last executing test programs: 5.40628978s ago: executing program 2 (id=159): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000013c0)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x4, 0x41, 0x1, 0xf0}}) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000140)={0xfff, 0x100, 0x6740}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x71, 0x0, 0x8, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x7ffffffffffffffd, 0x9, 0x380000, 0x1, 0xb, 0x9, 0x0, 0x8008], 0x1, 0x3c4210}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000013c0)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x4, 0x41, 0x1, 0xf0}}) (async) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000140)={0xfff, 0x100, 0x6740}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x71, 0x0, 0x8, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x7ffffffffffffffd, 0x9, 0x380000, 0x1, 0xb, 0x9, 0x0, 0x8008], 0x1, 0x3c4210}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 5.146658675s ago: executing program 2 (id=161): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e7cc94"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="4014680000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 4.687670426s ago: executing program 0 (id=163): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/kcm\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8937, &(0x7f0000000000)={'veth0_vlan\x00', @random="0100002010ff"}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x22400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) close(r4) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x269, 0x0, 0x200000000000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f00000001c0)={0x3, {{0xa, 0x4e22, 0x6, @mcast1, 0x7f11ac8d}}, {{0xa, 0x4e23, 0x1, @mcast1, 0xc1b0}}}, 0x108) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000400)={[{@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 4.644571757s ago: executing program 1 (id=165): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)="5ab091cc283ed435f76067459e4c450063a00229b18be142c3da5af1b71a8b2088c823fb9956c0b51770497f0a021443ca1b266c111a5334fc1f5c0a42308b233a40a53bfe6c25517971b5b7", 0x4c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc2c02e4d8eb3e456, 0x0) r1 = openat$incfs(r0, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, &(0x7f00000000c0)) 4.644124157s ago: executing program 1 (id=166): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)="5ab091cc283ed435f76067459e4c450063a00229b18be142c3da5af1b71a8b2088c823fb9956c0b51770497f0a021443ca1b266c111a5334fc1f5c0a42308b233a40a53bfe6c25517971b5b7", 0x4c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc2c02e4d8eb3e456, 0x0) r1 = openat$incfs(r0, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, &(0x7f00000000c0)) (fail_nth: 1) 4.383923493s ago: executing program 1 (id=167): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001980), 0x0, 0x20002040) sendto$inet6(r1, 0x0, 0x0, 0x8000, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmmsg$inet(r1, &(0x7f0000001c40)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0}}], 0x1, 0x844) 4.383746853s ago: executing program 1 (id=168): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)="5ab091cc283ed435f76067459e4c450063a00229b18be142c3da5af1b71a8b2088c823fb9956c0b51770497f0a021443ca1b266c111a5334fc1f5c0a42308b233a40a53bfe6c25517971b5b7", 0x4c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x25, 0x0, 0x0, 0x8}, {0x6}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="b1291a995d5bee730eac"], 0x0, 0x0}, 0x0) r1 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000034000)={0xf, {{0xa, 0x4e26, 0x100, @mcast1, 0x10000003}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x214a80, 0x51) r2 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc2c02e4d8ed1e655, 0x1) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r4 = openat$incfs(r2, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x40106726, &(0x7f00000000c0)) 4.360591303s ago: executing program 0 (id=169): ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0x9) r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x3f9, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x2800c0d4}, 0x20000000) close(r0) r1 = eventfd(0x3) r2 = eventfd2(0x0, 0x800) r3 = eventfd2(0x7, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000001940), 0x1, 0x0) r5 = eventfd2(0x8, 0x800) io_submit(0x0, 0xa, &(0x7f0000001a00)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x5, r0, &(0x7f0000000140)="7be50e37e3aecf52492be181e9c00aa3085d676f718732a27e45885a77092867ff9058d99edfd391b9bc77fa0526eed395764a2a6fea8c2e7fafb5f610faf1cedf0b5f6b2f2520bd363bd8072c3eb26ee4e42769cebc901f8f58339808d55d62f530e37e4617a9f11130ccf023baea9cdc214fc6c47177687ea4dec77e0c181b8b852d55a08c089aab6699e156fba1190fd1a3121282ad5fa1705008f4da054abf0d0c9b27abef7fb0e9d47890e830ef973b03e378d827dbcbba28e8bdb6b75671c4749d191b5ccdd12c", 0xca, 0x6, 0x0, 0x1, r0}, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x3, 0xa9d, r0, &(0x7f0000000280)="65235fd9cb21a44864c6a7c92b4098ea6d73f0230280e624d6fbfb54ab481d6609b91fbe98b77091ee500b1ba054aaf61d31821da3ba12a23b7ee2bb5f5c01c946b3aecf91b219ecd043dcadfd059884fa616a3298976fac483c053a8e75520dbbb56563c71ecb3aebc504e8708a8cf042dbb95c2d3c6a1bcff7fd62a1d8a62e25030d319a619bc4898781d0a95b45869848fd77f0afba67ece3265ebcfeee9ddb087ba822e603ba7e9593483b451064e3c48d3eb17d8cbd3b0f0a4993ffa1217b462436355af7df2c3c92db764a38ffca126f703a4ba68bda7a2fc54ee5bd9ecdee99ac1c229426f782ed08118a8308728938f34d5a40717f1020573a5b51a54394d424f445fa0b8ffb597bbd5a6b7f0ed3c388b3db98843950805159ddc4426c32e971fcf88d3d0c18dbb2fe14b31b3e3c7ad710faaf2bcd93298a1cb66d3fd8ba8795c54904eb660b56c0256e3f4a5ed1deb368a2b5743b7bd82195fbb71c8a421406475f40b15eaa451ec3c28aa9ebe189b2af49e84720f9fce7963fdcd51b245ca31c37e0737837666fead37a2573ae5e853ac3c99b54e1601fb07dedfe421043039edf8250de370d9648482c6d4c90fe8ba213b4e3c6dd00c26d5c0246a0bbcbb97c63ec71a16278d906241e3079afdf2c0c92bded0f10bbd9f3203c4a2f9603932b24e782ad2941f337c54e3c42acb617b8353d1fab25d88e9419242e6e0b6a8feeef744f43232233d9e8baf316949cc8fefa8fba189c978127acda1b69e24c5471e3cb30c03d34f92a80b890fd941ba727b44ffe0180b6f5ce5be2844783cecdc8ec11f0e03d5b511dd261ca0246fe572a58962469c017849747d9a46ebeaba9d50deb1a3be24503622ee5248f7b6516872e8317ac59fef066e02993620b9f22691fdad7972b159c3c4036fa079e41005d2fda1cf15bf2c6cbeb9cc1d8217def3753b099de318f5d244801e860ac42db9a0d8ccb8ce4729c0c9b56e723b1f4c6aa6e4ea0a8cbc5704cfa4c44215a18f9f6e77ebb689fc41ab1ac52443486e07a8ea856477490e1643538a6d5932d0df443e58bd466d487fdf125622944be54d9fdbcefbbb43f6d14d3a57e07f2fc4a1b0d7bacaf5f4d6db6327b0936393acbd123f6d9bcf6ab780dcb60aba42ed952869f176fa5aaef0282dee71e867f964137c9bbda4781ef88c77f5163540d80771b27085e9000009496ac6f78a55ed76af29c2463261fc33bd5df03c7e77832465e856d91246abb349ee12771525679ec620e146b902f870cfc0519fc67d0dde2b01c194ba86ac1b63253a9800eb58e34064a611a4028481b17340a36fb93b6d5e692ecc8eb14b7532458dc658c2b74b38a3bdbbeea76d102355e964442c8ad64a30f92b56e99a5b35bb029cf68697efd3531d75af7f2cf0eaeee2cd1c6f2920b1b3d5743aa29d4b091e12337e9e5d630acd3c6366a0b746bd0461e93aeba4249f6ecb29fb599b501db70d6ec1ec3beb5c67ff9ed4e12d82773db51ac83e51867d764e0e3e8ccb1856b2d08aadb3b316c7daa879a1ccfece339472c23613235aef96c06db866c597d1de0a380d2607810660a9c58a1b423336e7e66628e3afba069ec2cdf7cc2b7446382ba1f30cac487b842509d52619fb45e1e9ab76ee7712014175d136c10e67dda58e79e44eb9eaaab9d2d092be5c512d305b5748354b3e55e5fe086840140ccb25e0dafa5b93e60abf37d0603ce59bbb6533e00f507918b3bb8bef26b4374c26816872aa74d68cfcec3ea6a4d9aaf42ef9ce624d706aa7f5b640bf44b52e595da9a8bedaae87082436fedf021dcb832d5dae30b989528b2cbb95f92c24e7d11776b9c05b75fae08f3653b5248805e254ed5bd1b0d78dbb7acadfdb555edd7f3d8202d95e109c692f580ba285879ad16baa4d4dd3e084826b063365b00f057e9d55faa56671f860eacb55cc290c5da6d51c35eab73ceaa941de2b74cb8ef21da65ea889d9cc805cdc360c5e8d5283bc410c32d5e4e091c4a26d0b1f64842642193463d20360528a9eacff2a5945c99adfc2cbb3cacc563bad2b4fbbe0a2b7a5cbe427d5ad25bbfa58283c206a6473c15acb625f528d8009de51985a270bf02f89cddc490576ff3f39a50234e22f35071c78213effa843018ebe70e92d40e50e195991df4d9653bb1c9bd7f4c1c946dfcc9e5d0868060be56142f37d905d92fdd8ab1406f360c49b2eda67849089450b36f0eb0dece64c45117861ba9eced33bad678a525848c7610e98308f5a825fc86e104f2f4887315e2d04cc365512c2a3ef8dddbbdc31439f5f97799a066755b2730f3f35810a9697dfb5f55125b45c7b5de27af7d6f3183711316cf055e911695b5b7960b83b52fdc31a444aeb587ada6f2186e099a80769af5ad6acec534259e69bf699f526bb32116f1ab7811eedab78ea0ad8d9d25d5c9c56e0d9d722d5fe9da25a50b94cdfb2992af623fc95d8ba09766d656bfed5fb8df36b6d7041073611736953378c990080bf863905f08702bc9af2157db992fdbb619f039789a2124e64a0da0498c4b9a11a943034d5c61205ad7947640bfc0694992353ba75f94e530c9b23576c797846bac99e38d7d56b9caf738582c3633921502f069449b2f2357bc9c7c2c2f0bd175f47754478dbad6206cf29cddf9f65951be3de541095eff19dbe97352ebc704ae59095ceee486d393cdf9aab8beb25de236b29d92ba6b168b9b43bdf54ae9301f11cc25f33684efb5e34c77154947255debcc9c28629d684bc6f6ac12e2a627fd2b096bbf1c1efbfe1316d1bfd87a60d772b33b3eeb5c2b7aed4c205b48b9f2ac7cbac68c9407c5d362c241d49a9bbe895898386704229b64c5c5245fdc378688912dff19683107a75456cb38a0727ad8fd9df8ecf9b66d5885eccd1d3f530190b1d7fa65f2f6df6763a5e0fb0832cd1ed3b0e94a8a710dd680cdbc4e405ca583ce34a6faaa5730c3f55a0aa46abb32d58ffbbcd6deee1e3cdde733dc5d4e1f792394c577947dc4bd74b176e167e0d58ff44194e8b58984bbf1f373fc9b4f0a88899742be71e6e9b1594b20809c9eb4ab27a312f13f97f6e143acc70e7c10cae4fee09e8ac675418e30c0c7496c5bd2b32706744aefbc65f3a8d7d5eb2b2b187220511dc952a195462683b9c14bd89f9e97cc6fe01b444feef16c267b285575bf2c840f8106a13a532a6abb52dfb9cd097b821957a329bd7c696e45f60477cc63cd074dbf15ab14b4d2ce5fa4d6762d34f35ff2343f079bc711f4a837ecc2896b8376aee7c6b1440d051389f2f209186f9d4f4a28c5dcd1040c6f39aef731c57d80137a47d62a0974acd68daaadf93cdc3aa639b66e0c6e675828d2d33573c62a391f5bc54709b8cd5d35c3cc0c390538695d0d5f98b9630fca15fb022d02f17ed2f88ef04ad5e45c4f673332bd05999dbec43fa2535616b2648ec2e718210961450a308f48f962ed1a9bd8fd420e25ccd467243ab9e9ccfd2aacedf6553dd1c72b7b4e0105c5dcd2e645b4cee1847dd6af0593262852ba712f9ad6a4885086f8a8f4bb5467eed71ce79c25e52d8538ac72ca17c9ec1c2cd696e760063c0fd9dfd5a1764fdb92dfa0c9e1838f3e29d4b82f6a2faf5d7df6daaa7fe1424afd74593d5f1f0f533a05afdde3b381b24d9afb1fbfb49a44f22c325a266fd1ace5b5952a63dbde308aaf34c74e44d449b6bb1d15b97b7e69718ece39d13669e23482cd0939bfa1e875b4c3bd24617345af4bc4c7320c547bb4613db92b5202200dc9b70f64c2ff557820c7b4aa100335fb20c52fbc43186257ac64290cb6748f628868d265bfeaf9831a0c0c6e332ca34af6985c02e10f7e66353fd54e78354c618849619adfb9b77ea640afa18e55d72accc508bf64038b8981cec65942501eec0c066ef2c4040d110413bd4f1b72423dfcad9bbae6fbec5dd01bc9aeaaa2f5f869368c1054dd3e2dab5c975d31cc620fc301e649eb650b418687779fccaebb579bf4094d348251f3c31d5e64402d1ae99c0c25ad403a54a228f71c035edbd6280cc7802f40bb3b7e45569c16794e8b79ee301843bb7e07ed0719a20c45484b151989256278902a7d26619d98750ce00f68762dfc6efea9843cc6b7665c4d35ce1bce3a7519d306c0c26750431e440b397d6706598c87db267d2d37ee580735fb78a1d9a90319436bcc593bb7b7646ecc3fc20e0b1c2ef768ea7234de4168a06a742fb8b8c7291836339274981b846f5199f1a66ef977721b8d7155aaa3bc57c9a99fbd96b0aed970e5d136fa8cff55b789cbcbad94175b24c468a27f3733934c9f41b8cc492ef44e4bebb6a2acedb11bc53e9eb14b0dc70b2bd6098454860a33d6ef7c344bf02be8146ccd2c6eae32382d4afa9d745cd40b65f3b83409c97ea0e24401e101a7292bbf109341e88c610fd47e9198f82cd76755db3dfd1cb55e6458c3d18e929611e78dd1fa259c84711fcd49f35411d60e2158d1e07fdabf0a5568a5d54c0cc139ae331aa96ae70e9ad0ca3a8eef0f5dc532f21d8dc014ca2ac1cea7cae137bc128b5a447b7bc2a1bdf1198d5a54276d8bd23a052a71219998f09a48fccead04a4ab2ca89795518718eb2e3b61c40c42dd7a74edbdc69b3b923808a955686e4ef092e3411c66aed9b7778fd85c01af120685d40fdeec6f1c62de1f5c308b988e9b7530d1d7d5acda7e8ae5fb439adcc794298d203a2fd8f84e396527d87d6b038b6e4bdb7798d92cb1d7f9deaee138d77aacb6dac50f7c8c9b3f3e9c3dbfa1816ed91e2242d3a74c077a4e7efee8dcee05fa4788bf3de3de84cb46618fe576375a82c4ec396fc97fc421653e0dbdf49dd8976f0470c7d357db0d13d79627d663c9d23eb73521acf5a8a6628e531587606461a64f1d0746bd36a7974b69ceaa4bdc0b888f33060e9f4418f2e7ea86603fa91aa4fc51c1c40db7d77a3eefd3e552ebb133d79e9f7e01a80066c7456acd5688e172e30ef3e3875633ba69b17b981303a0e2c530dc0ba7740f9f0e02e2f04a756dbf1a2f756ee4d42f196881601af37ed2df10c69550dde8a1a12d674cba8ff686e864af183e4c44f2b99db30bc3f5fec8bc02b955b4474ae82b0b96d2f5dd1f19dfa1851b5431f55a76b7755e901147607dedd5520ed243250a0a49d1d6fda53242c0a179063b98a6bc074b4816d03c50e6fd2a6b2b95fa4a0ae413dbf33d438559cd708df5d4b29a10e27358ae1f86ec043c31de76058f09580e740a84ab6e2ec5f6eb3eeb2a968beb647054bcb08c237239910694a7cd0b2628e362fb82b231e7c68c4fbc6d049ddcc4757d1c722636eb9f21ed45352c85206e9201a9f37343821457795e885711a63c14512c0605bcfb1b4ef5017d57216e4858c1d85e45f5bd708545a6356843b66af03a9e03d5cfb13b96f1172cd5eebc73bda9cda5c5b8d80981e72ee8cd82ea9dfb14515e3b222e7ffa01a05637732e1b62c04da17072b67ac95590467f529180740420e570025afc0834f40ba98532d3b8257196971c705bd9446e70b162813a95e25f7273d50319964d5485c57da2ffa12710abfaca71202d036479ce5f71e3617ede7fac8f60d0664ab9a7abab79bfc4ab2f29cc3dc7c94bae6a1144cea595cd168cf2858d5007c9938bf2a5e509ea4c4c43c1aad3ac327775e41872136cb60e5a9a5505761d203556ce808f69dce981691bf50a953b5c66f5442143405cb796696473c5b2fbb836036e072fbaa0f9519bb19068ab0c192394b33825ef6cd817030cb469cd84f07794e5ea", 0x1000, 0x3, 0x0, 0x2, r1}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x7, 0x5, r0, &(0x7f00000012c0)="96fad351415237e756d5fd04551f619362654f9652301c89717619c93ac2eeb433d218ef69762c37f02a215612528fe8874f7256f85b3ab332d59999787f1a560b641c0e74b6cc2b75e14aae61f96b07b5565bfe988c30e6ebba7baf012262ef1e54bd77894a2a9d1b5980ae364ed9ef66a4133225c74df281d0ce239861ec5532631d7f1290d1d79ea20adf637cf77f910297dddb5e448eae2b2a811ba04c4f423089a1e10ed16d3bdcfad42b9b4ed0c21a15d2a18aa8e6f7212e04931b1e104e0e4c3db4dae49d1fb73c80434c18503b1285bee6509410403301e9872a1e", 0xdf, 0xff, 0x0, 0x0, r0}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x8, 0xf, r0, &(0x7f0000001400)="41e88f705e8035ce70963cc95531755be118f83a35a16e581946ffc2bc2cfc0a65480c8952cd01682566046bb27b88a3efb7f736ab5d0078dea74280ad1e1f12efd9fcf08bfdd8aeae7926db35b5d22bd10ca69a7d1759068c802a3096800528c901f27adf0cd63ccb00f288391be0c6243534f51b158feb5593f9a603e189ca3110b7896ed2c616", 0x88, 0x8, 0x0, 0x1, r0}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x2, 0x8, r0, &(0x7f0000001500)="fd7081446d3b2eaad868d2d62d955f10fb715956dea9d71d1ba6ee3fa3d0301ce64e0d9a5ff29272798213d3e99c056b5d91d0f710600d5b1204d0ae93b00226aad5688a350471c9660fb490536413a0093b02ce36ba6680e3", 0x59, 0x2, 0x0, 0x2, r0}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x2, 0x101, r0, &(0x7f00000015c0)="d085d15138ad23c2e7caf03a5011e759c072ae7aa44749869f3206680d7b56a63fe4a27d4e59b9cfd738b929ac08f5fb24232bf95468b3ee5b7f634f133ec9b6c3e9863077eaaa48dfb811866b7d0a7de96386dd445b6c8efc1d7cf9b034aa00e723e928ed2d7e55cbbf30972e03e0dc84a0a011be441c0fe243dc12b9d96fce12", 0x81, 0x0, 0x0, 0x0, r0}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6, 0x4, r0, &(0x7f00000016c0)="9e2219645317d4f88f857d64b9e8e2a10946f3779b54248e7cc097c0fa813361ade4144348a6ac35d6f138ce7a11e287e237abfe1de3332b8b2f942942b343e979921ff49190d0309fb355d092dce4dc0827a15dde088f6ebb809e703ee306e5cade8a661963a3d21a98d6d0466f7911004075a32565f1cde9d60c64be6c0a137bdb306d52fb6f83df12ce8768e8c88fb821f6ab9da6aacbfea34f6fe3c9b6a9e51fa932354add8a9482ac2e23d9492a25d495c46e20e2affd1e279fd004f047a1753e8375e3528a73b554dead80d293", 0xd0, 0xfff, 0x0, 0x1, r2}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x2, 0x7, r0, &(0x7f0000001800)="0e7bdc470c287d41cd65db18eb925dd780895c429223ea99db47e796636e7bdc925b6638e012ad19f622078be42d05aa87207f17236a87c767be658fb0afc729e9bb8eb42542484b1eac5f9fd767ed7e", 0x50, 0x992, 0x0, 0x1, r3}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x7, 0xff, r0, &(0x7f00000018c0)="098a361e82f539052b0f71135aa754cc60d43eeaad3c2a0b0742ec", 0x1b, 0xd, 0x0, 0x3, r0}, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x3, 0x9, r4, &(0x7f0000001980)="1f059ad0dd73d8fa63469a9b1da0e335e35e50751958ac3c17dc046e80069c5b4e15990d8bd1af9b6e64fbdeb0926f41048abf", 0x33, 0x8, 0x0, 0x1, r5}]) r6 = open$dir(&(0x7f0000001a80)='./file0\x00', 0x600000, 0x10) r7 = openat(r6, &(0x7f0000001ac0)='./file0\x00', 0x200, 0x28) io_setup(0x9, &(0x7f0000001b00)=0x0) io_pgetevents(r8, 0x6, 0x2, &(0x7f0000001b40)=[{}, {}], &(0x7f0000001b80)={0x0, 0x989680}, &(0x7f0000001c00)={&(0x7f0000001bc0)={[0x3]}, 0x8}) close(r7) ioctl$FIONREAD(r7, 0x541b, &(0x7f0000001c40)) shutdown(r7, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000001c80)={0x0, 0x0}) fcntl$lock(r7, 0x24, &(0x7f0000001cc0)={0x1, 0x0, 0xabad, 0xe5, r9}) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000001f00)={&(0x7f0000001d00), 0xc, &(0x7f0000001ec0)={&(0x7f0000001d40)={0x148, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xb75, 0x17}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x118, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}}, {0x108, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x101, 0x1, "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"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xe}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3}]}, 0x148}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000001f40)) openat$cgroup_type(r7, &(0x7f0000001f80), 0x2, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x4c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x5}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_NAME={0x26, 0x1, '/proc/sys/fs/binfmt_misc/register\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x4065) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000002100)={{{@in6=@loopback, @in6=@mcast1, 0x4e22, 0x50, 0x4e23, 0x0, 0x0, 0x20, 0x80, 0x27, 0x0, r11}, {0x2, 0x5, 0x4, 0x3ff, 0x5, 0x6, 0x6, 0x3}, {0x2, 0x7, 0xd8ce, 0x3}, 0x1, 0x6e6bb4, 0x2, 0x0, 0x4c8181594d798962}, {{@in6=@loopback, 0x4d2, 0x33}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, 0x3503, 0x3, 0x3, 0xc, 0x5, 0x1243, 0xc}}, 0xe8) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000002200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) shutdown(r0, 0x1) timer_create(0x1, &(0x7f0000002280)={0x0, 0x5, 0x0, @tid=r9}, &(0x7f00000022c0)=0x0) timer_settime(r12, 0x1, &(0x7f0000002300)={{}, {0x0, 0x989680}}, &(0x7f0000002340)) 3.053009442s ago: executing program 2 (id=171): r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0xfffffffffffffea4}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000c80)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf, 0x0, 0xb0, 0x6, 0x5, 0x5, 0x5}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x21, &(0x7f0000000400)="16688a4a3f1cd2db03000007000000000d7c36e51e67f08f961d2fc0c37d7c8c21") 2.327731158s ago: executing program 3 (id=173): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 2.23262818s ago: executing program 3 (id=174): clock_nanosleep(0x9, 0x1, &(0x7f00000004c0), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, &(0x7f0000000180), &(0x7f00000001c0)={[0x3]}, 0x8) (async) epoll_pwait2(r1, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, &(0x7f0000000180), &(0x7f00000001c0)={[0x3]}, 0x8) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000680015"], 0x1c}], 0x1}, 0x4000080) 2.159672402s ago: executing program 3 (id=175): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)="5ab091cc283ed435f76067459e4c450063a00229b18be142c3da5af1b71a8b2088c823fb9956c0b51770497f0a021443ca1b266c111a5334fc1f5c0a42308b233a40a53bfe6c25517971b5b7", 0x4c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc2c02e4d8eb3e456, 0x0) r1 = openat$incfs(r0, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, &(0x7f00000000c0)) 2.146938613s ago: executing program 3 (id=176): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)="5ab091cc283ed435f76067459e4c450063a00229b18be142c3da5af1b71a8b2088c823fb9956c0b51770497f0a021443ca1b266c111a5334fc1f5c0a42308b233a40a53bfe6c25517971b5b7", 0x4c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc2c02e4d8eb3e456, 0x0) r1 = openat$incfs(r0, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, &(0x7f00000000c0)) (fail_nth: 2) 1.870600539s ago: executing program 3 (id=177): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"]) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000012c0)=0x0) lstat(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0xea}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r7, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)='[', 0x1}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r8, r9}}}], 0x20, 0x40044}}], 0x1, 0x4) r10 = socket(0x10, 0x3, 0x0) r11 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r10, r12, r13) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) r16 = dup(r15) syz_ublk_setup_queues(r16, r14, &(0x7f0000000180)={0x0, 0x20000, 0x0, 0x1, 0x154, 0x0, r16}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x42, 0x0, 0x0}}, 0x0) r17 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r17, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000140)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x26}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0xffffffffffffffc0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0xfffffffc, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3, 0x0, 0x401, 0x167}]}]}, 0xfc}}, 0x0) sendmmsg$unix(r2, &(0x7f0000001500)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001240)=[{&(0x7f00000001c0)="23413169ff9b5b79144332090d3be53c8dd9c8bcb87e64278f66fafca20ed792c4e21e320951d72aaf85ab3be26604ebfce6dc6ad7f1e3064276c6f61563f3a2a7f1e9da757b5dccc273e543f8134abe56d46ddba2c0", 0x56}, {&(0x7f0000000240)="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", 0x1000}], 0x2, &(0x7f00000013c0)=[@rights={{0x1c, 0x1, 0x1, [r1, r1, r3]}}, @cred={{0x1c, 0x1, 0x2, {r0, r4, r5}}}, @rights={{0x24, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r1, r1]}}, @rights={{0x18, 0x1, 0x1, [r6, r1]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0, r9, r13}}}, @rights={{0x28, 0x1, 0x1, [r1, r1, r1, r16, r1, r1]}}, @rights={{0x2c, 0x1, 0x1, [r1, r1, r1, r1, r1, r17, r1]}}], 0x110, 0x80}}], 0x1, 0x4040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r18, &(0x7f0000000080), 0x0, 0xfe, 0x2) listen(r1, 0x3) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) 1.673846473s ago: executing program 3 (id=178): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x63, 0x30, 0x81, 0x8, 0x5f9, 0x4002, 0xdcfc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x2, 0x90, 0x3b, "", [{{0x9, 0x4, 0xf4, 0xf, 0x0, 0xd1, 0x77, 0xcb, 0x80}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r1, &(0x7f00000062c0)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xfffffffe, 0x30004004, 0x0, 0xfffe, 0xfffffff8, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) 1.491970897s ago: executing program 1 (id=179): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x1fe) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv2(r0, &(0x7f0000000480)=[{&(0x7f0000000240)=""/195, 0xc3}, {&(0x7f0000000340)=""/147, 0x93}, {&(0x7f0000000440)=""/63, 0x3f}], 0x3, 0x9, 0x5, 0x8) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) unshare(0x60000600) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'wg2\x00', 0x112}) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0xd47}, {{0x0, 0x0, 0x0}, 0xe}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000fc0)=""/4073, 0xfe9}, {&(0x7f0000000ac0)=""/184, 0xb8}, {&(0x7f0000000180)=""/290, 0x122}, {&(0x7f0000000680)=""/191, 0xbf}, {&(0x7f0000000800)=""/225, 0xe1}, {&(0x7f0000000100)=""/101, 0x65}, {&(0x7f0000000000)=""/213, 0xd5}, {&(0x7f0000002180)=""/106, 0x6a}, {&(0x7f0000000600)=""/81, 0x51}], 0x9}, 0x120e}], 0x3, 0x40000062, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x3, @remote, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000005c0), 0x3) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000400)={[{@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1.258775682s ago: executing program 1 (id=180): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e7cc94"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="4014680000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000003c0)={0x20, 0x0, 0xa4, {0xa2, "4dbb6bbdea5a2ef88c995f854c2873edf21433eb2cb74276f0ec943bf6e9879cbe2a1b4ca0fd9ca9a5e5e6a489b2b5f037b3db338ed75847a24047a236b7ff6df630363b38dc9900efca3064563788040b4a0ffbab449be9d5cc2ea058966acf3cd1492826c3ab55fc52d389eb163ff889255e248cd3ef6001a8775b7e32c7f9e9721d09a85a4038a1bba67f6a7f76a2342e0ae90d2f03b9a41407d2f1d9b0adcf94"}}, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x4}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x8}}) 1.257961982s ago: executing program 0 (id=181): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) (rerun: 64) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x2, 0x4}, 0x5206e4b73005041a) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async, rerun: 32) setxattr$incfs_id(&(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f00000003c0), 0x0, 0x0, 0x2) (async, rerun: 32) recvmmsg$unix(r2, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4066, 0xfe2}], 0x1}}], 0x1, 0x0, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f0000008280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/44, 0x2c}], 0x1}, 0x6}], 0x1, 0x0, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) close(r4) (async, rerun: 32) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000001600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001480)={0x120, 0x1, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7b}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}, @CTA_EXPECT_NAT={0xc0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xa4, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4040005}, 0x4004) (async, rerun: 32) r6 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r6, 0xc018480d, &(0x7f0000000000)={0x5, 0x200, 0x9, 0x2, 0x4, 0x80}) (async) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r7, 0x4b2) (async, rerun: 64) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001c00210000000000000000000700000016000000010000000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) (rerun: 64) 996.318828ms ago: executing program 2 (id=182): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x29, 0x80, 0x2, 0x65b, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x7800, 0x0, 0x3}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x2b, @empty, @empty, 0x0, 0x10, 0x200, 0xa}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000000000000000000000000000000000000000000000000001fffc0000000000000a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000b0000000000000000000000336cf713325a16a480f771987f32f30800fe7b0000000000000000000000000000000000000000001000000000fbffffffffffffff0000ad00"/103], 0xb8}}, 0x2c040010) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', r1, 0x2f, 0x5, 0x11, 0x7, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, 0xe, 0x8, 0xe3b, 0x9f05}}) fcntl$addseals(r0, 0x409, 0xa) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000200)="c541abd357ad407dbbafd03b8fc8ced1", 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r5) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)={0x28, r6, 0xf2f3308f72a01a67, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@rand_addr=0xfffffffd, @loopback, r4}, 0xc) 982.874759ms ago: executing program 2 (id=183): openat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x42c41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x12, r0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x48, 0x2, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r3 = dup3(r1, r2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f000021b000/0xe000)=nil, 0xe000, 0x7b672a84ad0243d0, 0x110, 0xffffffffffffffff, 0xca932000) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000) bind$tipc(r5, &(0x7f0000000200)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x0, &(0x7f00000000c0)=0x9, 0x4) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') r7 = socket$inet6(0xa, 0x2, 0x0) pwrite64(r1, &(0x7f0000000440)="1fb4c50bb2381c5f890d7f45221083179ae8dc9469957eed89c1b6a394959924f51703e1ff95b71e9436350671902804272f054af01af7e0810dd2e73dbbaf25cec6631689564ba3ce63141ab0a6858e0c21fd0bd1a6b06069a8c412f4b38599ead34da7d9eddb5c0ed5a573a7c3c7f7dffa2a7d371bc83b6b0e0c15381446dc0e351e3e384e2b9a34b04f53c1b113fba1d36323907d5aa6d3af1dadb38e8c2daf83f4c2742e26c2bbb12ae3c83d28f6b842420eb5a1829a5d4bdd5994e382f89fcab9d22cbd3d20920c7ea05a096828f1f613", 0xd3, 0x2) setsockopt$sock_int(r7, 0x1, 0x4, &(0x7f0000000000)=0x4, 0x4) mlockall(0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000380)={r6, r6, 0x81, 0xc4, &(0x7f0000000280)="4be543d4df756aaa8384a8fdc268c2adab744c9a920de4dd5b6e5451c4eaa59b157fb4350b8bde65addcfdb1264f9d92014d4bdfe963f53d9d31cd6932c4516c0ea556a4ac05e2bcb7de8a26c10851cc2cf8ab5c89c3850ffbe7113922e84e1688bd6371a70a3bcc746402a2541f026cf9914683d55372222fe2a533ac838b6005fd7e0da147dde742d35a10f778ab0d49c2e441ad4d82f5a16bfae628ffee3d742321ee13e2d37186feda4793bee7f2fc678ebf1be4b24904214d5397fd71e8dd82a4b4", 0x7f, 0x2, 0x6, 0x6, 0x7, 0x2, 0x0, 'syz1\x00'}) mlockall(0x6) mlockall(0x7) 886.13979ms ago: executing program 2 (id=184): r0 = socket$packet(0x11, 0x2, 0x300) r1 = accept4(r0, &(0x7f0000000000)=@rc={0x1f, @fixed}, &(0x7f0000000080)=0x80, 0x44f903eca6d6c5ed) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) setxattr$incfs_id(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)={'0000000000000000000000000000000', 0x33}, 0x20, 0x1) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb4, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_MASK={0x94, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x20008010) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000340)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000380)=0x28) getsockname(r0, &(0x7f00000003c0)=@ax25={{0x3, @rose}, [@netrom, @null, @netrom, @rose, @rose, @netrom, @netrom]}, &(0x7f0000000440)=0x80) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000480)=0x2) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x80, 0x0) fchmodat(r3, &(0x7f0000000500)='./file0\x00', 0x40) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000540)=""/101) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1040}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x21c, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x170, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4}, 0x1) prctl$PR_GET_IO_FLUSHER(0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r1) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r5, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x311}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}, 0x2c}}, 0x8800) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r6, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc001}, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r1) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x40, r7, 0x300, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x4828) syz_open_dev$usbfs(&(0x7f0000000cc0), 0x6, 0x240) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000001d80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20088100}, 0xc, &(0x7f0000001d40)={&(0x7f0000000d40)={0xff0, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x75}}}}, [@NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x7}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x254, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x3}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xa2}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x224, 0xd, 0x0, 0x1, [{0xf8, 0x0, "8a9df0c10b87440fcb88491a34aa5bcee31b1e3a5e8b489506378574839f69db9d124ba68f8e627bee71855550848533c97123e6beb3470a3aeea546dfeb7f4352e67af6781ae49fe3b243ccf5834f2750434a1c451de723aff92d772200e4cd045df471b76404f884e2497c366211465d2e1f5c10673fd4b394566d56e13930441019155e76da1d5003a8f77e49f0deb023504abf986759a9fc7a29a228116f179bac42d9b83af01efd94c1d7cf54c648f81eca5f18f170913274a359e063665c212554b79921c9157e03b13f1cd38b204c5a800dcff0dd85b9be3564be980fc4f0f7d209f86c64fa8f33495ed07463f24f81bb"}, {0xbd, 0x0, "d8467ac21806877b44039d8f7d9d6e8ac1d300c262b846245dc882a986aef4521f8529ec285e279d5de3937832382268949ca580c246e334d5bce8ea0f592f64c8cfddbd3577c1d37f4b9f19b7f41de7e63738b04c3e015498feb3edacd68365ec91151962955ce0f25275d4b292950234c01186ab919df3e6c9b15ffd297105270710e7e39d2de4e81b0a491d03aec120194dfecb6f78cec3ffdda0674d5258c9b8988a892b9c056a25766220027701b2fb26fb4ea424189c"}, {0x58, 0x0, "76e345a3aa6ddb56e6ff02a48a7d703a2682e9f7b7e77612d69c7c345c5b4a9ddd20418865049f87ab2232c6c730eba025e4d92d97cfde32c1d51408aeba73a891e21172f43f2ef2865535c5786634cb80028137"}, {0xd, 0x0, "aafe1da0995b9ae461"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x6}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x80}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}]}, @NL80211_ATTR_NAN_FUNC={0x19c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x198, 0xd, 0x0, 0x1, [{0xcb, 0x0, "7dcfffb857b94e6a2ff0f84328b5576cee25fd4a40c89f44590a3b32bca20baf06c5bf75317878fe2cb0011c4799cc87a943b1ef862faf3f8c593fc17818e28a7d58956d17669f08cfd9bd90283d9c6667f9397d0ec15e48ba77f7840631059b95ad1bd9b17ce050876a934944b1712f291e27df1ba8810c0e4ff39756d8582dc2d90d7e22b3151f5eb4f2bc44edbbd9574d9920a757e7b59293d33568eee1c93907aff47d37cf727d865f97444a215e02d0c0e14e4a5c8156e267f464c78e76d349c393f53a7e"}, {0x5b, 0x0, "a55cb27625914d88db332acf53d439bb25b062645ecc8cacf985bacfae4ee351703a09e5e16ebec37364cd60e6c9c016e0eacc8a999ec127870a5c545e7b117e762758384240e80640d2fe5208bf6e96b2b3772b6db087"}, {0x6b, 0x0, "c70390e9260ec191d9f3ee1e9dced65b91a5e33a3eaf2d692d2906f8d2bb046c27766999f1dce0b1673b8d0d2eebe6eaa7e891b1ae1024d39f1845777f62595dfca824ce076c1d96b0af10b036916e32c65b1c26df46e63140afc9b87c0f8f4bbe6d4c1d085b00"}]}]}, @NL80211_ATTR_NAN_FUNC={0x28, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x5}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x44e0}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x4}]}, @NL80211_ATTR_NAN_FUNC={0x2c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "7af53c23fe7e"}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x9}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xd5}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x5}]}, @NL80211_ATTR_NAN_FUNC={0xb6c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x81}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x37c, 0xe, 0x0, 0x1, [{0xd0, 0x0, "c5afdcfe78a890a566b5bf10ead11bf2a21a097a145f039b461fec230593677b289645394ebacb9004578efb06e197243b20d37794006e5ae04c1d05a45ee9abea71d719e4a45e8167f3e5c77d5615dba02cb967067c12f89c6286401ea7b36737dae070131c245c6f254129ae909be3c77764bfabcd8f75f29e4fe82c4e1ba5fe2fc535eae67eb8d316d4114b0e6a0ae738fb33076c76ce60d427caf8bed55f89b701528e5c4d467d9d415670d3295f7d29eb138074253babdc3a0d8873f54403809794c375cf0b2ebf47cd"}, {0xf4, 0x0, "3bd9b939019df7c72cb0b7462d43f3ffe488c57a0f2af17956e84b278f3508f6777ece99b216073e929a3ae2caceb97795a1313639cf88426dc3ee2c5040475c1d5538b0efcd22f3ee91f33bba24ef2b5e40b9dc79becf27f21971ded542b65f7a068042349b394fc8cbf2c867c860e55200be441f9a0d1c07d42861f8bd65bd68e7fe721ce79e696e34b8c5cf5ed44936de6cde32e9c38051f2eb67866eb6f82001ef31a4f5184a8dc20f000a2240c602b514ed15fbb87bea710aec9876920e9721a2159c4eba46e145bff836b6539b99e70b57da0c8e14d853892455ba7d8357be6d6f240cfd572ed3d3c5a399847b"}, {0xb5, 0x0, "b5d5046459499cd33162912089f39524b378c9d96b4e68c03e44aae5a6dfc70e29f310cfc525d32ebf76ed206d497d1471ee8254e76ced1c7814ae5886c3cab6371425a3990121d7d9b8fa3300e93e685a10ae5ce7b82b4f4ebedc289b7d7f5a1dd92a534d09a49ae6d30f03f686abc643203a3b4b3529606c21f0e3f15b9479b14c853f4d146b9e76689d4ff9c2ba839d73dbd0b5b06784c583159a675fa603c24d54297e1e89e0c101ef53b0f2cce1cd"}, {0xfc, 0x0, "7fce02964c3d5a50a9fc35fa70d988c9f1972e5d609a7a4a145c6fdb0599ef1669d6446104e5b10547741db6ae2ba8c2150e11577f5500ed876ad3a8f09a197230d7bdf15864c8d18994817c2298578263608661fbe063b4ff8927a773544c8598b8792f92575574da13dc878f9debb75dd3cb267ca518ad4c3ddd8ac8389abde3a88d492dee72fba5cb5bee8bc4ab5840177bf63e996b0738f0f2e2f15fb02174161bdc3891c7c45e0d7488d0f52a77ccc7273ff9b6e1d57f1c52e506da0b9436e78ee5b897c87195d5b8bd77228672c45f6863986eb28b0dab81f0df207a30de3a58edfd3f8030fb8a0ce0e09ebee101a8cb22a06ad218"}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x5b0, 0xd, 0x0, 0x1, [{0xb2, 0x0, "d0ed5f300c8d6c8ab0f522fcde53cdc185621053bd9d84453684c33bcb5130b9f713af6158be69ae698be2d9c1510e273c01caebe423222e128624e2e36d9274e35b8d5ec2df1f712d54fae28680f99f8eb6125a53f9767fadcb0ae5a7588c86a04d63b1f451c9fa42a292e45f391d0f4b88c7b3f96b1028ce2368d45de3ed142667bf64b0708858ccf1621bc2be139e2611a1ec5ce220b2c9b21c5f9770fbd99bf79a46cb65b9eec5f7474aa94d"}, {0x101, 