last executing test programs: 54.315932661s ago: executing program 2 (id=1416): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14) (async) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r2, &(0x7f0000000080), 0x0, 0x4000000, &(0x7f0000000100)={0xa, 0x4e22, 0x401, @loopback, 0x3ff}, 0x1c) r3 = fsopen(&(0x7f0000000200)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) (async) fchdir(r4) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f01390ff2f63e0fa10f01c966b80a00000066ba000000000f300f79d80f232d0f01c966b9024d564b0f32350280660f38dfec", 0x33}], 0x1, 0x1, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f01390ff2f63e0fa10f01c966b80a00000066ba000000000f300f79d80f232d0f01c966b9024d564b0f32350280660f38dfec", 0x33}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000140)=@x86={0x1, 0xa, 0x80, 0x0, 0x400, 0x9, 0x0, 0x80, 0xd, 0x6a, 0xfd, 0x1, 0x0, 0x1f, 0x2, 0x0, 0x3, 0x6, 0x5, '\x00', 0x7, 0x1e}) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) (async) r9 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SETINTERFACE(r9, 0x80085504, &(0x7f0000000380)={0x101, 0x8}) (async) ioctl$USBDEVFS_SETINTERFACE(r9, 0x80085504, &(0x7f0000000380)={0x101, 0x8}) preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/146, 0x92}, {&(0x7f0000000040)=""/34, 0x22}], 0x2, 0x1, 0xffffffff) 54.164206901s ago: executing program 2 (id=1417): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}, 0xfff5}], 0x40000000000024e, 0x20002040) 54.1278878s ago: executing program 2 (id=1418): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newae={0x40, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {{@in=@multicast2, 0x4d3, 0xa, 0x33}, @in=@broadcast, 0x4, 0x3505}}, 0x40}}, 0x90) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) stat(&(0x7f00000043c0)='./file0/file2\x00', &(0x7f0000004400)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) read$FUSE(r1, &(0x7f00000006c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200), 0x2140000, &(0x7f0000000440)=ANY=[@ANYBLOB='nr_blocks=%k\x00p-64m2,huge=always,euid=', @ANYRESDEC=r4, @ANYBLOB=',appraise,smackfshat=tls,fowner=', @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b79e4c62ac2178dfecd532eaa85a67574653d2c736d61636b667357573a976bb132cb4f8872787b1c47d96cf5362fe15573c9dcc1e03386f492355e0194819b3d23467fd0467384c456f0a164d89773e23d6cfbf4fec311"]) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "5b1404c3bd0038c6", "a1d6fcca11a60f84f8fb6cd0934e7699eb89e1ac24e540159e8e5d7aaf029a2e", '\b\x00', "82020b23ec3a405d"}, 0x38) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="10000000000000001a01000001000000080000000000"], 0x28}, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000000)) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005c3f6b200304a4bc23d7010203010902120001000000000904"], 0x0) 52.831207658s ago: executing program 2 (id=1422): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000480)={[{@huge_never}]}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x111c03, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f00000002c0)={"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"}) r1 = socket(0x10, 0x803, 0x3) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) unshare(0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) mount$bpf(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x210002, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r3, 0x28, 0xa, 0x0, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000240)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @tipc={{0x8, 0x4, 0x2, 0x20, 0x48, 0x65, 0x0, 0x4, 0x6, 0x0, @rand_addr=0x64010102, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x5, 0x3, 0x7, [{@loopback, 0x339}]}]}}, @payload_named={{{{{0x28, 0x0, 0x1, 0x0, 0x1, 0xa, 0x1, 0x2, 0x5, 0x0, 0x1, 0x3, 0x1, 0x2, 0xfc00, 0xe003, 0x1, 0x4e23, 0x4e24}, 0x3, 0x4}, 0x0, 0x1}}}}}}}}, 0x5a) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000480)={[{@huge_never}]}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x111c03, 0x0) (async) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f00000002c0)={"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"}) (async) socket(0x10, 0x803, 0x3) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) (async) unshare(0x0) (async) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) (async) landlock_restrict_self(r2, 0x0) (async) mount$bpf(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x210002, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) getsockopt(r3, 0x28, 0xa, 0x0, &(0x7f0000000040)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r5) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r4, &(0x7f0000000240)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @tipc={{0x8, 0x4, 0x2, 0x20, 0x48, 0x65, 0x0, 0x4, 0x6, 0x0, @rand_addr=0x64010102, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x5, 0x3, 0x7, [{@loopback, 0x339}]}]}}, @payload_named={{{{{0x28, 0x0, 0x1, 0x0, 0x1, 0xa, 0x1, 0x2, 0x5, 0x0, 0x1, 0x3, 0x1, 0x2, 0xfc00, 0xe003, 0x1, 0x4e23, 0x4e24}, 0x3, 0x4}, 0x0, 0x1}}}}}}}}, 0x5a) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) 52.830890928s ago: executing program 2 (id=1423): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) (fail_nth: 2) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0e"], 0xe) 52.766884728s ago: executing program 2 (id=1424): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {0x7fef}, @broadcast, @device_a, @from_mac=@device_b}, 0x0, @random, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x7, 0x5, 0x3, 0xe}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x4c}}, 0x0) 52.698440208s ago: executing program 32 (id=1424): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {0x7fef}, @broadcast, @device_a, @from_mac=@device_b}, 0x0, @random, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x7, 0x5, 0x3, 0xe}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x4c}}, 0x0) 5.136022751s ago: executing program 1 (id=1890): unshare(0x60000600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0xd47}, {{0x0, 0x1c000, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001180)=""/4059, 0xfdb}, {&(0x7f0000000ac0)=""/200, 0xc8}, {&(0x7f0000000980)=""/265, 0x109}, {&(0x7f0000000780)=""/170, 0xaa}, {&(0x7f0000000880)=""/224, 0xe0}, {&(0x7f0000000080)=""/96, 0x60}, {&(0x7f00000002c0)=""/229, 0xe5}, {&(0x7f0000000240)=""/109, 0x6d}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000000000)=""/21, 0x15}], 0xa}, 0x120a}], 0x3, 0x0, 0x0) 5.06772336s ago: executing program 1 (id=1891): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0xdfff, @empty}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000240)=ANY=[]) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x338, 0x0, 0x459c, [{{0x6, 0x3, 0x7, 0x59, 0x10000, 0x10, {0x3, 0x7fff, 0xfffffffffffffffe, 0xe229, 0x5, 0x8, 0xc, 0x9, 0xb, 0x2000, 0x1ff, r5, r6, 0xfffffffc, 0x3ff}}, {0x6, 0x80000000, 0xa, 0x5eeb1658, '/dev/fuse\x00'}}, {{0x3, 0x2, 0x4, 0x10000, 0x4, 0xfffffffa, {0x3, 0x100, 0x8, 0x2, 0x3, 0x2, 0x8, 0xfffffffd, 0x7c, 0x2000, 0x8, 0x0, r6, 0x3, 0x2d9}}, {0x3, 0x9, 0x8, 0x8, 'rootmode'}}, {{0x5, 0x0, 0xfffffffffffffff8, 0x6, 0x8001, 0x4, {0x3, 0x6, 0x8, 0x6, 0xf4c, 0xf7c, 0x0, 0x0, 0x0, 0xa000, 0x40, r5, r6, 0x8, 0x5}}, {0x3, 0xfffffffffffffffb, 0x7, 0x2aaf, 'user_id'}}, {{0x2, 0x2, 0x3, 0xffffffffffffffff, 0xeb, 0x1000, {0x1, 0x2, 0x3ff, 0x80, 0x9, 0x2, 0x7f, 0x1, 0x4, 0x4000, 0x8, 0x0, r6, 0x6, 0x5}}, {0x2, 0x7, 0x2, 0x40, 'fd'}}, {{0x0, 0x1, 0x80000000, 0x4956, 0x5, 0x1, {0x2, 0xa00000000000, 0xffff, 0xfffffffffffffff7, 0x6, 0x8f, 0x5, 0x4, 0x2, 0x6000, 0x7, r5, r6, 0x8, 0xfffffffc}}, {0x2, 0xfffffffffffffffe, 0x5, 0x5da227c7, '\xbd!^!$'}}]}, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000002e40)='./file0\x00', 0x100, 0x8, &(0x7f0000002e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000002f80)={0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000003000)=0x0) lstat(&(0x7f0000003040)='./file0\x00', &(0x7f0000003080)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003100)={0x0, 0x0, 0x0}, &(0x7f0000003140)=0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003300)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000c002cbd7000ffdbdf252daa84ac2cf5cc4d319cb40de4d37834720a46f17ea60a495a4008b5971b1bede319a1ef89a0e8934bbc611905308a36766e3be564f6d3a450c2dfdc3ec412609af2550fdab0d44d57888f87119aa5cc0851367e3dec1e85626c0db3df9e"], 0x78}, {&(0x7f0000000d80)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="972ac51bcd960d83c4b8f25d535c595ff17f1393e364c5adabd782f411a793b29b529cdc89c242c137e57b8a891dd7c82b5658c0655243aaf7406dcb451e4d70e610fe131a680828ca57b4c69a15caf63a90e6938906a35eb0d4f41efbd7b95c23f43a17b151e55074e75481b88b1b6d7f95ab00"], 0x240}], 0x2, &(0x7f0000003180)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=0x0, @ANYBLOB="000000001c000000000040000100000002000000", @ANYRES32=r0, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00'], 0x158, 0x40000}, 0x4008801) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r12 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r12, 0x0, 0x0) syz_usb_control_io$lan78xx(r12, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r12, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000080)={0x40, 0xa, 0x42, "a316304da638b717adfb6ee0604790835de08834374e224e9356797e0fc11677d4fcd6da27ace71b390bec0cba9f09c53a2c8812a15440998b123687491c2995e508"}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r12, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x40, 0x5, 0x39, "e95a2e3b99ae712a9677aaf3599e1accf66acbcc8f029df93143ee14a473d6c8f0daa8b236184f1923d174bb40c2f75a47ac92fdc403b718f8"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, 0x0, 0x0}) 3.592677248s ago: executing program 3 (id=1901): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_riscv64=@attr_config={0x0, 0x1, 0x0, 0x0}) 3.475948928s ago: executing program 3 (id=1902): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'wg0\x00', 0x0}) r3 = socket(0x10, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d4, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x29, 0x0, 0x0, 0x0, 0x5a, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7800, 0x7f, 0xfffffffc, 0xdc66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r5, 0x0, 0x0, 0x1, 0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x700, 0x0, 0xfffffffc}}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd4, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000001}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20048880}, 0x40000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7fff, @none, 0x20, 0x1}, 0xe) 3.475741877s ago: executing program 3 (id=1903): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x7, 0x7, 0x1, 0x100, 0x8f, 0x2, 0x7}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, &(0x7f00000001c0)={&(0x7f0000000100)='/dev/kvm\x00', 0x0, 0xb6}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002000010002000000000000000a00000000000001"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x68}) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.483584486s ago: executing program 3 (id=1908): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in=@dev={0xac, 0x14, 0x14, 0x44}, 0x0, 0x5, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x7f, 0x0, 0x1}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0xfffffffe, 0x2, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x2, 0x1, 0xa, 0xe0, 0x80}, 0x4}, [@migrate={0x50, 0x11, [{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1, @in6=@remote, 0x3c, 0x0, 0x0, 0x3500, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x3000000, 0x0, 0x4}, 0x0) 2.471160915s ago: executing program 3 (id=1909): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e092000000000000109022400010000000009040009010300010009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000001a80)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="007304"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x20, 0x30, 0x2b, {0x2b, 0xe, "3112d811a9f03dcea83d348f6364a30c086c768165c0f170297c979f157f620a92ccda8d600bf4ae03"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}}, &(0x7f00000002c0)={0x34, &(0x7f0000000140)={0x20, 0x0, 0x26, "7fa8d9fa33c7a379f858d04bf611117d58d7ad3c987c578ce476dbde899e29db993c0669891a"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000200)={0xc0, 0xa1, 0x4, 0xc9}, &(0x7f0000000240)={0x40, 0xa0, 0x4, 0x10001}, &(0x7f0000000280)={0xc0, 0xa2, 0x2f, "6db4e669f33192fdbb6dc0305a82d4842440106b8bf193ffb934a0dd07dcf855d7582f25bc9d3647519afb58e437b4"}}) ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f0000000000)) 2.323869265s ago: executing program 0 (id=1911): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) setitimer(0x2, &(0x7f0000000b40)={{}, {0x0, 0x2710}}, &(0x7f0000000b80)) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1460, 0x10, 0x3, 0xb2}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x2, 0x1, 0x3ab, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e40, 0x20000, 0x9, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x10, 0x2, 0x102c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x1000, 0x2, 0x21b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x20000, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 2.299023965s ago: executing program 1 (id=1912): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10002, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x4, 0xa7, 0x81, 0xfffff001, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x8, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0xfffffffe, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee47, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x4, 0xd500, 0x8, 0x77, 0xa, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x2, 0x2, 0x100, 0xd8ce, 0xf, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x2, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x2]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)=@caif=@dgm={0x25, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x7, 0x7, 0x1, 0x100, 0x8f, 0x2, 0x7}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x34, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3}}}}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x34}}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xdb, 0x0, 0x3}) ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, &(0x7f00000001c0)={&(0x7f0000000100)='/dev/kvm\x00', 0x0, 0xb6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000140)={0x2}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.093131514s ago: executing program 0 (id=1913): unshare(0x60000600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0xd47}, {{0x0, 0x0, 0x0, 0x20}, 0x8}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001180)=""/4059, 0xfdb}, {&(0x7f0000000ac0)=""/200, 0xc8}, {&(0x7f0000000980)=""/265, 0x109}, {&(0x7f0000000780)=""/170, 0xaa}, {&(0x7f0000000880)=""/224, 0xe0}, {&(0x7f0000000080)=""/96, 0x60}, {&(0x7f00000002c0)=""/229, 0xe5}, {&(0x7f0000000240)=""/109, 0x6d}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000000000)=""/21, 0x15}], 0xa}, 0x120a}], 0x3, 0x0, 0x0) 1.989005094s ago: executing program 0 (id=1915): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500ff8000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 1.903833544s ago: executing program 0 (id=1917): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) copy_file_range(r2, 0x0, r2, &(0x7f0000000180)=0xffffffff00000000, 0x3, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x7, 0x37, 0x1000, 0x7, 0x77f, 0xfffffffd, 0x24}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0xb49, 0x1, 0x3, 0x40}]}, 0x10) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f00000000c0)={0xd13, 0x200, 0x6, 0x875f, 0x7, "ea71000500f9000000024200215f058400", 0x4000000, 0x400}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x42) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a88800892f4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) 1.860435184s ago: executing program 0 (id=1918): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b00"], 0x0) pipe2$9p(0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd7000fedbdf2500000000000000000000000000000001fe800000896c000000000000000000bb00000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000800000000000000400000000000000fdffffffffffff7ffeffffffff7f40000200000000000008030000000100000001000201000000004400050000000000000000000000000000000000000000002b"], 0xfc}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x241, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback}, 0x1c) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000100)=ANY=[@ANYBLOB="12011003000000106b1d0105400001020301090260000301ff10020904000000010100000a240101000a000201020904010000010200000904010101010200000905010908002906040725010002090009040200000102000009040201010102000009058209200000030607250108020500"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.349709333s ago: executing program 1 (id=1919): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x4, 0x6031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) r2 