last executing test programs: 44.976844225s ago: executing program 2 (id=31): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x20, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303, r1}, @clear_death={0x400c630f, 0x2}, @register_looper], 0x0, 0x0, 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f0000000240)=0xff, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r4, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x10000}) ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002000000106e050c0100000000000109022400010000500009040000090300010009210000000122290009058103000000fce9ad0056212acc89bd14811d31a27740f29609231ef2b8d72c51dd1a3ec7a25542fcd337b5f203f83292ee656e9af0e25f"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000002c0)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="2023a0000000a00f23838722da6b7e84"], 0x0, 0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x20}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000784000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000100)={{&(0x7f000044a000/0x2000)=nil, 0x2000}, 0x2}) socket$pptp(0x18, 0x1, 0x2) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0xd}) socket(0x3, 0x2, 0x7) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2c00, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x2, 0x0, 0x4000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) modify_ldt$read(0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) 42.895746899s ago: executing program 2 (id=42): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x90) unlinkat(r1, &(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xe, 0x0, 0x0) ioctl$KVM_SET_SREGS2(r4, 0x4140aecd, &(0x7f0000000140)={{0x5000, 0x58000, 0xf000, 0x9, 0x7f, 0xe3, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0xffffffff, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x5, 0xa, 0x1, 0x4, 0xfa, 0x5}, {0x0, 0x8000000, 0x4, 0x4, 0x7, 0x81, 0xfa, 0x5, 0x7, 0x4, 0x92, 0x9}, {0x40000, 0xeeef0000, 0x1b, 0x7, 0x1, 0x40, 0x8, 0x0, 0xfa, 0x81, 0x9, 0x9}, {0xeeee8000, 0x0, 0xf, 0x9, 0x5, 0x2, 0x7, 0xf1, 0x2, 0x6e, 0x0, 0x8}, {0x4000, 0x80a0000, 0x3, 0x2, 0x6, 0x2, 0x5, 0x3, 0x1, 0xe, 0x6, 0x8}, {0x10000, 0x10000, 0xc, 0x0, 0x3, 0x5, 0x5, 0x26, 0xa, 0x6, 0xff, 0x6}, {0x1, 0xeeef0000, 0xb, 0xe, 0x13, 0x1e, 0x3, 0x0, 0x7f, 0x5, 0x2, 0x8}, {0x100000, 0x405}, {0xdddd0000, 0x6}, 0xe0000031, 0x0, 0x6000, 0x61, 0x5, 0xe100, 0x800f900, 0x1, [0x6, 0x2, 0x8000000000000003, 0xc]}) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="230228bd7002ffdbdf250c000000180001801400020076657468315f746f5f62617461647600200003801c0003800c"], 0x4c}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) r9 = socket$unix(0x1, 0x2, 0x0) bind$unix(r9, &(0x7f0000003000)=@file={0x1}, 0x6e) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), r7) sendmsg$SEG6_CMD_DUMPHMAC(r7, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r10, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xb}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x80000001, 0x9]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x6, 0xfffffff8, 0x4]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xca}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040850}, 0x48040) r11 = landlock_create_ruleset(&(0x7f0000000240)={0x8eff}, 0x18, 0x0) landlock_restrict_self(r11, 0x0) r12 = socket(0x10, 0x803, 0x0) sendto(r12, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r12, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/227, 0x11c}, {&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000003500)=""/4088, 0xff8}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000880)=""/134, 0x86}, {&(0x7f0000000640)=""/154, 0x9a}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}, {&(0x7f0000000540)=""/74, 0x4a}], 0x9}}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat$cgroup_int(r13, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) connect$unix(r6, &(0x7f0000000640)=@file={0x1}, 0x6e) ioctl$EVIOCSABS3F(r13, 0x401845ff, &(0x7f00000003c0)={0x6, 0x80000001, 0x1, 0x9, 0x5, 0x1}) 42.816668422s ago: executing program 2 (id=43): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x0, 0x0) (async) read$FUSE(r0, &(0x7f0000002580)={0x2020}, 0x6d) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) getcwd(&(0x7f0000000100)=""/139, 0x8b) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) 42.816180332s ago: executing program 2 (id=44): r0 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000180)={0x2, 0x0, [{0x7, 0x3e16, 0x4, 0x2, 0x81}, {0xc0000001, 0x2, 0x6, 0x4, 0x7ff}]}) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000400)='efivarfs\x00', 0x2000000, &(0x7f0000000440)=']/]:&\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xfd, 0x2, @loopback}, 0x1c) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x3, "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"}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r4, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r4, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000680)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@allow_other}]}}) r5 = getpid() r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000740)={&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="34000000000000000000000002"], 0x38}, 0x4000014) r7 = syz_pidfd_open(r5, 0x0) setns(r7, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) pidfd_getfd(r7, r7, 0x0) syz_clone(0x20100, 0x0, 0x24, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 41.977410324s ago: executing program 2 (id=48): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) getdents(r0, 0x0, 0x0) 41.471078069s ago: executing program 2 (id=51): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0xfffffffffffff800, 0x10001, 0x5) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000740)=0x9, 0x4) (async, rerun: 32) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e1f, 0x0, @loopback, 0xbf}, 0x1c) (rerun: 32) r1 = syz_clone(0x0, &(0x7f0000000040)="92a52b977047d923f5a97a8d0d89f664d26243054636fe4713d2b2de627b1e9055850348586df97334bd24121caac9c067e8a601b1302becaaf448e9149e96d1112ea683c71e36017f5b53efbd1a588a0462608051ea8fc077987b00f47908025c811d5b39463f039278b583f3d243698f6752eba9bd0a652f3523fd2b33570e7071cb30f8499f96cf02b56fd6", 0x8d, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)="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") ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000380)={&(0x7f0000000300)="4d8973206479956bbb0ac9d61ddea94ebf277cefbe911ccec4b761c3819c3fb4e08e081db5f34215717943f7a87c945242bd1b1e216aa7c4b9d2a96c31f7f0fb6d41c3a7fb2e88350aa811e80aeb4abc65", 0x51}) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x737f0c77864bf3b9, 0x408) 41.376366744s ago: executing program 32 (id=51): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0xfffffffffffff800, 0x10001, 0x5) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000740)=0x9, 0x4) (async, rerun: 32) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e1f, 0x0, @loopback, 0xbf}, 0x1c) (rerun: 32) r1 = syz_clone(0x0, &(0x7f0000000040)="92a52b977047d923f5a97a8d0d89f664d26243054636fe4713d2b2de627b1e9055850348586df97334bd24121caac9c067e8a601b1302becaaf448e9149e96d1112ea683c71e36017f5b53efbd1a588a0462608051ea8fc077987b00f47908025c811d5b39463f039278b583f3d243698f6752eba9bd0a652f3523fd2b33570e7071cb30f8499f96cf02b56fd6", 0x8d, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)="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") ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000380)={&(0x7f0000000300)="4d8973206479956bbb0ac9d61ddea94ebf277cefbe911ccec4b761c3819c3fb4e08e081db5f34215717943f7a87c945242bd1b1e216aa7c4b9d2a96c31f7f0fb6d41c3a7fb2e88350aa811e80aeb4abc65", 0x51}) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x737f0c77864bf3b9, 0x408) 6.64482154s ago: executing program 0 (id=318): setitimer(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8910, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x1, "2effb9b7"}]}}, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_usb_connect$uac2(0x3, 0xe4, &(0x7f0000000140)={{0x12, 0x1, 0x210, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd2, 0x3, 0x1, 0x8, 0x20, 0x3, {0x8, 0xb, 0x0, 0x1, 0x1, 0xb, 0x20, 0x10}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0x6, 0x27, 0x9f}, [@processing_unit={0x7, 0x24, 0x8, 0x1, 0x1, [0x0]}, @sample_rate={0xf, 0x24, 0xd, 0x2, 0x2, 0x4, [0x3, 0x2, 0x1, 0x1]}, @selector_unit={0x8, 0x24, 0xb, 0x40, 0x3, "53dba9"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x1, 0x8, 0x40, "96", 'H0xffffffffffffffff}) ioctl$NILFS_IOCTL_GET_BDESCS(r1, 0xc0186e87, &(0x7f00000000c0)={&(0x7f0000000180)=[{0x400000000, 0xfffffffffffffffc, 0x2, 0x7f, 0x5}, {0x2, 0x5, 0x7, 0x0, 0x9}, {0x6, 0x80000000, 0x400, 0x35b, 0x32ac}, {0x1, 0x8001, 0x101, 0x1, 0x6}, {0x7, 0x8, 0x8, 0x9, 0x3}], 0x5, 0x28, 0x2, 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x121881, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) (async) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c) (async) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000)) (async) ioctl$NILFS_IOCTL_GET_BDESCS(r1, 0xc0186e87, &(0x7f00000000c0)={&(0x7f0000000180)=[{0x400000000, 0xfffffffffffffffc, 0x2, 0x7f, 0x5}, {0x2, 0x5, 0x7, 0x0, 0x9}, {0x6, 0x80000000, 0x400, 0x35b, 0x32ac}, {0x1, 0x8001, 0x101, 0x1, 0x6}, {0x7, 0x8, 0x8, 0x9, 0x3}], 0x5, 0x28, 0x2, 0x2}) (async) 4.594944191s ago: executing program 3 (id=334): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x62040200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000a00)="e499", 0x2}], 0x1}, 0x41) r3 = dup3(r1, 0xffffffffffffffff, 0x80000) write$binfmt_elf64(r3, &(0x7f0000000a40)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0xd, 0x4, 0x31, 0x9, 0x3, 0x6, 0x4, 0x2db, 0x40, 0x215, 0xe3d9, 0x401, 0x38, 0x2, 0x3, 0x9, 0x8001}, [{0x2, 0x7, 0x1, 0x7ff, 0x0, 0x9, 0x0, 0xb}, {0x5, 0xae5, 0x0, 0x6313c9e6, 0x788, 0x6, 0x4, 0x9fd}], "5eb2c96965bdfaf02e0c6e873b23239c585877a1279f1083aeb59dedf979148ab3182ccdb15314ced12dded0790f66540c11a03494d97a8fea05a9911ac20bbe236410cd0f473fc2d02c49ce0167d4c65daecb74ffc3cec1eb807263ecc4a36e285bff9d7ae4136f478998d0ef6d924f6271800d5f72e4cbef998f3c23d6", ['\x00', '\x00', '\x00', '\x00']}, 0x52e) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x11000) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/247, 0xf7}], 0x1}, 0x40000160) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000400000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) 3.255995538s ago: executing program 3 (id=342): r0 = socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x48c80, 0x0) sendfile(r0, r1, 0x0, 0x7ffff006) syz_usb_connect$uac1(0x0, 0x99, &(0x7f0000000000)=ANY=[@ANYRES16], &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0}) 3.145124773s ago: executing program 3 (id=343): syz_usb_connect(0x5, 0x9a5, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0x58, 0xd1, 0xbf, 0x8, 0x7b8, 0x3073, 0xeab8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x993, 0x2, 0x9, 0x8, 0x10, 0x5, "", [{{0x9, 0x4, 0xbd, 0x8, 0xd, 0x2b, 0x7a, 0xdc, 0x7, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x0, 0x6, 0x6}, {0x6, 0x24, 0x1a, 0xb369, 0xb}, [@mdlm={0x15, 0x24, 0x12, 0x2}]}, @uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x4, 0xe, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x0, 0x9, 0x3}]}], [{{0x9, 0x5, 0x2, 0x1, 0x40, 0x6, 0x11, 0x2, [@generic={0x22, 0x21, "5ac97a442cd3726e0fa1e622d66b193d6a2fc0c82d17b119d2733772c750378d"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x200, 0x8, 0x86, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x1}]}}, {{0x9, 0x5, 0xe, 0x8, 0x3c311c5c4b9080be, 0x9, 0x9c, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x3}]}}, {{0x9, 0x5, 0x6, 0x10, 0xa63c8fd4929d514e, 0x80, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xd, 0xcc87}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x8}]}}, {{0x9, 0x5, 0x4, 0x4, 0x8, 0x4, 0xfb, 0x32, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfe, 0x1}]}}, {{0x9, 0x5, 0x9, 0xfc81e4922e8055b7, 0x40, 0xfd, 0x4, 0x3, [@generic={0xca, 0x2, "1a3fc498f78ec49c82b1e658f6dd283194d486f9f998d34ae97d8fcacc0ce955c3a39a07c2e171f9dfd21e604312f8091ddce47bdebfcca2f090dbab3e1c4d6c07ee814af4e4af07045c87fe8e86139cd6a98608f67970c1ff90b5b385795cef907f07be90bfe9c6ea600ac5ca8c20a419a0830f15c069f8cbeb1cccca431958db42d600d646358c5a1b3bdc3dc72232d6aa70f81077d459161b5adff613c8f96aa988c14a97caa24a8961c2a62fc59e393c64d6a02b65e2f4a282f3bef0a15a57c7d8a63a049fea"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xd4}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x81, 0x4, 0x99, [@generic={0x75, 0x23, "d9a60d1cff78403a2392a5468a89543d9e32ab4aa7a20ecc91a74b04087fa89ec5a6e47341bd61e9878ba41beec18054f50a9633da86099fc05f37b416ceca65948682052d24de1b4bf668bd104729dfecb46e8f7fdaa5bd5ef433d8cef60d2f6d357241c3c372263a39ee1741ce86f8b0ceb6"}]}}, {{0x9, 0x5, 0xd, 0x3, 0xb0572aa601bc0b26, 0x23, 0x80, 0x7, [@generic={0xea, 0x23, "df578ecaec48a83c381428ea46f1d913cf2ba053d9e5962749a818440c48d4389618125d688184cc111231e01d30b4ee1b0aafb984029df436e2c90ce473598a429f8f9976d05524ba547e32f469a003adae628774e27a29b3ba80790b4e8580f4afbad7a085a38c9bbc8827b01b04a6bcd8b89d41cc349cf4b5a01ba3865d90d1e191d64c3dec2d1c4dc3f0044e80d58c974b64f7a3cf79b9d9c4abdd4ed9289ac8237200876c689e27e36a7948c8eb7efb4ccc77bc5f2d3893d110bf007e0ca051e880e007f433287669695ae0a51a30c5d33660020af83bbd5c467124b67ee10dda6f4e747150"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x400, 0xf0, 0x4, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x7}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x6, 0x5, 0x2, [@generic={0x7b, 0x22, "3301812208dc27d29bd8e91cd1bae54dc8115f4473f50c28ff983e8f94667f67b1cb4d7bc51dcacb528b0b84fae3a3c22b81df8b02eafd524b1c55d8e7439ade7f75d9c208633ce8ee09a5be87997ac95af898940d432fb93f06d2cdff88df1a64d01885e71750504fd55be0adbfce6176037420e95b342acb"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x4, 0x47, 0x2, [@generic={0xf0, 0xa, "96f48f87b28b519cd53743fa10a5e4ae99d86498dc45754cb69ca6e3d1153fa53f6262d079e4a74cd7f11937e6e1567047d04e9d373cc318bae6c7e26916250ccbe7e928f671340a4b739a8408c44d5300ec9d4cd7d804b6f2b654c8d39a5dc35d4c4d55caf94a1b32fb8b2a8a649b4ed5b6114441b30defe082344a0781fce7f1af7bea6601e32db6599699271b1e6eebf54a53f97489b3d946b51144651e542683f69c101707d4aa03425e94f08d6fff56f84701faa6d41a951c061ebe93d99148344d5d958dcaef0d3c9db35f5d0f9e17799135263d3f3b958244b8765f8d5c2256d6587d9dd3a3dbae351a81"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0xe, 0x7f, 0xc7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0xffff}]}}, {{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x6, 0x7, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7fff}]}}]}}, {{0x9, 0x4, 0x2, 0x1, 0xd, 0x58, 0x42, 0x0, 0xff, [], [{{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x0, 0x1, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x7}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0xb, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x5}, @generic={0x99, 0xe, "5b40cf5c951a644f4643885982a08663d73c5c6df48cadfcc96f40a033cad6bab90f4b33f6107579809aec29f0b9baee3b1a5581877a93c4afed9a4a5c78567d6cfe44c32d88dc1b31cfdb2b2f57a13308368171882123aee0671724542471867ca009c54403fc625a5ef9d910d1a1db57e7efc4fcbd24a56176ea5b0026e97a166d891aa39485362fb2fbb4895131f72049325090e8e8"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x8, 0x1, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x8}, @generic={0x56, 0x5, "bf182c746e9197c528bb5eefbcb82a8b1355bbbb1861681eafac9cf215912d7f0bb9d45672c232368c736c2cb751a472396c3afba1589e967196c2c13189c1654180a17402b89c5d957eb4be6d3039f6128560c5"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x3ff, 0x4, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x1ff}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x8}]}}, {{0x9, 0x5, 0x6, 0x1, 0x400, 0x0, 0xe, 0x69, [@generic={0xc5, 0x31, "3d461c9f6e8509a587d294217e720199c624c9d919fa0b78644f5b5917e282fc1c3c13f35b8aed93ea857c8326916a6f09748e92c283abaeebf6f6ebae5afa13eb3b7da515b0eeb95969b941d99c4a94c0e016f78eaa4f8a6eaf5b37462d80206ff268523b624461c1d2a5aa673c9160aaf88aa4310ca7aa75c0f4988d1ab001a80fe7c0811148d2200e363929bd7e0e497def65e8a35fb67572ae8b94c84d50d0dee544eabbaa6c33983ef5012f1edc11532ed42c6e5702698e59cd0e7109d414dc2a"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x3, 0x26, 0x6, [@generic={0x4b, 0x8, "b8d5a8053f1d57a24a6827bcfcba8d0092b2f3cd115b64f7a6ef82004aafd07b711e97092f8437680e8ed66637d55a5cc023fa08590eb54222ef341081413096670abc287de3353214"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x5}]}}, {{0x9, 0x5, 0x3, 0x4, 0x3ff, 0x1, 0x7f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6c, 0xffff}]}}, {{0x9, 0x5, 0xd, 0x8, 0x10, 0x0, 0x9, 0x9, [@generic={0x21, 0xb, "d79cbd52e878943269bebcdbc019b1ddf516976fb2fe442ecf1dc2fc226fde"}, @generic={0x68, 0x9, "707d0a1277095cf05068811584d9972ab597f2dc1bf4f57f1f874c192bdd2b869e5cb86328fb382c841145394618a1d09d39f5ab7630e2efd40043ef2d9d2db3dc5bad8fca6d93163678136928aa2e3431057697fa64f8d5edd0afa02d9a78167ed92e45c61d"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x3, 0x9, 0x6, [@generic={0x4c, 0xe, "f14e09260a25f241e413097a2616d1e96d27896b1295d6842b732a88dbfbf29f2865bad351958ea83c3fe4e96718c4e548f6fa37ed81250c6fe269d33f79796f2f18d74471c56e131095"}, @generic={0xb7, 0x7, "45b491c2e1684e37823197d03e24f63a4819ad75352ad3f3b792602b2f93153cbd7a6d4d6bd1cb151da1ac73506b2c91acdf4e7439dc019ab8a413752fd222cee7a49a8690b5ea17aca1fd1ad4ed1247206e003548096f66aecfc4478f95903586dd5462eba3917b68c9903ffd7c13f8c61758fcfe05d20c37a8314539fe5d085e74cd9a63f252a2fb42b9744176a298558ebd513b5042d70914b9e8824fc517e3f12500e50a1ce7a5781f2a003f2e99c570589b17"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x200, 0x2, 0x6, 0xae, [@generic={0x8a, 0x31, "9769d158d7febf1794759096014bf5270c574cd5668a26909ff73d4d8953189ce79050c1dc9aac65d794daca21ae3d5f92cf99b05e53328eb4dd7a92a3481f93e5f0dd047044813820831d53914a59359021aa4b75521dc63a2a61f423bcd199ffdf8f75e7e714de63dc084c3f902d591d3587cb5552b5fb990cdedc89c1b46af4e59268207b05dc"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0xbf, 0x7f, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2b, 0x8000}]}}, {{0x9, 0x5, 0x6, 0x8, 0x8, 0x4, 0x9, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x81, 0x4}]}}, {{0x9, 0x5, 0x4, 0x0, 0x7af, 0x8, 0x1, 0x23}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x7f, 0xb8, 0x0, 0x8, 0xe}, 0x8, &(0x7f0000000080)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0xc7, &(0x7f0000000100)=@string={0xc7, 0x3, "26365e175fbddf58ae74423083f93e8babc7eb4be82b827d77bb3446b644100fccb766482597f8f4115ef3972a91384cee6d5c0508be87f9700cb6957b825303e3a0480af8ea3250bac881019af8d4fa15ee1468df31caf7a755ffd8b083161a5f6298d7ffa64b111af1afcdf03e7a3df0829fa6b20a27113a724c4586df14e6462f2db0cb1fa0a5e6f86f6561ca66f2a20922dc040efbef38388f7422ca12f9eac2431f847dfc1b43671ca41f70f5479ae1d29ba17123ce592e53ad17cb120b2ef965a3dc"}}, {0x71, &(0x7f0000000200)=@string={0x71, 0x3, "c76338ff60e84756273acf632dcfac559d54fe2161fb0a204e318b3b08acc06c000af63e05b02e1a6893a10cff6a28dac8bff4291744df5e6ded15c5df487c9feb4d5384133ca4bf08c0497e7a46533610659529f74a8672669b8e8554d7651e160e6d11b77d9426f0d93b2272cebd"}}]}) 3.030112099s ago: executing program 0 (id=344): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_usb_connect$uac3(0x4, 0xe5, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3f19, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd3, 0x3, 0x1, 0x7, 0x40, 0x5, {0x8, 0xb, 0x0, 0x0, 0x1, 0x22, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x19, 0x3ff}, [@cluster_info_segment={0x6, 0x20, 0x6, 0xa7, 0x6}, @extension_unit={0x9, 0x24, 0xa, 0x1, 0x4, [0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xfc, 0x1, 0x2, 0x4, "1dfbd58361"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x9, 0x0, 0xa, "40acabd223b19534fc"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x9, 0x5, 0x2, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x1, 0xf5, 0x8, {0xa, 0x25, 0x25, 0x8, 0x9b, 0xfc01}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x5, 0xc8, 0x3}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x4, 0x3, 0x7, "86", "a1d7"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xde3b, 0x3ff, 0x9, 0x3}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x81, 0x9, 0x5, 0xe7, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x0, 0x5, {0xa, 0x25, 0x25, 0x8, 0xf8, 0x3}}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x3, 0xf, 0x1, 0x8, 0xa}, 0x8, &(0x7f0000000200)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x9, [{0x33, &(0x7f0000000240)=@string={0x33, 0x3, "ca8990cf54ba5a24f432ea584862a31fc73501a0c73490e575e7d315d0430355538fb4bded5af191acce002033507eaac4"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x5c0a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc1a}}, {0x6d, &(0x7f0000000340)=@string={0x6d, 0x3, "6889b7c18d5e17a419eb76473c816b1f0b4dc95c2f157f38b7aacbf0eafeb1e39391901ecccda58eb2ad5cba4910ff7de6316f03f00140480e49d42a7a7122814aa3376959d543b5f0b9a467e1bdfa64a6264e44c1ed257c96d6a505b236aa9de6540b51161fb8ab6bf875"}}, {0x41, &(0x7f0000000400)=@string={0x41, 0x3, "6ac2bacdc1c835e7d9c7e4479b36b6e60969e49e71a86d3705b0e9622f76020aa800f493b61b1ef4f8d229686f8c5f622170181ff57e9698856bd33f3212b6"}}, {0xdf, &(0x7f0000000480)=@string={0xdf, 0x3, "8da83e34598106880fe843b422d36a22baaa80f97bd5d6b11e167fb04d5366de6acf11d4c5ef49120d5776dee3907dfa8a2db990313b2d1b102b289f7d95896ed0151c7781deb97a8ecb0d10b61d2fcb846b6dd5e3e786d662d693a0c82407d3317243059fc350eb0e27dd707e934232e0be0ff8b453401d05ef5b82a60b9cd864cb1275e88ea086ec4bc537960aff6ad7a005969d90d93330ee8da509a7f835faf253fccded66af8fc88d708034fdbe3aca7b2ecc3d3a222d197f1bc468ea877ff5a6f6505d87aaf65184b46b2f56e0304327939fd73522020d0d603c"}}, {0x67, &(0x7f0000000580)=@string={0x67, 0x3, "76c5bb88106a7e668ae5f87b0e25c5c2a7c4f3116f703d83bc2ab7ea90ad518958b622ddd1b6081d22216bd0159256635e7e16191acccd398bd45ac4b67201b08fa5211f3772c006406b47fd50dcb5bf092ab985e3a043c6637522cfffcd6b4fed4b2e2245"}}, {0x9f, &(0x7f0000000600)=@string={0x9f, 0x3, "fe587397b78238e7b2633aedbffc2e89cb67a780a7c09bd825c7fad719702eab3937bf8f590973f9a6d4ea15aa2301de6be0c5d223f6efcd1800896121413d3940da2c6a1cc2d7e0776dce56a58d0003455c2856d1972cde3f33bdb3811bd8cab74b077231aff788516aa1e6d9dcf6cb49f9908c82c61b69e0fb6784e70613171731fe57fa7ba64bc24b84030be3653f6284315161c5e4204468dbad20"}}]}) syz_usb_control_io$uac3(r1, &(0x7f0000000800)={0x14, &(0x7f0000000780)={0x20, 0x21, 0x6, {0x6, 0xd, "4747df5c"}}, &(0x7f00000007c0)={0x0, 0x3, 0x2a, @string={0x2a, 0x3, "95e96fa846154335f2d555d1e4b9a2a0786ece49ca2cd54684abd693d060172c9466efe0fe146870"}}}, &(0x7f0000000b40)={0x44, &(0x7f0000000840)={0x20, 0xb, 0xfc, "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"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x61}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000a00)={0x20, 0x81, 0x1, "84"}, &(0x7f0000000a40)={0x20, 0x82, 0x3, "5ed576"}, &(0x7f0000000a80)={0x20, 0x83, 0x3, "071730"}, &(0x7f0000000ac0)={0x20, 0x84, 0x3, "9590c5"}, &(0x7f0000000b00)={0x20, 0x85, 0x3, "f291a0"}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES8=r0, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.355448542s ago: executing program 1 (id=350): mkdir(&(0x7f0000000980)='./file0\x00', 0x0) (async, rerun: 32) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@name={'name', 0x3d, 'cpuset'}}]}) (async, rerun: 32) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0xd) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmsg(r0, &(0x7f0000000400)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x0, 