last executing test programs: 49.219968379s ago: executing program 0 (id=507): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0xc, 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2501, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)=@arm64={0x81, 0x8, 0xf4, '\x00', 0x4}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async) r5 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x64010102, 0x4e20, 0x0, 0x4e22, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffc, 0xffffffffffffffff, 0xfff, 0x10001, 0x5, 0x5, 0x5, 0xfffffffffffffffd}, {0x58b6c42b, 0xffffffffffff90df, 0x0, 0x20000000000000}, 0x40, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x6c}, 0x2, @in=@broadcast, 0x3502, 0x4, 0x3, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) (async) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) (async) r6 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x3, 0x0}, 0x4e1f, 0x0, 0x0, 0x3, 0xa}, {0xec, 0x0, 0x40000000007, 0x6811221d, 0x8, 0x8000000000000003, 0x200000003, 0xd}, {0x7, 0xfffffffffffffffd, 0x6, 0xffffffffffffbffe}, 0x401, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x6c}, 0x2, @in6=@remote, 0x3502, 0x1, 0x0, 0x0, 0x9, 0x3}}, 0xe8) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @loopback, 0xfffffffc}, 0x1c) write(r6, &(0x7f00000000c0)="404e82f70fb2abf7440d474cb03aad5a7316b327e74d4bf0cff6bf", 0x1b) 48.928939065s ago: executing program 0 (id=509): syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x17cc, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x7a, 0x60, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf7ff, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x1, 0x81, {0x7, 0x25, 0x1, 0xe, 0x7f, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0xb, 0xe9, {0x7, 0x25, 0x1, 0x0, 0x7, 0x3}}}}}}}}]}}, 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x10, 0x2, "", [{{0x9, 0x4, 0x0, 0xe, 0x1, 0x7, 0x1, 0x2, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x0, 0x1}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xf9, 0xf5, 0x3, 0x20, 0x3}, 0x98, &(0x7f0000000100)={0x5, 0xf, 0x98, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0x3, 0x9}, @generic={0x8c, 0x10, 0x1, "d58d715ebd7ad4d2f30bc6c163df9120a856ed43ef462e9ded1d08ed96f7126691f59357396c4d946cb6a3a843fdd4ef4badfb133fdad77035175c3d60e2502ddf628786fb9ac44cf5d3d66c2659c5cb3cf0e35d25b6d11d216e743183d049cdedd011de0c10d14d89b37b21017ae358c0ba4d061d976b3443830dca98ea9a69775d19bebac060a52f"}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x41, &(0x7f00000002c0)=@string={0x41, 0x3, "9b3b95cf709b64e5b5b0b23565ea4de61068d6fb100610368e78d4403f14295b80da0ce3b8515e9ade1df95cfe6e064474633c61ff028eb986bfe70f291884"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xf4ff}}]}) 47.749779395s ago: executing program 0 (id=516): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) lseek(r0, 0x1, 0x1) getdents64(r0, 0x0, 0x0) (fail_nth: 3) 47.53392371s ago: executing program 0 (id=518): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) lseek(r0, 0x1, 0x1) getdents64(r0, &(0x7f0000000000)=""/142, 0x8e) 47.305087156s ago: executing program 0 (id=522): r0 = fsopen(&(0x7f0000000340)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000440)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) read(r4, &(0x7f0000000980)=""/1017, 0x3f9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x2000c080}, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setsig(0x4203, r7, 0xa, &(0x7f0000000000)={0xd, 0x8, 0x8}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x7000, 0x3, &(0x7f0000ff9000/0x7000)=nil) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)=ANY=[]) writev(r6, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) 46.75115899s ago: executing program 1 (id=525): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x182}], 0x1, &(0x7f0000000800)={0x77359400}, &(0x7f0000000840), 0x8) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x65, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0xc3}, 0x48, 0x0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x62, 0x61, 0x39, 0x65, 0x63, 0x61, 0x30, 0x31, 0x66, 0x65, 0x63, 0x38, 0x64, 0x62, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aafbccddeeff", 0x10}, 0x48, 0x0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000580)={'fscrypt:', @auto=[0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"}, 0x48, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="140001001d000100000000000200000007000000"], 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, 0x0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x7, 0x30, 0x30, 0x37, 0x32, 0x64, 0x30, 0x30, 0x63, 0x64, 0x30, 0x30, 0x30, 0x30, 0x8]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabcccddeeff00112233445566778899aabbccddeeff0011223344556677889907000000eeff", 0x40}, 0x48, 0x0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x44000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000540)='blkio.bfq.io_merged\x00', 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r0, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) fchmod(r1, 0x2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, 0x0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x65, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, 0x0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x65, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778898aabbccddeeff21112233445566778899aabbccddeeff00112233445566778899aabbccddee6d30e49933445566778899aabbccddeeff", 0x40}, 0x48, 0x0) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000600)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "42b6f79eb265b5824e857af864c58803d13c052f671a2ae1f76bf1da5cc727376ed546011b61539773c15f7e54ddbb21d67e1662214422745234909a6d75d284", 0x36}, 0x48, 0x0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, 0x0) add_key$keyring(&(0x7f0000000500), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x65, 0x58425c31ab49816a, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x67, 0x30, 0x34, 0x37, 0x30, 0x30, 0x33, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, 0x0) 46.411164978s ago: executing program 0 (id=526): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) lseek(r0, 0x1, 0x1) getdents64(r0, 0x0, 0x2e) 45.888513211s ago: executing program 1 (id=527): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0x40000090, 0x0, 0x20000002}]}) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 45.784035593s ago: executing program 1 (id=528): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) lseek(r0, 0x1, 0x1) getdents64(r0, 0x0, 0x0) (fail_nth: 4) 45.783717263s ago: executing program 1 (id=529): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) listxattr(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x35, 0x7, 0x0, 0x180, 0x1000000004, 0x11, 0xf1, 0x483, 0x81, 0x2, 0x6, 0x9, 0x0, 0x9, 0x1, 0xbd9], 0xfec00000, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$tcp_mem(r0, &(0x7f0000000300)={0xfffffffffffffffe, 0x20, 0x3, 0x20, 0x8}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0xac, 0x0, 0x0, 0x7ffc1ffb}, {0x6, 0xc0, 0x4, 0x1}]}) pread64(r0, &(0x7f0000000200)=""/70, 0x46, 0xf) chdir(&(0x7f0000000140)='./file0\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys_mnt/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', 0x1, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000000240)=ANY=[], 0x30) sendmsg$netlink(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x4000000) lseek(r6, 0x1, 0x1) getdents64(r6, 0x0, 0x0) 44.524006754s ago: executing program 1 (id=532): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r1 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, 0x0, &(0x7f0000000080)) (async) r2 = socket(0x2, 0x2, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f0000000180)='./sys_mount\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='bfq', 0x3) (async) write$FUSE_INTERRUPT(r3, &(0x7f0000000240)={0x10}, 0x10) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x8}, {0xa, 0x4e21, 0x5da9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x4, {[0xffffe08d, 0x0, 0xff, 0x1, 0xffffffff, 0x8, 0x5, 0x8]}}, 0x5c) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x1, 0xfffffc, 0x33d, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x200, 0x0, 0x144, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x98ce, 0x6449, 0x0, 0xfffffffd, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 44.454382266s ago: executing program 1 (id=533): r0 = dup(0xffffffffffffffff) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000040)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/cpu_dma_latency\x00', 0x101042, 0x8) (async) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x400, 0x0) ioctl$BLKFINISHZONE(r2, 0x40101288, &(0x7f0000000040)={0x7, 0xd}) pwrite64(r1, 0x0, 0x30, 0x10c6b) (async) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e23, 0x5, @loopback, 0x4}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000a94000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f00000000c0)={0x0, &(0x7f00000004c0)=[@rdmsr={0x66, 0x18, {0xc001102a}}], 0x18}) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x108, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db"]}, @nested={0xa4, 0x5, 0x0, 0x1, [@nested={0x9d, 0xe0, 0x0, 0x1, [@typed={0x8, 0x11f, 0x0, 0x0, @fd=r4}, @generic="2b811b34546a3e32ba860a8e5777e2ef65b53518b303b19d9beb06e553b278278eb9dbbc4dc88af03299b5356b0cae1f934aaf9f143785ee001884098f54937a92713d3012b7ff4fb5cfa56767447605d7c537924e5491819feac702554f1ff79e6c11a41b9f44b6299476d3f86f4cf6de4aa776a18cef344ea602b34da3698448a5b1ac9ad9d2cd6e3dd19674b06b442d"]}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4}, 0x4804) (async) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x200804, 0x0) ioctl$EXT4_IOC_GETFSUUID(r3, 0x8008662c, &(0x7f0000000180)) 44.365058448s ago: executing program 32 (id=533): r0 = dup(0xffffffffffffffff) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000040)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/cpu_dma_latency\x00', 0x101042, 0x8) (async) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x400, 0x0) ioctl$BLKFINISHZONE(r2, 0x40101288, &(0x7f0000000040)={0x7, 0xd}) pwrite64(r1, 0x0, 0x30, 0x10c6b) (async) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e23, 0x5, @loopback, 0x4}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000a94000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f00000000c0)={0x0, &(0x7f00000004c0)=[@rdmsr={0x66, 0x18, {0xc001102a}}], 0x18}) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x108, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db"]}, @nested={0xa4, 0x5, 0x0, 0x1, [@nested={0x9d, 0xe0, 0x0, 0x1, [@typed={0x8, 0x11f, 0x0, 0x0, @fd=r4}, @generic="2b811b34546a3e32ba860a8e5777e2ef65b53518b303b19d9beb06e553b278278eb9dbbc4dc88af03299b5356b0cae1f934aaf9f143785ee001884098f54937a92713d3012b7ff4fb5cfa56767447605d7c537924e5491819feac702554f1ff79e6c11a41b9f44b6299476d3f86f4cf6de4aa776a18cef344ea602b34da3698448a5b1ac9ad9d2cd6e3dd19674b06b442d"]}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4}, 0x4804) (async) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x200804, 0x0) ioctl$EXT4_IOC_GETFSUUID(r3, 0x8008662c, &(0x7f0000000180)) 31.006127587s ago: executing program 33 (id=526): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) lseek(r0, 0x1, 0x1) getdents64(r0, 0x0, 0x2e) 27.880097064s ago: executing program 3 (id=613): r0 = fsopen(&(0x7f0000000340)='configfs\x00', 0x1) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000009000000000006000000000000000000"]) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x421, 0x70bd2f, 0x25dfdbfe}, 0x14}}, 0x400d4) r4 = fsmount(r0, 0x0, 0x0) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r6 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) splice(r5, &(0x7f0000000040), r4, &(0x7f0000000080)=0x7d99, 0x32f5732d, 0x1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, 0x0, 0x40) lseek(r5, 0xffffffffffff0001, 0x1) 27.846363224s ago: executing program 3 (id=614): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x1100000000000000, 0x9, 0x7ffffffffffffffd, 0xffffffffffffffff, 0x3ffffd, 0x400000000006, 0x0, 0x2, 0x7fffffffffffffff, 0x5, 0x20000000000400, 0x6, 0x6, 0x20000001, 0xfffffffffffffffc], 0xd5d5c004, 0x1354}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000003c00000060ec97000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x8000000000000001}]}) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_RUN(r5, 0xae80, 0x0) 27.708418308s ago: executing program 3 (id=615): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) lseek(r0, 0x1, 0x1) getdents64(r0, 0x0, 0x0) 27.707333158s ago: executing program 3 (id=616): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='comm', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0xc0, 0x2) lseek(r2, 0x1, 0x1) getdents64(r2, 0x0, 0x0) 27.648119279s ago: executing program 3 (id=617): r0 = socket(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) write$cgroup_devices(r1, 0x0, 0x21) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000005200016d9bffffff000000000a"], 0x18}}, 0x0) 27.62993227s ago: executing program 3 (id=618): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x20000010, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000003d40)=""/4052, 0xfd4}, {&(0x7f0000000880)=""/203, 0xcb}, {&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f0000000ac0)=""/250, 0xfa}, {&(0x7f0000000380)=""/286, 0x11e}, {&(0x7f00000001c0)=""/257, 0x101}, {&(0x7f0000000500)=""/144, 0x90}, {&(0x7f00000004c0)=""/37, 0x25}], 0x8}, 0x72}, {{0x0, 0x0, 0x0}, 0x800}], 0x2, 0x0, 0x0) (async) sendto$inet6(r0, &(0x7f00000000c0)="e3c353852f11c26a1f0c2ecaf7681ce2930d601cbed1241af5e9a7ce2871c05ae0d67919011d2d0882dac99dbfe5aba223271677241a29ca299146d16dce0bc30d294ae4088e8ab9b11adc474b00d74a1cdd43552b55cddabb7968e107f87b0a620b33e759dc0c701230ed6713230830a6263ef52350d87481d2dee5c6f06f137a5790e17712004088932e0bb4ce9a427ac0b216020f4a1a596a7ff8ea28b1151bcc82a461716e6ce68805419b55023d", 0xb0, 0x8000, &(0x7f0000000180)={0xa, 0x4e23, 0x80, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) 27.546281522s ago: executing program 34 (id=618): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x20000010, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000003d40)=""/4052, 0xfd4}, {&(0x7f0000000880)=""/203, 0xcb}, {&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f0000000ac0)=""/250, 0xfa}, {&(0x7f0000000380)=""/286, 0x11e}, {&(0x7f00000001c0)=""/257, 0x101}, {&(0x7f0000000500)=""/144, 0x90}, {&(0x7f00000004c0)=""/37, 0x25}], 0x8}, 0x72}, {{0x0, 0x0, 0x0}, 0x800}], 0x2, 0x0, 0x0) (async) sendto$inet6(r0, &(0x7f00000000c0)="e3c353852f11c26a1f0c2ecaf7681ce2930d601cbed1241af5e9a7ce2871c05ae0d67919011d2d0882dac99dbfe5aba223271677241a29ca299146d16dce0bc30d294ae4088e8ab9b11adc474b00d74a1cdd43552b55cddabb7968e107f87b0a620b33e759dc0c701230ed6713230830a6263ef52350d87481d2dee5c6f06f137a5790e17712004088932e0bb4ce9a427ac0b216020f4a1a596a7ff8ea28b1151bcc82a461716e6ce68805419b55023d", 0xb0, 0x8000, &(0x7f0000000180)={0xa, 0x4e23, 0x80, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) 22.241343322s ago: executing program 5 (id=661): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="780000000209010100000000000000000a000004080003400000000508000340000000064c0002000600008400000006000340000100002cf900248c93923879"], 0x78}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) ioctl$KVM_RUN(r3, 0xae80, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff7ffff}) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x2000006, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xff, 0x7fff0010}]}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0xfffffca2, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r5], 0xfffffdca}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xb8}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 21.368496563s ago: executing program 5 (id=666): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a004e2200000005002d0000000000000040ffffe000000102000000200002000a00000000000000ff0100000000000000000000000000019c0000000d0001007564703a"], 0x6c}, 0x1, 0x0, 0x0, 0x20000014}, 0x50012) setsockopt$sock_int(r1, 0x1, 0x24, &(0x7f0000000200)=0x4, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000), 0x4006, &(0x7f00000000c0)={[{}]}) 20.468024386s ago: executing program 5 (id=668): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) lseek(r0, 0x1, 0x1) getdents64(r0, &(0x7f0000000000)=""/142, 0x8e) (fail_nth: 4) 20.466654266s ago: executing program 5 (id=669): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') socket$packet(0x11, 0x3, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000096, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f00000003c0)={0x0, 0xbbfc, 0x0, 0x0, 0x0, 0x0, r1}, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000100000000000a000000060001001b"], 0x1c}}, 0x0) r8 = dup(r6) syz_ublk_setup_queues(r8, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x1002f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) lseek(r0, 0xffffffffffff0000, 0x0) setresuid(0x0, 0xee00, 0x0) syz_open_dev$ublk_chdev(&(0x7f0000000180), 0x0, 0x1) 20.437594707s ago: executing program 5 (id=670): socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x28, 0x1a, 0x21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xa, 0x4, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x28}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x88) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1b406a, 0x0, &(0x7f0000000540)) r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1, 0x0) writev(r4, &(0x7f0000001f40)=[{0x0}], 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x2, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x83d3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x1, 