xc6\x13\xfc\xa9\xb5\xf01\x06O\x06-H\xb3\xfb\xd7\xd0\xe7\x10\xa6O\x92\xe3\xdd\xb6X\xcd\xc7\x91R\xe5\x00\xe3\x00\xa3jDJ\xbd)\xd8\xf0&c\xff\xff\xff\xff\xff\xff\xff\xf9\xde\x83\xd2%\xadY\x1e\xfa\xa6v\x87\xdb\xf9w\x01\x01\xe0'}]}]}, 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYRES64=r0], 0x0) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4b, 0x20, 0x8, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x2f, 0x0, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x19, 0x4, 0x1}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x0, 0x5, 0xc, 0x40, 0x6}, 0x23, &(0x7f00000000c0)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x8, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x617, 0x0, 0x7, [0xff3fcf, 0xbe00]}]}, 0x3, [{0x1e, &(0x7f0000000300)=ANY=[@ANYBLOB="1e03881ed28800a0572cfa7c96edae34c6e42e8c875b7a3452ff6ed6437656d4e746a8f1ab3fc3bcf2d9b688a241971a7db272828197af0dd2ebd7faa778246d92e7d8286d7d4f7e5e93ee90c04950ba082c060b5e7799bac73d70d54cd2d0088f0bed47d746ab25cb4f3e7ad7743221047fd1e8d443f27dec9fd98b3651a3e285b8471b93d5abd0cbe5f13e15322aefae4d53f272e0ace77c08993ffdd7e534097099bdb0074991fcac2a575910"]}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x40f}}, {0x71, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2m35.959294434s ago: executing program 2 (id=684): syz_usb_connect(0x2, 0x1a6, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0xe7, 0x6f, 0x58, 0x8, 0x1b3d, 0x174, 0xb2ba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x194, 0x1, 0x4, 0xf, 0x50, 0x2, "", [{{0x9, 0x4, 0xe5, 0x59, 0xb, 0x8c, 0x79, 0xb3, 0xb2, [], [{{0x9, 0x5, 0x2, 0x8, 0x400, 0x4, 0x40, 0x6d, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x6}]}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x40, 0x6, 0xd}}, {{0x9, 0x5, 0x8, 0x1c, 0x40, 0xd7, 0x0, 0x6}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x4, 0x0, 0xf8, [@generic={0x70, 0x23, "897a775fec8bf2e2b03bcf61c8b79dc777687d97d560d433edffadc78fb4c8c6c500ba401bf43db89d09e004f834d4869c67f476ac70d2d09b0a5b1eaa30f1fd49e72f4be781f740232ffefdee4391755f51c812122a9fc9a56d545d8264bbc2d718b80be2a96cc9126c17beac2f"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x9, 0xe, 0x2}}, {{0x9, 0x5, 0xe, 0x10, 0x3f7, 0x6, 0xf, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x6}]}}, {{0x9, 0x5, 0xa, 0x1, 0x7ff, 0x0, 0x9, 0x2}}, {{0x9, 0x5, 0x9, 0x0, 0x60, 0x0, 0x2, 0x7}}, {{0x9, 0x5, 0x9, 0xc, 0x3ff, 0x1, 0xc6, 0x2}}, {{0x9, 0x5, 0x7, 0x3, 0x400, 0x9, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x4}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0xe, 0x8a, 0x3, [@generic={0x93, 0x31, "749035ac57649ae2279fe8c3ad38cf4cdcc6cadff24a752e8e15330e3b70de36fda8b7b0677855a9b08137b9ceaa080e94406e6f958f8c275fe452d82adf3f0720d0da4e39201ae18535c91a29b2215b48cfb4d14dbde268c06a023f16150100e2a57673d43584f0198d0ce0fa8135b88e6b47f5b457e33cf3a7f9272e3ab4ed4f9fe286ce730f7e7df8bf675c824dd1ba"}]}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x7, 0x0, 0x7, [{0x52, &(0x7f0000000440)=@string={0x52, 0x3, "765aaf7458da8ddcfdb8aec655a8f063a767eea771c808fc29e6c57f81018816147a7a15f529fb8a6abc49bcce5a47b8cf897aadcdc3a2d98a4bd002ef7c370746a099a70f06c4c1e0907d8882a368c0"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x440a}}, {0xc5, &(0x7f00000000c0)=@string={0xc5, 0x3, "455ae2ab0b596f8791ff15f37806c69d31a81de448d1075738809ac958b3e599a6ab918b55a49f9fcb3eb880da259f02d3bd0bbb71c51af5262ed46f9d223667397a1723e92c0c04631c0c33cacf11f79b57d4b3615e005235b4e49aa1696de01b1fafc6a379712ecc2a2c7743bd407f5c92d78b0fb110616fde0c4db336a3a615e5ab3849ad1190d7e1327fd9ab05e392b6843f869a9e47f6567767ca769880016cfb3ee6bf1776dda49c71ef2aa54b5f89defd408d117cb9a397ab6dc5448b11238a"}}, {0xe3, &(0x7f00000001c0)=@string={0xe3, 0x3, "0e67ccdcd7dab6389e07b73a0a82b42836389e7ff36a90e0bd1f6ddd37dcffc01ea7431f9982f21e5201136d00f99dbf9c60e1c61901adbb51cd041b04712328e20b32f37de7947bed7e342c6db0d78427a6ebac1088e54b08cfda9b7d9b38d24268b5757b2f6fd7ae05946c02b0c147e4cc6f6b8f19eadef758337083e3a30a70abb0c2833f47821b0ca26de6215f63917376a1ab2ad6540b027dae7aaa4f9579b021610f9054ded930f3172fbb7b7a16099f872ec0ce1b7f905f3dd48711d97231fc85d89e8a47c86d945c769f05a45cf18e37d003e40c6016754f57e590bc11"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x82c}}]}) 2m34.295007106s ago: executing program 2 (id=697): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) syz_usb_connect$uac3(0x6, 0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x16, &(0x7f0000000380)=@string={0x16, 0x3, "733f97e49a2d4b449ae03442a18aeb7b5ed0c578"}}]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000180)={0xcf43, 0x4c8, 0x2, 0x9fff, 0xe, "3d52e3ff00"}) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0xff) write$binfmt_script(r1, &(0x7f00000003c0), 0x4) mmap(&(0x7f0000146000/0x2000)=nil, 0x2000, 0xb, 0x28011, r1, 0x0) r5 = gettid() r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r7, 0x2400000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22']) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r1, 0x0, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x7800, 0x10, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x7, 0x0, 0x40, 0x4, 0x0, @local, @empty}}}}) ioctl$VT_GETMODE(r4, 0x5601, &(0x7f0000000280)) 2m19.112233242s ago: executing program 33 (id=697): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) syz_usb_connect$uac3(0x6, 0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x16, &(0x7f0000000380)=@string={0x16, 0x3, "733f97e49a2d4b449ae03442a18aeb7b5ed0c578"}}]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000180)={0xcf43, 0x4c8, 0x2, 0x9fff, 0xe, "3d52e3ff00"}) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0xff) write$binfmt_script(r1, &(0x7f00000003c0), 0x4) mmap(&(0x7f0000146000/0x2000)=nil, 0x2000, 0xb, 0x28011, r1, 0x0) r5 = gettid() r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r7, 0x2400000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22']) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r1, 0x0, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x7800, 0x10, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x7, 0x0, 0x40, 0x4, 0x0, @local, @empty}}}}) ioctl$VT_GETMODE(r4, 0x5601, &(0x7f0000000280)) 24.543942934s ago: executing program 3 (id=1742): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) (async, rerun: 32) socket$packet(0x11, 0x2, 0x300) (rerun: 32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) (async, rerun: 64) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e20, 0xb, @empty, 0x5}, 0x1c) (rerun: 64) sendmmsg$inet6(r4, &(0x7f0000002fc0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x9, @loopback, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) (async) writev(r4, &(0x7f0000000480)=[{&(0x7f0000000000)='d', 0x1}], 0x1) (async, rerun: 32) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x40000002, 0x0, 0x3}]}) (async, rerun: 32) socket$inet6(0xa, 0x2, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r5], 0x1c}}, 0x0) 24.525922674s ago: executing program 3 (id=1743): socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000010c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc82c00fe8000000000000000000000000000aaff020000000000f50000000000000001", @ANYRES16=r0], 0xffe) 24.468680286s ago: executing program 3 (id=1744): r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a87000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x5204) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={'veth0\x00', {0x2, 0x4e20, @rand_addr=0xdffffc00}}) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, &(0x7f00000002c0)) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101202) ioctl$EVIOCGABS0(r6, 0x80184540, &(0x7f0000000180)=""/65) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000000c0)='9p\x00', 0x0, r1) ioctl$TFD_IOC_SET_TICKS(r3, 0x40085400, &(0x7f0000000200)=0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000300), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7472e46134c8cd8141697504fa956e616e733d66642c7266644f6f3d", @ANYRESHEX=r2, @ANYRESDEC, @ANYRESHEX=r3, @ANYBLOB="2c0740b9bd7569643d", @ANYRESHEX=r4, @ANYBLOB=',\x00']) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x1) r8 = geteuid() setresuid(r7, r8, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) faccessat(0xffffffffffffffff, 0x0, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) ioprio_get$pid(0x2, 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x490, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r9, &(0x7f0000000180)="0c7ce4db", 0x4) 24.395854038s ago: executing program 3 (id=1745): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000200)={{0x50000, 0x41000, 0x9, 0x1, 0xcd, 0x9, 0x6, 0x1, 0x0, 0x7, 0x5, 0xeb}, {0xfec09000, 0x80a0000, 0x9, 0x3, 0x5, 0x4, 0x4, 0x6, 0x5, 0x5, 0x0, 0x1}, {0x8000000, 0x102f8000, 0x1e, 0x5, 0x16, 0x5, 0x81, 0x3, 0x80, 0x1, 0xe, 0x78}, {0xfec00000, 0x6000, 0xb, 0x3, 0x6, 0x9, 0xc3, 0x0, 0x0, 0x0, 0x80, 0x2e}, {0x2, 0x2000, 0xa, 0xff, 0x8, 0xa, 0xb, 0x7, 0xfa, 0x6, 0x4, 0xfc}, {0x30000, 0x0, 0x9, 0xb9, 0x6, 0x5, 0x55, 0x6, 0x5, 0x1, 0xd, 0x9}, {0xdddd1000, 0x0, 0x0, 0x1, 0xa, 0x8, 0x4, 0x73, 0x1c, 0x4, 0x1, 0xd}, {0xdddd1000, 0x4000, 0x0, 0x23, 0x2, 0x3, 0x9, 0x4a, 0x7, 0x8, 0x43, 0x94}, {0x4000, 0x5}, {0xffff1000}, 0x0, 0x0, 0xdddd0000, 0x152690, 0xf, 0x4100, 0xeeee0c00, [0x1, 0x1014, 0x6, 0x1000]}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000740)={"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"}) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f0000000580)={0x81, 0x0, 0x2}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000340)={0x2, 0x0, @ioapic={0x0, 0xfffffffe, 0x7ffffffd, 0xfffffff5, 0x0, [{0x86, 0x40, 0x3, '\x00', 0x4}, {0x2a, 0xff, 0xad, '\x00', 0x10}, {0x32, 0x2b, 0xb, '\x00', 0xfe}, {0x0, 0x1, 0x82, '\x00', 0x72}, {0x2e, 0x1, 0x24, '\x00', 0xff}, {0x0, 0x8, 0xfd, '\x00', 0x7}, {0xcf, 0x20, 0xc5, '\x00', 0xe6}, {0x6, 0x9, 0x5, '\x00', 0xe}, {0x5, 0x7f, 0x7, '\x00', 0x4d}, {0xc, 0xd, 0x0, '\x00', 0x3b}, {0x0, 0x8, 0x0, '\x00', 0x8}, {0x7, 0x6, 0x0, '\x00', 0x3}, {0x2, 0xc2, 0xa, '\x00', 0x4}, {0x6, 0x7, 0x7, '\x00', 0xfe}, {0x8, 0x5, 0x9, '\x00', 0xa9}, {0x6, 0x6, 0x7}, {0xff, 0x5, 0x6, '\x00', 0xda}, {0x5, 0xfd, 0x6, '\x00', 0x8}, {0x45, 0x4, 0xff, '\x00', 0x4}, {0x9, 0x9, 0x7a, '\x00', 0x36}, {0x80, 0xa, 0x4, '\x00', 0x5}, {0x2, 0x9, 0x8, '\x00', 0xc4}, {0x3, 0xff, 0x12, '\x00', 0x6}, {0x4, 0xa9, 0x1c, '\x00', 0xa}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100"], 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x7, 0x0, 0x3, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x7, 0x0, 0x0, "a464357177330772"}}, 0x48}, 0x1, 0x0, 0x0, 0x200440c3}, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000b40)={0x2, 0x14, 0x3, 0xd, 0x21, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_sa={0x2, 0x1, 0x4d6, 0x7f, 0x2, 0x7, 0x2, 0x40000000}, @sadb_x_sec_ctx={0x1b, 0x18, 0x0, 0x7, 0xce, "d9b20f0cd9d6908d2ff5760df96fe2cbb0e4c758c5c9379d04dbb4e3eddfa91ae7b184c844c059630a36bdca20356f1bbb496f03d224e787a93892d84ad2072c3d167afb890c03e0580047a4e6bc3e87b2f1e580879456e0777d57f702c4e7ec0b5349662b4e1646a428e12938636774d5911ff62a2174ae78900d0cc9d40dfc744f20177b1ffdeab72519916e3bce970e290c4a4667b8e92c894ebf9e7c3f86724416718f284912d01b84499be9cac287cef4abae61921426d9c0a3f5eb00bec97e4ae809307ef85a56e64bdd29"}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d6}]}, 0x108}}, 0xc808) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.advise\x00', &(0x7f0000000600)='/dev/kvm\x00', 0x9, 0x3) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) mkdirat(r6, &(0x7f0000000100)='\x00', 0x100) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 24.30259618s ago: executing program 3 (id=1747): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @random='\r\x00'}) madvise(&(0x7f00007fd000/0x800000)=nil, 0x800000, 0x17) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23.763900214s ago: executing program 3 (id=1748): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) mount(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='vfat\x00', 0x800041, &(0x7f00000001c0)='discard') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000201010b0000000000000000070000030800034000000400"], 0x1c}, 0x1, 0x0, 0x0, 0x24004880}, 0x4) read(r1, &(0x7f00000001c0)=""/169, 0xa9) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001180)={&(0x7f0000001200)=ANY=[@ANYBLOB="88a119ac3ebcc1457db40b823bb7a180f7006552ec05efc971c8000a23133bdab800f873f97b82cc9b44469898e8650edee24708877e813eb49a547e8891062685cffc6b0ae007c738484e19906ba12d25d3003bb18b053645a547843913a8444e6e1c0de3b813fab881a60ba421e3e89ccaabb7fb530d41376960af98e3fb1eeefbf73fc4e50d2ff186c1e558cd53bc5332a57ea934dcd0bf2e21bf30a7e8ce9a5984fc8586998eaa79ebd5e89be57b12bca89932bd34dde49349a5a2181a318879", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fbdbdf25180000001400038008000200ffffffff0800020001000000440009800800010000000000080001000001000008000100cbec00000800010003000000080001000000000008000200ff0f000008000200000400000800020052b300001c00098008000100ff7f000008000200f10000000800010008000000"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x80) clock_adjtime(0x0, &(0x7f0000000000)={0x3fe, 0xf6d, 0x0, 0x4000000000001, 0x7ffffffe, 0x3, 0x4, 0x200000000000000, 0x0, 0x104, 0xcf2c, 0xfffffffffffffffc, 0x9, 0x5, 0x70a8641a, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0xb, 0x3, 0x8000000000005a, 0x3}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x9, 0x6}, @mss={0x2, 0xfffffffa}, @sack_perm, @timestamp], 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f00001fb000/0x2000)=nil, 0x2000, 0x1000009, 0x4010, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000001000)=ANY=[@ANYBLOB="ffffffffffff4b4ef9a4719bd6f46a8cafaaaaaaaaaabb88a82700810010000806030d22f006000002000000000000be0f8cce257e"], 0x2a) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) syz_ublk_setup_io_uring(0x23c8, &(0x7f0000000040)={0x0, 0x3c73, 0x1000, 0x0, 0x11b}, 0x0, 0x0, 0x0) 23.728257435s ago: executing program 34 (id=1748): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) mount(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='vfat\x00', 0x800041, &(0x7f00000001c0)='discard') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000201010b0000000000000000070000030800034000000400"], 0x1c}, 0x1, 0x0, 0x0, 0x24004880}, 0x4) read(r1, &(0x7f00000001c0)=""/169, 0xa9) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001180)={&(0x7f0000001200)=ANY=[@ANYBLOB="88a119ac3ebcc1457db40b823bb7a180f7006552ec05efc971c8000a23133bdab800f873f97b82cc9b44469898e8650edee24708877e813eb49a547e8891062685cffc6b0ae007c738484e19906ba12d25d3003bb18b053645a547843913a8444e6e1c0de3b813fab881a60ba421e3e89ccaabb7fb530d41376960af98e3fb1eeefbf73fc4e50d2ff186c1e558cd53bc5332a57ea934dcd0bf2e21bf30a7e8ce9a5984fc8586998eaa79ebd5e89be57b12bca89932bd34dde49349a5a2181a318879", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fbdbdf25180000001400038008000200ffffffff0800020001000000440009800800010000000000080001000001000008000100cbec00000800010003000000080001000000000008000200ff0f000008000200000400000800020052b300001c00098008000100ff7f000008000200f10000000800010008000000"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x80) clock_adjtime(0x0, &(0x7f0000000000)={0x3fe, 0xf6d, 0x0, 0x4000000000001, 0x7ffffffe, 0x3, 0x4, 0x200000000000000, 0x0, 0x104, 0xcf2c, 0xfffffffffffffffc, 0x9, 0x5, 0x70a8641a, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0xb, 0x3, 0x8000000000005a, 0x3}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x9, 0x6}, @mss={0x2, 0xfffffffa}, @sack_perm, @timestamp], 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f00001fb000/0x2000)=nil, 0x2000, 0x1000009, 0x4010, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000001000)=ANY=[@ANYBLOB="ffffffffffff4b4ef9a4719bd6f46a8cafaaaaaaaaaabb88a82700810010000806030d22f006000002000000000000be0f8cce257e"], 0x2a) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) syz_ublk_setup_io_uring(0x23c8, &(0x7f0000000040)={0x0, 0x3c73, 0x1000, 0x0, 0x11b}, 0x0, 0x0, 0x0) 10.19437881s ago: executing program 5 (id=1778): r0 = socket(0xa, 0x3, 0x3a) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\xeaul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r3}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000000c0)=0xb, 0x4) 10.157826681s ago: executing program 1 (id=1780): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000040)=@ethtool_cmd={0x9, 0x28, 0xf0000000, 0xfff7, 0xa, 0x9, 0x10, 0x6, 0x7f, 0x42, 0x1, 0x9, 0xa, 0xd, 0xff, 0x8000, [0x7, 0x7]}}) 10.149755252s ago: executing program 5 (id=1781): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000000000/0x400000)=nil) r1 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r1, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000240)="f728f22e660f088ee009fb66b9800000c00f326635002000000f300f20e06635400000000f22e0660f38ddd666b894d2ffff0f23d00f21f8baf80c66b8ce41828e66efbafc0ced0f23f80f0f5ac3b02e3e0f019b06000f01c5", 0x59}], 0x1, 0x10, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20040001, 0x0, 0x1}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f00002f9000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000080)="d9e10f01c30f01c90f01ca660f3882032e642ef2f00fbb54c23e660fee13baf80c66b8c08efb8f66efbafc0c66b81ba6000066ef66b93b0600000f328036010008", 0x41}], 0x1, 0x20, &(0x7f00000002c0)=[@cr0={0x0, 0x2001000b}], 0x1) (async) signalfd4(r1, &(0x7f0000000300)={[0xfffffffffffffff9]}, 0x8, 0x80000) 8.363195487s ago: executing program 1 (id=1783): syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xb, 0xf0, 0x1}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="050f142e2a"]}) (async, rerun: 32) syz_usb_connect$cdc_ncm(0x5, 0x96, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x2, 0x1, 0x8, 0x80, 0x1, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "fd00000010fd"}, {0x5, 0x24, 0x0, 0xcd}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x7ff, 0x7, 0x4}, {0x6, 0x24, 0x1a, 0x8001, 0x2}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x2}, @country_functional={0x8, 0x24, 0x7, 0xd, 0xfffe, [0x1]}, @mdlm={0x15, 0x24, 0x12, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1c, 0x4, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x7, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xaa, 0xff, 0x10}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x0, 0x5, 0x5, 0x1, 0x40, 0x52}, 0x47, &(0x7f0000000240)={0x5, 0xf, 0x47, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x1, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x7, 0x1, 0x1000}, @ptm_cap={0x3}, @generic={0x1a, 0x10, 0xa, "7293fb35b55a4d6259c8cc30419fc3da9ccdf8b4ef13a5"}, @ssp_cap={0xc, 0x10, 0xa, 0xc, 0x0, 0x7, 0x110f, 0xa}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x7f, 0xd, 0x3ff, 0x3}]}, 0x9, [{0xb5, &(0x7f00000002c0)=@string={0xb5, 0x3, "406d6810639db188dfe9971274ed0d0f3ee0a7b748c13c90db362bf36fcee66531fe89ca5e78d04382d54bc7be7fd63bd32a1607fa2d6367b0c20eea847b3ec9d7fbe7443189d03019031499812a7af3702e8179ff5110551d4b7278a4654585828dea995e0a104724e19f61cf356855ed9cfe2fc871a157fdde35f90aee3fbb29b9b555fd29cd61142aa862aaaa9fcd67a3c60fa497838038ca2e0d8b420f1e7dfae4f4448860ba2cc0d6e2ba22fe55f14cb2"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xc01}}, {0x5b, &(0x7f00000004c0)=@string={0x5b, 0x3, "9724e72fba86115194c35f9acc47bff00266914951ef4deeadb5dd255810c027b7572e6579e2c747cc544fb819647bf8e26463dd27c96f32cd5ad17d5b9a29e14f3bb66cdb6843e184543eec00"/89}}, {0xc0, &(0x7f0000000540)=ANY=[@ANYBLOB="c003652f350a5fe38291bf7298dd13086b2166a4dfabc036efef45787a069b18240975eeca9a9ffd29914baa1d789c9c7cd5a442b7715e6c9cfaffb12a5fa593e930fe19944b935f69857e33daac232146f4496390e746fea91fc5a4fe843a14f7758ad6129f7df890c25e6c1bf7d3a312bbf169cb6038bbd501c488b288dc56d4f539155ae10443fc6ff770eea9c3c685fed62ac6c0d354e528394069349090a9d7ad3a6adcd8c483de85203d09e350c5f25840bc650a4d61b80fdbaf0d94a3"]}, {0xa3, &(0x7f0000000680)=@string={0xa3, 0x3, "82a25a166b813dd227e57f1753583b73c82c778cd90c9c4249f7e871317a1364f1c2bfc57d399263cc093781af4fa06ed47753dd61708230876be14dc3ee9c85a243bd307d8283065edfa5edd91b5e39234a1a0c3c46156fc2ab751c95cac84f8a4a8e9e93b5541d11891b50ee37827a0ca9bd7b247640eea5d857c33cac86074ee7ec5de9ad935a093c1383ccbf5731f5628f0a335d9843f364ebed24699e9988"}}, {0x71, &(0x7f0000000740)=@string={0x71, 