0x0, 0x3, 0x1, 0x9, "4a33255d7d08d00c04fe8d33ee9d418f117772994411ad76b8b2968d98428abd01cabcf89ec7638b4a2bb96d7bc0d7e77a6a8c88a8853bd18dff32260d8c68", 0x27}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)="3b3543472bffd9be175d7767ae77db3db0cdc719278d8d3b9586dbce9c327083155752791eb089fc36c15bef16b843ce4495fdda5d118ce67d928cb0301e7f7a85ea9f90458bc86349d7af62aa94ed5bc7e17fe9827d0f10d3241eef0aaa28afe095ac3680f05ad82b31746d4f79441c4f2f057a52dca004e4aa4c0cf395a22ecb021d017069bcd791565935146fd4", 0x8f}, {&(0x7f0000000200)="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", 0xfd}], 0x2}, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b", @ANYRES64], 0x0) (async) io_setup(0x4a1, &(0x7f0000000440)) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r0, &(0x7f0000000340)="18000000010003", 0x7) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000380), 0x0) (async) r1 = socket$unix(0x1, 0x5, 0x0) (async, rerun: 64) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x3, 0x14ba00) (rerun: 64) poll(&(0x7f00000000c0)=[{r1, 0x9112}, {r2}], 0x2, 0x7fff) (async) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100096000d0c100000000000224e0000", 0x58}], 0x1) 2.262865247s ago: executing program 1 (id=351): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000140), &(0x7f00000002c0)=0x4) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0xfffffffffffffce9) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20400c0}, 0x4400) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f0000002740)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r3, &(0x7f0000004780)={0x130, 0x0, r5, {0x7f, 0x9, 0x0, '\x00', {0x2, 0x7, 0xffffffffffffffff, 0x7, 0x0, r6, 0x2000, '\x00', 0x4, 0x4, 0x3, 0x4000000, {0x7, 0x6}, {0x6, 0x400}, {0xffffffffffffffff, 0x8}, {0x4113, 0xac72}, 0x7a85, 0x2, 0x40c5, 0xd000}}}, 0x130) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x1000, &(0x7f0000000000/0x1000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x2) ioctl$KVM_NMI(r7, 0xae9a) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x44084}, 0x20040800) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000500)={[0x7, 0x1, 0x6, 0xc002, 0x5, 0x7, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0x2, 0xfd]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) ioctl$TCSETSW2(r0, 0x5408, &(0x7f0000000540)={0xff, 0x37, 0xffffffee, 0x3fffffef, 0x0, "b850008000000000f700", 0x81004, 0x2}) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x11) ioctl$TCSETAW(r0, 0x5407, 0x0) ioctl$TIOCSSOFTCAR(r8, 0x541a, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.729361604s ago: executing program 1 (id=358): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r0, 0x321, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4004) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000bc0)=""/4073, 0xfe9}, {&(0x7f0000000200)=""/24, 0x18}, {&(0x7f0000000140)=""/54, 0x36}], 0x3}, 0x8}], 0x1, 0x180, 0x0) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8211, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x9, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x4, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) 1.481055216s ago: executing program 4 (id=359): capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000040)={0xa00000, 0x0, 0x7fff, 0x0, 0x2, 0x4}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'veth1\x00', {0xc0}, 0x38}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x0, 0x2, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000002400)={0x1, 0x0, 0x80000000, 0x3}) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x2000000000000005, 0x4}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x2, 0x1, 0x80000003, 0xb}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r7 = dup(r5) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r4, &(0x7f00000003c0)={@void, @void, @eth={@random="db5ff0f3fb00", @broadcast, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x1c, 0x67, 0x0, 0x9, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x43}}, {0x4e24, 0x4e24, 0x8}}}}}}, 0x2e) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r8, 0x407, 0x7ffffffe) 1.467551156s ago: executing program 4 (id=360): r0 = socket$nl_audit(0x10, 0x3, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, r2, 0x180000c, 0x10, r3, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) brk(0x8000000000000008) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000800)={0x1, 0x0, [{0xe000, 0xc0, &(0x7f00000001c0)=""/192}]}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'pim6reg0\x00', &(0x7f0000000000)=@ethtool_test={0x1a, 0x800, 0x6, 0x2, [0x6, 0x9]}}) 1.41324861s ago: executing program 4 (id=361): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000000)="4836184550bbf5c659", 0x9, r0}, 0x68) 1.41159246s ago: executing program 4 (id=362): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) (async) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000000)={0x1, 0x1}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) (async, rerun: 64) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r1, 0x400455c8, 0x0) (async) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000000)=""/165) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = memfd_secret(0x0) ioctl$sock_bt_hci(r4, 0x400448de, &(0x7f0000000100)="f336612f35e3d17b74cb6e48cb58ec62b6753db4251798c9c6febebeb09aa3ea6faee2c42da84f78777e9b9d0ce133d42f94839e7b2e963b2baca65d33ec73bf1a83dfaf860c6d4c7eb1fa81995422e646ce85d0de7a46739d8d1d1599903e1ea6800243a3809151cd5361692338e35cd76dbe6069d8398bba91950e00fee440b69508e4acc6af") (async) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x3, 0x2}, 0x6) (async) setfsuid(0xffffffffffffffff) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 1.324899994s ago: executing program 3 (id=363): syz_usb_connect(0x2, 0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003be004209904a2a9e8c4010203010902230001046b40090904e40c81ffe7bb04082403030600000009050702"], 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000040), 0x5, 0x20c00) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x7c020030) 1.239736828s ago: executing program 4 (id=364): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) (async) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000700)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0x58}}) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000006c0)=""/235) syz_usb_disconnect(r1) r2 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x8, 0xa0, 0x7, "", [{{0x9, 0x4, 0x0, 0xc, 0x3, 0x2, 0x6, 0x0, 0x40, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x400005, 0x7fe, 0x5a, 0x4}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x9, 0x3, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf9, 0x0, 0x3}}}}}]}}]}}, 0x0) (async) ioctl$EVIOCRMFF(r1, 0x550c, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_connect$midi(0x1, 0xde, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x1, 0x1, 0x0, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x10, 0x81, [@midi_out_jack={0xb, 0x24, 0x3, 0x2, 0xc, 0x2, [{0xae, 0x6}, {0xe4, 0x9d}], 0x6}, @midi_in_jack={0x6, 0x24, 0x2, 0x4, 0x8, 0x7f}, @ms_header={0x7, 0x24, 0x1, 0x8, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x9a36, 0x7}], [{{0x9, 0x5, 0x0, 0x8, 0x400, 0x8, 0x4, 0xfb, {0x12, 0x25, 0x1, 0xe, "e103373fcffb60ee0132a8bbc51c"}}}, {{0x9, 0x5, 0xa, 0x2, 0x200, 0x9, 0x7, 0x0, {0xe, 0x25, 0x1, 0xa, "0666fefe1d0b8bdd778b"}}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x81, 0x35, 0x80, {0x4}}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0xc7, 0x9, 0x1, {0x14, 0x25, 0x1, 0x10, "cafb67203b20c36da87d6ef4cd2f52f1"}}}, {{0x9, 0x5, 0xa, 0x4, 0x20, 0xae, 0x8, 0x2, {0x9, 0x25, 0x1, 0x5, "e7da5d4f74"}}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x0, 0x5, 0x5, {0x12, 0x25, 0x1, 0xe, "2f6f1d8ce7e17656fe68e709d962"}}}, {{0x9, 0x5, 0xb46543343c933384, 0x8, 0x400, 0x8, 0xd, 0xe, {0x9, 0x25, 0x1, 0x5, "570e803b40"}}}]}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x5, 0x1, 0x4, 0x8, 0xe0}, 0x32, &(0x7f0000000380)={0x5, 0xf, 0x32, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x52, 0xa2, 0x5, 0x2, 0x73}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x4, 0xf00, 0x1ff, [0x7f8000, 0xff3f00, 0xde]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xf, 0x1, 0x6}]}, 0x9, [{0x71, &(0x7f0000000240)=@string={0x71, 0x3, "b7d657198a0e11df47268e9ee265f6a7d0eb87f0692e52655e96531af7f7e81182f66b8c07f66a157d1dfc883f40f5e2c7ccc6fd388d4c2c442e4bc4b19477ce5ef5186845f769d314ada3e422194272185907962dcb4c15b81ac13c5cca5d0a4cd9a70419035f29ebbfa30cf14279"}}, {0x27, &(0x7f00000002c0)=@string={0x27, 0x3, "727357bc55a2a1fc70447a91357bd16a802345236b4af71eb729566bf445013772bfc130f2"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc07}}, {0x3e, &(0x7f0000000340)=@string={0x3e, 0x3, "590e963da94b0a3f5674ad118741023ff445d108e7be4c712b2892607decae0f0492c86c9b4f80a5afdd88e35e1358bebe6bb59c2e51990f1a3f55f3"}}, {0x95, &(0x7f0000000800)=@string={0x95, 0x3, "5d13ceee25d6ca6a2944d0ca965b2b603ed8c01d18c47d6a977f0b6c1f9b7c6a8a0d8f7035397dc44a5c75c7f46a8af6646a25105d211c6c9082a6a21d374afd22393883155151ecd14f8e862203fb9866ecb540d4e7d73a106eee768fce86594df2f9e24759e320f28f92b66b100e2a414b625d1fdcf2c6946c5897abc78f87a9fc90695958343cb19564a55cdea98007284c"}}, {0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="000400"/14]}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x448}}, {0x61, &(0x7f0000000580)=@string={0x61, 0x3, "0644330600dfaab2cbad593104e77956753b3caff1760ab112012347b638d043409db3aba00da77f7bb88802f12ddf11a9e710d7065febd5b3be7684075b63ef44efa84a34a1e8cc949a45f2f823d3a88c3978f67c4dd2b532d01fd01c1b4a"}}]}) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000003c0)={0x5, 0x9, {0x53, 0x2, 0x7, {0x5, 0x3}, {0xb6, 0x8000}, @const={0x8, {0x8, 0x80, 0x3, 0x6}}}, {0x53, 0x4, 0x8, {0x7, 0xc7}, {0x4, 0x1161}, @rumble={0x7, 0x1ff}}}) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x12, &(0x7f0000000240)=0xff, 0x4) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f00000007c0)={0x7, 'veth0_to_batadv\x00', {0x8}, 0xfff}) 905.037775ms ago: executing program 0 (id=365): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000039c0), 0x0, 0x0) readv(r0, &(0x7f0000004b00)=[{&(0x7f0000000540)=""/107, 0x6b}, {&(0x7f00000005c0)=""/118, 0x76}], 0x2) (async, rerun: 32) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000400)={0x76, 0x1a}) (async, rerun: 32) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x2, {0x3, 0xffffffffffffffff, 0x0, 0x5, 0x80000000, 0xffffffff, {0x0, 0x0, 0x20, 0xfffffffffffffffd, 0xf5, 0x4, 0x0, 0x0, 0x5, 0x2000, 0x2, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000140001b66fb1b313ba36db000a0000000400000014000100fd010000000000000000000000000001150006"], 0x44}, 0x1, 0x0, 0x0, 0x4018}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f000000ae80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c}}], 0x20, 0x24040000}}, {{&(0x7f0000000840)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000a00)=[{&(0x7f00000008c0)="569b5f499dffecfa870116b642d21cf4bf1613a95726eab0a9389fb3115c88a98a29e6b9fb3c88a3af559c0194cdc22a54063b4cde833cc354b322253a3b89c49e4f8ed9f8909e9dc139b0b42d7fff63e7fbbec7ab051aea1eeb6bfac6b5782dc66d9a8851ce249a878d046c89a054fcf28b651a7e493da420d37b96db8286d187f12ed14620f9daeb3dc3d34334945f5a8bd2c78a8a91a0805727d0fe10f8ad4c4d60b949b6e1be4b418908f576b11f69b88bb741005b3af62274f7d58f3978820e0f60aa2a5c80321b820a6f840df7c43379628440adcf9f10b67859e4dfe28a", 0xe1}, {&(0x7f00000009c0)="5225249a56f25b4cbacf4bd5e926", 0xe}], 0x2, &(0x7f0000000b80)=ANY=[@ANYRES8=r4, @ANYRES32=r0, @ANYRES32, @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYRES8=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYRES32=r4, @ANYRES64=r0, @ANYRESOCT=r2], 0xa0, 0x80}}, {{&(0x7f0000002000)=@abs={0xdf1886eec63e2adf, 0x0, 0x4e22}, 0x6e, &(0x7f0000002380)=[{&(0x7f00000021c0)="a199181b4e2808254ba92bc8d804f8c4896b8edbdcffcfcda7a1df2093b11244b97d6489915e41051f086aa30093a87bf9b9428b0c922d15d43be1d0c67a5d88c996ef77f23e1d225119da", 0x4b}, {&(0x7f00000007c0)}, {&(0x7f0000002280)="51a3cc204fd13f6f2b1067ba45b8d20c1726def49ec98e081f51c78214ca5f15f88280669f752b61485b62f020c93d88404763624ee2755731269e417e214d617523c1a1114daa5b0a8fef1baeb2e3d54689b8b302cf5937bb7273bbcdf027ef331654ef3e5cc2430eb46aeb4f8409798a3d9ec9ae6987793f8e69974433a1428072000ad0ac169772a187522186400f6710665902c5aa926498eecc056d4c6e0b40a7cc1fcab89b3067b50cdabf442dc2ab170dc7d387239191bfff27c57f84500531093004b8700ac5d045c8e8485ae19ab14e1e8244be35b6495af4e889295a48c9af9b27d58d3bb85a644d02824945b3bd980a2fec", 0xf7}], 0x3, 0x0, 0x0, 0x20000000}}, {{&(0x7f00000023c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000025c0)=[{&(0x7f0000002440)="e7b9fd799a2d0b38391663ff198c2fe6223d09287658133fbac9daa325de86cd0a588552911caa6448495e2d3b32a4688633b4098bbb3c97ddcdb132591f048404e5271d8b8d157f9bd0d85f2303cdb908ddf3db4a8e4872821d622609526487f8c7cefaf013499af4d3e7c4f22fea3a8c1287c76d16dc15553c9c3f2a41ee3f957eff816a9cd98863d169765ba9b15ee79ea94adb49963dcda51af5393e18af3371996de743d7a87f1ca12492fd72819ea6d5fe19333f1f8e7ba764bc9a53047216396d7d0e9b59053c8141d2edf848c27a459cb3435d31ed7f109f29c94943c878eb9b0ba928", 0xe7}, {&(0x7f0000002540)="3bbdb5bb0feb83a9a477a6204ca673e1d3fca5ade489b5b586fce394d893859a610ba0d57ac475c395fd4967d5ad1859aa14125d46ad4aabce67697c771baa5dca6e4ba1d7401096651780a7f1e6461910d98ac4fc3a57fd26f327ae0c55714c724db005175527d10676eecafd418f028a1d18f60fe5dfe7d192a5d89667c3", 0x7f}], 0x2, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r0, @ANYRESDEC=r3, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES64=r2, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r4, @ANYRES16=r2, @ANYRES32=r0, @ANYRES32=r4, @ANYRES16=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES8=r2, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES32=0x0, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="000000004c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00050000"], 0xe0, 0x8050}}], 0x5, 0x0) getpeername$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) (async) setrlimit(0xe, &(0x7f0000000080)={0x8606, 0xffff}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xac02, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000440)={0x8, 0x0, [{0x9d1, 0x0, 0x2}, {0x985, 0x0, 0x2}, {0x306, 0x0, 0x1c27368b}, {0xaf6, 0x0, 0x9}, {0x344}, {0xab3, 0x0, 0x2}, {0xb1c, 0x0, 0xe}, {0x571, 0x0, 0x800}]}) r8 = socket$netlink(0x10, 0x3, 0x8) (async) socket$netlink(0x10, 0x3, 0x7) (async, rerun: 32) writev(r0, &(0x7f0000000800)=[{&(0x7f00000004c0)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}, {&(0x7f0000000b00)="f3cf2e8603cb343bc33ee82649e3bc17c1246369345cf5172d15fbcdb31865ad864ff5b4caabfdd31497da150fb192107ed0430c157bd06a7ff7fcc01adb726cb79316e984d7d7899d998f626e470302ea02d60948faec20a12686387f6de4f168e5a2", 0x63}], 0x2) (async, rerun: 32) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000740)) (async, rerun: 64) bind$unix(r9, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (rerun: 64) r10 = socket$unix(0x1, 0x2, 0x0) bind$unix(r10, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x48) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) (rerun: 32) ioctl$VHOST_SET_VRING_ERR(r12, 0x4008af22, &(0x7f0000000700)={0x3, r0}) (async) connect$unix(r11, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) writev(r8, &(0x7f0000000140)=[{&(0x7f00000004c0)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0xf0}], 0x1) ioctl$KVM_SET_GUEST_DEBUG_x86(r0, 0x4048ae9b, &(0x7f0000000640)={0xa0003, 0x0, {[0x8, 0x9, 0x149, 0x7, 0x489, 0x8, 0x200, 0x6]}}) (async) io_setup(0x7ff, &(0x7f0000000000)) 799.87671ms ago: executing program 0 (id=366): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000040)={0x40, 0x14, 0x1, 0x3, 0xd9, 0x9, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newsa={0x13c, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in6=@loopback, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7f}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0xfe}, [@algo_aead={0x4c, 0x12, {{'aegis128-aesni\x00'}, 0x11, 0x40}}]}, 0x13c}}, 0x804) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000240)=[{&(0x7f0000000180)='wi', 0x2}, {&(0x7f0000000100)="0a62a8ea", 0x4}], 0x2, 0x1) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000200)) r5 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e24, 0x80, @loopback={0x12, 0xa8aaaafffeaaaa1e}, 0x8007}, 0x1c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x180, 0x2, 0x2, 0x801, 0x0, 0x0, {0x3}, [@CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_MASK={0x94, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0xfffe}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @local}}}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x44050}, 0x9814) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000012300)=ANY=[@ANYBLOB="3400000011000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14001a8008000900ffffffff0800be"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 760.640702ms ago: executing program 0 (id=367): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x1}) pwritev2(r1, &(0x7f00000035c0)=[{&(0x7f0000000040)="323c1fac9f", 0x5}], 0x1, 0x47, 0xf7ab, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb8100592086dd694f920600383afffe80000000000000000000000000000300000000000000000000000000000001040190"], 0x72) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0x1, &(0x7f0000000f00)="f5", 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x200080, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000180)={[0x80000000008, 0xd, 0x2, 0x4, 0x2, 0x8, 0x1ff, 0x6, 0x0, 0x3, 0x4, 0x4, 0x9, 0x1ff, 0xffffffffffffffff, 0x5b68], 0x200000, 0x100000}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r5) lseek(r5, 0x3, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) getsockopt(r6, 0xff, 0x24, 0x0, &(0x7f00000002c0)) getdents(r5, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8982, &(0x7f0000000000)={0x7, 'veth1_to_batadv\x00', {0xdb1}, 0x7558}) 645.201298ms ago: executing program 0 (id=368): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="796100000000000000027e000000330003"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf4, r3, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4004}, 0x9004) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000300ea1120000005000000", 0x29}], 0x1) 467.992976ms ago: executing program 4 (id=369): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xffffffe7, @private2, 0xfffffff9}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) socket$netlink(0x10, 0x3, 0x0) r3 = syz_usb_connect(0x3, 0x62, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501", @ANYRESHEX=0x0], 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003311b7f1f7e0017b4"]}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000140)=@ethtool_cmd={0x6, 0x80000000, 0x0, 0x9, 0x2, 0x3, 0xff, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x7, 0xff, 0x0, 0xfffffeff}}) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000540)="43210098") r7 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r7, 0x0, 0x9, 0x9) lseek(r7, 0x9, 0x4) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000040)) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, 0x0, 0x0) r9 = inotify_init1(0x80800) inotify_add_watch(r9, &(0x7f0000000040)='.\x00', 0xc0000484) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x0) r10 = openat$dir(0xffffffffffffff9c, &(0x7f00000026c0)='./file0\x00', 0x12100, 0x0) preadv2(r10, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) timer_create(0x5, &(0x7f0000000080)={0x0, 0x41, 0x4, @tid=r11}, &(0x7f0000000180)) 461.067777ms ago: executing program 1 (id=370): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1000) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r2, 0x4) copy_file_range(r2, 0x0, r1, 0x0, 0xffffffffa003e459, 0x700000000000000) 393.36523ms ago: executing program 1 (id=371): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) (async) r0 = syz_clone(0x0, 0x0, 0xfffffffffffffd23, 0x0, 0x0, 0x0) ptrace(0x4206, r0) clock_nanosleep(0x9, 0xfcfd, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) ptrace(0x4207, r0) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) 329.801603ms ago: executing program 1 (id=372): syz_usb_connect(0x5, 0x9a7, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0x58, 0xd1, 0xbf, 0x8, 0x7b8, 0x3073, 0xeab8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x995, 0x2, 0x9, 0x8, 0x10, 0x5, "", [{{0x9, 0x4, 0xbd, 0x8, 0xd, 0x2b, 0x7a, 0xdc, 0x7, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x0, 0x6, 0x6}, {0x6, 0x24, 0x1a, 0xb369, 0xb}, [@mdlm={0x15, 0x24, 0x12, 0x2}]}, @uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x4, 0xe, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x0, 0x9, 0x3}]}], [{{0x9, 0x5, 0x2, 0x1, 0x40, 0x6, 0x11, 0x2, [@generic={0x22, 0x21, "5ac97a442cd3726e0fa1e622d66b193d6a2fc0c82d17b119d2733772c750378d"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x200, 0x8, 0x86, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x1}]}}, {{0x9, 0x5, 0xe, 0x8, 0x3c311c5c4b9080be, 0x9, 0x9c, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x3}]}}, {{0x9, 0x5, 0x6, 0x10, 0xa63c8fd4929d514e, 0x80, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xd, 0xcc87}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x8}]}}, {{0x9, 0x5, 0x4, 0x4, 0x8, 0x4, 0xfb, 0x32, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfe, 0x1}]}}, {{0x9, 0x5, 0x9, 0xfc81e4922e8055b7, 0x40, 0xfd, 0x4, 0x3, [@generic={0xca, 0x2, "1a3fc498f78ec49c82b1e658f6dd283194d486f9f998d34ae97d8fcacc0ce955c3a39a07c2e171f9dfd21e604312f8091ddce47bdebfcca2f090dbab3e1c4d6c07ee814af4e4af07045c87fe8e86139cd6a98608f67970c1ff90b5b385795cef907f07be90bfe9c6ea600ac5ca8c20a419a0830f15c069f8cbeb1cccca431958db42d600d646358c5a1b3bdc3dc72232d6aa70f81077d459161b5adff613c8f96aa988c14a97caa24a8961c2a62fc59e393c64d6a02b65e2f4a282f3bef0a15a57c7d8a63a049fea"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xd4}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x81, 0x4, 0x99, [@generic={0x75, 0x23, "d9a60d1cff78403a2392a5468a89543d9e32ab4aa7a20ecc91a74b04087fa89ec5a6e47341bd61e9878ba41beec18054f50a9633da86099fc05f37b416ceca65948682052d24de1b4bf668bd104729dfecb46e8f7fdaa5bd5ef433d8cef60d2f6d357241c3c372263a39ee1741ce86f8b0ceb6"}]}}, {{0x9, 0x5, 0xd, 0x3, 0xb0572aa601bc0b26, 0x23, 0x80, 0x7, [@generic={0xea, 0x23, "df578ecaec48a83c381428ea46f1d913cf2ba053d9e5962749a818440c48d4389618125d688184cc111231e01d30b4ee1b0aafb984029df436e2c90ce473598a429f8f9976d05524ba547e32f469a003adae628774e27a29b3ba80790b4e8580f4afbad7a085a38c9bbc8827b01b04a6bcd8b89d41cc349cf4b5a01ba3865d90d1e191d64c3dec2d1c4dc3f0044e80d58c974b64f7a3cf79b9d9c4abdd4ed9289ac8237200876c689e27e36a7948c8eb7efb4ccc77bc5f2d3893d110bf007e0ca051e880e007f433287669695ae0a51a30c5d33660020af83bbd5c467124b67ee10dda6f4e747150"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x400, 0xf0, 0x4, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x7}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x6, 0x5, 0x2, [@generic={0x7b, 0x22, "3301812208dc27d29bd8e91cd1bae54dc8115f4473f50c28ff983e8f94667f67b1cb4d7bc51dcacb528b0b84fae3a3c22b81df8b02eafd524b1c55d8e7439ade7f75d9c208633ce8ee09a5be87997ac95af898940d432fb93f06d2cdff88df1a64d01885e71750504fd55be0adbfce6176037420e95b342acb"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x4, 0x47, 0x2, [@generic={0xf0, 