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, r3) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000302, r3, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r7, 0x4018aee3, &(0x7f0000000100)) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x138) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x4, 0x6031, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) (async) write$FUSE_OPEN(r1, 0x0, 0x0) (async) socket(0x1, 0x2, 0x0) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000cab000)=0xc) (async) setresuid(0x0, r3, r3) (async) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000302, r3, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) sendto$packet(r5, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r7, 0x4018aee3, &(0x7f0000000100)) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x138) (async) 1.172005243s ago: executing program 1 (id=1920): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@multicast2, 0x2, 0x4}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc000000210001000400002000000000fc020000000000000000000000000001ff02000000000000000000000000000100000000000000020a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100fc0000000000000000000000000000017f000001000000000000000000000000fc020000000000000000000000000001e00000010000000000000000000000003c04"], 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.171828323s ago: executing program 1 (id=1921): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, &(0x7f0000000040)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = getpid() sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4d40}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000010a0009000000514d76593f00000073797a31000400000c000440000000000000000200"/49], 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000800) syz_pidfd_open(r4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r4, 0x3, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000301010100"], 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x48044) close_range(r0, 0xffffffffffffffff, 0x0) 612.249211ms ago: executing program 3 (id=1927): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10002, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x4, 0xa7, 0x81, 0xfffff001, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x8, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0xfffffffe, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee47, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x4, 0xd500, 0x8, 0x77, 0xa, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x2, 0x2, 0x100, 0xd8ce, 0xf, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x2, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x2]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)=@caif=@dgm={0x25, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x7, 0x7, 0x1, 0x100, 0x8f, 0x2, 0x7}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x34, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3}}}}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x34}}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xdb, 0x0, 0x3}) ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, &(0x7f00000001c0)={&(0x7f0000000100)='/dev/kvm\x00', 0x0, 0xb6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000140)={0x2}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 529.687771ms ago: executing program 4 (id=1929): symlink(0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x12, r0, 0x9ec4a000) r1 = socket$netlink(0x10, 0x3, 0x9) r2 = socket(0x10, 0x80003, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0x18, r4, 0xdeaa, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x2) read(r5, 0x0, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x19a1dc757009216e) close_range(r1, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa8) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) mknodat(r6, &(0x7f0000000340)='./file0\x00', 0xc000, 0x9) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) readlink(&(0x7f0000000380)='./file0\x00', &(0x7f0000001180)=""/4077, 0xdbe) sendmmsg$inet(r8, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x94, 0x2}]}}}], 0x18}}], 0x2, 0x0) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x8}, 0x8) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r10, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[], 0x174}}, 0x40000) 443.888701ms ago: executing program 0 (id=1930): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x7, 0x7, 0x1, 0x100, 0x8f, 0x2, 0x7}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, &(0x7f00000001c0)={&(0x7f0000000100)='/dev/kvm\x00', 0x0, 0xb6}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002000010002000000000000000a00000000000001"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x68}) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 292.011241ms ago: executing program 4 (id=1931): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='huge=always,hug\"=within_size,nr_blocks=', @ANYRES32]) 289.889981ms ago: executing program 4 (id=1932): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x7) openat$tun(0xffffffffffffff9c, 0x0, 0xc100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) sendmmsg$unix(r1, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="140000000000fe000100000001"], 0x18, 0x40000}}], 0x1, 0x4004080) 256.938121ms ago: executing program 4 (id=1933): r0 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/warn_count', 0x20940, 0x1e3) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r1, 0x0, {0xaa55, 0x0, 0x0, 0x0, 0x7fda, 0x0, 0x0, 0x5, 0xc, "c44ef9682a689185ff07ec0f9eddd770e010a8b62022fd106fa715e63fee8ab07f3c19ed0c04afcaba06f6d9584488da0162d4cc7030ec4f7b9ab89b3e192e4a", "8bc975aabbbbe9e4e7b0e98d430100000000000000e3bce73919393417abdcf395f6f84349cab78b5ce6c20ebc4208800000e96f53067a33e697ba7a05fb5d55", "666f1d5f5c43005b310134ce9a6d0369862b72c1f9f4980a2346c4dd62ad8050", [0x400000006, 0x800000000061fe]}}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 95.43629ms ago: executing program 4 (id=1934): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff0100ffea010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 0s ago: executing program 4 (id=1935): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f0000000000)="fc0000001c000720ab5b2509b86803000aab087a0400000001e2bb93210001c0f003058405006010000000810000b9d95662537a00bc000c00f0ff7f0000b400916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c8755cdc8362defe04f000000006239ec2a0f0d1bcae5fa8f5f9dcdd51af51af8502943283f4bb102ddf9b2b8f5566791cf1902a38204ea45e609ded815b2ccd2430de4cc71e0ad73bd6433802e0784f20137d1890058a10000c880ac801fe4af00004900d400"/252, 0xfc) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/uevent_seqnum', 0x20040, 0x38) read$usbmon(r2, &(0x7f0000000880)=""/4096, 0x1000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000100)={0x6c, 0x6, '\x00', [@enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x8}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x62f0}, @ra={0x5, 0x2, 0xea7}, @jumbo={0xc2, 0x4, 0x1}]}, 0x40) r5 = dup(r3) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x82, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r7 = openat$incfs(r6, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r7, 0x40106726, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'wlan0\x00', @random="cb27720bae81"}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) kernel console output (not intermixed with test programs): USB device number 75 using dummy_hcd [ 167.851762][ T1100] usb 1-1: USB disconnect, device number 66 [ 167.873491][ T4658] veth1_macvtap: entered promiscuous mode [ 167.988692][ T4675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=4675 comm=syz.0.1433 [ 168.028599][ T31] usb 2-1: config 1 has an invalid interface number: 93 but max is 0 [ 168.030941][ T4682] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1434'. [ 168.047255][ T31] usb 2-1: config 1 has no interface number 0 [ 168.053490][ T31] usb 2-1: config 1 interface 93 has no altsetting 0 [ 168.062912][ T4680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1433'. [ 168.068674][ T4684] netlink: 'syz.4.1435': attribute type 12 has an invalid length. [ 168.071880][ T31] usb 2-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=6b.02 [ 168.097626][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.110367][ T4686] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1436'. [ 168.314352][ T31] usb 2-1: string descriptor 0 read error: -71 [ 168.323026][ T31] gl620a 2-1:1.93: probe with driver gl620a failed with error -22 [ 168.336329][ T31] usb 2-1: USB disconnect, device number 75 [ 168.377292][ T45] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 168.527286][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 168.533591][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.544710][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.554595][ T45] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 168.563686][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.572325][ T45] usb 1-1: config 0 descriptor?? [ 168.632202][ T4696] SELinux: Context system_u:object_r:devlog_t:s0 is not valid (left unmapped). [ 168.632251][ T36] audit: type=1400 audit(1777372551.034:1004): avc: denied { relabelfrom } for pid=4695 comm="syz.3.1440" name="" dev="pipefs" ino=38701 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 168.663945][ T36] audit: type=1400 audit(1777372551.054:1005): avc: denied { relabelto } for pid=4695 comm="syz.3.1440" name="" dev="pipefs" ino=38701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:devlog_t:s0" [ 168.741709][ T4699] fuse: Unknown parameter 'user_id00000000000000000000' [ 168.762869][ T36] audit: type=1400 audit(1777372551.164:1006): avc: denied { ioctl } for pid=4700 comm="syz.3.1442" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 168.798137][ T36] audit: type=1400 audit(1777372551.194:1007): avc: denied { shutdown } for pid=4700 comm="syz.3.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.077273][ T1100] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 169.117284][ T307] usb 4-1: new low-speed USB device number 66 using dummy_hcd [ 169.148428][ T1142] bridge_slave_1: left allmulticast mode [ 169.154127][ T1142] bridge_slave_1: left promiscuous mode [ 169.160051][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.167728][ T1142] bridge_slave_0: left allmulticast mode [ 169.173421][ T1142] bridge_slave_0: left promiscuous mode [ 169.179255][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.213752][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 169.220545][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 169.227247][ T1100] usb 2-1: Using ep0 maxpacket: 8 [ 169.229605][ T45] usb 1-1: USB disconnect, device number 67 [ 169.239714][ T1100] usb 2-1: unable to get BOS descriptor or descriptor too short [ 169.248787][ T1100] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 169.257284][ T345] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 169.259802][ T1100] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1056, setting to 1024 [ 169.279420][ T307] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 169.290542][ T307] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 169.301597][ T307] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 169.315977][ T1100] usb 2-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 169.325132][ T307] usb 4-1: config 0 interface 0 has no altsetting 0 [ 169.325220][ T1142] veth1_macvtap: left promiscuous mode [ 169.331782][ T1100] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.337930][ T1142] veth0_vlan: left promiscuous mode [ 169.345319][ T307] usb 4-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 169.359590][ T1100] usb 2-1: Product: syz [ 169.363781][ T1100] usb 2-1: Manufacturer: syz [ 169.368425][ T1100] usb 2-1: SerialNumber: syz [ 169.375303][ T307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.388413][ T307] usb 4-1: config 0 descriptor?? [ 169.393959][ T4713] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 169.428743][ T345] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.438969][ T345] usb 5-1: config 0 has no interfaces? [ 169.444476][ T345] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 169.453578][ T345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.467468][ T345] usb 5-1: config 0 descriptor?? [ 169.629790][ T4718] netlink: 'syz.1.1445': attribute type 9 has an invalid length. [ 169.640863][ T1100] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 169.649375][ T1100] usb 2-1: unit 3 not found! [ 169.659353][ T1100] usb 2-1: USB disconnect, device number 76 [ 169.673803][ T1678] udevd[1678]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 169.677776][ T345] usb 5-1: USB disconnect, device number 2 [ 169.804474][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 169.811998][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 169.819482][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 169.826916][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 169.834693][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 169.842157][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 169.849648][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 169.857129][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 169.865134][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 169.872794][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 169.881039][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 169.888558][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 169.896023][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 169.903591][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 169.911069][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 169.918533][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 169.926028][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 169.933579][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 169.941067][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 169.948515][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 169.955937][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 169.963501][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 169.970946][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 169.978397][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 169.985854][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 169.993476][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 170.000931][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 170.008507][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 170.016235][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 170.023702][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 170.031289][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 170.038834][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 170.046502][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 170.053959][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 170.061407][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 170.068840][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 170.076257][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 170.083694][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 170.091136][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 170.098591][ T307] pantherlord 0003:0810:0001.000F: unknown main item tag 0x0 [ 170.106616][ T307] pantherlord 0003:0810:0001.000F: hidraw0: USB HID vff.ff Device [HID 0810:0001] on usb-dummy_hcd.3-1/input0 [ 170.118384][ T307] pantherlord 0003:0810:0001.000F: no output reports found [ 170.128725][ T307] usb 4-1: USB disconnect, device number 66 [ 170.173027][ T4726] fuse: Unknown parameter 'user_id00000000000000000000' [ 170.175782][ T4728] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1452'. [ 170.301137][ T4742] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 170.301201][ T4742] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:900 [ 170.307955][ T36] audit: type=1400 audit(1777372552.714:1008): avc: denied { execute } for pid=4738 comm="syz.0.1457" name="file1" dev="tmpfs" ino=1413 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 170.340811][ T36] audit: type=1400 audit(1777372552.714:1009): avc: denied { execute_no_trans } for pid=4738 comm="syz.0.1457" path="/258/file1" dev="tmpfs" ino=1413 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 170.370478][ T4745] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1459'. [ 170.486630][ T4757] netlink: 'syz.4.1463': attribute type 12 has an invalid length. [ 170.566042][ T36] audit: type=1400 audit(1777372552.964:1010): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 170.649532][ T4765] rust_binder: 745: no such ref 0 [ 170.767233][ T45] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 170.887258][ T1100] usb 4-1: new low-speed USB device number 67 using dummy_hcd [ 170.928449][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 87, changing to 10 [ 170.939807][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49416, setting to 1024 [ 