0x3, "19898402dd0eb50dd3d58b1c3ebe089fa8722636b55c044eb655e3997578576abe8eef8de6b8d2498e3f5728e8de8e24fbf9dccc9dc89f17303bc5adc4794eb5297e4976abcd1d9084eb322bfb5f155daffb2c2b8b9d8f94af6fff1fa75e2d3c0dbfe7680cfeaa7e03a6ea0dc072fd"}}, {0xc0, &(0x7f00000007c0)=@string={0xc0, 0x3, "acf0ff44e80d256de847bcdfa37b4913e5fe992768de1836bf9d2d72813924b5c464cefbe7c4550432daefb20546902137290db3f168a5e4842866557d051ec470ef3ec9694ce7d9273f654d073c271ad9da967892101bde9946b7f7304dff75edf977b8a7b447677d4464f5f49b89cebaa7fff218617091c971b1279ad2a8f837fae8fbf46290d9e520caa5f67657fbd00d53c8494a5abf6dfd52d0911f249c27e683a4d76d748945cf0ab2bc210ebdb28a01527a9fec4f36707809951e"}}]}) (async, rerun: 32) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r0, 0x400455c8, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setresuid(0x0, 0xee00, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000040), 0x6) (async) ioctl$sock_bt_hci(r1, 0x400448e7, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1b) (async) read(r2, 0x0, 0x0) (async) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 8.355537617s ago: executing program 5 (id=1784): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$nl_generic(r2, &(0x7f0000001340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8bedaf6ad9723128}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x400c0}, 0x41084) 6.489969095s ago: executing program 4 (id=1785): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x30080, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x98b41000) openat$ttynull(0xffffffffffffff9c, &(0x7f0000005400), 0x40002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x1c5, 0x0, 0x8}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6.489534645s ago: executing program 1 (id=1786): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1e99, 0x0, 0x7ffffffe, 0x257, 0x0, r9}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0xa46, 0x0, 0x0}}, 0x0) write$P9_RCREATE(r9, &(0x7f0000000140)={0x18, 0x73, 0x2, {{0x40, 0x4, 0x7}}}, 0x18) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f00000000c0)={[{@size={'size', 0x3d, [0x25, 0x38]}}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r10, 0x1, 0x11, 0x0, &(0x7f0000000440)=0xc00) r11 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000200)={'lo\x00', &(0x7f0000000ff8)=@ethtool_sfeatures={0x3b, 0x2}}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newtclass={0x24, 0x28, 0x501, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0xfff3, 0xe}, {0xfff1, 0xe}, {0xffe0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c810}, 0x9080) socket$inet6_tcp(0xa, 0x1, 0x0) 6.489171995s ago: executing program 5 (id=1787): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000180)="660f1798581100003e440f01f8c4c25d039b0f00000066ba4200ed0f01df66b82e000f00d0b9240900000f3266baf80cb838008188ef66bafc0cb8f800c0feef66baf80cb820b0d881ef66bafc0cec66baf80cb882e2be8def66bafc0cec", 0xffffff97}], 0x1, 0x7c, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000780)={0x0, &(0x7f0000000200)=[@nested_vmresume={0x130, 0x18, 0x3}, @wrmsr={0x65, 0x20, {0x941, 0x101}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host16=0xc00, 0x7, 0x8, 0xad}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host64=0x2c01, 0x2, 0xd, 0xb50}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xb6, 0x2, 0x1, 0x1}}, @nested_load_syzos={0x136, 0x78, {0x3, 0x4, [@nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @control16, 0x7, 0x10000, 0x3}}, @nested_load_syzos={0x136, 0x20, {0x3, 0x9}}]}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xc2, 0x0, 0xa, 0x3}}], 0x1a8}) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0xfffd, 0x4}}}, &(0x7f0000000300)) r7 = socket(0x28, 0x805, 0x0) bind$vsock_stream(r7, &(0x7f0000000580)={0x28, 0x0, 0x0, @local}, 0x10) listen(r7, 0x4) accept4$unix(r7, 0x0, 0x0, 0x800) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x8, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0x9000) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000180)="660f1798581100003e440f01f8c4c25d039b0f00000066ba4200ed0f01df66b82e000f00d0b9240900000f3266baf80cb838008188ef66bafc0cb8f800c0feef66baf80cb820b0d881ef66bafc0cec66baf80cb882e2be8def66bafc0cec", 0xffffff97}], 0x1, 0x7c, 0x0, 0x0) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000780)={0x0, &(0x7f0000000200)=[@nested_vmresume={0x130, 0x18, 0x3}, @wrmsr={0x65, 0x20, {0x941, 0x101}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host16=0xc00, 0x7, 0x8, 0xad}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host64=0x2c01, 0x2, 0xd, 0xb50}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xb6, 0x2, 0x1, 0x1}}, @nested_load_syzos={0x136, 0x78, {0x3, 0x4, [@nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @control16, 0x7, 0x10000, 0x3}}, @nested_load_syzos={0x136, 0x20, {0x3, 0x9}}]}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xc2, 0x0, 0xa, 0x3}}], 0x1a8}) (async) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) (async) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0xfffd, 0x4}}}, &(0x7f0000000300)) (async) socket(0x28, 0x805, 0x0) (async) bind$vsock_stream(r7, &(0x7f0000000580)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r7, 0x4) (async) accept4$unix(r7, 0x0, 0x0, 0x800) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x8, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) (async) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0x9000) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 4.465565936s ago: executing program 4 (id=1788): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000340)={@val={0x70, 0xc}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x10, 0x20, 0x67, 0x4000, 0xb2, 0x2f, 0x0, @empty, @empty}, {0xd00, 0x88c1, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0xd, 0x100, @void}}}}}}}}, 0x32) 4.465203446s ago: executing program 1 (id=1789): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x200001, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x6, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc_mnt\x00', 0x1cc) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt/irq/1/smp_affinity\x00', &(0x7f0000000180)={0x20080, 0x0, 0x10}, 0x18) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./proc_mnt/irq/1/smp_affinity\x00', &(0x7f0000000300)={0xa0002, 0x182, 0x32}, 0x18) renameat(r3, &(0x7f0000000240)='./proc_mnt/irq/1/smp_affinity\x00', r4, &(0x7f0000000340)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd']) write$P9_RLERRORu(r5, &(0x7f0000000040)=ANY=[], 0xd) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x13, 0x0, 0x0) syz_usb_connect$midi(0x0, 0x32, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x644, 0x800f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x1, 0x6, 0xa0, 0x7f, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0xd, [], [{{0x9, 0x5, 0xe, 0x2, 0x10, 0x5, 0x9, 0xca, {0x5, 0x25, 0x1, 0x1, "91"}}}]}}}}}]}}, 0x0) 4.464144177s ago: executing program 5 (id=1790): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac2(0x3, 0x9d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010392ad23f40000102030109028b00030107200b080b010101ff20050904000000010120000924010180041500070c24030503045d02ec8b0003090401"], 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010047bd7000fe5bdf3101000000040001801c000280"], 0x34}, 0x1, 0x0, 0x0, 0x141}, 0x80c0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000001800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000017c0)={&(0x7f0000000a40)={0xd4c, r4, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x49}}}}, [@NL80211_ATTR_TID_CONFIG={0x17c, 0x11d, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5c}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x84}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xef}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x20}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffff9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffffe}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa3}]}]}, @NL80211_ATTR_TID_CONFIG={0xbc, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb6}]}, {0x9c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x94, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x24, 0x2, [{0x3, 0x6}, {0x4, 0x4}, {0x4, 0x3}, {0x2, 0x9}, {0x5, 0xa}, {0x2, 0xa}, {0x0, 0x3}, {0x6, 0x2}, {0x1, 0x4}, {0x0, 0xa}, {0x2, 0xa}, {0x0, 0x2}, {0x0, 0x3}, {0x1, 0x6}, {0x6, 0x6}, {0x4, 0x1}, {0x5, 0x8}, {0x1, 0xa}, {0x5, 0x3}, {0x1, 0xa}, {0x2, 0x6}, {0x4, 0x8}, {0x6, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x4}, {0x1, 0x6}, {0x3, 0x7}, {0x4, 0x5}, {0x0, 0x6}]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x7, 0x8}, {0x7, 0x2}, {0x6, 0x3}, {0x3, 0x9}, {0x7, 0x7}, {0x3, 0xa}, {0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x1}, {0x3, 0x8}, {0x6, 0x9}, {0x5, 0x3}, {0x1, 0x6}, {0x4, 0xa}, {0x4, 0x2}, {0x5, 0x1}, {0x6, 0x8}, {0x0, 0x1}, {0x7, 0x7}, {0x6}, {0x1, 0x1}, {0x0, 0x2}, {0x5, 0x2}, {0x2, 0x6}, {0x5, 0x6}, {0x1, 0xa}, {0x0, 0x7}, {0x3, 0x7}, {0x1, 0x3}, {0x3, 0x5}, {0x3, 0x5}, {0x2, 0xa}, {0x2, 0xa}, {0x0, 0xa}, {0x7, 0xa}, {0x2, 0x2}, {0x0, 0x3}, {0x3, 0x3}, {0x5}, {0x4, 0x2}, {0x1, 0x6}, {0x2, 0x6}, {0x1, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5ae, 0x8, 0x7, 0x1, 0xffff, 0xfffc, 0x3ff, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xd, 0x8, 0x9, 0x6, 0x3e3, 0x1, 0x5]}}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0xe0, 0x11d, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x6, 0x4}, {0x1, 0x6}, {0x5, 0x5}, {0x6, 0xa}, {0x2, 0x9}, {0x2, 0x4}, {0x2, 0x4}, {0x3, 0x3}, {0x3, 0x6}, {0x6, 0xa}, {0x0, 0x3}, {0x7, 0x1}, {0x1, 0x8}, {0x0, 0x2}, {0x7, 0x2}, {0x5, 0x6}, {}, {0x4, 0x1}, {0x7, 0x5}, {0x7, 0x6}, {0x5, 0x2}, {0x1, 0x2}, {0x0, 0x2}, {0x6}, {0x6, 0x8}, {0x2, 0xa}, {0x1, 0x9}, {0x6, 0x5}, {0x0, 0x9}, {0x0, 0x3}, {0x3, 0x9}, {0x2, 0x3}, {0x0, 0x5}, {0x7, 0x3}, {0x4, 0x2}, {0x1}, {0x6, 0xa}, {0x0, 0x8}, {0x2, 0x7}, {0x0, 0x8}, {0x4, 0x8}, {0x1, 0x4}, {0x5, 0x9}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0x8, 0x1000, 0x9, 0xd9ad, 0xd, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd6d2, 0xa, 0x11, 0x80, 0xe5, 0x0, 0xfe6, 0x5]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xb289, 0x3, 0x100, 0x401, 0x2800, 0x0, 0x2]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}]}, @NL80211_ATTR_TID_CONFIG={0x7d4, 0x11d, 0x0, 0x1, [{0x184, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x4, 0x4}, {0x0, 0x10}, {0x1, 0x4}, {}, {0x1, 0x3}, {0x5, 0x9}, {0x7, 0x3}, {0x4, 0x2}, {0x4, 0x9}, {0x4, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x3, 0x7}, {0x2, 0xa}, {0x3, 0x7}, {}, {0x0, 0x7}, {0x2, 0x5}, {0x4, 0x1}, {0x5, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x0, 0x1}, {0x6, 0x9}, {0x2}, {0x4, 0x5}, {0x0, 0x3}, {0x0, 0x7}, {0x2, 0x6}, {0x4, 0x5}, {0x2, 0x8}, {0x2, 0x3}, {0x3}, {0x4}, {0x4, 0x8}, {0x1, 0xa}, {0x7, 0x6}, {0x7, 0x2}, {0x6, 0x8}, {0x1, 0x3}, {0x0, 0xa}, {0x7, 0x1}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4, 0x400, 0xe, 0xf, 0xfffb, 0x5, 0x8a1c]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x4, 0x30, 0x12, 0x18, 0x30, 0x2, 0x48, 0x15, 0x18, 0x24, 0x4e]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x3, 0x3}, {0x0, 0x9}, {0x4, 0x6}, {}, {0x1, 0x6}, {0x7, 0x1}, {0x7, 0x6}, {0x1, 0x3}, {0x1, 0x7}, {0x0, 0x3}, {0x3, 0x1}, {0x7, 0x2}, {0x4, 0x2}, {0x4, 0x1}, {0x5, 0x4}, {0x2, 0x8}, {0x1, 0xa}, {0x6, 0x7}, {0x5}, {0x6, 0x6}, {0x0, 0x9}, {0x1, 0x1}, {0x4, 0x3}, {0x4, 0x6}, {0x5, 0x6}, {0x5, 0x7}, {0x4, 0x8}, {0x4, 0x4}, {0x6, 0x6}, {0x0, 0x2}, {0x2, 0x7}, {0x4, 0xa}, {0x2, 0x5}, {0x7, 0x9}, {}, {0x4, 0x4}, {0x6, 0xa}, {0x3, 0x1}, {0x1}, {0x7, 0x1}, {0x7, 0x4}, {0x4, 0xa}, {0x7, 0x4}, {0x1, 0x3}, {0x1}, {0x6, 0x3}, {0x4, 0x3}, {0x1, 0x2}, {0x6}, {0x7, 0xa}, {0x0, 0x4}, {0x0, 0x9}, {0x1, 0x7}, {0x4}, {0x0, 0x6}, {0x5, 0x4}, {0x5, 0x4}, {0x5, 0x3}, {0x5, 0x9}, {0x0, 0x5}, {}, {0x4, 0x8}, {0x4, 0x3}, {0x3}, {0x4, 0x2}, {0x3, 0x1}, {0x4, 0x4}, {0x7, 0x8}, {0x7, 0x8}, {0x6, 0x7}, {0x3, 0x7}, {0x7, 0x6}]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x4, 0x200, 0xfff, 0x3, 0x10, 0x8, 0x3]}}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0x30, 0x18, 0x24, 0x12, 0x2, 0x18, 0x1, 0x60, 0x6e, 0x3, 0x16, 0x12, 0x0, 0xb, 0xb, 0x2, 0x36, 0x9, 0x4, 0x60, 0x16, 0x4, 0x63, 0x4, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0x5, 0x8001, 0x10, 0x2, 0x3, 0x800]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x6, 0xa}, {0x0, 0x9}, {0x5, 0x1}, {0x4, 0x4}, {0x0, 0x7}, {0x2, 0x5}, {0x2, 0x1}, {0x1, 0x4}, {0x5, 0x4}, {0x4, 0x2}, {0x6, 0x8}, {0x5, 0x9}, {0x2, 0x6}, {0x6, 0xa}, {0x7, 0x6}, {0x5, 0x5}, {0x7, 0x5}, {0x0, 0x2}, {0x6, 0x7}, {0x0, 0x8}, {0x4, 0x4}, {0x4, 0x9}, {0x6, 0x2}, {0x3, 0x5}, {0x0, 0x4}, {0x5, 0x9}, {0x5, 0x7}, {0x3, 0x6}, {0x7, 0x6}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0xa}, {0x0, 0x6}, {0x1, 0x6}, {0x7, 0x8}, {0x0, 0x8}, {}, {0x4}, {0x1}, {0x0, 0x8}, {0x3, 0x4}, {0x1}, {0x0, 0x4}, {0x0, 0x2}, {0x4, 0x9}, {0x4}, {0x6, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x0, 0x5}, {0x4, 0x6}, {0x1, 0x4}, {0x4, 0x3}, {0x0, 0xa}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0x6}, {0x5, 0x5}, {0x6, 0x7}, {0x6, 0x7}, {0x7, 0x2}, {0x2, 0x5}, {0x1, 0xa}, {0x4, 0x1}, {0x2, 0x3}]}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x35}]}, {0x4}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x17}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x36c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x70}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x360, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x7, 0x9, 0x5, 0x3642, 0x25bb, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x2, 0x2}, {0x6, 0x4}, {0x0, 0x3}, {0x7, 0xa}, {0x5}, {0x7, 0x7}, {0x0, 0x5}, {0x3, 0x7}, {0x5, 0x7}, {0x3, 0xa}, {0x7, 0x4}, {0x3, 0x6}, {0x0, 0xa}, {0x7, 0x3}, {0x7, 0x4}, {0x6, 0x1}, {0x0, 0x7}, {0x3, 0x2}, {0x0, 0x8}, {0x0, 0x6}, {0x5, 0x9}, {0x6, 0x1}, {0x6, 0x9}, {0x0, 0x4}, {0x1}, {0x0, 0x6}, {0x5, 0x3}, {0x2, 0x17}, {0x0, 0x1}, {0x0, 0x3}, {0x5, 0x6}, {0x3, 0x1}, {0x2, 0x9}, {0x1, 0xa}, {0x2, 0x4}, {0x5, 0x4}, {0x1, 0x4}, {0x0, 0x3}]}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x5, 0x3}, {0x0, 0x1}, {0x1, 0xa}, {0x1, 0xa}, {0x7, 0x3}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x5}, {0x6, 0x5}, {0x6}, {0x3, 0x9}, {0x5, 0x1}, {0x5, 0x3}, {0x4, 0x6}, {0x6, 0x6}, {0x0, 0x9}, {0x7, 0x8}, {0x3, 0x2}, {0x3, 0x1}, {0x1, 0x2}, {0x5, 0x5}, {0x0, 0x5}, {0x3, 0x9}, {0x0, 0x7}, {0x7, 0x8}, {0x4, 0x4}, {0x2, 0x3}, {0x3}, {0x3, 0x3}, {0x6, 0x3}, {0x7, 0x8}, {0x5, 0x6}, {0x7, 0xa}, {0x6, 0x3}, {0x1, 0xa}, {0x0, 0x4}, {0x3, 0xa}, {0x0, 0x1}, {0x1, 0x5}, {0x0, 0xa}, {0x2, 0x7}, {0x4, 0x3}, {0x6, 0x1}, {0x3, 0xa}, {0x5, 0x4}, {0x1, 0x9}, {0x1, 0x3}, {0x7, 0x8}, {0x1, 0x5}, {0x6, 0x1}, {0x6, 0x5}, {0x2, 0x4}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x8}, {0x2, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9d, 0x2, 0x6c3c, 0x7, 0x4, 0x0, 0xd]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xdc, 0xf, 0xfbff, 0x9, 0x2, 0x97, 0xe93, 0x7]}}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x48, 0x30, 0x48, 0x12, 0x5, 0x18, 0x6c, 0x24, 0x2, 0x5, 0x2b, 0x5, 0x16, 0x2f, 0x3, 0x3, 0x18, 0xb, 0x14, 0x4]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6, 0x1b, 0x6, 0x9, 0x2, 0xb, 0x18, 0x36, 0x5, 0x18, 0x2, 0x63, 0x6c, 0x16, 0xc, 0x41, 0x6c, 0x16, 0x6, 0x1, 0xee3115d2700f479d]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x95, 0x2, 0x80, 0x0, 0x2, 0x8, 0x6]}}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x92bc, 0x3ff, 0x6, 0x5, 0xa, 0x45, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x7, 0x3}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x2, 0x4}, {0x0, 0x4}, {0x5, 0x1}, {0x6, 0x8}, {0x1, 0x1}, {0x3, 0x9}, {0x5, 0x5}, {0x5, 0x3}, {0x4, 0x8}, {0x7, 0xa}, {0x1, 0x7}, {0x0, 0x1}, {0x1, 0x9}, {0x5, 0x5}, {0x6, 0x4}, {0x3, 0xa}, {0x1, 0x5}, {0x4, 0x2}, {0x1, 0x8}, {0x3, 0x3}, {0x2, 0x3}, {0x7, 0x3}, {0x4, 0x5}, {0x7, 0x4}, {0x1, 0x4}, {0x0, 0x8}, {0x2, 0x1}, {0x1, 0x3}, {0x2, 0x2}, {0x6}, {0x5, 0x8}, {0x1, 0x3}, {0x7, 0x2}, {0x5, 0x8}, {0x4, 0x9}, {0x0, 0x6}, {0x1, 0x6}, {0x4, 0xa}, {0x1, 0x9}, {0x7, 0x1}, {0x3}, {0x6, 0x1}, {0x1, 0x9}, {0x0, 0x2}, {0x5, 0x6}, {0x7, 0x4}, {0x2, 0x1}, {0x3}, {0x7, 0x8}, {0x0, 0x6}, {0x6, 0x5}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x3}, {0x5, 0x8}, {0x4, 0x8}, {0x6}, {0x1, 0x7}, {0x5, 0x2}, {0x3, 0x5}, {0x2, 0x6}, {0x7, 0xa}, {0x0, 0x1}, {0x6, 0x7}, {0x0, 0x7}, {0x2, 0x6}, {0x3, 0x6}, {0x3, 0xa}, {0x1, 0x8}, {0x5, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xd, 0x5, 0x1, 0xb29, 0x4, 0x7, 0xfffa]}}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x8, 0x5, 0x7, 0x6, 0x5, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x8000, 0x9, 0x3, 0xfff8, 0xf000, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc6, 0x8000, 0xf, 0x3, 0x10, 0x62, 0x7, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xb, 0x5, 0x3, 0x4, 0x5, 0x1, 0x6c, 0x18, 0x30, 0xed6a100b9d7c68c3, 0x4, 0x60, 0x0, 0x5, 0x5, 0x1, 0x60, 0x36, 0x6, 0x2, 0x12, 0x2, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0xd, 0x9, 0x6, 0x6, 0xa, 0x8, 0x7ff]}}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1e0c, 0xfffd, 0xfff8, 0x9, 0xff6a, 0xc7a6, 0xe, 0xd4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xc, 0x48, 0x24, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xe, 0xfffb, 0x2, 0x10, 0x8001, 0x401, 0x8]}}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x4, 0x2, 0x6, 0x4]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6c]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xa, 0x1, 0x4, 0x401, 0x0, 0x280, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x2, 0x440, 0xd, 0x1, 0x7fff, 0x0, 0x1142]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x2, 0x5, 0x9, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x100, 0x5afd, 0x2, 0x9, 0x1, 0x8, 0x9]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, {0x284, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd6}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x244, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x3, 0xd1, 0x4, 0x4, 0x4, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x138f, 0x8, 0x7, 0x5, 0x5, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x4, 0x6}, {0x0, 0xa}, {0x0, 0x7}, {0x2, 0x8}, {0x5, 0xa}, {0x0, 0x1}, {0x1}, {0x0, 0x9}, {0x1, 0x1}, {0x5, 0x6}, {0x5, 0x7}, {0x5}, {0x5, 0x2}, {0x4, 0x2}, {0x3, 0xa}, {0x0, 0x4}, {0x6, 0x4}, {0x3, 0x4}, {0x3}, {0x6, 0xa}, {0x0, 0x2}, {0x5, 0x5}, {0x3, 0x7}, {0x6, 0x7}, {0x1, 0x8}, {0x7, 0x3}, {0x1, 0x1}, {0x6, 0x2}, {0x1, 0x5}, {0x4}, {0x0, 0x4}, {0x4, 0x2}, {0x1, 0x8}, {0x6, 0x9}, {0x2, 0x6}, {0x1, 0x6}, {0x0, 0x2}, {0x2, 0x7}, {0x2, 0xa}, {0x2, 0x2}, {0x5, 0x8}, {0x3, 0x6}, {0x6, 0x8}, {0x5, 0x5}, {0x7, 0x8}, {0x2, 0x2}, {0x3, 0x7}, {0x3, 0x1}, {0x3, 0x2}, {0x4}, {0x0, 0x6}]}]}, @NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x9, 0x3bdf, 0x7, 0x3, 0x1, 0x2]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x7, 0x7}, {0x4}, {0x1, 0x7}, {0x5, 0x6}, {0x6, 0x3}, {0x7, 0x1}, {0x5, 0x3}, {0x2, 0x8}, {0x1, 0x8}, {0x7, 0x4}, {0x2, 0x2}, {0x2, 0x6}, {0x0, 0x5}, {0x2, 0x7}, {0x2, 0x5}, {0x0, 0x5}, {0x6}, {0x5, 0x6}, {0x0, 0x4}, {0x0, 0x5}, {0x4, 0x3}, {}, {0x2, 0x2}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x7}, {0x6, 0x1}, {0x7, 0x3}, {0x4, 0x3}, {0x5, 0x7}, {0x7}, {0x5, 0x2}, {0x4, 0x8}, {0x6, 0x3}, {0x6, 0xa}, {0x7, 0x5}, {}, {0x2, 0x8}, {0x5}, {0x2, 0x5}, {0x1, 0x9}, {}, {0x4}, {0x4}, {0x5, 0x2}, {0x1, 0x7}, {0x7, 0x6}, {0x7, 0xa}, {0x0, 0x4}, {0x1, 0x1}, {0x6, 0x1}, {0x4, 0xa}, {0x1, 0x6}, {0x1, 0x9}, {0x2, 0xa}, {0x6}, {0x1, 0x2}, {0x1, 0x7}, {0x2, 0xa}, {0x1, 0x3}, {0x0, 0xa}, {0x7, 0x3}, {0x6, 0x5}, {}, {0x6}]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x2, 0xa}, {0x4, 0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x7}, {0x0, 0x6}, {0x1, 0x6}, {0x1, 0x2}, {0x5, 0x6}, {0x2, 0x7}, {0x0, 0x1}, {0x7, 