0x7ae, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x114}}}, &(0x7f0000000300)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r5) syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002413b88400819151300000000000109022d000000000000090400"], 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) 19.875580551s ago: executing program 5 (id=677): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) lseek(r0, 0x1, 0x1) getdents64(r0, &(0x7f0000000000)=""/142, 0x8e) (fail_nth: 5) 19.857298981s ago: executing program 35 (id=677): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) lseek(r0, 0x1, 0x1) getdents64(r0, &(0x7f0000000000)=""/142, 0x8e) (fail_nth: 5) 9.862429607s ago: executing program 6 (id=719): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@code={0xa, 0x34, {"0f20e0480d000004000f22e0b80700000031c931d20f01d148c7c000010400c5f82800"}}], 0x34}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x644, 0x800e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xa, 0xb0, 0x4c, {0x8, 0xb, 0x0, 0x2, 0x1, 0x23, 0x30, 0xe5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa, 0x8000}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x120, 0x1, 0x9, 0x10, {0xa, 0x25, 0x25, 0x5, 0xd, 0x803}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0xe3, 0x1, {0xa, 0x25, 0x25, 0x2, 0xd, 0xffff}}}}}}}}]}}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x8000, 0x3, 0xf, 0x8}]}) r6 = socket(0x10, 0x3, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r8 = fcntl$dupfd(r7, 0x406, r7) ioctl$UFFDIO_API(r8, 0x5514, 0x0) recvfrom$inet(r6, &(0x7f0000000000)=""/11, 0xb, 0x40000041, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)={0x10c, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0xf8, 0x0, 0x1, [@typed={0x14, 0x133, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @nested={0x31, 0xfb, 0x0, 0x1, [@generic="b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72"]}]}]}, @nested={0xa8, 0x5, 0x0, 0x1, [@nested={0xa4, 0xce, 0x0, 0x1, [@nested={0xa0, 0x13e, 0x0, 0x1, [@nested={0x9c, 0xa0, 0x0, 0x1, [@nested={0x98, 0x61, 0x0, 0x1, [@nested={0x94, 0x9d, 0x0, 0x1, [@nested={0x8d, 0x63, 0x0, 0x1, [@typed={0x4, 0xa5}, @nested={0x10, 0x90, 0x0, 0x1, [@nested={0xc, 0x19, 0x0, 0x1, [@typed={0x8, 0x110, 0x0, 0x0, @fd=r6}]}]}, @nested={0x4, 0x70}, @typed={0xc, 0x11c, 0x0, 0x0, @u64=0x9}, @typed={0x8, 0x12e, 0x0, 0x0, @uid}, @nested={0x28, 0xde, 0x0, 0x1, [@typed={0x8, 0x14d, 0x0, 0x0, @fd=r6}, @nested={0x1c, 0x132, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @u32=0xfffffff7}, @nested={0x4, 0x88}, @typed={0x8, 0x2f, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @nested={0x4, 0x14}]}]}, @generic="67bc0ca816bfd690a5b2bc965f642f86fcbaa1ef938c5fa66781695122165b300ce9a004e74d8dd0acd8aea39f0cf5ea1f", @nested={0x4, 0xb8}]}]}]}]}]}]}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x5}, 0x0) 6.755135343s ago: executing program 6 (id=732): r0 = socket$pppl2tp(0x18, 0x1, 0x1) getpeername(r0, 0x0, 0x0) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[], 0x0) 3.719679888s ago: executing program 6 (id=753): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f00000001c0)='{[}#\'[]:\x00', 0x8000, &(0x7f0000000240)={@_ha_fsid={[0x5, 0xd3d8]}, {0x3fe0, 0x5, 0x6, 0x800}}, 0x8000000, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x9}) mkdirat(r0, &(0x7f0000000340)='./file2\x00', 0x10) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file2\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r1, 0x4, 0x40800) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x7ffff004) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000180)={0x2}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80, 0x3b) r4 = openat(r3, &(0x7f0000000080)='./file2/file0\x00', 0x0, 0x49) lseek(r4, 0x1, 0x1) getdents64(r4, 0x0, 0x0) 3.686393179s ago: executing program 6 (id=754): r0 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89fe, &(0x7f0000000580)={'ip6gretap0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getsa={0x28, 0x12, 0x8, 0x70bd2a, 0x25dfdbfd, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4d5, 0xa, 0x33}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x48055) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x8993, &(0x7f0000000440)={'sit0\x00', 0x0}) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) fchmod(r1, 0x90) select(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x644, 0x800e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x74, 0xa0, 0x9, {0x8, 0xb, 0x1, 0x2, 0x1, 0x6, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xdef2, 0x2, 0x9, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0xd7, 0x8, {0x8, 0x25, 0x1, 0x2, 0x6, 0x6, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xd7, 0xe, 0x4, {0x8, 0x25, 0x1, 0x81, 0x30, 0x6, 0x5}}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0xa4, &(0x7f0000000180)=ANY=[@ANYBLOB="a4032a9dfea2aa724c432975adf11eee963ac6a755449770d7a0d13b95a61d4187965dd17a2f384c27db1a3c87d7c5eb1a96357570b4b620d2d5e12d4cc17e5b2e7a45d9972ec427f5ef488ff4d526a160d0fd3d93ab8d12aa375e56100def3300ca4c88d6eca1888f14a76a1e94816fb1fbd1c347076edf6e4c19ad8b1b566c8b1001090e930737a0427124900e23aa5f886da09d60bee7887c648daf3d8ecd67658cd9"]}]}) 2.352796772s ago: executing program 4 (id=761): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x4041e) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e210000f7fb20020a008000080000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001040000000000000600000000000000090000000000000008000000000000000000000000000000000000000000000000000000000020008100000000000000090000000000000083000000000000000000000000000000ff0300000000000001010003000000008401050064"], 0x23c}}, 0x4080) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000080)="2e3665f2af6766c74424005f0000006766c7442402000000006766c744240600000000670f011c2466b9030100c066b85bd1e4530f00ac80130f3066b9370200000f320f01d1700f20c066350f000000109fbe9fbec066660f383b8032500fe99400003e2e660fc7b302000f20e06635200000000f22e0", 0x77}], 0x1, 0x54, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000054e000/0x400000)=nil) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="fc1100001200010200"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000f504010007"], 0x11fc}, 0x1, 0x0, 0x0, 0x20000010}, 0x810) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000840)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0005000000006154b374824097f4d377e5939fbed7a6ca4fa5d53ca76501c6137a27ac08417e374c0f641df9cee779e90297aef8e264ac86f97b1ead8dce00d0cba3324b119c1c9ce6624e05da16c9fa"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="2900e3eb482ab8a7858e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.912239202s ago: executing program 7 (id=763): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000092000180c200000300000000000086dd694fd2cd001088fffe8000000000000000000000000000bbff020000000000000000000000000001"], 0x4a) r3 = socket(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockname$packet(r3, 0x0, &(0x7f0000000640)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x0) syz_usb_connect$uac2(0x5, 0xe6, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x582, 0x16, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd4, 0x3, 0x1, 0xa, 0x0, 0x1, {0x8, 0xb, 0x2, 0x2, 0x1, 0x7, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0x6, 0x24, 0x2}, [@processing_unit={0xf, 0x24, 0x8, 0x4, 0x1, [0x1, 0x1, 0x2, 0x2, 0x0]}, @output_terminal={0xc, 0x24, 0x3, 0x3, 0x305, 0x2, 0x5, 0x8, 0x1, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0xfffd, 0x4, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x2, 0x2, 0x29, {0x8, 0x25, 0x1, 0x80, 0x3c, 0xfe, 0x1a8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0xa2, 0x6, 0x0, 0x64}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8001, 0xd, 0xa, 0x36}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x0, 0x1, 0x94, 0xd8, "d33b6de3d0338cf11c"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x80}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0xff, 0xb1, "538d91993c7be87f"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x2, 0x5, 0x0, "a6d7", "a1"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x3, 0x9, 0x8, {0x8, 0x25, 0x1, 0x2, 0xc, 0x2, 0xfff0}}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0xa4, 0x6, 0x9, 0x8, 0x2}, 0x45, &(0x7f0000000180)={0x5, 0xf, 0x45, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x92, 0x4, 0x2, 0x7fff, 0x8c}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0xf, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "d2fb49f2426515c14fc05e35bae41b89"}, @ssp_cap={0x10, 0x10, 0xa, 0x40, 0x1, 0x3, 0x0, 0x800, [0xf]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x7, 0xd}]}, 0x6, [{0x68, &(0x7f0000000200)=@string={0x68, 0x3, "7ead6658598ffca5b0b3a95d814097398d4194d2d33f822b9e7a0d9839113e94fbdbde39fc9d71369a83dc719dd45b3118cfcf817457016ce2d6c1eb21cb257f101cc415eb6ca524b87ed363446305a8877c999740acc2b5368fa37d64953b5941c9f9c3ee02"}}, {0x84, &(0x7f0000000280)=@string={0x84, 0x3, "fcdde19b912daa35c448fdac8e3a4d4d39163163b553aaee47f5a1025d29bf59bd1d67d63e9fc690fe4b8ea85614c0c013b3d8136bbcaef4e7f5e54d3b1717b094b86512f1cdd5fb2267f5ccf03d19d221b2b9d510707ec9f39dcee4346ef8a84126dcf02c753cbd3cc2682ee618b5024724dd22caec1a78c80d0204dadd1bfd4e99"}}, {0x2b, &(0x7f0000000340)=ANY=[@ANYBLOB="2b03038f4620d51a8ed4a5ac62ed96325994757c807b822ef6111c6c4df88c4c0b90f60b2f7f1f251b235b"]}, {0x61, &(0x7f0000000380)=@string={0x61, 0x3, "0ac1ce85ee1fe956a0c0d8016eb38f205a5505042c34bc192f00a39c403b819a6c4352603a84b032a732a4acfab524780ca2b60090d4ec84ecb4d511e05c3a47e803967dcb16518b7ec62c50af0a6dc4ed766ad96dbbd295a8ccbeb6759f0a"}}, {0xf5, &(0x7f0000000400)=@string={0xf5, 0x3, "9420e5d9f4470aa5ace5ac3af66b15955a9f9392c8d0231e02f7c45249ded929ad5a39a005fcc1ab4f8e715a0549e340104684770e3ef2973611e9f79558439e642278f6fafd6eca8b6cd52422b48a8bc458bb1ad81de653aa3ea83762d4ded838646d75980b688b1ccb435d0c57a1c729f05e7acf031699c2340f7a5042968c0a11ca6d27a3244ec6025e2aee2b9020357771413f42507ba207dda8d534ad513433788dcf558ce5fecced6828b2ad99987bac894e2e059be51bea134aab93f574f68700e48950cb0077167550a4eb24d444b2a0736b5962fd244aa22672fb0f908d799d37951157527896c8897dd56abc4e42"}}, {0xe2, &(0x7f0000000500)=@string={0xe2, 0x3, "61ee9f69a0cbaf6776dff16d19853e5b8bd1d123ebb1d03420968cc8afb5332c71d164bd56ba80010200c34b109c336781089f4ccfe27619d56f10702fa87a26418ae8b324ff0cd2420254b0776f3bcf78d2a316a2cb1d8b9c11b1b243473785fcef2228ce11fc7f2dc7b5e4da31db04ba817c48fdf3d32966e1ba8136581e1c643036000c013f97ac772b76928097cfffd425dc4f4c64fd81d6010886fac4d7079b12cfa9b81f2eee1aacdf39e7847658933452e493706fba62199142d29cb1c32197da83a07abb9c9d558aa44c7c9e76e222bc5c4e3ada154a1015d58936b2"}}]}) r4 = syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbff, 0x7, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x891}, 0x40004) fcntl$getownex(r3, 0x10, &(0x7f0000000a80)={0x0, 0x0}) sched_setscheduler(r5, 0x5, &(0x7f0000000ac0)=0x9) syz_usb_control_io$rtl8150(r4, &(0x7f0000000880)={0x14, &(0x7f00000006c0)={0x40, 0x21, 0x7b, {0x7b, 0xc, "9b33f9206dbd217e970d6b3e663d120bb8d1c834fb54622de2954a705f0cbb11d5ef84af00e5ad14c4bc4f874f6560413027fb8f375cf92a30af4ed52a8fd87a8d1598fd7d3626b16f83ed85666194b1ac81eaa5fa4eede36aa9291994e3a7561ec1597eb4fd50defb7fd3c526d71c8183a082bf7ef8046eab"}}, &(0x7f0000000780)={0x0, 0x3, 0xcf, @string={0xcf, 0x3, "414fde31ee3ab48417cde0e8ccbb3592eac820f9cdfb06f5c55043dcc034843344e386a93484fd203a2eb400ca9627c26ba9d327d8b29dab5eb97d077ea3322568a4abfa17248dbbe53ed2855c72fff2da45ebe0b738b8f9d7fcb417c1989b9b461c98a24101e8800b7aae37314689e06eb25d083c82ea4d78dd0f01691c5337f19b3e372ef211b67873e9020559a5539a44d32233ddaabd8822f6ae83bbe25261e64f6b713ca055b65f522c3870e35a1c4b9e4e8cbc45123c008c5a84d90524d01c8f7317001b97c15a18d018"}}}, &(0x7f0000000a40)={0x2c, &(0x7f00000008c0)={0x40, 0xe, 0x6f, "8241a6d8363695b547394a995b2e7a5fb5cf6680d414e4a957e20d691ae765d2e69bcba3a89df1f2f19311b168f81e45f89389af3b56c2845133e166a9f053909f84fe6e86531e86dad1ac11433d7ac13f66058e4680b371ab3c8e0fb6d824f5af3148c88afbecd28a8ea90f0bbcc7"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000009c0)={0xc0, 0x5, 0x3, "258ae5"}, &(0x7f0000000a00)}) 1.438864834s ago: executing program 7 (id=764): setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f00007fe000/0x800000)=nil) 1.416539254s ago: executing program 7 (id=765): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xffffffffdd0336ac, 0x305f00) ioctl$USBDEVFS_FREE_STREAMS(r3, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) 1.343956666s ago: executing program 7 (id=766): ftruncate(0xffffffffffffffff, 0x7c) r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x9, 0x4, 0x2, 0x2, 0x0, 0x70bd28, 0x25dfdbfe}, 0x10}}, 0x60) r5 = inotify_init() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0), 0x0) write(r6, &(0x7f0000000200)='3', 0x1) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x1000040) ftruncate(r3, 0x6000000) copy_file_range(r3, 0x0, r3, &(0x7f00000004c0)=0x100, 0x9, 0x0) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) finit_module(0xffffffffffffffff, 0x0, 0x0) 1.227789039s ago: executing program 7 (id=767): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8949, &(0x7f0000000440)={'sit0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8949, &(0x7f0000000440)={'sit0\x00', 0x0}) syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e0100010a240107000105ff01030207072405010763"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) 1.18838676s ago: executing program 2 (id=768): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_gettime(r0, &(0x7f00000001c0)) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000500)="8b7fc87caf4a8808ea9f3d747861d8eda9c4e07862aac109c0664bce3864421a921d64a11ad8dd219003e64b90c51245ff41713d6c7aafc92ab27f706c9c65ce4011b547b668eb910bb2ab61c11c57033d8944b284f817ce1e0bb49851662e26a1aa6fdbda5f0dfc3a2bcd77f76479c6527bed7e457e9dd37d232cac20083627f36a5bfdfcd944f33fd5fc1d71b26cab31f96c52425b12b19fbffdfc") r1 = fsopen(&(0x7f0000000200)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000000)='gid', 0x0, r1) r2 = epoll_create1(0x0) r3 = socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xa0028000}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) syz_clone3(&(0x7f0000000480)={0x200000000, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280), {0x1e}, &(0x7f0000000340)=""/125, 0x7d, &(0x7f00000003c0)=""/90, &(0x7f00000005c0)=[r4, r5], 0x2}, 0x58) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) 1.079911593s ago: executing program 2 (id=769): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) timer_create(0x1, &(0x7f0000000340)={0x0, 0xe, 0x2, @thr={0x0, 0x0}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r5, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f0000001480)) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'macvlan1\x00', @random="8d02372ed26c"}) getsockopt$sock_int(r0, 0x1, 0x2f, 0x0, &(0x7f0000000300)) 1.079015973s ago: executing program 2 (id=770): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) openat$incfs(r0, &(0x7f0000000300)='.log\x00', 0x200280, 0x21) chdir(&(0x7f0000000140)='./file0\x00') ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000400)={{0xffffffffffffffff, &(0x7f0000000180)='upperdir', 0x25a000, &(0x7f00000001c0)={@align=0x4, {0x0, 0xb, 0x6, 0x5}}, 0x7, &(0x7f00000002c0), &(0x7f0000000240)=0xfffffff2}, {[0x6, 0x10000, 0x29f, 0x6]}, 0x10001, 0xb, &(0x7f0000000280)=""/18}) r2 = openat(r1, &(0x7f0000004280)='.