170.951180][ T45] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 170.960279][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.967233][ T307] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 170.976332][ T45] usb 5-1: config 0 descriptor?? [ 171.048751][ T1100] usb 4-1: unable to get BOS descriptor or descriptor too short [ 171.057280][ T1100] usb 4-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 171.067258][ T31] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 171.068065][ T1100] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 64, setting to 0 [ 171.086277][ T1100] usb 4-1: too many endpoints for config 1 interface 2 altsetting 0: 236, using maximum allowed: 30 [ 171.097219][ T1100] usb 4-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 236 [ 171.112673][ T1100] usb 4-1: string descriptor 0 read error: -22 [ 171.119020][ T1100] usb 4-1: New USB device found, idVendor=0e41, idProduct=3020, bcdDevice= 0.40 [ 171.128267][ T1100] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.138983][ T307] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.149478][ T307] usb 1-1: config 0 has no interfaces? [ 171.155018][ T307] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 171.165048][ T1100] usb 4-1: low speed audio streaming not supported [ 171.171643][ T307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.179820][ T1100] usb 4-1: unit 4 not found! [ 171.184441][ T1100] usb 4-1: unit 255 not found! [ 171.190049][ T307] usb 1-1: config 0 descriptor?? [ 171.228473][ T31] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 171.240208][ T31] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 171.251252][ T31] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 171.262559][ T31] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 171.271665][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.280764][ T4772] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 171.368511][ T1100] usb 4-1: USB disconnect, device number 67 [ 171.383190][ T45] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 171.394898][ T45] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0010/input/input58 [ 171.410226][ T64] usb 1-1: USB disconnect, device number 68 [ 171.466035][ T45] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 171.585075][ C1] usb 5-1: input irq status -75 received [ 171.793572][ T307] usb 5-1: USB disconnect, device number 3 [ 172.010070][ T4785] netlink: 'syz.3.1473': attribute type 12 has an invalid length. [ 172.277259][ T307] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 172.386536][ T4803] fuse: Unknown parameter '0x0000000000000004' [ 172.430234][ T307] usb 4-1: Using ep0 maxpacket: 32 [ 172.456045][ T36] audit: type=1400 audit(1777372554.854:1011): avc: denied { append } for pid=4811 comm="syz.0.1485" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 172.512261][ T4815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1486'. [ 172.522725][ T307] usb 4-1: unable to get BOS descriptor or descriptor too short [ 172.537094][ T307] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 172.543827][ T4817] fuse: Bad value for 'group_id' [ 172.544862][ T307] usb 4-1: can't read configurations, error -71 [ 172.551598][ T4817] fuse: Bad value for 'group_id' [ 172.657478][ T1100] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 172.722302][ T4823] netlink: 'syz.0.1489': attribute type 4 has an invalid length. [ 172.730323][ T4823] netlink: 3581 bytes leftover after parsing attributes in process `syz.0.1489'. [ 172.796663][ T4773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.805470][ T4773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.814826][ T1100] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.825064][ T1100] usb 5-1: config 0 has no interfaces? [ 172.826503][ T4826] fuse: Unknown parameter '0x0000000000000004' [ 172.830630][ T1100] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 172.846120][ T1100] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.856511][ T1100] usb 5-1: config 0 descriptor?? [ 172.908509][ T36] audit: type=1326 audit(1777372555.314:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.0.1491" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f444999cdd9 code=0x0 [ 173.014303][ T4829] netlink: 'syz.0.1491': attribute type 4 has an invalid length. [ 173.022111][ T4829] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1491'. [ 173.082578][ T64] usb 5-1: USB disconnect, device number 4 [ 173.217738][ T31] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 173.226119][ T31] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input57 [ 173.237892][ T31] usb 2-1: USB disconnect, device number 77 [ 173.243931][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 173.703546][ T4848] fuse: Unknown parameter '0x0000000000000004' [ 173.735157][ T36] audit: type=1400 audit(1777372556.134:1013): avc: denied { setopt } for pid=4849 comm="syz.1.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 173.895334][ T4869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.910882][ T4873] netlink: 'syz.1.1508': attribute type 12 has an invalid length. [ 173.919000][ T4869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.927535][ T4875] fuse: Unknown parameter '0x0000000000000004' [ 173.973167][ T4886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.986955][ T4886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.990421][ T4890] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 173.996243][ T4890] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:928 [ 174.024889][ T4894] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1516'. [ 174.133636][ T4905] fuse: Unknown parameter '0x0000000000000004' [ 174.139928][ T472] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 174.169878][ T36] audit: type=1400 audit(1777372556.574:1014): avc: denied { compute_member } for pid=4908 comm="syz.1.1522" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 174.236196][ T4917] netlink: 'syz.1.1526': attribute type 12 has an invalid length. [ 174.257234][ T307] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 174.257437][ T64] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 174.418454][ T307] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.418454][ T64] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.418486][ T64] usb 1-1: config 0 has no interfaces? [ 174.428868][ T307] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 174.439078][ T64] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 174.445267][ T307] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 174.457376][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.466718][ T307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 174.476249][ T64] usb 1-1: config 0 descriptor?? [ 174.483647][ T307] usb 4-1: SerialNumber: syz [ 174.503477][ T307] cdc_ether 4-1:1.0: skipping garbage [ 174.509195][ T307] usb 4-1: bad CDC descriptors [ 174.517303][ T1100] usb 2-1: new low-speed USB device number 78 using dummy_hcd [ 174.668418][ T1100] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 174.679615][ T1100] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 174.690592][ T1100] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 174.703595][ T1100] usb 2-1: New USB device found, idVendor=05ac, idProduct=0304, bcdDevice= 0.00 [ 174.713666][ T4892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.728715][ T1100] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.737571][ T4892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.753325][ T1100] usb 2-1: config 0 descriptor?? [ 174.761547][ T307] usb 4-1: USB disconnect, device number 70 [ 174.764148][ T4926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.771805][ T4926] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:45 [ 174.777620][ T4921] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 174.804517][ T4928] fuse: Unknown parameter '0x0000000000000004' [ 174.832128][ T4930] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1531'. [ 175.012775][ T64] usb 1-1: USB disconnect, device number 69 [ 175.187273][ T472] usb 5-1: device descriptor read/64, error -71 [ 175.213885][ T4933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1528'. [ 175.223414][ T4933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4933 comm=syz.1.1528 [ 175.236306][ T1100] usb 2-1: string descriptor 0 read error: -71 [ 175.244246][ T1100] usbhid 2-1:0.0: can't add hid device: -71 [ 175.250265][ T1100] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 175.259055][ T1100] usb 2-1: USB disconnect, device number 78 [ 175.382274][ T36] audit: type=1400 audit(1777372557.784:1015): avc: denied { create } for pid=4941 comm="syz.3.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 175.448348][ T472] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.459534][ T472] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.471691][ T472] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 175.472887][ T4940] cgroup: fork rejected by pids controller in /syz0 [ 175.481058][ T472] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 175.481088][ T472] usb 5-1: Manufacturer: syz [ 175.487966][ T4940] [ 175.501057][ T472] usb 5-1: config 0 descriptor?? [ 175.617251][ T316] usb 4-1: new low-speed USB device number 71 using dummy_hcd [ 175.748824][ T316] usb 4-1: device descriptor read/64, error -71 [ 175.849753][ T4949] syz.1.1540 uses obsolete (PF_INET,SOCK_PACKET) [ 175.938241][ T4950] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.945312][ T4950] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.952624][ T4950] bridge_slave_0: entered allmulticast mode [ 175.958941][ T4950] bridge_slave_0: entered promiscuous mode [ 175.966020][ T4950] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.973175][ T4950] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.980339][ T4950] bridge_slave_1: entered allmulticast mode [ 175.986716][ T4950] bridge_slave_1: entered promiscuous mode [ 175.992594][ T316] usb 4-1: device descriptor read/64, error -71 [ 176.033578][ T4950] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.040654][ T4950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.047971][ T4950] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.055010][ T4950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.077581][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.085205][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.094724][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.101902][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.111609][ T472] usbhid 5-1:0.0: can't add hid device: -71 [ 176.117596][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.124650][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.127325][ T472] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 176.144396][ T472] usb 5-1: USB disconnect, device number 5 [ 176.158113][ T4950] veth0_vlan: entered promiscuous mode [ 176.168923][ T4950] veth1_macvtap: entered promiscuous mode [ 176.196959][ T4955] loop6: detected capacity change from 0 to 8 [ 176.247347][ T316] usb 4-1: new low-speed USB device number 72 using dummy_hcd [ 176.254949][ T61] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 176.264349][ T61] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.272604][ T4955] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 176.281834][ T4955] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.289742][ T4955] loop6: unable to read partition table [ 176.295626][ T4955] loop_reread_partitions: partition scan of loop6 (Nh*hp "o?< ʺXDbp0O{>.) failed (rc=-5) [ 176.437282][ T316] usb 4-1: device descriptor read/64, error -71 [ 176.567292][ T64] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 176.631693][ T4964] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 176.631803][ T4964] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:53 [ 176.662477][ T4968] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1546'. [ 176.680721][ T316] usb 4-1: device descriptor read/64, error -71 [ 176.718434][ T64] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.728690][ T64] usb 1-1: config 0 has no interfaces? [ 176.734203][ T64] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 176.743695][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.752640][ T64] usb 1-1: config 0 descriptor?? [ 176.787371][ T316] usb usb4-port1: attempt power cycle [ 176.927318][ T45] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 176.961141][ T64] usb 1-1: USB disconnect, device number 70 [ 177.088437][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.098630][ T45] usb 5-1: config 0 has no interfaces? [ 177.104109][ T45] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 177.113236][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.121988][ T45] usb 5-1: config 0 descriptor?? [ 177.127273][ T316] usb 4-1: new low-speed USB device number 73 using dummy_hcd [ 177.148277][ T316] usb 4-1: device descriptor read/8, error -71 [ 177.217448][ T472] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 177.278438][ T316] usb 4-1: device descriptor read/8, error -71 [ 177.329458][ T4970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.338412][ T4970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.347783][ T36] audit: type=1400 audit(1777372559.754:1016): avc: denied { map } for pid=4969 comm="syz.4.1547" path="pipe:[37593]" dev="pipefs" ino=37593 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 177.348915][ T307] usb 5-1: USB disconnect, device number 6 [ 177.378091][ T472] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 177.390854][ T472] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 177.402084][ T472] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 177.413583][ T472] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 177.422728][ T472] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.431696][ T4976] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 177.527323][ T316] usb 4-1: new low-speed USB device number 74 using dummy_hcd [ 177.549576][ T316] usb 4-1: device descriptor read/8, error -71 [ 177.678316][ T316] usb 4-1: device descriptor read/8, error -71 [ 177.787603][ T316] usb usb4-port1: unable to enumerate USB device [ 177.925100][ T4988] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1554'. [ 177.934234][ T4988] netlink: 'syz.0.1554': attribute type 6 has an invalid length. [ 177.942286][ T4988] netlink: 'syz.0.1554': attribute type 5 has an invalid length. [ 177.950179][ T4988] netlink: 'syz.0.1554': attribute type 4 has an invalid length. [ 177.958316][ T4986] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1554'. [ 177.967470][ T4986] netlink: 'syz.0.1554': attribute type 6 has an invalid length. [ 177.975269][ T4986] netlink: 'syz.0.1554': attribute type 5 has an invalid length. [ 177.983198][ T4986] netlink: 'syz.0.1554': attribute type 4 has an invalid length. [ 178.066361][ T4994] 9pnet_fd: Insufficient options for proto=fd [ 178.093462][ T4994] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 178.100043][ T4996] loop6: detected capacity change from 0 to 8 [ 178.349877][ T5001] kvm: vcpu 6: requested lapic timer restore with starting count register 0x390=3206951851 (6413903702 ns) > initial count (411158038 ns). Using initial count to start timer. [ 178.777299][ T307] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 178.927708][ T307] usb 4-1: Using ep0 maxpacket: 32 [ 178.934853][ T307] usb 4-1: unable to get BOS descriptor or descriptor too short [ 178.943938][ T307] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 178.956723][ T307] usb 4-1: New USB device found, idVendor=0582, idProduct=0456, bcdDevice= 0.41 [ 178.965925][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.974070][ T307] usb 4-1: Product: syz [ 178.978277][ T307] usb 4-1: Manufacturer: syz [ 178.982901][ T307] usb 4-1: SerialNumber: syz [ 178.998864][ T472] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 179.006537][ T472] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input59 [ 179.018040][ T472] usb 2-1: USB disconnect, device number 79 [ 179.018157][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 179.167325][ T45] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 179.191613][ T307] usb 4-1: MIDIStreaming interface descriptor not found [ 179.207880][ T307] usb 4-1: USB disconnect, device number 75 [ 179.328806][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 179.337414][ T45] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 179.350063][ T45] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 179.359172][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.367228][ T45] usb 1-1: Product: syz [ 179.371531][ T45] usb 1-1: Manufacturer: syz [ 179.376139][ T45] usb 1-1: SerialNumber: syz [ 179.509782][ T64] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 179.519850][ T5017] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 179.519981][ T5017] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:974 [ 179.587336][ T45] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 179.608363][ T45] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 179.617002][ T45] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 179.625088][ T45] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 179.639694][ T45] usb 1-1: USB disconnect, device number 71 [ 179.653775][ T591] udevd[591]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 179.697404][ T64] usb 5-1: Using ep0 maxpacket: 8 [ 179.703707][ T64] usb 5-1: config 3 has an invalid interface number: 255 but max is 0 [ 179.712033][ T64] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 179.722418][ T64] usb 5-1: config 3 has no interface number 0 [ 179.729191][ T64] usb 5-1: config 3 interface 255 altsetting 243 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 179.743709][ T64] usb 5-1: config 3 interface 255 has no altsetting 0 [ 179.758674][ T64] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=95.29 [ 179.776623][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.784929][ T64] usb 5-1: Product: syz [ 179.789137][ T64] usb 5-1: Manufacturer: syz [ 179.793821][ T64] usb 5-1: SerialNumber: syz [ 180.067298][ T316] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 180.101403][ T5035] usb usb8: usbfs: process 5035 (syz.0.1572) did not claim interface 0 before use [ 180.117254][ T45] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 180.217506][ T316] usb 2-1: Using ep0 maxpacket: 32 [ 180.223914][ T316] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 180.232339][ T316] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.242481][ T316] usb 2-1: config 0 has no interface number 0 [ 180.248614][ T316] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 180.258494][ T316] usb 2-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.271588][ T316] usb 2-1: config 0 interface 196 has no altsetting 0 [ 180.278284][ T45] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 180.280030][ T316] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 180.286591][ T45] usb 4-1: config 0 has no interface number 0 [ 180.296132][ T316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.302079][ T45] usb 4-1: config 0 interface 41 has no altsetting 0 [ 180.310118][ T316] usb 2-1: Product: syz [ 180.318289][ T45] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 180.320822][ T316] usb 2-1: Manufacturer: syz [ 180.330187][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.334391][ T316] usb 2-1: SerialNumber: syz [ 180.335179][ T316] usb 2-1: config 0 descriptor?? [ 180.342953][ T45] usb 4-1: Product: syz [ 180.347252][ T472] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 180.352479][ T45] usb 4-1: Manufacturer: syz [ 180.368483][ T45] usb 4-1: SerialNumber: syz [ 180.374064][ T45] usb 4-1: config 0 descriptor?? [ 180.508267][ T472] usb 1-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 180.518595][ T472] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 180.531826][ T472] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 180.544800][ T472] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.554955][ T472] usb 1-1: config 0 descriptor?? [ 180.561012][ T5030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.569726][ T5030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.570931][ T472] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 180.580654][ T5030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.594784][ T5030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.605057][ T5030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.617421][ T5030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.626095][ T5030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.634616][ T5041] netlink: 'syz.4.1575': attribute type 4 has an invalid length. [ 180.637853][ T5030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.651298][ T5030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.665125][ T5030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.683239][ T36] audit: type=1400 audit(1777372563.084:1017): avc: denied { create } for pid=5028 comm="syz.1.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 180.691474][ T316] ipheth 2-1:0.196: Unable to find endpoints [ 180.725603][ T316] usb 2-1: USB disconnect, device number 80 [ 180.762019][ T36] audit: type=1400 audit(1777372563.164:1018): avc: denied { create } for pid=5048 comm="syz.4.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 180.790211][ T36] audit: type=1400 audit(1777372563.164:1019): avc: denied { write } for pid=5048 comm="syz.4.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 180.799896][ T5053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.810695][ T36] audit: type=1400 audit(1777372563.164:1020): avc: denied { nlmsg_write } for pid=5048 comm="syz.4.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 180.821273][ T5053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.839746][ T36] audit: type=1400 audit(1777372563.224:1021): avc: denied { connect } for pid=5050 comm="syz.4.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 181.027312][ T316] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 181.157297][ T316] usb 2-1: device descriptor read/64, error -71 [ 181.361070][ T5056] loop6: detected capacity change from 0 to 8 [ 181.397257][ T316] usb 2-1: device descriptor read/64, error -71 [ 181.411829][ T61] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.421104][ T61] Buffer I/O error on dev loop6, logical block 0, async page read [ 181.429152][ T5056] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.438353][ T5056] Buffer I/O error on dev loop6, logical block 0, async page read [ 181.446223][ T5056] loop6: unable to read partition table [ 181.452049][ T5056] loop_reread_partitions: partition scan of loop6 (Nh*hp "o?< ʺXDbp0O{>.) failed (rc=-5) [ 181.452973][ T45] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 181.483520][ T45] usb 4-1: USB disconnect, device number 76 [ 181.637261][ T316] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 181.688559][ T36] audit: type=1400 audit(1777372564.094:1022): avc: denied { mount } for pid=5073 comm="syz.4.1583" name="/" dev="pstore" ino=2663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 181.744414][ T5076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1583'. [ 181.787300][ T316] usb 2-1: device descriptor read/64, error -71 [ 181.969733][ T5080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.978959][ T5080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.000367][ T36] audit: type=1400 audit(1777372564.404:1023): avc: denied { write } for pid=5081 comm="syz.3.1586" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 182.027261][ T316] usb 2-1: device descriptor read/64, error -71 [ 182.138655][ T316] usb usb2-port1: attempt power cycle [ 182.191110][ T5080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.201098][ T5080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.211000][ T5080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.220595][ T5080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.477236][ T316] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 182.518339][ T316] usb 2-1: device descriptor read/8, error -71 [ 182.648367][ T316] usb 2-1: device descriptor read/8, error -71 [ 182.758394][ T5093] loop6: detected capacity change from 0 to 8 [ 182.887239][ T316] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 182.930765][ T316] usb 2-1: device descriptor read/8, error -71 [ 183.051580][ T5096] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1591'. [ 183.061905][ T316] usb 2-1: device descriptor read/8, error -71 [ 183.081474][ T5098] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 183.081589][ T5098] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:111 [ 183.121856][ T472] usb 1-1: USB disconnect, device number 72 [ 183.167131][ T5104] netlink: 'syz.0.1595': attribute type 4 has an invalid length. [ 183.177379][ T316] usb usb2-port1: unable to enumerate USB device [ 183.343794][ T5119] loop6: detected capacity change from 0 to 8 [ 183.360002][ T5121] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1602'. [ 183.407402][ T51] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 183.416669][ T51] Buffer I/O error on dev loop6, logical block 0, async page read [ 183.424727][ T5119] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 183.434093][ T5119] Buffer I/O error on dev loop6, logical block 0, async page read [ 183.442057][ T5119] loop6: unable to read partition table [ 183.447895][ T5119] loop_reread_partitions: partition scan of loop6 (Nh*hp "o?< ʺXDbp0O{>.) failed (rc=-5) [ 183.491529][ T5128] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 183.491647][ T5128] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:123 [ 183.519193][ T5130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.536946][ T5130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.737306][ T472] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 183.833410][ T5145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1613'. [ 183.860260][ T5147] IPv6: addrconf: prefix option has invalid lifetime [ 183.867352][ T36] audit: type=1400 audit(1777372566.265:1024): avc: denied { bind } for pid=5150 comm="syz.1.1614" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 183.887733][ T36] audit: type=1400 audit(1777372566.265:1025): avc: denied { node_bind } for pid=5150 comm="syz.1.1614" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 183.918575][ T472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 87, changing to 10 [ 183.929749][ T472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49416, setting to 1024 [ 183.941960][ T472] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 183.951077][ T472] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.960256][ T472] usb 1-1: config 0 descriptor?? [ 184.072740][ T5154] loop6: detected capacity change from 0 to 8 [ 184.107286][ T345] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 184.123643][ T51] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.133100][ T51] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.141250][ T5154] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.150691][ T5154] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.166179][ T5154] loop6: unable to read partition table [ 184.172250][ T5154] loop_reread_partitions: partition scan of loop6 (Nh*hp "o?< ʺXDbp0O{>.) failed (rc=-5) [ 184.197852][ T5162] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 184.197976][ T5162] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:135 [ 184.236909][ T5166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1621'. [ 184.257381][ T345] usb 2-1: Using ep0 maxpacket: 16 [ 184.259498][ T5166] futex_wake_op: syz.3.1621 tries to shift op by -1; fix this program [ 184.266000][ T345] usb 2-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 184.270855][ T311] Bluetooth: hci0: Frame reassembly failed (-84) [ 184.282723][ T345] usb 2-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.300834][ T345] usb 2-1: config 0 interface 0 has no altsetting 0 [ 184.307634][ T345] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 184.317385][ T345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.337591][ T345] usb 2-1: config 0 descriptor?? [ 184.367377][ T472] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 184.377626][ T472] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0011/input/input60 [ 184.451409][ T472] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 184.572948][ T45] usb 1-1: USB disconnect, device number 73 [ 184.751938][ T345] usb 2-1: string descriptor 0 read error: -71 [ 184.759674][ T345] usb 2-1: USB disconnect, device number 85 [ 184.820136][ T64] usbserial_generic 5-1:3.255: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 184.831589][ T64] usbserial_generic 5-1:3.255: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 184.842615][ T64] usbserial_generic 5-1:3.255: device has no bulk endpoints [ 185.263276][ T5184] loop6: detected capacity change from 0 to 8 [ 185.314659][ T61] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.324004][ T61] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.332155][ T5184] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.341444][ T5184] Buffer I/O error on dev loop6, logical block 0, async page read [ 185.349465][ T5184] loop6: unable to read partition table [ 185.355238][ T5184] loop_reread_partitions: partition scan of loop6 (Nh*hp "o?< ʺXDbp0O{>.) failed (rc=-5) [ 185.402831][ T5190] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 185.402909][ T5190] rust_binder: Write failure EINVAL in pid:1004 [ 185.449574][ T345] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 185.470999][ T5195] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1631'. [ 185.546967][ T36] audit: type=1400 audit(1777372567.945:1026): avc: denied { append } for pid=5197 comm="syz.1.1632" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 185.597236][ T345] usb 1-1: device descriptor read/64, error -71 [ 185.598482][ T5198] can0: slcan on ttyS3. [ 185.672538][ T5200] can0 (unregistered): slcan off ttyS3. [ 185.762568][ T5221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.777556][ T5221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.815579][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 185.815600][ T36] audit: type=1400 audit(1777372568.215:1028): avc: denied { write } for pid=5225 comm="syz.1.1635" path="socket:[42971]" dev="sockfs" ino=42971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 185.857256][ T345] usb 1-1: device descriptor read/64, error -71 [ 185.934339][ T5241] loop6: detected capacity change from 0 to 8 [ 185.985663][ T51] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.994899][ T51] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.002943][ T5241] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.012200][ T5241] Buffer I/O error on dev loop6, logical block 0, async page read [ 186.020150][ T5241] loop6: unable to read partition table [ 186.025849][ T5241] loop_reread_partitions: partition scan of loop6 (Nh*hp "o?< ʺXDbp0O{>.) failed (rc=-5) [ 186.097308][ T345] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 186.227316][ T345] usb 1-1: device descriptor read/64, error -71 [ 186.287254][ T472] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 186.306099][ T5246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 186.306217][ T5246] rust_binder: Write failure EINVAL in pid:156 [ 186.347272][ T1687] Bluetooth: hci0: command 0x1003 tx timeout [ 186.350510][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 186.437262][ T472] usb 2-1: Using ep0 maxpacket: 8 [ 186.443377][ T472] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.454308][ T472] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 186.467462][ T472] usb 2-1: config 0 interface 0 has no altsetting 0 [ 186.474107][ T472] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 186.483371][ T472] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.494432][ T472] usb 2-1: config 0 descriptor?? [ 186.507539][ T345] usb 1-1: device descriptor read/64, error -71 [ 186.617736][ T345] usb usb1-port1: attempt power cycle [ 186.627246][ T316] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 186.690012][ T5268] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1648'. [ 186.789939][ T316] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 186.799251][ T316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.807414][ T316] usb 4-1: Product: syz [ 186.811617][ T316] usb 4-1: Manufacturer: syz [ 186.816238][ T316] usb 4-1: SerialNumber: syz [ 186.821664][ T316] usb 4-1: config 0 descriptor?? [ 186.829006][ T316] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 186.906874][ T472] kye 0003:0458:0138.0012: unknown main item tag 0x1 [ 186.913671][ T472] kye 0003:0458:0138.0012: unknown main item tag 0x0 [ 186.920474][ T472] kye 0003:0458:0138.0012: unknown global tag 0xc [ 186.926929][ T472] kye 0003:0458:0138.0012: item 0 1 1 12 parsing failed [ 186.934208][ T472] kye 0003:0458:0138.0012: parse failed [ 186.939875][ T472] kye 0003:0458:0138.0012: probe with driver kye failed with error -22 [ 186.967249][ T345] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 186.988478][ T345] usb 1-1: device descriptor read/8, error -71 [ 187.109507][ T5244] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1025 [ 187.118333][ T345] usb 1-1: device descriptor read/8, error -71 [ 187.367277][ T345] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 187.388370][ T345] usb 1-1: device descriptor read/8, error -71 [ 187.480202][ T5273] loop6: detected capacity change from 0 to 8 [ 187.518368][ T345] usb 1-1: device descriptor read/8, error -71 [ 187.531441][ T61] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 187.534886][ T45] usb 4-1: USB disconnect, device number 77 [ 187.540907][ T61] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.541098][ T5273] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 187.541132][ T5273] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.541187][ T5273] loop6: unable to read partition table [ 187.541271][ T5273] loop_reread_partitions: partition scan of loop6 (Nh*hp "o?