0x7}, {0x0, 0x6}, {0x5}, {0x5, 0x4}, {0x2, 0x8}, {0x5, 0xa}, {0x5, 0x5}, {0x5, 0x3}, {0x7, 0x4}, {0x0, 0x3}, {0x4, 0x1}, {0x1, 0x2}, {0x5, 0x2}, {0x6, 0xa}, {0x0, 0x7}, {0x1}, {0x0, 0x5}, {0x1, 0x3}, {0x3, 0x5}, {0x5, 0x9}, {0x0, 0x6}, {0x0, 0x4}, {0x2, 0x7}, {}, {0x4, 0x9}, {0x5, 0x1}, {0x6, 0x8}, {0x7, 0x6}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x8}, {0x6, 0x6}, {0x6, 0x4}, {0x5, 0x6}, {0x1, 0x9}, {0x7, 0x3}, {0x7, 0x2}, {0x5, 0x4}, {0x7, 0x3}, {0x0, 0x1}, {0x3, 0x9}, {0x6, 0x5}, {0x0, 0x3}, {0x2, 0x4}, {0x0, 0x6}, {0x7, 0xa}, {0x3}, {0x1, 0x6}, {0x3, 0x5}, {0x6, 0x7}, {0x0, 0x9}, {0x1, 0x3}, {}, {0x3, 0x6}, {0x1, 0x5}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x8}, {0x5, 0x6}, {0x4, 0x2}, {0x5, 0x9}]}]}, @NL80211_BAND_5GHZ={0x108, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x0, 0x2}, {0x6, 0x2}, {0x5, 0x5}, {0x6, 0x3}, {0x0, 0xa}, {0x4, 0xa}, {0x5, 0x6}, {0x0, 0x6}, {0x7, 0x7}, {0x5, 0x4}, {0x1, 0x6}, {0x0, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x1, 0xa}, {0x1, 0x6}, {0x2, 0x4}, {0x1, 0x8}, {0x7, 0x4}, {0x6, 0x7}, {0x3, 0x5}, {0x6, 0x4}, {0x0, 0x2}, {0x4, 0x6}, {0x1, 0x8}, {0x4, 0x1}, {0x3, 0x7}, {0x3, 0xa}, {0x5, 0x7}, {0x1, 0x8}, {0x4, 0xa}, {0x3, 0x1}, {0x4}, {0x0, 0x7}, {0x2, 0x1}, {0x2, 0x5}, {0x7}, {0x5, 0x1}, {0x6, 0x1}, {0x2, 0x8}, {0x4, 0x5}, {0x0, 0x7}, {0x5, 0x5}, {0x5, 0x5}, {0x2, 0x3}, {0x1, 0x7}, {0x0, 0x4}, {0x7}, {0x0, 0x6}, {0x6, 0x9}, {0x7, 0x5}, {0x1, 0x3}, {0x6, 0x9}, {0x3, 0x4}, {0x0, 0x1}, {0x0, 0xa}, {0x0, 0x8}, {}, {0x3, 0x6}, {0x1, 0x6}, {0x5, 0xa}, {0x7, 0x2}, {0x6, 0x7}, {0x1, 0x8}, {0x0, 0x2}, {0x6, 0x5}, {0x3, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x6, 0x5, 0x8, 0x0, 0x400, 0x7f, 0x4]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x0, 0x19}, {0x1, 0x8}, {0x4, 0x9}, {0x4}, {0x1, 0x3}, {0x1, 0x6}, {0x0, 0x8}, {0x4}, {0x7, 0x1}, {0x2, 0x6}, {0x0, 0xa}, {0x5, 0xa}, {0x3, 0x1}, {}, {}, {0x1, 0x7}, {0x6, 0x9}, {0x2, 0x1}, {0x0, 0x5}, {0x4, 0xa}, {0x2, 0x8}, {0x0, 0x4}, {0x7, 0x1}, {0x6, 0x6}, {0x1, 0x2}, {0x3, 0x5}, {0x3, 0x4}, {0x3, 0x8}, {0x1, 0x2}, {0x0, 0x4}, {0x5, 0x7}, {0x1, 0x6}, {0x6, 0xa}, {0x1, 0x4}, {0x7, 0x8}, {0x0, 0x8}, {0x5, 0x2}, {0x2, 0x4}, {0x4}, {0x2, 0x3}, {0x3, 0xa}, {0x1, 0x3}, {0x4, 0x8}, {0x5, 0x5}, {0x7, 0x1}, {}, {0x5, 0x1}, {0x4, 0x5}, {0x7, 0x6}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x6, 0x7}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0x5}, {0x5, 0x1}, {0x1, 0x7}, {0x3, 0xa}, {0x1, 0x2}, {0x1, 0xa}, {0x0, 0x5}, {0x3, 0xa}, {0x3, 0x3}, {0x6, 0x9}, {0x2, 0x8}, {0x6, 0x1}, {0x1, 0x4}, {0x6, 0x4}, {0x6, 0x5}, {0x5, 0x3}, {0x0, 0x9}, {0x1}, {0x2, 0x7}, {0x1, 0x1}, {0x2, 0x1}, {0x6, 0xa}, {0x7, 0x8}, {0x2, 0x1}, {0x6, 0x6}, {0x6, 0x4}, {0x2, 0x8}, {0x1, 0x5}, {0x1, 0x1}, {0x6, 0x5}, {0x4}, {0x1, 0x7}, {0x6}, {0x7, 0x4}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x7}, {0x7, 0x7}, {0x0, 0x8}, {0x4, 0xa}, {0x1, 0x5}, {0x7, 0x6}, {0x1, 0xa}, {0x3}, {0x2, 0x4}, {0x1, 0x6}, {0x7, 0x6}, {0x2, 0x5}, {0x6, 0x2}, {0x1, 0x1}, {0x7, 0x3}, {0x1, 0x6}, {0x1, 0x4}, {0x1, 0x8}, {0x6, 0x5}, {0x1, 0xa}, {0x0, 0x2}, {0x1, 0x8}, {0x2, 0x1}, {0x3}, {0x3}, {0x0, 0x5}, {0x7, 0x8}, {0x1, 0xa}, {}]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x4, 0x8}, {0x0, 0x4}, {0x7, 0x8}, {0x2, 0x8}, {0x6, 0x7}, {0x1, 0x3}, {0x5, 0xa}, {0x4, 0x2}, {0x3, 0x9}, {0x4, 0x7}, {0x5, 0xa}, {0x0, 0x3}, {0x0, 0xa}, {0x0, 0x1}, {0x7, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x54}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x1f4, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8e}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x44}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf7}]}, {0xb0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x84, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1, 0x6, 0x12, 0x4, 0x1, 0xc, 0x12, 0x16, 0x9, 0x12, 0x30, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xab83, 0xfffb, 0x6, 0x9, 0xfffb, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x7, 0x8000, 0x4, 0x660, 0x1, 0x5]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x30, 0x12, 0x3, 0x1b, 0x30, 0x30, 0x60, 0x36, 0x2, 0x1, 0x7c, 0x9, 0xc]}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x36, 0x4, 0x9, 0x12, 0x12, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xaa27, 0xf, 0x1, 0xff, 0x3ff, 0xfc4, 0xf7, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xca}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x12}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x97, 0x689a, 0x80, 0x101, 0x9b7, 0x2, 0x1, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x676}]}]}]}, 0xd4c}, 0x1, 0x0, 0x0, 0x40000}, 0x801) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100396762810cb06100049dc0108030109021b0001420420000900000000852413070905f3c305eaf286971c085e95d10a0020a1b51123"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, &(0x7f0000000080)=@lang_id={0x0, 0x3, 0x440a}}]}) 4.33195286s ago: executing program 4 (id=1791): writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000000)="c8050000200019", 0x7}], 0x45) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000001a80)={[0x5]}, 0x8, 0x80000) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b030000000000010902220001010080320904000001030000000921110100012217000705810340"], 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2.310247641s ago: executing program 4 (id=1792): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x4a, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='atkbd', 0x5) socket$packet(0x11, 0x3, 0x300) 2.309897941s ago: executing program 1 (id=1793): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) inotify_init1(0x80800) open(&(0x7f0000000040)='./file0\x00', 0x644005, 0x150) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000240)={0x60, 0x16, 0x5, "b77ad3a78e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6a03, "0f9d0000002020000000b82100"}) syz_usb_control_io(r1, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="402004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000180)={0x20, 0x17, 0x4, "d748f038"}, 0x0, 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x1) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) 2.308659621s ago: executing program 5 (id=1794): r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x21, 0x9, 0x2, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r4, 0x107, 0x17, 0x0, &(0x7f0000002000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f0000007800)=[{{&(0x7f0000000280)=@nl, 0x80, &(0x7f00000017c0)=[{&(0x7f00000004c0)=""/186, 0xba}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/77, 0x4d}], 0x2}, 0xb}, {{&(0x7f0000001800), 0x80, &(0x7f0000001940)=[{&(0x7f0000001880)=""/174, 0xae}], 0x1, &(0x7f0000001980)=""/11, 0xb}, 0x1}, {{&(0x7f00000019c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000006200)=[{&(0x7f0000001a40)=""/149, 0x95}, {&(0x7f0000007900)=""/4110, 0x100e}, {&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f0000004000)=""/185, 0xb9}, {&(0x7f00000040c0)=""/110, 0x6e}, {&(0x7f0000004140)=""/4096, 0x1000}, {&(0x7f0000005140)=""/4096, 0x1000}, {&(0x7f0000006140)=""/77, 0x4d}, {&(0x7f00000061c0)=""/39, 0x27}], 0x9, &(0x7f00000062c0)=""/176, 0xb0}, 0x5}, {{&(0x7f0000006380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000007680)=[{&(0x7f0000006400)=""/70, 0x46}, {&(0x7f0000006480)=""/155, 0x9b}, {&(0x7f0000006540)=""/158, 0x9e}, {&(0x7f0000006600)=""/4096, 0x1000}, {&(0x7f0000007600)=""/103, 0x67}], 0x5, &(0x7f0000007700)=""/230, 0xe6}, 0xf5}], 0x4, 0x40000000, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000}}, 0xe8) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_gstrings={0xf}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) close(0x3) clock_nanosleep(0x2, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000040)="165b", 0x2) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x2a, 0x3, 0x0, {0x3, 0x9, 0x0, '().!\xf0$@^('}}, 0x2a) syz_usb_connect(0x0, 0x55, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400e10002020100052400100104240202052401000105240600010705810308000a09040100020a00000807058202000200070503"], 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0x8, 0xfff, 0xee28, 0x3, 0x2, "db065b617dbf6cbf7a544b7ee231ae889acbc9", 0x8, 0x7}) 76.091198ms ago: executing program 4 (id=1795): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xb0) close_range(r0, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x1, @remote, 0x8}, 0xdb) recvfrom$inet6(r1, &(0x7f0000000040)=""/16, 0x10, 0x40000040, &(0x7f0000000240)={0xa, 0x4e20, 0x7, @mcast1, 0x2}, 0x1c) mount$incfs(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000), 0x88, &(0x7f0000000100)=ANY=[@ANYBLOB='read_timeout_ms=040000000006', @ANYRESOCT=r0]) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_buf(r2, 0x0, 0x10, &(0x7f0000000280)=""/69, &(0x7f0000000300)=0x45) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000140)) 75.646278ms ago: executing program 1 (id=1796): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "12effd5955f90a59feb03a4ecf4c81237b6921125191843639c0c3e0d5838da8005a903ff8b7904d238fa1a8b8211e361b856eab76286d93669707ae80923e60", 0x2f}, 0x48, 0xfffffffffffffffb) r1 = request_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='logon\x00', 0xfffffffffffffffc) r2 = request_key(&(0x7f00000001c0)='pkcs7_test\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)='^\x00', r0) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r4 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @auto=[0x31, 0x35, 0x38, 0x32, 0x30, 0x31, 0x30, 0x33, 0x66, 0x39, 0x34, 0x65, 0x62, 0x37, 0x63, 0x33]}, &(0x7f0000000380)={0x0, "f384cc1bf6532d2b5ecb7606f4bce370b3c24fc69dd0b3752e4cde1ee5a6060fc5e59d51c524a46cb7b114a4a6b341cd9f01644a92a95bf6d7d1e4460656cc39", 0x1c}, 0x48, r1) add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="1677a418e1d2ed60b8a25a79802aa8b16bb6d49a1de07a9f099fca0e6d59be642e82452d62adfa69ff85ddaa465715c451de164dc590f24469b57203619d1f91a910538d0fe0ee458bf4f3edc551eb9a3b3307341872714edcc51f7c940ae3d5f9bb65041a17480e724f77bb4d4793e631ba8a14b281bcc971040c345f2aea4892a2871c4be27c37299713978ffc4c93264afaafa2bc7b7d9f", 0x99, r3) add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)="ff24689a50a980dd9a7e7d3b34157bea92237b36fbc4b10a0ec47133a0bbb0b1d47eb40972fbd2fd7354ced79c4affb44000d3cf8bc3ac817bbede4161ba3bdb859acd56ed5de34b8a9b2e98af914f77c97d7bfa3a38b562838aaa74c53f41cade342bf686c8173f755b01390b7cb0de91c4826ff98fa5ee0ee9275e5fc2c617e16d12ef35f86dd810d6c3bdc1134e736ef90651f248ed6905c1ab330f571f8ea27eb785be84851889b2bc61e4114519af096bc9777b6e51462b7a2bbfc4669601ef857e419aca266943a4328d71", 0xce, 0x0) r5 = add_key$keyring(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x3}, 0x0, 0x0, r3) add_key$fscrypt_provisioning(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x3}, &(0x7f0000000740)={0x0, 0x0, @d}, 0x18, r5) r6 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$get_security(0x11, r6, &(0x7f0000000880), 0x0) r7 = add_key$keyring(&(0x7f00000009c0), &(0x7f0000000a00)={'syz', 0x1}, 0x0, 0x0, r0) r8 = add_key$fscrypt_v1(&(0x7f00000008c0), &(0x7f0000000900)={'fscrypt:', @desc3}, &(0x7f0000000940)={0x0, "d29b60c0c5c916526c5e6f307ae92493c2448956db8f1d43219117915311db0266b8df645d7ebbaf4af8d73f20038a5df92c8f1d5c9dbbf942600553e95f7440", 0x1c}, 0x48, r7) r9 = add_key(&(0x7f0000000a40)='id_resolver\x00', &(0x7f0000000a80)={'syz', 0x1}, 0x0, 0x0, r5) keyctl$instantiate(0xc, r2, &(0x7f0000000ac0)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'id_resolver\x00'}, 0x21, r9) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000b00)='blacklist\x00', 0x0) r10 = add_key$user(&(0x7f0000000b40), &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)="1aa440a89e5b6b", 0x7, r1) r11 = add_key$keyring(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f0000000c80)='dns_resolver\x00', &(0x7f0000000cc0)) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000d00)={r6, 0x6, 0x54}, &(0x7f0000000d40)={'enc=', 'pkcs1', ' hash=', {'nhpoly1305-generic\x00'}}, &(0x7f0000000dc0)="a0a0b993ec9a", &(0x7f0000000e00)=""/84) add_key(&(0x7f0000000e80)='.dead\x00', &(0x7f0000000ec0)={'syz', 0x1}, 0x0, 0x0, r8) keyctl$setperm(0x5, r10, 0x800) keyctl$update(0x2, 0x0, &(0x7f0000000f00)="c7036ced1a2ef9ba8803e51b3afd812616514e19c8ce699cb30dc3fdfacb241244028f7c21121b0d0c5dfc8326e983e3fca6ed05c751bdb5067a66d5c41933dd358d132bfecc76f459ca4ed594f286e1dd7e07fdae2b3c972357ae539b3822c62a2e7465736b1ab4b94206485f0380a2730db42689e36cc578603dce02e289329a7d077b62585be9184ad93cc1c2269718dea258b970152bba", 0x99) r12 = add_key$keyring(&(0x7f0000001040), &(0x7f0000001080)={'syz', 0x2}, 0x0, 0x0, r9) keyctl$search(0xa, r11, &(0x7f0000000fc0)='rxrpc\x00', &(0x7f0000001000)={'syz', 0x1}, r12) keyctl$update(0x2, r4, &(0x7f00000010c0)="146f928ffb166c1f001f0826e81ce54f7a303a6250f496906b55c15d74ef913208e55b5ed70f", 0x26) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000001100)='update ', &(0x7f0000001140)) keyctl$assume_authority(0x10, r4) r13 = add_key$fscrypt_v1(&(0x7f0000001180), &(0x7f00000011c0)={'fscrypt:', @desc1}, &(0x7f0000001200)={0x0, "7a4674793fdc629fa5ada7f3dfe1b37558e4a67428da4a109665bd468cac523d9e46100466da7707a22c5996c0c2e2a69df01c15bb0f3570f4ed4ce44755b231", 0x10}, 0x48, r8) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000001280)={r13, 0x37, 0x36}, 0x0, &(0x7f00000012c0)="f2038e3f3ad14421a19565e11981b6eab6d36785279514749365dc4734000fc53330e4ca0cae64b78f7d6ac607d0f8afdfbffce3bb82ce", &(0x7f0000001300)=""/54) 0s ago: executing program 4 (id=1797): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x4, 0x4e22, @broadcast}, {0x2, 0x0, @remote}, 0x30d, 0x0, 0x0, 0xfdffffffffffffff, 0x3, 0x0, 0x40002, 0x177, 0x3}) kernel console output (not intermixed with test programs): .752945][ T4403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.771335][ T4405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.781898][ T4405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.791328][ T4406] futex_wake_op: syz.1.1234 tries to shift op by 144; fix this program [ 201.809005][ T4406] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 202.354813][ T36] audit: type=1400 audit(1787350375.449:519): avc: denied { getopt } for pid=4433 comm="syz.5.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 202.399664][ T4438] FAULT_INJECTION: forcing a failure. [ 202.399664][ T4438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.413043][ T4438] CPU: 1 UID: 0 PID: 4438 Comm: syz.1.1243 Not tainted syzkaller #0 1b627ac51616646c2b03e03cc27ccf1d06a70c9d [ 202.413077][ T4438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 202.413089][ T4438] Call Trace: [ 202.413097][ T4438] [ 202.413105][ T4438] __dump_stack+0x21/0x30 [ 202.413139][ T4438] dump_stack_lvl+0x140/0x1c0 [ 202.413168][ T4438] ? __cfi_dump_stack_lvl+0x10/0x10 [ 202.413197][ T4438] ? vsnprintf+0x7b4/0x1ad0 [ 202.413222][ T4438] ? check_stack_object+0x10f/0x150 [ 202.413245][ T4438] dump_stack+0x19/0x20 [ 202.413272][ T4438] should_fail_ex+0x3c2/0x510 [ 202.413297][ T4438] should_fail+0xf/0x20 [ 202.413318][ T4438] should_fail_usercopy+0x1e/0x30 [ 202.413343][ T4438] _copy_from_user+0x20/0xa0 [ 202.413370][ T4438] kstrtouint_from_user+0xde/0x170 [ 202.413394][ T4438] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 202.413416][ T4438] ? selinux_file_permission+0x318/0xb60 [ 202.413439][ T4438] ? __cfi_selinux_file_permission+0x10/0x10 [ 202.413460][ T4438] proc_fail_nth_write+0x8f/0x220 [ 202.413501][ T4438] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 202.413548][ T4438] ? bpf_lsm_file_permission+0xd/0x20 [ 202.413577][ T4438] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 202.413618][ T4438] vfs_write+0x3c4/0xfd0 [ 202.413649][ T4438] ? __cfi_vfs_write+0x10/0x10 [ 202.413669][ T4438] ? __kasan_check_write+0x18/0x20 [ 202.413690][ T4438] ? mutex_lock+0x97/0x1d0 [ 202.413709][ T4438] ? __cfi_mutex_lock+0x10/0x10 [ 202.413729][ T4438] ksys_write+0x145/0x260 [ 202.413769][ T4438] ? xfd_validate_state+0x68/0x140 [ 202.413797][ T4438] ? __cfi_ksys_write+0x10/0x10 [ 202.413819][ T4438] ? __kasan_check_read+0x15/0x20 [ 202.413839][ T4438] __x64_sys_write+0x7f/0x90 [ 202.413861][ T4438] x64_sys_call+0x271c/0x2ee0 [ 202.413879][ T4438] do_syscall_64+0x57/0xf0 [ 202.413906][ T4438] ? clear_bhb_loop+0x50/0xa0 [ 202.413927][ T4438] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 202.413958][ T4438] RIP: 0033:0x7f4f17f5e90e [ 202.413977][ T4438] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 202.413997][ T4438] RSP: 002b:00007f4f18eaafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 202.414022][ T4438] RAX: ffffffffffffffda RBX: 00007f4f18eab6c0 RCX: 00007f4f17f5e90e [ 202.414038][ T4438] RDX: 0000000000000001 RSI: 00007f4f18eab0a0 RDI: 0000000000000007 [ 202.414052][ T4438] RBP: 00007f4f18eab090 R08: 0000000000000000 R09: 0000000000000000 [ 202.414065][ T4438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.414078][ T4438] R13: 00007f4f18226038 R14: 00007f4f18225fa0 R15: 00007fff5f6fef08 [ 202.414097][ T4438] [ 202.705046][ T4446] input: syz0 as /devices/virtual/input/input33 [ 202.734696][ T4448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.745816][ T4448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.760262][ T310] usb 5-1: USB disconnect, device number 81 [ 203.086176][ T31] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 203.216155][ T310] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 203.249696][ T31] usb 6-1: config 0 descriptor has 1 excess byte, ignoring [ 203.256949][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 203.266876][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 203.279208][ T31] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 203.288453][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.296684][ T31] usb 6-1: Product: syz [ 203.300877][ T31] usb 6-1: Manufacturer: syz [ 203.305663][ T31] usb 6-1: SerialNumber: syz [ 203.311144][ T31] usb 6-1: config 0 descriptor?? [ 203.317448][ T31] usb 6-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress f8 [ 203.330081][ T4462] X.509: Couldn't decode AuthKeyIdentifier [ 203.343487][ T36] audit: type=1400 audit(1787350376.354:520): avc: denied { ioctl } for pid=4461 comm="syz.3.1252" path="socket:[35603]" dev="sockfs" ino=35603 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 203.390962][ T310] usb 5-1: unable to get BOS descriptor or descriptor too short [ 203.401023][ T310] usb 5-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 203.410119][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.418196][ T310] usb 5-1: Product: syz [ 203.422524][ T310] usb 5-1: Manufacturer: syz [ 203.427147][ T310] usb 5-1: SerialNumber: syz [ 203.539399][ T31] usb 6-1: USB disconnect, device number 32 [ 203.653203][ T4459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.661901][ T4459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.746179][ T4474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.754906][ T4474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.888338][ T4459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.897273][ T4459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.905967][ T4459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.914946][ T4459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.923632][ T4459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.932369][ T4459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.376068][ T310] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 204.384346][ T310] usb 5-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 204.399606][ T310] usb 5-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 204.409082][ T310] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 204.424566][ T310] usb 5-1: USB disconnect, device number 82 [ 204.441067][ T1265] udevd[1265]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 204.732609][ T31] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 204.896224][ T31] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 204.906376][ T31] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 