\x00', 0xc0200, 0x2) lseek(r2, 0x1, 0x1) getdents64(r2, &(0x7f0000000000)=""/142, 0x8e) 1.074004533s ago: executing program 2 (id=771): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0x0, &(0x7f0000000300)=0xfffffffffffffd96) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100), 0x6) recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f0000000100)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000640)=""/230, 0xe6}, {&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/119, 0x77}], 0x5, &(0x7f0000000540)=""/55, 0x37}, 0x80000000}], 0x1, 0x12142, 0x0) (async) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40002104, 0x0) 666.168193ms ago: executing program 6 (id=772): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x9, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x3b7, 0x2], [0x9, 0x9, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b39c, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0xfc4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0x2, 0x9, 0xc, 0x6, 0x2e6bf785, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x276, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020000000209010100000000000000000a0000040900010073797a3000000000040002000c000480080001407fffffff2400020006000340000000000c577f0581000100210000000c00028005000100841000000800064000000001522bacab41180191a1b846210d988c923225a2d1e2d0896c444843aa66d707edb73c046043269a8619968b7778ffe963a26798b37e520448beb66feec175fe42480ef8500fda926d06b9b66efaacc14087bbe9560a4652b731a4de45"], 0x5c}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = socket$inet(0x2, 0x4, 0x81) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00', 0x0, [0x8, 0x80000001, 0x100, 0x9, 0x3]}, &(0x7f00000001c0)=0x54) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x36) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 32) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 32) r6 = dup(r5) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 589.883775ms ago: executing program 6 (id=773): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000600)='ns/mnt\x00') r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) r8 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = syz_open_dev$hidraw(&(0x7f0000000100), 0x82, 0x602) write$hidraw(r9, &(0x7f0000001380)='\x00+', 0x2) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) r10 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') read$FUSE(r11, &(0x7f00000043c0)={0x2020}, 0x2020) syz_ublk_setup_queues(r10, r7, &(0x7f0000000180)={0x0, 0x9e00, 0x8, 0x3, 0x28e, 0x0, r1}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8bf, 0x2000, 0x4, 0x3ac, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9, 0x2, 0x0, 0x3b2, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1393, 0x4, 0x4000, 0x304, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc5a5, 0x20000, 0x9, 0x1fc}}], 0x4, &(0x7f0000000340)={0x2e, 0xe, 0x0, r11, 0xc0107526, 0x0, 0x0, 0x0, 0x0, {0x10}, 0x0, r6, '\x00', {0x3, 0xc46, 0x100104, 0x0}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x34}) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f0000000440)={0x14, &(0x7f0000000280)={0x40, 0xd, 0x41, {0x41, 0x2, "ef6e5d003e292669db9aa5cce368712e3ab946f7ed541706ccda98f65cd3dd94ca314c3636da825cdfad7d41a596171f7fb0a3659bec6b2434bbae879161aa"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x418}}}, &(0x7f0000000700)={0x44, &(0x7f0000000480)={0x40, 0xc, 0x51, "386bdc66590e79972824cfebf63b38ae782ba9eb8e27db623e15b14644abed50567107e9502ba9ea17b7b0f9484d4d18b12437f5711d18c0018e2de0d282f43b0d1c90b5e6b00b7e7f7c4ee85af21fe507"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000580)={0x0, 0x8, 0x1}, &(0x7f00000005c0)={0x20, 0x81, 0x2, "1dd2"}, &(0x7f0000000600)={0x20, 0x82, 0x3, "41c864"}, &(0x7f0000000640)={0x20, 0x83, 0x2, "903c"}, &(0x7f0000000680)={0x20, 0x84, 0x1, "c3"}, &(0x7f00000006c0)={0x20, 0x85, 0x3, '\\$L'}}) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000600)='ns/mnt\x00') (async) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) (async) syz_usb_control_io(r8, 0x0, 0x0) (async) syz_usb_control_io(r8, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hidraw(&(0x7f0000000100), 0x82, 0x602) (async) write$hidraw(r9, &(0x7f0000001380)='\x00+', 0x2) (async) syz_usb_control_io(r8, 0x0, 0x0) (async) syz_usb_control_io$hid(r8, 0x0, 0x0) (async) syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) (async) syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') (async) read$FUSE(r11, &(0x7f00000043c0)={0x2020}, 0x2020) (async) syz_ublk_setup_queues(r10, r7, &(0x7f0000000180)={0x0, 0x9e00, 0x8, 0x3, 0x28e, 0x0, r1}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8bf, 0x2000, 0x4, 0x3ac, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9, 0x2, 0x0, 0x3b2, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1393, 0x4, 0x4000, 0x304, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc5a5, 0x20000, 0x9, 0x1fc}}], 0x4, &(0x7f0000000340)={0x2e, 0xe, 0x0, r11, 0xc0107526, 0x0, 0x0, 0x0, 0x0, {0x10}, 0x0, r6, '\x00', {0x3, 0xc46, 0x100104, 0x0}}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x34}) (async) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f0000000440)={0x14, &(0x7f0000000280)={0x40, 0xd, 0x41, {0x41, 0x2, "ef6e5d003e292669db9aa5cce368712e3ab946f7ed541706ccda98f65cd3dd94ca314c3636da825cdfad7d41a596171f7fb0a3659bec6b2434bbae879161aa"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x418}}}, &(0x7f0000000700)={0x44, &(0x7f0000000480)={0x40, 0xc, 0x51, "386bdc66590e79972824cfebf63b38ae782ba9eb8e27db623e15b14644abed50567107e9502ba9ea17b7b0f9484d4d18b12437f5711d18c0018e2de0d282f43b0d1c90b5e6b00b7e7f7c4ee85af21fe507"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000580)={0x0, 0x8, 0x1}, &(0x7f00000005c0)={0x20, 0x81, 0x2, "1dd2"}, &(0x7f0000000600)={0x20, 0x82, 0x3, "41c864"}, &(0x7f0000000640)={0x20, 0x83, 0x2, "903c"}, &(0x7f0000000680)={0x20, 0x84, 0x1, "c3"}, &(0x7f00000006c0)={0x20, 0x85, 0x3, '\\$L'}}) (async) 459.771858ms ago: executing program 4 (id=774): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x204}}, 0x2e) socket$netlink(0x10, 0x3, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xec77a000) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0x7, 0x80000001}) syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x84200, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/26/smp_affinity\x00', 0x1, 0x0) r4 = syz_ublk_setup_io_uring(0x1ec1, &(0x7f00000003c0)={0x0, 0x6a70}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r8 = syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0xc, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)) syz_open_dev$ublk_chdev(&(0x7f0000002000), r8, 0x2) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) ioctl$UBLK_U_CMD_START_DEV(r3, 0xc0207506, &(0x7f0000000380)={r8, 0xffff, 0x0, 0x0, r9}) write(r3, &(0x7f0000000300)='1', 0x1) r10 = socket(0x2c, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000160001d7a26bd005b8c3fd000a0000000c00ca8008000b"], 0x20}}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendto(r11, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x20000010, 0x0, 0x0) r12 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r13 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x5) ftruncate(r13, 0xffff) fcntl$addseals(r13, 0x409, 0x7) ioctl$UDMABUF_CREATE(r12, 0x40187542, &(0x7f0000000140)={r13, 0x0, 0x0, 0x4000}) 459.418338ms ago: executing program 4 (id=775): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='#\x00\x9d\xf9\x8b\xca\xe2\xbd\xf8\xbb\x1d\xdef\xb7\xf7_\x1e&H\xd4\xbfp|u\x10\"\x87\x9a\xfb\x8b\x9aYd\xd8\\\xe3\xbf\x06\xf4\t!\xc7\x86\x8f') (async) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) signalfd4(r1, &(0x7f0000000000), 0x8, 0x800) (async) r2 = getpgrp(0x0) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) (async) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x10340, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0xfffff801, 0x5}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5e}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xa}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20010800}, 0x24008001) mmap(&(0x7f0000702000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0xeed5e000) 459.200918ms ago: executing program 4 (id=776): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x101440, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = epoll_create(0x3) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r0, &(0x7f0000000140)={r3, r2, 0x5}) ioctl$TCSETSF2(r0, 0x5453, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r3, 0xf517, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x9) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') wait4(r4, &(0x7f0000000000), 0x2, &(0x7f0000000240)) socket$inet(0x2, 0x80000, 0x9) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$unix(0x1, 0x3, 0x0) r9 = landlock_create_ruleset(&(0x7f0000000080)={0x1421b, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x30, 0x0) landlock_restrict_self(r9, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r12 = dup3(r11, r10, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r12, 0xc018620c, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, 0x2000000}) bind$unix(r8, &(0x7f0000003000)=@abs={0x0, 0x0, 0x4e23}, 0x6e) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x200) listen(r7, 0x40000000) splice(r9, 0x0, r9, 0x0, 0x10001, 0x1a) connect$unix(r7, &(0x7f0000000640)=@file={0x1}, 0x6e) 410.25365ms ago: executing program 4 (id=777): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket(0x1e, 0x4, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000080)={0x8, 0xbf}) r4 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000240)={r4, 0x5, 0x2, r3}) r5 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r5, 0x7, 0x2, r3}) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r6 = socket(0x1e, 0x4, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$khugepaged_scan(r7, &(0x7f0000000000), 0x8) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000100)="36660f38800f66ba4200b800000100ef0f01dfc74424009d000000c744240200500000c7442406000000000f0114240ffc3d3000000067f083ac0040c6688d000000b852a700000f23c00f21f835030000000f23f80f30b9f80b00000f32", 0x5e}], 0x1, 0x55, &(0x7f00000001c0)=[@dstype3={0x7, 0xc}, @dstype3={0x7, 0xa}], 0x2) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0xc0010058, 0x0, 0xffffffffffffffff}]}) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 286.534162ms ago: executing program 4 (id=778): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0xcc) r1 = syz_io_uring_setup(0x574b, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0xffffffff, 0x2b7, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='schedstat\x00') ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) pread64(r2, 0x0, 0x0, 0x8000) r3 = userfaultfd(0x801) r4 = getpid() syz_pidfd_open(r4, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) kcmp(r4, r5, 0x4, r3, r1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x5f42, &(0x7f0000000500)={0x0, 0x1000001c, 0x27, 0x2, 0x24f, 0x0, r7}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x5793, &(0x7f0000000340)={0x0, 0xca20, 0x10000, 0xfffffff7, 0x212}, &(0x7f0000000100), &(0x7f0000ff4000), 0x0) mount_setattr(r0, &(0x7f0000000140)='./file0\x00', 0x8000, &(0x7f00000001c0)={0x4, 0x18f, 0x1a0000, {r0}}, 0x20) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000480), 0x20084, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 193.159495ms ago: executing program 2 (id=779): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x882, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r3, 0x40104d05, &(0x7f0000000900)="00000d0000000000000001") close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x9004}, 0x4) sendmmsg$inet6(r4, &(0x7f0000001e40)=[{{&(0x7f0000002180)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, 0x8}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000100)='S', 0x1}], 0x1}}], 0x1, 0x240880d1) r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x200000, 0x0) close_range(r1, r6, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRESDEC=r3, @ANYRESOCT=r2], 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000040) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) lseek(r7, 0x1, 0x1) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000240)={0x21, 0x3, 0x0, {0x6}}, 0x21) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) syz_clone3(&(0x7f0000003440)={0x88000000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[0xffffffffffffffff], 0x1}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1e3) mount(0x0, &(0x7f0000000140)='./sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x200008, 0x0) 187.911075ms ago: executing program 2 (id=780): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x13) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "e7cdc75f", '\x00\x00\x00\x00\x00\x00\x00X'}, 0x28) writev(r0, &(0x7f0000004800), 0x0) syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000202505a1a440000000010109024a000101000000090400001702020000052406000005240000000d240f01000000000600000020062407040700090581034000000000090582021000000000090503024002"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 0s ago: executing program 7 (id=781): r0 = syz_open_dev$loop(&(0x7f0000000180), 0x80010a, 0x1cb681) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x103d, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xa, 0xb0, 0x81, {0x8, 0xb, 0x0, 0x3, 0x1, 0x23, 0x30, 0xe5}, {{{0x9, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x120, 0x1e, 0xd, 0x10, {0xa, 0x25, 0x25, 0x3, 0x50, 0xfffe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0xe3, 0x1, {0xa, 0x25, 0x25, 0x0, 0xd, 0x1}}}}}}}}]}}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x127e, 0x400) capset(0x0, &(0x7f00000000c0)={0x6, 0x200007, 0x801, 0x4, 0xe, 0x8}) syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5600010102030109025100010100c032090400000208065000070501020002000705820200020009040001050806620007050102000200032401070502"], 0x0) kernel console output (not intermixed with test programs): 0 [ 100.212453][ T2082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.212466][ T2082] R13: 00007fb4e9626038 R14: 00007fb4e9625fa0 R15: 00007ffcaa49b3c8 [ 100.212482][ T2082] [ 100.609355][ T2087] netlink: 'syz.4.581': attribute type 63 has an invalid length. [ 100.617164][ T2087] netlink: 16 bytes leftover after parsing attributes in process `syz.4.581'. [ 100.703016][ T45] usb 3-1: USB disconnect, device number 42 [ 100.830666][ T63] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 101.000663][ T63] usb 4-1: Using ep0 maxpacket: 32 [ 101.011643][ T63] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 101.019215][ T63] usb 4-1: can't read configurations, error -61 [ 101.040669][ T45] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 101.170687][ T63] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 101.203847][ T45] usb 3-1: config 1 has an invalid interface number: 93 but max is 0 [ 101.222367][ T45] usb 3-1: config 1 has no interface number 0 [ 101.228588][ T45] usb 3-1: config 1 interface 93 has no altsetting 0 [ 101.245533][ T45] usb 3-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=6b.02 [ 101.269217][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.340677][ T63] usb 4-1: Using ep0 maxpacket: 32 [ 101.351968][ T63] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 101.359547][ T63] usb 4-1: can't read configurations, error -61 [ 101.380787][ T63] usb usb4-port1: attempt power cycle [ 101.479733][ T45] usb 3-1: string descriptor 0 read error: -71 [ 101.489713][ T45] gl620a 3-1:1.93: probe with driver gl620a failed with error -22 [ 101.501370][ T45] usb 3-1: USB disconnect, device number 43 [ 101.550672][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 101.720661][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 101.730689][ T63] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 101.751990][ T9] usb 5-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 101.761241][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.769310][ T9] usb 5-1: Product: syz [ 101.780986][ T63] usb 4-1: Using ep0 maxpacket: 32 [ 101.790708][ T9] usb 5-1: Manufacturer: syz [ 101.795338][ T9] usb 5-1: SerialNumber: syz [ 101.811309][ T63] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 101.818876][ T63] usb 4-1: can't read configurations, error -61 [ 101.970703][ T63] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 102.002854][ T63] usb 4-1: Using ep0 maxpacket: 32 [ 102.021797][ T63] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 102.030345][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 102.040741][ T63] usb 4-1: can't read configurations, error -61 [ 102.056218][ T63] usb usb4-port1: unable to enumerate USB device [ 102.062831][ T9] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 102.081880][ T9] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 102.101428][ T9] usb 5-1: USB disconnect, device number 5 [ 102.199432][ T2107] FAULT_INJECTION: forcing a failure. [ 102.199432][ T2107] name failslab, interval 1, probability 0, space 0, times 0 [ 102.212261][ T2107] CPU: 1 UID: 0 PID: 2107 Comm: syz.2.589 Not tainted syzkaller #0 02f2c9a1947d185dcc234937001f7d1e6f97c77a [ 102.212295][ T2107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.212306][ T2107] Call Trace: [ 102.212312][ T2107] [ 102.212319][ T2107] __dump_stack+0x21/0x30 [ 102.212349][ T2107] dump_stack_lvl+0x140/0x1c0 [ 102.212374][ T2107] ? __cfi_dump_stack_lvl+0x10/0x10 [ 102.212400][ T2107] dump_stack+0x19/0x20 [ 102.212420][ T2107] should_fail_ex+0x3c2/0x510 [ 102.212442][ T2107] ? ovl_cache_entry_new+0x49/0x700 [ 102.212461][ T2107] should_failslab+0xac/0x100 [ 102.212484][ T2107] __kmalloc_noprof+0x69/0x510 [ 102.212503][ T2107] ? ovl_cache_entry_new+0x49/0x700 [ 102.212523][ T2107] ? __kasan_check_write+0x18/0x20 [ 102.212541][ T2107] ovl_cache_entry_new+0x49/0x700 [ 102.212560][ T2107] ? ovl_fill_merge+0x181/0x870 [ 102.212578][ T2107] ovl_fill_merge+0x2c3/0x870 [ 102.212596][ T2107] ? __cfi_ovl_fill_merge+0x10/0x10 [ 102.212614][ T2107] offset_readdir+0x38f/0x480 [ 102.212638][ T2107] iterate_dir+0x1fa/0x5c0 [ 102.212661][ T2107] ovl_dir_read+0xf0/0x560 [ 102.212678][ T2107] ? ovl_path_next+0x230/0x420 [ 102.212702][ T2107] ovl_dir_read_merged+0x2ca/0x3d0 [ 102.212720][ T2107] ? ovl_check_empty_dir+0x450/0x450 [ 102.212737][ T2107] ? __cfi_ovl_fill_merge+0x10/0x10 [ 102.212757][ T2107] ? ovl_iterate+0xcb7/0x2020 [ 102.212776][ T2107] ovl_iterate+0xd79/0x2020 [ 102.212794][ T2107] ? _parse_integer+0x2e/0x40 [ 102.212813][ T2107] ? kstrtoull+0x13b/0x1e0 [ 102.212832][ T2107] ? __cfi_ovl_iterate+0x10/0x10 [ 102.212850][ T2107] ? kstrtouint+0x78/0xf0 [ 102.212868][ T2107] ? kstrtouint_from_user+0x117/0x170 [ 102.212889][ T2107] ? __x64_sys_openat+0x13a/0x170 [ 102.212922][ T2107] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 102.212943][ T2107] ? selinux_file_permission+0x318/0xb60 [ 102.212965][ T2107] ? __kasan_check_write+0x18/0x20 [ 102.212984][ T2107] ? __kasan_check_write+0x18/0x20 [ 102.213001][ T2107] ? __kasan_check_write+0x18/0x20 [ 102.213020][ T2107] ? down_write+0xee/0x2b0 [ 102.213040][ T2107] ? __cfi_down_write+0x10/0x10 [ 102.213060][ T2107] ? __cfi_selinux_file_permission+0x10/0x10 [ 102.213079][ T2107] ? __kasan_check_write+0x18/0x20 [ 102.213098][ T2107] wrap_directory_iterator+0xaa/0xf0 [ 102.213120][ T2107] ? __cfi_ovl_iterate+0x10/0x10 [ 102.213138][ T2107] shared_ovl_iterate+0x28/0x40 [ 102.213155][ T2107] iterate_dir+0x1fa/0x5c0 [ 102.213187][ T2107] __se_sys_getdents64+0xf6/0x250 [ 102.213210][ T2107] ? fput+0x1a4/0x230 [ 102.213233][ T2107] ? __x64_sys_getdents64+0xa0/0xa0 [ 102.213255][ T2107] ? ksys_write+0x1f3/0x260 [ 102.213273][ T2107] ? __cfi_filldir64+0x10/0x10 [ 102.213296][ T2107] ? __cfi_ksys_write+0x10/0x10 [ 102.213315][ T2107] ? __kasan_check_read+0x15/0x20 [ 102.213334][ T2107] __x64_sys_getdents64+0x7f/0xa0 [ 102.213358][ T2107] x64_sys_call+0x27d0/0x2ee0 [ 102.213375][ T2107] do_syscall_64+0x57/0xf0 [ 102.213400][ T2107] ? clear_bhb_loop+0x50/0xa0 [ 102.213419][ T2107] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 102.213438][ T2107] RIP: 0033:0x7fccdcf9e0d9 [ 102.213455][ T2107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.213470][ T2107] RSP: 002b:00007fccdb9e3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 