< ʺXDbp0O{>.) failed (rc=-5) [ 187.616562][ T5284] tc_dump_action: action bad kind [ 187.623679][ T5284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.633156][ T5284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.642910][ T5284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.645710][ T345] usb usb1-port1: unable to enumerate USB device [ 187.651782][ T5284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.666977][ T5284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.675745][ T5284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.907297][ T45] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 188.037261][ T45] usb 4-1: device descriptor read/64, error -71 [ 188.199799][ T5286] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 188.199955][ T5286] rust_binder: 186: no such ref 2 [ 188.211566][ T5286] rust_binder: Write failure EINVAL in pid:186 [ 188.236031][ T5291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.254291][ T5291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.264575][ T5291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.276251][ T5292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.284839][ T5291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.287253][ T45] usb 4-1: device descriptor read/64, error -71 [ 188.292838][ T5292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.346579][ T5294] SELinux: failed to load policy [ 188.356359][ T5294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.365093][ T5294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.527270][ T45] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 188.637239][ T345] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 188.657583][ T45] usb 4-1: device descriptor read/64, error -71 [ 188.767245][ T345] usb 1-1: device descriptor read/64, error -71 [ 188.897554][ T45] usb 4-1: device descriptor read/64, error -71 [ 188.919440][ T5298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.929185][ T5298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.939515][ T36] audit: type=1400 audit(1777372571.345:1029): avc: denied { mount } for pid=5297 comm="syz.4.1659" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 189.007361][ T45] usb usb4-port1: attempt power cycle [ 189.017337][ T345] usb 1-1: device descriptor read/64, error -71 [ 189.058534][ T316] usb 2-1: USB disconnect, device number 86 [ 189.257229][ T345] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 189.347286][ T45] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 189.368542][ T45] usb 4-1: device descriptor read/8, error -71 [ 189.387248][ T345] usb 1-1: device descriptor read/64, error -71 [ 189.407264][ T316] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 189.445601][ T36] audit: type=1400 audit(1777372571.845:1030): avc: denied { unmount } for pid=4658 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 189.453923][ T5302] FAULT_INJECTION: forcing a failure. [ 189.453923][ T5302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.479418][ T5302] CPU: 1 UID: 0 PID: 5302 Comm: syz.4.1661 Not tainted syzkaller #0 59845a3e7facf6968a53e2150c0cf8787c039bda [ 189.479455][ T5302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 189.479467][ T5302] Call Trace: [ 189.479474][ T5302] [ 189.479481][ T5302] __dump_stack+0x21/0x30 [ 189.479513][ T5302] dump_stack_lvl+0x140/0x1c0 [ 189.479539][ T5302] ? __cfi_dump_stack_lvl+0x10/0x10 [ 189.479565][ T5302] ? check_stack_object+0x12b/0x150 [ 189.479596][ T5302] dump_stack+0x19/0x20 [ 189.479619][ T5302] should_fail_ex+0x3d7/0x530 [ 189.479645][ T5302] should_fail+0xf/0x20 [ 189.479668][ T5302] should_fail_usercopy+0x1e/0x30 [ 189.479695][ T5302] _copy_to_user+0x24/0xa0 [ 189.479715][ T5302] simple_read_from_buffer+0xed/0x160 [ 189.479741][ T5302] proc_fail_nth_read+0x1aa/0x220 [ 189.479769][ T5302] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 189.479795][ T5302] ? exc_page_fault+0x65/0xc0 [ 189.479827][ T5302] ? bpf_lsm_file_permission+0xd/0x20 [ 189.479852][ T5302] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 189.479876][ T5302] vfs_read+0x289/0xcb0 [ 189.479904][ T5302] ? __asan_memset+0x39/0x50 [ 189.479931][ T5302] ? __cfi_vfs_read+0x10/0x10 [ 189.479958][ T5302] ? __kasan_check_write+0x18/0x20 [ 189.479985][ T5302] ? mutex_lock+0x97/0x1d0 [ 189.480012][ T5302] ? __cfi_mutex_lock+0x10/0x10 [ 189.480039][ T5302] ? __fget_files+0x2c5/0x340 [ 189.480060][ T5302] ksys_read+0x145/0x260 [ 189.480087][ T5302] ? __cfi_ksys_read+0x10/0x10 [ 189.480116][ T5302] ? __kasan_check_read+0x15/0x20 [ 189.480144][ T5302] __x64_sys_read+0x7f/0x90 [ 189.480180][ T5302] x64_sys_call+0x2638/0x2ee0 [ 189.480210][ T5302] do_syscall_64+0x57/0xf0 [ 189.480232][ T5302] ? clear_bhb_loop+0x50/0xa0 [ 189.480259][ T5302] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 189.480284][ T5302] RIP: 0033:0x7fd5a355d60e [ 189.480302][ T5302] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 189.480321][ T5302] RSP: 002b:00007fd5a451efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 189.480345][ T5302] RAX: ffffffffffffffda RBX: 00007fd5a451f6c0 RCX: 00007fd5a355d60e [ 189.480361][ T5302] RDX: 000000000000000f RSI: 00007fd5a451f0a0 RDI: 0000000000000006 [ 189.480376][ T5302] RBP: 00007fd5a451f090 R08: 0000000000000000 R09: 0000000000000000 [ 189.480390][ T5302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.480404][ T5302] R13: 00007fd5a3816038 R14: 00007fd5a3815fa0 R15: 00007fff1f2659b8 [ 189.480421][ T5302] [ 189.736754][ T316] usb 2-1: device descriptor read/64, error -71 [ 189.744214][ T45] usb 4-1: device descriptor read/8, error -71 [ 189.867237][ T345] usb 1-1: device descriptor read/64, error -71 [ 189.977268][ T316] usb 2-1: device descriptor read/64, error -71 [ 189.977410][ T345] usb usb1-port1: attempt power cycle [ 189.989213][ T45] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 190.008478][ T45] usb 4-1: device descriptor read/8, error -71 [ 190.138502][ T45] usb 4-1: device descriptor read/8, error -71 [ 190.217269][ T316] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 190.247381][ T45] usb usb4-port1: unable to enumerate USB device [ 190.327235][ T345] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 190.347298][ T316] usb 2-1: device descriptor read/64, error -71 [ 190.348331][ T345] usb 1-1: device descriptor read/8, error -71 [ 190.488362][ T345] usb 1-1: device descriptor read/8, error -71 [ 190.542638][ T36] audit: type=1400 audit(1777372572.945:1031): avc: denied { nlmsg_read } for pid=5321 comm="syz.4.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 190.575385][ T5325] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 190.575505][ T5325] rust_binder: Write failure EINVAL in pid:219 [ 190.587248][ T316] usb 2-1: device descriptor read/64, error -71 [ 190.707535][ T316] usb usb2-port1: attempt power cycle [ 190.727232][ T345] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 190.757370][ T345] usb 1-1: device descriptor read/8, error -71 [ 190.803248][ T5339] FAULT_INJECTION: forcing a failure. [ 190.803248][ T5339] name failslab, interval 1, probability 0, space 0, times 0 [ 190.816381][ T5339] CPU: 0 UID: 0 PID: 5339 Comm: syz.4.1675 Not tainted syzkaller #0 59845a3e7facf6968a53e2150c0cf8787c039bda [ 190.816417][ T5339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 190.816430][ T5339] Call Trace: [ 190.816437][ T5339] [ 190.816445][ T5339] __dump_stack+0x21/0x30 [ 190.816476][ T5339] dump_stack_lvl+0x140/0x1c0 [ 190.816502][ T5339] ? __cfi_dump_stack_lvl+0x10/0x10 [ 190.816529][ T5339] ? iov_iter_get_pages2+0x68/0xb0 [ 190.816551][ T5339] dump_stack+0x19/0x20 [ 190.816576][ T5339] should_fail_ex+0x3d7/0x530 [ 190.816602][ T5339] should_failslab+0xac/0x100 [ 190.816625][ T5339] __kmalloc_cache_noprof+0x41/0x470 [ 190.816656][ T5339] ? fuse_copy_do+0x155/0x2c0 [ 190.816677][ T5339] ? fuse_dev_do_write+0xb22/0x3be0 [ 190.816700][ T5339] fuse_dev_do_write+0xb22/0x3be0 [ 190.816722][ T5339] ? is_bpf_text_address+0x17b/0x1a0 [ 190.816751][ T5339] ? folio_mapped+0x120/0x120 [ 190.816771][ T5339] ? __kernel_text_address+0x11/0x40 [ 190.816796][ T5339] ? unwind_get_return_address+0x51/0x90 [ 190.816820][ T5339] ? arch_stack_walk+0x10a/0x170 [ 190.816850][ T5339] ? _parse_integer_limit+0x195/0x1e0 [ 190.816876][ T5339] ? _parse_integer+0x2e/0x40 [ 190.816900][ T5339] ? kstrtoull+0x13b/0x1e0 [ 190.816924][ T5339] ? kstrtouint+0x78/0xf0 [ 190.816948][ T5339] ? kstrtouint_from_user+0x117/0x170 [ 190.816975][ T5339] fuse_dev_write+0x176/0x210 [ 190.816994][ T5339] ? __cfi_fuse_dev_write+0x10/0x10 [ 190.817015][ T5339] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 190.817042][ T5339] vfs_write+0x764/0xf90 [ 190.817072][ T5339] ? __cfi_vfs_write+0x10/0x10 [ 190.817102][ T5339] ksys_write+0x145/0x260 [ 190.817140][ T5339] ? __cfi_ksys_write+0x10/0x10 [ 190.817174][ T5339] ? __kasan_check_read+0x15/0x20 [ 190.817202][ T5339] __x64_sys_write+0x7f/0x90 [ 190.817230][ T5339] x64_sys_call+0x271c/0x2ee0 [ 190.817258][ T5339] do_syscall_64+0x57/0xf0 [ 190.817281][ T5339] ? clear_bhb_loop+0x50/0xa0 [ 190.817307][ T5339] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 190.817331][ T5339] RIP: 0033:0x7fd5a359cdd9 [ 190.817350][ T5339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.817369][ T5339] RSP: 002b:00007fd5a451f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 190.817393][ T5339] RAX: ffffffffffffffda RBX: 00007fd5a3815fa0 RCX: 00007fd5a359cdd9 [ 190.817410][ T5339] RDX: 000000000000003e RSI: 0000200000000000 RDI: 0000000000000004 [ 190.817424][ T5339] RBP: 00007fd5a451f090 R08: 0000000000000000 R09: 0000000000000000 [ 190.817438][ T5339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.817453][ T5339] R13: 00007fd5a3816038 R14: 00007fd5a3815fa0 R15: 00007fff1f2659b8 [ 190.817472][ T5339] [ 190.989616][ T345] usb 1-1: device descriptor read/8, error -71 [ 191.057236][ T316] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 191.118261][ T316] usb 2-1: device descriptor read/8, error -71 [ 191.167409][ T345] usb usb1-port1: unable to enumerate USB device [ 191.256113][ T316] usb 2-1: device descriptor read/8, error -71 [ 191.349215][ T5353] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 191.358958][ T5353] SELinux: failed to load policy [ 191.400017][ T36] audit: type=1400 audit(1777372573.805:1032): avc: denied { create } for pid=5354 comm="syz.4.1681" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 191.421131][ T36] audit: type=1400 audit(1777372573.805:1033): avc: denied { write } for pid=5354 comm="syz.4.1681" name="file0" dev="tmpfs" ino=516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 191.492604][ T36] audit: type=1400 audit(1777372573.895:1034): avc: denied { unlink } for pid=4658 comm="syz-executor" name="file0" dev="tmpfs" ino=516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 191.515981][ T316] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 191.524049][ T5358] loop6: detected capacity change from 0 to 8 [ 191.548324][ T316] usb 2-1: device descriptor read/8, error -71 [ 191.574713][ T61] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 191.584083][ T61] Buffer I/O error on dev loop6, logical block 0, async page read [ 191.592197][ T5358] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 191.601849][ T5358] Buffer I/O error on dev loop6, logical block 0, async page read [ 191.609854][ T5358] loop6: unable to read partition table [ 191.615652][ T5358] loop_reread_partitions: partition scan of loop6 (Nh*hp "o?< ʺXDbp0O{>.) failed (rc=-5) [ 191.657239][ T472] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 191.678620][ T316] usb 2-1: device descriptor read/8, error -71 [ 191.739073][ T5366] bridge0: port 3(gretap0) entered blocking state [ 191.745621][ T5366] bridge0: port 3(gretap0) entered disabled state [ 191.752442][ T5366] gretap0: entered allmulticast mode [ 191.758479][ T5366] gretap0: entered promiscuous mode [ 191.763752][ T5366] bridge0: port 3(gretap0) entered blocking state [ 191.770374][ T5366] bridge0: port 3(gretap0) entered forwarding state [ 191.790232][ T316] usb usb2-port1: unable to enumerate USB device [ 191.808348][ T472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 87, changing to 10 [ 191.820547][ T472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49416, setting to 1024 [ 191.832205][ T472] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 191.841437][ T472] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.862489][ T472] usb 1-1: config 0 descriptor?? [ 191.917326][ T345] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 192.051950][ T5376] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 192.061666][ T5376] SELinux: failed to load policy [ 192.067327][ T345] usb 4-1: Using ep0 maxpacket: 32 [ 192.074433][ T345] usb 4-1: unable to get BOS descriptor or descriptor too short [ 192.095633][ T5378] FAULT_INJECTION: forcing a failure. [ 192.095633][ T5378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.117223][ T345] usb 4-1: config 1 has an invalid descriptor of length 34, skipping remainder of the config [ 192.127660][ T345] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 192.133173][ T5378] CPU: 0 UID: 0 PID: 5378 Comm: syz.4.1690 Not tainted syzkaller #0 59845a3e7facf6968a53e2150c0cf8787c039bda [ 192.133211][ T5378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 192.133224][ T5378] Call Trace: [ 192.133231][ T5378] [ 192.133239][ T5378] __dump_stack+0x21/0x30 [ 192.133271][ T5378] dump_stack_lvl+0x140/0x1c0 [ 192.133299][ T5378] ? __cfi_dump_stack_lvl+0x10/0x10 [ 192.133324][ T5378] ? check_stack_object+0x12b/0x150 [ 192.133352][ T5378] dump_stack+0x19/0x20 [ 192.133375][ T5378] should_fail_ex+0x3d7/0x530 [ 192.133400][ T5378] should_fail+0xf/0x20 [ 192.133423][ T5378] should_fail_usercopy+0x1e/0x30 [ 192.133449][ T5378] _copy_to_user+0x24/0xa0 [ 192.133468][ T5378] simple_read_from_buffer+0xed/0x160 [ 192.133492][ T5378] proc_fail_nth_read+0x1aa/0x220 [ 192.133515][ T5378] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 192.133538][ T5378] ? bpf_lsm_file_permission+0xd/0x20 [ 192.133561][ T5378] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 192.133584][ T5378] vfs_read+0x289/0xcb0 [ 192.133609][ T5378] ? __cfi_vfs_read+0x10/0x10 [ 192.133633][ T5378] ? __kasan_check_write+0x18/0x20 [ 192.133658][ T5378] ? mutex_lock+0x97/0x1d0 [ 192.133684][ T5378] ? __cfi_mutex_lock+0x10/0x10 [ 192.133716][ T5378] ? __fget_files+0x2c5/0x340 [ 192.133736][ T5378] ksys_read+0x145/0x260 [ 192.133761][ T5378] ? __cfi_ksys_read+0x10/0x10 [ 192.133786][ T5378] ? __kasan_check_read+0x15/0x20 [ 192.133812][ T5378] __x64_sys_read+0x7f/0x90 [ 192.133837][ T5378] x64_sys_call+0x2638/0x2ee0 [ 192.133863][ T5378] do_syscall_64+0x57/0xf0 [ 192.133884][ T5378] ? clear_bhb_loop+0x50/0xa0 [ 192.133908][ T5378] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 192.133930][ T5378] RIP: 0033:0x7fd5a355d60e [ 192.133947][ T5378] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 192.133965][ T5378] RSP: 002b:00007fd5a451efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 192.133995][ T5378] RAX: ffffffffffffffda RBX: 00007fd5a451f6c0 RCX: 00007fd5a355d60e [ 192.134011][ T5378] RDX: 000000000000000f RSI: 00007fd5a451f0a0 RDI: 0000000000000005 [ 192.134024][ T5378] RBP: 00007fd5a451f090 R08: 0000000000000000 R09: 0000000000000000 [ 192.134038][ T5378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.134056][ T5378] R13: 00007fd5a3816038 R14: 00007fd5a3815fa0 R15: 00007fff1f2659b8 [ 192.134073][ T5378] [ 192.276990][ T472] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 192.282675][ T345] usb 4-1: New USB device found, idVendor=15ca, idProduct=0100, bcdDevice= 0.40 [ 192.296484][ T472] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0013/input/input61 [ 192.299776][ T345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.377340][ T472] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 192.379170][ T345] usb 4-1: Product: syz [ 192.431816][ T5383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.432641][ T345] usb 4-1: Manufacturer: syz [ 192.438052][ T5383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.445012][ T345] usb 4-1: SerialNumber: syz [ 192.492305][ C0] usb 1-1: input irq status -75 received [ 192.669914][ T345] usb 4-1: MIDIStreaming interface descriptor not found [ 192.680617][ T345] usb 4-1: USB disconnect, device number 82 [ 192.693603][ T1678] udevd[1678]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 192.714356][ T31] usb 1-1: USB disconnect, device number 82 [ 192.748183][ T36] audit: type=1400 audit(1777372575.155:1035): avc: denied { execmem } for pid=5388 comm="syz.1.