0xa, "96f48f87b28b519cd53743fa10a5e4ae99d86498dc45754cb69ca6e3d1153fa53f6262d079e4a74cd7f11937e6e1567047d04e9d373cc318bae6c7e26916250ccbe7e928f671340a4b739a8408c44d5300ec9d4cd7d804b6f2b654c8d39a5dc35d4c4d55caf94a1b32fb8b2a8a649b4ed5b6114441b30defe082344a0781fce7f1af7bea6601e32db6599699271b1e6eebf54a53f97489b3d946b51144651e542683f69c101707d4aa03425e94f08d6fff56f84701faa6d41a951c061ebe93d99148344d5d958dcaef0d3c9db35f5d0f9e17799135263d3f3b958244b8765f8d5c2256d6587d9dd3a3dbae351a81"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0xe, 0x7f, 0xc7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0xffff}]}}, {{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x6, 0x7, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7fff}]}}]}}, {{0x9, 0x4, 0x2, 0x1, 0xd, 0x58, 0x42, 0x0, 0xff, [], [{{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x0, 0x1, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x7}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0xb, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x5}, @generic={0x99, 0xe, "5b40cf5c951a644f4643885982a08663d73c5c6df48cadfcc96f40a033cad6bab90f4b33f6107579809aec29f0b9baee3b1a5581877a93c4afed9a4a5c78567d6cfe44c32d88dc1b31cfdb2b2f57a13308368171882123aee0671724542471867ca009c54403fc625a5ef9d910d1a1db57e7efc4fcbd24a56176ea5b0026e97a166d891aa39485362fb2fbb4895131f72049325090e8e8"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x8, 0x1, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x8}, @generic={0x56, 0x5, "bf182c746e9197c528bb5eefbcb82a8b1355bbbb1861681eafac9cf215912d7f0bb9d45672c232368c736c2cb751a472396c3afba1589e967196c2c13189c1654180a17402b89c5d957eb4be6d3039f6128560c5"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x3ff, 0x4, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x1ff}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x8}]}}, {{0x9, 0x5, 0x6, 0x1, 0x400, 0x0, 0xe, 0x69, [@generic={0xc5, 0x31, "3d461c9f6e8509a587d294217e720199c624c9d919fa0b78644f5b5917e282fc1c3c13f35b8aed93ea857c8326916a6f09748e92c283abaeebf6f6ebae5afa13eb3b7da515b0eeb95969b941d99c4a94c0e016f78eaa4f8a6eaf5b37462d80206ff268523b624461c1d2a5aa673c9160aaf88aa4310ca7aa75c0f4988d1ab001a80fe7c0811148d2200e363929bd7e0e497def65e8a35fb67572ae8b94c84d50d0dee544eabbaa6c33983ef5012f1edc11532ed42c6e5702698e59cd0e7109d414dc2a"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x3, 0x26, 0x6, [@generic={0x4b, 0x8, "b8d5a8053f1d57a24a6827bcfcba8d0092b2f3cd115b64f7a6ef82004aafd07b711e97092f8437680e8ed66637d55a5cc023fa08590eb54222ef341081413096670abc287de3353214"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x5}]}}, {{0x9, 0x5, 0x3, 0x4, 0x3ff, 0x1, 0x7f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6c, 0xffff}]}}, {{0x9, 0x5, 0xd, 0x8, 0x10, 0x0, 0x9, 0x9, [@generic={0x21, 0xb, "d79cbd52e878943269bebcdbc019b1ddf516976fb2fe442ecf1dc2fc226fde"}, @generic={0x68, 0x9, "707d0a1277095cf05068811584d9972ab597f2dc1bf4f57f1f874c192bdd2b869e5cb86328fb382c841145394618a1d09d39f5ab7630e2efd40043ef2d9d2db3dc5bad8fca6d93163678136928aa2e3431057697fa64f8d5edd0afa02d9a78167ed92e45c61d"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x3, 0x9, 0x6, [@generic={0x4c, 0xe, "f14e09260a25f241e413097a2616d1e96d27896b1295d6842b732a88dbfbf29f2865bad351958ea83c3fe4e96718c4e548f6fa37ed81250c6fe269d33f79796f2f18d74471c56e131095"}, @generic={0xb7, 0x7, "45b491c2e1684e37823197d03e24f63a4819ad75352ad3f3b792602b2f93153cbd7a6d4d6bd1cb151da1ac73506b2c91acdf4e7439dc019ab8a413752fd222cee7a49a8690b5ea17aca1fd1ad4ed1247206e003548096f66aecfc4478f95903586dd5462eba3917b68c9903ffd7c13f8c61758fcfe05d20c37a8314539fe5d085e74cd9a63f252a2fb42b9744176a298558ebd513b5042d70914b9e8824fc517e3f12500e50a1ce7a5781f2a003f2e99c570589b17"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x200, 0x2, 0x6, 0xae, [@generic={0x8a, 0x31, "9769d158d7febf1794759096014bf5270c574cd5668a26909ff73d4d8953189ce79050c1dc9aac65d794daca21ae3d5f92cf99b05e53328eb4dd7a92a3481f93e5f0dd047044813820831d53914a59359021aa4b75521dc63a2a61f423bcd199ffdf8f75e7e714de63dc084c3f902d591d3587cb5552b5fb990cdedc89c1b46af4e59268207b05dc"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0xbf, 0x7f, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2b, 0x8000}]}}, {{0x9, 0x5, 0x6, 0x8, 0x8, 0x4, 0x9, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x81, 0x4}]}}, {{0x9, 0x5, 0x4, 0x0, 0x7af, 0x8, 0x1, 0x23, [@generic={0x2, 0x5}]}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x7f, 0xb8, 0x0, 0x8, 0xe}, 0x8, &(0x7f0000000080)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0xc7, &(0x7f0000000100)=@string={0xc7, 0x3, "26365e175fbddf58ae74423083f93e8babc7eb4be82b827d77bb3446b644100fccb766482597f8f4115ef3972a91384cee6d5c0508be87f9700cb6957b825303e3a0480af8ea3250bac881019af8d4fa15ee1468df31caf7a755ffd8b083161a5f6298d7ffa64b111af1afcdf03e7a3df0829fa6b20a27113a724c4586df14e6462f2db0cb1fa0a5e6f86f6561ca66f2a20922dc040efbef38388f7422ca12f9eac2431f847dfc1b43671ca41f70f5479ae1d29ba17123ce592e53ad17cb120b2ef965a3dc"}}, {0x71, &(0x7f0000000200)=@string={0x71, 0x3, "c76338ff60e84756273acf632dcfac559d54fe2161fb0a204e318b3b08acc06c000af63e05b02e1a6893a10cff6a28dac8bff4291744df5e6ded15c5df487c9feb4d5384133ca4bf08c0497e7a46533610659529f74a8672669b8e8554d7651e160e6d11b77d9426f0d93b2272cebd"}}]}) 213.134009ms ago: executing program 33 (id=372): syz_usb_connect(0x5, 0x9a7, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0x58, 0xd1, 0xbf, 0x8, 0x7b8, 0x3073, 0xeab8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x995, 0x2, 0x9, 0x8, 0x10, 0x5, "", [{{0x9, 0x4, 0xbd, 0x8, 0xd, 0x2b, 0x7a, 0xdc, 0x7, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x0, 0x6, 0x6}, {0x6, 0x24, 0x1a, 0xb369, 0xb}, [@mdlm={0x15, 0x24, 0x12, 0x2}]}, @uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x4, 0xe, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x0, 0x9, 0x3}]}], [{{0x9, 0x5, 0x2, 0x1, 0x40, 0x6, 0x11, 0x2, [@generic={0x22, 0x21, "5ac97a442cd3726e0fa1e622d66b193d6a2fc0c82d17b119d2733772c750378d"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x200, 0x8, 0x86, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x1}]}}, {{0x9, 0x5, 0xe, 0x8, 0x3c311c5c4b9080be, 0x9, 0x9c, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x3}]}}, {{0x9, 0x5, 0x6, 0x10, 0xa63c8fd4929d514e, 0x80, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xd, 0xcc87}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x8}]}}, {{0x9, 0x5, 0x4, 0x4, 0x8, 0x4, 0xfb, 0x32, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfe, 0x1}]}}, {{0x9, 0x5, 0x9, 0xfc81e4922e8055b7, 0x40, 0xfd, 0x4, 0x3, [@generic={0xca, 0x2, "1a3fc498f78ec49c82b1e658f6dd283194d486f9f998d34ae97d8fcacc0ce955c3a39a07c2e171f9dfd21e604312f8091ddce47bdebfcca2f090dbab3e1c4d6c07ee814af4e4af07045c87fe8e86139cd6a98608f67970c1ff90b5b385795cef907f07be90bfe9c6ea600ac5ca8c20a419a0830f15c069f8cbeb1cccca431958db42d600d646358c5a1b3bdc3dc72232d6aa70f81077d459161b5adff613c8f96aa988c14a97caa24a8961c2a62fc59e393c64d6a02b65e2f4a282f3bef0a15a57c7d8a63a049fea"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xd4}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x81, 0x4, 0x99, [@generic={0x75, 0x23, "d9a60d1cff78403a2392a5468a89543d9e32ab4aa7a20ecc91a74b04087fa89ec5a6e47341bd61e9878ba41beec18054f50a9633da86099fc05f37b416ceca65948682052d24de1b4bf668bd104729dfecb46e8f7fdaa5bd5ef433d8cef60d2f6d357241c3c372263a39ee1741ce86f8b0ceb6"}]}}, {{0x9, 0x5, 0xd, 0x3, 0xb0572aa601bc0b26, 0x23, 0x80, 0x7, [@generic={0xea, 0x23, "df578ecaec48a83c381428ea46f1d913cf2ba053d9e5962749a818440c48d4389618125d688184cc111231e01d30b4ee1b0aafb984029df436e2c90ce473598a429f8f9976d05524ba547e32f469a003adae628774e27a29b3ba80790b4e8580f4afbad7a085a38c9bbc8827b01b04a6bcd8b89d41cc349cf4b5a01ba3865d90d1e191d64c3dec2d1c4dc3f0044e80d58c974b64f7a3cf79b9d9c4abdd4ed9289ac8237200876c689e27e36a7948c8eb7efb4ccc77bc5f2d3893d110bf007e0ca051e880e007f433287669695ae0a51a30c5d33660020af83bbd5c467124b67ee10dda6f4e747150"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x400, 0xf0, 0x4, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x7}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x6, 0x5, 0x2, [@generic={0x7b, 0x22, "3301812208dc27d29bd8e91cd1bae54dc8115f4473f50c28ff983e8f94667f67b1cb4d7bc51dcacb528b0b84fae3a3c22b81df8b02eafd524b1c55d8e7439ade7f75d9c208633ce8ee09a5be87997ac95af898940d432fb93f06d2cdff88df1a64d01885e71750504fd55be0adbfce6176037420e95b342acb"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x4, 0x47, 0x2, [@generic={0xf0, 0xa, "96f48f87b28b519cd53743fa10a5e4ae99d86498dc45754cb69ca6e3d1153fa53f6262d079e4a74cd7f11937e6e1567047d04e9d373cc318bae6c7e26916250ccbe7e928f671340a4b739a8408c44d5300ec9d4cd7d804b6f2b654c8d39a5dc35d4c4d55caf94a1b32fb8b2a8a649b4ed5b6114441b30defe082344a0781fce7f1af7bea6601e32db6599699271b1e6eebf54a53f97489b3d946b51144651e542683f69c101707d4aa03425e94f08d6fff56f84701faa6d41a951c061ebe93d99148344d5d958dcaef0d3c9db35f5d0f9e17799135263d3f3b958244b8765f8d5c2256d6587d9dd3a3dbae351a81"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0xe, 0x7f, 0xc7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0xffff}]}}, {{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x6, 0x7, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7fff}]}}]}}, {{0x9, 0x4, 0x2, 0x1, 0xd, 0x58, 0x42, 0x0, 0xff, [], [{{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x0, 0x1, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x7}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0xb, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x5}, @generic={0x99, 0xe, "5b40cf5c951a644f4643885982a08663d73c5c6df48cadfcc96f40a033cad6bab90f4b33f6107579809aec29f0b9baee3b1a5581877a93c4afed9a4a5c78567d6cfe44c32d88dc1b31cfdb2b2f57a13308368171882123aee0671724542471867ca009c54403fc625a5ef9d910d1a1db57e7efc4fcbd24a56176ea5b0026e97a166d891aa39485362fb2fbb4895131f72049325090e8e8"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x8, 0x1, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x8}, @generic={0x56, 0x5, "bf182c746e9197c528bb5eefbcb82a8b1355bbbb1861681eafac9cf215912d7f0bb9d45672c232368c736c2cb751a472396c3afba1589e967196c2c13189c1654180a17402b89c5d957eb4be6d3039f6128560c5"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x3ff, 0x4, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x1ff}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x8}]}}, {{0x9, 0x5, 0x6, 0x1, 0x400, 0x0, 0xe, 0x69, [@generic={0xc5, 0x31, "3d461c9f6e8509a587d294217e720199c624c9d919fa0b78644f5b5917e282fc1c3c13f35b8aed93ea857c8326916a6f09748e92c283abaeebf6f6ebae5afa13eb3b7da515b0eeb95969b941d99c4a94c0e016f78eaa4f8a6eaf5b37462d80206ff268523b624461c1d2a5aa673c9160aaf88aa4310ca7aa75c0f4988d1ab001a80fe7c0811148d2200e363929bd7e0e497def65e8a35fb67572ae8b94c84d50d0dee544eabbaa6c33983ef5012f1edc11532ed42c6e5702698e59cd0e7109d414dc2a"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x3, 0x26, 0x6, [@generic={0x4b, 0x8, "b8d5a8053f1d57a24a6827bcfcba8d0092b2f3cd115b64f7a6ef82004aafd07b711e97092f8437680e8ed66637d55a5cc023fa08590eb54222ef341081413096670abc287de3353214"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x5}]}}, {{0x9, 0x5, 0x3, 0x4, 0x3ff, 0x1, 0x7f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6c, 0xffff}]}}, {{0x9, 0x5, 0xd, 0x8, 0x10, 0x0, 0x9, 0x9, [@generic={0x21, 0xb, "d79cbd52e878943269bebcdbc019b1ddf516976fb2fe442ecf1dc2fc226fde"}, @generic={0x68, 0x9, "707d0a1277095cf05068811584d9972ab597f2dc1bf4f57f1f874c192bdd2b869e5cb86328fb382c841145394618a1d09d39f5ab7630e2efd40043ef2d9d2db3dc5bad8fca6d93163678136928aa2e3431057697fa64f8d5edd0afa02d9a78167ed92e45c61d"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x3, 0x9, 0x6, [@generic={0x4c, 0xe, "f14e09260a25f241e413097a2616d1e96d27896b1295d6842b732a88dbfbf29f2865bad351958ea83c3fe4e96718c4e548f6fa37ed81250c6fe269d33f79796f2f18d74471c56e131095"}, @generic={0xb7, 0x7, "45b491c2e1684e37823197d03e24f63a4819ad75352ad3f3b792602b2f93153cbd7a6d4d6bd1cb151da1ac73506b2c91acdf4e7439dc019ab8a413752fd222cee7a49a8690b5ea17aca1fd1ad4ed1247206e003548096f66aecfc4478f95903586dd5462eba3917b68c9903ffd7c13f8c61758fcfe05d20c37a8314539fe5d085e74cd9a63f252a2fb42b9744176a298558ebd513b5042d70914b9e8824fc517e3f12500e50a1ce7a5781f2a003f2e99c570589b17"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x200, 0x2, 0x6, 0xae, [@generic={0x8a, 0x31, "9769d158d7febf1794759096014bf5270c574cd5668a26909ff73d4d8953189ce79050c1dc9aac65d794daca21ae3d5f92cf99b05e53328eb4dd7a92a3481f93e5f0dd047044813820831d53914a59359021aa4b75521dc63a2a61f423bcd199ffdf8f75e7e714de63dc084c3f902d591d3587cb5552b5fb990cdedc89c1b46af4e59268207b05dc"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0xbf, 0x7f, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2b, 0x8000}]}}, {{0x9, 0x5, 0x6, 0x8, 0x8, 0x4, 0x9, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x81, 0x4}]}}, {{0x9, 0x5, 0x4, 0x0, 0x7af, 0x8, 0x1, 0x23, [@generic={0x2, 0x5}]}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x7f, 0xb8, 0x0, 0x8, 0xe}, 0x8, &(0x7f0000000080)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0xc7, &(0x7f0000000100)=@string={0xc7, 0x3, "26365e175fbddf58ae74423083f93e8babc7eb4be82b827d77bb3446b644100fccb766482597f8f4115ef3972a91384cee6d5c0508be87f9700cb6957b825303e3a0480af8ea3250bac881019af8d4fa15ee1468df31caf7a755ffd8b083161a5f6298d7ffa64b111af1afcdf03e7a3df0829fa6b20a27113a724c4586df14e6462f2db0cb1fa0a5e6f86f6561ca66f2a20922dc040efbef38388f7422ca12f9eac2431f847dfc1b43671ca41f70f5479ae1d29ba17123ce592e53ad17cb120b2ef965a3dc"}}, {0x71, &(0x7f0000000200)=@string={0x71, 0x3, "c76338ff60e84756273acf632dcfac559d54fe2161fb0a204e318b3b08acc06c000af63e05b02e1a6893a10cff6a28dac8bff4291744df5e6ded15c5df487c9feb4d5384133ca4bf08c0497e7a46533610659529f74a8672669b8e8554d7651e160e6d11b77d9426f0d93b2272cebd"}}]}) 0s ago: executing program 3 (id=374): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'hsr0\x00', 0x400}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r6) r7 = getuid() r8 = memfd_secret(0x0) sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)={0x148, 0x1c, 0x200, 0x70bd29, 0x25dfdbff, "", [@nested={0x54, 0xa9, 0x0, 0x1, [@generic="b52452be39c40fc5215c0ac015b80155df713d15076bf5c25bfbc5d4ff308985383a90db880476b7e902c054ef934d3a51477e292325bfe169c26bf974100bea8186e8a99b42478cc3cd7510", @nested={0x4, 0xcb}]}, @generic="597d9abc1eea3e2e802bc88e4e7ce684bd391655c4f7059c97e8ea624b28c85afb37b2b737f08c51e120a7dad17e3a0036100c09d23c24be75195d332a2309f2b76b946dc97549bd1b3c2c54f0162cc68b6b42f810ca7c4ebd634d040fd615c9aa476f593f1a12cc1ea35679c27e909881e216918b8e08570e92f717659b51a7271ee5e30c9c70fe4eb156eedeaaecd95e1d893f915e33d0e0621d44f77d9e39fe5dea003c440576092feb9bfbce27c4afbb26eb9e611a0a429e070de9b16d5ff43cc558973c67fd7d5f3e8e0f8743b5f16e4f68df30411ea51647", @typed={0x8, 0xd5, 0x0, 0x0, @uid=r6}]}, 0x148}, {&(0x7f0000000440)={0x98, 0x2a, 0x800, 0x70bd28, 0x25dfdbfe, "", [@typed={0x8, 0x110, 0x0, 0x0, @fd=r4}, @generic="cd8a5c3bc2cadff9d9b338edc24aa7ef9eed396f9f3f90da0639d7e3069237fc9e09443ac89c65108adc031c8e5ddeb3c2c954eab0ededb94f03b95497b9f05dc3b19ce9a258732723b8f015bab8d0c40e414a8e69007edb87aca8399657de2bb4c97bec317326303f1b964e8fee054ed3e3a60772", @typed={0x8, 0x85, 0x0, 0x0, @fd=r1}]}, 0x98}, {&(0x7f0000000500)={0x234, 0x2f, 0x8, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x4, 0xd2}, @typed={0x4, 0x54}, @generic="a2452f10e691de8fd00d1f1a17111060e3ddbafded03f67289615b2e33ca68e264c8c0aa26c6b0571130e4f53e67a9122cd9cabe064056855b54e5cce400e21fd1569a93f25c95c86ebf0ae0024de50c7822cd2b81435636f9e065a5e96045617a28b48ab0ab58b0cd6ed8afd9f2002de7c1e2fe30a5b20877c176a4abf7df855e7a23eddf5eaaede360393a79290606f5af9da2ffcdc7c9497e5776d86de3b9a42978f1a88c7f531f2851e1336d7f8b85c2fea8ed7fa143ca4eade8d4502aab225f35ff7f5c0e7b45e05f45092819de", @generic="c31c652624fdc8e311146daa7c72e85cec8274dbe8d82f28de717a8eef01a7013802606fe54dc6a7551c4b3fd9d1aeed", @generic="c120bb0b6d4651f842f1cd41aa8ddc61266229234c5195b2453b093175c3b78adc52fb3069d4ca2f206421f01339116449508311e1efd210b904ba9257f6be3bf4f979eb20a33e3f55743c6b7e68dcf251d80c34b1a1b8787f4d9512ac3eec9b7b2e93b42e00fbe63c91b347bf454ac1b9b0f70aa7eb475390ebc0f6cd730952ae6fe877c37227418958b456458431e0e9e4c1fe256979a39ed39052eb5f6ddfc7a07d826c19c1805c82a7de9918303967858df60b58746a6a1d94c9fdc644538f2b1fce6a3b46b304ed757649e6", @generic="5e7efe34f6fffa85dd90e8d1d31b908c4adceddd9d", @generic="b8bdbd76c5ed005062948068be3550a642b87c9332ac2891af01e4143744219a12bd78b6609233ffef15b541ce55b77549", @typed={0x8, 0xf7, 0x0, 0x0, @ipv4=@multicast2}]}, 0x234}, {&(0x7f0000000740)={0x2d8, 0x3b, 0x200, 0x70bd28, 0x25dfdbfc, "", [@typed={0x4, 0xd6}, @nested={0x1ed, 0x39, 0x0, 0x1, [@generic="8222e62c4fc9b3c9d8632b4f0f9a41e20e058fefe361cb64c8a05973f2e60bfb19cbe0db00e653f065bdc48ab5d4b45fd809c3ce44a77209605bae4eea37e1c7a958a4cbdf28b75eb017f65d7d6ca3c416c081e228567a06e1d6aa5b6849c488ea35f366a6e54a749752de77c82d6cf65b07ed967316322538636899642944975af8bfb839ae2006007a8d2d8ad1a0e259d6c93463b60aac9fd6e236ae1f526c546f8be6629b2cb4db2b05b72581b14e6c5cfdaecde9876fcdbd", @nested={0x4, 0x75}, @typed={0x8, 0x7a, 0x0, 0x0, @uid=r7}, @nested={0x4, 0x9a}, @generic="276cd88a5634c5f6cffa6993491ace03c1c899e40d881dfdbd672cded70edd3964f958c5211dab46327ee57cf804e294a013c6241e340a36f9c4ad90ebc9ea916cad034a554b9cdcc1cbd2f60df4204f1b81730fa85952f5e37182e7c87e9cc72cb7c62933a0b68d566d97a137ab4529a29c69081ff2a975afe3233cb797941e69a0b30b7d38e1409b52ee38da5f5748acebd1801a66437eb0099a58bc7decb9ad1d96", @generic="1bf7e522b252bed990cc788df7b06782d758354d2436672e47b47b4fdf59baf2e166963ed60697d270f5027d6ad4417a8b2a68ea139c8b5d4234bbd965a1d1ff2d43046bfa467c4c26a8033ce5690dd5445c7fc834df7a4ffb135a1d0907929baa9733d83ea2aa791308375918011b0536aa0b063e8b2d5cd746b921"]}, @generic="3e8cbde4532146e4f5805d9c37fa63052a0e6aa660f30011196e70f462b9263516826d191ae8ef1d66959552c28573412809d514f361c826a432cddc719aaa73d0c9059ff7c038084390b181ac5586e2dc1f20607a9ad795393dde4b172481995810af870558f008104facae244919bd4082a5df9e9823e2fe809f3159242911c2587ca3b8182b3aa4e5ff5db38621e6d60dda1002d5d0ee4ae531bbc62803b9808cc82a173dd9a21dc4136843f0e6480d7b884a9de9b1e7bd30e9602f4867229e7f1d38d4efc5db98e41dfdfcc9bee57db3"]}, 0x2d8}], 0x4, &(0x7f0000000a40)=[@rights={{0x28, 0x1, 0x1, [r0, r2, r3, r8, 0xffffffffffffffff, r3]}}, @rights={{0x2c, 0x1, 0x1, [r2, r2, r0, r3, r2, r2, r0]}}], 0x58, 0x40008c2}, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xd7, 0x56a, 0xc6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfb, 0x40, 0x7}}]}}, 0x0) r9 = dup(r4) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000380)={@val={0xa, 0x892f}, @void, @eth={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4f9206", 0x50, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x6, {0xf, 0x6, "83d483", 0x3, 0x33, 0x1, @remote, @local, [@dstopts={0x2f, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}]}]}}}}}}}}, 0x8a) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x6000) kernel console output (not intermixed with test programs): +0x10/0x10 [ 49.582137][ T807] ? check_stack_object+0x81/0x150 [ 49.582169][ T807] ? __virt_addr_valid+0x2a6/0x380 [ 49.582195][ T807] dump_stack+0x19/0x20 [ 49.582223][ T807] should_fail_ex+0x3d7/0x530 [ 49.582260][ T807] should_fail+0xf/0x20 [ 49.582286][ T807] should_fail_usercopy+0x1e/0x30 [ 49.582316][ T807] _copy_from_user+0x20/0xa0 [ 49.582349][ T807] memdup_user+0x81/0x170 [ 49.582377][ T807] ? strndup_user+0x40/0xd0 [ 49.582405][ T807] strndup_user+0x6c/0xd0 [ 49.582434][ T807] __se_sys_mount+0x9f/0x480 [ 49.582466][ T807] ? ksys_write+0x1f3/0x260 [ 49.582498][ T807] ? __x64_sys_mount+0xf0/0xf0 [ 49.582531][ T807] __x64_sys_mount+0xc3/0xf0 [ 49.582563][ T807] x64_sys_call+0x2021/0x2ee0 [ 49.582595][ T807] do_syscall_64+0x57/0xf0 [ 49.582626][ T807] ? clear_bhb_loop+0x50/0xa0 [ 49.582658][ T807] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.582688][ T807] RIP: 0033:0x7f262fd9c799 [ 49.582717][ T807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.582738][ T807] RSP: 002b:00007f2630ba9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 49.582768][ T807] RAX: ffffffffffffffda RBX: 00007f2630015fa0 RCX: 00007f262fd9c799 [ 49.582786][ T807] RDX: 0000200000000440 RSI: 0000200000000100 RDI: 0000000000000000 [ 49.582802][ T807] RBP: 00007f2630ba9090 R08: 0000200000000200 R09: 0000000000000000 [ 49.582818][ T807] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 49.582833][ T807] R13: 00007f2630016038 R14: 00007f2630015fa0 R15: 00007ffce9b9d208 [ 49.582853][ T807] [ 49.734264][ T809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8939 sclass=netlink_route_socket pid=809 comm=syz.3.160 [ 49.772494][ T379] usb 5-1: Using ep0 maxpacket: 32 [ 49.811314][ T379] usb 5-1: config 0 has no interfaces? [ 49.818385][ T379] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 49.821656][ T813] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 49.827456][ T379] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 49.845488][ T379] usb 5-1: Product: syz [ 49.849803][ T379] usb 5-1: Manufacturer: syz [ 49.854428][ T379] usb 5-1: SerialNumber: syz [ 49.877843][ T379] usb 5-1: config 0 descriptor?? [ 50.086770][ T794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.095459][ T794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.103958][ T794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.112738][ T794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.122101][ T379] usb 5-1: USB disconnect, device number 10 [ 50.148286][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 50.198296][ T535] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 50.278297][ T10] usb 4-1: device descriptor read/64, error -71 [ 50.328233][ T535] usb 2-1: device descriptor read/64, error -71 [ 50.518257][ T10] usb 4-1: device descriptor read/64, error -71 [ 50.558252][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 50.568470][ T535] usb 2-1: device descriptor read/64, error -71 [ 50.608961][ T828] overlay: filesystem on ./bus not supported as upperdir [ 50.710234][ T9] usb 5-1: config index 0 descriptor too short (expected 36, got 27) [ 50.718455][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.728771][ T9] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 8.00 [ 50.738215][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.748043][ T9] usb 5-1: config 0 descriptor?? [ 50.757359][ T9] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 50.764993][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 50.773910][ T9] usb 5-1: Detected FT4232H [ 50.807177][ T836] FAULT_INJECTION: forcing a failure. [ 50.807177][ T836] name failslab, interval 1, probability 0, space 0, times 0 [ 50.820211][ T535] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 50.827962][ T836] CPU: 0 UID: 0 PID: 836 Comm: syz.0.172 Not tainted syzkaller #0 1aa8ac0f99ca3a11aee7c3a781bea815a9b193fa [ 50.827991][ T836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 50.828001][ T836] Call Trace: [ 50.828006][ T836] [ 50.828013][ T836] __dump_stack+0x21/0x30 [ 50.828067][ T836] dump_stack_lvl+0x140/0x1c0 [ 50.828088][ T836] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.828110][ T836] ? selinux_file_open+0x46c/0x630 [ 50.828132][ T836] dump_stack+0x19/0x20 [ 50.828151][ T836] should_fail_ex+0x3d7/0x530 [ 50.828171][ T836] should_failslab+0xac/0x100 [ 50.828188][ T836] kmem_cache_alloc_noprof+0x42/0x410 [ 50.828211][ T836] ? vm_area_dup+0x42/0x570 [ 50.828227][ T836] vm_area_dup+0x42/0x570 [ 50.828242][ T836] __split_vma+0x1ce/0xc10 [ 50.828268][ T836] ? vms_gather_munmap_vmas+0xdd0/0xdd0 [ 50.828293][ T836] ? find_vma+0xd3/0x120 [ 50.828315][ T836] ? can_vma_merge_left+0x187/0x4c0 [ 