0x0, "c2855de811853d613c4493380b0bd124a095a8e4a81063b5cc00dec2f65d7b0525e1468506c43b125e8f748f3d7417bb1f327c4245bfa69378219b07b8f25220fe28be99559bba3dc857ea305067a74a3ce852736c4e50098aefc155bf81dff156b6b754afabea306e3108b33ae3754502ae52163691bbc4114f37f0a7229563a92312410722455b988a29d5d4aa519b314b8b27e47c67b0a3016d4d5475d3ae3e508fc0eda110c170db054ffb35daf36caafdf6ab791da493ae99efbae401e7ddfb09ad39d5473c81fac91062704f6e79b941df2dde7c4e109773f1fe6ba5bdc05238da5b01bc8b7b8ef395d18f7f7569bee676a12eeb4a74e1fbd082"}, {0xff, 0x0, "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"}, {0x67, 0x0, "3465246d39d0f2cc6d8271d09f48cb4fc4c53082281dabcced5252f79dbffebe47873fe801e93830e0b58d6bf1ec27add53ab2b295f45e0d9d82ae61e178c7594138da9211af972eb3a92601cdf97c8bdf59322c6efab0928e3c2cd092ed6945aa9951"}, {0xfe, 0x0, "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"}, {0xce, 0x0, "f298fc1238d5e524c8b66f3266268c9b95617d6046a0f14ed5bbb74358c556aa117b325d92c92181df112d48a2483d376cb57a678ee47ec281e105296d44fe82948d6c7b8e7e9fe0856e8153a4b78c0c5eb7026c9aa56c990b2f8258a2c8b7626438953ed775ecf305012cdae769c912350f947f272d9bd79901b88d44c4328fd6181d1c95521518a5ef2c53dd403bca39fa48d4e6596db520dd1059a6a8320439baeac033abc4021128d1420e25103022df20e10e2c2c18b30986101c9982b15edea4f7fad4f71aa98c"}, {0x4}, {0xb7, 0x0, "fdddb7b354b0912869196891ab93f73a1937a851b1088fe1390e500d0be3c6f6b406a0ae6b13f450a197cf53fe1570058407a41ab90caa42178824cfb744ebf4b0f7d3a46b50f55833505ebc7c4aeee95132c79e24106d6ad84d2364489429943f0a907ac218ecc05a51df6cea15dc7b3487600aa2da13319867f49010d1b93d0d7be8e58a1ebfcd934cab87858d752c219b98418f1bafac60c3f4aa44813ff4e837ceec415853745a6706f48269ebc7d7c344"}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x22c, 0xd, 0x0, 0x1, [{0xdc, 0x0, "bc7bb8d2b350b88c1a283478a97b4175163390156dfc2e72272badfbe9e6c1b6d357e8f35e6437217eed2c544063b9a8058b6a845709303919dd6e046a422987e4532129385a49f8156770e3a446e5240000c6b36a649577139cec8d1079075d29f09f42508cb7b11152a852a588685a8fabc571c38a67084bf335626e165a10267ce3bd024b7917b7a72202c1a198ac07078d59c7701343dfb7b18e46d10ade5c6b211203722626554cdca8ead17507b6a6566b8a413e4ba580b29de0e1736b20fa9a54007ca78461ca7eaa9a32e7290de3f113f2a0b09b"}, {0x23, 0x0, "e841e803eebbcd12e96efc475f0871b66e062577ded2be09b8adfe6ea0f5bc"}, {0x101, 0x0, "d079ab5686c5f1adc42b3b46b0579945370a377193d5260e6ecdec05b5d9f97883cd368206085ef480ce76b34c4af94c112e5ee0526a384d59d5951e5399c83c85b398202ea332f1a6223337f91842a500e8743e500039256845b11f6f7fe06dd5e61f211f8473886d4394bf14b2c148e9244a07529ddf825360cd63d6ab487a70baf19ddc3d718f5c10cfe41f7538b41d76b8b41cf4062b7afbbcbf3ec4fed5bb056b117ac4c3d50821caf7d77d9dd5968558ba54232fb63685ebf9f8dc58cdac5b5c0c39ac523ff6214a6c34df89dc267fa1f91a36b42ea4e207ce6aea2c140194e9e6970b019152847651db648bd7ec40ee94b10d7e6ab23755951a"}, {0x21, 0x0, "dd4e847ac6ea2ffa469c048a87867805010c6028a004df5d9330d6c028"}]}]}]}, 0xff0}, 0x1, 0x0, 0x0, 0x1}, 0x20004800) r8 = syz_usb_connect(0x2, 0x54, &(0x7f0000001dc0)={{0x12, 0x1, 0x110, 0x43, 0x60, 0xbb, 0x40, 0xdf6, 0x76, 0xd563, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x42, 0x1, 0xb9, 0x81, 0x70, 0x2, "", [{{0x9, 0x4, 0xd8, 0xd4, 0x1, 0xff, 0xff, 0xff, 0x10, [@hid_hid={0x9, 0x21, 0x7fff, 0x2, 0x1, {0x22, 0xe05}}, @uac_control={{0xa, 0x24, 0x1, 0x6, 0x10}, [@mixer_unit={0x6, 0x24, 0x4, 0x6, 0x8, 'q'}]}], [{{0x9, 0x5, 0x9, 0x10, 0x200, 0x10, 0x7, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x80}]}}]}}]}}]}}, &(0x7f0000001f00)={0xa, &(0x7f0000001e40)={0xa, 0x6, 0x310, 0xa8, 0x5, 0x2, 0x10, 0x3}, 0x13, &(0x7f0000001e80)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x2, 0x7, 0x1, 0x4}]}, 0x1, [{0x4, &(0x7f0000001ec0)=@lang_id={0x4, 0x3, 0x427}}]}) syz_usb_control_io(r8, &(0x7f0000002100)={0x2c, &(0x7f0000001f40)={0x40, 0x24, 0x7b, {0x7b, 0x10, "63807e4bdc0ebbd2d22eafb3fda22084031b2433004dde170cc895452f9a1dec892f45e7a4065a5d19e0346e5a25ad862c6dac1c79c57a1797478fbdd51976c175a244c6f4cae5bb36877d15409f0007fd713298742a504c5a754a86ff13383a72b34e7d108385d09ae5bc8f8f541a7a45a3565546f6c07d90"}}, &(0x7f0000002000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}, &(0x7f0000002040)={0x0, 0xf, 0x10, {0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x2, 0x55, 0x1, 0x8}]}}, &(0x7f0000002080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0xb6, 0x9, "f98e567d", "84ea8e9a"}}, &(0x7f00000020c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x18, 0x9, 0x0, 0x9, 0x7, 0x5}}}, &(0x7f00000025c0)={0x84, &(0x7f0000002140)={0x0, 0x14, 0x7e, "7cce31d1846cca8320fc66654c2b9619066960bc2a90bb6aa7b2b70bd314c9e94d8798a1b5325ec71a4f6796424bd730bc142642256360ae540ac176319a504eb59c4e8f03c78a48dd74df6ec902bd490431f149bb270d00177a0a92b45890adbc8a69dc028329dfe0d8cacc9abf93fe5a4517ddf0f0ebc228dd46fe0faa"}, &(0x7f0000002200)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000002240)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000002280)={0x20, 0x0, 0x4, {0x5, 0x1}}, &(0x7f00000022c0)={0x20, 0x0, 0x4, {0x400, 0x1}}, &(0x7f0000002300)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000002340)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000002380)={0x40, 0xb, 0x2, 'VK'}, &(0x7f00000023c0)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000002400)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000002440)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000002480)={0x40, 0x19, 0x2, '\fE'}, &(0x7f00000024c0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000002500)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000002540)={0x40, 0x1e, 0x1, 0xc8}, &(0x7f0000002580)={0x40, 0x21, 0x1, 0x4}}) prctl$PR_GET_IO_FLUSHER(0x3a) prctl$PR_GET_IO_FLUSHER(0x3a) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000002680)={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x1c}, @dev={0xfe, 0x80, '\x00', 0x13}, 0x6, 0x8, 0xffff, 0x400, 0x591b, 0x90, r2}) prctl$PR_GET_IO_FLUSHER(0x3a) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f0000002840)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002800)={&(0x7f0000002780)={0x58, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "8b1979a6024e"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4040040) 119.870028ms ago: executing program 0 (id=185): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x8000, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffff3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$XFS_IOC_COMMIT_RANGE(r4, 0x40585883, &(0x7f0000000180)={r5, 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x1, [0x80, 0x9, 0x400, 0x10001, 0x3, 0x3]}) (async, rerun: 64) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) (rerun: 64) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) (async) r7 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3, 0x4e1f, 0x0, 0x2}, {0x5, 0xb, 0x4, 0x400, 0x8001, 0x4, 0x0, 0xd3d}, {0x0, 0x137, 0x0, 0x3}, 0x7fffffff, 0x6e6bb9, 0x1}, {{@in=@empty, 0x4d6, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3502, 0x1, 0x0, 0x0, 0x0, 0x2c19, 0x3}}, 0xe8) (async) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) read(r3, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x7) (async) r8 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x3, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) ioctl$KVM_GET_DEBUGREGS(r8, 0x8080aea1, &(0x7f00000000c0)) socket$nl_audit(0x10, 0x3, 0x9) 24.70685ms ago: executing program 0 (id=186): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)="5ab091cc283ed435f76067459e4c450063a00229b18be142c3da5af1b71a8b2088c823fb9956c0b51770497f0a021443ca1b266c111a5334fc1f5c0a42308b233a40a53bfe6c25517971b5b7", 0x4c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc2c02e4d8eb3e456, 0x0) r1 = openat$incfs(r0, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, &(0x7f00000000c0)) 0s ago: executing program 0 (id=187): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)="5ab091cc283ed435f76067459e4c450063a00229b18be142c3da5af1b71a8b2088c823fb9956c0b51770497f0a021443ca1b266c111a5334fc1f5c0a42308b233a40a53bfe6c25517971b5b7", 0x4c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc2c02e4d8eb3e456, 0x0) r1 = openat$incfs(r0, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r2, &(0x7f0000000380), 0x8) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): cess permissive=1 [ 21.512687][ T36] audit: type=1400 audit(1784845591.600:63): avc: denied { siginh } for pid=275 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. [ 29.568409][ T36] audit: type=1400 audit(1784845599.670:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.572032][ T287] cgroup: Unknown subsys name 'net' [ 29.591241][ T36] audit: type=1400 audit(1784845599.670:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.618579][ T36] audit: type=1400 audit(1784845599.700:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.619090][ T287] cgroup: Unknown subsys name 'devices' [ 29.738358][ T287] cgroup: Unknown subsys name 'hugetlb' [ 29.744049][ T287] cgroup: Unknown subsys name 'rlimit' [ 29.860186][ T36] audit: type=1400 audit(1784845599.960:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.883457][ T36] audit: type=1400 audit(1784845599.960:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.908491][ T36] audit: type=1400 audit(1784845599.960:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.950594][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 29.959596][ T36] audit: type=1400 audit(1784845600.060:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.985224][ T36] audit: type=1400 audit(1784845600.060:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.026807][ T36] audit: type=1400 audit(1784845600.130:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.052440][ T36] audit: type=1400 audit(1784845600.130:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.053078][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.922758][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.929942][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.937466][ T297] bridge_slave_0: entered allmulticast mode [ 30.943833][ T297] bridge_slave_0: entered promiscuous mode [ 30.953664][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.960790][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.967989][ T297] bridge_slave_1: entered allmulticast mode [ 30.974363][ T297] bridge_slave_1: entered promiscuous mode [ 30.994078][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.001712][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.008906][ T294] bridge_slave_0: entered allmulticast mode [ 31.015300][ T294] bridge_slave_0: entered promiscuous mode [ 31.021670][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.028758][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.035851][ T295] bridge_slave_0: entered allmulticast mode [ 31.042240][ T295] bridge_slave_0: entered promiscuous mode [ 31.051596][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.058704][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.065914][ T295] bridge_slave_1: entered allmulticast mode [ 31.072257][ T295] bridge_slave_1: entered promiscuous mode [ 31.081734][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.088891][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.096090][ T294] bridge_slave_1: entered allmulticast mode [ 31.102398][ T294] bridge_slave_1: entered promiscuous mode [ 31.182358][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.189464][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.196753][ T296] bridge_slave_0: entered allmulticast mode [ 31.203157][ T296] bridge_slave_0: entered promiscuous mode [ 31.217226][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.224323][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.231497][ T296] bridge_slave_1: entered allmulticast mode [ 31.237904][ T296] bridge_slave_1: entered promiscuous mode [ 31.347462][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.354559][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.361908][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.368969][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.382493][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.389617][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.396965][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.404011][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.421879][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.429002][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.436324][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.443403][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.464889][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.472089][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.479491][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.486573][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.526781][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.534273][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.541675][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.549711][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.557178][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.564406][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.572276][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.579571][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.589396][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.596497][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.608741][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.615957][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.623654][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.630777][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.639382][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.646496][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.676771][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.683859][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.692137][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.699319][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.720373][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.727482][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.735189][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.742303][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.784737][ T297] veth0_vlan: entered promiscuous mode [ 31.799134][ T296] veth0_vlan: entered promiscuous mode [ 31.818126][ T295] veth0_vlan: entered promiscuous mode [ 31.824937][ T294] veth0_vlan: entered promiscuous mode [ 31.831785][ T297] veth1_macvtap: entered promiscuous mode [ 31.858195][ T296] veth1_macvtap: entered promiscuous mode [ 31.872684][ T294] veth1_macvtap: entered promiscuous mode [ 31.880559][ T297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.901182][ T295] veth1_macvtap: entered promiscuous mode [ 31.972190][ T314] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 32.002827][ T318] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.019676][ T314] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 32.029251][ T320] rust_binder: Error in use_page_slow: ESRCH [ 32.029290][ T320] rust_binder: use_range failure ESRCH [ 32.044951][ T320] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 32.063587][ T320] rust_binder: Failure in copy_transaction_data: ESRCH [ 32.071939][ T320] rust_binder: 319:320 transaction to 319 failed: ESRCH [ 32.286003][ T9] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 32.326037][ T46] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 32.335972][ T310] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 32.456322][ T9] usb 2-1: Invalid ep0 maxpacket: 16 [ 32.477474][ T46] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 32.487740][ T310] usb 3-1: Invalid ep0 maxpacket: 64 [ 32.493231][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 32.506840][ T46] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 32.516481][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.525638][ T46] usb 4-1: config 0 descriptor?? [ 32.532350][ T46] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 32.596210][ T9] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 32.635999][ T310] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 32.745958][ T9] usb 2-1: Invalid ep0 maxpacket: 16 [ 32.751485][ T9] usb usb2-port1: attempt power cycle [ 32.785927][ T310] usb 3-1: Invalid ep0 maxpacket: 64 [ 32.791427][ T310] usb usb3-port1: attempt power cycle [ 32.860510][ T332] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 33.095995][ T9] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 33.126332][ T9] usb 2-1: Invalid ep0 maxpacket: 16 [ 33.159620][ T310] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 33.186629][ T310] usb 3-1: Invalid ep0 maxpacket: 64 [ 33.276002][ T9] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 33.296434][ T9] usb 2-1: Invalid ep0 maxpacket: 16 [ 33.301885][ T9] usb usb2-port1: unable to enumerate USB device [ 33.316112][ T310] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 33.336323][ T310] usb 3-1: Invalid ep0 maxpacket: 64 [ 33.341804][ T310] usb usb3-port1: unable to enumerate USB device [ 33.438865][ T67] usb 4-1: USB disconnect, device number 2 [ 33.586313][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.737256][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 33.748599][ T9] usb 1-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 33.757787][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.765807][ T9] usb 1-1: Product: syz [ 33.770304][ T9] usb 1-1: Manufacturer: syz [ 33.774935][ T9] usb 1-1: SerialNumber: syz [ 33.856041][ T67] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 33.985350][ T9] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 34.005962][ T67] usb 4-1: Using ep0 maxpacket: 32 [ 34.016878][ T67] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.033281][ T67] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.044449][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 34.056914][ T9] usb 1-1: USB disconnect, device number 2 [ 34.065950][ T67] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 34.075043][ T67] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.087511][ T67] usb 4-1: config 0 