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 192.767057][ T5391] loop6: detected capacity change from 0 to 8 [ 192.939276][ T5394] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 192.939369][ T5394] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 192.953078][ T5394] rust_binder: Write failure EINVAL in pid:1040 [ 193.182072][ T5404] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1700'. [ 193.207746][ T31] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 193.211233][ T5408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.224227][ T5408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.347262][ T31] usb 2-1: device descriptor read/64, error -71 [ 193.427285][ T345] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 193.547374][ T472] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 193.578522][ T345] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.588961][ T31] usb 2-1: device descriptor read/64, error -71 [ 193.595332][ T345] usb 4-1: config 0 has no interfaces? [ 193.601055][ T345] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 193.610184][ T345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.618892][ T345] usb 4-1: config 0 descriptor?? [ 193.708332][ T472] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 193.719273][ T472] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 193.732088][ T472] usb 1-1: config 0 interface 0 has no altsetting 0 [ 193.738810][ T472] usb 1-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 193.748239][ T472] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.757787][ T472] usb 1-1: config 0 descriptor?? [ 193.763074][ T5410] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 193.827220][ T31] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 193.840421][ T307] usb 4-1: USB disconnect, device number 83 [ 193.957334][ T31] usb 2-1: device descriptor read/64, error -71 [ 194.180281][ T472] uclogic 0003:28BD:0055.0014: interface is invalid, ignoring [ 194.197271][ T31] usb 2-1: device descriptor read/64, error -71 [ 194.307374][ T31] usb usb2-port1: attempt power cycle [ 194.390848][ T345] usb 1-1: USB disconnect, device number 83 [ 194.647243][ T31] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 194.647585][ T5428] SELinux: policydb magic number 0x67632f2e does not match expected magic number 0xf97cff8c [ 194.666351][ T5428] SELinux: failed to load policy [ 194.678346][ T31] usb 2-1: device descriptor read/8, error -71 [ 194.691142][ T5430] loop6: detected capacity change from 0 to 8 [ 194.741676][ T61] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.750990][ T61] Buffer I/O error on dev loop6, logical block 0, async page read [ 194.759191][ T5430] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.786424][ T5430] Buffer I/O error on dev loop6, logical block 0, async page read [ 194.795347][ T5430] loop6: unable to read partition table [ 194.804691][ T5430] loop_reread_partitions: partition scan of loop6 (Nh*hp "o?< ʺXDbp0O{>.) failed (rc=-5) [ 194.822005][ T31] usb 2-1: device descriptor read/8, error -71 [ 194.895824][ T5438] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1713'. [ 194.938701][ T5442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.955177][ T5442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.989515][ T5444] random: crng reseeded on system resumption [ 194.997204][ T36] audit: type=1400 audit(1777372577.395:1036): avc: denied { write } for pid=5443 comm="syz.0.1716" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 195.023289][ T36] audit: type=1400 audit(1777372577.395:1037): avc: denied { open } for pid=5443 comm="syz.0.1716" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 195.047248][ T36] audit: type=1400 audit(1777372577.435:1038): avc: denied { ioctl } for pid=5443 comm="syz.0.1716" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x330b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 195.067237][ T31] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 195.098365][ T31] usb 2-1: device descriptor read/8, error -71 [ 195.228481][ T31] usb 2-1: device descriptor read/8, error -71 [ 195.257268][ T316] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 195.287290][ T45] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 195.337343][ T31] usb usb2-port1: unable to enumerate USB device [ 195.408450][ T316] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 195.420130][ T316] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 195.431174][ T316] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 195.442457][ T316] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 195.448295][ T45] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 195.451618][ T316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.463740][ T45] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 195.477274][ T5446] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 195.485913][ T45] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 195.500438][ T5452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.507896][ T45] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 195.512459][ T5452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.520542][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.535865][ T5449] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 196.065255][ T5465] netlink: 'syz.4.1723': attribute type 4 has an invalid length. [ 196.101791][ T5473] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.101874][ T5473] rust_binder: Write failure EINVAL in pid:308 [ 196.122351][ T5475] rust_binder: Write failure EINVAL in pid:310 [ 196.870884][ T316] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 196.902468][ T316] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input62 [ 197.447459][ T5499] netlink: 'syz.4.1735': attribute type 4 has an invalid length. [ 197.457664][ T45] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 197.477451][ T45] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input63 [ 197.528139][ T5501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.536982][ T5501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.558987][ T5501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.577662][ T5501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.617282][ T316] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 197.781657][ T316] usb 2-1: New USB device found, idVendor=0499, idProduct=5001, bcdDevice= 0.40 [ 197.791074][ T316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.799348][ T316] usb 2-1: Product: ࠬ [ 197.803578][ T316] usb 2-1: Manufacturer: ц [ 197.808229][ T316] usb 2-1: SerialNumber: 㰊 [ 198.026334][ T316] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 198.036408][ T316] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 198.048474][ T316] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 198.059341][ T316] usb 2-1: USB disconnect, device number 95 [ 198.087561][ T591] udevd[591]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 198.396359][ T45] usb 4-1: USB disconnect, device number 84 [ 198.396414][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 198.423851][ T5508] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1739'. [ 198.480272][ T31] usb 1-1: USB disconnect, device number 84 [ 198.480391][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 198.619619][ T5523] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1745'. [ 198.629128][ T5523] gretap0: entered promiscuous mode [ 198.635913][ T5523] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1745'. [ 198.645120][ T5523] 0{X: renamed from gretap0 [ 198.651170][ T5523] 0{X: left promiscuous mode [ 198.656492][ T5523] 0{X: entered allmulticast mode [ 198.662829][ T5523] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 198.857263][ T45] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 199.007274][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 199.018770][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 199.030312][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 199.041672][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 199.051667][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 199.063751][ T45] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 199.074043][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 199.084681][ T45] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x75, changing to 0x5 [ 199.098778][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 8192, setting to 1024 [ 199.110897][ T45] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 199.123738][ T5539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.132504][ T5539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.135099][ T45] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 199.149594][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.159816][ T45] usb 2-1: Product: syz [ 199.164075][ T45] usb 2-1: Manufacturer: syz [ 199.168943][ T45] usb 2-1: SerialNumber: syz [ 199.174922][ T45] usb 2-1: config 0 descriptor?? [ 199.182814][ T5521] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 199.395204][ T5521] fuse: Bad value for 'fd' [ 199.400249][ T45] usb 2-1: USB disconnect, device number 96 [ 199.437313][ T472] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 199.547390][ T36] audit: type=1400 audit(1777372581.955:1039): avc: denied { ioctl } for pid=5542 comm="syz.3.1752" path="/dev/usbmon5" dev="devtmpfs" ino=106 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 199.588505][ T472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.599552][ T472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.610505][ T472] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 199.619646][ T472] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 199.628037][ T472] usb 1-1: Manufacturer: syz [ 199.633923][ T472] usb 1-1: config 0 descriptor?? [ 199.685461][ T36] audit: type=1400 audit(1777372582.085:1040): avc: denied { mounton } for pid=5544 comm="syz.4.1753" path="/132/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 199.687045][ T5545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.710138][ T36] audit: type=1400 audit(1777372582.085:1041): avc: denied { read } for pid=5544 comm="syz.4.1753" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 199.717603][ T5545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.740826][ T36] audit: type=1400 audit(1777372582.085:1042): avc: denied { open } for pid=5544 comm="syz.4.1753" path="/132/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 199.797275][ T316] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 199.948360][ T316] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 199.956584][ T316] usb 4-1: config 0 has no interface number 0 [ 199.966094][ T316] usb 4-1: config 0 interface 41 has no altsetting 0 [ 199.976052][ T316] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 199.985497][ T316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.993868][ T316] usb 4-1: Product: syz [ 199.998170][ T316] usb 4-1: Manufacturer: syz [ 200.002913][ T316] usb 4-1: SerialNumber: syz [ 200.008971][ T316] usb 4-1: config 0 descriptor?? [ 200.051664][ T472] uclogic 0003:256C:006D.0015: failed retrieving string descriptor #100: -71 [ 200.068612][ T472] uclogic 0003:256C:006D.0015: failed retrieving pen parameters: -71 [ 200.078595][ T472] uclogic 0003:256C:006D.0015: failed probing pen v1 parameters: -71 [ 200.087090][ T472] uclogic 0003:256C:006D.0015: failed probing parameters: -71 [ 200.100075][ T472] uclogic 0003:256C:006D.0015: probe with driver uclogic failed with error -71 [ 200.111574][ T472] usb 1-1: USB disconnect, device number 85 [ 200.297926][ T5569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.306849][ T5569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.587517][ T472] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 200.738591][ T472] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 200.750543][ T472] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 200.760734][ T472] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.769482][ T472] usb 1-1: Product: syz [ 200.773932][ T472] usb 1-1: Manufacturer: syz [ 200.779065][ T472] usb 1-1: SerialNumber: syz [ 200.818703][ T316] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 200.837573][ T316] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 200.842618][ T5571] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1762'. [ 200.855315][ T36] audit: type=1400 audit(1777372583.245:1043): avc: granted { setsecparam } for pid=5570 comm="syz.4.1762" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 200.859639][ T5571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.880105][ T316] usb 4-1: USB disconnect, device number 85 [ 200.886429][ T5571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.989312][ T5563] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 201.104585][ T5581] netlink: 'syz.1.1767': attribute type 12 has an invalid length. [ 201.442444][ T5597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.451101][ T5597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.457235][ T31] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 201.618445][ T31] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 201.630447][ T31] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 201.641867][ T31] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 201.653475][ T31] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 201.662814][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.673992][ T5587] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 201.800867][ T5563] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 202.014250][ T472] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 202.021279][ T472] cdc_ncm 1-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 202.033097][ T472] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 202.507938][ T316] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 202.658632][ T316] usb 4-1: unable to get BOS descriptor or descriptor too short [ 202.669894][ T316] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 202.672882][ T5629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.682054][ T316] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 251, changing to 7 [ 202.690003][ T5629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.706204][ T472] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 202.721577][ T316] usb 4-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 202.732120][ T472] usb 1-1: USB disconnect, device number 86 [ 202.739360][ T316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.749439][ T472] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 202.760811][ T316] usb 4-1: Product: syz [ 202.765020][ T316] usb 4-1: Manufacturer: syz [ 202.771869][ T316] usb 4-1: SerialNumber: syz [ 202.984630][ T5610] syz.3.1779 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 203.051509][ T316] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 203.058799][ T316] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 203.066273][ T316] usb 4-1: unable to issue vendor read request (ret = -71) [ 203.074005][ T316] usb 4-1: unable to issue vendor read request (ret = -71) [ 203.081644][ T316] usb 4-1: unable to issue vendor read request (ret = -71) [ 203.089509][ T316] usb 4-1: unable to issue vendor read request (ret = -71) [ 203.097242][ T316] usb 4-1: unable to issue vendor read request (ret = -71) [ 203.104817][ T316] usb 4-1: unable to issue vendor read request (ret = -71) [ 203.112802][ T316] usb 4-1: unable to issue vendor read request (ret = -71) [ 203.120629][ T316] usb 4-1: unable to issue vendor read request (ret = -71) [ 203.133561][ T316] usb 4-1: USB disconnect, device number 86 [ 203.487225][ T345] usb 1-1: new low-speed USB device number 87 using dummy_hcd [ 203.607758][ T31] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 203.625460][ T31] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input64 [ 203.638758][ T345] usb 1-1: unable to get BOS descriptor or descriptor too short [ 203.654521][ T345] usb 1-1: too many endpoints for config 1 interface 0 altsetting 128: 253, using maximum allowed: 30 [ 203.668478][ T345] usb 1-1: config 1 interface 0 altsetting 128 endpoint 0x82 is Bulk; changing to Interrupt [ 203.680812][ T345] usb 1-1: config 1 interface 0 altsetting 128 endpoint 0x3 is Bulk; changing to Interrupt [ 203.692364][ T345] usb 1-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 203.706160][ T345] usb 1-1: config 1 interface 0 has no altsetting 0 [ 203.717504][ T345] usb 1-1: string descriptor 0 read error: -22 [ 203.723980][ T345] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.742043][ T345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.759733][ T5660] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 203.767051][ T5660] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 203.782625][ T345] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 203.977256][ T316] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 204.014516][ T9] usb 1-1: USB disconnect, device number 87 [ 204.141005][ T5672] netlink: 'syz.4.1790': attribute type 12 has an invalid length. [ 204.150045][ T316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 87, changing to 10 [ 204.161269][ T316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49416, setting to 1024 [ 204.172758][ T316] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 