204.916082][ T31] usb 6-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice= 0.00 [ 204.928779][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.943733][ T31] usb-storage 6-1:1.0: USB Mass Storage device detected [ 204.964733][ T4489] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=4489 comm=syz.4.1260 [ 205.262172][ T36] audit: type=1326 audit(1787350378.126:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4481 comm="syz.1.1259" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f17f9e0d9 code=0x7fc00000 [ 205.326494][ T4505] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1265'. [ 205.401181][ T4510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.418108][ T31] usb-storage 6-1:1.0: probe with driver usb-storage failed with error -5 [ 205.427208][ T4510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.437460][ T31] usb 6-1: USB disconnect, device number 33 [ 205.509856][ T4516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.520106][ T4516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.950612][ T4520] tmpfs: Unknown parameter 'permit_directio' [ 206.130276][ T4540] rust_binder: 4529:4540 got reply transaction with no transaction stack [ 206.138981][ T4540] rust_binder: 4529:4540 transaction reply to 0:0 failed EINVAL, code 0 size 0-0 [ 206.433245][ T31] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 206.596845][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 206.606634][ T31] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 206.616365][ T31] usb 5-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice= 0.00 [ 206.625488][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.635512][ T31] usb-storage 5-1:1.0: USB Mass Storage device detected [ 206.855861][ T36] audit: type=1400 audit(1787350379.594:522): avc: denied { lock } for pid=4549 comm="syz.5.1280" path="socket:[36521]" dev="sockfs" ino=36521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 206.887576][ T4552] veth1_to_bond: entered allmulticast mode [ 206.893739][ T4552] veth1_to_bond: entered promiscuous mode [ 206.901008][ T4552] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1281'. [ 206.911628][ T4552] veth1_to_bond (unregistering): left promiscuous mode [ 206.918536][ T4552] veth1_to_bond (unregistering): left allmulticast mode [ 206.929241][ T310] rust_binder: 4529: undelivered TRANSACTION_ERROR: 29201 [ 207.077356][ T4562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.086278][ T4562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.138340][ T31] usb-storage 5-1:1.0: probe with driver usb-storage failed with error -5 [ 207.148632][ T31] usb 5-1: USB disconnect, device number 83 [ 207.213129][ T310] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 207.376935][ T310] usb 6-1: unable to get BOS descriptor or descriptor too short [ 207.385321][ T310] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 207.396647][ T310] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 207.405746][ T310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.413786][ T310] usb 6-1: Product: syz [ 207.417972][ T310] usb 6-1: Manufacturer: syz [ 207.422642][ T310] usb 6-1: SerialNumber: syz [ 207.428417][ T4556] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 207.662375][ T4566] Invalid ELF header type: 0 != 1 [ 207.666495][ T36] audit: type=1400 audit(1787350380.351:523): avc: denied { module_load } for pid=4565 comm="syz.1.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 207.689380][ T310] usb 6-1: invalid MIDI out EP 0 [ 207.703445][ T310] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 207.720096][ T310] usb 6-1: USB disconnect, device number 34 [ 207.726489][ T4571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.733098][ T36] audit: type=1400 audit(1787350380.397:524): avc: denied { write } for pid=4567 comm="syz.1.1287" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 207.736394][ T4571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.769259][ T344] udevd[344]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 207.982200][ T378] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 208.146004][ T378] usb 5-1: unable to get BOS descriptor or descriptor too short [ 208.154226][ T378] usb 5-1: not running at top speed; connect to a high speed hub [ 208.162819][ T378] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 208.175399][ T378] usb 5-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 208.184491][ T378] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.192549][ T378] usb 5-1: Product: syz [ 208.196739][ T378] usb 5-1: Manufacturer: syz [ 208.201977][ T378] usb 5-1: SerialNumber: syz [ 208.410579][ T4578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.419673][ T4578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.430703][ T378] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 208.437712][ T378] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 208.449209][ T378] usb 5-1: USB disconnect, device number 84 [ 208.460780][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 208.715281][ T4587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.724996][ T4587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.197342][ T4597] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1296'. [ 209.206462][ T4597] gretap0: entered promiscuous mode [ 209.212104][ T4597] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1296'. [ 209.221217][ T4597] 0ªî{X¹¦: renamed from gretap0 [ 209.226931][ T4597] 0ªî{X¹¦: left promiscuous mode [ 209.232008][ T4597] 0ªî{X¹¦: entered allmulticast mode [ 209.237788][ T4597] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 209.282008][ T310] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 209.302125][ T4602] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc02 [ 209.334384][ T4602] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1298'. [ 209.363537][ T4608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.373117][ T4608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.373129][ T4609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.373522][ T4609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.399671][ T4609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.408397][ T4608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.419705][ T4609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.426559][ T4608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.445643][ T310] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 209.455759][ T310] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 209.465699][ T310] usb 5-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice= 0.00 [ 209.475091][ T310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.485181][ T310] usb-storage 5-1:1.0: USB Mass Storage device detected [ 209.506205][ T4612] SELinux: Context system_u:object_r:usbmon_device_t:s0 is not valid (left unmapped). [ 209.516129][ T36] audit: type=1400 audit(1787350382.059:525): avc: denied { relabelto } for pid=4611 comm="syz.5.1301" name="76" dev="tmpfs" ino=458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:usbmon_device_t:s0" [ 209.542631][ T36] audit: type=1400 audit(1787350382.059:526): avc: denied { associate } for pid=4611 comm="syz.5.1301" name="76" dev="tmpfs" ino=458 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:usbmon_device_t:s0" [ 209.578545][ T36] audit: type=1400 audit(1787350382.105:527): avc: denied { write } for pid=3089 comm="syz-executor" name="76" dev="tmpfs" ino=458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:usbmon_device_t:s0" [ 209.605100][ T36] audit: type=1400 audit(1787350382.105:528): avc: denied { remove_name } for pid=3089 comm="syz-executor" name="file2" dev="tmpfs" ino=464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:usbmon_device_t:s0" [ 209.627948][ T4621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.635217][ T36] audit: type=1400 audit(1787350382.105:529): avc: denied { rmdir } for pid=3089 comm="syz-executor" name="76" dev="tmpfs" ino=458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:usbmon_device_t:s0" [ 209.644103][ T4621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.932635][ T310] usb-storage 5-1:1.0: probe with driver usb-storage failed with error -5 [ 209.942419][ T310] usb 5-1: USB disconnect, device number 85 [ 210.099896][ T4628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.108793][ T4628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.239399][ T4632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.248042][ T4632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.451943][ T378] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 210.615406][ T378] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.626478][ T378] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.636375][ T378] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 210.645446][ T378] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.654223][ T378] usb 6-1: config 0 descriptor?? [ 210.755143][ T310] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 210.769112][ T4641] zram0: detected capacity change from 0 to 8 [ 210.849380][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 210.904161][ T63] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 210.940523][ T310] usb 5-1: config 0 interface 0 altsetting 216 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 210.952261][ T310] usb 5-1: config 0 interface 0 altsetting 216 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 210.971787][ T310] usb 5-1: config 0 interface 0 has no altsetting 0 [ 210.978674][ T310] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 210.993696][ T310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.015569][ T310] usb 5-1: config 0 descriptor?? [ 211.121958][ T4630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.138481][ T4630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.169984][ T4630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.179740][ T4630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.190694][ T378] usbhid 6-1:0.0: can't add hid device: -71 [ 211.196877][ T378] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 211.199944][ T4655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.213197][ T378] usb 6-1: USB disconnect, device number 35 [ 211.232012][ T4655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.525721][ T310] input: HID 28bd:0909 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0909.001B/input/input34 [ 211.551555][ T310] uclogic 0003:28BD:0909.001B: input,hidraw0: USB HID v7f.fe Mouse [HID 28bd:0909] on usb-dummy_hcd.4-1/input0 [ 211.607563][ T310] usb 5-1: USB disconnect, device number 86 [ 211.627189][ T4659] fido_id[4659]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 211.642186][ T4661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.660002][ T4661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.808117][ T4669] __vm_enough_memory: pid: 4669, comm: syz.4.1320, bytes: 8795547357184 not enough memory for the allocation [ 211.832632][ T4671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.841474][ T4671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.850674][ T4672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.859462][ T4672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.033415][ T586] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 212.141775][ T310] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 212.219122][ T586] usb 6-1: config 0 has an invalid interface number: 231 but max is 0 [ 212.227477][ T586] usb 6-1: config 0 has no interface number 0 [ 212.249266][ T4691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.250191][ T586] usb 6-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 212.263197][ T4691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.284548][ T586] usb 6-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 212.304192][ T586] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.312253][ T586] usb 6-1: Product: syz [ 212.316559][ T310] usb 5-1: Using ep0 maxpacket: 8 [ 212.323151][ T586] usb 6-1: Manufacturer: syz [ 212.336636][ T310] usb 5-1: unable to get BOS descriptor or descriptor too short [ 212.344488][ T586] usb 6-1: SerialNumber: syz [ 212.349969][ T310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 212.369498][ T586] usb 6-1: config 0 descriptor?? [ 212.375076][ T4666] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 212.390804][ T310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 212.400599][ T310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 212.426194][ T586] plusb 6-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.5-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, ce:d6:79:a0:5c:7b [ 212.446406][ T310] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 212.466800][ T310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 212.476519][ T310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 212.506530][ T310] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 212.531597][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.539665][ T310] usb 5-1: Product: syz [ 212.553263][ T310] usb 5-1: Manufacturer: syz [ 212.557936][ T310] usb 5-1: SerialNumber: syz [ 212.563700][ T310] usb 5-1: config 0 descriptor?? [ 212.575602][ T4669] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 212.619192][ T1265] udevd[1265]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 212.652731][ T4666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.681401][ T4666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.705203][ T4666] input: syz1 as /devices/virtual/input/input35 [ 212.735369][ T378] usb 6-1: USB disconnect, device number 36 [ 212.750605][ T378] plusb 6-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.5-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 212.817396][ T4669] __vm_enough_memory: pid: 4669, comm: syz.4.1320, bytes: 8795547357184 not enough memory for the allocation [ 212.869115][ T379] usb 5-1: USB disconnect, device number 87 [ 213.013297][ T4719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.022699][ T4719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.060361][ T4724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.070352][ T4724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.118860][ T4724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1329'. [ 213.268213][ T379] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 213.334034][ T4731] netlink: 57 bytes leftover after parsing attributes in process `syz.5.1330'. [ 213.430649][ T379] usb 5-1: Using ep0 maxpacket: 16 [ 213.437515][ T379] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 213.459592][ T379] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.481747][ T379] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.502683][ T379] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 213.526909][ T379] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 213.547243][ T379] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.561178][ T379] usb 5-1: config 0 descriptor?? [ 213.638478][ T4737] overlay: ./file1 is not a directory [ 214.058932][ T310] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 214.297867][ T310] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 214.329811][ T310] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 214.339545][ T310] usb 6-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice= 0.00 [ 214.373031][ T310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.415384][ T310] usb-storage 6-1:1.0: USB Mass Storage device detected [ 214.605318][ T379] usbhid 5-1:0.0: can't add hid device: -71 [ 214.611483][ T379] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 214.639615][ T379] usb 5-1: USB disconnect, device number 88 [ 214.908055][ T310] usb-storage 6-1:1.0: probe with driver usb-storage failed with error -5 [ 214.931029][ T310] usb 6-1: USB disconnect, device number 37 [ 215.142087][ T36] audit: type=1400 audit(1787350387.248:530): avc: denied { watch } for pid=4756 comm="syz.3.1338" path="/385/file0" dev="tmpfs" ino=2159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 215.327064][ T36] audit: type=1400 audit(1787350387.432:531): avc: denied { map } for pid=4766 comm="syz.1.1342" path="socket:[38069]" dev="sockfs" ino=38069 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 215.424727][ T4772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.433336][ T4772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.500864][ T4784] tipc: Started in network mode [ 215.505931][ T4784] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 215.519682][ T4784] tipc: Enabled bearer , priority 10 [ 215.554651][ T4772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.563269][ T4772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.572404][ T4783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.583733][ T4787] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1349'. [ 215.593176][ T4783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.657609][ T4789] syzkaller1: entered promiscuous mode [ 215.664097][ T4789] syzkaller1: entered allmulticast mode [ 215.781196][ T378] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 215.932860][ T310] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 215.945104][ T378] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 215.957685][ T378] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.967922][ T378] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 215.982931][ T378] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 215.992072][ T378] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.000115][ T378] usb 5-1: Product: syz [ 216.004276][ T378] usb 5-1: Manufacturer: syz [ 216.008965][ T378] usb 5-1: SerialNumber: syz [ 216.014660][ T378] usb 5-1: config 0 descriptor?? [ 216.021940][ T378] usb-storage 5-1:0.0: USB Mass Storage device detected [ 216.030134][ T378] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 216.108025][ T310] usb 6-1: unable to get BOS descriptor or descriptor too short [ 216.116210][ T310] usb 6-1: not running at top speed; connect to a high speed hub [ 216.127200][ T310] usb 6-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 216.136384][ T310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.144477][ T310] usb 6-1: Product: syz [ 216.148667][ T310] usb 6-1: Manufacturer: syz [ 216.153365][ T310] usb 6-1: SerialNumber: syz [ 216.184857][ T4793] block device autoloading is deprecated and will be removed. [ 216.242810][ T586] usb 5-1: USB disconnect, device number 89 [ 216.320513][ T4811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.332082][ T4811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.360796][ T4815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.370691][ T4815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.380741][ T4817] bridge_slave_0: default FDB implementation only supports local addresses [ 216.394485][ T310] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 216.418818][ T310] usb 6-1: USB disconnect, device number 38 [ 216.467177][ T4824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.476083][ T4824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.484657][ T4824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.493942][ T4824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.734426][ T378] tipc: Node number set to 4269801492 [ 217.060775][ T4836] netlink: 'syz.3.1364': attribute type 27 has an invalid length. [ 217.071386][ T4836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.082013][ T4836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.091802][ T4841] netlink: 'syz.3.1364': attribute type 27 has an invalid length. [ 217.103812][ T4843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.114336][ T4843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.136348][ T4838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.146071][ T4838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.234524][ T36] audit: type=1400 audit(1787350389.186:532): avc: denied { relabelfrom } for pid=4850 comm="syz.5.