descriptor?? [ 34.093585][ T67] hub 4-1:0.0: USB hub found [ 34.115616][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.293650][ T67] hub 4-1:0.0: 1 port detected [ 34.735953][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 34.885947][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 34.892937][ T9] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 32 [ 34.902895][ T9] usb 1-1: config 1 interface 0 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 34.916470][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 34.924672][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 34.933863][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.941998][ T9] usb 1-1: Product: ӿ [ 34.946467][ T9] usb 1-1: Manufacturer: ♪ᨾ듘渨趼䐱绐ᶾ躌癣ϊಊ錇災囚壙ᲄꁇᚸ휠☖殺伛ꮳ籔鹱ꋌ⌅–ⓖDž뺩뀧豪웮ꬣ㑪✪ꛅ佀띻픝탵率븚঎醮蘊킈홿汰进晡鄚☄⫶뜉뽐핷砌입胙좄ᅢ닅贏ゴ뿚鷆劽놵潾埑ᜌ⭻̷ꕼ댫㴻겷柅칮⫢镻⠧䢣侁⴯ﵕ㋙ፕ꿩 [ 34.977387][ T9] usb 1-1: SerialNumber: syz [ 34.983134][ T349] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 34.990472][ T349] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 35.018418][ T36] kauditd_printk_skb: 60 callbacks suppressed [ 35.018436][ T36] audit: type=1400 audit(1784845605.120:134): avc: denied { read write } for pid=352 comm="syz.1.12" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 35.047688][ T36] audit: type=1400 audit(1784845605.120:135): avc: denied { open } for pid=352 comm="syz.1.12" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 35.054871][ T354] fuse: Bad value for 'fd' [ 35.070919][ T36] audit: type=1400 audit(1784845605.120:136): avc: denied { mounton } for pid=352 comm="syz.1.12" path="/1/file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 35.117140][ T360] ======================================================= [ 35.117140][ T360] WARNING: The mand mount option has been deprecated and [ 35.117140][ T360] and is ignored by this kernel. Remove the mand [ 35.117140][ T360] option from the mount to silence this warning. [ 35.117140][ T360] ======================================================= [ 35.152163][ T36] audit: type=1400 audit(1784845605.220:137): avc: denied { ioctl } for pid=357 comm="syz.1.13" path="socket:[4288]" dev="sockfs" ino=4288 ioctlcmd=0x541c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.170321][ T360] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 35.178095][ T36] audit: type=1400 audit(1784845605.250:138): avc: denied { mount } for pid=359 comm="syz.2.14" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 35.212265][ T36] audit: type=1400 audit(1784845605.250:139): avc: denied { mounton } for pid=359 comm="syz.2.14" path="/2/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 35.222268][ T9] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 35.246796][ T36] audit: type=1400 audit(1784845605.340:140): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 35.273455][ T36] audit: type=1400 audit(1784845605.370:141): avc: denied { read write } for pid=363 comm="syz.2.15" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 35.276301][ T9] usb 1-1: USB disconnect, device number 3 [ 35.297450][ T36] audit: type=1400 audit(1784845605.370:142): avc: denied { open } for pid=363 comm="syz.2.15" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 35.318356][ T364] netlink: 'syz.2.15': attribute type 1 has an invalid length. [ 35.333074][ T36] audit: type=1400 audit(1784845605.400:143): avc: denied { write } for pid=363 comm="syz.2.15" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 35.338008][ T364] Zero length message leads to an empty skb [ 35.362445][ T67] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 35.371771][ T67] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 35.382261][ T67] usbhid 4-1:0.0: can't add hid device: -32 [ 35.388311][ T336] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 35.396012][ T67] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 35.545980][ T336] usb 2-1: Using ep0 maxpacket: 16 [ 35.552471][ T336] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 35.560725][ T336] usb 2-1: config 0 has no interface number 0 [ 35.567148][ T336] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 35.578560][ T336] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 1025, setting to 1024 [ 35.589739][ T336] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 35.598974][ T336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.607866][ T336] usb 2-1: config 0 descriptor?? [ 35.613218][ T358] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 35.995945][ T46] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 36.147429][ T46] usb 1-1: unable to get BOS descriptor or descriptor too short [ 36.156085][ T46] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.166242][ T46] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 36.175227][ T46] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 36.186262][ T46] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 36.199617][ T46] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 36.210557][ T46] usb 1-1: config 1 interface 1 has no altsetting 0 [ 36.218770][ T46] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 36.227982][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.230378][ T336] uclogic 0003:28BD:0071.0001: failed retrieving string descriptor #100: -71 [ 36.236140][ T46] usb 1-1: Manufacturer: Ч [ 36.247350][ T336] uclogic 0003:28BD:0071.0001: failed retrieving pen parameters: -71 [ 36.259149][ T46] usb 1-1: SerialNumber: ӿ [ 36.259908][ T336] uclogic 0003:28BD:0071.0001: pen probing failed: -71 [ 36.272999][ T336] uclogic 0003:28BD:0071.0001: failed probing parameters: -71 [ 36.280700][ T336] uclogic 0003:28BD:0071.0001: probe with driver uclogic failed with error -71 [ 36.291917][ T336] usb 2-1: USB disconnect, device number 6 [ 36.330893][ T377] tipc: Enabling of bearer rejected, failed to enable media [ 36.340027][ T377] tipc: Enabling of bearer rejected, failed to enable media [ 36.385161][ T384] netlink: 'syz.2.22': attribute type 4 has an invalid length. [ 36.392925][ T384] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.22'. [ 36.474138][ T369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.483645][ T369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.486766][ T387] fuse: Unknown parameter 'ucer_id' [ 36.501733][ T46] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 36.511765][ T46] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 36.527340][ T46] usb 1-1: USB disconnect, device number 4 [ 36.540901][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.614334][ T398] FAULT_INJECTION: forcing a failure. [ 36.614334][ T398] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 36.627584][ T398] CPU: 0 UID: 0 PID: 398 Comm: syz.3.26 Not tainted syzkaller #0 f0c7936fd393d0f1370a9bd0d5eb1da62a5da95d [ 36.627619][ T398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 36.627642][ T398] Call Trace: [ 36.627649][ T398] [ 36.627658][ T398] __dump_stack+0x21/0x30 [ 36.627700][ T398] dump_stack_lvl+0x140/0x1c0 [ 36.627730][ T398] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.627763][ T398] dump_stack+0x19/0x20 [ 36.627793][ T398] should_fail_ex+0x3c2/0x510 [ 36.627819][ T398] should_fail+0xf/0x20 [ 36.627842][ T398] should_fail_usercopy+0x1e/0x30 [ 36.627869][ T398] strncpy_from_user+0x29/0x280 [ 36.627895][ T398] getname_flags+0x106/0x6b0 [ 36.627922][ T398] user_path_at+0x2b/0x60 [ 36.627949][ T398] __se_sys_mount+0x28a/0x480 [ 36.627972][ T398] ? ksys_write+0x1f3/0x260 [ 36.627996][ T398] ? __x64_sys_mount+0xf0/0xf0 [ 36.628021][ T398] __x64_sys_mount+0xc3/0xf0 [ 36.628045][ T398] x64_sys_call+0x2021/0x2ee0 [ 36.628066][ T398] do_syscall_64+0x57/0xf0 [ 36.628090][ T398] ? clear_bhb_loop+0x50/0xa0 [ 36.628126][ T398] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.628155][ T398] RIP: 0033:0x7f66a099de99 [ 36.628175][ T398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.628194][ T398] RSP: 002b:00007f66a180f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 36.628223][ T398] RAX: ffffffffffffffda RBX: 00007f66a0c25fa0 RCX: 00007f66a099de99 [ 36.628240][ T398] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000 [ 36.628255][ T398] RBP: 00007f66a180f090 R08: 0000200000000400 R09: 0000000000000000 [ 36.628270][ T398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.628285][ T398] R13: 00007f66a0c26038 R14: 00007f66a0c25fa0 R15: 00007ffc9d24c768 [ 36.628305][ T398] [ 36.825978][ T9] usb 4-1: USB disconnect, device number 3 [ 36.975959][ T336] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 37.086842][ T423] Bluetooth: hci0: Frame reassembly failed (-84) [ 37.093831][ T420] process 'syz.0.33' launched './file1' with NULL argv: empty string added [ 37.125972][ T336] usb 3-1: Using ep0 maxpacket: 8 [ 37.133574][ T336] usb 3-1: unable to get BOS descriptor or descriptor too short [ 37.142113][ T336] usb 3-1: config 74 has an invalid interface number: 169 but max is 0 [ 37.150463][ T336] usb 3-1: config 74 has an invalid interface number: 244 but max is 0 [ 37.160954][ T336] usb 3-1: config 74 has 2 interfaces, different from the descriptor's value: 1 [ 37.170334][ T336] usb 3-1: config 74 has no interface number 0 [ 37.176659][ T336] usb 3-1: config 74 has no interface number 1 [ 37.182880][ T336] usb 3-1: config 74 interface 169 altsetting 5 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 37.194123][ T336] usb 3-1: config 74 interface 169 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 37.207444][ T336] usb 3-1: too many endpoints for config 74 interface 244 altsetting 55: 72, using maximum allowed: 30 [ 37.218771][ T336] usb 3-1: config 74 interface 244 altsetting 55 has an invalid descriptor for endpoint zero, skipping [ 37.230128][ T336] usb 3-1: config 74 interface 244 altsetting 55 has an invalid descriptor for endpoint zero, skipping [ 37.241929][ T336] usb 3-1: config 74 interface 244 altsetting 55 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 37.253175][ T336] usb 3-1: config 74 interface 244 altsetting 55 has 3 endpoint descriptors, different from the interface descriptor's value: 72 [ 37.268701][ T336] usb 3-1: config 74 interface 169 has no altsetting 0 [ 37.275759][ T336] usb 3-1: config 74 interface 244 has no altsetting 0 [ 37.283232][ T432] FAULT_INJECTION: forcing a failure. [ 37.283232][ T432] name failslab, interval 1, probability 0, space 0, times 1 [ 37.284743][ T336] usb 3-1: New USB device found, idVendor=153b, idProduct=1182, bcdDevice=a9.eb [ 37.305646][ T336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.312006][ T432] CPU: 1 UID: 0 PID: 432 Comm: syz.1.35 Not tainted syzkaller #0 f0c7936fd393d0f1370a9bd0d5eb1da62a5da95d [ 37.312100][ T432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 37.312140][ T432] Call Trace: [ 37.312161][ T432] [ 37.312184][ T432] __dump_stack+0x21/0x30 [ 37.312290][ T432] dump_stack_lvl+0x140/0x1c0 [ 37.312374][ T432] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.312466][ T432] dump_stack+0x19/0x20 [ 37.312540][ T432] should_fail_ex+0x3c2/0x510 [ 37.312612][ T432] should_failslab+0xac/0x100 [ 37.312686][ T432] __kmalloc_cache_noprof+0x41/0x470 [ 37.312772][ T432] ? alloc_fs_context+0x6f/0x800 [ 37.312853][ T432] ? __asan_memcpy+0x5a/0x80 [ 37.312918][ T432] alloc_fs_context+0x6f/0x800 [ 37.312992][ T432] ? __kasan_check_write+0x18/0x20 [ 37.313048][ T432] fs_context_for_mount+0x26/0x40 [ 37.313121][ T432] do_new_mount+0x116/0xb40 [ 37.313182][ T432] ? security_capable+0x44/0x130 [ 37.313249][ T432] path_mount+0x66a/0xff0 [ 37.313309][ T432] ? putname+0x113/0x150 [ 37.313373][ T432] __se_sys_mount+0x2bf/0x480 [ 37.313436][ T432] ? ksys_write+0x1f3/0x260 [ 37.313498][ T432] ? __x64_sys_mount+0xf0/0xf0 [ 37.313561][ T432] __x64_sys_mount+0xc3/0xf0 [ 37.313624][ T432] x64_sys_call+0x2021/0x2ee0 [ 37.313675][ T432] do_syscall_64+0x57/0xf0 [ 37.313699][ T432] ? clear_bhb_loop+0x50/0xa0 [ 37.313747][ T432] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.313842][ T432] RIP: 0033:0x7fa1d5d9de99 [ 37.313906][ T432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.313963][ T432] RSP: 002b:00007fa1d47f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 37.314026][ T432] RAX: ffffffffffffffda RBX: 00007fa1d6025fa0 RCX: 00007fa1d5d9de99 [ 37.314068][ T432] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000 [ 37.314108][ T432] RBP: 00007fa1d47f7090 R08: 0000200000000400 R09: 0000000000000000 [ 37.314148][ T432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.314180][ T432] R13: 00007fa1d6026038 R14: 00007fa1d6025fa0 R15: 00007ffc53659558 [ 37.314234][ T432] [ 37.535290][ T336] usb 3-1: Product: у [ 37.539538][ T336] usb 3-1: Manufacturer: 䠊 [ 37.544180][ T336] usb 3-1: SerialNumber: syz [ 37.756101][ T336] usb 3-1: USB disconnect, device number 6 [ 37.936470][ T430] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 38.087005][ T430] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 38.098018][ T430] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 38.111063][ T430] usb 2-1: config 0 interface 0 has no altsetting 0 [ 38.118067][ T430] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 38.127185][ T430] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.135992][ T430] usb 2-1: config 0 descriptor?? [ 38.141303][ T441] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 38.272256][ T453] FAULT_INJECTION: forcing a failure. [ 38.272256][ T453] name failslab, interval 1, probability 0, space 0, times 0 [ 38.285059][ T453] CPU: 0 UID: 0 PID: 453 Comm: syz.2.44 Not tainted syzkaller #0 f0c7936fd393d0f1370a9bd0d5eb1da62a5da95d [ 38.285091][ T453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 38.285100][ T453] Call Trace: [ 38.285107][ T453] [ 38.285137][ T453] __dump_stack+0x21/0x30 [ 38.285173][ T453] dump_stack_lvl+0x140/0x1c0 [ 38.285208][ T453] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.285232][ T453] dump_stack+0x19/0x20 [ 38.285252][ T453] should_fail_ex+0x3c2/0x510 [ 38.285290][ T453] should_failslab+0xac/0x100 [ 38.285317][ T453] __kmalloc_cache_noprof+0x41/0x470 [ 38.285339][ T453] ? kasan_save_alloc_info+0x3a/0x50 [ 38.285371][ T453] ? ovl_init_fs_context+0x65/0x790 [ 38.285388][ T453] ? __kasan_kmalloc+0x96/0xb0 [ 38.285407][ T453] ovl_init_fs_context+0x65/0x790 [ 38.285445][ T453] alloc_fs_context+0x5c4/0x800 [ 38.285475][ T453] fs_context_for_mount+0x26/0x40 [ 38.285506][ T453] do_new_mount+0x116/0xb40 [ 38.285521][ T453] ? security_capable+0x44/0x130 [ 38.285539][ T453] path_mount+0x66a/0xff0 [ 38.285553][ T453] ? putname+0x113/0x150 [ 38.285591][ T453] __se_sys_mount+0x2bf/0x480 [ 38.285613][ T453] ? ksys_write+0x1f3/0x260 [ 38.285635][ T453] ? __x64_sys_mount+0xf0/0xf0 [ 38.285660][ T453] __x64_sys_mount+0xc3/0xf0 [ 38.285676][ T453] x64_sys_call+0x2021/0x2ee0 [ 38.285690][ T453] do_syscall_64+0x57/0xf0 [ 38.285721][ T453] ? clear_bhb_loop+0x50/0xa0 [ 38.285751][ T453] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.285778][ T453] RIP: 0033:0x7f55de19de99 [ 38.285800][ T453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.285813][ T453] RSP: 002b:00007f55df024028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 38.285830][ T453] RAX: ffffffffffffffda RBX: 00007f55de425fa0 RCX: 00007f55de19de99 [ 38.285842][ T453] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000 [ 38.285853][ T453] RBP: 00007f55df024090 R08: 0000200000000400 R09: 0000000000000000 [ 38.285883][ T453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.285895][ T453] R13: 00007f55de426038 R14: 00007f55de425fa0 R15: 00007fff560f1d08 [ 38.285914][ T453] [ 38.710395][ T441] 9pnet_fd: Insufficient options for proto=fd [ 38.719042][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 38.726700][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 38.734125][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 38.741589][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 38.749071][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 38.756540][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 38.763955][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 38.766043][ T336] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 38.772954][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 38.786355][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 38.793760][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 38.801401][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 38.808883][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 38.816367][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 38.823790][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 38.831244][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 38.838709][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 38.846160][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 38.853616][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 38.861095][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 38.868587][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 38.876059][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 38.883494][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 38.893523][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 38.901194][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 38.909068][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 38.916676][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 38.924586][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 38.932716][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 38.939558][ T336] usb 3-1: Using ep0 maxpacket: 16 [ 38.945934][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 38.950955][ T336] usb 3-1: config 1 has 3 interfaces, different from the descriptor's value: 31 [ 38.953394][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 38.971880][ T336] usb 3-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 38.975156][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 38.985261][ T336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.989042][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 39.004433][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 39.012065][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 39.013974][ T336] usb 3-1: Product: syz [ 39.020277][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 