204.181877][ T316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.191120][ T316] usb 4-1: config 0 descriptor?? [ 204.584251][ T36] audit: type=1400 audit(1777372586.985:1044): avc: denied { name_bind } for pid=5677 comm="syz.0.1792" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 204.606692][ T5678] fuse: Unknown parameter 'cU# [ 204.606692][ T5678] ZXE" [BK0x0000000000000006' [ 204.877254][ T9] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 205.030991][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 205.037812][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 205.048520][ T9] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 205.060552][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.068966][ T9] usb 1-1: Product: syz [ 205.073932][ T9] usb 1-1: Manufacturer: syz [ 205.078612][ T9] usb 1-1: SerialNumber: syz [ 205.084191][ T9] usb 1-1: config 0 descriptor?? [ 205.090617][ T9] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 205.099296][ T9] usb 1-1: Detected FT232B [ 205.121170][ T472] usb 2-1: USB disconnect, device number 97 [ 205.121320][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 205.158388][ T5686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1796'. [ 205.169023][ T5686] fuse: Unknown parameter '*zgW #' [ 205.272359][ T5696] overlayfs: overlapping lowerdir path [ 205.272817][ T5693] netlink: 'syz.4.1799': attribute type 4 has an invalid length. [ 205.352687][ T5704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.361345][ T5704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.397376][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 205.415094][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 205.423457][ T9] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 205.433885][ T9] usb 1-1: USB disconnect, device number 88 [ 205.447820][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 205.463493][ T9] ftdi_sio 1-1:0.0: device disconnected [ 205.928336][ T36] audit: type=1400 audit(1777372588.335:1045): avc: denied { read } for pid=5722 comm="syz.4.1811" name="file0" dev="tmpfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 205.930138][ T5723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.962990][ T5723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.974988][ T36] audit: type=1400 audit(1777372588.335:1046): avc: denied { open } for pid=5722 comm="syz.4.1811" path="/159/file0" dev="tmpfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 206.500193][ T5736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.509373][ T5736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.571152][ T5738] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1818'. [ 206.577260][ T307] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 206.693195][ T5744] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1820'. [ 206.702429][ T5744] IPv6: NLM_F_CREATE should be specified when creating new route [ 206.747289][ T307] usb 1-1: Using ep0 maxpacket: 16 [ 206.755590][ T307] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 206.776837][ T307] usb 1-1: config 1 has no interface number 0 [ 206.783232][ T307] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 206.794791][ T316] usbhid 4-1:0.0: can't add hid device: -71 [ 206.801152][ T307] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 206.811674][ T316] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 206.820894][ T316] usb 4-1: USB disconnect, device number 87 [ 206.827257][ T307] usb 1-1: config 1 interface 105 has no altsetting 0 [ 206.842154][ T307] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 206.853861][ T307] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 206.858024][ T5749] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 206.862037][ T307] usb 1-1: Product: syz [ 206.863483][ T5749] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1118 [ 206.868739][ T307] usb 1-1: Manufacturer: syz [ 206.887006][ T307] usb 1-1: SerialNumber: syz [ 206.893735][ T5734] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 206.902498][ T5734] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 207.167224][ T345] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 207.167237][ T316] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 207.331263][ T5734] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 207.340693][ T5734] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 207.340766][ T345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 207.348244][ T316] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.367268][ T345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 207.367984][ T316] usb 4-1: config 0 has no interfaces? [ 207.384576][ T316] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 207.393934][ T316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.398256][ T345] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 207.405175][ T316] usb 4-1: config 0 descriptor?? [ 207.427230][ T345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.435291][ T345] usb 2-1: Product: syz [ 207.439839][ T345] usb 2-1: Manufacturer: syz [ 207.445786][ T345] usb 2-1: SerialNumber: syz [ 207.452075][ T345] usb 2-1: config 0 descriptor?? [ 207.585893][ T307] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 207.598930][ T307] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71 [ 207.618292][ T307] usb 1-1: USB disconnect, device number 89 [ 207.642008][ T45] usb 4-1: USB disconnect, device number 88 [ 207.662285][ T345] usb 2-1: USB disconnect, device number 98 [ 207.679809][ T1678] udevd[1678]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 207.680545][ T591] udevd[591]: setting mode of /dev/snd/pcmC0D0p to 020660 failed: No such file or directory [ 207.709207][ T591] udevd[591]: setting owner of /dev/snd/pcmC0D0p to uid=0, gid=29 failed: No such file or directory [ 208.195228][ T5778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.204093][ T5778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.357281][ T307] usb 1-1: new low-speed USB device number 90 using dummy_hcd [ 208.467220][ T345] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 208.497234][ T307] usb 1-1: device descriptor read/64, error -71 [ 208.607216][ T345] usb 2-1: device descriptor read/64, error -71 [ 208.734202][ T5788] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1838'. [ 208.743518][ T307] usb 1-1: device descriptor read/64, error -71 [ 208.778217][ T36] audit: type=1400 audit(1777372591.185:1047): avc: denied { ioctl } for pid=5787 comm="syz.4.1838" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x6f03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 208.810355][ T5788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.820474][ T5788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.847228][ T345] usb 2-1: device descriptor read/64, error -71 [ 208.987218][ T307] usb 1-1: new low-speed USB device number 91 using dummy_hcd [ 209.097238][ T345] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 209.126743][ T307] usb 1-1: device descriptor read/64, error -71 [ 209.227225][ T345] usb 2-1: device descriptor read/64, error -71 [ 209.367293][ T307] usb 1-1: device descriptor read/64, error -71 [ 209.477375][ T307] usb usb1-port1: attempt power cycle [ 209.497234][ T345] usb 2-1: device descriptor read/64, error -71 [ 209.531646][ T5797] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1842'. [ 209.587374][ T316] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 209.600907][ T36] audit: type=1400 audit(1777372592.005:1048): avc: denied { accept } for pid=5798 comm="syz.4.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 209.607425][ T345] usb usb2-port1: attempt power cycle [ 209.738417][ T316] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 209.753066][ T316] usb 4-1: config 0 has no interface number 0 [ 209.759988][ T316] usb 4-1: config 0 interface 41 has no altsetting 0 [ 209.768949][ T316] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 209.778681][ T316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.786996][ T316] usb 4-1: Product: syz [ 209.791329][ T316] usb 4-1: Manufacturer: syz [ 209.796048][ T316] usb 4-1: SerialNumber: syz [ 209.802055][ T316] usb 4-1: config 0 descriptor?? [ 209.827264][ T307] usb 1-1: new low-speed USB device number 92 using dummy_hcd [ 209.848496][ T307] usb 1-1: device descriptor read/8, error -71 [ 209.851357][ T5808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.864188][ T5808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.957269][ T345] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 209.978402][ T345] usb 2-1: device descriptor read/8, error -71 [ 209.988209][ T307] usb 1-1: device descriptor read/8, error -71 [ 210.108373][ T345] usb 2-1: device descriptor read/8, error -71 [ 210.227249][ T307] usb 1-1: new low-speed USB device number 93 using dummy_hcd [ 210.248278][ T307] usb 1-1: device descriptor read/8, error -71 [ 210.347281][ T345] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 210.368377][ T345] usb 2-1: device descriptor read/8, error -71 [ 210.395285][ T307] usb 1-1: device descriptor read/8, error -71 [ 210.498396][ T345] usb 2-1: device descriptor read/8, error -71 [ 210.507296][ T307] usb usb1-port1: unable to enumerate USB device [ 210.607288][ T345] usb usb2-port1: unable to enumerate USB device [ 210.617256][ T316] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 210.637267][ T316] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 210.648758][ T316] usb 4-1: USB disconnect, device number 89 [ 210.787908][ T5828] rust_binder: Write failure EFAULT in pid:469 [ 210.788787][ T5828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.803954][ T5828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.255883][ T1178] tipc: Subscription rejected, illegal request [ 211.276930][ T5842] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1858'. [ 211.328946][ T5848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.338018][ T5848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.387208][ T472] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 211.527237][ T316] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 211.547218][ T472] usb 4-1: Using ep0 maxpacket: 32 [ 211.556070][ T472] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 211.565600][ T472] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.573923][ T472] usb 4-1: Product: syz [ 211.578962][ T472] usb 4-1: Manufacturer: syz [ 211.584096][ T472] usb 4-1: SerialNumber: syz [ 211.656421][ T1142] Bluetooth: hci0: Frame reassembly failed (-84) [ 211.658259][ T36] audit: type=1400 audit(1777372594.055:1049): avc: denied { read } for pid=5863 comm="syz.1.1865" path="socket:[50633]" dev="sockfs" ino=50633 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 211.678370][ T316] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 211.698169][ T316] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 211.709449][ T316] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 211.721086][ T316] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 211.730371][ T316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.740400][ T5834] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 211.850004][ T472] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 211.861085][ T472] usb 4-1: USB disconnect, device number 90 [ 211.935182][ T5867] netlink: 'syz.4.1866': attribute type 12 has an invalid length. [ 211.947257][ T64] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 212.118434][ T64] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 212.131407][ T64] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.141668][ T64] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 212.154611][ T64] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 212.163866][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.172682][ T64] usb 2-1: config 0 descriptor?? [ 212.178956][ T64] usb-storage 2-1:0.0: USB Mass Storage device detected [ 212.186806][ T64] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 212.231554][ T5884] tmpfs: Bad value for 'huge' [ 212.245124][ T5886] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 212.262604][ T46] Bluetooth: hci1: Frame reassembly failed (-84) [ 212.263814][ T36] audit: type=1400 audit(1777372594.665:1050): avc: denied { read } for pid=5885 comm="syz.4.1872" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 212.318543][ T5888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.327594][ T5888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.371425][ T5890] netlink: 'syz.3.1873': attribute type 4 has an invalid length. [ 212.391514][ T5892] No source specified [ 212.395716][ T36] audit: type=1400 audit(1777372594.795:1051): avc: denied { mounton } for pid=5885 comm="syz.4.1872" path="/189/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 213.252571][ T5904] netlink: 'syz.3.1878': attribute type 12 has an invalid length. [ 213.278580][ T5907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.294244][ T5907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.366708][ T5911] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1880'. [ 213.677717][ T316] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 213.686673][ T316] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input66 [ 213.697225][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 213.709653][ T472] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 213.867214][ T472] usb 4-1: Using ep0 maxpacket: 32 [ 213.874282][ T472] usb 4-1: unable to get BOS descriptor or descriptor too short [ 213.883346][ T472] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.893881][ T472] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 213.903298][ T472] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 213.915921][ T472] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 213.925336][ T472] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.933495][ T472] usb 4-1: Product: syz [ 213.937834][ T472] usb 4-1: Manufacturer: syz [ 213.942540][ T472] usb 4-1: SerialNumber: syz [ 214.021585][ T1142] bridge_slave_1: left allmulticast mode [ 214.027706][ T1142] bridge_slave_1: left promiscuous mode [ 214.033503][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.041505][ T1142] bridge_slave_0: left allmulticast mode [ 214.047423][ T1142] bridge_slave_0: left promiscuous mode [ 214.053352][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.152802][ T472] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 214.160983][ T472] usb 4-1: 1:1 : format type 10 is not supported yet [ 214.168462][ T472] usb 4-1: 0:2 : does not exist [ 214.177354][ T472] usb 4-1: unit 4 not found! [ 214.183964][ T1142] veth1_macvtap: left promiscuous mode [ 214.187406][ T472] usb 4-1: USB disconnect, device number 91 [ 214.191212][ T1142] veth0_vlan: left promiscuous mode [ 214.202103][ T591] udevd[591]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 214.337248][ T1687] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 214.337266][ T54] Bluetooth: hci1: command 0x1003 tx timeout [ 214.509033][ T1142] bridge_slave_1: left allmulticast mode [ 214.514821][ T1142] bridge_slave_1: left promiscuous mode [ 214.521547][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.529428][ T1142] bridge_slave_0: left allmulticast mode [ 214.535291][ T1142] bridge_slave_0: left promiscuous mode [ 214.541085][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.650056][ T1142] tipc: Left network mode [ 214.660454][ T1142] veth1_macvtap: left promiscuous mode [ 214.666195][ T1142] veth0_vlan: left promiscuous mode [ 214.680943][ T472] usb 2-1: USB disconnect, device number 103 [ 214.884372][ T5932] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5932 comm=syz.1.1889 [ 215.212702][ T472] usb 1-1: USB disconnect, device number 94 [ 215.212741][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 215.257741][ T5939] FAULT_INJECTION: forcing a failure. [ 215.257741][ T5939] name failslab, interval 1, probability 0, space 0, times 0 [ 215.276847][ T5939] CPU: 1 UID: 0 PID: 5939 Comm: syz.0.1892 Not tainted syzkaller #0 59845a3e7facf6968a53e2150c0cf8787c039bda [ 215.276882][ T5939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 215.276898][ T5939] Call Trace: [ 215.276907][ T5939] [ 215.276914][ T5939] __dump_stack+0x21/0x30 [ 215.276947][ T5939] dump_stack_lvl+0x140/0x1c0 [ 215.276975][ T5939] ? __cfi_dump_stack_lvl+0x10/0x10 [ 215.277003][ T5939] dump_stack+0x19/0x20 [ 215.277028][ T5939] should_fail_ex+0x3d7/0x530 [ 215.277060][ T5939] should_failslab+0xac/0x100 [ 215.277088][ T5939] __kmalloc_cache_node_noprof+0x46/0x430 [ 215.277120][ T5939] ? __get_vm_area_node+0x14d/0x3d0 [ 215.277146][ T5939] __get_vm_area_node+0x14d/0x3d0 [ 215.277169][ T5939] __vmalloc_node_range_noprof+0x30e/0x1480 [ 215.277196][ T5939] ? sel_write_load+0x235/0x5f0 [ 215.277223][ T5939] ? kernel_text_address+0xa9/0xe0 [ 215.277249][ T5939] ? unwind_get_return_address+0x51/0x90 [ 215.277274][ T5939] ? arch_stack_walk+0x10a/0x170 [ 215.277305][ T5939] ? _parse_integer_limit+0x195/0x1e0 [ 