102.213496][ T2107] RAX: ffffffffffffffda RBX: 00007fccdd225fa0 RCX: 00007fccdcf9e0d9 [ 102.213511][ T2107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 102.213527][ T2107] RBP: 00007fccdb9e3090 R08: 0000000000000000 R09: 0000000000000000 [ 102.213539][ T2107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.213551][ T2107] R13: 00007fccdd226038 R14: 00007fccdd225fa0 R15: 00007ffc51140f58 [ 102.213567][ T2107] [ 102.792985][ T2124] Bluetooth: hci0: Frame reassembly failed (-84) [ 102.802600][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 103.160673][ T31] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 103.330690][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 103.337138][ T31] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 103.345507][ T31] usb 5-1: config 2 has no interface number 0 [ 103.351901][ T31] usb 5-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 103.362177][ T31] usb 5-1: config 2 interface 88 has no altsetting 0 [ 103.370435][ T31] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 103.384859][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 103.405643][ T31] usb 5-1: Product: syz [ 103.409849][ T31] usb 5-1: Manufacturer: syz [ 103.414686][ T31] usb 5-1: SerialNumber: syz [ 103.420853][ T2129] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 103.680505][ T2132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.689860][ T2132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.699248][ T36] audit: type=1400 audit(1787733890.149:538): avc: denied { execute } for pid=2128 comm="syz.4.597" dev="tmpfs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.721130][ T36] audit: type=1400 audit(1787733890.169:539): avc: denied { execute_no_trans } for pid=2128 comm="syz.4.597" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.800667][ T331] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 103.950654][ T331] usb 4-1: Using ep0 maxpacket: 16 [ 103.957093][ T331] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 103.970323][ T331] usb 4-1: config 0 interface 0 has no altsetting 0 [ 103.977171][ T331] usb 4-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 103.986546][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.995897][ T331] usb 4-1: config 0 descriptor?? [ 104.405740][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.421821][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.439354][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.452407][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.469850][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.480132][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.487395][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.499427][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.506714][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.513989][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.521643][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.528722][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.536065][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.543275][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.550360][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.557654][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.564895][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.572121][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.579221][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.586560][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.593810][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.601028][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.610437][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.617695][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.624956][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.632154][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.639227][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.646584][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.653835][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.661046][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.668125][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.675451][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.682682][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.689732][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.697040][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.704230][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.711632][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.718676][ T331] a4tech 0003:09DA:000A.0012: unknown main item tag 0x0 [ 104.727428][ T331] a4tech 0003:09DA:000A.0012: hidraw1: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.3-1/input0 [ 104.752915][ T331] usb 4-1: USB disconnect, device number 58 [ 104.870655][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 104.876698][ T1066] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 104.901695][ T2137] FAULT_INJECTION: forcing a failure. [ 104.901695][ T2137] name failslab, interval 1, probability 0, space 0, times 0 [ 104.914487][ T2137] CPU: 1 UID: 0 PID: 2137 Comm: syz.2.599 Not tainted syzkaller #0 02f2c9a1947d185dcc234937001f7d1e6f97c77a [ 104.914522][ T2137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.914535][ T2137] Call Trace: [ 104.914541][ T2137] [ 104.914548][ T2137] __dump_stack+0x21/0x30 [ 104.914578][ T2137] dump_stack_lvl+0x140/0x1c0 [ 104.914603][ T2137] ? __cfi_dump_stack_lvl+0x10/0x10 [ 104.914628][ T2137] dump_stack+0x19/0x20 [ 104.914651][ T2137] should_fail_ex+0x3c2/0x510 [ 104.914673][ T2137] ? ovl_cache_entry_new+0x49/0x700 [ 104.914692][ T2137] should_failslab+0xac/0x100 [ 104.914715][ T2137] __kmalloc_noprof+0x69/0x510 [ 104.914760][ T2137] ? ovl_cache_entry_new+0x49/0x700 [ 104.914780][ T2137] ? __kasan_check_write+0x18/0x20 [ 104.914800][ T2137] ovl_cache_entry_new+0x49/0x700 [ 104.914818][ T2137] ? ovl_fill_merge+0x181/0x870 [ 104.914837][ T2137] ovl_fill_merge+0x2c3/0x870 [ 104.914856][ T2137] ? __cfi_ovl_fill_merge+0x10/0x10 [ 104.914874][ T2137] offset_readdir+0x38f/0x480 [ 104.914898][ T2137] iterate_dir+0x1fa/0x5c0 [ 104.914920][ T2137] ovl_dir_read+0xf0/0x560 [ 104.914938][ T2137] ? ovl_path_next+0x230/0x420 [ 104.914961][ T2137] ovl_dir_read_merged+0x2ca/0x3d0 [ 104.914979][ T2137] ? ovl_check_empty_dir+0x450/0x450 [ 104.914997][ T2137] ? __cfi_ovl_fill_merge+0x10/0x10 [ 104.915017][ T2137] ? ovl_iterate+0xcb7/0x2020 [ 104.915035][ T2137] ovl_iterate+0xd79/0x2020 [ 104.915054][ T2137] ? _parse_integer+0x2e/0x40 [ 104.915073][ T2137] ? kstrtoull+0x13b/0x1e0 [ 104.915091][ T2137] ? __cfi_ovl_iterate+0x10/0x10 [ 104.915110][ T2137] ? kstrtouint+0x78/0xf0 [ 104.915128][ T2137] ? kstrtouint_from_user+0x117/0x170 [ 104.915148][ T2137] ? __x64_sys_openat+0x13a/0x170 [ 104.915173][ T2137] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 104.915193][ T2137] ? selinux_file_permission+0x318/0xb60 [ 104.915214][ T2137] ? __kasan_check_write+0x18/0x20 [ 104.915239][ T2137] ? __kasan_check_write+0x18/0x20 [ 104.915258][ T2137] ? __kasan_check_write+0x18/0x20 [ 104.915276][ T2137] ? down_write+0xee/0x2b0 [ 104.915296][ T2137] ? __cfi_down_write+0x10/0x10 [ 104.915316][ T2137] ? __cfi_selinux_file_permission+0x10/0x10 [ 104.915335][ T2137] ? __kasan_check_write+0x18/0x20 [ 104.915354][ T2137] wrap_directory_iterator+0xaa/0xf0 [ 104.915377][ T2137] ? __cfi_ovl_iterate+0x10/0x10 [ 104.915395][ T2137] shared_ovl_iterate+0x28/0x40 [ 104.915412][ T2137] iterate_dir+0x1fa/0x5c0 [ 104.915434][ T2137] __se_sys_getdents64+0xf6/0x250 [ 104.915457][ T2137] ? fput+0x1a4/0x230 [ 104.915479][ T2137] ? __x64_sys_getdents64+0xa0/0xa0 [ 104.915501][ T2137] ? ksys_write+0x1f3/0x260 [ 104.915520][ T2137] ? __cfi_filldir64+0x10/0x10 [ 104.915542][ T2137] ? __cfi_ksys_write+0x10/0x10 [ 104.915561][ T2137] ? __kasan_check_read+0x15/0x20 [ 104.915580][ T2137] __x64_sys_getdents64+0x7f/0xa0 [ 104.915604][ T2137] x64_sys_call+0x27d0/0x2ee0 [ 104.915621][ T2137] do_syscall_64+0x57/0xf0 [ 104.915645][ T2137] ? clear_bhb_loop+0x50/0xa0 [ 104.915665][ T2137] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 104.915684][ T2137] RIP: 0033:0x7fccdcf9e0d9 [ 104.915701][ T2137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.915717][ T2137] RSP: 002b:00007fccdb9e3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 104.915737][ T2137] RAX: ffffffffffffffda RBX: 00007fccdd225fa0 RCX: 00007fccdcf9e0d9 [ 104.915752][ T2137] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 104.915763][ T2137] RBP: 00007fccdb9e3090 R08: 0000000000000000 R09: 0000000000000000 [ 104.915775][ T2137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 104.915787][ T2137] R13: 00007fccdd226038 R14: 00007fccdd225fa0 R15: 00007ffc51140f58 [ 104.915802][ T2137] [ 105.448139][ T46] bridge_slave_1: left allmulticast mode [ 105.458127][ T46] bridge_slave_1: left promiscuous mode [ 105.464058][ T2141] capability: warning: `syz.2.601' uses 32-bit capabilities (legacy support in use) [ 105.470729][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.481313][ T46] bridge_slave_0: left allmulticast mode [ 105.487020][ T46] bridge_slave_0: left promiscuous mode [ 105.492792][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.550953][ T2140] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.558044][ T2140] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.565164][ T2140] bridge_slave_0: entered allmulticast mode [ 105.572585][ T2140] bridge_slave_0: entered promiscuous mode [ 105.579253][ T46] veth1_macvtap: left promiscuous mode [ 105.616606][ T2140] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.623716][ T2140] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.630877][ T2140] bridge_slave_1: entered allmulticast mode [ 105.637167][ T2140] bridge_slave_1: entered promiscuous mode [ 105.640668][ T331] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 105.688807][ T2140] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.695908][ T2140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.703217][ T2140] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.710313][ T2140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.732376][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.739634][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.748927][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.755994][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.772724][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.779772][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.797593][ T2140] veth0_vlan: entered promiscuous mode [ 105.808436][ T2140] veth1_macvtap: entered promiscuous mode [ 105.814342][ T331] usb 4-1: Using ep0 maxpacket: 16 [ 105.822397][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.834637][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.844556][ T331] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 105.857660][ T331] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 105.866915][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.877501][ T331] usb 4-1: config 0 descriptor?? [ 105.928325][ T31] asix 5-1:2.88: probe with driver asix failed with error -71 [ 105.941050][ T31] usb 5-1: USB disconnect, device number 6 [ 106.190688][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 106.250700][ T31] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 106.270660][ T45] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 106.284778][ T331] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 106.292095][ T331] microsoft 0003:045E:07DA.0013: ignoring exceeding usage max [ 106.300584][ T331] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 106.307920][ T331] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 106.315198][ T331] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 106.322695][ T331] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 106.329926][ T331] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 106.337187][ T331] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 106.344490][ T331] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 106.350665][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 106.351873][ T331] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 106.358566][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 106.364033][ T331] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 106.373054][ T9] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 73, changing to 7 [ 106.378878][ T331] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 106.391859][ T9] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 106.406806][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.414854][ T9] usb 6-1: Product: syz [ 106.419116][ T9] usb 6-1: Manufacturer: syz [ 106.419453][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.423766][ T9] usb 6-1: SerialNumber: syz [ 106.435429][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8192, setting to 1024 [ 106.450668][ T31] usb 5-1: New USB device found, idVendor=05ac, idProduct=024f, bcdDevice= 0.00 [ 106.459797][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.468315][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.479913][ T31] usb 5-1: config 0 descriptor?? [ 106.486644][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 106.495773][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.503858][ T45] usb 3-1: Product: syz [ 106.508370][ T331] microsoft 0003:045E:07DA.0013: No inputs registered, leaving [ 106.515978][ T45] usb 3-1: Manufacturer: syz [ 106.520584][ T45] usb 3-1: SerialNumber: syz [ 106.526531][ T331] microsoft 0003:045E:07DA.0013: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 106.538549][ T331] microsoft 0003:045E:07DA.0013: no inputs found [ 106.545506][ T331] microsoft 0003:045E:07DA.0013: could not initialize ff, continuing anyway [ 106.554468][ T45] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 106.560436][ T45] cdc_wdm 3-1:1.0: Unknown control protocol [ 106.571347][ T331] usb 4-1: USB disconnect, device number 59 [ 106.686250][ T36] audit: type=1400 audit(1787733893.139:540): avc: denied { create } for pid=2158 comm="syz.4.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 106.691927][ T2159] netlink: 20 bytes leftover after parsing attributes in process `syz.4.603'. [ 106.738521][ C0] cdc_wdm 3-1:1.0: unknown notification 134 received: index 18126 len 0 [ 106.854396][ T9] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 106.873429][ T9] usb 6-1: USB disconnect, device number 2 [ 106.920183][ T36] audit: type=1400 audit(1787733893.369:541): avc: denied { create } for pid=2158 comm="syz.4.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 106.940078][ T327] usb 3-1: USB disconnect, device number 44 [ 106.940265][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 106.952021][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 106.962949][ T31] usb 5-1: USB disconnect, device number 7 [ 107.250680][ T331] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 107.400782][ T331] usb 4-1: Using ep0 maxpacket: 8 [ 107.412940][ T331] usb 4-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 107.423850][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.432137][ T331] usb 4-1: Product: syz [ 107.436313][ T331] usb 4-1: Manufacturer: syz [ 107.440921][ T331] usb 4-1: SerialNumber: syz [ 107.477403][ T2175] FAULT_INJECTION: forcing a failure. [ 107.477403][ T2175] name failslab, interval 1, probability 0, space 0, times 0 [ 107.490138][ T2175] CPU: 1 UID: 0 PID: 2175 Comm: syz.2.609 Not tainted syzkaller #0 02f2c9a1947d185dcc234937001f7d1e6f97c77a [ 107.490169][ T2175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.490180][ T2175] Call Trace: [ 107.490185][ T2175] [ 107.490193][ T2175] __dump_stack+0x21/0x30 [ 107.490227][ T2175] dump_stack_lvl+0x140/0x1c0 [ 107.490253][ T2175] ? __cfi_dump_stack_lvl+0x10/0x10 [ 107.490278][ T2175] dump_stack+0x19/0x20 [ 107.490298][ T2175] should_fail_ex+0x3c2/0x510 [ 107.490317][ T2175] ? ovl_cache_entry_new+0x49/0x700 [ 107.490334][ T2175] should_failslab+0xac/0x100 [ 107.490357][ T2175] __kmalloc_noprof+0x69/0x510 [ 107.490378][ T2175] ? ovl_cache_entry_new+0x49/0x700 [ 107.490398][ T2175] ? __kasan_check_write+0x18/0x20 [ 107.490417][ T2175] ovl_cache_entry_new+0x49/0x700 [ 107.490435][ T2175] ? ovl_fill_merge+0x181/0x870 [ 107.490452][ T2175] ovl_fill_merge+0x2c3/0x870 [ 107.490469][ T2175] ? __cfi_ovl_fill_merge+0x10/0x10 [ 107.490486][ T2175] offset_readdir+0x38f/0x480 [ 107.490507][ T2175] iterate_dir+0x1fa/0x5c0 [ 107.490527][ T2175] ovl_dir_read+0xf0/0x560 [ 107.490545][ T2175] ? ovl_path_next+0x230/0x420 [ 107.490567][ T2175] ovl_dir_read_merged+0x2ca/0x3d0 [ 107.490585][ T2175] ? ovl_check_empty_dir+0x450/0x450 [ 107.490603][ T2175] ? __cfi_ovl_fill_merge+0x10/0x10 [ 107.490629][ T2175] ? ovl_iterate+0xcb7/0x2020 [ 107.490645][ T2175] ovl_iterate+0xd79/0x2020 [ 107.490662][ T2175] ? _parse_integer+0x2e/0x40 [ 107.490680][ T2175] ? kstrtoull+0x13b/0x1e0 [ 107.490697][ T2175] ? __cfi_ovl_iterate+0x10/0x10 [ 107.490711][ T2175] ? kstrtouint+0x78/0xf0 [ 107.490727][ T2175] ? kstrtouint_from_user+0x117/0x170 [ 107.490744][ T2175] ? __x64_sys_openat+0x13a/0x170 [ 107.490765][ T2175] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 107.490781][ T2175] ? selinux_file_permission+0x318/0xb60 [ 107.490800][ T2175] ? __kasan_check_write+0x18/0x20 [ 107.490818][ T2175] ? __kasan_check_write+0x18/0x20 [ 107.490835][ T2175] ? __kasan_check_write+0x18/0x20 [ 107.490851][ T2175] ? down_write+0xee/0x2b0 [ 107.490872][ T2175] ? __cfi_down_write+0x10/0x10 [ 107.490893][ T2175] ? __cfi_selinux_file_permission+0x10/0x10 [ 107.490913][ T2175] ? __kasan_check_write+0x18/0x20 [ 107.490933][ T2175] wrap_directory_iterator+0xaa/0xf0 [ 107.490956][ T2175] ? __cfi_ovl_iterate+0x10/0x10 [ 107.490973][ T2175] shared_ovl_iterate+0x28/0x40 [ 107.490989][ T2175] iterate_dir+0x1fa/0x5c0 [ 107.491008][ T2175] __se_sys_getdents64+0xf6/0x250 [ 107.491027][ T2175] ? fput+0x1a4/0x230 [ 107.491041][ T2175] ? __x64_sys_getdents64+0xa0/0xa0 [ 107.491053][ T2175] ? ksys_write+0x1f3/0x260 [ 107.491063][ T2175] ? __cfi_filldir64+0x10/0x10 [ 107.491076][ T2175] ? __cfi_ksys_write+0x10/0x10 [ 107.491087][ T2175] ? __kasan_check_read+0x15/0x20 [ 107.491097][ T2175] __x64_sys_getdents64+0x7f/0xa0 [ 107.491109][ T2175] x64_sys_call+0x27d0/0x2ee0 [ 107.491122][ T2175] do_syscall_64+0x57/0xf0 [ 107.491136][ T2175] ? clear_bhb_loop+0x50/0xa0 [ 107.491147][ T2175] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 107.491158][ T2175] RIP: 0033:0x7fccdcf9e0d9 [ 107.491168][ T2175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.491177][ T2175] RSP: 002b:00007fccdb9e3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 107.491190][ T2175] RAX: ffffffffffffffda RBX: 00007fccdd225fa0 RCX: 00007fccdcf9e0d9 [ 107.491198][ T2175] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 107.491205][ T2175] RBP: 00007fccdb9e3090 R08: 0000000000000000 R09: 0000000000000000 [ 107.491213][ T2175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.491222][ T2175] R13: 00007fccdd226038 R14: 00007fccdd225fa0 R15: 00007ffc51140f58 [ 107.491231][ T2175] [ 107.649844][ T2167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.867336][ T2167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.882757][ T2167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.891923][ T2167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.908064][ T331] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 107.909739][ T2182] futex_wake_op: syz.2.611 tries to shift op by 144; fix this program [ 107.918830][ T331] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 107.925543][ T327] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 107.951895][ T331] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 107.967533][ T331] usb 4-1: USB disconnect, device number 60 [ 108.090671][ T327] usb 6-1: Using ep0 maxpacket: 16 [ 108.096802][ T327] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.106765][ T327] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x2 has an invalid bInterval 126, changing to 10 [ 108.117996][ T327] usb 6-1: config 0 interface 0 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 108.131051][ T327] usb 6-1: config 0 interface 0 has no altsetting 0 [ 108.137675][ T327] usb 6-1: New USB device found, idVendor=227d, idProduct=0709, bcdDevice= 0.00 [ 108.146993][ T327] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.155754][ T327] usb 6-1: config 0 descriptor?? [ 108.200679][ T402] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 108.208566][ T9] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 108.361361][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 108.369725][ T402] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 108.380773][ T402] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 108.391958][ T9] usb 5-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 108.402306][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 108.411405][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.425477][ T9] usb 5-1: Found UVC 1.00 device (046d:0825) [ 108.435316][ T402] usb 3-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice= 0.40 [ 108.450494][ T402] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.460759][ T9] usb 5-1: No streaming interface found for terminal 2. [ 108.471495][ T402] usb 3-1: Product: syz [ 108.475710][ T402] usb 3-1: Manufacturer: syz [ 108.482103][ T402] usb 3-1: SerialNumber: syz [ 108.627762][ T9] usb 5-1: USB disconnect, device number 8 [ 108.662706][ T46] bridge_slave_1: left allmulticast mode [ 108.668446][ T46] bridge_slave_1: left promiscuous mode [ 108.674146][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.682091][ T46] bridge_slave_0: left allmulticast mode [ 108.687969][ T46] bridge_slave_0: left promiscuous mode [ 108.693795][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.694469][ T402] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 108.722250][ T402] usb 3-1: cannot setup if 2: error -71 [ 108.727921][ T402] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 108.751532][ T402] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 108.770676][ T402] usb 3-1: cannot setup if 2: error -71 [ 108.771721][ T2171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.776388][ T402] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 108.789182][ T2171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.807575][ T327] usbhid 6-1:0.0: can't add hid device: -71 [ 108.820769][ T327] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 108.822242][ T2199] FAULT_INJECTION: forcing a failure. [ 108.822242][ T2199] name failslab, interval 1, probability 0, space 0, times 0 [ 108.840775][ T327] usb 6-1: USB disconnect, device number 3 [ 108.844314][ T2199] CPU: 1 UID: 0 PID: 2199 Comm: syz.5.619 Not tainted syzkaller #0 02f2c9a1947d185dcc234937001f7d1e6f97c77a [ 108.844345][ T2199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.844357][ T2199] Call Trace: [ 108.844364][ T2199] [ 108.844371][ T2199] __dump_stack+0x21/0x30 [ 108.844405][ T2199] dump_stack_lvl+0x140/0x1c0 [ 108.844440][ T2199] ? __cfi_dump_stack_lvl+0x10/0x10 [ 108.844465][ T2199] dump_stack+0x19/0x20 [ 108.844488][ T2199] should_fail_ex+0x3c2/0x510 [ 108.844510][ T2199] ? ovl_cache_entry_new+0x49/0x700 [ 108.844532][ T2199] should_failslab+0xac/0x100 [ 108.844559][ T2199] __kmalloc_noprof+0x69/0x510 [ 108.844579][ T2199] ? ovl_cache_entry_new+0x49/0x700 [ 108.844602][ T2199] ? __kasan_check_write+0x18/0x20 [ 108.844621][ T2199] ovl_cache_entry_new+0x49/0x700 [ 108.844639][ T2199] ? ovl_fill_merge+0x181/0x870 [ 108.844658][ T2199] ovl_fill_merge+0x2c3/0x870 [ 108.844676][ T2199] ? __cfi_ovl_fill_merge+0x10/0x10 [ 108.844694][ T2199] offset_readdir+0x38f/0x480 [ 108.844717][ T2199] iterate_dir+0x1fa/0x5c0 [ 108.844740][ T2199] ovl_dir_read+0xf0/0x560 [ 108.844756][ T2199] ? ovl_path_next+0x230/0x420 [ 108.844779][ T2199] ovl_dir_read_merged+0x2ca/0x3d0 [ 108.844796][ T2199] ? ovl_check_empty_dir+0x450/0x450 [ 108.844813][ T2199] ? __cfi_ovl_fill_merge+0x10/0x10 [ 108.844833][ T2199] ? ovl_iterate+0xcb7/0x2020 [ 108.844851][ T2199] ovl_iterate+0xd79/0x2020 [ 108.844869][ T2199] ? _parse_integer+0x2e/0x40 [ 108.844888][ T2199] ? kstrtoull+0x13b/0x1e0 [ 108.844906][ T2199] ? __cfi_ovl_iterate+0x10/0x10 [ 108.844923][ T2199] ? kstrtouint+0x78/0xf0 [ 108.844941][ T2199] ? kstrtouint_from_user+0x117/0x170 [ 108.844960][ T2199] ? __x64_sys_openat+0x13a/0x170 [ 108.844985][ T2199] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 108.845004][ T2199] ? selinux_file_permission+0x318/0xb60 [ 108.845025][ T2199] ? __kasan_check_write+0x18/0x20 [ 108.845044][ T2199] ? __kasan_check_write+0x18/0x20 [ 108.845063][ T2199] ? __kasan_check_write+0x18/0x20 [ 108.845080][ T2199] ? down_write+0xee/0x2b0 [ 108.845100][ T2199] ? __cfi_down_write+0x10/0x10 [ 108.845119][ T2199] ? __cfi_selinux_file_permission+0x10/0x10 [ 108.845138][ T2199] ? __kasan_check_write+0x18/0x20 [ 108.845156][ T2199] wrap_directory_iterator+0xaa/0xf0 [ 108.845178][ T2199] ? __cfi_ovl_iterate+0x10/0x10 [ 108.845194][ T2199] shared_ovl_iterate+0x28/0x40 [ 108.845211][ T2199] iterate_dir+0x1fa/0x5c0 [ 108.845233][ T2199] __se_sys_getdents64+0xf6/0x250 [ 108.845254][ T2199] ? fput+0x1a4/0x230 [ 108.845277][ T2199] ? __x64_sys_getdents64+0xa0/0xa0 [ 108.845298][ T2199] ? ksys_write+0x1f3/0x260 [ 108.845316][ T2199] ? __cfi_filldir64+0x10/0x10 [ 108.845338][ T2199] ? __cfi_ksys_write+0x10/0x10 [ 108.845357][ T2199] ? __kasan_check_read+0x15/0x20 [ 108.845376][ T2199] __x64_sys_getdents64+0x7f/0xa0 [ 108.845398][ T2199] x64_sys_call+0x27d0/0x2ee0 [ 108.845415][ T2199] do_syscall_64+0x57/0xf0 [ 108.845444][ T2199] ? clear_bhb_loop+0x50/0xa0 [ 108.845463][ T2199] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 108.845481][ T2199] RIP: 0033:0x7f393699e0d9 [ 108.845497][ T2199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.845516][ T2199] RSP: 002b:00007f393784a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 108.845540][ T2199] RAX: ffffffffffffffda RBX: 00007f3936c25fa0 RCX: 00007f393699e0d9 [ 108.845555][ T2199] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 108.845566][ T2199] RBP: 00007f393784a090 R08: 0000000000000000 R09: 0000000000000000 [ 108.845578][ T2199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.845590][ T2199] R13: 00007f3936c26038 R14: 00007f3936c25fa0 R15: 00007ffc174bf708 [ 108.845605][ T2199] [ 108.946160][ T2200] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.948281][ T402] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 108.953955][ T2200] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.959361][ T402] usb 3-1: cannot setup if 2: error -71 [ 108.966652][ T2200] bridge_slave_0: entered allmulticast mode [ 108.979649][ T402] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 108.982717][ T2200] bridge_slave_0: entered promiscuous mode [ 109.006232][ T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 109.011064][ T2200] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.021656][ T402] usb 3-1: USB disconnect, device number 45 [ 109.026761][ T2200] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.297735][ T2200] bridge_slave_1: entered allmulticast mode [ 109.304144][ T2200] bridge_slave_1: entered promiscuous mode [ 109.311035][ T46] veth1_macvtap: left promiscuous mode [ 109.316575][ T46] veth0_vlan: left promiscuous mode [ 109.395992][ T2200] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.403042][ T2200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.410307][ T2200] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.417439][ T2200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.424851][ T327] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 109.444834][ T2213] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.452087][ T2213] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.464564][ T2213] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.471603][ T2213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.479200][ T2213] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.486237][ T2213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.505775][ T2200] veth0_vlan: entered promiscuous mode [ 109.516215][ T2200] veth1_macvtap: entered promiscuous mode [ 109.571066][ T45] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 109.585955][ T2223] netlink: 156 bytes leftover after parsing attributes in process `syz.6.627'. [ 109.591608][ T2224] kvm: user requested TSC rate below hardware speed [ 109.595109][ T2223] netlink: 156 bytes leftover after parsing attributes in process `syz.6.627'. [ 109.601596][ T63] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 109.611588][ T2223] netlink: 156 bytes leftover after parsing attributes in process `syz.6.627'. [ 109.634496][ T2223] netlink: 156 bytes leftover after parsing attributes in process `syz.6.627'. [ 109.644079][ T327] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 109.651101][ T2223] netlink: 156 bytes leftover after parsing attributes in process `syz.6.627'. [ 109.653787][ T327] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 109.676622][ T2223] netlink: 156 bytes leftover after parsing attributes in process `syz.6.627'. [ 109.685742][ T327] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 109.694881][ T327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.703089][ T327] usb 5-1: Product: syz [ 109.707253][ T327] usb 5-1: Manufacturer: syz [ 109.711942][ T2223] netlink: 156 bytes leftover after parsing attributes in process `syz.6.627'. [ 109.720916][ T327] usb 5-1: SerialNumber: syz [ 109.722338][ T45] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.729294][ T2223] netlink: 156 bytes leftover after parsing attributes in process `syz.6.627'. [ 109.736685][ T45] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.745623][ T2223] netlink: 156 bytes leftover after parsing attributes in process `syz.6.627'. [ 109.758829][ T45] usb 6-1: config 0 interface 0 has no altsetting 0 [ 109.774106][ T45] usb 6-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 109.783287][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.790652][ T63] usb 3-1: Using ep0 maxpacket: 8 [ 109.796937][ T45] usb 6-1: config 0 descriptor?? [ 109.802029][ T63] usb 3-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 109.812451][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.820464][ T63] usb 3-1: Product: syz [ 109.824719][ T63] usb 3-1: Manufacturer: syz [ 109.829336][ T63] usb 3-1: SerialNumber: syz [ 109.931423][ T327] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 110.135272][ T331] usb 5-1: USB disconnect, device number 9 [ 110.143459][ T331] usblp0: removed [ 110.205069][ T45] smartjoyplus 0003:0B43:0003.0014: unbalanced collection at end of report description [ 110.214952][ T45] smartjoyplus 0003:0B43:0003.0014: parse failed [ 110.221403][ T45] smartjoyplus 0003:0B43:0003.0014: probe with driver smartjoyplus failed with error -22 [ 110.250785][ T327] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 110.380693][ T327] usb 7-1: device descriptor read/64, error -71 [ 110.414351][ T331] usb 6-1: USB disconnect, device number 4 [ 110.565477][ T63] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 110.575326][ T63] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 110.585092][ T63] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 110.596624][ T63] usb 3-1: USB disconnect, device number 46 [ 110.630706][ T327] usb 7-1: device descriptor read/64, error -71 [ 110.652248][ T36] audit: type=1400 audit(1787733897.109:542): avc: denied { read } for pid=2242 comm="syz.4.634" path="socket:[17071]" dev="sockfs" ino=17071 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.714005][ T2253] FAULT_INJECTION: forcing a failure. [ 110.714005][ T2253] name failslab, interval 1, probability 0, space 0, times 0 [ 110.727066][ T2258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.729372][ T2253] CPU: 0 UID: 0 PID: 2253 Comm: syz.4.638 Not tainted syzkaller #0 02f2c9a1947d185dcc234937001f7d1e6f97c77a [ 110.729400][ T2253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.729412][ T2253] Call Trace: [ 110.729419][ T2253] [ 110.729426][ T2253] __dump_stack+0x21/0x30 [ 110.729465][ T2253] dump_stack_lvl+0x140/0x1c0 [ 110.729489][ T2253] ? __cfi_dump_stack_lvl+0x10/0x10 [ 110.729515][ T2253] dump_stack+0x19/0x20 [ 110.729537][ T2253] should_fail_ex+0x3c2/0x510 [ 110.729558][ T2253] should_failslab+0xac/0x100 [ 110.729581][ T2253] __kmalloc_cache_noprof+0x41/0x470 [ 110.729600][ T2253] ? __kasan_check_write+0x18/0x20 [ 110.729618][ T2253] ? ovl_iterate+0xcb7/0x2020 [ 110.729636][ T2253] ? override_creds+0x82/0x110 [ 110.729657][ T2253] ovl_iterate+0xcb7/0x2020 [ 110.729675][ T2253] ? _parse_integer+0x2e/0x40 [ 110.729694][ T2253] ? kstrtoull+0x13b/0x1e0 [ 110.729712][ T2253] ? __cfi_ovl_iterate+0x10/0x10 [ 110.729729][ T2253] ? kstrtouint+0x78/0xf0 [ 110.729747][ T2253] ? kstrtouint_from_user+0x117/0x170 [ 110.729767][ T2253] ? __x64_sys_openat+0x13a/0x170 [ 110.729792][ T2253] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 110.729812][ T2253] ? selinux_file_permission+0x318/0xb60 [ 110.729832][ T2253] ? __kasan_check_write+0x18/0x20 [ 110.729851][ T2253] ? __kasan_check_write+0x18/0x20 [ 110.729869][ T2253] ? __kasan_check_write+0x18/0x20 [ 110.729887][ T2253] ? down_write+0xee/0x2b0 [ 110.729907][ T2253] ? __cfi_down_write+0x10/0x10 [ 110.729925][ T2253] ? __cfi_selinux_file_permission+0x10/0x10 [ 110.729944][ T2253] ? __kasan_check_write+0x18/0x20 [ 110.729962][ T2253] wrap_directory_iterator+0xaa/0xf0 [ 110.729985][ T2253] ? __cfi_ovl_iterate+0x10/0x10 [ 110.730003][ T2253] shared_ovl_iterate+0x28/0x40 [ 110.730018][ T2253] iterate_dir+0x1fa/0x5c0 [ 110.730040][ T2253] __se_sys_getdents64+0xf6/0x250 [ 110.730065][ T2253] ? fput+0x1a4/0x230 [ 110.730088][ T2253] ? __x64_sys_getdents64+0xa0/0xa0 [ 110.730110][ T2253] ? ksys_write+0x1f3/0x260 [ 110.730127][ T2253] ? __cfi_filldir64+0x10/0x10 [ 110.730150][ T2253] ? __cfi_ksys_write+0x10/0x10 [ 110.730169][ T2253] ? __kasan_check_read+0x15/0x20 [ 110.730187][ T2253] __x64_sys_getdents64+0x7f/0xa0 [ 110.730209][ T2253] x64_sys_call+0x27d0/0x2ee0 [ 110.730225][ T2253] do_syscall_64+0x57/0xf0 [ 110.730248][ T2253] ? clear_bhb_loop+0x50/0xa0 [ 110.730267][ T2253] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 110.730285][ T2253] RIP: 0033:0x7f4d1b79e0d9 [ 110.730301][ T2253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.730317][ T2253] RSP: 002b:00007f4d1c6ba028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 110.730338][ T2253] RAX: ffffffffffffffda RBX: 00007f4d1ba25fa0 RCX: 00007f4d1b79e0d9 [ 110.730352][ T2253] RDX: 000000000000008e RSI: 0000200000000000 RDI: 0000000000000003 [ 110.730365][ T2253] RBP: 00007f4d1c6ba090 R08: 0000000000000000 R09: 0000000000000000 [ 110.730378][ T2253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.730390][ T2253] R13: 00007f4d1ba26038 R14: 00007f4d1ba25fa0 R15: 00007ffd3d3e40e8 [ 110.730406][ T2253] [ 110.881720][ T327] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 110.890886][ T2258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.076995][ T36] audit: type=1400 audit(1787733897.529:543): avc: denied { connect } for pid=2266 comm="syz.5.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 111.122942][ T36] audit: type=1400 audit(1787733897.579:544): avc: denied { create } for pid=2266 comm="syz.5.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.143258][ T36] audit: type=1400 audit(1787733897.579:545): avc: denied { write } for pid=2266 comm="syz.5.