39.033939][ T336] usb 3-1: Manufacturer: syz [ 39.038629][ T336] usb 3-1: SerialNumber: syz [ 39.043552][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 39.056974][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 39.064466][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 39.071993][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 39.079533][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 39.088400][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 39.096031][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 39.103573][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 39.111232][ T430] pantherlord 0003:0F30:0111.0002: unknown main item tag 0x0 [ 39.119754][ T430] pantherlord 0003:0F30:0111.0002: hidraw0: USB HID v80.09 Device [HID 0f30:0111] on usb-dummy_hcd.1-1/input0 [ 39.131621][ T430] pantherlord 0003:0F30:0111.0002: no output reports found [ 39.145439][ T430] usb 2-1: USB disconnect, device number 7 [ 39.159037][ T464] fido_id[464]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 39.173286][ T424] Bluetooth: hci0: command 0x1003 tx timeout [ 39.181177][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 39.213453][ T466] program syz.0.49 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 39.269571][ T336] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 39.287082][ T336] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 39.310258][ T336] usb 3-1: USB disconnect, device number 7 [ 39.321417][ T479] FAULT_INJECTION: forcing a failure. [ 39.321417][ T479] name failslab, interval 1, probability 0, space 0, times 0 [ 39.331877][ T476] udevd[476]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.336538][ T479] CPU: 1 UID: 0 PID: 479 Comm: syz.2.53 Not tainted syzkaller #0 f0c7936fd393d0f1370a9bd0d5eb1da62a5da95d [ 39.336634][ T479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 39.336672][ T479] Call Trace: [ 39.336692][ T479] [ 39.336713][ T479] __dump_stack+0x21/0x30 [ 39.336803][ T479] dump_stack_lvl+0x140/0x1c0 [ 39.336881][ T479] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.336967][ T479] dump_stack+0x19/0x20 [ 39.337049][ T479] should_fail_ex+0x3c2/0x510 [ 39.337139][ T479] should_failslab+0xac/0x100 [ 39.337211][ T479] __kmalloc_cache_noprof+0x41/0x470 [ 39.337290][ T479] ? ovl_init_fs_context+0xb8/0x790 [ 39.337354][ T479] ovl_init_fs_context+0xb8/0x790 [ 39.337416][ T479] alloc_fs_context+0x5c4/0x800 [ 39.337498][ T479] fs_context_for_mount+0x26/0x40 [ 39.337579][ T479] do_new_mount+0x116/0xb40 [ 39.337641][ T479] ? security_capable+0x44/0x130 [ 39.337706][ T479] path_mount+0x66a/0xff0 [ 39.337766][ T479] ? putname+0x113/0x150 [ 39.337828][ T479] __se_sys_mount+0x2bf/0x480 [ 39.337889][ T479] ? ksys_write+0x1f3/0x260 [ 39.337950][ T479] ? __x64_sys_mount+0xf0/0xf0 [ 39.338013][ T479] __x64_sys_mount+0xc3/0xf0 [ 39.338086][ T479] x64_sys_call+0x2021/0x2ee0 [ 39.338147][ T479] do_syscall_64+0x57/0xf0 [ 39.338204][ T479] ? clear_bhb_loop+0x50/0xa0 [ 39.338283][ T479] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.338375][ T479] RIP: 0033:0x7f55de19de99 [ 39.338442][ T479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.338529][ T479] RSP: 002b:00007f55df024028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 39.338597][ T479] RAX: ffffffffffffffda RBX: 00007f55de425fa0 RCX: 00007f55de19de99 [ 39.338645][ T479] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000 [ 39.338685][ T479] RBP: 00007f55df024090 R08: 0000200000000400 R09: 0000000000000000 [ 39.338724][ T479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.338756][ T479] R13: 00007f55de426038 R14: 00007f55de425fa0 R15: 00007fff560f1d08 [ 39.338805][ T479] [ 39.536033][ T330] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 39.658595][ T493] netlink: 72 bytes leftover after parsing attributes in process `syz.2.58'. [ 39.737181][ T330] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 39.745995][ T430] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 39.753592][ T330] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.763935][ T330] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.776643][ T330] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 39.785900][ T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.794246][ T330] usb 4-1: Product: syz [ 39.801156][ T330] usb 4-1: Manufacturer: syz [ 39.807643][ T330] usb 4-1: SerialNumber: syz [ 39.814749][ T330] cdc_mbim 4-1:1.0: skipping garbage [ 39.820299][ T330] cdc_mbim 4-1:1.0: skipping garbage [ 39.825729][ T330] usb 4-1: selecting invalid altsetting 1 [ 39.905940][ T430] usb 2-1: Using ep0 maxpacket: 16 [ 39.912289][ T430] usb 2-1: config index 0 descriptor too short (expected 37359, got 202) [ 39.921378][ T430] usb 2-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 39.930195][ T430] usb 2-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 39.940421][ T430] usb 2-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 39.950999][ T430] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 39.960165][ T430] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.968263][ T430] usb 2-1: Product: syz [ 39.972445][ T430] usb 2-1: Manufacturer: syz [ 39.977096][ T430] usb 2-1: SerialNumber: syz [ 40.015362][ T474] netlink: 'syz.3.51': attribute type 6 has an invalid length. [ 40.024262][ T330] cdc_mbim 4-1:1.0: bind() failure [ 40.032051][ T330] usb 4-1: USB disconnect, device number 4 [ 40.085933][ T336] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 40.185536][ T430] usb 2-1: 0:2 : does not exist [ 40.190559][ T430] usb 2-1: unit 6 not found! [ 40.197704][ T430] usb 2-1: USB disconnect, device number 8 [ 40.209574][ T476] udevd[476]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:33.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.235968][ T336] usb 1-1: Using ep0 maxpacket: 16 [ 40.242269][ T336] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.253293][ T336] usb 1-1: config 0 interface 0 has no altsetting 0 [ 40.260034][ T336] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 40.269317][ T336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.278704][ T336] usb 1-1: config 0 descriptor?? [ 40.537884][ T36] kauditd_printk_skb: 45 callbacks suppressed [ 40.537917][ T36] audit: type=1400 audit(1784845610.640:189): avc: denied { name_bind } for pid=504 comm="syz.2.62" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 40.574862][ T510] FAULT_INJECTION: forcing a failure. [ 40.574862][ T510] name failslab, interval 1, probability 0, space 0, times 0 [ 40.587633][ T510] CPU: 0 UID: 0 PID: 510 Comm: syz.3.63 Not tainted syzkaller #0 f0c7936fd393d0f1370a9bd0d5eb1da62a5da95d [ 40.587666][ T510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 40.587680][ T510] Call Trace: [ 40.587687][ T510] [ 40.587695][ T510] __dump_stack+0x21/0x30 [ 40.587733][ T510] dump_stack_lvl+0x140/0x1c0 [ 40.587769][ T510] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.587801][ T510] dump_stack+0x19/0x20 [ 40.587830][ T510] should_fail_ex+0x3c2/0x510 [ 40.587856][ T510] should_failslab+0xac/0x100 [ 40.587885][ T510] __kmalloc_cache_noprof+0x41/0x470 [ 40.587910][ T510] ? ovl_init_fs_context+0x15e/0x790 [ 40.587937][ T510] ovl_init_fs_context+0x15e/0x790 [ 40.587963][ T510] alloc_fs_context+0x5c4/0x800 [ 40.588003][ T510] fs_context_for_mount+0x26/0x40 [ 40.588034][ T510] do_new_mount+0x116/0xb40 [ 40.588057][ T510] ? security_capable+0x44/0x130 [ 40.588084][ T510] path_mount+0x66a/0xff0 [ 40.588106][ T510] ? putname+0x113/0x150 [ 40.588132][ T510] __se_sys_mount+0x2bf/0x480 [ 40.588157][ T510] ? ksys_write+0x1f3/0x260 [ 40.588181][ T510] ? __x64_sys_mount+0xf0/0xf0 [ 40.588207][ T510] __x64_sys_mount+0xc3/0xf0 [ 40.588231][ T510] x64_sys_call+0x2021/0x2ee0 [ 40.588252][ T510] do_syscall_64+0x57/0xf0 [ 40.588278][ T510] ? clear_bhb_loop+0x50/0xa0 [ 40.588309][ T510] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.588336][ T510] RIP: 0033:0x7f66a099de99 [ 40.588356][ T510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.588374][ T510] RSP: 002b:00007f66a180f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 40.588420][ T510] RAX: ffffffffffffffda RBX: 00007f66a0c25fa0 RCX: 00007f66a099de99 [ 40.588439][ T510] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000 [ 40.588455][ T510] RBP: 00007f66a180f090 R08: 0000200000000400 R09: 0000000000000000 [ 40.588471][ T510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 40.588485][ T510] R13: 00007f66a0c26038 R14: 00007f66a0c25fa0 R15: 00007ffc9d24c768 [ 40.588506][ T510] [ 40.810334][ T336] hid-generic 0003:1E71:2009.0003: unknown main item tag 0x0 [ 40.817810][ T336] hid-generic 0003:1E71:2009.0003: unknown main item tag 0x0 [ 40.825231][ T336] hid-generic 0003:1E71:2009.0003: unknown main item tag 0x0 [ 40.836158][ T336] hid-generic 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 40.895919][ T430] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 40.960300][ T526] tipc: Started in network mode [ 40.965243][ T526] tipc: Node identity ac14140d, cluster identity 4711 [ 40.972445][ T526] tipc: New replicast peer: 255.255.255.255 [ 40.978781][ T526] tipc: Enabled bearer , priority 10 [ 41.060797][ T532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.61'. [ 41.075964][ T430] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 41.085367][ T430] usb 3-1: config 0 has no interface number 0 [ 41.103836][ T430] usb 3-1: config 0 interface 41 has no altsetting 0 [ 41.116724][ T310] usb 1-1: USB disconnect, device number 5 [ 41.126728][ T430] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 41.149159][ T430] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.161326][ T430] usb 3-1: Product: syz [ 41.165577][ T430] usb 3-1: Manufacturer: syz [ 41.170516][ T430] usb 3-1: SerialNumber: syz [ 41.179779][ T430] usb 3-1: config 0 descriptor?? [ 41.187592][ T540] FAULT_INJECTION: forcing a failure. [ 41.187592][ T540] name failslab, interval 1, probability 0, space 0, times 0 [ 41.200333][ T540] CPU: 0 UID: 0 PID: 540 Comm: syz.1.74 Not tainted syzkaller #0 f0c7936fd393d0f1370a9bd0d5eb1da62a5da95d [ 41.200368][ T540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 41.200383][ T540] Call Trace: [ 41.200390][ T540] [ 41.200399][ T540] __dump_stack+0x21/0x30 [ 41.200445][ T540] dump_stack_lvl+0x140/0x1c0 [ 41.200478][ T540] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.200513][ T540] dump_stack+0x19/0x20 [ 41.200544][ T540] should_fail_ex+0x3c2/0x510 [ 41.200572][ T540] should_failslab+0xac/0x100 [ 41.200600][ T540] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 41.200626][ T540] ? selinux_sb_eat_lsm_opts+0x9fd/0xad0 [ 41.200662][ T540] ? vfs_parse_monolithic_sep+0x243/0x360 [ 41.200693][ T540] kmemdup_nul+0x5a/0x1a0 [ 41.200728][ T540] vfs_parse_monolithic_sep+0x243/0x360 [ 41.200759][ T540] ? __kmalloc_cache_noprof+0x23c/0x470 [ 41.200784][ T540] ? __cfi_ovl_next_opt+0x10/0x10 [ 41.200810][ T540] ? __cfi_vfs_parse_monolithic_sep+0x10/0x10 [ 41.200842][ T540] ? ovl_init_fs_context+0x192/0x790 [ 41.200868][ T540] ? alloc_fs_context+0x5dd/0x800 [ 41.200898][ T540] ovl_parse_monolithic+0x28/0x40 [ 41.200924][ T540] parse_monolithic_mount_data+0x7f/0x90 [ 41.200958][ T540] do_new_mount+0x222/0xb40 [ 41.200981][ T540] ? security_capable+0x44/0x130 [ 41.201007][ T540] path_mount+0x66a/0xff0 [ 41.201029][ T540] ? putname+0x113/0x150 [ 41.201056][ T540] __se_sys_mount+0x2bf/0x480 [ 41.201080][ T540] ? ksys_write+0x1f3/0x260 [ 41.201103][ T540] ? __x64_sys_mount+0xf0/0xf0 [ 41.201129][ T540] __x64_sys_mount+0xc3/0xf0 [ 41.201153][ T540] x64_sys_call+0x2021/0x2ee0 [ 41.201174][ T540] do_syscall_64+0x57/0xf0 [ 41.201200][ T540] ? clear_bhb_loop+0x50/0xa0 [ 41.201232][ T540] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.201261][ T540] RIP: 0033:0x7fa1d5d9de99 [ 41.201281][ T540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.201300][ T540] RSP: 002b:00007fa1d47f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 41.201327][ T540] RAX: ffffffffffffffda RBX: 00007fa1d6025fa0 RCX: 00007fa1d5d9de99 [ 41.201344][ T540] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000 [ 41.201379][ T540] RBP: 00007fa1d47f7090 R08: 0000200000000400 R09: 0000000000000000 [ 41.201395][ T540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 41.201409][ T540] R13: 00007fa1d6026038 R14: 00007fa1d6025fa0 R15: 00007ffc53659558 [ 41.201430][ T540] [ 41.206043][ T330] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 41.665913][ T330] usb 4-1: Using ep0 maxpacket: 32 [ 41.672496][ T330] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 41.681713][ T330] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 41.690795][ T330] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 41.701062][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 41.711348][ T330] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 41.721599][ T330] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 41.734905][ T330] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 41.744197][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.752315][ T310] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 41.765604][ T330] usb 4-1: config 0 descriptor?? [ 41.770763][ T31] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 41.927110][ T310] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 41.935577][ T310] usb 1-1: config 179 has no interface number 0 [ 41.942211][ T310] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 64 [ 41.954000][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 41.959261][ T310] usb 1-1: config 179 interface 65 altsetting 12 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 41.971798][ T310] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 41.985318][ T46] tipc: Node number set to 2886997005 [ 41.992378][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 42.000715][ T330] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 42.011536][ T310] usb 1-1: config 179 interface 65 has no altsetting 0 [ 42.018992][ T310] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 42.028427][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.040421][ T31] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 42.049579][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.060096][ T538] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 42.068316][ T31] usb 2-1: New USB device found, idVendor=2b73, idProduct=0034, bcdDevice= 0.40 [ 42.079675][ T310] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input4 [ 42.090939][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.099089][ T430] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 42.111835][ T31] usb 2-1: Product: syz [ 42.118632][ T36] audit: type=1400 audit(1784845612.220:190): avc: denied { read } for pid=96 comm="acpid" name="event3" dev="devtmpfs" ino=473 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.121005][ T31] usb 2-1: Manufacturer: syz [ 42.147575][ T31] usb 2-1: SerialNumber: syz [ 42.156154][ T96] input input4: unable to receive magic message: -110 [ 42.163505][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 42.172672][ T96] input input4: unable to receive magic message: -32 [ 42.186648][ T36] audit: type=1400 audit(1784845612.220:191): avc: denied { open } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=473 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.187134][ T476] input input4: unable to receive magic message: -32 [ 42.220460][ T547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.235910][ T36] audit: type=1400 audit(1784845612.260:192): avc: denied { ioctl } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=473 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.251796][ T96] input input4: unable to receive magic message: -32 [ 42.268479][ T547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.294253][ T36] audit: type=1400 audit(1784845612.320:193): avc: denied { read write } for pid=527 comm="syz.3.70" name="lp0" dev="devtmpfs" ino=469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 42.317518][ T310] usb 4-1: USB disconnect, device number 5 [ 42.323620][ T310] usblp0: removed [ 42.355200][ T36] audit: type=1400 audit(1784845612.320:194): avc: denied { open } for pid=527 comm="syz.3.70" path="/dev/usb/lp0" dev="devtmpfs" ino=469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 42.388456][ T544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.398057][ T544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.414066][ T36] audit: type=1400 audit(1784845612.380:195): avc: denied { read write } for pid=537 comm="syz.0.73" name="event3" dev="devtmpfs" ino=473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 42.438954][ T67] usb 1-1: USB disconnect, device number 6 [ 42.438994][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 42.453315][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 42.454791][ T67] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 42.468359][ T553] Unsupported ieee802154 address type: 0 [ 42.476685][ T31] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 42.484566][ T31] usb 2-1: 1:1 : format type 0 is detected, processed as PCM [ 42.491876][ T36] audit: type=1400 audit(1784845612.380:196): avc: denied { open } for pid=537 comm="syz.0.73" path="/dev/input/event3" dev="devtmpfs" ino=473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 42.491967][ T36] audit: type=1400 audit(1784845612.550:197): avc: denied { bind } for pid=552 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 42.536696][ T31] usb 2-1: 1:1 : sample bitwidth 249 in over sample bytes 4 [ 42.556796][ T31] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 42.567796][ T31] usb 2-1: unit 3 not found! [ 42.576159][ T31] usb 2-1: USB disconnect, device number 9 [ 42.590045][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.805996][ T361] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 42.935965][ T361] usb 4-1: device descriptor read/64, error -71 [ 43.156572][ T430] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 43.167404][ T430] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 43.177194][ T430] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 43.185987][ T361] usb 4-1: device descriptor read/64, error -71 [ 43.191619][ T430] usb 3-1: USB