50.828339][ T836] vma_modify+0x6d9/0x1670 [ 50.828364][ T836] vma_modify_flags+0x182/0x1c0 [ 50.828390][ T836] mlock_fixup+0x1ac/0x700 [ 50.828410][ T836] apply_vma_lock_flags+0x295/0x3c0 [ 50.828430][ T836] ? do_mlock+0xa00/0xa00 [ 50.828450][ T836] ? __cfi_down_write_killable+0x10/0x10 [ 50.828468][ T836] ? __kasan_check_write+0x18/0x20 [ 50.828490][ T836] ? mutex_unlock+0x90/0x240 [ 50.828505][ T836] do_mlock+0x70b/0xa00 [ 50.828524][ T836] ? fput+0x1a4/0x240 [ 50.828541][ T836] ? lru_gen_add_folio+0x860/0x860 [ 50.828560][ T836] ? ksys_write+0x1f3/0x260 [ 50.828581][ T836] ? irqentry_exit+0x4a/0x60 [ 50.828598][ T836] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 50.828614][ T836] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 50.828638][ T836] __x64_sys_mlock+0x64/0x80 [ 50.828657][ T836] x64_sys_call+0x670/0x2ee0 [ 50.828680][ T836] do_syscall_64+0x57/0xf0 [ 50.828700][ T836] ? clear_bhb_loop+0x50/0xa0 [ 50.828723][ T836] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.828744][ T836] RIP: 0033:0x7f262fd9c799 [ 50.828758][ T836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.828772][ T836] RSP: 002b:00007f2630ba9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 50.828791][ T836] RAX: ffffffffffffffda RBX: 00007f2630015fa0 RCX: 00007f262fd9c799 [ 50.828803][ T836] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 50.828814][ T836] RBP: 00007f2630ba9090 R08: 0000000000000000 R09: 0000000000000000 [ 50.828825][ T836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.828835][ T836] R13: 00007f2630016038 R14: 00007f2630015fa0 R15: 00007ffce9b9d208 [ 50.828849][ T836] [ 51.099658][ T794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.108425][ T794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.119175][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 51.127485][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 51.138077][ T9] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 51.148236][ T10] usb 4-1: device descriptor read/64, error -71 [ 51.155682][ T9] usb 5-1: USB disconnect, device number 11 [ 51.162485][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 51.172216][ T9] ftdi_sio 5-1:0.0: device disconnected [ 51.248253][ T535] usb 2-1: device descriptor read/64, error -71 [ 51.388258][ T10] usb 4-1: device descriptor read/64, error -71 [ 51.488254][ T535] usb 2-1: device descriptor read/64, error -71 [ 51.498555][ T10] usb usb4-port1: attempt power cycle [ 51.598434][ T535] usb usb2-port1: attempt power cycle [ 51.633315][ T846] FAULT_INJECTION: forcing a failure. [ 51.633315][ T846] name failslab, interval 1, probability 0, space 0, times 0 [ 51.646026][ T846] CPU: 0 UID: 0 PID: 846 Comm: syz.4.175 Not tainted syzkaller #0 1aa8ac0f99ca3a11aee7c3a781bea815a9b193fa [ 51.646063][ T846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 51.646078][ T846] Call Trace: [ 51.646086][ T846] [ 51.646101][ T846] __dump_stack+0x21/0x30 [ 51.646128][ T846] dump_stack_lvl+0x140/0x1c0 [ 51.646148][ T846] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.646170][ T846] ? check_stack_object+0x81/0x150 [ 51.646193][ T846] ? __virt_addr_valid+0x2a6/0x380 [ 51.646211][ T846] dump_stack+0x19/0x20 [ 51.646231][ T846] should_fail_ex+0x3d7/0x530 [ 51.646252][ T846] should_failslab+0xac/0x100 [ 51.646267][ T846] __kmalloc_cache_noprof+0x41/0x470 [ 51.646290][ T846] ? memdup_user+0xb1/0x170 [ 51.646310][ T846] ? __se_sys_mount+0x15f/0x480 [ 51.646334][ T846] __se_sys_mount+0x15f/0x480 [ 51.646356][ T846] ? ksys_write+0x1f3/0x260 [ 51.646378][ T846] ? __x64_sys_mount+0xf0/0xf0 [ 51.646402][ T846] __x64_sys_mount+0xc3/0xf0 [ 51.646425][ T846] x64_sys_call+0x2021/0x2ee0 [ 51.646448][ T846] do_syscall_64+0x57/0xf0 [ 51.646469][ T846] ? clear_bhb_loop+0x50/0xa0 [ 51.646491][ T846] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.646513][ T846] RIP: 0033:0x7f9a1e99c799 [ 51.646526][ T846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.646540][ T846] RSP: 002b:00007f9a1f7e5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 51.646558][ T846] RAX: ffffffffffffffda RBX: 00007f9a1ec15fa0 RCX: 00007f9a1e99c799 [ 51.646570][ T846] RDX: 0000200000000440 RSI: 0000200000000100 RDI: 0000000000000000 [ 51.646581][ T846] RBP: 00007f9a1f7e5090 R08: 0000200000000200 R09: 0000000000000000 [ 51.646593][ T846] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 51.646603][ T846] R13: 00007f9a1ec16038 R14: 00007f9a1ec15fa0 R15: 00007fffb4f578f8 [ 51.646617][ T846] [ 51.854671][ T848] overlay: filesystem on ./bus not supported as upperdir [ 51.876165][ T850] __nla_validate_parse: 55 callbacks suppressed [ 51.876191][ T850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.177'. [ 51.898279][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 51.919426][ T10] usb 4-1: device descriptor read/8, error -71 [ 52.049527][ T10] usb 4-1: device descriptor read/8, error -71 [ 52.110883][ T535] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 52.148690][ T535] usb 2-1: device descriptor read/8, error -71 [ 52.219332][ T856] netlink: 200 bytes leftover after parsing attributes in process `syz.0.180'. [ 52.228436][ T856] tc_dump_action: action bad kind [ 52.279342][ T535] usb 2-1: device descriptor read/8, error -71 [ 52.298299][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 52.319497][ T10] usb 4-1: device descriptor read/8, error -71 [ 52.417699][ T860] FAULT_INJECTION: forcing a failure. [ 52.417699][ T860] name failslab, interval 1, probability 0, space 0, times 0 [ 52.430455][ T860] CPU: 0 UID: 0 PID: 860 Comm: syz.4.182 Not tainted syzkaller #0 1aa8ac0f99ca3a11aee7c3a781bea815a9b193fa [ 52.430480][ T860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 52.430490][ T860] Call Trace: [ 52.430496][ T860] [ 52.430503][ T860] __dump_stack+0x21/0x30 [ 52.430528][ T860] dump_stack_lvl+0x140/0x1c0 [ 52.430548][ T860] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.430570][ T860] ? kasan_save_track+0x4f/0x80 [ 52.430594][ T860] ? kasan_save_track+0x3e/0x80 [ 52.430617][ T860] ? kasan_save_alloc_info+0x40/0x50 [ 52.430638][ T860] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 52.430661][ T860] dump_stack+0x19/0x20 [ 52.430680][ T860] should_fail_ex+0x3d7/0x530 [ 52.430701][ T860] should_failslab+0xac/0x100 [ 52.430716][ T860] kmem_cache_alloc_noprof+0x42/0x410 [ 52.430738][ T860] ? mas_alloc_nodes+0x254/0x9d0 [ 52.430756][ T860] mas_alloc_nodes+0x254/0x9d0 [ 52.430774][ T860] mas_preallocate+0x783/0xcb0 [ 52.430790][ T860] ? kasan_save_alloc_info+0x40/0x50 [ 52.430810][ T860] ? __cfi_mas_preallocate+0x10/0x10 [ 52.430826][ T860] ? __kasan_check_read+0x15/0x20 [ 52.430847][ T860] ? anon_vma_name+0x51/0xa0 [ 52.430874][ T860] ? vm_area_dup+0x41c/0x570 [ 52.430890][ T860] __split_vma+0x449/0xc10 [ 52.430915][ T860] ? vms_gather_munmap_vmas+0xdd0/0xdd0 [ 52.430940][ T860] ? find_vma+0xd3/0x120 [ 52.430962][ T860] ? can_vma_merge_left+0x187/0x4c0 [ 52.430985][ T860] vma_modify+0x6d9/0x1670 [ 52.431011][ T860] vma_modify_flags+0x182/0x1c0 [ 52.431037][ T860] mlock_fixup+0x1ac/0x700 [ 52.431057][ T860] apply_vma_lock_flags+0x295/0x3c0 [ 52.431077][ T860] ? do_mlock+0xa00/0xa00 [ 52.431096][ T860] ? __cfi_down_write_killable+0x10/0x10 [ 52.431115][ T860] ? __kasan_check_write+0x18/0x20 [ 52.431136][ T860] ? mutex_unlock+0x90/0x240 [ 52.431151][ T860] do_mlock+0x70b/0xa00 [ 52.431170][ T860] ? fput+0x1a4/0x240 [ 52.431187][ T860] ? lru_gen_add_folio+0x860/0x860 [ 52.431207][ T860] ? ksys_write+0x1f3/0x260 [ 52.431229][ T860] ? __cfi_ksys_write+0x10/0x10 [ 52.431251][ T860] ? __kasan_check_read+0x15/0x20 [ 52.431273][ T860] __x64_sys_mlock+0x64/0x80 [ 52.431291][ T860] x64_sys_call+0x670/0x2ee0 [ 52.431315][ T860] do_syscall_64+0x57/0xf0 [ 52.431335][ T860] ? clear_bhb_loop+0x50/0xa0 [ 52.431357][ T860] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.431379][ T860] RIP: 0033:0x7f9a1e99c799 [ 52.431392][ T860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.431406][ T860] RSP: 002b:00007f9a1f7e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 52.431424][ T860] RAX: ffffffffffffffda RBX: 00007f9a1ec15fa0 RCX: 00007f9a1e99c799 [ 52.431436][ T860] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 52.431447][ T860] RBP: 00007f9a1f7e5090 R08: 0000000000000000 R09: 0000000000000000 [ 52.431458][ T860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.431468][ T860] R13: 00007f9a1ec16038 R14: 00007f9a1ec15fa0 R15: 00007fffb4f578f8 [ 52.431482][ T860] [ 52.747437][ T489] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 52.756132][ T10] usb 4-1: device descriptor read/8, error -71 [ 52.756388][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 52.756438][ T36] audit: type=1400 audit(1774307612.830:26326): avc: denied { wake_alarm } for pid=861 comm="syz.4.183" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 52.909397][ T535] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 52.917564][ T10] usb usb4-port1: unable to enumerate USB device [ 52.978314][ T535] usb 2-1: device descriptor read/8, error -71 [ 52.984657][ T489] usb 1-1: device descriptor read/64, error -71 [ 52.996041][ T869] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 53.027004][ T872] overlay: filesystem on ./bus not supported as upperdir [ 53.109017][ T535] usb 2-1: device descriptor read/8, error -71 [ 53.228267][ T489] usb 1-1: device descriptor read/64, error -71 [ 53.238515][ T535] usb usb2-port1: unable to enumerate USB device [ 53.358395][ T31] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 53.468260][ T489] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 53.508263][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 53.514432][ T31] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 53.522802][ T31] usb 4-1: config 179 has no interface number 0 [ 53.529147][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 53.540265][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 53.551850][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 53.558351][ T535] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 53.563192][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 8904, setting to 1024 [ 53.582010][ T31] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 53.595336][ T31] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 53.604431][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.608366][ T489] usb 1-1: device descriptor read/64, error -71 [ 53.619090][ T870] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 53.718312][ T10] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 53.727322][ T535] usb 2-1: unable to get BOS descriptor or descriptor too short [ 53.735657][ T535] usb 2-1: not running at top speed; connect to a high speed hub [ 53.744378][ T535] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.754545][ T535] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 53.765771][ T535] usb 2-1: string descriptor 0 read error: -22 [ 53.772080][ T535] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 53.781196][ T535] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.791518][ T535] usb 2-1: 0:2 : does not exist [ 53.868327][ T489] usb 1-1: device descriptor read/64, error -71 [ 53.878276][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 53.891741][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 53.902540][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.913269][ T10] usb 5-1: config 1 interface 1 has no altsetting 1 [ 53.921397][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.930585][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.938831][ T10] usb 5-1: Product: syz [ 53.943092][ T10] usb 5-1: Manufacturer: syz [ 53.947884][ T870] syzkaller1: entered promiscuous mode [ 53.953426][ T10] usb 5-1: SerialNumber: syz [ 53.958632][ T870] syzkaller1: entered allmulticast mode [ 53.978968][ T489] usb usb1-port1: attempt power cycle [ 54.033460][ T36] audit: type=1400 audit(1774307614.100:26327): avc: denied { write } for pid=864 comm="syz.3.184" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 54.170802][ T884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.179586][ T884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.189629][ T10] usb 5-1: selecting invalid altsetting 1 [ 54.195852][ T10] cdc_ncm 5-1:1.0: bind() failure [ 54.202490][ T10] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 54.210047][ T10] cdc_ncm 5-1:1.1: bind() failure [ 54.223069][ T10] usb 5-1: USB disconnect, device number 12 [ 54.321635][ T535] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 54.329076][ T489] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 54.341005][ T535] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 54.349757][ T489] usb 1-1: device descriptor read/8, error -71 [ 54.357466][ T535] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 54.367472][ T535] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 54.379077][ T535] usb 2-1: USB disconnect, device number 18 [ 54.387596][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.479543][ T489] usb 1-1: device descriptor read/8, error -71 [ 54.718994][ T489] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 54.728580][ T36] audit: type=1400 audit(1774307614.800:26328): avc: denied { write } for pid=887 comm="syz.4.193" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 54.729838][ T888] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.768262][ T489] usb 1-1: device descriptor read/8, error -71 [ 54.806447][ T36] audit: type=1400 audit(1774307614.870:26329): avc: denied { load_policy } for pid=890 comm="syz.4.194" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 54.832928][ T891] SELinux: failed to load policy [ 54.862793][ T36] audit: type=1400 audit(1774307614.930:26330): avc: denied { connect } for pid=894 comm="syz.4.196" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.867949][ T895] syz_tun: entered allmulticast mode [ 54.884134][ T36] audit: type=1400 audit(1774307614.930:26331): avc: denied { write } for pid=894 comm="syz.4.196" laddr=fe80::1088:28ff:fe4d:4ee7 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.913852][ T36] audit: type=1400 audit(1774307614.960:26332): avc: denied { mount } for pid=894 comm="syz.4.196" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 54.938371][ T36] audit: type=1400 audit(1774307614.960:26333): avc: denied { getopt } for pid=894 comm="syz.4.196" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.946979][ T489] usb 1-1: device descriptor read/8, error -71 [ 54.959839][ T36] audit: type=1400 audit(1774307615.000:26334): avc: denied { unmount } for pid=477 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 55.038286][ T55] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 55.039151][ T493] Bluetooth: hci1: command 0x1003 tx timeout [ 55.069492][ T489] usb usb1-port1: unable to enumerate USB device [ 55.110244][ T535] usb 4-1: USB disconnect, device number 25 [ 55.110245][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 55.110433][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 55.239253][ T36] audit: type=1400 audit(1774307615.310:26335): avc: denied { map } for pid=905 comm="syz.0.199" path="socket:[6911]" dev="sockfs" ino=6911 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.295612][ T906] fuse: Bad value for 'group_id' [ 55.300738][ T906] fuse: Bad value for 'group_id' [ 55.318282][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 55.350888][ T911] FAULT_INJECTION: forcing a failure. [ 55.350888][ T911] name failslab, interval 1, probability 0, space 0, times 0 [ 55.364407][ T911] CPU: 0 UID: 0 PID: 911 Comm: syz.0.201 Not tainted syzkaller #0 1aa8ac0f99ca3a11aee7c3a781bea815a9b193fa [ 55.364434][ T911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 55.364444][ T911] Call Trace: [ 55.364450][ T911] [ 55.364456][ T911] __dump_stack+0x21/0x30 [ 55.364482][ T911] dump_stack_lvl+0x140/0x1c0 [ 55.364503][ T911] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.364525][ T911] dump_stack+0x19/0x20 [ 55.364545][ T911] should_fail_ex+0x3d7/0x530 [ 55.364566][ T911] should_failslab+0xac/0x100 [ 55.364582][ T911] kmem_cache_alloc_noprof+0x42/0x410 [ 55.364613][ T911] ? __anon_vma_prepare+0xac/0x560 [ 55.364637][ T911] __anon_vma_prepare+0xac/0x560 [ 55.364660][ T911] do_pte_missing+0x364a/0x44f0 [ 55.364679][ T911] ? __kasan_check_read+0x15/0x20 [ 55.364700][ T911] ? __thp_vma_allowable_orders+0x7f1/0x970 [ 55.364719][ T911] ? pte_marker_clear+0x1b0/0x1b0 [ 55.364736][ T911] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 55.364757][ T911] handle_mm_fault+0x11b8/0x1bf0 [ 55.364774][ T911] ? __cfi_handle_mm_fault+0x10/0x10 [ 55.364790][ T911] ? __cfi_find_vma+0x10/0x10 [ 55.364812][ T911] ? vma_is_secretmem+0x11/0x50 [ 55.364832][ T911] __get_user_pages+0x1170/0x22b0 [ 55.364854][ T911] ? populate_vma_page_range+0x220/0x220 [ 55.364872][ T911] ? down_read+0x7f/0xe0 [ 55.364888][ T911] ? __cfi_down_read+0x10/0x10 [ 55.364905][ T911] __mm_populate+0x2f8/0x430 [ 55.364922][ T911] do_mlock+0x7eb/0xa00 [ 55.364941][ T911] ? fput+0x1a4/0x240 [ 55.364957][ T911] ? lru_gen_add_folio+0x860/0x860 [ 55.364976][ T911] ? ksys_write+0x1f3/0x260 [ 55.364998][ T911] ? __cfi_ksys_write+0x10/0x10 [ 55.365021][ T911] ? __kasan_check_read+0x15/0x20 [ 55.365043][ T911] __x64_sys_mlock+0x64/0x80 [ 55.365061][ T911] x64_sys_call+0x670/0x2ee0 [ 55.365084][ T911] do_syscall_64+0x57/0xf0 [ 55.365105][ T911] ? clear_bhb_loop+0x50/0xa0 [ 55.365127][ T911] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.365148][ T911] RIP: 0033:0x7f262fd9c799 [ 55.365183][ T911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.365204][ T911] RSP: 002b:00007f2630ba9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 55.365230][ T911] RAX: ffffffffffffffda RBX: 00007f2630015fa0 RCX: 00007f262fd9c799 [ 55.365248][ T911] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 55.365259][ T911] RBP: 00007f2630ba9090 R08: 0000000000000000 R09: 0000000000000000 [ 55.365270][ T911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.365280][ T911] R13: 00007f2630016038 R14: 00007f2630015fa0 R15: 00007ffce9b9d208 [ 55.365295][ T911] [ 55.399247][ T913] FAULT_INJECTION: forcing a failure. [ 55.399247][ T913] name failslab, interval 1, probability 0, space 0, times 0 [ 55.498270][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 55.540102][ T913] CPU: 1 UID: 0 PID: 913 Comm: syz.0.202 Not tainted syzkaller #0 1aa8ac0f99ca3a11aee7c3a781bea815a9b193fa [ 55.540196][ T913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 55.540231][ T913] Call Trace: [ 55.540252][ T913] [ 55.540274][ T913] __dump_stack+0x21/0x30 [ 55.540365][ T913] dump_stack_lvl+0x140/0x1c0 [ 55.540440][ T913] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.540511][ T913] ? do_user_addr_fault+0xbbb/0x11e0 [ 55.540602][ T913] dump_stack+0x19/0x20 [ 55.540676][ T913] should_fail_ex+0x3d7/0x530 [ 55.540758][ T913] should_failslab+0xac/0x100 [ 55.540822][ T913] kmem_cache_alloc_noprof+0x42/0x410 [ 55.540908][ T913] ? getname_flags+0xc5/0x700 [ 55.540992][ T913] ? asm_exc_page_fault+0x2b/0x30 [ 55.541069][ T913] getname_flags+0xc5/0x700 [ 55.541161][ T913] user_path_at+0x2b/0x60 [ 55.541216][ T913] __se_sys_mount+0x28a/0x480 [ 55.541299][ T913] ? ksys_write+0x1f3/0x260 [ 55.541375][ T913] ? __x64_sys_mount+0xf0/0xf0 [ 55.541458][ T913] __x64_sys_mount+0xc3/0xf0 [ 55.541542][ T913] x64_sys_call+0x2021/0x2ee0 [ 55.541638][ T913] do_syscall_64+0x57/0xf0 [ 55.541712][ T913] ? clear_bhb_loop+0x50/0xa0 [ 55.541789][ T913] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.541850][ T913] RIP: 0033:0x7f262fd9c799 [ 55.541902][ T913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.541981][ T913] RSP: 002b:00007f2630ba9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 55.542046][ T913] RAX: ffffffffffffffda RBX: 00007f2630015fa0 RCX: 00007f262fd9c799 [ 55.542089][ T913] RDX: 0000200000000440 RSI: 0000200000000100 RDI: 0000000000000000 [ 55.542147][ T913] RBP: 00007f2630ba9090 R08: 0000200000000200 R09: 0000000000000000 [ 55.542187][ T913] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 55.542236][ T913] R13: 00007f2630016038 R14: 00007f2630015fa0 R15: 00007ffce9b9d208 [ 55.542295][ T913] [ 55.599522][ T915] fuse: Unknown parameter '5MۀRm Mcm' [ 55.607053][ T10] usb 5-1: config 9 has an invalid interface number: 189 but max is 1 [ 55.870836][ T10] usb 5-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 55.879642][ T10] usb 5-1: config 9 has an invalid interface number: 2 but max is 1 [ 55.887796][ T10] usb 5-1: config 9 has no interface number 0 [ 55.893979][ T10] usb 5-1: config 9 has no interface number 1 [ 55.900160][ T10] usb 5-1: config 9 interface 189 altsetting 8 endpoint 0xE has invalid maxpacket 32958, setting to 64 [ 55.911321][ T10] usb 5-1: config 9 interface 189 altsetting 8 endpoint 0x6 has invalid maxpacket 20814, setting to 64 [ 55.922478][ T10] usb 5-1: config 9 interface 189 altsetting 8 endpoint 0x9 has an invalid bInterval 253, changing to 11 [ 55.933871][ T10] usb 5-1: config 9 interface 189 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 55.948270][ T45] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 55.956837][ T10] usb 5-1: config 9 interface 189 altsetting 8 endpoint 0xD has an invalid bInterval 35, changing to 9 [ 55.976011][ T10] usb 5-1: config 9 interface 189 altsetting 8 endpoint 0x3 has an invalid bInterval 240, changing to 11 [ 55.987466][ T10] usb 5-1: config 9 interface 189 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 55.999416][ T10] usb 5-1: config 9 interface 189 altsetting 8 endpoint 0x1 has invalid wMaxPacketSize 0 [ 56.009450][ T10] usb 5-1: config 9 interface 189 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 56.020657][ T10] usb 5-1: config 9 interface 189 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 56.038120][ T10] usb 5-1: config 9 interface 189 has no altsetting 0 [ 56.045152][ T10] usb 5-1: config 9 interface 2 has no altsetting 0 [ 56.053368][ T10] usb 5-1: New USB device found, idVendor=07b8, idProduct=3073, bcdDevice=ea.b8 [ 56.062545][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.070607][ T10] usb 5-1: Product: syz [ 56.074848][ T10] usb 5-1: Manufacturer: 揇Ｘ噇㨧描켭喬咝⇾ﭡ ㅎ㮋갈泀਀㻶뀅ᨮ鍨ಡ櫿뿈⧴䐗廟씕䣟齼䷫葓㰓뾤쀈繉䙺㙓攐⦕䫷犆魦薎흔ṥถᅭ綷⚔∻칲 [ 56.093101][ T10] usb 5-1: SerialNumber: syz [ 56.118244][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 56.124819][ T45] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.135978][ T45] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.145796][ T45] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 56.158969][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 56.165612][ T45] usb 4-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 56.174963][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.183909][ T45] usb 4-1: config 0 descriptor?? [ 56.228315][ T31] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 56.311861][ T10] usb 5-1: USB disconnect, device number 13 [ 56.338257][ T379] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 56.358263][ T31] usb 2-1: device descriptor read/64, error -71 [ 56.498216][ T379] usb 1-1: Using ep0 maxpacket: 16 [ 56.504800][ T379] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 56.513624][ T379] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 56.523808][ T379] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 56.534374][ T379] usb 1-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 56.543598][ T379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.552660][ T379] usb 1-1: Product: syz [ 56.556920][ T379] usb 1-1: Manufacturer: syz [ 56.561638][ T379] usb 1-1: SerialNumber: syz [ 56.593825][ T45] acrux 0003:1A34:F705.0005: unknown main item tag 0x0 [ 56.600840][ T45] acrux 0003:1A34:F705.0005: unknown main item tag 0x0 [ 56.607742][ T45] acrux 0003:1A34:F705.0005: unknown main item tag 0x0 [ 56.614700][ T31] usb 2-1: device descriptor read/64, error -71 [ 56.621165][ T45] acrux 0003:1A34:F705.0005: unknown main item tag 0x0 [ 56.628049][ T45] acrux 0003:1A34:F705.0005: unknown main item tag 0x0 [ 56.634969][ T45] acrux 0003:1A34:F705.0005: unknown main item tag 0x0 [ 56.642248][ T45] acrux 0003:1A34:F705.0005: unknown main item tag 0x0 [ 56.649190][ T45] acrux 0003:1A34:F705.0005: item fetching failed at offset 14/41 [ 56.657281][ T45] acrux 0003:1A34:F705.0005: parse failed [ 56.663115][ T45] acrux 0003:1A34:F705.0005: probe with driver acrux failed with error -22 [ 56.770947][ T379] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 56.778015][ T379] usb 1-1: 0:2 : does not exist [ 56.786189][ T379] usb 1-1: USB disconnect, device number 15 [ 56.796998][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.808039][ T918] overlay: filesystem on ./bus not supported as upperdir [ 56.851162][ T45] usb 4-1: USB disconnect, device number 26 [ 56.878396][ T31] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 56.949929][ T934] FAULT_INJECTION: forcing a failure. [ 56.949929][ T934] name failslab, interval 1, probability 0, space 0, times 0 [ 56.962694][ T934] CPU: 0 UID: 0 PID: 934 Comm: syz.4.211 Not tainted syzkaller #0 1aa8ac0f99ca3a11aee7c3a781bea815a9b193fa [ 56.962738][ T934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 56.962750][ T934] Call Trace: [ 56.962755][ T934] [ 56.962762][ T934] __dump_stack+0x21/0x30 [ 56.962800][ T934] dump_stack_lvl+0x140/0x1c0 [ 56.962821][ T934] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.962843][ T934] ? mas_prev+0x5f/0xa0 [ 56.962859][ T934] dump_stack+0x19/0x20 [ 56.962879][ T934] should_fail_ex+0x3d7/0x530 [ 56.962900][ T934] should_failslab+0xac/0x100 [ 56.962916][ T934] kmem_cache_alloc_noprof+0x42/0x410 [ 56.962939][ T934] ? __anon_vma_prepare+0xf4/0x560 [ 56.962962][ T934] __anon_vma_prepare+0xf4/0x560 [ 56.962985][ T934] do_pte_missing+0x364a/0x44f0 [ 56.963004][ T934] ? __kasan_check_read+0x15/0x20 [ 56.963026][ T934] ? __thp_vma_allowable_orders+0x7f1/0x970 [ 56.963045][ T934] ? pte_marker_clear+0x1b0/0x1b0 [ 56.963063][ T934] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 56.963083][ T934] handle_mm_fault+0x11b8/0x1bf0 [ 56.963101][ T934] ? __cfi_handle_mm_fault+0x10/0x10 [ 56.963117][ T934] ? __cfi_find_vma+0x10/0x10 [ 56.963139][ T934] ? vma_is_secretmem+0x11/0x50 [ 56.963158][ T934] __get_user_pages+0x1170/0x22b0 [ 56.963179][ T934] ? populate_vma_page_range+0x220/0x220 [ 56.963196][ T934] ? down_read+0x7f/0xe0 [ 56.963212][ T934] ? __cfi_down_read+0x10/0x10 [ 56.963229][ T934] __mm_populate+0x2f8/0x430 [ 56.963246][ T934] do_mlock+0x7eb/0xa00 [ 56.963265][ T934] ? fput+0x1a4/0x240 [ 56.963281][ T934] ? lru_gen_add_folio+0x860/0x860 [ 56.963300][ T934] ? ksys_write+0x1f3/0x260 [ 56.963322][ T934] ? __cfi_ksys_write+0x10/0x10 [ 56.963345][ T934] ? __kasan_check_read+0x15/0x20 [ 56.963367][ T934] __x64_sys_mlock+0x64/0x80 [ 56.963385][ T934] x64_sys_call+0x670/0x2ee0 [ 56.963408][ T934] do_syscall_64+0x57/0xf0 [ 56.963428][ T934] ? clear_bhb_loop+0x50/0xa0 [ 56.963451][ T934] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.963473][ T934] RIP: 0033:0x7f9a1e99c799 [ 56.963486][ T934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.963500][ T934] RSP: 002b:00007f9a1f7e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 56.963518][ T934] RAX: ffffffffffffffda RBX: 00007f9a1ec15fa0 RCX: 00007f9a1e99c799 [ 56.963530][ T934] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 56.963542][ T934] RBP: 00007f9a1f7e5090 R08: 0000000000000000 R09: 0000000000000000 [ 56.963553][ T934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.963563][ T934] R13: 00007f9a1ec16038 R14: 00007f9a1ec15fa0 R15: 00007fffb4f578f8 [ 56.963577][ T934] [ 57.028540][ T31] usb 2-1: device descriptor read/64, error -71 [ 57.066395][ T936] FAULT_INJECTION: forcing a failure. [ 57.066395][ T936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.262615][ T936] CPU: 1 UID: 0 PID: 936 Comm: syz.4.212 Not tainted syzkaller #0 1aa8ac0f99ca3a11aee7c3a781bea815a9b193fa [ 57.262648][ T936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 57.262662][ T936] Call Trace: [ 57.262670][ T936] [ 57.262679][ T936] __dump_stack+0x21/0x30 [ 57.262712][ T936] dump_stack_lvl+0x140/0x1c0 [ 57.262740][ T936] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.262772][ T936] dump_stack+0x19/0x20 [ 57.262799][ T936] should_fail_ex+0x3d7/0x530 [ 57.262827][ T936] should_fail+0xf/0x20 [ 57.262857][ T936] should_fail_usercopy+0x1e/0x30 [ 57.262880][ T936] strncpy_from_user+0x29/0x270 [ 57.262900][ T936] getname_flags+0x101/0x700 [ 57.262925][ T936] user_path_at+0x2b/0x60 [ 57.262940][ T936] __se_sys_mount+0x28a/0x480 [ 57.262963][ T936] ? ksys_write+0x1f3/0x260 [ 57.262986][ T936] ? __x64_sys_mount+0xf0/0xf0 [ 57.263010][ T936] __x64_sys_mount+0xc3/0xf0 [ 57.263032][ T936] x64_sys_call+0x2021/0x2ee0 [ 57.263055][ T936] do_syscall_64+0x57/0xf0 [ 57.263077][ T936] ? clear_bhb_loop+0x50/0xa0 [ 57.263099][ T936] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.263120][ T936] RIP: 0033:0x7f9a1e99c799 [ 57.263134][ T936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.263148][ T936] RSP: 002b:00007f9a1f7e5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 57.263165][ T936] RAX: ffffffffffffffda RBX: 00007f9a1ec15fa0 RCX: 00007f9a1e99c799 [ 57.263178][ T936] RDX: 0000200000000440 RSI: 0000200000000100 RDI: 0000000000000000 [ 57.263189][ T936] RBP: 00007f9a1f7e5090 R08: 0000200000000200 R09: 0000000000000000 [ 57.263201][ T936] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 57.263211][ T936] R13: 00007f9a1ec16038 R14: 00007f9a1ec15fa0 R15: 00007fffb4f578f8 [ 57.263225][ T936] [ 57.509229][ T31] usb 2-1: device descriptor read/64, error -71 [ 57.618322][ T31] usb usb2-port1: attempt power cycle [ 57.738272][ T379] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 57.818315][ T489] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 57.848441][ T535] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 57.888383][ T379] usb 5-1: Using ep0 maxpacket: 8 [ 57.894716][ T379] usb 5-1: config 9 has an invalid interface number: 189 but max is 1 [ 57.903041][ T379] usb 5-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 57.911901][ T379] usb 5-1: config 9 has an invalid interface number: 2 but max is 1 [ 57.920280][ T379] usb 5-1: config 9 has no interface number 0 [ 57.926371][ T379] usb 5-1: config 9 has no interface number 1 [ 57.932592][ T379] usb 5-1: config 9 interface 189 altsetting 8 endpoint 0xE has invalid maxpacket 32958, setting to 64 [ 57.943886][ T379] usb 5-1: config 9 interface 189 altsetting 8 endpoint 0x6 has invalid maxpacket 20814, setting to 64 [ 57.955039][ T379] usb 5-1: config 9 interface 189 altsetting 8 endpoint 0x9 has an invalid bInterval 253, changing to 11 [ 57.966400][ T379] usb 5-1: config 9 interface 189 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 57.977175][ T31] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 57.984843][ T379] usb 5-1: config 9 interface 189 altsetting 8 endpoint 0xD has an invalid bInterval 35, changing to 9 [ 57.990164][ T489] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 57.996107][ T379] usb 5-1: config 9 interface 189 altsetting 8 endpoint 0x3 has an invalid bInterval 240, changing to 11 [ 58.007786][ T535] usb 1-1: Using ep0 maxpacket: 32 [ 58.019018][ T379] usb 5-1: config 9 interface 189 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 58.023803][ T489] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 58.034535][ T379] usb 5-1: config 9 interface 189 altsetting 8 endpoint 0x1 has invalid wMaxPacketSize 0 [ 58.045342][ T489] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 58.054769][ T379] usb 5-1: config 9 interface 189 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 58.063869][ T489] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.074136][ T31] usb 2-1: device descriptor read/8, error -71 [ 58.088301][ T535] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.089059][ T379] usb 5-1: config 9 interface 189 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 58.098523][ T535] usb 1-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 58.110133][ T379] usb 5-1: config 9 interface 189 has no altsetting 0 [ 58.127646][ T379] usb 5-1: config 9 interface 2 has no altsetting 0 [ 58.130027][ T535] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 58.137013][ T379] usb 5-1: New USB device found, idVendor=07b8, idProduct=3073, bcdDevice=ea.b8 [ 58.145371][ T535] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 58.159765][ T379] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.172646][ T379] usb 5-1: Product: syz [ 58.174816][ T535] usb 1-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 58.176847][ T379] usb 5-1: Manufacturer: 揇Ｘ噇㨧描켭喬咝⇾ﭡ ㅎ㮋갈泀਀㻶뀅ᨮ鍨ಡ櫿뿈⧴䐗廟씕䣟齼䷫葓㰓뾤쀈繉䙺㙓攐⦕䫷犆魦薎흔ṥถᅭ綷⚔∻칲 [ 58.190180][ T535] usb 1-1: config 0 interface 0 has no altsetting 0 [ 58.209240][ T379] usb 5-1: SerialNumber: syz [ 58.215080][ T535] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 58.228853][ T535] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.229713][ T31] usb 2-1: device descriptor read/8, error -71 [ 58.245082][ T535] usb 1-1: config 0 descriptor?? [ 58.452131][ T379] usb 5-1: USB disconnect, device number 14 [ 58.478596][ T31] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 58.499451][ T31] usb 2-1: device descriptor read/8, error -71 [ 58.629402][ T31] usb 2-1: device descriptor read/8, error -71 [ 58.660299][ T535] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 58.668398][ T535] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 58.676309][ T535] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 58.684250][ T535] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 58.692251][ T535] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 58.700948][ T535] hid-thrustmaster 0003:044F:B65D.0006: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 58.713513][ T535] hid-thrustmaster 0003:044F:B65D.0006: setup data couldn't be sent [ 58.738395][ T31] usb usb2-port1: unable to enumerate USB device [ 58.875592][ C0] hid-thrustmaster 0003:044F:B65D.0006: URB to get model id failed with error -71 [ 58.875611][ T31] usb 1-1: USB disconnect, device number 16 [ 58.966238][ T964] FAULT_INJECTION: forcing a failure. [ 58.966238][ T964] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 58.979629][ T964] CPU: 0 UID: 0 PID: 964 Comm: syz.4.222 Not tainted syzkaller #0 1aa8ac0f99ca3a11aee7c3a781bea815a9b193fa [ 58.979671][ T964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 58.979687][ T964] Call Trace: [ 58.979696][ T964] [ 58.979705][ T964] __dump_stack+0x21/0x30 [ 58.979737][ T964] dump_stack_lvl+0x140/0x1c0 [ 58.979764][ T964] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.979794][ T964] dump_stack+0x19/0x20 [ 58.979821][ T964] should_fail_ex+0x3d7/0x530 [ 58.979848][ T964] should_fail_alloc_page+0xec/0x110 [ 58.979871][ T964] __alloc_pages_noprof+0x1c0/0x7e0 [ 58.979900][ T964] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 58.979921][ T964] ? __kasan_check_write+0x18/0x20 [ 58.979942][ T964] __folio_alloc_noprof+0x14/0x80 [ 58.979960][ T964] folio_prealloc+0x46/0x220 [ 58.979976][ T964] do_pte_missing+0x595/0x44f0 [ 58.979994][ T964] ? __kasan_check_read+0x15/0x20 [ 58.980014][ T964] ? __thp_vma_allowable_orders+0x7f1/0x970 [ 58.980032][ T964] ? pte_marker_clear+0x1b0/0x1b0 [ 58.980049][ T964] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 58.980069][ T964] handle_mm_fault+0x11b8/0x1bf0 [ 58.980086][ T964] ? __cfi_handle_mm_fault+0x10/0x10 [ 58.980102][ T964] ? __cfi_find_vma+0x10/0x10 [ 58.980123][ T964] ? vma_is_secretmem+0x11/0x50 [ 58.980142][ T964] __get_user_pages+0x1170/0x22b0 [ 58.980162][ T964] ? populate_vma_page_range+0x220/0x220 [ 58.980178][ T964] ? down_read+0x7f/0xe0 [ 58.980194][ T964] ? __cfi_down_read+0x10/0x10 [ 58.980210][ T964] __mm_populate+0x2f8/0x430 [ 58.980227][ T964] do_mlock+0x7eb/0xa00 [ 58.980245][ T964] ? fput+0x1a4/0x240 [ 58.980260][ T964] ? lru_gen_add_folio+0x860/0x860 [ 58.980279][ T964] ? ksys_write+0x1f3/0x260 [ 58.980300][ T964] ? __cfi_ksys_write+0x10/0x10 [ 58.980322][ T964] ? __kasan_check_read+0x15/0x20 [ 58.980343][ T964] __x64_sys_mlock+0x64/0x80 [ 58.980367][ T964] x64_sys_call+0x670/0x2ee0 [ 58.980390][ T964] do_syscall_64+0x57/0xf0 [ 58.980429][ T964] ? clear_bhb_loop+0x50/0xa0 [ 58.980451][ T964] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 58.980473][ T964] RIP: 0033:0x7f9a1e99c799 [ 58.980487][ T964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.980501][ T964] RSP: 002b:00007f9a1f7e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 58.980519][ T964] RAX: ffffffffffffffda RBX: 00007f9a1ec15fa0 RCX: 00007f9a1e99c799 [ 58.980532][ T964] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 58.980543][ T964] RBP: 00007f9a1f7e5090 R08: 0000000000000000 R09: 0000000000000000 [ 58.980554][ T964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.980564][ T964] R13: 00007f9a1ec16038 R14: 00007f9a1ec15fa0 R15: 00007fffb4f578f8 [ 58.980579][ T964] [ 59.211061][ T966] FAULT_INJECTION: forcing a failure. [ 59.211061][ T966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.281853][ T966] CPU: 1 UID: 0 PID: 966 Comm: syz.4.223 Not tainted syzkaller #0 1aa8ac0f99ca3a11aee7c3a781bea815a9b193fa [ 59.281887][ T966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 59.281900][ T966] Call Trace: [ 59.281906][ T966] [ 59.281915][ T966] __dump_stack+0x21/0x30 [ 59.281948][ T966] dump_stack_lvl+0x140/0x1c0 [ 59.281977][ T966] ? __cfi_dump_stack_lvl+0x10/0x10 [ 59.282006][ T966] dump_stack+0x19/0x20 [ 59.282034][ T966] should_fail_ex+0x3d7/0x530 [ 59.282062][ T966] should_fail+0xf/0x20 [ 59.282086][ T966] should_fail_usercopy+0x1e/0x30 [ 59.282112][ T966] strncpy_from_user+0x29/0x270 [ 59.282139][ T966] getname_flags+0x101/0x700 [ 59.282170][ T966] user_path_at+0x2b/0x60 [ 59.282192][ T966] __se_sys_mount+0x28a/0x480 [ 59.282222][ T966] ? ksys_write+0x1f3/0x260 [ 59.282253][ T966] ? __x64_sys_mount+0xf0/0xf0 [ 59.282285][ T966] __x64_sys_mount+0xc3/0xf0 [ 59.282316][ T966] x64_sys_call+0x2021/0x2ee0 [ 59.282348][ T966] do_syscall_64+0x57/0xf0 [ 59.282376][ T966] ? clear_bhb_loop+0x50/0xa0 [ 59.282406][ T966] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 59.282434][ T966] RIP: 0033:0x7f9a1e99c799 [ 59.282453][ T966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.282471][ T966] RSP: 002b:00007f9a1f7e5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 59.282495][ T966] RAX: ffffffffffffffda RBX: 00007f9a1ec15fa0 RCX: 00007f9a1e99c799 [ 59.282513][ T966] RDX: 0000200000000440 RSI: 0000200000000100 RDI: 0000000000000000 [ 59.282530][ T966] RBP: 00007f9a1f7e5090 R08: 0000200000000200 R09: 0000000000000000 [ 59.282545][ T966] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 59.282560][ T966] R13: 00007f9a1ec16038 R14: 00007f9a1ec15fa0 R15: 00007fffb4f578f8 [ 59.282609][ T966] [ 59.285218][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 59.285236][ T36] audit: type=1400 audit(1774307619.350:26345): avc: denied { write } for pid=967 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 59.500012][ T36] audit: type=1400 audit(1774307619.520:26346): avc: denied { map } for pid=971 comm="syz.0.226" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.530910][ T36] audit: type=1400 audit(1774307619.600:26347): avc: denied { create } for pid=974 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 59.563571][ T36] audit: type=1400 audit(1774307619.620:26348): avc: denied { write } for pid=974 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 59.801292][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 59.940308][ T10] usb 2-1: device descriptor read/64, error -71 [ 60.004331][ T31] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 60.121831][ T535] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 60.164660][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 60.171142][ T31] usb 5-1: config 9 has an invalid interface number: 189 but max is 1 [ 60.179445][ T31] usb 5-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 60.188274][ T31] usb 5-1: config 9 has an invalid interface number: 2 but max is 1 [ 60.196323][ T31] usb 5-1: config 9 has no interface number 0 [ 60.202511][ T31] usb 5-1: config 9 has no interface number 1 [ 60.207411][ T10] usb 2-1: device descriptor read/64, error -71 [ 60.208702][ T31] usb 5-1: config 9 interface 189 altsetting 8 endpoint 0xE has invalid maxpacket 32958, setting to 64 [ 60.225955][ T31] usb 5-1: config 9 interface 189 altsetting 8 endpoint 0x6 has invalid maxpacket 20814, setting to 64 [ 60.237069][ T31] usb 5-1: config 9 interface 189 altsetting 8 endpoint 0x9 has an invalid bInterval 253, changing to 11 [ 60.248451][ T31] usb 5-1: config 9 interface 189 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 60.259183][ T31] usb 5-1: config 9 interface 189 altsetting 8 endpoint 0xD has an invalid bInterval 35, changing to 9 [ 60.270334][ T31] usb 5-1: config 9 interface 189 altsetting 8 endpoint 0x3 has an invalid bInterval 240, changing to 11 [ 60.281584][ T31] usb 5-1: config 9 interface 189 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 60.282370][ T535] usb 1-1: device descriptor read/64, error -71 [ 60.292323][ T31] usb 5-1: config 9 interface 189 altsetting 8 endpoint 0x1 has invalid wMaxPacketSize 0 [ 60.308523][ T31] usb 5-1: config 9 interface 189 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 60.319263][ T31] usb 5-1: config 9 interface 189 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 60.330025][ T31] usb 5-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 60.340609][ T31] usb 5-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 60.351192][ T31] usb 5-1: config 9 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 60.361936][ T31] usb 5-1: config 9 interface 2 altsetting 1 has an endpoint descriptor with address 0xBF, changing to 0x8F [ 60.373463][ T31] usb 5-1: config 9 interface 2 altsetting 1 endpoint 0x8F has invalid maxpacket 29740, setting to 64 [ 60.384492][ T31] usb 5-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 60.395121][ T31] usb 5-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 60.405720][ T31] usb 5-1: config 9 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 60.416469][ T31] usb 5-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 60.427033][ T31] usb 5-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 60.437625][ T31] usb 5-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 60.448223][ T31] usb 5-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 60.458811][ T31] usb 5-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 60.469479][ T31] usb 5-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 60.474625][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 60.480041][ T31] usb 5-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 60.498627][ T31] usb 5-1: config 9 interface 2 altsetting 1 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 60.510341][ T31] usb 5-1: config 9 interface 2 altsetting 1 endpoint 0x8C has an invalid bInterval 253, changing to 11 [ 60.521629][ T31] usb 5-1: config 9 interface 2 altsetting 1 endpoint 0x8C has invalid maxpacket 42415, setting to 1024 [ 60.533089][ T31] usb 5-1: config 9 interface 2 altsetting 1 has 15 endpoint descriptors, different from the interface descriptor's value: 13 [ 60.546299][ T31] usb 5-1: config 9 interface 189 has no altsetting 0 [ 60.553193][ T31] usb 5-1: config 9 interface 2 has no altsetting 0 [ 60.559981][ T535] usb 1-1: device descriptor read/64, error -71 [ 60.562406][ T31] usb 5-1: New USB device found, idVendor=07b8, idProduct=3073, bcdDevice=ea.b8 [ 60.575398][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.583553][ T31] usb 5-1: Product: syz [ 60.587742][ T31] usb 5-1: Manufacturer: 揇Ｘ噇㨧描켭喬咝⇾ﭡ ㅎ㮋갈泀਀㻶뀅ᨮ鍨ಡ櫿뿈⧴䐗廟씕䣟齼䷫葓㰓뾤쀈繉䙺㙓攐⦕䫷犆魦薎흔ṥถᅭ綷⚔∻칲 [ 60.605975][ T31] usb 5-1: SerialNumber: syz [ 60.624104][ T10] usb 2-1: device descriptor read/64, error -71 [ 60.661231][ T993] FAULT_INJECTION: forcing a failure. [ 60.661231][ T993] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 60.674633][ T993] CPU: 0 UID: 0 PID: 993 Comm: syz.3.233 Not tainted syzkaller #0 1aa8ac0f99ca3a11aee7c3a781bea815a9b193fa [ 60.674688][ T993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 60.674704][ T993] Call Trace: [ 60.674711][ T993] [ 60.674720][ T993] __dump_stack+0x21/0x30 [ 60.674760][ T993] dump_stack_lvl+0x140/0x1c0 [ 60.674781][ T993] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.674803][ T993] ? cgroup_rstat_updated+0x141/0x810 [ 60.674836][ T993] dump_stack+0x19/0x20 [ 60.674865][ T993] should_fail_ex+0x3d7/0x530 [ 60.674893][ T993] should_fail_alloc_page+0xec/0x110 [ 60.674919][ T993] __alloc_pages_noprof+0x1c0/0x7e0 [ 60.674939][ T993] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 60.674993][ T993] ? memcg1_commit_charge+0xf8/0x2b0 [ 60.675027][ T993] pte_alloc_one+0x92/0x530 [ 60.675048][ T993] ? __cfi_pte_alloc_one+0x10/0x10 [ 60.675070][ T993] ? blk_cgroup_congested+0x120/0x130 [ 60.675095][ T993] ? __folio_throttle_swaprate+0x97/0x160 [ 60.675114][ T993] ? folio_prealloc+0xe5/0x220 [ 60.675151][ T993] do_pte_missing+0x27dc/0x44f0 [ 60.675177][ T993] ? __kasan_check_read+0x15/0x20 [ 60.675207][ T993] ? __thp_vma_allowable_orders+0x7f1/0x970 [ 60.675231][ T993] ? pte_marker_clear+0x1b0/0x1b0 [ 60.675248][ T993] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 60.675269][ T993] handle_mm_fault+0x11b8/0x1bf0 [ 60.675308][ T993] ? __cfi_handle_mm_fault+0x10/0x10 [ 60.675331][ T993] ? __cfi_find_vma+0x10/0x10 [ 60.675366][ T993] ? vma_is_secretmem+0x11/0x50 [ 60.675386][ T993] __get_user_pages+0x1170/0x22b0 [ 60.675406][ T993] ? populate_vma_page_range+0x220/0x220 [ 60.675444][ T993] ? down_read+0x7f/0xe0 [ 60.675468][ T993] ? __cfi_down_read+0x10/0x10 [ 60.675491][ T993] __mm_populate+0x2f8/0x430 [ 60.675520][ T993] do_mlock+0x7eb/0xa00 [ 60.675540][ T993] ? fput+0x1a4/0x240 [ 60.675557][ T993] ? lru_gen_add_folio+0x860/0x860 [ 60.675592][ T993] ? ksys_write+0x1f3/0x260 [ 60.675623][ T993] ? __cfi_ksys_write+0x10/0x10 [ 60.675654][ T993] ? __kasan_check_read+0x15/0x20 [ 60.675684][ T993] __x64_sys_mlock+0x64/0x80 [ 60.675701][ T993] x64_sys_call+0x670/0x2ee0 [ 60.675740][ T993] do_syscall_64+0x57/0xf0 [ 60.675769][ T993] ? clear_bhb_loop+0x50/0xa0 [ 60.675799][ T993] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.675830][ T993] RIP: 0033:0x7f91fed9c799 [ 60.675844][ T993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.675858][ T993] RSP: 002b:00007f91ffbca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 60.675891][ T993] RAX: ffffffffffffffda RBX: 00007f91ff015fa0 RCX: 00007f91fed9c799 [ 60.675910][ T993] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 60.675925][ T993] RBP: 00007f91ffbca090 R08: 0000000000000000 R09: 0000000000000000 [ 60.675939][ T993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.675953][ T993] R13: 00007f91ff016038 R14: 00007f91ff015fa0 R15: 00007ffd4cfc0778 [ 60.675977][ T993] [ 60.980526][ T489] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 