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 217.254823][ T36] audit: type=1400 audit(1787350389.186:533): avc: denied { relabelto } for pid=4850 comm="syz.5.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 217.688840][ T4857] can0: slcan on ttyS3. [ 217.755017][ T4855] can0 (unregistered): slcan off ttyS3. [ 217.789842][ T36] audit: type=1400 audit(1787350389.694:534): avc: denied { getopt } for pid=4865 comm="syz.3.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 217.842109][ T4873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.868775][ T4873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.922580][ T4873] netlink: 'syz.1.1373': attribute type 46 has an invalid length. [ 217.962864][ T4873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.973058][ T4873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.103631][ T4906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.120179][ T36] audit: type=1400 audit(1787350389.999:535): avc: denied { bind } for pid=4904 comm="syz.3.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 218.125660][ T4906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.172431][ T4913] netlink: 'syz.3.1379': attribute type 4 has an invalid length. [ 218.180644][ T4913] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1379'. [ 218.201027][ T4913] device-mapper: table: 252:1: too large device [ 218.210884][ T4913] device-mapper: ioctl: error adding target to table [ 218.537599][ T4927] usb usb8: usbfs: process 4927 (syz.5.1383) did not claim interface 0 before use [ 218.724253][ T4932] syz.5.1385: attempt to access beyond end of device [ 218.724253][ T4932] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 218.737361][ T4932] FAT-fs (loop5): unable to read boot sector [ 218.747705][ T4932] kvm: kvm [4931]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 218.764260][ T4932] kvm: kvm [4931]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 218.774153][ T4932] kvm: kvm [4931]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010000) = 0x8000 [ 218.783888][ T4932] kvm: kvm [4931]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010002) = 0x8000 [ 218.799243][ T4932] kvm: kvm [4931]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 218.809439][ T4932] kvm: kvm [4931]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010000) = 0x8000 [ 218.819307][ T4932] kvm: kvm [4931]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010002) = 0x8000 [ 218.839106][ T4932] kvm: kvm [4931]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 218.849486][ T4932] kvm: kvm [4931]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010000) = 0x8000 [ 218.860682][ T4932] kvm: kvm [4931]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010002) = 0x8000 [ 218.937732][ T4942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.953440][ T4942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.964705][ T4942] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 218.968819][ T4942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.079939][ T4942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.217851][ T4951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.226703][ T4951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.260368][ T36] audit: type=1400 audit(1787350391.060:536): avc: denied { unlink } for pid=4941 comm="syz.1.1388" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 219.284820][ T4942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.296031][ T4942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.358587][ T36] audit: type=1326 audit(1787350391.144:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.4.1394" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc529d9e0d9 code=0x0 [ 219.691536][ T345] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 219.854068][ T345] usb 6-1: Using ep0 maxpacket: 8 [ 219.863917][ T345] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 219.873277][ T345] usb 6-1: config 179 has no interface number 0 [ 219.879858][ T345] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 219.891361][ T345] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 219.902985][ T345] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 219.913162][ T345] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 219.926841][ T345] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 219.936053][ T345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.946120][ T4966] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 220.182433][ T311] usb 6-1: USB disconnect, device number 39 [ 220.455457][ T5001] overlayfs: failed to resolve './file0': -2 [ 220.489598][ T5005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.498523][ T5005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.523717][ T5007] netlink: 'syz.4.1407': attribute type 4 has an invalid length. [ 220.548870][ T5007] netlink: 'syz.4.1407': attribute type 4 has an invalid length. [ 220.667361][ T5012] netlink: 'syz.4.1409': attribute type 8 has an invalid length. [ 220.757221][ T345] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 220.768553][ T345] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 220.844231][ T5016] fido_id[5016]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 221.100303][ T345] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 221.251356][ T378] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 221.283809][ T345] usb 6-1: Using ep0 maxpacket: 32 [ 221.291827][ T345] usb 6-1: unable to get BOS descriptor or descriptor too short [ 221.301712][ T345] usb 6-1: config 1 interface 0 altsetting 10 bulk endpoint 0x1 has invalid maxpacket 1024 [ 221.312791][ T345] usb 6-1: config 1 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.326566][ T345] usb 6-1: config 1 interface 0 has no altsetting 0 [ 221.336312][ T345] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 221.346172][ T345] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.354614][ T345] usb 6-1: Product: syz [ 221.359266][ T345] usb 6-1: Manufacturer: syz [ 221.364506][ T345] usb 6-1: SerialNumber: syz [ 221.371862][ T5018] raw-gadget.6 gadget.5: fail, usb_ep_enable returned -22 [ 221.438314][ T378] usb 5-1: unable to get BOS descriptor or descriptor too short [ 221.447297][ T378] usb 5-1: not running at top speed; connect to a high speed hub [ 221.460820][ T378] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 221.470512][ T378] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.479002][ T378] usb 5-1: Product: syz [ 221.484410][ T378] usb 5-1: Manufacturer: syz [ 221.489148][ T378] usb 5-1: SerialNumber: syz [ 221.628399][ T5018] serio: Serial port ptm1 [ 221.717894][ T5026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.728311][ T5026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.736571][ T5026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.746711][ T5026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.758318][ T5026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.773878][ T345] usb 6-1: USB disconnect, device number 40 [ 221.781438][ T5026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.808682][ T5026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.818419][ T5026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.835558][ T5026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.849512][ T5026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.868416][ T378] usb 5-1: invalid MIDI in EP 0 [ 221.881796][ T378] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 221.893401][ T378] usb 5-1: USB disconnect, device number 90 [ 221.908917][ T1265] udevd[1265]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 222.724476][ T378] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 222.910260][ T378] usb 5-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 222.919928][ T378] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.122961][ T5049] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 223.204374][ T378] usb 5-1: USB disconnect, device number 91 [ 223.321892][ T5060] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1424'. [ 223.529519][ T5069] netlink: 'syz.4.1425': attribute type 4 has an invalid length. [ 223.543456][ T5069] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1425'. [ 223.593039][ T5068] can0: slcan on ttyS3. [ 223.679700][ T5068] can0 (unregistered): slcan off ttyS3. [ 223.826492][ T5084] fuse: Invalid rootmode [ 224.175955][ T378] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 224.313046][ T5111] FAULT_INJECTION: forcing a failure. [ 224.313046][ T5111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.347507][ T5111] CPU: 0 UID: 0 PID: 5111 Comm: syz.1.1432 Not tainted syzkaller #0 1b627ac51616646c2b03e03cc27ccf1d06a70c9d [ 224.347555][ T5111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.347575][ T5111] Call Trace: [ 224.347587][ T5111] [ 224.347600][ T5111] __dump_stack+0x21/0x30 [ 224.347652][ T5111] dump_stack_lvl+0x140/0x1c0 [ 224.347691][ T5111] ? __cfi_dump_stack_lvl+0x10/0x10 [ 224.347731][ T5111] ? check_stack_object+0x81/0x150 [ 224.347762][ T5111] ? __virt_addr_valid+0x2a1/0x370 [ 224.347797][ T5111] dump_stack+0x19/0x20 [ 224.347833][ T5111] should_fail_ex+0x3c2/0x510 [ 224.347868][ T5111] should_fail+0xf/0x20 [ 224.347898][ T5111] should_fail_usercopy+0x1e/0x30 [ 224.347933][ T5111] _copy_from_user+0x20/0xa0 [ 224.347972][ T5111] memdup_user+0x81/0x170 [ 224.347998][ T5111] ? strndup_user+0x40/0xd0 [ 224.348024][ T5111] strndup_user+0x6c/0xd0 [ 224.348050][ T5111] __se_sys_mount+0x9f/0x480 [ 224.348081][ T5111] ? __x64_sys_mount+0xf0/0xf0 [ 224.348113][ T5111] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 224.348157][ T5111] __x64_sys_mount+0xc3/0xf0 [ 224.348187][ T5111] x64_sys_call+0x2021/0x2ee0 [ 224.348214][ T5111] do_syscall_64+0x57/0xf0 [ 224.348252][ T5111] ? clear_bhb_loop+0x50/0xa0 [ 224.348281][ T5111] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 224.348329][ T5111] RIP: 0033:0x7f4f17f9e0d9 [ 224.348354][ T5111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.348381][ T5111] RSP: 002b:00007f4f18eab028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 224.348415][ T5111] RAX: ffffffffffffffda RBX: 00007f4f18225fa0 RCX: 00007f4f17f9e0d9 [ 224.348439][ T5111] RDX: 0000200000000000 RSI: 00002000000000c0 RDI: 0000000000000000 [ 224.348462][ T5111] RBP: 00007f4f18eab090 R08: 0000200000000200 R09: 0000000000000000 [ 224.348483][ T5111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.348502][ T5111] R13: 00007f4f18226038 R14: 00007f4f18225fa0 R15: 00007fff5f6fef08 [ 224.348528][ T5111] [ 224.436598][ T311] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 224.456884][ T378] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.574836][ T378] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.585066][ T378] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 224.597962][ T378] usb 5-1: New USB device found, idVendor=15c2, idProduct=2204, bcdDevice= 0.00 [ 224.629441][ T378] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.640061][ T378] usb 5-1: config 0 descriptor?? [ 224.654424][ T311] usb 6-1: unable to get BOS descriptor or descriptor too short [ 224.664334][ T311] usb 6-1: not running at top speed; connect to a high speed hub [ 224.685657][ T311] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.696252][ T311] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.708661][ T311] usb 6-1: string descriptor 0 read error: -22 [ 224.714976][ T311] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 224.728739][ T311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.750678][ T311] usb 6-1: 0:2 : does not exist [ 224.884776][ T5089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.894181][ T5089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.908285][ T378] usbhid 5-1:0.0: can't add hid device: -71 [ 224.917039][ T378] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 224.932360][ T378] usb 5-1: USB disconnect, device number 92 [ 225.985327][ T5130] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1437'. [ 225.995967][ T36] audit: type=1400 audit(1787350397.274:538): avc: denied { read } for pid=5129 comm="syz.4.1437" path="socket:[40410]" dev="sockfs" ino=40410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 226.097044][ T5132] fuse: Bad value for 'fd' [ 226.105874][ T36] audit: type=1400 audit(1787350397.375:539): avc: denied { read write } for pid=5131 comm="syz.4.1438" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 226.132039][ T36] audit: type=1400 audit(1787350397.375:540): avc: denied { open } for pid=5131 comm="syz.4.1438" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 226.193297][ T36] audit: type=1400 audit(1787350397.403:541): avc: denied { ioctl } for pid=5131 comm="syz.4.1438" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 226.219745][ T36] audit: type=1400 audit(1787350397.440:542): avc: denied { unmount } for pid=1158 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 226.504796][ T310] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 226.679891][ T310] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 226.690313][ T310] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 226.700696][ T310] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.717162][ T310] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 226.727372][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 226.736194][ T310] usb 5-1: Product: syz [ 226.740957][ T310] usb 5-1: Manufacturer: syz [ 226.746428][ T310] usb 5-1: SerialNumber: syz [ 226.975031][ T310] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 93 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 227.212582][ T310] usb 5-1: USB disconnect, device number 93 [ 227.228475][ T310] usblp0: removed [ 227.336832][ T311] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 227.347713][ T311] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 227.358450][ T311] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 227.367626][ T5137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.377378][ T5137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.393353][ T311] usb 6-1: USB disconnect, device number 41 [ 227.855279][ T5145] 9pnet_fd: Insufficient options for proto=fd [ 227.923718][ T5147] veth1_to_team: entered promiscuous mode [ 227.932309][ T36] audit: type=1400 audit(1787350399.055:543): avc: denied { shutdown } for pid=5144 comm="syz.4.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 228.028412][ T5157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.038241][ T5157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.048551][ T5157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.057416][ T5157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.346189][ T311] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 228.510114][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.521247][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.531112][ T311] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 228.540329][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.549371][ T311] usb 5-1: config 0 descriptor?? [ 228.729475][ T5168] tmpfs: Unknown parameter 'nMn¯odes' [ 228.821860][ T5170] netlink: 'syz.1.1454': attribute type 16 has an invalid length. [ 228.829875][ T5170] netlink: 'syz.1.1454': attribute type 25 has an invalid length. [ 228.837999][ T5170] netlink: 64094 bytes leftover after parsing attributes in process `syz.1.1454'. [ 228.848750][ T5170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=5170 comm=syz.1.1454 [ 228.933125][ T5172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.946349][ T5172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.995425][ T311] playstation 0003:054C:0DF2.001D: unknown main item tag 0x0 [ 229.003265][ T311] playstation 0003:054C:0DF2.001D: unknown main item tag 0x0 [ 229.010881][ T311] playstation 0003:054C:0DF2.001D: unknown main item tag 0x0 [ 229.018481][ T311] playstation 0003:054C:0DF2.001D: unknown main item tag 0x0 [ 229.025930][ T311] playstation 0003:054C:0DF2.001D: unknown main item tag 0x0 [ 229.035814][ T311] playstation 0003:054C:0DF2.001D: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 229.245233][ T378] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 229.407695][ T378] usb 6-1: Using ep0 maxpacket: 8 [ 229.413374][ T378] usb 6-1: too many configurations: 15, using maximum allowed: 8 [ 229.428476][ T378] usb 6-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 229.436871][ T5160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.437981][ T378] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.455808][ T5160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.457345][ T378] usb 6-1: config 0 descriptor?? [ 229.470500][ T311] playstation 0003:054C:0DF2.001D: Failed to retrieve feature with reportID 32: -71 [ 229.480846][ T311] playstation 0003:054C:0DF2.001D: Failed to retrieve DualSense firmware info: -71 [ 229.490850][ T311] playstation 0003:054C:0DF2.001D: Failed to get firmware info from DualSense [ 229.500290][ T311] playstation 0003:054C:0DF2.001D: Failed to create dualsense. [ 229.502737][ T378] hub 6-1:0.0: Invalid hub with more than one config or interface [ 229.514475][ T311] playstation 0003:054C:0DF2.001D: probe with driver playstation failed with error -71 [ 229.519927][ T378] hub 6-1:0.0: probe with driver hub failed with error -22 [ 229.533916][ T311] usb 5-1: USB disconnect, device number 94 [ 229.601694][ T5179] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ00000000000000000000006' [ 229.654913][ T5181] netlink: 'syz.1.1458': attribute type 4 has an invalid length. [ 229.716705][ T378] usb 6-1: USB disconnect, device number 42 [ 229.782465][ T5189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.791448][ T5189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.422472][ T5209] netlink: 'syz.1.1469': attribute type 8 has an invalid length. [ 230.501851][ T310] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 230.545174][ T5216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.566473][ T5216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.599210][ T378] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 230.675158][ T310] usb 5-1: Using ep0 maxpacket: 32 [ 230.696832][ T310] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 230.705161][ T310] usb 5-1: config 0 has no interface number 0 [ 230.712111][ T310] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 230.734950][ T310] usb 5-1: config 0 interface 196 has no altsetting 0 [ 230.752618][ T310] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 230.772493][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.772521][ T378] usb 6-1: Using ep0 maxpacket: 16 [ 230.780543][ T310] usb 5-1: Product: syz [ 230.780567][ T310] usb 5-1: Manufacturer: syz [ 230.780589][ T310] usb 5-1: SerialNumber: syz [ 230.795796][ T310] usb 5-1: config 0 descriptor?? [ 230.808874][ T5204] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 230.823071][ T378] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.837479][ T378] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.856811][ T5220] kvm_pr_unimpl_wrmsr: 21 callbacks suppressed [ 230.856841][ T5220] kvm: kvm [5219]: vcpu6, guest rIP: 0x914a Unhandled WRMSR(0xc1) = 0xe50000000401 [ 230.873199][ T378] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 230.886714][ T378] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 230.896468][ T5220] kvm: kvm [5219]: vcpu6, guest rIP: 0x914a Unhandled WRMSR(0xc2) = 0xe50000000401 [ 230.906382][ T378] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.924305][ T378] usb 6-1: config 0 descriptor?? [ 230.947324][ T5220] kvm: kvm [5219]: vcpu6, guest rIP: 0x914a Unhandled WRMSR(0x11e) = 0xe50000000401 [ 230.975648][ T5220] kvm: kvm [5219]: vcpu6, guest rIP: 0x914a Unhandled WRMSR(0x186) = 0xe50000000401 [ 230.986134][ T5220] kvm: kvm [5219]: vcpu6, guest rIP: 0x914a Unhandled WRMSR(0x187) = 0xe50000000401 [ 231.010905][ T5220] kvm_intel: kvm [5219]: vcpu6, guest rIP: 0x914a Unhandled WRMSR(0x1d9) = 0xe50000000401 [ 231.174039][ T5224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.182924][ T5224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.198055][ T5226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.209364][ T5226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.822250][ T5231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.831408][ T5231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.840979][ T378] usbhid 6-1:0.0: can't add hid device: -71 [ 231.850312][ T378] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 231.856217][ T310] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: -110 [ 231.869831][ T378] usb 6-1: USB disconnect, device number 43 [ 231.877150][ T310] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 231.910056][ T5235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.921296][ T5235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.059888][ T36] audit: type=1400 audit(1787350402.868:544): avc: denied { getattr } for pid=5234 comm="syz.3.1477" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 232.259574][ T5254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.268665][ T5254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.802822][ T5266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.811718][ T5266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.868516][ T5268] erspan0: mtu less than device minimum [ 232.920853][ T5266] overlayfs: statfs failed on './file0' [ 233.222795][ T5287] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1489'. [ 233.389699][ T36] audit: type=1400 audit(1787350404.096:545): avc: denied { accept } for pid=5288 comm="syz.5.