215.277334][ T5939] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 215.277361][ T5939] ? avc_has_perm_noaudit+0x26c/0x360 [ 215.277391][ T5939] ? __asan_memcpy+0x5a/0x80 [ 215.277421][ T5939] ? avc_has_perm_noaudit+0x28a/0x360 [ 215.277452][ T5939] ? sel_write_load+0x235/0x5f0 [ 215.277480][ T5939] vmalloc_noprof+0x103/0x1d0 [ 215.277505][ T5939] ? sel_write_load+0x235/0x5f0 [ 215.277636][ T5939] ? __cfi_avc_has_perm+0x10/0x10 [ 215.277665][ T5939] ? mutex_lock+0x97/0x1d0 [ 215.277695][ T5939] ? __cfi_vmalloc_noprof+0x10/0x10 [ 215.277721][ T5939] sel_write_load+0x235/0x5f0 [ 215.277750][ T5939] ? proc_fail_nth_write+0x184/0x220 [ 215.277777][ T5939] ? __cfi_sel_write_load+0x10/0x10 [ 215.277805][ T5939] ? bpf_lsm_file_permission+0xd/0x20 [ 215.277830][ T5939] ? __cfi_sel_write_load+0x10/0x10 [ 215.277857][ T5939] vfs_write+0x3c5/0xf90 [ 215.277886][ T5939] ? __cfi_vfs_write+0x10/0x10 [ 215.277916][ T5939] ? __kasan_check_write+0x18/0x20 [ 215.277943][ T5939] ? mutex_lock+0x97/0x1d0 [ 215.277972][ T5939] ? __cfi_mutex_lock+0x10/0x10 [ 215.277999][ T5939] ? __fget_files+0x2c5/0x340 [ 215.278021][ T5939] ksys_write+0x145/0x260 [ 215.278051][ T5939] ? __cfi_ksys_write+0x10/0x10 [ 215.278079][ T5939] ? __kasan_check_read+0x15/0x20 [ 215.278106][ T5939] __x64_sys_write+0x7f/0x90 [ 215.278138][ T5939] x64_sys_call+0x271c/0x2ee0 [ 215.278166][ T5939] do_syscall_64+0x57/0xf0 [ 215.278192][ T5939] ? clear_bhb_loop+0x50/0xa0 [ 215.278219][ T5939] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 215.278244][ T5939] RIP: 0033:0x7f36a519cdd9 [ 215.278267][ T5939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.278285][ T5939] RSP: 002b:00007f36a5fe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 215.278309][ T5939] RAX: ffffffffffffffda RBX: 00007f36a5415fa0 RCX: 00007f36a519cdd9 [ 215.278328][ T5939] RDX: 000000000000fd44 RSI: 0000200000000000 RDI: 0000000000000003 [ 215.278344][ T5939] RBP: 00007f36a5fe6090 R08: 0000000000000000 R09: 0000000000000000 [ 215.278358][ T5939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.278371][ T5939] R13: 00007f36a5416038 R14: 00007f36a5415fa0 R15: 00007fffcf96c918 [ 215.278389][ T5939] [ 215.622229][ T5939] syz.0.1892: vmalloc error: size 64836, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 215.646844][ T5939] CPU: 1 UID: 0 PID: 5939 Comm: syz.0.1892 Not tainted syzkaller #0 59845a3e7facf6968a53e2150c0cf8787c039bda [ 215.646879][ T5939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 215.646892][ T5939] Call Trace: [ 215.646900][ T5939] [ 215.646908][ T5939] __dump_stack+0x21/0x30 [ 215.646943][ T5939] dump_stack_lvl+0x140/0x1c0 [ 215.646969][ T5939] ? __cfi_dump_stack_lvl+0x10/0x10 [ 215.646999][ T5939] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 215.647026][ T5939] dump_stack+0x19/0x20 [ 215.647050][ T5939] warn_alloc+0x1e7/0x2c0 [ 215.647079][ T5939] ? __kasan_kmalloc+0x28/0xb0 [ 215.647099][ T5939] ? __cfi_warn_alloc+0x10/0x10 [ 215.647123][ T5939] ? __get_vm_area_node+0x3bd/0x3d0 [ 215.647159][ T5939] __vmalloc_node_range_noprof+0x333/0x1480 [ 215.647185][ T5939] ? kernel_text_address+0xa9/0xe0 [ 215.647210][ T5939] ? unwind_get_return_address+0x51/0x90 [ 215.647234][ T5939] ? arch_stack_walk+0x10a/0x170 [ 215.647263][ T5939] ? _parse_integer_limit+0x195/0x1e0 [ 215.647285][ T5939] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 215.647307][ T5939] ? avc_has_perm_noaudit+0x26c/0x360 [ 215.647333][ T5939] ? __asan_memcpy+0x5a/0x80 [ 215.647357][ T5939] ? avc_has_perm_noaudit+0x28a/0x360 [ 215.647382][ T5939] ? sel_write_load+0x235/0x5f0 [ 215.647405][ T5939] vmalloc_noprof+0x103/0x1d0 [ 215.647425][ T5939] ? sel_write_load+0x235/0x5f0 [ 215.647448][ T5939] ? __cfi_avc_has_perm+0x10/0x10 [ 215.647472][ T5939] ? mutex_lock+0x97/0x1d0 [ 215.647496][ T5939] ? __cfi_vmalloc_noprof+0x10/0x10 [ 215.647518][ T5939] sel_write_load+0x235/0x5f0 [ 215.647541][ T5939] ? proc_fail_nth_write+0x184/0x220 [ 215.647562][ T5939] ? __cfi_sel_write_load+0x10/0x10 [ 215.647585][ T5939] ? bpf_lsm_file_permission+0xd/0x20 [ 215.647604][ T5939] ? __cfi_sel_write_load+0x10/0x10 [ 215.647627][ T5939] vfs_write+0x3c5/0xf90 [ 215.647651][ T5939] ? __cfi_vfs_write+0x10/0x10 [ 215.647673][ T5939] ? __kasan_check_write+0x18/0x20 [ 215.647696][ T5939] ? mutex_lock+0x97/0x1d0 [ 215.647718][ T5939] ? __cfi_mutex_lock+0x10/0x10 [ 215.647749][ T5939] ? __fget_files+0x2c5/0x340 [ 215.647767][ T5939] ksys_write+0x145/0x260 [ 215.647790][ T5939] ? __cfi_ksys_write+0x10/0x10 [ 215.647814][ T5939] ? __kasan_check_read+0x15/0x20 [ 215.647837][ T5939] __x64_sys_write+0x7f/0x90 [ 215.647861][ T5939] x64_sys_call+0x271c/0x2ee0 [ 215.647885][ T5939] do_syscall_64+0x57/0xf0 [ 215.647904][ T5939] ? clear_bhb_loop+0x50/0xa0 [ 215.647926][ T5939] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 215.647946][ T5939] RIP: 0033:0x7f36a519cdd9 [ 215.647962][ T5939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.647977][ T5939] RSP: 002b:00007f36a5fe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 215.647998][ T5939] RAX: ffffffffffffffda RBX: 00007f36a5415fa0 RCX: 00007f36a519cdd9 [ 215.648012][ T5939] RDX: 000000000000fd44 RSI: 0000200000000000 RDI: 0000000000000003 [ 215.648024][ T5939] RBP: 00007f36a5fe6090 R08: 0000000000000000 R09: 0000000000000000 [ 215.648036][ T5939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.648047][ T5939] R13: 00007f36a5416038 R14: 00007f36a5415fa0 R15: 00007fffcf96c918 [ 215.648062][ T5939] [ 215.972894][ T64] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 215.974439][ T5942] Bluetooth: hci0: Frame reassembly failed (-84) [ 215.986976][ T5939] Mem-Info: [ 215.990932][ T5939] active_anon:65488 inactive_anon:477 isolated_anon:0 [ 215.990932][ T5939] active_file:22295 inactive_file:2725 isolated_file:0 [ 215.990932][ T5939] unevictable:0 dirty:64 writeback:0 [ 215.990932][ T5939] slab_reclaimable:5553 slab_unreclaimable:71539 [ 215.990932][ T5939] mapped:25500 shmem:48539 pagetables:1121 [ 215.990932][ T5939] sec_pagetables:6 bounce:0 [ 215.990932][ T5939] kernel_misc_reclaimable:0 [ 215.990932][ T5939] free:1459682 free_pcp:2028 free_cma:0 [ 215.999333][ T1142] Bluetooth: hci0: Frame reassembly failed (-84) [ 216.038224][ T5939] Node 0 active_anon:261952kB inactive_anon:1908kB active_file:89180kB inactive_file:10900kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:102000kB dirty:256kB writeback:0kB shmem:194156kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5036kB pagetables:4484kB sec_pagetables:24kB all_unreclaimable? no [ 216.078289][ T5939] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963348kB mlocked:0kB bounce:0kB free_pcp:5184kB local_pcp:0kB free_cma:0kB [ 216.108179][ T5939] lowmem_reserve[]: 0 3921 3921 [ 216.113115][ T5939] Normal free:2880532kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:261936kB inactive_anon:1908kB active_file:89180kB inactive_file:10900kB unevictable:0kB writepending:260kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:2892kB local_pcp:1848kB free_cma:0kB [ 216.145378][ T5939] lowmem_reserve[]: 0 0 0 [ 216.151825][ T5939] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 5*64kB (M) 4*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 216.167599][ T5939] Normal: 11*4kB (E) 29*8kB (UE) 310*16kB (UME) 332*32kB (UME) 232*64kB (UME) 82*128kB (UME) 41*256kB (UME) 113*512kB (UME) 90*1024kB (UME) 44*2048kB (UME) 632*4096kB (UM) = 2880500kB [ 216.168797][ T64] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 216.194400][ T64] usb 2-1: config 0 has no interface number 0 [ 216.200637][ T64] usb 2-1: config 0 interface 41 has no altsetting 0 [ 216.207399][ T5939] 74030 total pagecache pages [ 216.209076][ T64] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 216.221329][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.221699][ T5939] 479 pages in swap cache [ 216.229640][ T64] usb 2-1: Product: syz [ 216.229663][ T64] usb 2-1: Manufacturer: syz [ 216.229680][ T64] usb 2-1: SerialNumber: syz [ 216.234445][ T5939] Free swap = 122720kB [ 216.251413][ T64] usb 2-1: config 0 descriptor?? [ 216.252486][ T5939] Total swap = 124996kB [ 216.260931][ T5939] 2097051 pages RAM [ 216.264899][ T5939] 0 pages HighMem/MovableOnly [ 216.269806][ T5939] 352248 pages reserved [ 216.274011][ T5939] 0 pages cma reserved [ 216.280398][ T5939] Memory allocations: [ 216.284412][ T5939] 0 B 0 init/main.c:1477 func:do_initcalls [ 216.292141][ T5939] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 216.300651][ T5939] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 216.308595][ T5939] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 216.317406][ T5939] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 216.326060][ T5939] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 216.335061][ T5939] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 216.343302][ T5939] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 216.351636][ T5939] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 216.359670][ T5939] 0 B 0 init/initramfs.c:101 func:find_link [ 216.368790][ T5942] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 216.379508][ T5942] SELinux: failed to load policy [ 216.383363][ T5950] netlink: 'syz.0.1896': attribute type 4 has an invalid length. [ 216.579100][ T5964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5964 comm=syz.3.1902 [ 217.266243][ T64] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 217.286967][ T64] usb 2-1: USB disconnect, device number 104 [ 217.444525][ T5970] fuse: Bad value for 'fd' [ 217.523138][ T5972] tmpfs: Unknown parameter '"uge' [ 217.858003][ T64] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 218.017212][ T1687] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 218.028721][ T64] usb 4-1: Using ep0 maxpacket: 16 [ 218.046519][ T64] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.061443][ T64] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.061975][ T6002] netlink: 'syz.4.1914': attribute type 4 has an invalid length. [ 218.080695][ T64] usb 4-1: config 0 interface 0 has no altsetting 0 [ 218.101306][ T64] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 218.111318][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.136624][ T64] usb 4-1: config 0 descriptor?? [ 218.477213][ T345] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 218.558129][ T64] hid-generic 0003:1E71:2009.0016: unknown main item tag 0x0 [ 218.565599][ T64] hid-generic 0003:1E71:2009.0016: unknown main item tag 0x0 [ 218.583567][ T64] hid-generic 0003:1E71:2009.0016: unknown main item tag 0x0 [ 218.601455][ T64] hid-generic 0003:1E71:2009.0016: unknown main item tag 0x0 [ 218.617324][ T64] hid-generic 0003:1E71:2009.0016: unknown main item tag 0x0 [ 218.636139][ T64] hid-generic 0003:1E71:2009.0016: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 218.660527][ T345] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.677238][ T345] usb 1-1: config 0 has no interfaces? [ 218.687370][ T345] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 218.707324][ T345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.717004][ T345] usb 1-1: config 0 descriptor?? [ 218.789664][ T36] audit: type=1400 audit(1777372601.195:1052): avc: denied { write } for pid=6014 comm="syz.1.1919" path="socket:[51686]" dev="sockfs" ino=51686 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 218.853716][ T5982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.864992][ T5982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.881794][ T6021] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1920'. [ 218.927620][ T345] usb 1-1: USB disconnect, device number 95 [ 218.936697][ T472] usb 4-1: USB disconnect, device number 92 [ 218.951794][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 219.128179][ T6025] loop6: detected capacity change from 0 to 8 [ 219.179702][ T61] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.189213][ T61] Buffer I/O error on dev loop6, logical block 0, async page read [ 219.197519][ T6025] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.207304][ T6025] Buffer I/O error on dev loop6, logical block 0, async page read [ 219.215242][ T6025] loop6: unable to read partition table [ 219.221291][ T6025] loop_reread_partitions: partition scan of loop6 (Nh*hp "o?< ʺXDbp0O{>.) failed (rc=-5) [ 219.569738][ T6044] serio: Serial port ptm1 [ 219.682269][ T6046] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 219.706107][ T6046] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 219.773581][ T6053] tmpfs: Unknown parameter 'hug"' [ 219.850348][ T6057] loop6: detected capacity change from 0 to 8 [ 219.901694][ T61] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.911145][ T61] Buffer I/O error on dev loop6, logical block 0, async page read [ 219.919223][ T6057] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.928790][ T6057] Buffer I/O error on dev loop6, logical block 0, async page read [ 219.937186][ T6057] loop6: unable to read partition table [ 219.945292][ T6057] loop_reread_partitions: partition scan of loop6 (Nh*hp "o?< ʺXDbp0O{>.) failed (rc=-5) [ 220.005940][ T6060] netlink: 'syz.4.1934': attribute type 4 has an invalid length. [ 220.058971][ T6062] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1935'. [ 220.087647][ T6062] ------------[ cut here ]------------ [ 220.094608][ T6062] WARNING: CPU: 1 PID: 6062 at mm/page_alloc.c:5282 __alloc_pages_noprof+0x109/0x7e0 [ 220.104256][ T6062] Modules linked in: [ 220.108203][ T6062] CPU: 1 UID: 0 PID: 6062 Comm: syz.4.1935 Not tainted syzkaller #0 59845a3e7facf6968a53e2150c0cf8787c039bda [ 220.119922][ T6062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 220.130548][ T6062] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 220.136932][ T6062] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 7a 6e 0b 06 00 0f 85 c2 00 00 00 c6 05 6d 6e 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 220.157229][ T6062] RSP: 0018:ffffc900100df980 EFLAGS: 00010246 [ 220.163872][ T6062] RAX: 0000000000000000 RBX: 0000000000000034 RCX: 0000000000000000 [ 220.171971][ T6062] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900100dfa38 [ 220.181323][ T6062] RBP: ffffc900100dfaa8 R08: ffffc900100dfa37 R09: 0000000000000000 [ 220.189813][ T6062] R10: ffffc900100dfa20 R11: fffff5200201bf47 R12: ffffc900100df9c0 [ 220.198177][ T6062] R13: dffffc0000000000 R14: 1ffff9200201bf34 R15: 0000000000000000 [ 220.206302][ T6062] FS: 00007fd5a451f6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 220.215676][ T6062] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 220.222517][ T6062] CR2: 0000000000000000 CR3: 0000000121228000 CR4: 00000000003526b0 [ 220.230825][ T6062] Call Trace: [ 220.234214][ T6062] [ 220.237231][ T6062] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 220.243086][ T6062] ? schedule+0xc5/0x240 [ 220.247588][ T6062] ? futex_unqueue+0x136/0x160 [ 220.252386][ T6062] ? pending_reads_dispatch_ioctl+0xc86/0x2080 [ 220.258629][ T6062] ___kmalloc_large_node+0x81/0x210 [ 220.263982][ T6062] ? pending_reads_dispatch_ioctl+0xc86/0x2080 [ 220.270267][ T6062] __kmalloc_large_node_noprof+0x1e/0xd0 [ 220.276392][ T6062] ? pending_reads_dispatch_ioctl+0xc86/0x2080 [ 220.282810][ T6062] __kmalloc_noprof+0x326/0x500 [ 220.287737][ T6062] pending_reads_dispatch_ioctl+0xc86/0x2080 [ 220.293853][ T6062] ? futex_wait+0x2ac/0x7b0 [ 220.298559][ T6062] ? __cfi_futex_wait+0x10/0x10 [ 220.303730][ T6062] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 220.310627][ T6062] ? selinux_file_ioctl+0x732/0x1480 [ 220.315964][ T6062] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 220.321615][ T6062] ? do_futex+0x32a/0x510 [ 220.326000][ T6062] ? __cfi_do_futex+0x10/0x10 [ 220.330874][ T6062] ? __fget_files+0x2c5/0x340 [ 220.335580][ T6062] ? bpf_lsm_file_ioctl+0xd/0x20 [ 220.340594][ T6062] ? security_file_ioctl+0x3e/0x110 [ 220.345928][ T6062] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 220.352602][ T6062] __se_sys_ioctl+0x135/0x1b0 [ 220.357328][ T6062] __x64_sys_ioctl+0x7f/0xa0 [ 220.362049][ T6062] x64_sys_call+0x1878/0x2ee0 [ 220.367047][ T6062] do_syscall_64+0x57/0xf0 [ 220.371547][ T6062] ? clear_bhb_loop+0x50/0xa0 [ 220.376275][ T6062] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 220.382630][ T6062] RIP: 0033:0x7fd5a359cdd9 [ 220.387223][ T6062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.408311][ T6062] RSP: 002b:00007fd5a451f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.416974][ T6062] RAX: ffffffffffffffda RBX: 00007fd5a3815fa0 RCX: 00007fd5a359cdd9 [ 220.425285][ T6062] RDX: 00002000000000c0 RSI: 0000000040106726 RDI: 000000000000000b [ 220.433505][ T6062] RBP: 00007fd5a3632d69 R08: 0000000000000000 R09: 0000000000000000 [ 220.441807][ T6062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.450555][ T6062] R13: 00007fd5a3816038 R14: 00007fd5a3815fa0 R15: 00007fff1f2659b8 [ 220.458777][ T6062] [ 220.461918][ T6062] ---[ end trace 0000000000000000 ]--- [ 220.977301][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 220.977331][ T1687] Bluetooth: hci0: Opcode 0x1003 failed: -110