disconnect, device number 8 [ 43.269843][ T36] audit: type=1400 audit(1784845613.370:198): avc: denied { write } for pid=572 comm="syz.2.84" name="mcfilter" dev="proc" ino=4026532551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 43.293879][ T67] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 43.414458][ T583] overlayfs: missing 'lowerdir' [ 43.435924][ T361] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 43.465930][ T67] usb 2-1: Using ep0 maxpacket: 32 [ 43.472248][ T67] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.483406][ T67] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.493388][ T67] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 43.502765][ T67] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.511620][ T67] usb 2-1: config 0 descriptor?? [ 43.517793][ T67] hub 2-1:0.0: USB hub found [ 43.556390][ T336] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 43.575937][ T361] usb 4-1: device descriptor read/64, error -71 [ 43.685944][ T586] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 43.707049][ T336] usb 1-1: config 0 has no interfaces? [ 43.712576][ T336] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 43.721688][ T336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.730141][ T67] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 43.738300][ T336] usb 1-1: config 0 descriptor?? [ 43.817134][ T361] usb 4-1: device descriptor read/64, error -71 [ 43.837080][ T586] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 43.845316][ T586] usb 3-1: config 0 has no interface number 0 [ 43.852842][ T586] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 43.861949][ T586] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.869989][ T586] usb 3-1: Product: syz [ 43.874197][ T586] usb 3-1: Manufacturer: syz [ 43.879046][ T586] usb 3-1: SerialNumber: syz [ 43.884462][ T586] usb 3-1: config 0 descriptor?? [ 43.926031][ T361] usb usb4-port1: attempt power cycle [ 43.949857][ T336] usb 1-1: USB disconnect, device number 7 [ 44.133361][ T67] hid-generic 0003:046D:C31C.0004: unknown main item tag 0x0 [ 44.142172][ T67] hid-generic 0003:046D:C31C.0004: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 44.265939][ T361] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 44.287017][ T361] usb 4-1: device descriptor read/8, error -71 [ 44.417563][ T361] usb 4-1: device descriptor read/8, error -71 [ 44.437836][ T67] usb 2-1: USB disconnect, device number 10 [ 44.494592][ T586] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 44.507137][ T586] asix 3-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 44.518206][ T586] asix 3-1:0.251: probe with driver asix failed with error -71 [ 44.528114][ T586] usb 3-1: USB disconnect, device number 9 [ 44.655946][ T361] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 44.677001][ T361] usb 4-1: device descriptor read/8, error -71 [ 44.683484][ T602] incfs: Error accessing: ./file0. [ 44.688860][ T602] incfs: mount failed -20 [ 44.806941][ T361] usb 4-1: device descriptor read/8, error -71 [ 44.925939][ T361] usb usb4-port1: unable to enumerate USB device [ 45.036651][ T609] incfs: Options parsing error. -22 [ 45.042020][ T609] incfs: mount failed -22 [ 45.240169][ T622] capability: warning: `syz.1.98' uses deprecated v2 capabilities in a way that may be insecure [ 45.395931][ T330] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 45.481766][ T625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.99'. [ 45.525932][ T330] usb 3-1: device descriptor read/64, error -71 [ 45.565804][ T627] 9pnet_fd: Insufficient options for proto=fd [ 45.572710][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 45.572730][ T36] audit: type=1400 audit(1784845615.670:209): avc: denied { read } for pid=626 comm="syz.3.100" name="msr" dev="devtmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 45.601881][ T31] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 45.609703][ T36] audit: type=1400 audit(1784845615.700:210): avc: denied { open } for pid=626 comm="syz.3.100" path="/dev/cpu/1/msr" dev="devtmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 45.659092][ T36] audit: type=1400 audit(1784845615.760:211): avc: denied { cmd } for pid=628 comm="iou-wrk-629" path="socket:[6355]" dev="sockfs" ino=6355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 45.775983][ T330] usb 3-1: device descriptor read/64, error -71 [ 45.805948][ T31] usb 2-1: Invalid ep0 maxpacket: 64 [ 45.956180][ T31] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 46.015908][ T330] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 46.069142][ T36] audit: type=1400 audit(1784845616.170:212): avc: denied { getopt } for pid=638 comm="syz.3.104" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.115980][ T31] usb 2-1: Invalid ep0 maxpacket: 64 [ 46.121712][ T31] usb usb2-port1: attempt power cycle [ 46.155939][ T330] usb 3-1: device descriptor read/64, error -71 [ 46.416055][ T330] usb 3-1: device descriptor read/64, error -71 [ 46.425923][ T586] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 46.475955][ T31] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 46.496319][ T31] usb 2-1: Invalid ep0 maxpacket: 64 [ 46.536059][ T330] usb usb3-port1: attempt power cycle [ 46.555933][ T586] usb 4-1: device descriptor read/64, error -71 [ 46.635978][ T31] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 46.656321][ T31] usb 2-1: Invalid ep0 maxpacket: 64 [ 46.661881][ T31] usb usb2-port1: unable to enumerate USB device [ 46.795963][ T586] usb 4-1: device descriptor read/64, error -71 [ 46.885930][ T330] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 46.907086][ T330] usb 3-1: device descriptor read/8, error -71 [ 47.035966][ T586] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 47.038609][ T330] usb 3-1: device descriptor read/8, error -71 [ 47.185933][ T586] usb 4-1: device descriptor read/64, error -71 [ 47.285943][ T330] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 47.307177][ T330] usb 3-1: device descriptor read/8, error -71 [ 47.425932][ T586] usb 4-1: device descriptor read/64, error -71 [ 47.457096][ T330] usb 3-1: device descriptor read/8, error -71 [ 47.536007][ T586] usb usb4-port1: attempt power cycle [ 47.575938][ T330] usb usb3-port1: unable to enumerate USB device [ 47.636196][ T36] audit: type=1400 audit(1784845617.740:213): avc: denied { map } for pid=640 comm="syz.0.105" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 47.659245][ T36] audit: type=1400 audit(1784845617.740:214): avc: denied { setopt } for pid=640 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.885961][ T586] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 47.907158][ T586] usb 4-1: device descriptor read/8, error -71 [ 47.935965][ T336] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 48.037166][ T586] usb 4-1: device descriptor read/8, error -71 [ 48.085968][ T336] usb 1-1: Using ep0 maxpacket: 32 [ 48.092480][ T336] usb 1-1: unable to get BOS descriptor or descriptor too short [ 48.102510][ T336] usb 1-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 48.111648][ T336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.119958][ T336] usb 1-1: Product: syz [ 48.124163][ T336] usb 1-1: Manufacturer: syz [ 48.128857][ T336] usb 1-1: SerialNumber: syz [ 48.173748][ T36] audit: type=1400 audit(1784845618.270:215): avc: denied { write } for pid=648 comm="syz.2.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 48.275991][ T586] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 48.299369][ T586] usb 4-1: device descriptor read/8, error -71 [ 48.436921][ T586] usb 4-1: device descriptor read/8, error -71 [ 48.537582][ T645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.546604][ T586] usb usb4-port1: unable to enumerate USB device [ 48.553206][ T645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.645953][ T31] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 48.789532][ T336] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 48.796314][ T330] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 48.805232][ T336] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 48.815370][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 48.819987][ T336] usb 1-1: USB disconnect, device number 8 [ 48.829622][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 48.840167][ T476] udevd[476]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.840190][ T31] usb 2-1: config 1 has an invalid interface number: 244 but max is 0 [ 48.864726][ T31] usb 2-1: config 1 has no interface number 0 [ 48.870910][ T31] usb 2-1: config 1 interface 244 has no altsetting 0 [ 48.879228][ T31] usb 2-1: New USB device found, idVendor=05f9, idProduct=4002, bcdDevice=dc.fc [ 48.888369][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.896444][ T31] usb 2-1: Product: syz [ 48.900728][ T31] usb 2-1: Manufacturer: syz [ 48.905323][ T31] usb 2-1: SerialNumber: syz [ 48.957061][ T330] usb 3-1: config index 0 descriptor too short (expected 45, got 28) [ 48.965284][ T330] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 48.972596][ T330] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 48.986944][ T330] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 48.996100][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.004269][ T330] usb 3-1: Product: syz [ 49.008512][ T330] usb 3-1: Manufacturer: syz [ 49.013144][ T330] usb 3-1: SerialNumber: syz [ 49.020244][ T330] rtl8150 3-1:1.0: couldn't find required endpoints [ 49.026962][ T330] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 49.082507][ T658] FAULT_INJECTION: forcing a failure. [ 49.082507][ T658] name failslab, interval 1, probability 0, space 0, times 0 [ 49.095826][ T658] CPU: 0 UID: 0 PID: 658 Comm: syz.3.113 Not tainted syzkaller #0 f0c7936fd393d0f1370a9bd0d5eb1da62a5da95d [ 49.095865][ T658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 49.095878][ T658] Call Trace: [ 49.095885][ T658] [ 49.095894][ T658] __dump_stack+0x21/0x30 [ 49.095928][ T658] dump_stack_lvl+0x140/0x1c0 [ 49.095959][ T658] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.095988][ T658] dump_stack+0x19/0x20 [ 49.096013][ T658] should_fail_ex+0x3c2/0x510 [ 49.096036][ T658] should_failslab+0xac/0x100 [ 49.096061][ T658] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 49.096085][ T658] ? ovl_parse_param_lowerdir+0x1fb/0x6f0 [ 49.096109][ T658] ? kstrdup+0x7b/0x130 [ 49.096137][ T658] kstrdup+0x4d/0x130 [ 49.096164][ T658] ovl_parse_param_lowerdir+0x1fb/0x6f0 [ 49.096187][ T658] ovl_parse_param+0x503/0x8c0 [ 49.096210][ T658] ? __cfi_ovl_parse_param+0x10/0x10 [ 49.096232][ T658] ? static_key_count+0x45/0x70 [ 49.096265][ T658] ? security_fs_context_parse_param+0x27b/0x2a0 [ 49.096292][ T658] vfs_parse_fs_param+0x1ef/0x470 [ 49.096319][ T658] vfs_parse_monolithic_sep+0x279/0x360 [ 49.096345][ T658] ? __kmalloc_cache_noprof+0x23c/0x470 [ 49.096366][ T658] ? __cfi_ovl_next_opt+0x10/0x10 [ 49.096388][ T658] ? __cfi_vfs_parse_monolithic_sep+0x10/0x10 [ 49.096414][ T658] ? ovl_init_fs_context+0x192/0x790 [ 49.096435][ T658] ? alloc_fs_context+0x5dd/0x800 [ 49.096460][ T658] ovl_parse_monolithic+0x28/0x40 [ 49.096483][ T658] parse_monolithic_mount_data+0x7f/0x90 [ 49.096510][ T658] do_new_mount+0x222/0xb40 [ 49.096529][ T658] ? security_capable+0x44/0x130 [ 49.096550][ T658] path_mount+0x66a/0xff0 [ 49.096568][ T658] ? putname+0x113/0x150 [ 49.096590][ T658] __se_sys_mount+0x2bf/0x480 [ 49.096610][ T658] ? ksys_write+0x1f3/0x260 [ 49.096631][ T658] ? __x64_sys_mount+0xf0/0xf0 [ 49.096653][ T658] __x64_sys_mount+0xc3/0xf0 [ 49.096672][ T658] x64_sys_call+0x2021/0x2ee0 [ 49.096689][ T658] do_syscall_64+0x57/0xf0 [ 49.096711][ T658] ? clear_bhb_loop+0x50/0xa0 [ 49.096736][ T658] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.096764][ T658] RIP: 0033:0x7f66a099de99 [ 49.096780][ T658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.096796][ T658] RSP: 002b:00007f66a180f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 49.096817][ T658] RAX: ffffffffffffffda RBX: 00007f66a0c25fa0 RCX: 00007f66a099de99 [ 49.096832][ T658] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000 [ 49.096845][ T658] RBP: 00007f66a180f090 R08: 0000200000000400 R09: 0000000000000000 [ 49.096858][ T658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 49.096870][ T658] R13: 00007f66a0c26038 R14: 00007f66a0c25fa0 R15: 00007ffc9d24c768 [ 49.096890][ T658] [ 49.230289][ T330] usb 3-1: USB disconnect, device number 14 [ 49.422158][ T36] audit: type=1400 audit(1784845619.520:216): avc: denied { bind } for pid=664 comm="syz.3.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.441675][ T36] audit: type=1400 audit(1784845619.520:217): avc: denied { name_bind } for pid=664 comm="syz.3.116" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 49.462740][ T36] audit: type=1400 audit(1784845619.520:218): avc: denied { node_bind } for pid=664 comm="syz.3.116" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 49.540493][ T676] netlink: 20 bytes leftover after parsing attributes in process `syz.3.119'. [ 49.555644][ T676] capability: warning: `syz.3.119' uses 32-bit capabilities (legacy support in use) [ 49.636780][ T336] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 49.797649][ T336] usb 1-1: unable to get BOS descriptor or descriptor too short [ 49.815907][ T336] usb 1-1: not running at top speed; connect to a high speed hub [ 49.826273][ T336] usb 1-1: config 1 has an invalid interface number: 234 but max is 0 [ 49.834546][ T336] usb 1-1: config 1 has no interface number 0 [ 49.856069][ T336] usb 1-1: config 1 interface 234 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 49.868659][ T336] usb 1-1: config 1 interface 234 has no altsetting 0 [ 49.886999][ T336] usb 1-1: New USB device found, idVendor=0421, idProduct=0275, bcdDevice=30.4a [ 49.896140][ T336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.904184][ T336] usb 1-1: Product: syz [ 49.915910][ T336] usb 1-1: Manufacturer: syz [ 49.920582][ T336] usb 1-1: SerialNumber: syz [ 49.928334][ T661] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 50.105931][ T361] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 50.139161][ T661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.148361][ T661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.176484][ T336] usb 1-1: bad CDC descriptors [ 50.181528][ T336] cdc_acm 1-1:1.234: Zero length descriptor references [ 50.188470][ T336] cdc_acm 1-1:1.234: probe with driver cdc_acm failed with error -22 [ 50.197952][ T336] usb 1-1: USB disconnect, device number 9 [ 50.235917][ T361] usb 3-1: device descriptor read/64, error -71 [ 50.433764][ T683] tipc: Started in network mode [ 50.438837][ T683] tipc: Node identity 9a904e220cb8, cluster identity 4711 [ 50.446353][ T683] tipc: Enabled bearer , priority 0 [ 50.471007][ T683] syzkaller0: entered promiscuous mode [ 50.476622][ T683] syzkaller0: entered allmulticast mode [ 50.482553][ T683] tipc: Resetting bearer [ 50.488398][ T361] usb 3-1: device descriptor read/64, error -71 [ 50.544976][ T683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.122'. [ 50.674164][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 50.674182][ T36] audit: type=1400 audit(1784845620.770:226): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 50.735933][ T361] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 50.774665][ T36] audit: type=1400 audit(1784845620.870:227): avc: denied { read } for pid=685 comm="syz.3.123" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 50.798321][ T36] audit: type=1400 audit(1784845620.870:228): avc: denied { open } for pid=685 comm="syz.3.123" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 50.823281][ T36] audit: type=1400 audit(1784845620.900:229): avc: denied { ioctl } for pid=685 comm="syz.3.123" path="/dev/usbmon0" dev="devtmpfs" ino=87 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 50.850775][ T36] audit: type=1400 audit(1784845620.920:230): avc: denied { ioctl } for pid=685 comm="syz.3.123" path="socket:[6033]" dev="sockfs" ino=6033 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.866116][ T361] usb 3-1: device descriptor read/64, error -71 [ 50.876678][ T36] audit: type=1400 audit(1784845620.920:231): avc: denied { write } for pid=685 comm="syz.3.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.901571][ T36] audit: type=1400 audit(1784845620.920:232): avc: denied { write } for pid=685 comm="syz.3.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.985966][ T46] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 51.075924][ T336] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 51.127464][ T684] tipc: Resetting bearer [ 51.142389][ T684] tipc: Disabling bearer [ 51.146138][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 51.148393][ T361] usb 3-1: device descriptor read/64, error -71 [ 51.159208][ T46] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.170733][ T46] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 51.180711][ T46] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 51.190573][ T46] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 51.205380][ T46] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 51.214482][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 51.226641][ T46] usb 1-1: SerialNumber: syz [ 51.232375][ T689] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 51.236094][ T336] usb 4-1: device descriptor read/64, error -71 [ 51.240600][ T689] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 51.254743][ T46] hub 1-1:1.0: bad descriptor, ignoring hub [ 51.260753][ T46] hub 1-1:1.0: probe with driver hub failed with error -5 [ 51.276094][ T361] usb usb3-port1: attempt power cycle [ 51.318950][ T31] usb 2-1: USB disconnect, device number 15 [ 51.349157][ T36] audit: type=1400 audit(1784845621.450:233): avc: denied { create } for pid=690 comm="syz.1.