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 233.538930][ T310] usb 5-1: USB disconnect, device number 95 [ 233.585126][ T310] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected [ 234.087257][ T310] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 234.262492][ T310] usb 5-1: unable to get BOS descriptor or descriptor too short [ 234.277140][ T310] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 234.294934][ T310] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 234.304821][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.313117][ T310] usb 5-1: Product: syz [ 234.336970][ T310] usb 5-1: Manufacturer: syz [ 234.344676][ T310] usb 5-1: SerialNumber: syz [ 234.556993][ T5328] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 234.567246][ T5330] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 234.579387][ T5312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.588424][ T5312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.609024][ T310] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 234.626255][ T310] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 234.636269][ T310] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 234.645741][ T310] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 234.668715][ T310] usb 5-1: USB disconnect, device number 96 [ 234.683771][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 234.813683][ T5341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.822495][ T5341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.888703][ T378] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 235.029480][ T378] usb 6-1: device descriptor read/64, error -71 [ 235.251076][ T5349] netlink: 'syz.3.1506': attribute type 4 has an invalid length. [ 235.289509][ T378] usb 6-1: device descriptor read/64, error -71 [ 235.549417][ T378] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 235.711866][ T378] usb 6-1: device descriptor read/64, error -71 [ 235.711870][ T310] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 235.895998][ T310] usb 5-1: Using ep0 maxpacket: 16 [ 235.902663][ T310] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 235.911931][ T310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.920828][ T310] usb 5-1: config 0 descriptor?? [ 235.930607][ T310] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 235.998016][ T378] usb 6-1: device descriptor read/64, error -71 [ 236.061959][ T5372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.071640][ T5372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.123658][ T378] usb usb6-port1: attempt power cycle [ 236.143768][ T310] usb 5-1: Detected FT232B [ 236.239660][ T5378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.248879][ T5378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.266482][ T5378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.276009][ T5378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.361393][ T310] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 236.369587][ T310] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 236.377341][ T310] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 236.387103][ T310] usb 5-1: USB disconnect, device number 97 [ 236.394978][ T310] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 236.405314][ T310] ftdi_sio 5-1:0.0: device disconnected [ 236.491793][ T378] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 236.514724][ T378] usb 6-1: device descriptor read/8, error -71 [ 236.655638][ T378] usb 6-1: device descriptor read/8, error -71 [ 236.756221][ T5385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.765030][ T5385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.914236][ T378] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 236.954973][ T36] audit: type=1326 audit(1787350407.392:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5391 comm="syz.4.1522" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc529d9e0d9 code=0x0 [ 236.980124][ T5390] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1521'. [ 236.991371][ T378] usb 6-1: device descriptor read/8, error -71 [ 237.073254][ T5395] 9pnet: p9_errstr2errno: server reported unknown error [ 237.115450][ T5401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.124091][ T5401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.133190][ T378] usb 6-1: device descriptor read/8, error -71 [ 237.250418][ T378] usb usb6-port1: unable to enumerate USB device [ 237.314992][ T345] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 237.337277][ T36] audit: type=1400 audit(1787350407.752:547): avc: denied { mount } for pid=5402 comm="syz.1.1526" name="/" dev="incremental-fs" ino=2744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 237.360738][ T36] audit: type=1400 audit(1787350407.770:548): avc: denied { unmount } for pid=5402 comm="syz.1.1526" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 237.397460][ T5408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.406300][ T5408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.480846][ T345] usb 5-1: unable to get BOS descriptor or descriptor too short [ 237.494234][ T345] usb 5-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 237.503685][ T345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.511874][ T345] usb 5-1: Product: syz [ 237.516341][ T345] usb 5-1: Manufacturer: syz [ 237.521117][ T345] usb 5-1: SerialNumber: syz [ 237.726642][ T310] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 237.878260][ T310] usb 6-1: device descriptor read/64, error -71 [ 238.790765][ T5435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.801826][ T5435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.368125][ T5441] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1538'. [ 239.397130][ T5445] futex_wake_op: syz.3.1539 tries to shift op by 144; fix this program [ 239.517269][ T36] audit: type=1400 audit(1787350409.755:549): avc: denied { setopt } for pid=5451 comm="syz.1.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 239.568755][ T5457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.573478][ T5452] kvm: kvm [5450]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 239.581637][ T5457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.591802][ T5452] kvm: kvm [5450]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 239.697005][ T5464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.706664][ T5464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.023020][ T9] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 240.159316][ T5468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.168248][ T5468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.178748][ T5468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.185663][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 240.191544][ T5468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.208617][ T9] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 240.217211][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.229346][ T9] usb 6-1: config 0 has no interface number 0 [ 240.235669][ T9] usb 6-1: config 0 interface 196 altsetting 27 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 240.250569][ T9] usb 6-1: config 0 interface 196 has no altsetting 0 [ 240.266031][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 240.275581][ T345] usb 5-1: USB disconnect, device number 98 [ 240.285247][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.293498][ T1265] udevd[1265]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 240.294179][ T9] usb 6-1: Product: syz [ 240.316939][ T9] usb 6-1: Manufacturer: syz [ 240.322548][ T9] usb 6-1: SerialNumber: syz [ 240.330004][ T9] usb 6-1: config 0 descriptor?? [ 240.340104][ T9] ipheth 6-1:0.196: Unable to find alternate settings interface [ 240.558902][ T310] usb 6-1: USB disconnect, device number 49 [ 240.640386][ T345] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 240.802858][ T345] usb 5-1: Using ep0 maxpacket: 32 [ 240.809560][ T345] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.820875][ T5476] rust_binder: 5475 RLIMIT_NICE not set [ 240.821274][ T5475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 240.823897][ T345] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 240.834995][ T5475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 240.842584][ T345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.842619][ T345] usb 5-1: Product: syz [ 240.842640][ T345] usb 5-1: Manufacturer: syz [ 240.842661][ T345] usb 5-1: SerialNumber: syz [ 240.854079][ T5475] rust_binder: 5474:5475 got reply transaction with no transaction stack [ 240.868734][ T345] usb 5-1: config 0 descriptor?? [ 240.874479][ T5475] rust_binder: 5474:5475 transaction reply to 0:0 failed EINVAL, code 0 size 96-24 [ 240.885931][ T345] usb 5-1: bad CDC descriptors [ 240.898770][ T345] usb 5-1: unsupported MDLM descriptors [ 240.899519][ T310] rust_binder: 5474: undelivered TRANSACTION_ERROR: 29201 [ 240.912686][ T310] rust_binder: 5474: undelivered TRANSACTION_COMPLETE [ 241.113109][ T310] usb 5-1: USB disconnect, device number 99 [ 241.463607][ T311] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 241.508108][ T5484] netlink: 'syz.1.1555': attribute type 4 has an invalid length. [ 241.567714][ T5490] FAULT_INJECTION: forcing a failure. [ 241.567714][ T5490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.581270][ T5490] CPU: 1 UID: 0 PID: 5490 Comm: syz.1.1557 Not tainted syzkaller #0 1b627ac51616646c2b03e03cc27ccf1d06a70c9d [ 241.581302][ T5490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 241.581315][ T5490] Call Trace: [ 241.581323][ T5490] [ 241.581331][ T5490] __dump_stack+0x21/0x30 [ 241.581361][ T5490] dump_stack_lvl+0x140/0x1c0 [ 241.581385][ T5490] ? __cfi_dump_stack_lvl+0x10/0x10 [ 241.581412][ T5490] dump_stack+0x19/0x20 [ 241.581435][ T5490] should_fail_ex+0x3c2/0x510 [ 241.581457][ T5490] should_fail+0xf/0x20 [ 241.581477][ T5490] should_fail_usercopy+0x1e/0x30 [ 241.581498][ T5490] _copy_from_iter+0x1a6/0x1520 [ 241.581524][ T5490] ? __cfi__copy_from_iter+0x10/0x10 [ 241.581550][ T5490] tun_get_user+0x231/0x3720 [ 241.581571][ T5490] ? arch_stack_walk+0x10a/0x170 [ 241.581591][ T5490] ? ptr_ring_consume+0x430/0x430 [ 241.581609][ T5490] ? _parse_integer+0x2e/0x40 [ 241.581627][ T5490] ? kstrtoull+0x13b/0x1e0 [ 241.581646][ T5490] ? __kasan_check_write+0x18/0x20 [ 241.581665][ T5490] ? ref_tracker_alloc+0x32b/0x5b0 [ 241.581688][ T5490] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 241.581711][ T5490] ? selinux_file_permission+0x318/0xb60 [ 241.581732][ T5490] tun_chr_write_iter+0x1fa/0x310 [ 241.581750][ T5490] vfs_write+0x75f/0xfd0 [ 241.581769][ T5490] ? __cfi_vfs_write+0x10/0x10 [ 241.581798][ T5490] ksys_write+0x145/0x260 [ 241.581817][ T5490] ? __cfi_ksys_write+0x10/0x10 [ 241.581836][ T5490] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 241.581864][ T5490] __x64_sys_write+0x7f/0x90 [ 241.581883][ T5490] x64_sys_call+0x271c/0x2ee0 [ 241.581900][ T5490] do_syscall_64+0x57/0xf0 [ 241.581924][ T5490] ? clear_bhb_loop+0x50/0xa0 [ 241.581968][ T5490] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 241.582007][ T5490] RIP: 0033:0x7f4f17f9e0d9 [ 241.582029][ T5490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.582053][ T5490] RSP: 002b:00007f4f18eab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 241.582087][ T5490] RAX: ffffffffffffffda RBX: 00007f4f18225fa0 RCX: 00007f4f17f9e0d9 [ 241.582102][ T5490] RDX: 0000000000000032 RSI: 0000200000000340 RDI: 0000000000000003 [ 241.582114][ T5490] RBP: 00007f4f18eab090 R08: 0000000000000000 R09: 0000000000000000 [ 241.582139][ T5490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.582151][ T5490] R13: 00007f4f18226038 R14: 00007f4f18225fa0 R15: 00007fff5f6fef08 [ 241.582167][ T5490] [ 241.848169][ T311] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.858417][ T311] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 241.867567][ T311] usb 6-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice= 0.00 [ 241.876813][ T311] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.906894][ T5495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.918932][ T5495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.527113][ T5502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.536561][ T5502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.733969][ T5506] can: request_module (can-proto-0) failed. [ 242.862532][ T5514] syzkaller1: entered promiscuous mode [ 242.868109][ T5514] syzkaller1: entered allmulticast mode [ 243.055987][ T5530] syzkaller1: left promiscuous mode [ 243.061412][ T5530] syzkaller1: left allmulticast mode [ 243.215615][ T5535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.234884][ T5535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.266422][ T5537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.283863][ T5537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.897586][ T5544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.907571][ T5544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.982072][ T5546] netlink: 'syz.4.1577': attribute type 2 has an invalid length. [ 244.054326][ T5550] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3337741779 (3337741779 ns) > initial count (2753149745 ns). Using initial count to start timer. [ 244.076325][ T36] audit: type=1326 audit(1787350413.965:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5549 comm="syz.4.1578" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc529d9e0d9 code=0x0 [ 244.466242][ T345] usb 6-1: USB disconnect, device number 50 [ 244.539871][ T311] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 244.702326][ T311] usb 5-1: Using ep0 maxpacket: 32 [ 244.714194][ T311] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 244.722412][ T311] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.756479][ T311] usb 5-1: config 0 has no interface number 0 [ 244.762645][ T311] usb 5-1: config 0 interface 196 altsetting 27 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 244.778284][ T311] usb 5-1: config 0 interface 196 has no altsetting 0 [ 244.787209][ T311] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 244.799884][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.808055][ T311] usb 5-1: Product: syz [ 244.812464][ T311] usb 5-1: Manufacturer: syz [ 244.817106][ T311] usb 5-1: SerialNumber: syz [ 244.825525][ T311] usb 5-1: config 0 descriptor?? [ 245.059285][ T345] usb 5-1: USB disconnect, device number 100 [ 245.691555][ T5571] overlayfs: failed to resolve '/ug$o-Q`]oŒr�_etlùÝ­Hé4': -2 [ 245.710400][ T5571] overlayfs: failed to resolve '/ug$o-Q`]oŒr�_etlùÝ­Hé4': -2 [ 245.719259][ T5571] overlayfs: failed to resolve '/ug$o-Q`]oŒr�_etlùÝ­Hé4': -2 [ 245.728892][ T5571] overlayfs: failed to resolve '/ug$o-Q`]oŒr�_etlùÝ­Hé4': -2 [ 245.737922][ T5571] overlayfs: failed to resolve '/ug$o-Q`]oŒr�_etlùÝ­Hé4': -2 [ 245.753591][ T5571] overlayfs: failed to resolve '/ug$o-Q`]oŒr�_etlùÝ­Hé4': -2 [ 245.762487][ T5571] overlayfs: failed to resolve '/ug$o-Q`]oŒr�_etlùÝ­Hé4': -2 [ 245.771374][ T5571] overlayfs: failed to resolve '/ug$o-Q`]oŒr�_etlùÝ­Hé4': -2 [ 245.780429][ T5571] overlayfs: failed to resolve '/ug$o-Q`]oŒr�_etlùÝ­Hé4': -2 [ 245.789142][ T5571] overlayfs: failed to resolve '/ug$o-Q`]oŒr�_etlùÝ­Hé4': -2 [ 245.798121][ T5571] overlayfs: failed to resolve '/ug$o-Q`]oŒr�_etlùÝ­Hé4': -2 [ 245.806672][ T5571] overlayfs: failed to resolve '/ug$o-Q`]oŒr�_etlùÝ­Hé4': -2 [ 245.815697][ T5571] overlayfs: failed to resolve '/ug$o-Q`]oŒr�_etlùÝ­Hé4': -2 [ 245.824529][ T5571] overlayfs: failed to resolve '/ug$o-Q`]oŒr�_etlùÝ­Hé4': -2 [ 245.833534][ T5571] overlayfs: failed to resolve '/ug$o-Q`]oŒr�_etlùÝ­Hé4': -2 [ 245.842289][ T5571] overlayfs: failed to resolve '/ug$o-Q`]oŒr�_etlùÝ­Hé4': -2 [ 245.851186][ T5571] overlayfs: failed to resolve '/ug$o-Q`]oŒr�_etlùÝ­Hé4': -2 [ 245.859547][ T5571] overlayfs: failed to resolve '/ug$o-Q`]oŒr�_etlùÝ­Hé4': -2 [ 245.868379][ T5571] overlayfs: failed to resolve '/ug$o-Q`]oŒr�_etlùÝ­Hé4': -2 [ 245.877000][ T5571] overlayfs: failed to resolve '/ug$o-Q`]oŒr�_etlùÝ­Hé4': -2 [ 245.885805][ T5571] overlayfs: failed to resolve '/ug$o-Q`]oŒr�_etlùÝ­Hé4': -2 [ 245.894508][ T5571] overlayfs: failed to resolve '/ug$o-Q`]oŒr�_etlùÝ­Hé4': -2 [ 245.903163][ T5571] overlayfs: failed to resolve '/ug$o-Q`]oŒr�_etlùÝ­Hé4': -2 [ 245.911808][ T5571] overlayfs: failed to resolve '/ug$o-Q`]oŒr�_etlùÝ­Hé4': -2 [ 245.920612][ T5571] overlayfs: failed to resolve '/ug$o-Q`]oŒr�_etlùÝ­Hé4': -2 [ 245.928959][ T5571] overlayfs: failed to resolve '/ug$o-Q`]oŒr�_etlùÝ­Hé4': -2 [ 245.937735][ T5571] overlayfs: failed to resolve '/ug$o-Q`]oŒr�_etlùÝ­Hé4': -2 [ 245.946206][ T5571] overlayfs: failed to resolve '/ug$o-Q`]oŒr�_etlùÝ­Hé4': -2 [ 245.954948][ T5571] overlayfs: failed to resolve '/ug$o-Q`]oŒr�_etlùÝ­Hé4': -2 [ 245.963502][ T5571] overlayfs: failed to resolve '/ug$o-Q`]oŒr�_etlùÝ­Hé4': -2 [ 245.972122][ T5571] overlayfs: failed to resolve '/ug$o-Q`]oŒr�_etlùÝ­Hé4': -2 [ 245.980731][ T5571] overlayfs: failed to resolve '/ug$o-Q`]oŒr�_etlùÝ­Hé4': -2 [ 245.989310][ T5571] overlayfs: failed to resolve '/ug$o-Q`]oŒr�_etlùÝ­Hé4': -2 [ 246.252998][ T5577] futex_wake_op: syz.5.1587 tries to shift op by 144; fix this program [ 246.321665][ T5578] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 246.461859][ T5583] tipc: Enabling of bearer rejected, media not registered [ 246.565793][ T5586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.574985][ T5586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.782064][ T9] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 246.857913][ T345] usb 5-1: new low-speed USB device number 101 using dummy_hcd [ 246.947638][ T9] usb 6-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 246.956883][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.964896][ T9] usb 6-1: Product: syz [ 246.969173][ T9] usb 6-1: Manufacturer: syz [ 246.973818][ T9] usb 6-1: SerialNumber: syz [ 247.021202][ T345] usb 5-1: too many configurations: 127, using maximum allowed: 8 [ 247.030616][ T345] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 247.038327][ T345] usb 5-1: can't read configurations, error -61 [ 247.187589][ T5593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.187963][ T345] usb 5-1: new low-speed USB device number 102 using dummy_hcd [ 247.204006][ T5593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.214511][ T9] usb 6-1: MIDIStreaming interface descriptor not found [ 247.242657][ T9] usb 6-1: USB disconnect, device number 51 [ 247.355078][ T36] audit: type=1400 audit(1787350416.984:551): avc: denied { append } for pid=5598 comm="syz.3.1596" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 247.379722][ T345] usb 5-1: too many configurations: 127, using maximum allowed: 8 [ 247.380123][ T5599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.393947][ T345] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 247.398347][ T5599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.408470][ T345] usb 5-1: can't read configurations, error -61 [ 247.418887][ T345] usb usb5-port1: attempt power cycle [ 247.781251][ T5602] fuse: Bad value for 'fd' [ 247.787548][ T36] audit: type=1400 audit(1787350417.390:552): avc: denied { ioctl } for pid=5600 comm="syz.5.1597" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xf516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 247.813248][ T345] usb 5-1: new low-speed USB device number 103 using dummy_hcd [ 247.841825][ T5608] 9pnet_fd: p9_fd_create_tcp (5608): problem connecting socket to 127.0.0.1 [ 247.852186][ T345] usb 5-1: too many configurations: 127, using maximum allowed: 8 [ 247.862722][ T345] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 247.870670][ T345] usb 5-1: can't read configurations, error -61 [ 248.004920][ T5610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.016645][ T5610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.019142][ T345] usb 5-1: new low-speed USB device number 104 using dummy_hcd [ 248.046219][ T36] audit: type=1400 audit(1787350417.630:553): avc: denied { getopt } for pid=5611 comm="syz.1.