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.163900][ T36] audit: type=1400 audit(1787733897.579:546): avc: denied { nlmsg_write } for pid=2266 comm="syz.5.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.200681][ T327] usb 7-1: device descriptor read/64, error -71 [ 111.240679][ T63] usb 3-1: new low-speed USB device number 47 using dummy_hcd [ 111.267147][ T2268] overlayfs: failed to resolve './file2': -2 [ 111.397877][ T63] usb 3-1: LPM exit latency is zeroed, disabling LPM. [ 111.405974][ T63] usb 3-1: config 1 has an invalid descriptor of length 71, skipping remainder of the config [ 111.422414][ T63] usb 3-1: string descriptor 0 read error: -22 [ 111.430539][ T63] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.430860][ T45] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 111.443408][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.455208][ T327] usb 7-1: device descriptor read/64, error -71 [ 111.463242][ T63] usb 3-1: bad CDC descriptors [ 111.570737][ T327] usb usb7-port1: attempt power cycle [ 111.610774][ T45] usb 6-1: Using ep0 maxpacket: 8 [ 111.618165][ T45] usb 6-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 111.627386][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.635431][ T45] usb 6-1: Product: syz [ 111.639588][ T45] usb 6-1: Manufacturer: syz [ 111.644189][ T45] usb 6-1: SerialNumber: syz [ 111.662985][ T31] usb 3-1: USB disconnect, device number 47 [ 111.670790][ T331] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 111.821701][ T331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.832853][ T331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.842910][ T331] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.855954][ T331] usb 5-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 111.865083][ T331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.874042][ T45] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 111.884172][ T331] usb 5-1: config 0 descriptor?? [ 111.889938][ T45] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 111.900119][ T45] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 111.910853][ T45] usb 6-1: USB disconnect, device number 5 [ 111.912068][ T327] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 111.951675][ T327] usb 7-1: device descriptor read/8, error -71 [ 112.081673][ T327] usb 7-1: device descriptor read/8, error -71 [ 112.100525][ T36] audit: type=1400 audit(1787733898.549:547): avc: denied { ioctl } for pid=2282 comm="syz.4.646" path="socket:[17608]" dev="sockfs" ino=17608 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 112.101435][ T2283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.125265][ T36] audit: type=1400 audit(1787733898.549:548): avc: denied { lock } for pid=2282 comm="syz.4.646" path="socket:[17608]" dev="sockfs" ino=17608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 112.134311][ T2283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.194868][ T2287] FAULT_INJECTION: forcing a failure. [ 112.194868][ T2287] name failslab, interval 1, probability 0, space 0, times 0 [ 112.207541][ T2287] CPU: 1 UID: 0 PID: 2287 Comm: syz.2.648 Not tainted syzkaller #0 02f2c9a1947d185dcc234937001f7d1e6f97c77a [ 112.207571][ T2287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.207581][ T2287] Call Trace: [ 112.207587][ T2287] [ 112.207594][ T2287] __dump_stack+0x21/0x30 [ 112.207623][ T2287] dump_stack_lvl+0x140/0x1c0 [ 112.207647][ T2287] ? __cfi_dump_stack_lvl+0x10/0x10 [ 112.207672][ T2287] dump_stack+0x19/0x20 [ 112.207685][ T2287] should_fail_ex+0x3c2/0x510 [ 112.207698][ T2287] should_failslab+0xac/0x100 [ 112.207711][ T2287] kmem_cache_alloc_noprof+0x42/0x410 [ 112.207722][ T2287] ? alloc_empty_file+0xbf/0x270 [ 112.207736][ T2287] ? generic_permission+0x1e2/0x590 [ 112.207748][ T2287] alloc_empty_file+0xbf/0x270 [ 112.207761][ T2287] ? make_vfsuid+0x4d/0xa0 [ 112.207771][ T2287] dentry_open+0x4b/0xb0 [ 112.207785][ T2287] ovl_path_open+0x172/0x190 [ 112.207799][ T2287] ovl_dir_read+0x29/0x560 [ 112.207808][ T2287] ? ovl_path_next+0x376/0x420 [ 112.207822][ T2287] ovl_dir_read_merged+0x1cf/0x3d0 [ 112.207831][ T2287] ? ovl_check_empty_dir+0x450/0x450 [ 112.207841][ T2287] ? __cfi_ovl_fill_merge+0x10/0x10 [ 112.207852][ T2287] ? ovl_iterate+0xcb7/0x2020 [ 112.207862][ T2287] ovl_iterate+0xd79/0x2020 [ 112.207872][ T2287] ? _parse_integer+0x2e/0x40 [ 112.207883][ T2287] ? kstrtoull+0x13b/0x1e0 [ 112.207893][ T2287] ? __cfi_ovl_iterate+0x10/0x10 [ 112.207902][ T2287] ? kstrtouint+0x78/0xf0 [ 112.207916][ T2287] ? kstrtouint_from_user+0x117/0x170 [ 112.207927][ T2287] ? __x64_sys_openat+0x13a/0x170 [ 112.207941][ T2287] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 112.207952][ T2287] ? selinux_file_permission+0x318/0xb60 [ 112.207964][ T2287] ? __kasan_check_write+0x18/0x20 [ 112.207976][ T2287] ? __kasan_check_write+0x18/0x20 [ 112.207985][ T2287] ? __kasan_check_write+0x18/0x20 [ 112.207995][ T2287] ? down_write+0xee/0x2b0 [ 112.208007][ T2287] ? __cfi_down_write+0x10/0x10 [ 112.208018][ T2287] ? __cfi_selinux_file_permission+0x10/0x10 [ 112.208028][ T2287] ? __kasan_check_write+0x18/0x20 [ 112.208038][ T2287] wrap_directory_iterator+0xaa/0xf0 [ 112.208051][ T2287] ? __cfi_ovl_iterate+0x10/0x10 [ 112.208061][ T2287] shared_ovl_iterate+0x28/0x40 [ 112.208070][ T2287] iterate_dir+0x1fa/0x5c0 [ 112.208082][ T2287] __se_sys_getdents64+0xf6/0x250 [ 112.208095][ T2287] ? fput+0x1a4/0x230 [ 112.208107][ T2287] ? __x64_sys_getdents64+0xa0/0xa0 [ 112.208120][ T2287] ? ksys_write+0x1f3/0x260 [ 112.208130][ T2287] ? __cfi_filldir64+0x10/0x10 [ 112.208143][ T2287] ? __cfi_ksys_write+0x10/0x10 [ 112.208153][ T2287] ? __kasan_check_read+0x15/0x20 [ 112.208163][ T2287] __x64_sys_getdents64+0x7f/0xa0 [ 112.208176][ T2287] x64_sys_call+0x27d0/0x2ee0 [ 112.208185][ T2287] do_syscall_64+0x57/0xf0 [ 112.208199][ T2287] ? clear_bhb_loop+0x50/0xa0 [ 112.208210][ T2287] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 112.208220][ T2287] RIP: 0033:0x7fccdcf9e0d9 [ 112.208230][ T2287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.208239][ T2287] RSP: 002b:00007fccdb9e3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 112.208252][ T2287] RAX: ffffffffffffffda RBX: 00007fccdd225fa0 RCX: 00007fccdcf9e0d9 [ 112.208260][ T2287] RDX: 000000000000008e RSI: 0000200000000000 RDI: 0000000000000003 [ 112.208267][ T2287] RBP: 00007fccdb9e3090 R08: 0000000000000000 R09: 0000000000000000 [ 112.208274][ T2287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.208280][ T2287] R13: 00007fccdd226038 R14: 00007fccdd225fa0 R15: 00007ffc51140f58 [ 112.208295][ T2287] [ 112.400691][ T327] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 112.500768][ T2289] FAULT_INJECTION: forcing a failure. [ 112.500768][ T2289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.531794][ T327] usb 7-1: device descriptor read/8, error -71 [ 112.535363][ T2289] CPU: 1 UID: 0 PID: 2289 Comm: syz.5.650 Not tainted syzkaller #0 02f2c9a1947d185dcc234937001f7d1e6f97c77a [ 112.535395][ T2289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.535407][ T2289] Call Trace: [ 112.535413][ T2289] [ 112.535420][ T2289] __dump_stack+0x21/0x30 [ 112.535449][ T2289] dump_stack_lvl+0x140/0x1c0 [ 112.535473][ T2289] ? __cfi_dump_stack_lvl+0x10/0x10 [ 112.535498][ T2289] ? check_stack_object+0x138/0x150 [ 112.535519][ T2289] dump_stack+0x19/0x20 [ 112.535540][ T2289] should_fail_ex+0x3c2/0x510 [ 112.535570][ T2289] should_fail+0xf/0x20 [ 112.535589][ T2289] should_fail_usercopy+0x1e/0x30 [ 112.535610][ T2289] _copy_to_user+0x24/0xa0 [ 112.535634][ T2289] simple_read_from_buffer+0xed/0x160 [ 112.535667][ T2289] proc_fail_nth_read+0x1aa/0x220 [ 112.535693][ T2289] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 112.535718][ T2289] ? bpf_lsm_file_permission+0xd/0x20 [ 112.535741][ T2289] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 112.535765][ T2289] vfs_read+0x288/0xc70 [ 112.535783][ T2289] ? __cfi_vfs_read+0x10/0x10 [ 112.535801][ T2289] ? __kasan_check_write+0x18/0x20 [ 112.535820][ T2289] ? mutex_lock+0x97/0x1d0 [ 112.535838][ T2289] ? __cfi_mutex_lock+0x10/0x10 [ 112.535856][ T2289] ksys_read+0x145/0x260 [ 112.535874][ T2289] ? __cfi_ksys_read+0x10/0x10 [ 112.535892][ T2289] ? __cfi_task_work_run+0x10/0x10 [ 112.535916][ T2289] ? __kasan_check_read+0x15/0x20 [ 112.535934][ T2289] __x64_sys_read+0x7f/0x90 [ 112.535953][ T2289] x64_sys_call+0x2638/0x2ee0 [ 112.535969][ T2289] do_syscall_64+0x57/0xf0 [ 112.535992][ T2289] ? clear_bhb_loop+0x50/0xa0 [ 112.536011][ T2289] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 112.536030][ T2289] RIP: 0033:0x7f393695e90e [ 112.536047][ T2289] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 112.536061][ T2289] RSP: 002b:00007f3937849fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 112.536081][ T2289] RAX: ffffffffffffffda RBX: 00007f393784a6c0 RCX: 00007f393695e90e [ 112.536095][ T2289] RDX: 000000000000000f RSI: 00007f393784a0a0 RDI: 0000000000000004 [ 112.536107][ T2289] RBP: 00007f393784a090 R08: 0000000000000000 R09: 0000000000000000 [ 112.536119][ T2289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 112.536131][ T2289] R13: 00007f3936c26038 R14: 00007f3936c25fa0 R15: 00007ffc174bf708 [ 112.536147][ T2289] [ 112.879800][ T331] usbhid 5-1:0.0: can't add hid device: -71 [ 112.889464][ T331] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 112.891836][ T2293] overlayfs: missing 'lowerdir' [ 112.912392][ T331] usb 5-1: USB disconnect, device number 10 [ 112.921832][ T2301] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 112.929077][ T2301] IPv6: NLM_F_CREATE should be set when creating new route [ 112.936310][ T2301] IPv6: NLM_F_CREATE should be set when creating new route [ 112.946058][ T36] audit: type=1400 audit(1787733899.399:549): avc: denied { bind } for pid=2300 comm="syz.4.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.947615][ T2301] __nla_validate_parse: 59 callbacks suppressed [ 112.947630][ T2301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.654'. [ 112.965539][ T36] audit: type=1400 audit(1787733899.399:550): avc: denied { name_bind } for pid=2300 comm="syz.4.654" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 113.002888][ T36] audit: type=1400 audit(1787733899.399:551): avc: denied { node_bind } for pid=2300 comm="syz.4.654" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 113.003426][ T327] usb 7-1: device descriptor read/8, error -71 [ 113.088923][ T2312] FAULT_INJECTION: forcing a failure. [ 113.088923][ T2312] name failslab, interval 1, probability 0, space 0, times 0 [ 113.101864][ T2312] CPU: 0 UID: 0 PID: 2312 Comm: syz.6.659 Not tainted syzkaller #0 02f2c9a1947d185dcc234937001f7d1e6f97c77a [ 113.101886][ T2312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.101893][ T2312] Call Trace: [ 113.101897][ T2312] [ 113.101902][ T2312] __dump_stack+0x21/0x30 [ 113.101922][ T2312] dump_stack_lvl+0x140/0x1c0 [ 113.101936][ T2312] ? __cfi_dump_stack_lvl+0x10/0x10 [ 113.101950][ T2312] dump_stack+0x19/0x20 [ 113.101963][ T2312] should_fail_ex+0x3c2/0x510 [ 113.101976][ T2312] should_failslab+0xac/0x100 [ 113.101988][ T2312] kmem_cache_alloc_noprof+0x42/0x410 [ 113.101999][ T2312] ? security_file_alloc+0x49/0x220 [ 113.102009][ T2312] ? kasan_save_alloc_info+0x3a/0x50 [ 113.102019][ T2312] security_file_alloc+0x49/0x220 [ 113.102028][ T2312] init_file+0x9e/0x210 [ 113.102042][ T2312] alloc_empty_file+0xd9/0x270 [ 113.102054][ T2312] ? make_vfsuid+0x4d/0xa0 [ 113.102065][ T2312] dentry_open+0x4b/0xb0 [ 113.102078][ T2312] ovl_path_open+0x172/0x190 [ 113.102089][ T2312] ovl_dir_read+0x29/0x560 [ 113.102099][ T2312] ? ovl_path_next+0x376/0x420 [ 113.102113][ T2312] ovl_dir_read_merged+0x1cf/0x3d0 [ 113.102123][ T2312] ? ovl_check_empty_dir+0x450/0x450 [ 113.102132][ T2312] ? __cfi_ovl_fill_merge+0x10/0x10 [ 113.102143][ T2312] ? ovl_iterate+0xcb7/0x2020 [ 113.102153][ T2312] ovl_iterate+0xd79/0x2020 [ 113.102201][ T2312] ? _parse_integer+0x2e/0x40 [ 113.102212][ T2312] ? kstrtoull+0x13b/0x1e0 [ 113.102222][ T2312] ? __cfi_ovl_iterate+0x10/0x10 [ 113.102232][ T2312] ? kstrtouint+0x78/0xf0 [ 113.102242][ T2312] ? kstrtouint_from_user+0x117/0x170 [ 113.102253][ T2312] ? __x64_sys_openat+0x13a/0x170 [ 113.102267][ T2312] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 113.102279][ T2312] ? selinux_file_permission+0x318/0xb60 [ 113.102290][ T2312] ? __kasan_check_write+0x18/0x20 [ 113.102300][ T2312] ? __kasan_check_write+0x18/0x20 [ 113.102311][ T2312] ? __kasan_check_write+0x18/0x20 [ 113.102320][ T2312] ? down_write+0xee/0x2b0 [ 113.102332][ T2312] ? __cfi_down_write+0x10/0x10 [ 113.102343][ T2312] ? __cfi_selinux_file_permission+0x10/0x10 [ 113.102354][ T2312] ? __kasan_check_write+0x18/0x20 [ 113.102364][ T2312] wrap_directory_iterator+0xaa/0xf0 [ 113.102377][ T2312] ? __cfi_ovl_iterate+0x10/0x10 [ 113.102386][ T2312] shared_ovl_iterate+0x28/0x40 [ 113.102396][ T2312] iterate_dir+0x1fa/0x5c0 [ 113.102408][ T2312] __se_sys_getdents64+0xf6/0x250 [ 113.102421][ T2312] ? fput+0x1a4/0x230 [ 113.102433][ T2312] ? __x64_sys_getdents64+0xa0/0xa0 [ 113.102445][ T2312] ? ksys_write+0x1f3/0x260 [ 113.102455][ T2312] ? __cfi_filldir64+0x10/0x10 [ 113.102467][ T2312] ? __cfi_ksys_write+0x10/0x10 [ 113.102478][ T2312] ? __kasan_check_read+0x15/0x20 [ 113.102488][ T2312] __x64_sys_getdents64+0x7f/0xa0 [ 113.102501][ T2312] x64_sys_call+0x27d0/0x2ee0 [ 113.102510][ T2312] do_syscall_64+0x57/0xf0 [ 113.102523][ T2312] ? clear_bhb_loop+0x50/0xa0 [ 113.102534][ T2312] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 113.102545][ T2312] RIP: 0033:0x7fb329f9e0d9 [ 113.102555][ T2312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.102564][ T2312] RSP: 002b:00007fb32ae9d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 113.102577][ T2312] RAX: ffffffffffffffda RBX: 00007fb32a225fa0 RCX: 00007fb329f9e0d9 [ 113.102585][ T2312] RDX: 000000000000008e RSI: 0000200000000000 RDI: 0000000000000003 [ 113.102592][ T2312] RBP: 00007fb32ae9d090 R08: 0000000000000000 R09: 0000000000000000 [ 113.102599][ T2312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.102605][ T2312] R13: 00007fb32a226038 R14: 00007fb32a225fa0 R15: 00007ffeeef44b68 [ 113.102614][ T2312] [ 113.111501][ T45] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 113.150753][ T327] usb usb7-port1: unable to enumerate USB device [ 113.311774][ T45] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 113.450650][ T63] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 113.452595][ T45] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.513333][ T45] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.526332][ T45] usb 6-1: config 0 interface 0 has no altsetting 0 [ 113.532991][ T45] usb 6-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 113.542081][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.550531][ T45] usb 6-1: config 0 descriptor?? [ 113.580689][ T331] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 113.580689][ T63] usb 3-1: device descriptor read/64, error -71 [ 113.600943][ T327] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 113.720669][ T331] usb 5-1: device descriptor read/64, error -71 [ 113.750694][ T327] usb 7-1: Using ep0 maxpacket: 8 [ 113.757896][ T45] hid-rmi 0003:1532:011D.0015: unknown main item tag 0x0 [ 113.758827][ T327] usb 7-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 113.765228][ T45] hid-rmi 0003:1532:011D.0015: unknown main item tag 0x0 [ 113.774984][ T327] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.781347][ T45] hid-rmi 0003:1532:011D.0015: unknown main item tag 0x0 [ 113.789343][ T327] usb 7-1: Product: syz [ 113.796359][ T45] hid-rmi 0003:1532:011D.0015: unexpected long global item [ 113.800388][ T327] usb 7-1: Manufacturer: syz [ 113.807957][ T45] hid-rmi 0003:1532:011D.0015: parse failed [ 113.812320][ T327] usb 7-1: SerialNumber: syz [ 113.818363][ T45] hid-rmi 0003:1532:011D.0015: probe with driver hid-rmi failed with error -22 [ 113.830661][ T63] usb 3-1: device descriptor read/64, error -71 [ 113.960676][ T331] usb 5-1: device descriptor read/64, error -71 [ 114.037498][ T2314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.046031][ T2314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.057214][ T402] usb 6-1: USB disconnect, device number 6 [ 114.066140][ T327] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 114.076350][ T63] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 114.087525][ T327] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 114.097441][ T327] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 114.109642][ T327] usb 7-1: USB disconnect, device number 6 [ 114.210681][ T331] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 114.220667][ T63] usb 3-1: device descriptor read/64, error -71 [ 114.350730][ T331] usb 5-1: device descriptor read/64, error -71 [ 114.460689][ T63] usb 3-1: device descriptor read/64, error -71 [ 114.571204][ T63] usb usb3-port1: attempt power cycle [ 114.592766][ T331] usb 5-1: device descriptor read/64, error -71 [ 114.700757][ T331] usb usb5-port1: attempt power cycle [ 114.850688][ T45] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 114.920698][ T63] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 114.941906][ T63] usb 3-1: device descriptor read/8, error -71 [ 115.003203][ T45] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 115.012329][ T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.020313][ T45] usb 7-1: Product: syz [ 115.024611][ T45] usb 7-1: Manufacturer: syz [ 115.029223][ T45] usb 7-1: SerialNumber: syz [ 115.040702][ T331] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 115.071698][ T331] usb 5-1: device descriptor read/8, error -71 [ 115.071785][ T63] usb 3-1: device descriptor read/8, error -71 [ 115.201664][ T331] usb 5-1: device descriptor read/8, error -71 [ 115.238576][ T45] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 