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.357451][ T691] netlink: 'syz.1.125': attribute type 3 has an invalid length. [ 51.386036][ T691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.125'. [ 51.455375][ T689] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 51.463291][ T689] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 51.515940][ T336] usb 4-1: device descriptor read/64, error -71 [ 51.655963][ T361] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 51.677029][ T361] usb 3-1: device descriptor read/8, error -71 [ 51.755927][ T336] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 51.807010][ T361] usb 3-1: device descriptor read/8, error -71 [ 51.874901][ T46] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 51.893871][ T36] audit: type=1400 audit(1784845621.990:234): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 51.897381][ T336] usb 4-1: device descriptor read/64, error -71 [ 51.925085][ T36] audit: type=1400 audit(1784845622.020:235): avc: denied { search } for pid=150 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.055974][ T361] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 52.076962][ T361] usb 3-1: device descriptor read/8, error -71 [ 52.155940][ T336] usb 4-1: device descriptor read/64, error -71 [ 52.186617][ T709] loop7: detected capacity change from 0 to 7 [ 52.193345][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.202608][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 52.211299][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.220493][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 52.228407][ T709] loop7: unable to read partition table [ 52.230723][ T361] usb 3-1: device descriptor read/8, error -71 [ 52.234880][ T709] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 52.244199][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.262910][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 52.271188][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.271202][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 52.271233][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 52.281059][ T336] usb usb4-port1: attempt power cycle [ 52.304979][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.314227][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 52.322320][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.322797][ T31] usb 1-1: USB disconnect, device number 10 [ 52.331518][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 52.339713][ T31] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 52.347789][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 52.364148][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 52.376597][ T361] usb usb3-port1: unable to enumerate USB device [ 52.555937][ T46] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 52.645945][ T336] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 52.667043][ T336] usb 4-1: device descriptor read/8, error -71 [ 52.685949][ T46] usb 2-1: device descriptor read/64, error -71 [ 52.798337][ T336] usb 4-1: device descriptor read/8, error -71 [ 52.865714][ T742] SELinux: Context is not valid (left unmapped). [ 52.894483][ T744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.130'. [ 52.904021][ T744] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 52.935975][ T46] usb 2-1: device descriptor read/64, error -71 [ 53.035961][ T336] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 53.067190][ T336] usb 4-1: device descriptor read/8, error -71 [ 53.165957][ T430] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 53.175926][ T46] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 53.197097][ T336] usb 4-1: device descriptor read/8, error -71 [ 53.235948][ T31] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 53.305949][ T46] usb 2-1: device descriptor read/64, error -71 [ 53.306288][ T336] usb usb4-port1: unable to enumerate USB device [ 53.326200][ T430] usb 1-1: Using ep0 maxpacket: 32 [ 53.332636][ T430] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.343632][ T430] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.353501][ T430] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 53.362630][ T430] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.371391][ T430] usb 1-1: config 0 descriptor?? [ 53.377810][ T430] hub 1-1:0.0: USB hub found [ 53.385961][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 53.392166][ T31] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 53.400469][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 53.411247][ T31] usb 3-1: config 0 has no interface number 0 [ 53.417451][ T31] usb 3-1: config 0 interface 31 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 53.428629][ T31] usb 3-1: config 0 interface 31 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 53.443211][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 53.452300][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.460370][ T31] usb 3-1: Product: syz [ 53.464577][ T31] usb 3-1: Manufacturer: syz [ 53.469258][ T31] usb 3-1: SerialNumber: syz [ 53.474523][ T31] usb 3-1: config 0 descriptor?? [ 53.480659][ T31] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 53.487062][ T31] usb 3-1: No valid video chain found. [ 53.565929][ T46] usb 2-1: device descriptor read/64, error -71 [ 53.584753][ T430] hub 1-1:0.0: 26 ports detected [ 53.590630][ T430] hub 1-1:0.0: insufficient power available to use all downstream ports [ 53.676035][ T46] usb usb2-port1: attempt power cycle [ 53.689288][ T361] usb 3-1: USB disconnect, device number 19 [ 54.015962][ T46] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 54.037071][ T46] usb 2-1: device descriptor read/8, error -71 [ 54.167181][ T46] usb 2-1: device descriptor read/8, error -71 [ 54.194027][ T430] usb 1-1: USB disconnect, device number 11 [ 54.405978][ T46] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 54.427131][ T46] usb 2-1: device descriptor read/8, error -71 [ 54.455966][ T336] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 54.556948][ T46] usb 2-1: device descriptor read/8, error -71 [ 54.607437][ T336] usb 3-1: unable to get BOS descriptor or descriptor too short [ 54.615487][ T336] usb 3-1: not running at top speed; connect to a high speed hub [ 54.627636][ T336] usb 3-1: config 1 has an invalid interface number: 244 but max is 0 [ 54.635843][ T336] usb 3-1: config 1 has no interface number 0 [ 54.642024][ T336] usb 3-1: config 1 interface 244 has no altsetting 0 [ 54.650217][ T336] usb 3-1: New USB device found, idVendor=05f9, idProduct=4002, bcdDevice=dc.fc [ 54.659348][ T336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.666616][ T46] usb usb2-port1: unable to enumerate USB device [ 54.667885][ T336] usb 3-1: Product: syz [ 54.678905][ T336] usb 3-1: Manufacturer: syz [ 54.683568][ T336] usb 3-1: SerialNumber: syz [ 54.945934][ T46] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 54.955917][ T361] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 55.075933][ T46] usb 4-1: device descriptor read/64, error -71 [ 55.105930][ T361] usb 1-1: Using ep0 maxpacket: 16 [ 55.112350][ T361] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.123354][ T361] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 55.133253][ T361] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 55.142982][ T361] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 55.156782][ T361] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 55.165915][ T361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 55.173948][ T361] usb 1-1: SerialNumber: syz [ 55.179750][ T763] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 55.187264][ T763] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 55.195183][ T361] hub 1-1:1.0: bad descriptor, ignoring hub [ 55.207035][ T361] hub 1-1:1.0: probe with driver hub failed with error -5 [ 55.326030][ T46] usb 4-1: device descriptor read/64, error -71 [ 55.396214][ T763] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 55.403492][ T763] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 55.565928][ T46] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 55.605937][ T586] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 55.695920][ T46] usb 4-1: device descriptor read/64, error -71 [ 55.757226][ T586] usb 2-1: unable to get BOS descriptor or descriptor too short [ 55.765319][ T586] usb 2-1: not running at top speed; connect to a high speed hub [ 55.775159][ T586] usb 2-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 55.784273][ T586] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.792322][ T586] usb 2-1: Product: syz [ 55.796731][ T586] usb 2-1: Manufacturer: syz [ 55.801362][ T586] usb 2-1: SerialNumber: syz [ 55.815778][ T361] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 55.955923][ T46] usb 4-1: device descriptor read/64, error -71 [ 56.010780][ T586] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 56.026693][ T586] usb 2-1: USB disconnect, device number 20 [ 56.038822][ T476] udevd[476]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.066046][ T46] usb usb4-port1: attempt power cycle [ 56.220247][ T586] usb 1-1: USB disconnect, device number 12 [ 56.228080][ T586] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 56.405932][ T46] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 56.427071][ T46] usb 4-1: device descriptor read/8, error -71 [ 56.525404][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 56.525424][ T36] audit: type=1400 audit(1784845626.620:250): avc: denied { write } for pid=809 comm="syz.1.138" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.558402][ T46] usb 4-1: device descriptor read/8, error -71 [ 56.760136][ T36] audit: type=1400 audit(1784845626.860:251): avc: denied { create } for pid=814 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 56.780088][ T36] audit: type=1400 audit(1784845626.880:252): avc: denied { ioctl } for pid=814 comm="syz.0.140" path="socket:[6745]" dev="sockfs" ino=6745 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 56.804589][ T36] audit: type=1400 audit(1784845626.880:253): avc: denied { read } for pid=814 comm="syz.0.140" path="socket:[6746]" dev="sockfs" ino=6746 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.827407][ T46] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 56.835958][ T430] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 56.843955][ T36] audit: type=1400 audit(1784845626.940:254): avc: denied { ioctl } for pid=814 comm="syz.0.140" path="socket:[6746]" dev="sockfs" ino=6746 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.869538][ T46] usb 4-1: device descriptor read/8, error -71 [ 57.007077][ T46] usb 4-1: device descriptor read/8, error -71 [ 57.016053][ T430] usb 2-1: Using ep0 maxpacket: 8 [ 57.023625][ T430] usb 2-1: config 248 has an invalid interface number: 115 but max is 2 [ 57.051712][ T430] usb 2-1: config 248 has an invalid interface number: 241 but max is 2 [ 57.060309][ T430] usb 2-1: config 248 has an invalid descriptor of length 0, skipping remainder of the config [ 57.072284][ T430] usb 2-1: config 248 has 2 interfaces, different from the descriptor's value: 3 [ 57.082183][ T430] usb 2-1: config 248 has no interface number 0 [ 57.088728][ T430] usb 2-1: config 248 has no interface number 1 [ 57.095134][ T430] usb 2-1: config 248 interface 115 altsetting 128 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 57.106836][ T430] usb 2-1: config 248 interface 115 altsetting 128 bulk endpoint 0x2 has invalid maxpacket 1023 [ 57.117605][ T46] usb usb4-port1: unable to enumerate USB device [ 57.124516][ T430] usb 2-1: config 248 interface 241 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 57.135733][ T430] usb 2-1: config 248 interface 241 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 11 [ 57.149338][ T430] usb 2-1: config 248 interface 115 has no altsetting 0 [ 57.156564][ T430] usb 2-1: config 248 interface 241 has no altsetting 0 [ 57.165200][ T430] usb 2-1: New USB device found, idVendor=4971, idProduct=8017, bcdDevice=5f.a1 [ 57.174633][ T430] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.182835][ T430] usb 2-1: Product: syz [ 57.187272][ T430] usb 2-1: Manufacturer: syz [ 57.191971][ T430] usb 2-1: SerialNumber: syz [ 57.199327][ T812] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 57.236021][ T336] usb 3-1: USB disconnect, device number 20 [ 57.268044][ T812] overlayfs: failed to resolve 'rootcontext=user_u': -2 [ 57.276923][ T430] usb-storage 2-1:248.115: USB Mass Storage device detected [ 57.286439][ T430] usb-storage 2-1:248.115: Quirks match for vid 4971 pid 8017: 4000000 [ 57.319926][ T430] usb-storage 2-1:248.241: USB Mass Storage device detected [ 57.328043][ T430] usb-storage 2-1:248.241: Quirks match for vid 4971 pid 8017: 4000000 [ 57.360438][ T430] usb 2-1: USB disconnect, device number 21 [ 57.606822][ T36] audit: type=1326 audit(1784845627.710:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=825 comm="syz.0.143" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f17ea39de99 code=0x0 [ 57.635914][ T336] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 57.785920][ T336] usb 3-1: Using ep0 maxpacket: 32 [ 57.792292][ T336] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 57.801114][ T336] usb 3-1: config 0 has no interface number 0 [ 57.807510][ T336] usb 3-1: config 0 interface 184 has no altsetting 0 [ 57.816039][ T336] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 57.826025][ T336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.834084][ T336] usb 3-1: Product: syz [ 57.838490][ T336] usb 3-1: Manufacturer: syz [ 57.843162][ T336] usb 3-1: SerialNumber: syz [ 57.849382][ T336] usb 3-1: config 0 descriptor?? [ 57.861421][ T336] smsc75xx v1.0.0 [ 57.974331][ T36] audit: type=1400 audit(1784845628.070:256): avc: denied { map } for pid=835 comm="syz.1.145" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 58.112396][ T844] netlink: 'syz.1.148': attribute type 4 has an invalid length. [ 58.120180][ T844] netlink: 'syz.1.148': attribute type 2 has an invalid length. [ 58.135907][ T430] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 58.287535][ T430] usb 4-1: unable to get BOS descriptor or descriptor too short [ 58.295963][ T430] usb 4-1: config 1 has an invalid descriptor of length 113, skipping remainder of the config [ 58.306286][ T430] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 58.315256][ T430] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 58.329632][ T430] usb 4-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 58.338709][ T430] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.346738][ T46] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 58.354336][ T430] usb 4-1: Product: syz [ 58.358902][ T430] usb 4-1: Manufacturer: syz [ 58.363528][ T430] usb 4-1: SerialNumber: syz [ 58.507300][ T46] usb 2-1: config index 0 descriptor too short (expected 64575, got 68) [ 58.515756][ T46] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.526653][ T46] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 58.540518][ T46] usb 2-1: config index 1 descriptor too short (expected 64575, got 68) [ 58.548961][ T46] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.559144][ T46] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 58.574292][ T430] usb 4-1: unit 2 not found! [ 58.579032][ T430] usb 4-1: unit 0 not found! [ 58.583681][ T46] usb 2-1: string descriptor 0 read error: -71 [ 58.589965][ T46] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 58.599091][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.609360][ T430] usb 4-1: USB disconnect, device number 22 [ 58.616591][ T46] usb 2-1: can't set config #1, error -71 [ 58.624816][ T46] usb 2-1: USB disconnect, device number 22 [ 58.662055][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.735942][ T31] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 58.878306][ T336] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 58.885983][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 58.889391][ T336] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 58.895727][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.904621][ T336] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 58.914362][ T31] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 58.925704][ T336] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 58.934923][ T31] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 58.945168][ T336] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 58.954259][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 58.965030][ T336] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 58.978454][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.987455][ T336] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 58.996203][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 59.010943][ T336] usb 3-1: USB disconnect, device number 21 [ 59.017347][ T31] usb 1-1: SerialNumber: syz [ 59.025785][ T847] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 59.033035][ T847] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 59.040684][ T31] hub 1-1:1.0: bad descriptor, ignoring hub [ 59.046654][ T31] hub 1-1:1.0: probe with driver hub failed with error -5 [ 59.242131][ T847] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 59.249331][ T847] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 59.288084][ T36] audit: type=1400 audit(1784845629.390:257): avc: denied { name_bind } for pid=853 comm="syz.1.152" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 59.366417][ T67] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 59.421877][ T36] audit: type=1400 audit(1784845629.520:258): avc: denied { getopt } for pid=856 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 59.441270][ T36] audit: type=1400 audit(1784845629.530:259): avc: denied { create } for pid=856 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 59.477300][ T859] overlayfs: failed to resolve 'lowerdir=./file0': -2 [ 59.517302][ T67] usb 4-1: unable to get BOS descriptor or descriptor too short [ 59.535906][ T67] usb 4-1: not running at top speed; connect to a high speed hub [ 59.546251][ T67] usb 4-1: config 1 has an invalid interface number: 244 but max is 0 [ 59.554481][ T67] usb 4-1: config 1 has no interface number 0 [ 59.565954][ T67] usb 4-1: config 1 interface 244 has no altsetting 0 [ 59.577140][ T67] usb 4-1: New USB device found, idVendor=05f9, idProduct=4002, bcdDevice=dc.fc [ 59.587049][ T67] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.595074][ T67] usb 4-1: Product: syz [ 59.601236][ T67] usb 4-1: Manufacturer: syz [ 59.605885][ T67] usb 4-1: SerialNumber: syz [ 59.664265][ T31] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 59.926543][ C1] cdc_ether 1-1:1.0 usb0: CDC: unexpected notification 68! [ 60.074382][ T31] usb 1-1: USB disconnect, device number 13 [ 60.081185][ T31] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 60.415947][ T336] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 60.565917][ T336] usb 3-1: Using ep0 maxpacket: 32 [ 60.572095][ T336] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 60.580538][ T336] usb 3-1: config 0 has no interface number 0 [ 60.586767][ T336] usb 3-1: config 0 interface 184 has no altsetting 0 [ 60.598496][ T336] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 60.610306][ T336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.619105][ T336] usb 3-1: Product: syz [ 60.623381][ T336] usb 3-1: Manufacturer: syz [ 60.628124][ T336] usb 3-1: SerialNumber: syz [ 60.633590][ T336] usb 3-1: config 0 descriptor?? [ 60.639494][ T336] smsc75xx v1.0.0 [ 60.682736][ T927] overlay: ./file0 is not a directory [ 60.714521][ T933] FAULT_INJECTION: forcing a failure. [ 60.714521][ T933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.727742][ T933] CPU: 0 UID: 0 PID: 933 Comm: syz.1.166 Not tainted syzkaller #0 f0c7936fd393d0f1370a9bd0d5eb1da62a5da95d [ 60.727777][ T933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 60.727792][ T933] Call Trace: [ 60.727799][ T933] [ 60.727808][ T933] __dump_stack+0x21/0x30 [ 60.727852][ T933] dump_stack_lvl+0x140/0x1c0 [ 60.727878][ T933] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.727908][ T933] dump_stack+0x19/0x20 [ 60.727933][ T933] should_fail_ex+0x3c2/0x510 [ 60.727955][ T933] should_fail+0xf/0x20 [ 60.727975][ T933] should_fail_usercopy+0x1e/0x30 [ 60.727999][ T933] _copy_from_user+0x20/0xa0 [ 60.728025][ T933] pending_reads_dispatch_ioctl+0x561/0x2080 [ 60.728056][ T933] ? proc_fail_nth_write+0x184/0x220 [ 60.728085][ T933] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 60.728113][ T933] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 60.728143][ T933] ? selinux_file_ioctl+0x732/0x1480 [ 60.728163][ T933] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 60.728182][ T933] ? __cfi_vfs_write+0x10/0x10 [ 60.728201][ T933] ? __kasan_check_write+0x18/0x20 [ 60.728220][ T933] ? mutex_unlock+0x90/0x240 [ 60.728246][ T933] ? __cfi_mutex_unlock+0x10/0x10 [ 60.728274][ T933] ? bpf_lsm_file_ioctl+0xd/0x20 [ 60.728299][ T933] ? security_file_ioctl+0x3e/0x110 [ 60.728328][ T933] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 60.728357][ T933] __se_sys_ioctl+0x132/0x1b0 [ 60.728380][ T933] __x64_sys_ioctl+0x7f/0xa0 [ 60.728404][ T933] x64_sys_call+0x1878/0x2ee0 [ 60.728422][ T933] do_syscall_64+0x57/0xf0 [ 60.728443][ T933] ? clear_bhb_loop+0x50/0xa0 [ 60.728470][ T933] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.728495][ T933] RIP: 0033:0x7fa1d5d9de99 [ 60.728511][ T933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.728529][ T933] RSP: 002b:00007fa1d47f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.728550][ T933] RAX: ffffffffffffffda RBX: 00007fa1d6025fa0 RCX: 00007fa1d5d9de99 [ 60.728565][ T933] RDX: 00002000000000c0 RSI: 0000000040106726 RDI: 0000000000000004 [ 60.728579][ T933] RBP: 00007fa1d47f7090 R08: 0000000000000000 R09: 0000000000000000 [ 60.728592][ T933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.728604][ T933] R13: 00007fa1d6026038 R14: 00007fa1d6025fa0 R15: 00007ffc53659558 [ 60.728621][ T933] [ 61.095976][ T31] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 61.235977][ T46] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 61.255906][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 61.262224][ T31] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 61.270532][ T31] usb 2-1: config 0 has no interface number 0 [ 61.276738][ T31] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 61.287748][ T31] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 61.297610][ T31] usb 2-1: config 0 interface 85 has no altsetting 0 [ 61.305825][ T31] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 61.314933][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.323167][ T31] usb 2-1: Product: syz [ 61.327370][ T31] usb 2-1: Manufacturer: syz [ 61.331980][ T31] usb 2-1: SerialNumber: syz [ 61.337491][ T31] usb 2-1: config 0 descriptor?? [ 61.398450][ T46] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 61.407684][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.415706][ T46] usb 1-1: Product: syz [ 61.419918][ T46] usb 1-1: Manufacturer: syz [ 61.424573][ T46] usb 1-1: SerialNumber: syz [ 61.544677][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 61.544703][ T36] audit: type=1326 audit(1784845631.640:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=937 comm="syz.1.168" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1d5d9de99 code=0x0 [ 61.784979][ T336] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 61.795918][ T336] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 61.805318][ T336] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 61.816396][ T336] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 61.826225][ T336] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 61.836596][ T336] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 61.846073][ T336] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 61.855568][ T336] usb 3-1: USB disconnect, device number 22 [ 62.113118][ T67] usb 4-1: USB disconnect, device number 23 [ 62.545944][ T67] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 62.695901][ T67] usb 3-1: Using ep0 maxpacket: 16 [ 62.702343][ T67] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.713290][ T67] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 62.723193][ T67] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 62.732893][ T67] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 62.746668][ T67] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 62.755738][ T67] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 62.763783][ T67] usb 3-1: SerialNumber: syz [ 62.769502][ T947] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 62.776777][ T947] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 62.784702][ T67] hub 3-1:1.0: bad descriptor, ignoring hub [ 62.790672][ T67] hub 3-1:1.0: probe with driver hub failed with error -5 [ 62.985823][ T947] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 62.993300][ T947] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 63.124517][ T965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.174'. [ 63.197747][ T970] FAULT_INJECTION: forcing a failure. [ 63.197747][ T970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.210941][ T970] CPU: 1 UID: 0 PID: 970 Comm: syz.3.176 Not tainted syzkaller #0 f0c7936fd393d0f1370a9bd0d5eb1da62a5da95d [ 63.210974][ T970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 63.210989][ T970] Call Trace: [ 63.210997][ T970] [ 63.211009][ T970] __dump_stack+0x21/0x30 [ 63.211047][ T970] dump_stack_lvl+0x140/0x1c0 [ 63.211080][ T970] ? __cfi_dump_stack_lvl+0x10/0x10 [ 63.211113][ T970] ? check_stack_object+0x138/0x150 [ 63.211139][ T970] dump_stack+0x19/0x20 [ 63.211169][ T970] should_fail_ex+0x3c2/0x510 [ 63.211195][ T970] should_fail+0xf/0x20 [ 63.211217][ T970] should_fail_usercopy+0x1e/0x30 [ 63.211245][ T970] _copy_to_user+0x24/0xa0 [ 63.211276][ T970] simple_read_from_buffer+0xed/0x160 [ 63.211307][ T970] proc_fail_nth_read+0x1aa/0x220 [ 63.211362][ T970] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 63.211394][ T970] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 63.211429][ T970] ? bpf_lsm_file_permission+0xd/0x20 [ 63.211459][ T970] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 63.211492][ T970] vfs_read+0x28b/0xc70 [ 63.211507][ T970] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 63.211551][ T970] ? __cfi_vfs_read+0x10/0x10 [ 63.211572][ T970] ? __kasan_check_write+0x18/0x20 [ 63.211594][ T970] ? mutex_lock+0x97/0x1d0 [ 63.211625][ T970] ? __cfi_mutex_lock+0x10/0x10 [ 63.211667][ T970] ksys_read+0x145/0x260 [ 63.211690][ T970] ? __cfi_ksys_read+0x10/0x10 [ 63.211713][ T970] ? __kasan_check_read+0x15/0x20 [ 63.211734][ T970] __x64_sys_read+0x7f/0x90 [ 63.211762][ T970] x64_sys_call+0x2638/0x2ee0 [ 63.211776][ T970] do_syscall_64+0x57/0xf0 [ 63.211793][ T970] ? clear_bhb_loop+0x50/0xa0 [ 63.211830][ T970] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 63.211859][ T970] RIP: 0033:0x7f66a095e6ce [ 63.211877][ T970] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 63.211902][ T970] RSP: 002b:00007f66a180efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 63.211920][ T970] RAX: ffffffffffffffda RBX: 00007f66a180f6c0 RCX: 00007f66a095e6ce [ 63.211952][ T970] RDX: 000000000000000f RSI: 00007f66a180f0a0 RDI: 0000000000000005 [ 63.211981][ T970] RBP: 00007f66a180f090 R08: 0000000000000000 R09: 0000000000000000 [ 63.211997][ T970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.212011][ T970] R13: 00007f66a0c26038 R14: 00007f66a0c25fa0 R15: 00007ffc9d24c768 [ 63.212031][ T970] [ 63.419138][ T67] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 63.480415][ T36] audit: type=1400 audit(1784845633.580:264): avc: denied { remount } for pid=971 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 63.510696][ T36] audit: type=1400 audit(1784845633.610:265): avc: denied { read write } for pid=971 comm="syz.3.177" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 63.534068][ T36] audit: type=1400 audit(1784845633.610:266): avc: denied { open } for pid=971 comm="syz.3.177" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 63.557707][ T36] audit: type=1400 audit(1784845633.620:267): avc: denied { listen } for pid=971 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.577698][ T36] audit: type=1400 audit(1784845633.620:268): avc: denied { accept } for pid=971 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.776561][ C0] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 68! [ 63.816877][ T586] usb 3-1: USB disconnect, device number 23 [ 63.823489][ T586] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 63.844511][ T31] usb 2-1: USB disconnect, device number 23 [ 63.913940][ T36] audit: type=1400 audit(1784845634.010:269): avc: denied { mounton } for pid=993 comm="syz.1.179" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 63.945942][ T67] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 64.076060][ T46] usb 1-1: USB disconnect, device number 14 [ 64.117188][ T67] usb 4-1: unable to get BOS descriptor or descriptor too short [ 64.125166][ T67] usb 4-1: not running at top speed; connect to a high speed hub [ 64.136151][ T67] usb 4-1: config 1 has an invalid interface number: 244 but max is 0 [ 64.144348][ T67] usb 4-1: config 1 has no interface number 0 [ 64.153821][ T67] usb 4-1: config 1 interface 244 has no altsetting 0 [ 64.161953][ T67] usb 4-1: New USB device found, idVendor=05f9, idProduct=4002, bcdDevice=dc.fc [ 64.172062][ T67] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.180086][ T67] usb 4-1: Product: syz [ 64.184255][ T67] usb 4-1: Manufacturer: syz [ 64.188874][ T67] usb 4-1: SerialNumber: syz [ 64.295967][ T31] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 64.376350][ T1028] mmap: syz.2.183 (1028) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 64.389259][ T36] audit: type=1400 audit(1784845634.490:270): avc: denied { setopt } for pid=1027 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 64.427791][ T46] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 64.445913][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 64.452182][ T31] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 64.460547][ T31] usb 2-1: config 0 has no interface number 0 [ 64.466763][ T31] usb 2-1: config 0 interface 184 has no altsetting 0 [ 64.475060][ T31] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 64.484182][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.492240][ T31] usb 2-1: Product: syz [ 64.496461][ T31] usb 2-1: Manufacturer: syz [ 64.501062][ T31] usb 2-1: SerialNumber: syz [ 64.506606][ T31] usb 2-1: config 0 descriptor?? [ 64.512327][ T31] smsc75xx v1.0.0 [ 64.586889][ T46] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 64.597797][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.608903][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.618795][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 64.632722][ T46] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 64.641857][ T46] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 64.649978][ T46] usb 1-1: Manufacturer: syz [ 64.655451][ T46] usb 1-1: config 0 descriptor?? [ 64.685936][ T430] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 64.837002][ T430] usb 3-1: config 185 has an invalid interface number: 216 but max is 0 [ 64.845480][ T430] usb 3-1: config 185 has no interface number 0 [ 64.851773][ T430] usb 3-1: config 185 interface 216 altsetting 212 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 64.863044][ T430] usb 3-1: config 185 interface 216 has no altsetting 0 [ 64.871706][ T430] usb 3-1: New USB device found, idVendor=0df6, idProduct=0076, bcdDevice=d5.63 [ 64.881134][ T46] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 64.888405][ T46] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 64.895891][ T430] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.903915][ T430] usb 3-1: Product: syz [ 64.908534][ T430] usb 3-1: Manufacturer: syz [ 64.913746][ T430] usb 3-1: SerialNumber: syz [ 64.918694][ T46] appleir 0003:05AC:8243.0005: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 65.223515][ T586] usb 1-1: USB disconnect, device number 15 [ 65.248774][ T36] audit: type=1400 audit(1784845635.350:271): avc: denied { map } for pid=1036 comm="syz.0.185" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.273069][ T36] audit: type=1400 audit(1784845635.350:272): avc: denied { setopt } for pid=1036 comm="syz.0.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.341602][ T430] usb 3-1: USB disconnect, device number 24 [ 65.358020][ T1043] ------------[ cut here ]------------ [ 65.363558][ T1043] WARNING: CPU: 0 PID: 1043 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 65.373128][ T1043] Modules linked in: [ 65.377085][ T1043] CPU: 0 UID: 0 PID: 1043 Comm: syz.0.187 Not tainted syzkaller #0 f0c7936fd393d0f1370a9bd0d5eb1da62a5da95d [ 65.388600][ T1043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 65.398707][ T1043] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 65.404817][ T1043] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 13 dd 0b 06 00 0f 85 c2 00 00 00 c6 05 06 dd 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 65.424553][ T1043] RSP: 0018:ffffc9000f60f980 EFLAGS: 00010246 [ 65.430686][ T1043] RAX: 0000000000000000 RBX: 0000000000000034 RCX: 0000000000000000 [ 65.438724][ T1043] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000f60fa38 [ 65.446812][ T1043] RBP: ffffc9000f60faa8 R08: ffffc9000f60fa37 R09: 0000000000000000 [ 65.454883][ T1043] R10: ffffc9000f60fa20 R11: fffff52001ec1f47 R12: ffffc9000f60f9c0 [ 65.462916][ T1043] R13: dffffc0000000000 R14: 1ffff92001ec1f34 R15: 0000000000000000 [ 65.470952][ T1043] FS: 00007f17eb2ab6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 65.479958][ T1043] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.486600][ T1043] CR2: 000000110c2e2f26 CR3: 000000011be0a000 CR4: 00000000003526b0 [ 65.494617][ T1043] Call Trace: [ 65.497952][ T1043] [ 65.500914][ T1043] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 65.506685][ T1043] ? try_to_wake_up+0x119e/0x1fd0 [ 65.511751][ T1043] ? plist_check_list+0x2a8/0x2c0 [ 65.516830][ T1043] ? pending_reads_dispatch_ioctl+0xc86/0x2080 [ 65.520659][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 65.523040][ T1043] ___kmalloc_large_node+0x81/0x220 [ 65.539090][ T1043] ? pending_reads_dispatch_ioctl+0xc86/0x2080 [ 65.541716][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 65.545298][ T1043] __kmalloc_large_node_noprof+0x1e/0xd0 [ 65.556895][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 65.560536][ T1043] ? pending_reads_dispatch_ioctl+0xc86/0x2080 [ 65.577113][ T1043] __kmalloc_noprof+0x326/0x510 [ 65.582023][ T1043] pending_reads_dispatch_ioctl+0xc86/0x2080 [ 65.588089][ T1043] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 65.594556][ T1043] ? selinux_file_ioctl+0x732/0x1480 [ 65.598635][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 65.599917][ T1043] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 65.615124][ T1043] ? do_futex+0x37d/0x510 [ 65.619543][ T1043] ? __cfi_do_futex+0x10/0x10 [ 65.623179][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 65.624272][ T1043] ? mutex_unlock+0x90/0x240 [ 65.639206][ T1043] ? bpf_lsm_file_ioctl+0xd/0x20 [ 65.644215][ T1043] ? security_file_ioctl+0x3e/0x110 [ 65.649342][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 65.650064][ T31] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 65.658890][ T1043] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 65.673611][ T1043] __se_sys_ioctl+0x132/0x1b0 [ 65.678380][ T1043] __x64_sys_ioctl+0x7f/0xa0 [ 65.683017][ T1043] x64_sys_call+0x1878/0x2ee0 [ 65.686487][ T31] usb 2-1: USB disconnect, device number 24 [ 65.687772][ T1043] do_syscall_64+0x57/0xf0 [ 65.698086][ T1043] ? clear_bhb_loop+0x50/0xa0 [ 65.702829][ T1043] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 65.708803][ T1043] RIP: 0033:0x7f17ea39de99 [ 65.713265][ T1043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.732963][ T1043] RSP: 002b:00007f17eb2ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.741436][ T1043] RAX: ffffffffffffffda RBX: 00007f17ea625fa0 RCX: 00007f17ea39de99 [ 65.749489][ T1043] RDX: 00002000000000c0 RSI: 0000000040106726 RDI: 0000000000000004 [ 65.757498][ T1043] RBP: 00007f17ea433eaf R08: 0000000000000000 R09: 0000000000000000 [ 65.765484][ T1043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.773505][ T1043] R13: 00007f17ea626038 R14: 00007f17ea625fa0 R15: 00007ffc89a7b358 [ 65.781544][ T1043] [ 65.784605][ T1043] ---[ end trace 0000000000000000 ]--- [ 66.703191][ T67] usb 4-1: USB disconnect, device number 24