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 248.074136][ T345] usb 5-1: too many configurations: 127, using maximum allowed: 8 [ 248.086079][ T345] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 248.094091][ T345] usb 5-1: can't read configurations, error -61 [ 248.101203][ T345] usb usb5-port1: unable to enumerate USB device [ 248.504312][ T310] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 248.587879][ T5631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.596775][ T5631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.606163][ T5631] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1608'. [ 248.645188][ T310] usb 6-1: device descriptor read/64, error -71 [ 248.905107][ T310] usb 6-1: device descriptor read/64, error -71 [ 249.165132][ T310] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 249.249153][ T5636] rust_binder: 5635:5636 error while translating object: ENOENT [ 249.257052][ T5636] rust_binder: Failure in copy_transaction_data: ENOENT [ 249.257083][ T5636] rust_binder: 5635:5636 transaction async to 5635:0 failed ENOENT, code 0 size 4097-24 [ 249.278613][ T311] rust_binder: 5635: undelivered TRANSACTION_ERROR: 29201 [ 249.300909][ T36] audit: type=1400 audit(1787350418.784:554): avc: denied { remount } for pid=5637 comm="syz.1.1611" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 249.313364][ T5638] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8219 sclass=netlink_xfrm_socket pid=5638 comm=syz.1.1611 [ 249.333862][ T310] usb 6-1: device descriptor read/64, error -71 [ 249.358334][ T5640] tipc: Enabling of bearer rejected, already enabled [ 249.366500][ T5640] tipc: New replicast peer: 255.255.255.255 [ 249.598391][ T310] usb 6-1: device descriptor read/64, error -71 [ 249.717759][ T310] usb usb6-port1: attempt power cycle [ 249.963184][ T5650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.972101][ T5650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.085825][ T310] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 250.108838][ T310] usb 6-1: device descriptor read/8, error -71 [ 250.188452][ T5652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.199187][ T5652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.249678][ T310] usb 6-1: device descriptor read/8, error -71 [ 250.508341][ T310] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 250.542020][ T310] usb 6-1: device descriptor read/8, error -71 [ 250.554432][ T5660] rust_binder: Write failure EINVAL in pid:1338 [ 250.555157][ T5660] sock: sock_timestamping_bind_phc: sock not bind to device [ 250.570021][ T5660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.578669][ T5660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.683132][ T310] usb 6-1: device descriptor read/8, error -71 [ 250.746539][ T586] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 250.800918][ T310] usb usb6-port1: unable to enumerate USB device [ 250.909014][ T586] usb 5-1: Using ep0 maxpacket: 32 [ 250.915469][ T586] usb 5-1: config 0 interface 0 altsetting 216 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.926836][ T586] usb 5-1: config 0 interface 0 altsetting 216 endpoint 0x81 has invalid maxpacket 2023, setting to 1024 [ 250.938262][ T586] usb 5-1: config 0 interface 0 altsetting 216 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 250.951543][ T586] usb 5-1: config 0 interface 0 has no altsetting 0 [ 250.958288][ T586] usb 5-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 250.967376][ T586] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.976396][ T586] usb 5-1: config 0 descriptor?? [ 250.981787][ T5657] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 251.053317][ T5671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.061841][ T36] audit: type=1326 audit(1787350420.409:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.1.1623" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f17f9e0d9 code=0x7fc00000 [ 251.076895][ T5671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.712100][ T586] usbhid 5-1:0.0: can't add hid device: -71 [ 251.723431][ T586] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 251.735823][ T5697] overlay: ./file0 is not a directory [ 251.743600][ T586] usb 5-1: USB disconnect, device number 105 [ 252.309126][ T36] audit: type=1400 audit(1787350421.572:556): avc: denied { write } for pid=5714 comm="syz.5.1636" name="sched_switch" dev="tracefs" ino=44929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 252.336606][ T36] audit: type=1400 audit(1787350421.572:557): avc: denied { add_name } for pid=5714 comm="syz.5.1636" name="enable" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 252.374942][ T36] audit: type=1400 audit(1787350421.572:558): avc: denied { create } for pid=5714 comm="syz.5.1636" name="enable" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 252.494644][ T36] audit: type=1400 audit(1787350421.738:559): avc: denied { mounton } for pid=5718 comm="syz.4.1638" path="/303/file0" dev="tmpfs" ino=1690 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 252.522052][ T5719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1638'. [ 252.632356][ T5726] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1640'. [ 253.075371][ T586] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 253.206876][ T5737] FAULT_INJECTION: forcing a failure. [ 253.206876][ T5737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.220390][ T5737] CPU: 0 UID: 0 PID: 5737 Comm: syz.4.1644 Not tainted syzkaller #0 1b627ac51616646c2b03e03cc27ccf1d06a70c9d [ 253.220430][ T5737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 253.220448][ T5737] Call Trace: [ 253.220457][ T5737] [ 253.220468][ T5737] __dump_stack+0x21/0x30 [ 253.220508][ T5737] dump_stack_lvl+0x140/0x1c0 [ 253.220544][ T5737] ? __cfi_dump_stack_lvl+0x10/0x10 [ 253.220580][ T5737] ? vsnprintf+0x7b4/0x1ad0 [ 253.220612][ T5737] ? check_stack_object+0x10f/0x150 [ 253.220641][ T5737] dump_stack+0x19/0x20 [ 253.220674][ T5737] should_fail_ex+0x3c2/0x510 [ 253.220706][ T5737] should_fail+0xf/0x20 [ 253.220734][ T5737] should_fail_usercopy+0x1e/0x30 [ 253.220767][ T5737] _copy_from_user+0x20/0xa0 [ 253.220804][ T5737] kstrtouint_from_user+0xde/0x170 [ 253.220834][ T5737] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 253.220865][ T5737] ? selinux_file_permission+0x318/0xb60 [ 253.220894][ T5737] ? __cfi_selinux_file_permission+0x10/0x10 [ 253.220921][ T5737] proc_fail_nth_write+0x8f/0x220 [ 253.220958][ T5737] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 253.220996][ T5737] ? bpf_lsm_file_permission+0xd/0x20 [ 253.221031][ T5737] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 253.221075][ T5737] vfs_write+0x3c4/0xfd0 [ 253.221104][ T5737] ? __cfi_vfs_write+0x10/0x10 [ 253.221150][ T5737] ? __kasan_check_write+0x18/0x20 [ 253.221178][ T5737] ? mutex_lock+0x97/0x1d0 [ 253.221202][ T5737] ? __cfi_mutex_lock+0x10/0x10 [ 253.221231][ T5737] ksys_write+0x145/0x260 [ 253.221262][ T5737] ? __cfi_ksys_write+0x10/0x10 [ 253.221290][ T5737] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 253.221330][ T5737] __x64_sys_write+0x7f/0x90 [ 253.221368][ T5737] x64_sys_call+0x271c/0x2ee0 [ 253.221393][ T5737] do_syscall_64+0x57/0xf0 [ 253.221427][ T5737] ? clear_bhb_loop+0x50/0xa0 [ 253.221455][ T5737] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 253.221495][ T5737] RIP: 0033:0x7fc529d5e90e [ 253.221517][ T5737] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 253.221540][ T5737] RSP: 002b:00007fc52ac4cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 253.221572][ T5737] RAX: ffffffffffffffda RBX: 00007fc52ac4d6c0 RCX: 00007fc529d5e90e [ 253.221594][ T5737] RDX: 0000000000000001 RSI: 00007fc52ac4d0a0 RDI: 0000000000000006 [ 253.221613][ T5737] RBP: 00007fc52ac4d090 R08: 0000000000000000 R09: 0000000000000000 [ 253.221633][ T5737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.221650][ T5737] R13: 00007fc52a026038 R14: 00007fc52a025fa0 R15: 00007ffd72737df8 [ 253.221675][ T5737] [ 254.071908][ T397] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 254.135242][ T36] audit: type=1326 audit(1787350423.252:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.1.1623" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f17f3f459 code=0x7fc00000 [ 254.234403][ T397] usb 5-1: Using ep0 maxpacket: 16 [ 254.241065][ T397] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 254.249587][ T397] usb 5-1: config 0 has no interface number 0 [ 254.255877][ T397] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 254.266907][ T397] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 254.278825][ T397] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 254.287929][ T397] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.296356][ T397] usb 5-1: Product: syz [ 254.300799][ T397] usb 5-1: Manufacturer: syz [ 254.305423][ T397] usb 5-1: SerialNumber: syz [ 254.311346][ T397] usb 5-1: config 0 descriptor?? [ 254.316860][ T5751] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 254.324205][ T5751] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 254.396969][ T586] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 254.537706][ T586] usb 6-1: device descriptor read/64, error -71 [ 254.550758][ T5751] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 254.558207][ T5751] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 254.798237][ T586] usb 6-1: device descriptor read/64, error -71 [ 254.830122][ T397] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 254.840496][ T397] asix 5-1:0.34: probe with driver asix failed with error -61 [ 255.028134][ T5764] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 255.068548][ T586] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 255.209575][ T586] usb 6-1: device descriptor read/64, error -71 [ 255.209862][ T5779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.226720][ T5779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.242891][ T5779] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 255.365785][ T5783] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1657'. [ 255.469278][ T586] usb 6-1: device descriptor read/64, error -71 [ 255.600622][ T586] usb usb6-port1: attempt power cycle [ 255.867093][ T5794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.877152][ T5794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.877838][ T652] Bluetooth: hci0: Frame reassembly failed (-84) [ 255.950683][ T5798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.959481][ T5798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.978324][ T586] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 256.022941][ T586] usb 6-1: device descriptor read/8, error -71 [ 256.056508][ T5804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.068040][ T5804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.163901][ T586] usb 6-1: device descriptor read/8, error -71 [ 256.422463][ T586] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 256.445392][ T586] usb 6-1: device descriptor read/8, error -71 [ 256.588958][ T586] usb 6-1: device descriptor read/8, error -71 [ 256.715363][ T586] usb usb6-port1: unable to enumerate USB device [ 256.803758][ T5814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.812952][ T5814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.822137][ T5814] tmpfs: Unknown parameter 'sit0' [ 256.845785][ T652] Bluetooth: hci1: Frame reassembly failed (-84) [ 257.129236][ T9] usb 5-1: USB disconnect, device number 106 [ 257.477965][ T36] audit: type=1400 audit(1787350426.336:561): avc: denied { mounton } for pid=5832 comm="syz.5.1672" path="/syzcgroup/cpu/syz5/memory.limit_in_bytes" dev="cgroup" ino=448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 257.527279][ T36] audit: type=1400 audit(1787350426.364:562): avc: denied { nlmsg_write } for pid=5832 comm="syz.5.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 257.571529][ T9] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 257.754733][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 257.762193][ T9] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 257.773852][ T9] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1104, setting to 1024 [ 257.785258][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 257.794280][ T9] usb 5-1: New USB device found, idVendor=18d1, idProduct=5030, bcdDevice= 0.40 [ 257.803775][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.812160][ T9] usb 5-1: Product: à°Ž [ 257.816381][ T9] usb 5-1: Manufacturer: î‚… [ 257.821477][ T9] usb 5-1: SerialNumber: Ñ• [ 257.827630][ T5826] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 257.971377][ T397] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 258.112233][ T566] Bluetooth: hci0: command 0x1003 tx timeout [ 258.112256][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 258.133898][ T397] usb 6-1: Using ep0 maxpacket: 16 [ 258.142656][ T397] usb 6-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice= 0.40 [ 258.152284][ T397] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.160520][ T397] usb 6-1: Product: syz [ 258.164754][ T397] usb 6-1: Manufacturer: syz [ 258.169432][ T397] usb 6-1: SerialNumber: syz [ 258.288948][ T9] usbhid 5-1:1.0: can't add hid device: -71 [ 258.295069][ T9] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 258.304832][ T9] usb 5-1: USB disconnect, device number 107 [ 259.065379][ T565] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 259.567489][ T397] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 259.583190][ T397] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 259.603172][ T397] usb 6-1: USB disconnect, device number 61 [ 259.621388][ T1265] udevd[1265]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 259.921115][ T397] usb 6-1: new low-speed USB device number 62 using dummy_hcd [ 259.921115][ T9] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 260.083653][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 260.083882][ T397] usb 6-1: device descriptor read/64, error -71 [ 260.096954][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 260.111847][ T9] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 260.120461][ T9] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 260.130953][ T9] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 260.140329][ T9] usb 5-1: config 128 has no interface number 0 [ 260.146637][ T9] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 260.158176][ T9] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 260.164683][ T5864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.173127][ T9] usb 5-1: config 128 interface 127 has no altsetting 0 [ 260.177958][ T5864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.191066][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 260.200686][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.208858][ T9] usb 5-1: Product: syz [ 260.213184][ T9] usb 5-1: Manufacturer: syz [ 260.217889][ T9] usb 5-1: SerialNumber: syz [ 260.365350][ T397] usb 6-1: device descriptor read/64, error -71 [ 260.518754][ T5867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.529705][ T5867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.542379][ T9] usb 5-1: USB disconnect, device number 108 [ 260.554217][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 260.625898][ T397] usb 6-1: new low-speed USB device number 63 using dummy_hcd [ 260.766034][ T397] usb 6-1: device descriptor read/64, error -71 [ 260.880570][ T5878] 9pnet: p9_errstr2errno: server reported unknown error [ 260.971942][ T36] audit: type=1326 audit(1787350429.567:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5885 comm="syz.3.1689" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fafd279e0d9 code=0x0 [ 260.997071][ T36] audit: type=1326 audit(1787350429.567:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5885 comm="syz.3.1689" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fafd279e0d9 code=0x0 [ 261.026046][ T397] usb 6-1: device descriptor read/64, error -71 [ 261.136901][ T5896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.146190][ T397] usb usb6-port1: attempt power cycle [ 261.157472][ T5896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.218972][ T36] audit: type=1400 audit(1787350429.789:565): avc: denied { write } for pid=5906 comm="syz.3.1697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 261.262507][ T36] audit: type=1400 audit(1787350429.826:566): avc: denied { map } for pid=5908 comm="syz.4.1698" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 261.296525][ T36] audit: type=1400 audit(1787350429.826:567): avc: denied { execute } for pid=5908 comm="syz.4.1698" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 261.531012][ T5921] tipc: Started in network mode [ 261.536245][ T397] usb 6-1: new low-speed USB device number 64 using dummy_hcd [ 261.540798][ T5921] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 261.553090][ T5921] tipc: Enabled bearer , priority 10 [ 261.565064][ T397] usb 6-1: device descriptor read/8, error -71 [ 261.585308][ T5923] netlink: 'syz.3.1703': attribute type 63 has an invalid length. [ 261.593522][ T5923] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1703'. [ 261.709911][ T397] usb 6-1: device descriptor read/8, error -71 [ 261.735664][ T5931] tipc: Enabling of bearer rejected, failed to enable media [ 261.805630][ T5938] 9pnet_fd: Insufficient options for proto=fd [ 261.827834][ T5940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.836707][ T5940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.954631][ T5948] veth0: entered allmulticast mode [ 261.968212][ T5950] support for cryptoloop has been removed. Use dm-crypt instead. [ 261.977462][ T5950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.989115][ T5950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.990863][ T397] usb 6-1: new low-speed USB device number 65 using dummy_hcd [ 262.046021][ T397] usb 6-1: device descriptor read/8, error -71 [ 262.052384][ T5951] kvm: pic: single mode not supported [ 262.052777][ T5951] kvm: pic: single mode not supported [ 262.058263][ T5951] kvm: pic: level sensitive irq not supported [ 262.064706][ T5951] kvm: pic: single mode not supported [ 262.070866][ T5951] kvm: pic: level sensitive irq not supported [ 262.077635][ T5951] kvm: pic: level sensitive irq not supported [ 262.083979][ T5951] kvm: pic: non byte write [ 262.186702][ T397] usb 6-1: device descriptor read/8, error -71 [ 262.238034][ T5954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1716'. [ 262.304431][ T397] usb usb6-port1: unable to enumerate USB device [ 262.353318][ T5959] overlayfs: missing 'lowerdir' [ 262.358469][ T5958] overlayfs: missing 'workdir' [ 262.370265][ T5958] overlayfs: missing 'workdir' [ 262.386084][ T5958] overlayfs: missing 'workdir' [ 262.392863][ T5958] overlayfs: missing 'workdir' [ 262.399091][ T5958] overlayfs: missing 'workdir' [ 262.404613][ T5958] overlayfs: missing 'workdir' [ 262.409929][ T5958] overlayfs: missing 'workdir' [ 262.415731][ T5958] overlayfs: missing 'workdir' [ 262.426326][ T5958] overlayfs: missing 'workdir' [ 262.431706][ T5958] overlayfs: missing 'workdir' [ 262.441159][ T5958] overlayfs: missing 'workdir' [ 262.456208][ T5958] overlayfs: missing 'workdir' [ 262.467326][ T5958] overlayfs: missing 'workdir' [ 262.476181][ T5958] overlayfs: missing 'workdir' [ 262.497119][ T5958] overlayfs: missing 'workdir' [ 262.507204][ T5958] overlayfs: missing 'workdir' [ 262.522980][ T5958] overlayfs: missing 'workdir' [ 262.541710][ T5958] overlayfs: missing 'workdir' [ 262.547499][ T5958] overlayfs: missing 'workdir' [ 262.552791][ T5958] overlayfs: missing 'workdir' [ 262.564727][ T5958] overlayfs: missing 'workdir' [ 262.569739][ T5964] 9pnet_fd: Insufficient options for proto=fd [ 262.570655][ T5958] overlayfs: missing 'workdir' [ 262.581958][ T5958] overlayfs: missing 'workdir' [ 262.610279][ T5958] overlayfs: missing 'workdir' [ 262.616244][ T5958] overlayfs: missing 'workdir' [ 262.622213][ T5958] overlayfs: missing 'workdir' [ 262.629739][ T5958] overlayfs: missing 'workdir' [ 262.639003][ T5958] overlayfs: missing 'workdir' [ 262.651370][ T5958] overlayfs: missing 'workdir' [ 262.657815][ T5958] overlayfs: missing 'workdir' [ 262.663004][ T9] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 262.671547][ T5958] overlayfs: missing 'workdir' [ 262.677300][ T5958] overlayfs: missing 'workdir' [ 262.683850][ T5958] overlayfs: missing 'workdir' [ 262.759170][ T397] tipc: Node number set to 4269801492 [ 262.845736][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 262.858440][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 262.883277][ T5980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.884567][ T9] usb 5-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 262.903934][ T5980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.923181][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.931397][ T9] usb 5-1: Product: syz [ 262.947052][ T9] usb 5-1: Manufacturer: syz [ 262.958044][ T9] usb 5-1: SerialNumber: syz [ 263.063689][ T5974] netlink: 'syz.5.1724': attribute type 20 has an invalid length. [ 263.105981][ T5974] Invalid logical block size (3) [ 263.188328][ T5986] netlink: 'syz.1.1728': attribute type 2 has an invalid length. [ 263.202787][ T9] usb 5-1: 1:1 : format type 0 is detected, processed as PCM [ 263.222537][ T9] usb 5-1: 1:1 : sample bitwidth 177 in over sample bytes 2 [ 263.231801][ T9] usb 5-1: 1:1: cannot set freq 137 to ep 0x1 [ 263.247003][ T9] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 263.264552][ T9] usb 5-1: USB disconnect, device number 109 [ 263.294542][ T344] udevd[344]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 263.325732][ T5990] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1730'. [ 263.335821][ T5988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.344620][ T5990] netlink: 19 bytes leftover after parsing attributes in process `syz.5.1730'. [ 263.354203][ T5988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.362434][ T5990] netlink: 'syz.5.1730': attribute type 6 has an invalid length. [ 263.372551][ T5990] netlink: 'syz.5.1730': attribute type 5 has an invalid length. [ 263.387462][ T5990] netlink: 19 bytes leftover after parsing attributes in process `syz.5.1730'. [ 263.582979][ T6005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.593655][ T6005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.605818][ T6005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.614956][ T6005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.669048][ T31] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 263.831584][ T31] usb 6-1: device descriptor read/64, error -71 [ 263.849412][ T36] audit: type=1400 audit(1787350432.217:568): avc: denied { connect } for pid=6013 comm="syz.4.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 264.102395][ T31] usb 6-1: device descriptor read/64, error -71 [ 264.134754][ T9] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 264.170183][ T6031] kvm: Disabled LAPIC found during irq injection [ 264.299256][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 264.316330][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7 [ 264.330894][ T311] usb 4-1: USB disconnect, device number 87 [ 264.350543][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 264.364603][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.373396][ T31] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 264.375423][ T9] usb 5-1: Product: syz [ 264.395365][ T9] usb 5-1: SerialNumber: syz [ 264.535549][ T31] usb 6-1: device descriptor read/64, error -71 [ 264.628109][ T9] usb 5-1: BAAD HEADSET c_chmask mismatch [ 264.645500][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 264.669612][ T9] usb 5-1: USB disconnect, device number 110 [ 264.699732][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 264.838813][ T31] usb 6-1: device descriptor read/64, error -71 [ 264.877075][ T6036] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 264.893108][ T6036] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 264.929283][ T6037] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 264.945334][ T6037] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 264.971074][ T31] usb usb6-port1: attempt power cycle [ 264.988327][ T6038] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 265.004344][ T6038] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 265.040704][ T6039] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 265.057029][ T6039] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 265.145156][ T667] bridge_slave_1: left allmulticast mode [ 265.152881][ T667] bridge_slave_1: left promiscuous mode [ 265.158575][ T667] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.175856][ T667] bridge_slave_0: left allmulticast mode [ 265.184403][ T667] bridge_slave_0: left promiscuous mode [ 265.190789][ T667] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.319501][ T667] tipc: Left network mode [ 265.328144][ T667] veth1_macvtap: left promiscuous mode [ 265.333782][ T667] ÿÿÿÿÿÿ: left promiscuous mode [ 265.349083][ T31] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 265.371453][ T31] usb 6-1: device descriptor read/8, error -71 [ 265.511903][ T31] usb 6-1: device descriptor read/8, error -71 [ 265.534112][ T6043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.552064][ T6043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.567716][ T6040] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 265.588563][ T6040] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 265.770463][ T31] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 265.793363][ T31] usb 6-1: device descriptor read/8, error -71 [ 265.934114][ T31] usb 6-1: device descriptor read/8, error -71 [ 266.052206][ T31] usb usb6-port1: unable to enumerate USB device [ 266.177201][ T6047] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 266.193569][ T6047] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 266.218336][ T6050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.227201][ T6050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.878275][ T6052] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 266.898563][ T36] audit: type=1400 audit(1787350435.042:569): avc: denied { create } for pid=6053 comm="syz.4.1754" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 266.900684][ T6052] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 266.933182][ T6056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.943194][ T6056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.955014][ T36] audit: type=1400 audit(1787350435.060:570): avc: denied { bind } for pid=6053 comm="syz.4.1754" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 266.977629][ T36] audit: type=1400 audit(1787350435.060:571): avc: denied { create } for pid=6053 comm="syz.4.1754" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 266.998110][ T36] audit: type=1400 audit(1787350435.060:572): avc: denied { connect } for pid=6053 comm="syz.4.1754" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 267.018839][ T36] audit: type=1400 audit(1787350435.060:573): avc: denied { name_connect } for pid=6053 comm="syz.4.1754" dest=20003 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 267.731698][ T6060] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 267.747789][ T6060] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 268.001695][ T31] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 268.165598][ T31] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.176662][ T31] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 268.189771][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 268.196444][ T31] usb 5-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 268.205585][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.214541][ T31] usb 5-1: config 0 descriptor?? [ 268.677166][ T6066] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 268.693861][ T6066] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 268.940269][ T31] smartjoyplus 0003:0925:8866.001E: unknown main item tag 0x0 [ 268.965744][ T31] smartjoyplus 0003:0925:8866.001E: unknown main item tag 0x0 [ 268.973316][ T31] smartjoyplus 0003:0925:8866.001E: unknown main item tag 0x0 [ 268.981159][ T31] smartjoyplus 0003:0925:8866.001E: unknown main item tag 0x0 [ 268.989137][ T31] smartjoyplus 0003:0925:8866.001E: unknown main item tag 0x0 [ 268.996796][ T31] smartjoyplus 0003:0925:8866.001E: unknown main item tag 0x0 [ 269.004767][ T31] smartjoyplus 0003:0925:8866.001E: unknown main item tag 0x0 [ 269.012838][ T31] smartjoyplus 0003:0925:8866.001E: unknown main item tag 0x0 [ 269.020746][ T31] smartjoyplus 0003:0925:8866.001E: unknown main item tag 0x0 [ 269.028274][ T31] smartjoyplus 0003:0925:8866.001E: unknown main item tag 0x0 [ 269.036295][ T31] smartjoyplus 0003:0925:8866.001E: unknown main item tag 0x0 [ 269.044181][ T31] smartjoyplus 0003:0925:8866.001E: unknown main item tag 0x0 [ 269.051740][ T31] smartjoyplus 0003:0925:8866.001E: unknown main item tag 0x0 [ 269.059799][ T31] smartjoyplus 0003:0925:8866.001E: unknown main item tag 0x0 [ 269.067659][ T31] smartjoyplus 0003:0925:8866.001E: unbalanced collection at end of report description [ 269.077967][ T31] smartjoyplus 0003:0925:8866.001E: parse failed [ 269.084411][ T31] smartjoyplus 0003:0925:8866.001E: probe with driver smartjoyplus failed with error -22 [ 269.205204][ T6067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.214204][ T6067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.741927][ T6074] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 269.758229][ T6074] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 269.788503][ T36] audit: type=1326 audit(1787350437.700:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.1.1762" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f4f17f9e0d9 code=0x0 [ 269.807842][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1762'. [ 270.954919][ T6080] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 270.971045][ T6080] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 271.850445][ T379] usb 5-1: USB disconnect, device number 111 [ 272.211328][ T6087] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 272.227231][ T6087] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 272.262778][ T6094] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1768'. [ 272.464513][ T586] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 272.628500][ T586] usb 5-1: unable to get BOS descriptor or descriptor too short [ 272.637124][ T586] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 272.648523][ T586] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 152, changing to 7 [ 272.664086][ T586] usb 5-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice= 0.40 [ 272.673326][ T586] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.681414][ T586] usb 5-1: Product: Ñ™ [ 272.685528][ T586] usb 5-1: SerialNumber: syz [ 272.911842][ T586] usb 5-1: BAAD HEADPHONE p_chmask mismatch [ 272.920174][ T586] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 272.939027][ T586] usb 5-1: USB disconnect, device number 112 [ 272.952029][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 273.567405][ T6095] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 273.608581][ T6095] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 273.829329][ T345] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 274.002584][ T345] usb 6-1: Using ep0 maxpacket: 32 [ 274.009326][ T345] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 274.019036][ T345] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 274.028556][ T345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.039918][ T345] usb 6-1: config 0 descriptor?? [ 274.651282][ T6109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.660144][ T6109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.057557][ T6113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.067648][ T6113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.078955][ T6110] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 275.095231][ T6110] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 276.644005][ T6116] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 276.660081][ T6116] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 276.680954][ T6118] syzkaller1: entered promiscuous mode [ 276.687497][ T6118] syzkaller1: entered allmulticast mode [ 276.695683][ T6122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.710238][ T6122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.832248][ T397] usb 6-1: USB disconnect, device number 70 [ 278.326509][ T6123] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 278.347631][ T6129] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 278.356451][ T6129] bridge0: entered allmulticast mode [ 278.362815][ T6129] bridge0: left allmulticast mode [ 278.368812][ T6123] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 280.162566][ T6140] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 280.181433][ T6144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.191699][ T6140] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 280.208763][ T6145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.217935][ T6144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.226266][ T6145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.082389][ T6152] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 282.104542][ T6152] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 282.186327][ T6165] tmpfs: Bad value for 'size' [ 284.101486][ T6173] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 284.121235][ T6177] syzkaller1: left promiscuous mode [ 284.126511][ T6177] syzkaller1: left allmulticast mode [ 284.137579][ T6173] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 284.159613][ T6179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.170434][ T6179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.455417][ T9] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 284.520363][ T397] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 284.641219][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.652314][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 284.661476][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.693668][ T397] usb 6-1: Using ep0 maxpacket: 16 [ 284.700344][ T397] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.710585][ T397] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 284.721602][ T397] usb 6-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 284.736949][ T397] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.745009][ T397] usb 6-1: Product: syz [ 284.749475][ T397] usb 6-1: Manufacturer: syz [ 284.754116][ T397] usb 6-1: SerialNumber: syz [ 284.898503][ T9] usbhid 5-1:1.0: can't add hid device: -71 [ 284.905678][ T9] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 284.918288][ T9] usb 5-1: USB disconnect, device number 113 [ 284.978256][ T6178] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1790'. [ 285.001231][ T6178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.010353][ T6178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.022333][ T397] usb 6-1: unit 2 not found! [ 285.031762][ T397] usb 6-1: unit 236 not found! [ 285.043159][ T397] usb 6-1: USB disconnect, device number 71 [ 285.058609][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 286.261605][ T6183] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 286.267597][ T6189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.286883][ T6183] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 286.307570][ T6189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.591117][ T6204] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input39 [ 286.643622][ T397] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 286.807322][ T397] usb 6-1: config 1 interface 0 altsetting 225 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 286.820561][ T397] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 286.830354][ T397] usb 6-1: config 1 interface 0 has no altsetting 0 [ 286.837017][ T397] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 286.846204][ T397] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.857025][ T397] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 288.489121][ T6209] incfs: Options parsing error. -22 [ 288.494759][ T6209] incfs: mount failed -22 [ 288.514307][ T6206] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: repeatedly failed to execute the program proc=6 req=1756 state=1 status=67 (errno 9: Bad file descriptor) [ 288.530536][ T6206] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 288.555633][ T36] audit: type=1400 audit(1787350455.029:575): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[3120]" dev="pipefs" ino=3120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 288.603269][ T286] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:105: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 288.629430][ T286] EXT4-fs error (device sda1) in ext4_free_inode:361: Filesystem failed CRC [ 288.642629][ T286] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 288.855622][ T3429] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 288.911313][ T3429] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 288.968095][ T1154] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 289.007649][ T1154] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 289.127248][ T586] usb 2-1: USB disconnect, device number 63 [ 289.191307][ T397] usb 6-1: string descriptor 0 read error: -71 [ 289.209398][ T397] usb 6-1: USB disconnect, device number 72 [ 291.501005][ T335] bridge_slave_1: left allmulticast mode [ 291.506750][ T335] bridge_slave_1: left promiscuous mode [ 291.512537][ T335] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.523062][ T335] bridge_slave_0: left allmulticast mode [ 291.529025][ T335] bridge_slave_0: left promiscuous mode [ 291.534709][ T335] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.650979][ T335] tipc: Disabling bearer [ 291.656453][ T335] tipc: Left network mode [ 291.664787][ T335] veth1_macvtap: left promiscuous mode [ 291.670766][ T335] veth0_vlan: left promiscuous mode