60.988399][ T489] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input6 [ 61.005930][ T31] usb 5-1: USB disconnect, device number 15 [ 61.017008][ T489] usb 4-1: USB disconnect, device number 27 [ 61.045055][ T995] FAULT_INJECTION: forcing a failure. [ 61.045055][ T995] name failslab, interval 1, probability 0, space 0, times 0 [ 61.057923][ T995] CPU: 0 UID: 0 PID: 995 Comm: syz.3.234 Not tainted syzkaller #0 1aa8ac0f99ca3a11aee7c3a781bea815a9b193fa [ 61.057959][ T995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 61.057974][ T995] Call Trace: [ 61.057981][ T995] [ 61.057989][ T995] __dump_stack+0x21/0x30 [ 61.058023][ T995] dump_stack_lvl+0x140/0x1c0 [ 61.058044][ T995] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.058067][ T995] dump_stack+0x19/0x20 [ 61.058086][ T995] should_fail_ex+0x3d7/0x530 [ 61.058113][ T995] should_failslab+0xac/0x100 [ 61.058129][ T995] __kmalloc_cache_noprof+0x41/0x470 [ 61.058152][ T995] ? kasan_save_alloc_info+0x40/0x50 [ 61.058173][ T995] ? ovl_init_fs_context+0x65/0x710 [ 61.058196][ T995] ? __kasan_kmalloc+0x96/0xb0 [ 61.058211][ T995] ovl_init_fs_context+0x65/0x710 [ 61.058234][ T995] alloc_fs_context+0x5f0/0x820 [ 61.058252][ T995] fs_context_for_mount+0x26/0x40 [ 61.058269][ T995] do_new_mount+0x116/0xb30 [ 61.058291][ T995] ? security_capable+0x44/0x130 [ 61.058314][ T995] path_mount+0x682/0x1010 [ 61.058343][ T995] __se_sys_mount+0x2bf/0x480 [ 61.058365][ T995] ? ksys_write+0x1f3/0x260 [ 61.058388][ T995] ? __x64_sys_mount+0xf0/0xf0 [ 61.058411][ T995] __x64_sys_mount+0xc3/0xf0 [ 61.058434][ T995] x64_sys_call+0x2021/0x2ee0 [ 61.058457][ T995] do_syscall_64+0x57/0xf0 [ 61.058478][ T995] ? clear_bhb_loop+0x50/0xa0 [ 61.058500][ T995] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 61.058521][ T995] RIP: 0033:0x7f91fed9c799 [ 61.058535][ T995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.058548][ T995] RSP: 002b:00007f91ffbca028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 61.058566][ T995] RAX: ffffffffffffffda RBX: 00007f91ff015fa0 RCX: 00007f91fed9c799 [ 61.058578][ T995] RDX: 0000200000000440 RSI: 0000200000000100 RDI: 0000000000000000 [ 61.058589][ T995] RBP: 00007f91ffbca090 R08: 0000200000000200 R09: 0000000000000000 [ 61.058601][ T995] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 61.058611][ T995] R13: 00007f91ff016038 R14: 00007f91ff015fa0 R15: 00007ffd4cfc0778 [ 61.058625][ T995] [ 61.309188][ T36] audit: type=1400 audit(1774307621.280:26349): avc: denied { execute } for pid=998 comm="syz.3.236" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.340075][ T10] usb 2-1: device descriptor read/64, error -71 [ 61.346439][ T535] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 61.384258][ T1003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.238'. [ 61.451395][ T1010] SELinux: failed to load policy [ 61.457951][ T10] usb usb2-port1: attempt power cycle [ 61.489663][ T535] usb 1-1: device descriptor read/64, error -71 [ 61.549059][ T1012] overlay: filesystem on ./bus not supported as upperdir [ 61.645689][ T1016] FAULT_INJECTION: forcing a failure. [ 61.645689][ T1016] name failslab, interval 1, probability 0, space 0, times 0 [ 61.658700][ T1016] CPU: 0 UID: 0 PID: 1016 Comm: syz.4.243 Not tainted syzkaller #0 1aa8ac0f99ca3a11aee7c3a781bea815a9b193fa [ 61.658726][ T1016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 61.658737][ T1016] Call Trace: [ 61.658742][ T1016] [ 61.658748][ T1016] __dump_stack+0x21/0x30 [ 61.658773][ T1016] dump_stack_lvl+0x140/0x1c0 [ 61.658793][ T1016] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.658816][ T1016] dump_stack+0x19/0x20 [ 61.658836][ T1016] should_fail_ex+0x3d7/0x530 [ 61.658856][ T1016] should_failslab+0xac/0x100 [ 61.658872][ T1016] __kmalloc_cache_noprof+0x41/0x470 [ 61.658895][ T1016] ? kasan_save_alloc_info+0x40/0x50 [ 61.658915][ T1016] ? ovl_init_fs_context+0x65/0x710 [ 61.658938][ T1016] ? __kasan_kmalloc+0x96/0xb0 [ 61.658953][ T1016] ovl_init_fs_context+0x65/0x710 [ 61.658976][ T1016] alloc_fs_context+0x5f0/0x820 [ 61.658994][ T1016] fs_context_for_mount+0x26/0x40 [ 61.659010][ T1016] do_new_mount+0x116/0xb30 [ 61.659032][ T1016] ? security_capable+0x44/0x130 [ 61.659055][ T1016] path_mount+0x682/0x1010 [ 61.659078][ T1016] __se_sys_mount+0x2bf/0x480 [ 61.659100][ T1016] ? ksys_write+0x1f3/0x260 [ 61.659122][ T1016] ? __x64_sys_mount+0xf0/0xf0 [ 61.659145][ T1016] __x64_sys_mount+0xc3/0xf0 [ 61.659167][ T1016] x64_sys_call+0x2021/0x2ee0 [ 61.659191][ T1016] do_syscall_64+0x57/0xf0 [ 61.659211][ T1016] ? clear_bhb_loop+0x50/0xa0 [ 61.659234][ T1016] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 61.659255][ T1016] RIP: 0033:0x7f9a1e99c799 [ 61.659268][ T1016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.659289][ T1016] RSP: 002b:00007f9a1f7e5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 61.659306][ T1016] RAX: ffffffffffffffda RBX: 00007f9a1ec15fa0 RCX: 00007f9a1e99c799 [ 61.659319][ T1016] RDX: 0000200000000440 RSI: 0000200000000100 RDI: 0000000000000000 [ 61.659330][ T1016] RBP: 00007f9a1f7e5090 R08: 0000200000000200 R09: 0000000000000000 [ 61.659341][ T1016] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 61.659351][ T1016] R13: 00007f9a1ec16038 R14: 00007f9a1ec15fa0 R15: 00007fffb4f578f8 [ 61.659365][ T1016] [ 61.878880][ T357] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 61.897292][ T1019] overlayfs: overlapping lowerdir path [ 61.903266][ T1019] overlayfs: overlapping lowerdir path [ 61.909299][ T1019] overlayfs: overlapping lowerdir path [ 61.915157][ T1019] overlayfs: overlapping lowerdir path [ 61.921609][ T1019] overlayfs: overlapping lowerdir path [ 61.927610][ T1019] overlayfs: overlapping lowerdir path [ 61.933464][ T1019] overlayfs: overlapping lowerdir path [ 61.939446][ T1019] overlayfs: overlapping lowerdir path [ 61.945285][ T1019] overlayfs: overlapping lowerdir path [ 61.950838][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 61.958449][ T535] usb 1-1: device descriptor read/64, error -71 [ 61.966725][ T1019] overlayfs: overlapping lowerdir path [ 61.972759][ T1019] overlayfs: overlapping lowerdir path [ 61.978615][ T1019] overlayfs: overlapping lowerdir path [ 61.985003][ T1019] overlayfs: overlapping lowerdir path [ 61.990725][ T10] usb 2-1: device descriptor read/8, error -71 [ 61.997307][ T1019] overlayfs: overlapping lowerdir path [ 62.003186][ T1019] overlayfs: overlapping lowerdir path [ 62.009120][ T1019] overlayfs: overlapping lowerdir path [ 62.015042][ T1019] overlayfs: overlapping lowerdir path [ 62.020877][ T1019] overlayfs: overlapping lowerdir path [ 62.026880][ T1019] overlayfs: overlapping lowerdir path [ 62.032663][ T1019] overlayfs: overlapping lowerdir path [ 62.038621][ T1019] overlayfs: overlapping lowerdir path [ 62.044413][ T1019] overlayfs: overlapping lowerdir path [ 62.049956][ T357] usb 4-1: Using ep0 maxpacket: 16 [ 62.055725][ T1019] overlayfs: overlapping lowerdir path [ 62.061670][ T357] usb 4-1: config index 0 descriptor too short (expected 4495, got 71) [ 62.070000][ T357] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 62.070990][ T1019] overlayfs: overlapping lowerdir path [ 62.078283][ T357] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.093912][ T357] usb 4-1: config 0 has no interface number 0 [ 62.095406][ T1019] overlayfs: overlapping lowerdir path [ 62.103489][ T535] usb usb1-port1: attempt power cycle [ 62.111461][ T1019] overlayfs: overlapping lowerdir path [ 62.112382][ T357] usb 4-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 62.126230][ T357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.127141][ T1019] overlayfs: overlapping lowerdir path [ 62.134391][ T357] usb 4-1: Product: syz [ 62.144109][ T357] usb 4-1: Manufacturer: syz [ 62.145078][ T1019] overlayfs: overlapping lowerdir path [ 62.148812][ T357] usb 4-1: SerialNumber: syz [ 62.159767][ T1019] overlayfs: overlapping lowerdir path [ 62.161706][ T357] usb 4-1: config 0 descriptor?? [ 62.170316][ T10] usb 2-1: device descriptor read/8, error -71 [ 62.177018][ T1019] overlayfs: overlapping lowerdir path [ 62.183065][ T1019] overlayfs: overlapping lowerdir path [ 62.189163][ T1019] overlayfs: overlapping lowerdir path [ 62.195300][ T1019] overlayfs: overlapping lowerdir path [ 62.216387][ T367] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 62.377671][ T367] usb 5-1: config index 0 descriptor too short (expected 2084, got 36) [ 62.386052][ T367] usb 5-1: config 0 has an invalid interface number: 240 but max is 0 [ 62.394427][ T367] usb 5-1: config 0 has no interface number 0 [ 62.400733][ T367] usb 5-1: config 0 interface 240 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.402124][ T36] audit: type=1400 audit(1774307622.300:26350): avc: denied { write } for pid=1009 comm="syz.3.240" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 62.412443][ T367] usb 5-1: config 0 interface 240 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.439038][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 62.445837][ T367] usb 5-1: config 0 interface 240 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 62.453211][ T36] audit: type=1400 audit(1774307622.300:26351): avc: denied { open } for pid=1009 comm="syz.3.240" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 62.483642][ T367] usb 5-1: config 0 interface 240 has no altsetting 0 [ 62.493640][ T357] usb 4-1: USB disconnect, device number 28 [ 62.502198][ T535] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 62.511606][ T367] usb 5-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 62.514099][ T10] usb 2-1: device descriptor read/8, error -71 [ 62.537453][ T367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.548571][ T535] usb 1-1: device descriptor read/8, error -71 [ 62.555169][ T1022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1022 comm=syz.1.245 [ 62.557760][ T367] usb 5-1: config 0 descriptor?? [ 62.572171][ T36] audit: type=1400 audit(1774307622.459:26352): avc: denied { mounton } for pid=1021 comm="syz.1.245" path="/48/file0" dev="tmpfs" ino=284 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 62.624246][ T36] audit: type=1400 audit(1774307622.506:26353): avc: denied { create } for pid=1021 comm="syz.1.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.640486][ T1024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63504 sclass=netlink_route_socket pid=1024 comm=syz.1.245 [ 62.644442][ T36] audit: type=1400 audit(1774307622.515:26354): avc: denied { ioctl } for pid=1021 comm="syz.1.245" path="socket:[7762]" dev="sockfs" ino=7762 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.681908][ T10] usb 2-1: device descriptor read/8, error -71 [ 62.698333][ T535] usb 1-1: device descriptor read/8, error -71 [ 62.788929][ T1020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.797726][ T1020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.806533][ T10] usb usb2-port1: unable to enumerate USB device [ 62.815186][ T1020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.823716][ T1020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.832682][ T1020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.841253][ T1020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.849464][ T1020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.858064][ T1020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.866233][ T1020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.875749][ T1020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.886715][ T1019] 9pnet_fd: Insufficient options for proto=fd [ 62.893219][ T1019] 9pnet_fd: Insufficient options for proto=fd [ 62.899485][ T1019] 9pnet_fd: Insufficient options for proto=fd [ 62.908063][ T1019] 9pnet_fd: Insufficient options for proto=fd [ 62.923166][ T367] usbhid 5-1:0.240: can't add hid device: -71 [ 62.932150][ T367] usbhid 5-1:0.240: probe with driver usbhid failed with error -71 [ 62.944988][ T367] usb 5-1: USB disconnect, device number 16 [ 62.953699][ T535] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 62.986848][ T535] usb 1-1: device descriptor read/8, error -71 [ 63.068037][ T1034] incfs: iterate_incfs_dir / -22 [ 63.088884][ T1034] incfs: iterate_incfs_dir / -22 [ 63.135305][ T10] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 63.143185][ T535] usb 1-1: device descriptor read/8, error -71 [ 63.263722][ T535] usb usb1-port1: unable to enumerate USB device [ 63.298365][ T1042] incfs: iterate_incfs_dir / -22 [ 63.303555][ T1042] incfs: iterate_incfs_dir / -22 [ 63.318223][ T10] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 63.326546][ T10] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 63.349105][ T10] usb 2-1: config 220 has no interface number 2 [ 63.352046][ T1044] FAULT_INJECTION: forcing a failure. [ 63.352046][ T1044] name failslab, interval 1, probability 0, space 0, times 0 [ 63.355424][ T10] usb 2-1: config 220 interface 1 altsetting 5 endpoint 0x5 has invalid maxpacket 64946, setting to 64 [ 63.368536][ T1044] CPU: 1 UID: 0 PID: 1044 Comm: syz.0.253 Not tainted syzkaller #0 1aa8ac0f99ca3a11aee7c3a781bea815a9b193fa [ 63.368629][ T1044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 63.368669][ T1044] Call Trace: [ 63.368690][ T1044] [ 63.368712][ T1044] __dump_stack+0x21/0x30 [ 63.368807][ T1044] dump_stack_lvl+0x140/0x1c0 [ 63.368888][ T1044] ? __cfi_dump_stack_lvl+0x10/0x10 [ 63.368966][ T1044] dump_stack+0x19/0x20 [ 63.369026][ T1044] should_fail_ex+0x3d7/0x530 [ 63.369111][ T1044] should_failslab+0xac/0x100 [ 63.369173][ T1044] __kmalloc_cache_noprof+0x41/0x470 [ 63.369270][ T1044] ? kasan_save_alloc_info+0x40/0x50 [ 63.369344][ T1044] ? ovl_init_fs_context+0x161/0x710 [ 63.369431][ T1044] ovl_init_fs_context+0x161/0x710 [ 63.369516][ T1044] alloc_fs_context+0x5f0/0x820 [ 63.369574][ T1044] fs_context_for_mount+0x26/0x40 [ 63.369638][ T1044] do_new_mount+0x116/0xb30 [ 63.369714][ T1044] ? security_capable+0x44/0x130 [ 63.369815][ T1044] path_mount+0x682/0x1010 [ 63.369924][ T1044] __se_sys_mount+0x2bf/0x480 [ 63.370001][ T1044] ? ksys_write+0x1f3/0x260 [ 63.370079][ T1044] ? __x64_sys_mount+0xf0/0xf0 [ 63.370181][ T1044] __x64_sys_mount+0xc3/0xf0 [ 63.370252][ T1044] x64_sys_call+0x2021/0x2ee0 [ 63.370336][ T1044] do_syscall_64+0x57/0xf0 [ 63.370463][ T1044] ? clear_bhb_loop+0x50/0xa0 [ 63.370546][ T1044] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 63.370622][ T1044] RIP: 0033:0x7f262fd9c799 [ 63.370675][ T1044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.370729][ T1044] RSP: 002b:00007f2630ba9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 63.370795][ T1044] RAX: ffffffffffffffda RBX: 00007f2630015fa0 RCX: 00007f262fd9c799 [ 63.370838][ T1044] RDX: 0000200000000440 RSI: 0000200000000100 RDI: 0000000000000000 [ 63.370882][ T1044] RBP: 00007f2630ba9090 R08: 0000200000000200 R09: 0000000000000000 [ 63.370925][ T1044] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 63.370958][ T1044] R13: 00007f2630016038 R14: 00007f2630015fa0 R15: 00007ffce9b9d208 [ 63.371010][ T1044] [ 63.413500][ T367] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 63.466611][ T10] usb 2-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 63.615561][ T10] usb 2-1: config 220 interface 0 has no altsetting 0 [ 63.622411][ T10] usb 2-1: config 220 interface 76 has no altsetting 0 [ 63.629367][ T10] usb 2-1: config 220 interface 1 has no altsetting 0 [ 63.637621][ T367] usb 4-1: Using ep0 maxpacket: 8 [ 63.645160][ T367] usb 4-1: config 9 has an invalid interface number: 189 but max is 1 [ 63.654412][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 63.658943][ T367] usb 4-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 63.663621][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.681673][ T1051] veth1_macvtap: left promiscuous mode [ 63.687303][ T367] usb 4-1: config 9 has an invalid interface number: 2 but max is 1 [ 63.695647][ T1051] macsec0: entered allmulticast mode [ 63.701106][ T367] usb 4-1: config 9 has no interface number 0 [ 63.701721][ T10] usb 2-1: Product: syz [ 63.711607][ T1051] veth1_macvtap: entered promiscuous mode [ 63.717515][ T367] usb 4-1: config 9 has no interface number 1 [ 63.723597][ T10] usb 2-1: Manufacturer: syz [ 63.723641][ T10] usb 2-1: SerialNumber: syz [ 63.733356][ T1051] veth1_macvtap: entered allmulticast mode [ 63.741247][ T1051] macsec0: left allmulticast mode [ 63.746525][ T367] usb 4-1: config 9 interface 189 altsetting 8 endpoint 0xE has invalid maxpacket 32958, setting to 64 [ 63.757857][ T1051] veth1_macvtap: left allmulticast mode [ 63.764656][ T367] usb 4-1: config 9 interface 189 altsetting 8 endpoint 0x6 has invalid maxpacket 20814, setting to 64 [ 63.777628][ T367] usb 4-1: config 9 interface 189 altsetting 8 endpoint 0x9 has an invalid bInterval 253, changing to 11 [ 63.789240][ T367] usb 4-1: config 9 interface 189 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 63.800216][ T367] usb 4-1: config 9 interface 189 altsetting 8 endpoint 0xD has an invalid bInterval 35, changing to 9 [ 63.817588][ T367] usb 4-1: config 9 interface 189 altsetting 8 endpoint 0x3 has an invalid bInterval 240, changing to 11 [ 63.841489][ T367] usb 4-1: config 9 interface 189 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 63.852345][ T367] usb 4-1: config 9 interface 189 altsetting 8 endpoint 0x1 has invalid wMaxPacketSize 0 [ 63.862402][ T367] usb 4-1: config 9 interface 189 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 63.873582][ T367] usb 4-1: config 9 interface 189 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 63.884719][ T367] usb 4-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 63.897181][ T367] usb 4-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 63.909023][ T367] usb 4-1: config 9 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 63.920030][ T367] usb 4-1: config 9 interface 2 altsetting 1 has an endpoint descriptor with address 0xBF, changing to 0x8F [ 63.931782][ T367] usb 4-1: config 9 interface 2 altsetting 1 endpoint 0x8F has invalid maxpacket 29740, setting to 64 [ 63.943175][ T367] usb 4-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 63.965614][ T367] usb 4-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 63.976421][ T367] usb 4-1: config 9 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 63.988424][ T367] usb 4-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 63.999033][ T367] usb 4-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 64.009696][ T367] usb 4-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 64.020756][ T367] usb 4-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 64.031611][ T367] usb 4-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 64.042995][ T367] usb 4-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 64.053856][ T367] usb 4-1: config 9 interface 2 altsetting 1 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 64.067226][ T367] usb 4-1: config 9 interface 189 has no altsetting 0 [ 64.074080][ T367] usb 4-1: config 9 interface 2 has no altsetting 0 [ 64.087674][ T367] usb 4-1: New USB device found, idVendor=07b8, idProduct=3073, bcdDevice=ea.b8 [ 64.096942][ T367] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.105281][ T367] usb 4-1: Product: syz [ 64.109773][ T367] usb 4-1: Manufacturer: 揇Ｘ噇㨧描켭喬咝⇾ﭡ ㅎ㮋갈泀਀㻶뀅ᨮ鍨ಡ櫿뿈⧴䐗廟씕䣟齼䷫葓㰓뾤쀈繉䙺㙓攐⦕䫷犆魦薎흔ṥถᅭ綷⚔∻칲 [ 64.128661][ T367] usb 4-1: SerialNumber: syz [ 64.154486][ T10] usb 2-1: selecting invalid altsetting 0 [ 64.171751][ T10] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 64.180787][ T10] usb 2-1: No valid video chain found. [ 64.191067][ T10] usb 2-1: USB disconnect, device number 27 [ 64.332153][ T535] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 64.355756][ T367] usb 4-1: USB disconnect, device number 29 [ 64.449735][ T45] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 64.492434][ T535] usb 1-1: Using ep0 maxpacket: 16 [ 64.498688][ T535] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 251, changing to 7 [ 64.509980][ T535] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 25, changing to 7 [ 64.522723][ T535] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 64.531888][ T535] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.540125][ T535] usb 1-1: Product: syz [ 64.544318][ T535] usb 1-1: Manufacturer: syz [ 64.552667][ T535] usb 1-1: SerialNumber: syz [ 64.611606][ T45] usb 5-1: not running at top speed; connect to a high speed hub [ 64.620128][ T45] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 64.631086][ T45] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 72, setting to 64 [ 64.643740][ T45] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 64.652880][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.660933][ T45] usb 5-1: Product: 펣ꤗ普雘イꯒ嗙闂췻⭫谓켏頑뽫䖣ꐄ춎妴瀛퓜뚼杀썤ꎞỪ魏㞙ﰋ眃ඍ季睙鴍⾰鴦뉵鍖 [ 64.674844][ T45] usb 5-1: Manufacturer: И [ 64.679410][ T45] usb 5-1: SerialNumber: 噯⏕绱ꚅᬟ给솑뚖朌痡ឆ딉䵪）晬顙載ﺿ蓏獃㚚뱈崍߬겋眤홻蜃蛽㭟╆eᙥ懐㸹忘츺~꠵腐趰蹛왘摅瞿હ胎➢놴＿ī䯗慩䖅嶨仙鿀뚹ᅍ窡焞㺩잍녾껢겥㚖ꁸ뷮෨㖪ꇵ伂䑂༑㬛楻睋椩槶洼 [ 64.778668][ T535] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 64.786067][ T535] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 64.799239][ T535] usb 1-1: USB disconnect, device number 21 [ 64.813178][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 64.914463][ T1071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=1071 comm=syz.3.262 [ 64.933915][ T45] cdc_ncm 5-1:1.0: bind() failure [ 64.945389][ T45] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 64.947971][ T1073] incfs: iterate_incfs_dir / -22 [ 64.957443][ T45] cdc_ncm 5-1:1.1: bind() failure [ 64.957692][ T1073] incfs: iterate_incfs_dir / -22 [ 64.967135][ T45] usb 5-1: USB disconnect, device number 17 [ 64.990101][ T1075] FAULT_INJECTION: forcing a failure. [ 64.990101][ T1075] name failslab, interval 1, probability 0, space 0, times 0 [ 65.002893][ T1075] CPU: 1 UID: 0 PID: 1075 Comm: syz.3.264 Not tainted syzkaller #0 1aa8ac0f99ca3a11aee7c3a781bea815a9b193fa [ 65.002926][ T1075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 65.002938][ T1075] Call Trace: [ 65.002944][ T1075] [ 65.002952][ T1075] __dump_stack+0x21/0x30 [ 65.002983][ T1075] dump_stack_lvl+0x140/0x1c0 [ 65.003007][ T1075] ? __cfi_dump_stack_lvl+0x10/0x10 [ 65.003041][ T1075] dump_stack+0x19/0x20 [ 65.003065][ T1075] should_fail_ex+0x3d7/0x530 [ 65.003090][ T1075] should_failslab+0xac/0x100 [ 65.003109][ T1075] __kmalloc_node_track_caller_noprof+0x68/0x4f0 [ 65.003138][ T1075] ? vfs_parse_monolithic_sep+0x242/0x360 [ 65.003161][ T1075] kmemdup_nul+0x5a/0x1a0 [ 65.003186][ T1075] vfs_parse_monolithic_sep+0x242/0x360 [ 65.003205][ T1075] ? kasan_save_alloc_info+0x40/0x50 [ 65.003230][ T1075] ? __cfi_ovl_next_opt+0x10/0x10 [ 65.003258][ T1075] ? __cfi_vfs_parse_monolithic_sep+0x10/0x10 [ 65.003279][ T1075] ? ovl_init_fs_context+0x191/0x710 [ 65.003307][ T1075] ? alloc_fs_context+0x606/0x820 [ 65.003326][ T1075] ovl_parse_monolithic+0x28/0x40 [ 65.003354][ T1075] parse_monolithic_mount_data+0x82/0x90 [ 65.003377][ T1075] do_new_mount+0x222/0xb30 [ 65.003402][ T1075] ? security_capable+0x44/0x130 [ 65.003429][ T1075] path_mount+0x682/0x1010 [ 65.003456][ T1075] __se_sys_mount+0x2bf/0x480 [ 65.003483][ T1075] ? ksys_write+0x1f3/0x260 [ 65.003510][ T1075] ? __x64_sys_mount+0xf0/0xf0 [ 65.003537][ T1075] __x64_sys_mount+0xc3/0xf0 [ 65.003570][ T1075] x64_sys_call+0x2021/0x2ee0 [ 65.003598][ T1075] do_syscall_64+0x57/0xf0 [ 65.003623][ T1075] ? clear_bhb_loop+0x50/0xa0 [ 65.003649][ T1075] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 