115.248332][ T45] usb 7-1: USB disconnect, device number 7 [ 115.320736][ T63] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 115.352671][ T63] usb 3-1: device descriptor read/8, error -71 [ 115.440713][ T331] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 115.461765][ T331] usb 5-1: device descriptor read/8, error -71 [ 115.481838][ T63] usb 3-1: device descriptor read/8, error -71 [ 115.591790][ T331] usb 5-1: device descriptor read/8, error -71 [ 115.600921][ T63] usb usb3-port1: unable to enumerate USB device [ 115.700775][ T331] usb usb5-port1: unable to enumerate USB device [ 115.801031][ T2337] FAULT_INJECTION: forcing a failure. [ 115.801031][ T2337] name failslab, interval 1, probability 0, space 0, times 0 [ 115.813712][ T2337] CPU: 1 UID: 0 PID: 2337 Comm: syz.5.668 Not tainted syzkaller #0 02f2c9a1947d185dcc234937001f7d1e6f97c77a [ 115.813744][ T2337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.813755][ T2337] Call Trace: [ 115.813762][ T2337] [ 115.813770][ T2337] __dump_stack+0x21/0x30 [ 115.813797][ T2337] dump_stack_lvl+0x140/0x1c0 [ 115.813820][ T2337] ? __cfi_dump_stack_lvl+0x10/0x10 [ 115.813844][ T2337] dump_stack+0x19/0x20 [ 115.813864][ T2337] should_fail_ex+0x3c2/0x510 [ 115.813889][ T2337] ? ovl_cache_entry_new+0x49/0x700 [ 115.813907][ T2337] should_failslab+0xac/0x100 [ 115.813928][ T2337] __kmalloc_noprof+0x69/0x510 [ 115.813945][ T2337] ? ovl_cache_entry_new+0x49/0x700 [ 115.813963][ T2337] ovl_cache_entry_new+0x49/0x700 [ 115.813980][ T2337] ? downgrade_write+0x470/0x470 [ 115.814005][ T2337] ovl_fill_merge+0x3c7/0x870 [ 115.814023][ T2337] ? __cfi_ovl_fill_merge+0x10/0x10 [ 115.814058][ T2337] offset_readdir+0x149/0x480 [ 115.814080][ T2337] iterate_dir+0x1fa/0x5c0 [ 115.814100][ T2337] ovl_dir_read+0xf0/0x560 [ 115.814116][ T2337] ? ovl_path_next+0x376/0x420 [ 115.814138][ T2337] ovl_dir_read_merged+0x1cf/0x3d0 [ 115.814155][ T2337] ? ovl_check_empty_dir+0x450/0x450 [ 115.814171][ T2337] ? __cfi_ovl_fill_merge+0x10/0x10 [ 115.814189][ T2337] ? ovl_iterate+0xcb7/0x2020 [ 115.814205][ T2337] ovl_iterate+0xd79/0x2020 [ 115.814223][ T2337] ? _parse_integer+0x2e/0x40 [ 115.814241][ T2337] ? kstrtoull+0x13b/0x1e0 [ 115.814258][ T2337] ? __cfi_ovl_iterate+0x10/0x10 [ 115.814275][ T2337] ? kstrtouint+0x78/0xf0 [ 115.814292][ T2337] ? kstrtouint_from_user+0x117/0x170 [ 115.814310][ T2337] ? __x64_sys_openat+0x13a/0x170 [ 115.814334][ T2337] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 115.814358][ T2337] ? selinux_file_permission+0x318/0xb60 [ 115.814381][ T2337] ? __kasan_check_write+0x18/0x20 [ 115.814398][ T2337] ? __kasan_check_write+0x18/0x20 [ 115.814416][ T2337] ? __kasan_check_write+0x18/0x20 [ 115.814433][ T2337] ? down_write+0xee/0x2b0 [ 115.814451][ T2337] ? __cfi_down_write+0x10/0x10 [ 115.814469][ T2337] ? __cfi_selinux_file_permission+0x10/0x10 [ 115.814487][ T2337] ? __kasan_check_write+0x18/0x20 [ 115.814504][ T2337] wrap_directory_iterator+0xaa/0xf0 [ 115.814524][ T2337] ? __cfi_ovl_iterate+0x10/0x10 [ 115.814583][ T2337] shared_ovl_iterate+0x28/0x40 [ 115.814619][ T2337] iterate_dir+0x1fa/0x5c0 [ 115.814641][ T2337] __se_sys_getdents64+0xf6/0x250 [ 115.814662][ T2337] ? fput+0x1a4/0x230 [ 115.814683][ T2337] ? __x64_sys_getdents64+0xa0/0xa0 [ 115.814704][ T2337] ? ksys_write+0x1f3/0x260 [ 115.814721][ T2337] ? __cfi_filldir64+0x10/0x10 [ 115.814741][ T2337] ? __cfi_ksys_write+0x10/0x10 [ 115.814759][ T2337] ? __kasan_check_read+0x15/0x20 [ 115.814777][ T2337] __x64_sys_getdents64+0x7f/0xa0 [ 115.814808][ T2337] x64_sys_call+0x27d0/0x2ee0 [ 115.814827][ T2337] do_syscall_64+0x57/0xf0 [ 115.814856][ T2337] ? clear_bhb_loop+0x50/0xa0 [ 115.814877][ T2337] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 115.814894][ T2337] RIP: 0033:0x7f393699e0d9 [ 115.814911][ T2337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.814928][ T2337] RSP: 002b:00007f393784a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 115.814948][ T2337] RAX: ffffffffffffffda RBX: 00007f3936c25fa0 RCX: 00007f393699e0d9 [ 115.814962][ T2337] RDX: 000000000000008e RSI: 0000200000000000 RDI: 0000000000000003 [ 115.815019][ T2337] RBP: 00007f393784a090 R08: 0000000000000000 R09: 0000000000000000 [ 115.815032][ T2337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.815043][ T2337] R13: 00007f3936c26038 R14: 00007f3936c25fa0 R15: 00007ffc174bf708 [ 115.815059][ T2337] [ 115.856409][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 115.856426][ T36] audit: type=1400 audit(1787733902.279:553): avc: denied { mount } for pid=2338 comm="syz.5.669" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 115.990723][ T331] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 115.995712][ T36] audit: type=1400 audit(1787733902.279:554): avc: denied { mounton } for pid=2338 comm="syz.5.669" path="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 116.172102][ T331] usb 7-1: unable to get BOS descriptor or descriptor too short [ 116.179384][ T36] audit: type=1400 audit(1787733902.309:555): avc: denied { unmount } for pid=2140 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 116.182597][ T331] usb 7-1: not running at top speed; connect to a high speed hub [ 116.213112][ T2347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2347 comm=syz.2.672 [ 116.221034][ T331] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 215, changing to 4 [ 116.305396][ T331] usb 7-1: language id specifier not provided by device, defaulting to English [ 116.327910][ T331] usb 7-1: New USB device found, idVendor=04b4, idProduct=931d, bcdDevice= 0.40 [ 116.342510][ T331] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.350634][ T331] usb 7-1: Product: syz [ 116.354820][ T331] usb 7-1: Manufacturer: 鴪ꋾ犪䍌甩㪖Ᶎ䑕炗ꃗ㯑ꚕ䄝隇텝⽺䰸㰚힇阚电둰₶헒ⷡ셌孾種⺗⟗轈헴ꄦ큠㷽ꮓኍ㞪噞ഐ㏯쨀行袡ᒏ檧鐞澁ﮱ쏑݇䱮괙ᮋ汖ႋँ錎㜇䊠⑱ຐꨣ衟ꁭ悝粈赤㶯춎敧 [ 116.411683][ T331] usb 7-1: SerialNumber: syz [ 116.493727][ T310] bridge_slave_1: left allmulticast mode [ 116.499431][ T310] bridge_slave_1: left promiscuous mode [ 116.522764][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.540235][ T310] bridge_slave_0: left allmulticast mode [ 116.549187][ T310] bridge_slave_0: left promiscuous mode [ 116.555265][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.648368][ T2335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.657040][ T2335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.665846][ T2335] netlink: 104 bytes leftover after parsing attributes in process `syz.6.667'. [ 116.674890][ T36] audit: type=1400 audit(1787733903.119:556): avc: denied { nlmsg_read } for pid=2334 comm="syz.6.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.690286][ T2373] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.702704][ T2373] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.709818][ T2373] bridge_slave_0: entered allmulticast mode [ 116.716328][ T2373] bridge_slave_0: entered promiscuous mode [ 116.723414][ T310] veth1_macvtap: left promiscuous mode [ 116.729016][ T310] veth0_vlan: left promiscuous mode [ 116.736506][ T331] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 116.743530][ T331] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 116.759128][ T331] usb 7-1: USB disconnect, device number 8 [ 116.789737][ T2373] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.796902][ T2373] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.804407][ T2373] bridge_slave_1: entered allmulticast mode [ 116.810589][ T2373] bridge_slave_1: entered promiscuous mode [ 116.810697][ T318] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 116.830659][ T402] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 116.867505][ T2373] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.874569][ T2373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.881849][ T2373] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.888869][ T2373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.907888][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.915288][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.927098][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.934150][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.941659][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.948700][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.961220][ T318] usb 5-1: device descriptor read/64, error -71 [ 116.972413][ T2373] veth0_vlan: entered promiscuous mode [ 116.982769][ T2373] veth1_macvtap: entered promiscuous mode [ 116.992209][ T402] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.007658][ T402] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.026938][ T402] usb 3-1: config 0 interface 0 has no altsetting 0 [ 117.033695][ T402] usb 3-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 117.046452][ T402] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.056069][ T402] usb 3-1: config 0 descriptor?? [ 117.200725][ T318] usb 5-1: device descriptor read/64, error -71 [ 117.274151][ T2383] SELinux: Context / is not valid (left unmapped). [ 117.301653][ T63] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 117.303706][ T2388] netlink: 12 bytes leftover after parsing attributes in process `syz.6.687'. [ 117.440793][ T318] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 117.463543][ T402] lg-g15 0003:046D:0A07.0016: unknown main item tag 0x0 [ 117.470666][ T63] usb 8-1: Using ep0 maxpacket: 16 [ 117.477139][ T402] lg-g15 0003:046D:0A07.0016: hidraw1: USB HID v11.06 Device [HID 046d:0a07] on usb-dummy_hcd.2-1/input0 [ 117.488641][ T63] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.501081][ T63] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 117.510987][ T63] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 117.520647][ T63] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 117.534465][ T63] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 117.543622][ T63] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 117.551665][ T63] usb 8-1: SerialNumber: syz [ 117.557120][ T2379] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 117.564549][ T327] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 117.570682][ T318] usb 5-1: device descriptor read/64, error -71 [ 117.574200][ T2379] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 117.586164][ T63] hub 8-1:1.0: bad descriptor, ignoring hub [ 117.592396][ T63] hub 8-1:1.0: probe with driver hub failed with error -5 [ 117.673951][ T402] usb 3-1: USB disconnect, device number 52 [ 117.720710][ T327] usb 7-1: device descriptor read/64, error -71 [ 117.787569][ T2379] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 117.794830][ T2379] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 117.810671][ T318] usb 5-1: device descriptor read/64, error -71 [ 117.920756][ T318] usb usb5-port1: attempt power cycle [ 117.970678][ T327] usb 7-1: device descriptor read/64, error -71 [ 118.206228][ T63] cdc_ether 8-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.7-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 118.218095][ T327] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 118.260687][ T318] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 118.294017][ T318] usb 5-1: device descriptor read/8, error -71 [ 118.352938][ T327] usb 7-1: device descriptor read/64, error -71 [ 118.420691][ C0] cdc_ether 8-1:1.0 usb0: CDC: unexpected notification 68! [ 118.428225][ T318] usb 5-1: device descriptor read/8, error -71 [ 118.428571][ C0] cdc_ether 8-1:1.0 usb0: CDC: unexpected notification 03! [ 118.470663][ T331] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 118.610660][ T327] usb 7-1: device descriptor read/64, error -71 [ 118.620738][ T331] usb 3-1: Using ep0 maxpacket: 8 [ 118.626912][ T331] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.637760][ T331] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d1 [ 118.646884][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.657660][ T10] usb 8-1: USB disconnect, device number 2 [ 118.658536][ T331] usb 3-1: config 0 descriptor?? [ 118.664684][ T10] cdc_ether 8-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.7-1, CDC Ethernet Device [ 118.672272][ T318] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 118.702256][ T318] usb 5-1: device descriptor read/8, error -71 [ 118.730753][ T327] usb usb7-port1: attempt power cycle [ 118.831827][ T318] usb 5-1: device descriptor read/8, error -71 [ 118.874630][ T331] usb 3-1: USB disconnect, device number 53 [ 118.940802][ T318] usb usb5-port1: unable to enumerate USB device [ 119.070697][ T327] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 119.101685][ T327] usb 7-1: device descriptor read/8, error -71 [ 119.231723][ T327] usb 7-1: device descriptor read/8, error -71 [ 119.392681][ T2437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.690'. [ 119.470685][ T327] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 119.491866][ T327] usb 7-1: device descriptor read/8, error -71 [ 119.610676][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 119.621659][ T327] usb 7-1: device descriptor read/8, error -71 [ 119.640688][ T63] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 119.730821][ T327] usb usb7-port1: unable to enumerate USB device [ 119.760687][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 119.766849][ T10] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 119.775101][ T10] usb 8-1: config 0 has no interface number 0 [ 119.781323][ T10] usb 8-1: config 0 interface 184 has no altsetting 0 [ 119.789470][ T10] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 119.798569][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.806602][ T63] usb 3-1: Using ep0 maxpacket: 32 [ 119.811834][ T10] usb 8-1: Product: syz [ 119.815977][ T10] usb 8-1: Manufacturer: syz [ 119.820543][ T10] usb 8-1: SerialNumber: syz [ 119.826219][ T63] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.837566][ T10] usb 8-1: config 0 descriptor?? [ 119.843417][ T63] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 119.852511][ T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.861005][ T10] smsc75xx v1.0.0 [ 119.866085][ T63] hub 3-1:4.0: USB hub found [ 119.950681][ T402] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 120.071354][ T63] hub 3-1:4.0: 2 ports detected [ 120.076263][ T63] usb 3-1: selecting invalid altsetting 1 [ 120.082196][ T63] hub 3-1:4.0: Using single TT (err -22) [ 120.100717][ T402] usb 5-1: Using ep0 maxpacket: 32 [ 120.106971][ T402] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.117946][ T402] usb 5-1: config 0 interface 0 has no altsetting 0 [ 120.124615][ T402] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 120.133763][ T402] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.142696][ T402] usb 5-1: config 0 descriptor?? [ 120.264401][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 120.275321][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 120.285009][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 120.295469][ T10] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -61 [ 120.331649][ T63] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 120.338079][ T63] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 120.371540][ T63] usb 3-1: USB disconnect, device number 54 [ 120.550058][ T402] uclogic 0003:5543:0522.0017: unknown main item tag 0x0 [ 120.558009][ T402] uclogic 0003:5543:0522.0017: unknown main item tag 0x0 [ 120.565164][ T402] uclogic 0003:5543:0522.0017: unknown main item tag 0x0 [ 120.572224][ T402] uclogic 0003:5543:0522.0017: unknown main item tag 0x0 [ 120.579242][ T402] uclogic 0003:5543:0522.0017: unknown main item tag 0x0 [ 120.586373][ T402] uclogic 0003:5543:0522.0017: unknown main item tag 0x0 [ 120.593572][ T402] uclogic 0003:5543:0522.0017: unknown main item tag 0x0 [ 120.600715][ T402] uclogic 0003:5543:0522.0017: unknown main item tag 0x0 [ 120.607780][ T402] uclogic 0003:5543:0522.0017: unknown main item tag 0x0 [ 120.614922][ T402] uclogic 0003:5543:0522.0017: unknown main item tag 0x0 [ 120.621972][ T402] uclogic 0003:5543:0522.0017: unknown main item tag 0x0 [ 120.628989][ T402] uclogic 0003:5543:0522.0017: unknown main item tag 0x0 [ 120.636066][ T402] uclogic 0003:5543:0522.0017: unknown main item tag 0x0 [ 120.643141][ T402] uclogic 0003:5543:0522.0017: unknown main item tag 0x0 [ 120.650175][ T402] uclogic 0003:5543:0522.0017: unknown main item tag 0x0 [ 120.657252][ T402] uclogic 0003:5543:0522.0017: unknown main item tag 0x0 [ 120.664477][ T402] uclogic 0003:5543:0522.0017: unknown main item tag 0x0 [ 120.671585][ T402] uclogic 0003:5543:0522.0017: unknown main item tag 0x0 [ 120.678633][ T402] uclogic 0003:5543:0522.0017: unknown main item tag 0x0 [ 120.685762][ T402] uclogic 0003:5543:0522.0017: unknown main item tag 0x0 [ 120.692829][ T402] uclogic 0003:5543:0522.0017: unknown main item tag 0x0 [ 120.699858][ T402] uclogic 0003:5543:0522.0017: unknown main item tag 0x0 [ 120.707104][ T402] uclogic 0003:5543:0522.0017: No inputs registered, leaving [ 120.714977][ T402] uclogic 0003:5543:0522.0017: hidraw1: USB HID vd.8f Device [HID 5543:0522] on usb-dummy_hcd.4-1/input0 [ 120.728350][ T9] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 120.752896][ T318] usb 5-1: USB disconnect, device number 19 [ 120.774646][ T2456] overlay: Unknown parameter '/file0' [ 120.798088][ T2460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.807784][ T2460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.816808][ T36] audit: type=1400 audit(1787733907.269:557): avc: denied { ioctl } for pid=2458 comm="syz.4.696" path="socket:[18801]" dev="sockfs" ino=18801 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 120.831806][ T2460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.853756][ T2460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.880709][ T9] usb 7-1: device descriptor read/64, error -71 [ 120.966318][ T36] audit: type=1400 