65.003681][ T1075] RIP: 0033:0x7f91fed9c799 [ 65.003697][ T1075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.003715][ T1075] RSP: 002b:00007f91ffbca028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 65.003736][ T1075] RAX: ffffffffffffffda RBX: 00007f91ff015fa0 RCX: 00007f91fed9c799 [ 65.003757][ T1075] RDX: 0000200000000440 RSI: 0000200000000100 RDI: 0000000000000000 [ 65.003772][ T1075] RBP: 00007f91ffbca090 R08: 0000200000000200 R09: 0000000000000000 [ 65.003788][ T1075] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 65.003800][ T1075] R13: 00007f91ff016038 R14: 00007f91ff015fa0 R15: 00007ffd4cfc0778 [ 65.003823][ T1075] [ 65.393486][ T1089] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 65.402862][ T1089] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 65.455831][ T1091] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 65.788706][ T1101] FAULT_INJECTION: forcing a failure. [ 65.788706][ T1101] name failslab, interval 1, probability 0, space 0, times 0 [ 65.816471][ T1101] CPU: 1 UID: 0 PID: 1101 Comm: syz.3.273 Not tainted syzkaller #0 1aa8ac0f99ca3a11aee7c3a781bea815a9b193fa [ 65.816511][ T1101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 65.816528][ T1101] Call Trace: [ 65.816537][ T1101] [ 65.816547][ T1101] __dump_stack+0x21/0x30 [ 65.816585][ T1101] dump_stack_lvl+0x140/0x1c0 [ 65.816633][ T1101] ? __cfi_dump_stack_lvl+0x10/0x10 [ 65.816670][ T1101] dump_stack+0x19/0x20 [ 65.816702][ T1101] should_fail_ex+0x3d7/0x530 [ 65.816734][ T1101] should_failslab+0xac/0x100 [ 65.816759][ T1101] __kmalloc_node_track_caller_noprof+0x68/0x4f0 [ 65.816797][ T1101] ? do_new_mount+0x222/0xb30 [ 65.816830][ T1101] ? __se_sys_mount+0x2bf/0x480 [ 65.816865][ T1101] ? ovl_parse_layer+0x90/0xe60 [ 65.816901][ T1101] ? x64_sys_call+0x2021/0x2ee0 [ 65.816943][ T1101] ? do_syscall_64+0x57/0xf0 [ 65.816974][ T1101] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 65.817009][ T1101] kstrdup+0x4d/0x130 [ 65.817038][ T1101] ? ovl_parse_layer+0x83/0xe60 [ 65.817075][ T1101] ovl_parse_layer+0x90/0xe60 [ 65.817111][ T1101] ? fs_param_is_string+0xab/0x1d0 [ 65.817141][ T1101] ? ovl_reconfigure+0x270/0x270 [ 65.817179][ T1101] ovl_parse_param+0x4eb/0xf70 [ 65.817217][ T1101] ? __cfi_selinux_fs_context_parse_param+0x10/0x10 [ 65.817248][ T1101] ? __kasan_kmalloc+0x96/0xb0 [ 65.817272][ T1101] ? __cfi_ovl_parse_param+0x10/0x10 [ 65.817309][ T1101] ? static_key_count+0x45/0x70 [ 65.817336][ T1101] ? security_fs_context_parse_param+0x27b/0x2a0 [ 65.817375][ T1101] vfs_parse_fs_param+0x1ef/0x470 [ 65.817402][ T1101] vfs_parse_monolithic_sep+0x278/0x360 [ 65.817429][ T1101] ? kasan_save_alloc_info+0x40/0x50 [ 65.817459][ T1101] ? __cfi_ovl_next_opt+0x10/0x10 [ 65.817496][ T1101] ? __cfi_vfs_parse_monolithic_sep+0x10/0x10 [ 65.817524][ T1101] ? ovl_init_fs_context+0x191/0x710 [ 65.817561][ T1101] ? alloc_fs_context+0x606/0x820 [ 65.817588][ T1101] ovl_parse_monolithic+0x28/0x40 [ 65.817633][ T1101] parse_monolithic_mount_data+0x82/0x90 [ 65.817664][ T1101] do_new_mount+0x222/0xb30 [ 65.817698][ T1101] ? security_capable+0x44/0x130 [ 65.817734][ T1101] path_mount+0x682/0x1010 [ 65.817770][ T1101] __se_sys_mount+0x2bf/0x480 [ 65.817804][ T1101] ? ksys_write+0x1f3/0x260 [ 65.817839][ T1101] ? __x64_sys_mount+0xf0/0xf0 [ 65.817874][ T1101] __x64_sys_mount+0xc3/0xf0 [ 65.817908][ T1101] x64_sys_call+0x2021/0x2ee0 [ 65.817944][ T1101] do_syscall_64+0x57/0xf0 [ 65.817977][ T1101] ? clear_bhb_loop+0x50/0xa0 [ 65.818011][ T1101] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 65.818045][ T1101] RIP: 0033:0x7f91fed9c799 [ 65.818067][ T1101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.818090][ T1101] RSP: 002b:00007f91ffbca028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 65.818118][ T1101] RAX: ffffffffffffffda RBX: 00007f91ff015fa0 RCX: 00007f91fed9c799 [ 65.818138][ T1101] RDX: 0000200000000440 RSI: 0000200000000100 RDI: 0000000000000000 [ 65.818157][ T1101] RBP: 00007f91ffbca090 R08: 0000200000000200 R09: 0000000000000000 [ 65.818174][ T1101] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 65.818190][ T1101] R13: 00007f91ff016038 R14: 00007f91ff015fa0 R15: 00007ffd4cfc0778 [ 65.818213][ T1101] [ 66.181017][ T1105] netlink: 340 bytes leftover after parsing attributes in process `syz.4.275'. [ 66.223554][ T45] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 66.234098][ T36] kauditd_printk_skb: 409 callbacks suppressed [ 66.234117][ T36] audit: type=1400 audit(1774307625.875:26764): avc: denied { map } for pid=1109 comm="syz.3.277" path="socket:[7961]" dev="sockfs" ino=7961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 66.416121][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 66.424209][ T45] usb 1-1: config 9 has an invalid interface number: 189 but max is 1 [ 66.432466][ T45] usb 1-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 66.441211][ T45] usb 1-1: config 9 has an invalid interface number: 2 but max is 1 [ 66.449268][ T45] usb 1-1: config 9 has no interface number 0 [ 66.455372][ T45] usb 1-1: config 9 has no interface number 1 [ 66.461595][ T45] usb 1-1: config 9 interface 189 altsetting 8 endpoint 0xE has invalid maxpacket 32958, setting to 64 [ 66.472795][ T45] usb 1-1: config 9 interface 189 altsetting 8 endpoint 0x6 has invalid maxpacket 20814, setting to 64 [ 66.483911][ T379] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 66.492339][ T45] usb 1-1: config 9 interface 189 altsetting 8 endpoint 0x9 has an invalid bInterval 253, changing to 11 [ 66.503720][ T45] usb 1-1: config 9 interface 189 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 66.515132][ T45] usb 1-1: config 9 interface 189 altsetting 8 endpoint 0xD has an invalid bInterval 35, changing to 9 [ 66.526582][ T45] usb 1-1: config 9 interface 189 altsetting 8 endpoint 0x3 has an invalid bInterval 240, changing to 11 [ 66.538009][ T45] usb 1-1: config 9 interface 189 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 66.548975][ T45] usb 1-1: config 9 interface 189 altsetting 8 endpoint 0x1 has invalid wMaxPacketSize 0 [ 66.558947][ T45] usb 1-1: config 9 interface 189 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 66.569949][ T45] usb 1-1: config 9 interface 189 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 66.584363][ T45] usb 1-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 66.595160][ T45] usb 1-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 66.605826][ T45] usb 1-1: config 9 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 66.616611][ T45] usb 1-1: config 9 interface 2 altsetting 1 has an endpoint descriptor with address 0xBF, changing to 0x8F [ 66.628255][ T45] usb 1-1: config 9 interface 2 altsetting 1 endpoint 0x8F has invalid maxpacket 29740, setting to 64 [ 66.639285][ T45] usb 1-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 66.649932][ T45] usb 1-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 66.660683][ T45] usb 1-1: config 9 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 66.671792][ T45] usb 1-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 66.682431][ T45] usb 1-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 66.693453][ T45] usb 1-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 66.704771][ T45] usb 1-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 66.715506][ T45] usb 1-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 66.726368][ T45] usb 1-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 66.737063][ T45] usb 1-1: config 9 interface 2 altsetting 1 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 66.750364][ T45] usb 1-1: config 9 interface 189 has no altsetting 0 [ 66.750449][ T379] usb 2-1: unable to get BOS descriptor or descriptor too short [ 66.765877][ T45] usb 1-1: config 9 interface 2 has no altsetting 0 [ 66.773171][ T379] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.783883][ T379] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 66.793020][ T379] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 66.804382][ T45] usb 1-1: New USB device found, idVendor=07b8, idProduct=3073, bcdDevice=ea.b8 [ 66.813621][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.821855][ T45] usb 1-1: Product: syz [ 66.826233][ T45] usb 1-1: Manufacturer: 揇Ｘ噇㨧描켭喬咝⇾ﭡ ㅎ㮋갈泀਀㻶뀅ᨮ鍨ಡ櫿뿈⧴䐗廟씕䣟齼䷫葓㰓뾤쀈繉䙺㙓攐⦕䫷犆魦薎흔ṥถᅭ綷⚔∻칲 [ 66.844543][ T367] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 66.854219][ T379] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 66.864654][ T379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.872741][ T379] usb 2-1: Product: syz [ 66.877012][ T45] usb 1-1: SerialNumber: syz [ 66.882216][ T379] usb 2-1: Manufacturer: syz [ 66.885809][ T1119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.281'. [ 66.896350][ T379] usb 2-1: SerialNumber: syz [ 67.035686][ T367] usb 4-1: Using ep0 maxpacket: 8 [ 67.042100][ T367] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.052412][ T367] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 67.061545][ T367] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.071106][ T367] usb 4-1: config 0 descriptor?? [ 67.077643][ T367] usb 4-1: bad CDC descriptors [ 67.082767][ T367] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 67.090758][ T367] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 67.097299][ T367] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 67.123616][ T36] audit: type=1400 audit(1774307626.717:26765): avc: denied { write } for pid=1111 comm="syz.1.278" name="tcp" dev="proc" ino=4026532320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 67.125069][ T45] usb 1-1: USB disconnect, device number 22 [ 67.158023][ T379] usb 2-1: Can't get UAC3 power state for id 10 [ 67.165351][ T379] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 67.177216][ T379] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 67.203647][ T379] usb 2-1: USB disconnect, device number 28 [ 67.292288][ T9] usb 4-1: USB disconnect, device number 30 [ 67.563697][ T36] audit: type=1400 audit(1774307627.129:26766): avc: denied { create } for pid=1126 comm="syz.4.285" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 67.591985][ T36] audit: type=1400 audit(1774307627.157:26767): avc: denied { unlink } for pid=477 comm="syz-executor" name="file0" dev="tmpfs" ino=435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 67.657872][ T1136] sit0: entered promiscuous mode [ 67.664531][ T1136] netlink: 'syz.4.289': attribute type 1 has an invalid length. [ 67.672727][ T1136] netlink: 1 bytes leftover after parsing attributes in process `syz.4.289'. [ 67.777228][ T36] audit: type=1400 audit(1774307627.325:26768): avc: denied { map } for pid=1143 comm="syz.0.293" path="socket:[8063]" dev="sockfs" ino=8063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.805127][ T36] audit: type=1400 audit(1774307627.325:26769): avc: denied { read } for pid=1143 comm="syz.0.293" path="socket:[8063]" dev="sockfs" ino=8063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.807038][ T1144] binfmt_misc: register: failed to install interpreter file ./file0 [ 67.862220][ T36] audit: type=1400 audit(1774307627.410:26770): avc: denied { connect } for pid=1146 comm="syz.3.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 67.887802][ T36] audit: type=1400 audit(1774307627.410:26771): avc: denied { bind } for pid=1146 comm="syz.3.294" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 67.909167][ T36] audit: type=1400 audit(1774307627.410:26772): avc: denied { name_bind } for pid=1146 comm="syz.3.294" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 67.912923][ T1151] incfs: iterate_incfs_dir / -22 [ 67.932716][ T36] audit: type=1400 audit(1774307627.410:26773): avc: denied { node_bind } for pid=1146 comm="syz.3.294" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 67.935938][ T1151] incfs: iterate_incfs_dir / -22 [ 67.965403][ T379] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 67.989887][ T1156] netlink: 57 bytes leftover after parsing attributes in process `syz.3.298'. [ 68.125663][ T379] usb 2-1: Using ep0 maxpacket: 32 [ 68.132075][ T379] usb 2-1: config index 0 descriptor too short (expected 164, got 36) [ 68.140356][ T379] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.151328][ T379] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.161107][ T379] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 68.170212][ T379] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.178942][ T379] usb 2-1: config 0 descriptor?? [ 68.232555][ T535] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 68.393029][ T535] usb 1-1: Using ep0 maxpacket: 8 [ 68.399322][ T535] usb 1-1: config 9 has an invalid interface number: 189 but max is 1 [ 68.405956][ T1161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.408789][ T535] usb 1-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 68.421757][ T379] logitech 0003:046D:C29C.0007: unbalanced collection at end of report description [ 68.426657][ T535] usb 1-1: config 9 has an invalid interface number: 2 but max is 1 [ 68.439658][ T379] logitech 0003:046D:C29C.0007: parse failed [ 68.442885][ T535] usb 1-1: config 9 has no interface number 0 [ 68.449847][ T1161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.456194][ T535] usb 1-1: config 9 has no interface number 1 [ 68.462203][ T379] logitech 0003:046D:C29C.0007: probe with driver logitech failed with error -22 [ 68.468800][ T535] usb 1-1: config 9 interface 189 altsetting 8 endpoint 0xE has invalid maxpacket 32958, setting to 64 [ 68.488547][ T535] usb 1-1: config 9 interface 189 altsetting 8 endpoint 0x6 has invalid maxpacket 20814, setting to 64 [ 68.505621][ T535] usb 1-1: config 9 interface 189 altsetting 8 endpoint 0x9 has an invalid bInterval 253, changing to 11 [ 68.517240][ T535] usb 1-1: config 9 interface 189 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 68.528396][ T535] usb 1-1: config 9 interface 189 altsetting 8 endpoint 0xD has an invalid bInterval 35, changing to 9 [ 68.539968][ T535] usb 1-1: config 9 interface 189 altsetting 8 endpoint 0x3 has an invalid bInterval 240, changing to 11 [ 68.552327][ T535] usb 1-1: config 9 interface 189 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 68.563297][ T535] usb 1-1: config 9 interface 189 altsetting 8 endpoint 0x1 has invalid wMaxPacketSize 0 [ 68.579313][ T535] usb 1-1: config 9 interface 189 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 68.590352][ T535] usb 1-1: config 9 interface 189 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 68.601149][ T535] usb 1-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 68.612125][ T535] usb 1-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 68.622793][ T535] usb 1-1: config 9 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 68.638671][ T535] usb 1-1: config 9 interface 2 altsetting 1 has an endpoint descriptor with address 0xBF, changing to 0x8F [ 68.650308][ T535] usb 1-1: config 9 interface 2 altsetting 1 endpoint 0x8F has invalid maxpacket 29740, setting to 64 [ 68.651962][ T379] usb 2-1: USB disconnect, device number 29 [ 68.661341][ T535] usb 1-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 68.680598][ T535] usb 1-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 68.691411][ T535] usb 1-1: config 9 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 68.702178][ T535] usb 1-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 68.712778][ T535] usb 1-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 68.723388][ T535] usb 1-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 68.733950][ T535] usb 1-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 68.745783][ T535] usb 1-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 68.756458][ T535] usb 1-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 68.767036][ T535] usb 1-1: config 9 interface 2 altsetting 1 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 68.780144][ T535] usb 1-1: config 9 interface 189 has no altsetting 0 [ 68.787044][ T535] usb 1-1: config 9 interface 2 has no altsetting 0 [ 68.795100][ T535] usb 1-1: New USB device found, idVendor=07b8, idProduct=3073, bcdDevice=ea.b8 [ 68.804274][ T535] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.812349][ T535] usb 1-1: Product: syz [ 68.816534][ T535] usb 1-1: Manufacturer: 揇Ｘ噇㨧描켭喬咝⇾ﭡ ㅎ㮋갈泀਀㻶뀅ᨮ鍨ಡ櫿뿈⧴䐗廟씕䣟齼䷫葓㰓뾤쀈繉䙺㙓攐⦕䫷犆魦薎흔ṥถᅭ綷⚔∻칲 [ 68.835093][ T535] usb 1-1: SerialNumber: syz [ 68.927430][ T1173] netlink: 'syz.3.304': attribute type 4 has an invalid length. [ 68.936802][ T1174] netlink: 'syz.3.304': attribute type 4 has an invalid length. [ 69.023915][ T1185] netlink: 'syz.3.309': attribute type 27 has an invalid length. [ 69.052304][ T1185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.309'. [ 69.069729][ T535] usb 1-1: USB disconnect, device number 23 [ 69.222727][ T305] Bluetooth: hci1: Frame reassembly failed (-84) [ 69.354620][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 69.514935][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 69.521329][ T10] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 69.531662][ T10] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 69.541633][ T10] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 69.554702][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 69.562662][ T10] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 69.571913][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.580100][ T10] usb 4-1: Product: syz [ 69.584398][ T10] usb 4-1: Manufacturer: syz [ 69.589032][ T10] usb 4-1: SerialNumber: syz [ 69.673967][ T1206] syz.0.318 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 69.813126][ T10] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 69.826661][ T1208] netlink: 'syz.4.319': attribute type 16 has an invalid length. [ 69.942412][ T535] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 70.026108][ T1210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.034805][ T1210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.049493][ T10] usb 4-1: USB disconnect, device number 31 [ 70.058502][ T10] usblp0: removed [ 70.114716][ T535] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.132836][ T535] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.143523][ T535] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 70.152773][ T535] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 70.161491][ T535] usb 1-1: Manufacturer: syz [ 70.167148][ T535] usb 1-1: config 0 descriptor?? [ 70.230089][ T1222] input: syz1 as /devices/virtual/input/input8 [ 70.508679][ T379] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 70.603882][ T53] Bluetooth: hci2: Frame reassembly failed (-84) [ 70.670552][ T379] usb 4-1: unable to get BOS descriptor or descriptor too short [ 70.678651][ T379] usb 4-1: not running at top speed; connect to a high speed hub [ 70.686731][ T379] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 70.695394][ T379] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 70.704591][ T379] usb 4-1: config 5 interface 0 has no altsetting 0 [ 70.712051][ T379] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 70.721253][ T379] usb 4-1: config 5 interface 0 has no altsetting 0 [ 70.728691][ T379] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 70.737643][ T379] usb 4-1: config 5 interface 0 has no altsetting 0 [ 70.745113][ T379] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 70.754052][ T379] usb 4-1: config 5 interface 0 has no altsetting 0 [ 70.761462][ T379] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 70.770560][ T379] usb 4-1: config 5 interface 0 has no altsetting 0 [ 70.778020][ T379] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 70.787030][ T379] usb 4-1: config 5 interface 0 has no altsetting 0 [ 70.794452][ T379] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 70.803443][ T379] usb 4-1: config 5 interface 0 has no altsetting 0 [ 70.810868][ T379] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 70.819850][ T379] usb 4-1: config 5 interface 0 has no altsetting 0 [ 70.827235][ T1206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.830593][ T379] usb 4-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 70.837621][ T1206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.847450][ T379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.856517][ T1206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'. [ 70.860870][ T379] usb 4-1: Product: syz [ 70.874144][ T379] usb 4-1: Manufacturer: syz [ 70.878772][ T379] usb 4-1: SerialNumber: syz [ 71.102011][ T379] rndis_host 4-1:5.0: skipping garbage [ 71.107662][ T379] usb 4-1: bad CDC descriptors [ 71.113927][ T379] usb 4-1: USB disconnect, device number 32 [ 71.384926][ T518] Bluetooth: hci1: command 0x1003 tx timeout [ 71.384927][ T55] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 71.673118][ T1247] tap0: tun_chr_ioctl cmd 1074025677 [ 71.678914][ T1247] tap0: linktype set to 780 [ 71.683691][ T1247] tap0: tun_chr_ioctl cmd 1074025672 [ 71.690219][ T1247] tap0: ignored: set checksum disabled [ 71.695983][ T1247] tap0: tun_chr_ioctl cmd 2153273474 [ 71.716248][ T379] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 71.877621][ T379] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.887806][ T379] usb 2-1: config 0 has no interfaces? [ 71.894994][ T379] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 71.904535][ T379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.912626][ T379] usb 2-1: Product: syz [ 71.916809][ T379] usb 2-1: Manufacturer: syz [ 71.921515][ T379] usb 2-1: SerialNumber: syz [ 71.927142][ T379] usb 2-1: config 0 descriptor?? [ 72.090227][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 72.149448][ T10] usb 2-1: USB disconnect, device number 30 [ 72.251717][ T9] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 72.263461][ T9] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 72.274756][ T9] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 72.287016][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 72.296192][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 72.304255][ T9] usb 4-1: Manufacturer: syz [ 72.313008][ T1254] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 72.536455][ T9] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 72.544882][ T9] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input9 [ 72.558084][ T9] usb 4-1: USB disconnect, device number 33 [ 72.564084][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 72.752776][ T55] Bluetooth: hci2: command 0x1003 tx timeout [ 72.758919][ T493] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 72.766982][ T535] uclogic 0003:256C:006D.0008: failed retrieving Huion firmware version: -71 [ 72.777601][ T535] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 72.785185][ T535] uclogic 0003:256C:006D.0008: probe with driver uclogic failed with error -71 [ 72.797656][ T535] usb 1-1: USB disconnect, device number 24 [ 72.841032][ T1259] incfs: iterate_incfs_dir / -22 [ 72.846110][ T1259] incfs: iterate_incfs_dir / -22 [ 73.554233][ T379] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 73.575608][ T45] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 73.659988][ T1286] incfs: iterate_incfs_dir / -22 [ 73.665093][ T1286] incfs: iterate_incfs_dir / -22 [ 73.701205][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 73.701226][ T36] audit: type=1400 audit(1774307638.868:26785): avc: denied { ioctl } for pid=1289 comm="syz.1.348" path="socket:[9421]" dev="sockfs" ino=9421 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.728592][ T1290] mmap: syz.1.348 (1290): VmData 29192192 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 73.745263][ T379] usb 4-1: Using ep0 maxpacket: 8 [ 73.751568][ T379] usb 4-1: config 9 has an invalid interface number: 189 but max is 1 [ 73.753442][ T36] audit: type=1400 audit(1774307638.924:26786): avc: denied { setopt } for pid=1289 comm="syz.1.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.759953][ T379] usb 4-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 73.788749][ T379] usb 4-1: config 9 has an invalid interface number: 2 but max is 1 [ 73.798080][ T379] usb 4-1: config 9 has no interface number 0 [ 73.804597][ T379] usb 4-1: config 9 has no interface number 1 [ 73.811046][ T379] usb 4-1: config 9 interface 189 altsetting 8 endpoint 0xE has invalid maxpacket 32958, setting to 64 [ 73.824217][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.835225][ T379] usb 4-1: config 9 interface 189 altsetting 8 endpoint 0x6 has invalid maxpacket 20814, setting to 64 [ 73.846505][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.856348][ T379] usb 4-1: config 9 interface 189 altsetting 8 endpoint 0x9 has an invalid bInterval 253, changing to 11 [ 73.867636][ T45] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 73.876792][ T379] usb 4-1: config 9 interface 189 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 73.887580][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.895929][ T379] usb 4-1: config 9 interface 189 altsetting 8 endpoint 0xD has an invalid bInterval 35, changing to 9 [ 73.907341][ T45] usb 1-1: config 0 descriptor?? [ 73.912409][ T379] usb 4-1: config 9 interface 189 altsetting 8 endpoint 0x3 has an invalid bInterval 240, changing to 11 [ 73.923815][ T379] usb 4-1: config 9 interface 189 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 73.935541][ T379] usb 4-1: config 9 interface 189 altsetting 8 endpoint 0x1 has invalid wMaxPacketSize 0 [ 73.945428][ T379] usb 4-1: config 9 interface 189 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 73.956199][ T379] usb 4-1: config 9 interface 189 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 73.967046][ T379] usb 4-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 73.977918][ T379] usb 4-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 73.989189][ T379] usb 4-1: config 9 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 74.000358][ T379] usb 4-1: config 9 interface 2 altsetting 1 has an endpoint descriptor with address 0xBF, changing to 0x8F [ 74.012060][ T379] usb 4-1: config 9 interface 2 altsetting 1 endpoint 0x8F has invalid maxpacket 29740, setting to 64 [ 74.023089][ T379] usb 4-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 74.034022][ T379] usb 4-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 74.044766][ T379] usb 4-1: config 9 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 74.058285][ T379] usb 4-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 74.070537][ T379] usb 4-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 74.081640][ T379] usb 4-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 74.092656][ T379] usb 4-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 74.103562][ T379] usb 4-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 74.114196][ T379] usb 4-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 74.125930][ T379] usb 4-1: config 9 interface 2 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 74.136892][ T379] usb 4-1: config 9 interface 2 altsetting 1 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 74.150276][ T379] usb 4-1: config 9 interface 189 has no altsetting 0 [ 74.157187][ T379] usb 4-1: config 9 interface 2 has no altsetting 0 [ 74.173242][ T379] usb 4-1: New USB device found, idVendor=07b8, idProduct=3073, bcdDevice=ea.b8 [ 74.182698][ T379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.189452][ T36] audit: type=1400 audit(1774307639.327:26787): avc: denied { read } for pid=1308 comm="syz.4.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.190867][ T379] usb 4-1: Product: syz [ 74.214874][ T379] usb 4-1: Manufacturer: 揇Ｘ噇㨧描켭喬咝⇾ﭡ ㅎ㮋갈泀਀㻶뀅ᨮ鍨ಡ櫿뿈⧴䐗廟씕䣟齼䷫葓㰓뾤쀈繉䙺㙓攐⦕䫷犆魦薎흔ṥถᅭ綷⚔∻칲 [ 74.233600][ T379] usb 4-1: SerialNumber: syz [ 74.258900][ T36] audit: type=1400 audit(1774307639.392:26788): avc: denied { map } for pid=1314 comm="syz.4.356" path="socket:[9433]" dev="sockfs" ino=9433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.281981][ T36] audit: type=1400 audit(1774307639.392:26789): avc: denied { read } for pid=1314 comm="syz.4.356" path="socket:[9433]" dev="sockfs" ino=9433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.347141][ T1311] can0: slcan on ttyS3. [ 74.352944][ T36] audit: type=1400 audit(1774307639.477:26790): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 74.378357][ T45] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 74.389491][ T45] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 74.394064][ T36] audit: type=1400 audit(1774307639.523:26791): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.397083][ T45] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 74.429107][ T36] audit: type=1400 audit(1774307639.523:26792): avc: denied { read } for pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=1936 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.451134][ T45] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 74.452936][ T36] audit: type=1400 audit(1774307639.523:26793): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1936 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.481968][ T36] audit: type=1400 audit(1774307639.523:26794): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1936 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.500465][ T45] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 74.513216][ T379] usb 4-1: USB disconnect, device number 34 [ 74.533079][ T45] playstation 0003:054C:0DF2.0009: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 74.561405][ T1304] can0 (unregistered): slcan off ttyS3. [ 74.623312][ T45] playstation 0003:054C:0DF2.0009: Invalid reportID received, expected 9 got 0 [ 74.632402][ T45] playstation 0003:054C:0DF2.0009: Failed to retrieve DualSense pairing info: -22 [ 74.641908][ T45] playstation 0003:054C:0DF2.0009: Failed to get MAC address from DualSense [ 74.651154][ T45] playstation 0003:054C:0DF2.0009: Failed to create dualsense. [ 74.660638][ T45] playstation 0003:054C:0DF2.0009: probe with driver playstation failed with error -22 [ 74.841670][ T379] usb 1-1: USB disconnect, device number 25 [ 74.847323][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 75.008896][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 75.018702][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 75.048527][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 75.062029][ T10] usb 2-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40 [ 75.071300][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.101851][ T10] usb 2-1: Product: syz [ 75.106117][ T10] usb 2-1: Manufacturer: syz [ 75.110759][ T10] usb 2-1: SerialNumber: syz [ 75.285343][ T45] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 75.338283][ T10] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8211); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 75.353394][ T10] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 75.362717][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 75.374698][ T10] usb 2-1: USB disconnect, device number 32 [ 75.384540][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 75.468293][ T45] usb 4-1: config 4 has an invalid interface number: 228 but max is 0 [ 75.476549][ T45] usb 4-1: config 4 has no interface number 0 [ 75.482769][ T45] usb 4-1: too many endpoints for config 4 interface 228 altsetting 12: 129, using maximum allowed: 30 [ 75.493961][ T45] usb 4-1: config 4 interface 228 altsetting 12 endpoint 0x7 has invalid wMaxPacketSize 0 [ 75.503942][ T45] usb 4-1: config 4 interface 228 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 75.517252][ T45] usb 4-1: config 4 interface 228 has no altsetting 0 [ 75.526853][ T45] usb 4-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 75.536053][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.544470][ T45] usb 4-1: Product: syz [ 75.549145][ T45] usb 4-1: Manufacturer: syz [ 75.555326][ T45] usb 4-1: SerialNumber: syz [ 75.562256][ T1372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=1372 comm=syz.0.366 [ 75.597248][ T1374] incfs: iterate_incfs_dir / -22 [ 75.602311][ T1374] incfs: iterate_incfs_dir / -22 [ 75.782830][ T45] usb 4-1: USB disconnect, device number 35 [ 75.807731][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:4.228/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 75.894793][ T1380] 9pnet_virtio: no channels available for device syz [ 75.915863][ T379] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 76.014778][ T305] bridge_slave_1: left allmulticast mode [ 76.020866][ T305] bridge_slave_1: left promiscuous mode [ 76.027138][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.035743][ T305] bridge_slave_0: left allmulticast mode [ 76.041587][ T305] bridge_slave_0: left promiscuous mode [ 76.047642][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.077839][ T379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 76.092147][ T379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 76.104781][ T379] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 76.114121][ T379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.125538][ T379] usb 1-1: Product: syz [ 76.129953][ T379] usb 1-1: Manufacturer: syz [ 76.134774][ T379] usb 1-1: SerialNumber: syz [ 76.140711][ T379] usb 1-1: config 0 descriptor?? [ 76.147099][ T379] usb 1-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 76.165975][ T305] veth1_macvtap: left promiscuous mode [ 76.171673][ T305] veth0_vlan: left promiscuous mode [ 76.307194][ T1382] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.314440][ T1382] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.322686][ T1382] bridge_slave_0: entered allmulticast mode [ 76.329392][ T1382] bridge_slave_0: entered promiscuous mode [ 76.336660][ T1382] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.344765][ T1382] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.352105][ T1382] bridge_slave_1: entered allmulticast mode [ 76.359169][ T1382] bridge_slave_1: entered promiscuous mode [ 76.371105][ T1376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1376 comm=syz.0.368 [ 76.404518][ T1387] ------------[ cut here ]------------ [ 76.410151][ T1387] WARNING: CPU: 1 PID: 1387 at mm/page_alloc.c:5268 __alloc_pages_noprof+0x109/0x7e0 [ 76.420275][ T1387] Modules linked in: [ 76.424232][ T1387] CPU: 1 UID: 3327 PID: 1387 Comm: syz.3.374 Not tainted syzkaller #0 1aa8ac0f99ca3a11aee7c3a781bea815a9b193fa [ 76.436111][ T1387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 76.446271][ T1387] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 76.452364][ T1387] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d da 80 0b 06 00 0f 85 c2 00 00 00 c6 05 cd 80 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 76.472095][ T1387] RSP: 0018:ffffc900086af640 EFLAGS: 00010246 [ 76.478535][ T1387] RAX: 0000000000000000 RBX: 000000000000000f RCX: 0000000000000000 [ 76.486609][ T1387] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900086af6f8 [ 76.494670][ T1387] RBP: ffffc900086af780 R08: ffffc900086af6f7 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 76.502698][ T1387] R10: ffffc900086af6e0 R11: fffff520010d5edf R12: ffffc900086af680 [ 76.510790][ T1387] R13: dffffc0000000000 R14: 1ffff920010d5ecc R15: 0000000000000000 [ 76.518894][ T1387] FS: 00007f91ffbca6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 76.527930][ T1387] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.534750][ T1387] CR2: 0000200000005000 CR3: 000000010ce98000 CR4: 00000000003526b0 [ 76.543101][ T1387] Call Trace: [ 76.546449][ T1387] [ 76.549421][ T1387] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 76.555284][ T1387] ? __kasan_slab_alloc+0x73/0x90 [ 76.560405][ T1387] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 76.566102][ T1387] ? hashtab_init+0xdb/0x1f0 [ 76.570780][ T1387] ___kmalloc_large_node+0x81/0x210 [ 76.576051][ T1387] ? hashtab_init+0xdb/0x1f0 [ 76.580764][ T1387] __kmalloc_large_node_noprof+0x1e/0xd0 [ 76.586460][ T1387] ? hashtab_init+0xdb/0x1f0 [ 76.591574][ T1387] __kmalloc_noprof+0x326/0x500 [ 76.596588][ T1387] ? __cfi_ebitmap_read+0x10/0x10 [ 76.601716][ T1387] hashtab_init+0xdb/0x1f0 [ 76.606227][ T1387] ? policydb_read+0x87f/0x28b0 [ 76.611171][ T1387] symtab_init+0x44/0x70 [ 76.615472][ T1387] policydb_read+0x90e/0x28b0 [ 76.620296][ T1387] ? __kasan_kmalloc+0x96/0xb0 [ 76.625321][ T1387] ? __cfi_policydb_read+0x10/0x10 [ 76.630504][ T1387] ? security_load_policy+0x130/0x12d0 [ 76.636049][ T1387] security_load_policy+0x16a/0x12d0 [ 76.641390][ T1387] ? irqentry_exit+0x4a/0x60 [ 76.646071][ T1387] ? asm_exc_page_fault+0x2b/0x30 [ 76.651158][ T1387] ? __cfi_security_load_policy+0x10/0x10 [ 76.656954][ T1387] ? rep_movs_alternative+0x4a/0xa0 [ 76.662205][ T1387] sel_write_load+0x2a7/0x5f0 [ 76.667020][ T1387] ? __cfi_sel_write_load+0x10/0x10 [ 76.672546][ T1387] ? bpf_lsm_file_permission+0xd/0x20 [ 76.678014][ T1387] ? __cfi_sel_write_load+0x10/0x10 [ 76.683276][ T1387] vfs_write+0x3c8/0xf90 [ 76.687604][ T1387] ? __cfi_vfs_write+0x10/0x10 [ 76.692417][ T1387] ? __kasan_check_write+0x18/0x20 [ 76.697644][ T1387] ? mutex_lock+0x97/0x1d0 [ 76.702098][ T1387] ? __cfi_mutex_lock+0x10/0x10 [ 76.707018][ T1387] ? __fget_files+0x2c5/0x340 [ 76.711742][ T1387] ksys_write+0x145/0x260 [ 76.716122][ T1387] ? xfd_validate_state+0x68/0x140 [ 76.721326][ T1387] ? __cfi_ksys_write+0x10/0x10 [ 76.726234][ T1387] ? __kasan_check_write+0x18/0x20 [ 76.731473][ T1387] ? fpregs_restore_userregs+0x11c/0x260 [ 76.737254][ T1387] __x64_sys_write+0x7f/0x90 [ 76.741968][ T1387] x64_sys_call+0x271c/0x2ee0 [ 76.746714][ T1387] do_syscall_64+0x57/0xf0 [ 76.751229][ T1387] ? clear_bhb_loop+0x50/0xa0 [ 76.755966][ T1387] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.761974][ T1387] RIP: 0033:0x7f91fed9c799 [ 76.766434][ T1387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.786166][ T1387] RSP: 002b:00007f91ffbca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 76.794667][ T1387] RAX: ffffffffffffffda RBX: 00007f91ff015fa0 RCX: 00007f91fed9c799 [ 76.802726][ T1387] RDX: 0000000000006000 RSI: 0000200000000000 RDI: 0000000000000003 [ 76.810742][ T1387] RBP: 00007f91fee32c99 R08: 0000000000000000 R09: 0000000000000000 [ 76.818803][ T1387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.826921][ T1387] R13: 00007f91ff016038 R14: 00007f91ff015fa0 R15: 00007ffd4cfc0778 [ 76.834983][ T1387] [ 76.838040][ T1387] ---[ end trace 0000000000000000 ]--- [ 76.858438][ T379] usb 1-1: USB disconnect, device number 26 [ 76.883064][ T1387] SELinux: failed to load policy [ 76.899397][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 77.118920][ T477] syz_tun (unregistering): left allmulticast mode [ 77.139349][ T305] bridge_slave_0: left allmulticast mode [ 77.145095][ T305] bridge_slave_0: left promiscuous mode [ 77.150766][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.308743][ T305] veth1_macvtap: left promiscuous mode [ 77.314299][ T305] veth0_vlan: left promiscuous mode [ 77.509325][ T305] ------------[ cut here ]------------ [ 77.514831][ T305] WARNING: CPU: 1 PID: 305 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 77.524948][ T305] Modules linked in: [ 77.528884][ T305] CPU: 1 UID: 0 PID: 305 Comm: kworker/u8:4 Tainted: G W syzkaller #0 1aa8ac0f99ca3a11aee7c3a781bea815a9b193fa [ 77.542072][ T305] Tainted: [W]=WARN [ 77.545897][ T305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 77.556027][ T305] Workqueue: netns cleanup_net [ 77.560840][ T305] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 77.566914][ T305] Code: e8 31 86 d9 fc 4b 83 3c 3e 00 75 19 e8 55 59 81 fc 49 81 ff f8 07 00 00 74 1b e8 47 59 81 fc 49 83 c7 08 eb c9 e8 3c 59 81 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 77.586627][ T305] RSP: 0018:ffffc9000b78fb90 EFLAGS: 00010293 [ 77.592867][ T305] RAX: ffffffff85064f64 RBX: ffff88812fa30000 RCX: ffff888130682600 [ 77.600945][ T305] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888103f9c0b8 [ 77.609017][ T305] RBP: ffffc9000b78fbb0 R08: 0000000000000003 R09: 0000000000000004 [ 77.617090][ T305] R10: dffffc0000000000 R11: fffff520016f1f04 R12: dffffc0000000000 [ 77.625096][ T305] R13: dffffc0000000000 R14: ffff888103f9c000 R15: 00000000000000b8 [ 77.633282][ T305] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 77.642347][ T305] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.649046][ T305] CR2: 0000200000005000 CR3: 000000010c77c000 CR4: 00000000003526b0 [ 77.657078][ T305] Call Trace: [ 77.660478][ T305] [ 77.663429][ T305] cleanup_net+0x6bd/0xc90 [ 77.667869][ T305] ? __cfi_cleanup_net+0x10/0x10 [ 77.672893][ T305] ? __schedule+0x1357/0x1ea0 [ 77.677631][ T305] ? kick_pool+0xb9/0x550 [ 77.682110][ T305] process_scheduled_works+0x7d1/0x1020 [ 77.687717][ T305] worker_thread+0xc70/0x10b0 [ 77.692493][ T305] ? __cfi_try_to_wake_up+0x10/0x10 [ 77.697728][ T305] kthread+0x2c6/0x370 [ 77.701878][ T305] ? __cfi_worker_thread+0x10/0x10 [ 77.707044][ T305] ? __cfi_kthread+0x10/0x10 [ 77.711798][ T305] ret_from_fork+0x67/0xa0 [ 77.716252][ T305] ? __cfi_kthread+0x10/0x10 [ 77.720855][ T305] ret_from_fork_asm+0x1a/0x30 [ 77.725724][ T305] [ 77.728769][ T305] ---[ end trace 0000000000000000 ]--- [ 77.734572][ T305] ------------[ cut here ]------------ [ 77.740130][ T305] WARNING: CPU: 1 PID: 305 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 77.750282][ T305] Modules linked in: [ 77.754253][ T305] CPU: 1 UID: 0 PID: 305 Comm: kworker/u8:4 Tainted: G W syzkaller #0 1aa8ac0f99ca3a11aee7c3a781bea815a9b193fa [ 77.767484][ T305] Tainted: [W]=WARN [ 77.771323][ T305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 77.781460][ T305] Workqueue: netns cleanup_net [ 77.786362][ T305] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 77.792459][ T305] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 00 59 81 fc 49 81 ff f8 07 00 00 74 1b e8 f2 58 81 fc 49 83 c7 08 eb c5 e8 e7 58 81 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 d7 58 81 fc 5b 41 5c 41 5e 41 [ 77.812439][ T305] RSP: 0018:ffffc9000b78fb90 EFLAGS: 00010293 [ 77.818861][ T305] RAX: ffffffff85064fb9 RBX: ffff888103f9c800 RCX: ffff888130682600 [ 77.826853][ T305] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888103f9c808 [ 77.834954][ T305] RBP: ffffc9000b78fbb0 R08: 0000000000000003 R09: 0000000000000004 [ 77.843002][ T305] R10: dffffc0000000000 R11: fffff520016f1f04 R12: dffffc0000000000 [ 77.851048][ T305] R13: dffffc0000000000 R14: ffff888103f9c000 R15: 0000000000000008 [ 77.859138][ T305] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 77.868190][ T305] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.874854][ T305] CR2: 0000200000005000 CR3: 000000010c77c000 CR4: 00000000003526b0 [ 77.882911][ T305] Call Trace: [ 77.886218][ T305] [ 77.889245][ T305] cleanup_net+0x6bd/0xc90 [ 77.893765][ T305] ? __cfi_cleanup_net+0x10/0x10 [ 77.898753][ T305] ? __schedule+0x1357/0x1ea0 [ 77.903526][ T305] ? kick_pool+0xb9/0x550 [ 77.907886][ T305] process_scheduled_works+0x7d1/0x1020 [ 77.913464][ T305] worker_thread+0xc70/0x10b0 [ 77.918329][ T305] ? __cfi_try_to_wake_up+0x10/0x10 [ 77.923560][ T305] kthread+0x2c6/0x370 [ 77.927712][ T305] ? __cfi_worker_thread+0x10/0x10 [ 77.932866][ T305] ? __cfi_kthread+0x10/0x10 [ 77.937534][ T305] ret_from_fork+0x67/0xa0 [ 77.941987][ T305] ? __cfi_kthread+0x10/0x10 [ 77.946740][ T305] ret_from_fork_asm+0x1a/0x30 [ 77.951545][ T305] [ 77.954566][ T305] ---[ end trace 0000000000000000 ]--- [ 77.963063][ T305] ------------[ cut here ]------------ [ 77.968603][ T305] WARNING: CPU: 0 PID: 305 at net/xfrm/xfrm_state.c:3216 xfrm_state_fini+0x2be/0x310 [ 77.978115][ T305] Modules linked in: [ 77.982105][ T305] CPU: 0 UID: 0 PID: 305 Comm: kworker/u8:4 Tainted: G W syzkaller #0 1aa8ac0f99ca3a11aee7c3a781bea815a9b193fa [ 77.995347][ T305] Tainted: [W]=WARN [ 77.999164][ T305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 78.009282][ T305] Workqueue: netns cleanup_net [ 78.014163][ T305] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 78.019746][ T305] Code: 3c 20 00 74 08 48 89 df e8 2f 50 f4 fc 48 8b 3b e8 97 78 df fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 48 cc b7 00 cc e8 42 23 9c fc <0f> 0b e9 b0 fd ff ff e8 36 23 9c fc 0f 0b e9 18 fe ff ff e8 2a 23 [ 78.039535][ T305] RSP: 0018:ffffc9000b78fb70 EFLAGS: 00010293 [ 78.045692][ T305] RAX: ffffffff84eb855e RBX: ffff88812fa30000 RCX: ffff888130682600 [ 78.053747][ T305] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888130682600 [ 78.061753][ T305] RBP: ffffc9000b78fb98 R08: ffffffff87d38087 R09: 1ffffffff0fa7010 [ 78.069822][ T305] R10: dffffc0000000000 R11: fffffbfff0fa7011 R12: 1ffffffff0fa6d60 [ 78.077974][ T305] R13: dffffc0000000000 R14: ffff88812fa30c00 R15: dffffc0000000000 [ 78.086054][ T305] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 78.095010][ T305] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.101678][ T305] CR2: 0000555568749898 CR3: 000000010c366000 CR4: 00000000003526b0 [ 78.109753][ T305] Call Trace: [ 78.113485][ T305] [ 78.116424][ T305] xfrm_net_exit+0x31/0x80 [ 78.120919][ T305] cleanup_net+0x6bd/0xc90 [ 78.125469][ T305] ? __cfi_cleanup_net+0x10/0x10 [ 78.130604][ T305] ? __schedule+0x1357/0x1ea0 [ 78.135316][ T305] ? kick_pool+0xb9/0x550 [ 78.139742][ T305] process_scheduled_works+0x7d1/0x1020 [ 78.145396][ T305] worker_thread+0xc70/0x10b0 [ 78.150480][ T305] ? __cfi_try_to_wake_up+0x10/0x10 [ 78.155711][ T305] kthread+0x2c6/0x370 [ 78.159797][ T305] ? __cfi_worker_thread+0x10/0x10 [ 78.165024][ T305] ? __cfi_kthread+0x10/0x10 [ 78.169621][ T305] ret_from_fork+0x67/0xa0 [ 78.174120][ T305] ? __cfi_kthread+0x10/0x10 [ 78.178745][ T305] ret_from_fork_asm+0x1a/0x30 [ 78.183595][ T305] [ 78.186633][ T305] ---[ end trace 0000000000000000 ]--- [ 78.301730][ T305] bridge_slave_1: left allmulticast mode [ 78.307409][ T305] bridge_slave_1: left promiscuous mode [ 78.313126][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.320869][ T305] bridge_slave_0: left allmulticast mode [ 78.326618][ T305] bridge_slave_0: left promiscuous mode [ 78.332445][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.340294][ T305] bridge_slave_1: left allmulticast mode [ 78.346155][ T305] bridge_slave_1: left promiscuous mode [ 78.351984][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.359597][ T305] bridge_slave_0: left allmulticast mode [ 78.365406][ T305] bridge_slave_0: left promiscuous mode [ 78.371073][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.378935][ T305] bridge_slave_1: left allmulticast mode [ 78.384814][ T305] bridge_slave_1: left promiscuous mode [ 78.390546][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.398221][ T305] bridge_slave_0: left allmulticast mode [ 78.403939][ T305] bridge_slave_0: left promiscuous mode [ 78.409784][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.656588][ T305] veth1_macvtap: left promiscuous mode [ 78.662222][ T305] veth0_vlan: left promiscuous mode [ 78.667782][ T305] veth1_macvtap: left promiscuous mode [ 78.673405][ T305] veth0_vlan: left promiscuous mode