audit(1787733907.419:558): avc: denied { map } for pid=2463 comm="syz.2.697" path="socket:[18233]" dev="sockfs" ino=18233 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.090673][ T318] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 121.130693][ T9] usb 7-1: device descriptor read/64, error -71 [ 121.240666][ T318] usb 5-1: Using ep0 maxpacket: 8 [ 121.246211][ T318] usb 5-1: too many configurations: 70, using maximum allowed: 8 [ 121.255135][ T318] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 121.262772][ T318] usb 5-1: can't read configurations, error -61 [ 121.370713][ T9] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 121.390667][ T318] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 121.500667][ T9] usb 7-1: device descriptor read/64, error -71 [ 121.540653][ T318] usb 5-1: Using ep0 maxpacket: 8 [ 121.546130][ T318] usb 5-1: too many configurations: 70, using maximum allowed: 8 [ 121.554968][ T318] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 121.562576][ T318] usb 5-1: can't read configurations, error -61 [ 121.568947][ T318] usb usb5-port1: attempt power cycle [ 121.740727][ T9] usb 7-1: device descriptor read/64, error -71 [ 121.756891][ T2468] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.698'. [ 121.797762][ T36] audit: type=1400 audit(1787733908.249:559): avc: denied { name_bind } for pid=2472 comm="syz.2.700" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 121.850822][ T9] usb usb7-port1: attempt power cycle [ 121.910691][ T318] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 121.931044][ T318] usb 5-1: Using ep0 maxpacket: 8 [ 121.936485][ T318] usb 5-1: too many configurations: 70, using maximum allowed: 8 [ 121.945326][ T318] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 121.952945][ T318] usb 5-1: can't read configurations, error -61 [ 122.060690][ T402] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 122.080930][ T318] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 122.101101][ T318] usb 5-1: Using ep0 maxpacket: 8 [ 122.106604][ T318] usb 5-1: too many configurations: 70, using maximum allowed: 8 [ 122.115611][ T318] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 122.123368][ T318] usb 5-1: can't read configurations, error -61 [ 122.129747][ T318] usb usb5-port1: unable to enumerate USB device [ 122.190668][ T9] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 122.210684][ T402] usb 3-1: Using ep0 maxpacket: 16 [ 122.216646][ T9] usb 7-1: device descriptor read/8, error -71 [ 122.223302][ T402] usb 3-1: too many endpoints for config 0 interface 0 altsetting 6: 255, using maximum allowed: 30 [ 122.234608][ T402] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 122.247700][ T402] usb 3-1: config 0 interface 0 has no altsetting 0 [ 122.254414][ T402] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 122.263645][ T402] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.272356][ T402] usb 3-1: config 0 descriptor?? [ 122.351637][ T9] usb 7-1: device descriptor read/8, error -71 [ 122.425100][ T31] usb 8-1: USB disconnect, device number 3 [ 122.520196][ T36] audit: type=1400 audit(1787733908.969:560): avc: denied { mounton } for pid=2478 comm="syz.7.703" path="/3/file0" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 122.610672][ T9] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 122.631592][ T9] usb 7-1: device descriptor read/8, error -71 [ 122.680733][ T402] input: HID 5543:0042 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:5543:0042.0018/input/input27 [ 122.695872][ T402] uclogic 0003:5543:0042.0018: input,hidraw1: USB HID v0.02 Joystick [HID 5543:0042] on usb-dummy_hcd.2-1/input0 [ 122.761596][ T9] usb 7-1: device descriptor read/8, error -71 [ 122.840668][ T31] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 122.870778][ T9] usb usb7-port1: unable to enumerate USB device [ 122.881846][ T2475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.890375][ T2475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.898765][ T9] usb 3-1: USB disconnect, device number 55 [ 122.980674][ T31] usb 8-1: device descriptor read/64, error -71 [ 123.230691][ T31] usb 8-1: device descriptor read/64, error -71 [ 123.470682][ T31] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 123.600690][ T31] usb 8-1: device descriptor read/64, error -71 [ 123.770684][ T45] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 123.800666][ T331] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 123.840700][ T31] usb 8-1: device descriptor read/64, error -71 [ 123.854274][ T2491] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 123.864589][ T2491] SELinux: failed to load policy [ 123.869573][ T2491] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 123.879883][ T2491] SELinux: failed to load policy [ 123.884932][ T2491] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 123.895368][ T2491] SELinux: failed to load policy [ 123.900364][ T2491] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 123.910829][ T2491] SELinux: failed to load policy [ 123.921713][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 123.928271][ T45] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 123.939798][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 123.950970][ T31] usb usb8-port1: attempt power cycle [ 123.956422][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 123.969564][ T45] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 123.978661][ T331] usb 7-1: Using ep0 maxpacket: 32 [ 123.983872][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.992098][ T45] usb 3-1: Product: syz [ 123.996413][ T45] usb 3-1: Manufacturer: syz [ 124.001138][ T45] usb 3-1: SerialNumber: syz [ 124.006178][ T331] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.013370][ T2503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2503 comm=syz.4.710 [ 124.016348][ T331] usb 7-1: config 0 has no interfaces? [ 124.032636][ T2503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2503 comm=syz.4.710 [ 124.034670][ T331] usb 7-1: New USB device found, idVendor=046d, idProduct=c08a, bcdDevice= 0.00 [ 124.047237][ T2503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2503 comm=syz.4.710 [ 124.055914][ T45] usb 3-1: config 0 descriptor?? [ 124.068166][ T2503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2503 comm=syz.4.710 [ 124.073360][ T331] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.087851][ T2504] overlay: filesystem on ./file1 not supported as upperdir [ 124.100767][ T2487] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 124.101215][ T331] usb 7-1: config 0 descriptor?? [ 124.114092][ T45] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input28 [ 124.300667][ T31] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 124.319928][ T2487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.331679][ T31] usb 8-1: device descriptor read/8, error -71 [ 124.341626][ T2487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.350633][ T331] usb 3-1: USB disconnect, device number 56 [ 124.461658][ T31] usb 8-1: device descriptor read/8, error -71 [ 124.700661][ T31] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 124.721686][ T31] usb 8-1: device descriptor read/8, error -71 [ 124.854487][ T31] usb 8-1: device descriptor read/8, error -71 [ 124.877160][ T36] audit: type=1400 audit(1787733911.329:561): avc: denied { getattr } for pid=2512 comm="syz.2.712" path="socket:[18335]" dev="sockfs" ino=18335 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 124.904559][ T36] audit: type=1400 audit(1787733911.359:562): avc: denied { ioctl } for pid=2512 comm="syz.2.712" path="socket:[18335]" dev="sockfs" ino=18335 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 124.937926][ T2517] veth1_macvtap: left promiscuous mode [ 124.943503][ T2517] macsec0: entered allmulticast mode [ 124.970744][ T31] usb usb8-port1: unable to enumerate USB device [ 125.100665][ T331] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 125.200694][ T45] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 125.250678][ T331] usb 5-1: Using ep0 maxpacket: 16 [ 125.257021][ T331] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 125.268353][ T331] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.281347][ T331] usb 5-1: config 0 interface 0 has no altsetting 0 [ 125.288012][ T331] usb 5-1: New USB device found, idVendor=1b96, idProduct=0006, bcdDevice= 0.00 [ 125.297081][ T331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.305649][ T331] usb 5-1: config 0 descriptor?? [ 125.360652][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 125.366871][ T45] usb 3-1: config 9 has an invalid interface number: 221 but max is 1 [ 125.375144][ T45] usb 3-1: config 9 has an invalid interface number: 221 but max is 1 [ 125.383349][ T45] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 125.393549][ T45] usb 3-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 125.402437][ T45] usb 3-1: config 9 has no interface number 0 [ 125.408532][ T45] usb 3-1: config 9 interface 221 has no altsetting 0 [ 125.416701][ T45] usb 3-1: New USB device found, idVendor=0582, idProduct=74ce, bcdDevice=ba.38 [ 125.425791][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.433814][ T45] usb 3-1: Product: syz [ 125.437987][ T45] usb 3-1: Manufacturer: syz [ 125.442607][ T45] usb 3-1: SerialNumber: syz [ 125.513503][ T331] usbhid 5-1:0.0: can't add hid device: -71 [ 125.519677][ T331] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 125.528890][ T331] usb 5-1: USB disconnect, device number 24 [ 125.541660][ T36] audit: type=1400 audit(1787733911.999:563): avc: denied { create } for pid=2524 comm="syz.7.715" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 125.542143][ T2525] netlink: 'syz.7.715': attribute type 27 has an invalid length. [ 125.564138][ T36] audit: type=1400 audit(1787733911.999:564): avc: denied { create } for pid=2524 comm="syz.7.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 125.593448][ T36] audit: type=1400 audit(1787733912.049:565): avc: denied { read } for pid=2524 comm="syz.7.715" name="file2" dev="tmpfs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 125.595333][ T2526] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 125.615862][ T36] audit: type=1400 audit(1787733912.049:566): avc: denied { open } for pid=2524 comm="syz.7.715" path="/4/file2" dev="tmpfs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 125.631028][ T2526] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 125.646111][ T36] audit: type=1400 audit(1787733912.049:567): avc: denied { mounton } for pid=2524 comm="syz.7.715" path="/4/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 125.653617][ T2523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.691735][ T2525] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.698975][ T2525] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.708143][ T2523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.716620][ T2523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.726408][ T2523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.734873][ T2523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.744229][ T2523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.752333][ T2523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.761248][ T2523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.769370][ T2523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.777993][ T2523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.800796][ T45] usb 3-1: USB disconnect, device number 57 [ 125.808199][ T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:9.221/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 126.020693][ T331] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 126.160682][ T331] usb 8-1: device descriptor read/64, error -71 [ 126.300687][ T402] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 126.400744][ T331] usb 8-1: device descriptor read/64, error -71 [ 126.425818][ T63] usb 7-1: USB disconnect, device number 17 [ 126.434741][ T402] usb 5-1: device descriptor read/64, error -71 [ 126.630681][ T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 126.660691][ T331] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 126.680678][ T402] usb 5-1: device descriptor read/64, error -71 [ 126.770687][ T63] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 126.780677][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 126.787035][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 126.795475][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 126.800657][ T331] usb 8-1: device descriptor read/64, error -71 [ 126.806386][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 126.822391][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 126.833731][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 126.843791][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 126.853580][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 126.864655][ T9] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 126.874079][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.882864][ T9] usb 3-1: Product: syz [ 126.887123][ T9] usb 3-1: Manufacturer: syz [ 126.891780][ T9] usb 3-1: SerialNumber: syz [ 126.898500][ T9] usb 3-1: config 0 descriptor?? [ 126.903865][ T2536] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 126.919207][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 126.934895][ T63] usb 7-1: Using ep0 maxpacket: 32 [ 126.940060][ T402] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 126.948731][ T63] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 126.961053][ T63] usb 7-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 126.970341][ T63] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.978408][ T63] usb 7-1: Product: syz [ 126.982599][ T63] usb 7-1: Manufacturer: syz [ 126.987193][ T63] usb 7-1: SerialNumber: syz [ 127.060660][ T331] usb 8-1: device descriptor read/64, error -71 [ 127.080684][ T402] usb 5-1: device descriptor read/64, error -71 [ 127.115860][ T45] usb 3-1: USB disconnect, device number 58 [ 127.170824][ T331] usb usb8-port1: attempt power cycle [ 127.194087][ T36] audit: type=1326 audit(1787733913.649:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2537 comm="syz.6.719" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb329f9e0d9 code=0x0 [ 127.330654][ T402] usb 5-1: device descriptor read/64, error -71 [ 127.440749][ T402] usb usb5-port1: attempt power cycle [ 127.520661][ T331] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 127.541680][ T331] usb 8-1: device descriptor read/8, error -71 [ 127.681094][ T331] usb 8-1: device descriptor read/8, error -71 [ 127.761531][ T36] audit: type=1400 audit(1787733914.219:569): avc: denied { write } for pid=2551 comm="syz.2.723" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 127.780678][ T402] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 127.791293][ T36] audit: type=1400 audit(1787733914.219:570): avc: denied { ioctl } for pid=2551 comm="syz.2.723" path="/192/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 127.822420][ T402] usb 5-1: device descriptor read/8, error -71 [ 127.823695][ T36] audit: type=1400 audit(1787733914.269:571): avc: denied { mounton } for pid=2551 comm="syz.2.723" path="/192/file0" dev="incremental-fs" ino=1239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.950668][ T331] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 127.961715][ T402] usb 5-1: device descriptor read/8, error -71 [ 127.971680][ T331] usb 8-1: device descriptor read/8, error -71 [ 128.101678][ T331] usb 8-1: device descriptor read/8, error -71 [ 128.180654][ T45] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 128.200701][ T402] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 128.210797][ T331] usb usb8-port1: unable to enumerate USB device [ 128.231572][ T402] usb 5-1: device descriptor read/8, error -71 [ 128.330641][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 128.337172][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 128.346919][ T45] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 128.356015][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.364053][ T45] usb 3-1: Product: syz [ 128.368302][ T45] usb 3-1: Manufacturer: syz [ 128.371706][ T402] usb 5-1: device descriptor read/8, error -71 [ 128.372932][ T45] usb 3-1: SerialNumber: syz [ 128.490761][ T402] usb usb5-port1: unable to enumerate USB device [ 128.564082][ T36] audit: type=1400 audit(1787733915.019:572): avc: denied { unlink } for pid=2373 comm="syz-executor" name="file2" dev="tmpfs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 128.591940][ T45] usb 3-1: USB disconnect, device number 59 [ 128.602943][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 128.624336][ T36] audit: type=1400 audit(1787733915.079:573): avc: denied { getopt } for pid=2570 comm="syz.7.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 129.089979][ T36] audit: type=1400 audit(1787733915.539:574): avc: denied { create } for pid=2576 comm="syz.4.728" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 129.360676][ T10] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 129.420654][ T45] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 129.436262][ T2584] veth1: entered allmulticast mode [ 129.442467][ T2584] tmpfs: Cannot retroactively limit inodes [ 129.442474][ T36] audit: type=1400 audit(1787733915.899:575): avc: denied { remount } for pid=2583 comm="syz.7.731" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 129.472114][ T36] audit: type=1400 audit(1787733915.929:576): avc: denied { accept } for pid=2583 comm="syz.7.731" lport=39271 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 129.493415][ T63] usb 7-1: Can't get UAC3 power state for id 10 [ 129.499911][ T2583] veth1: left allmulticast mode [ 129.500455][ T63] usb 7-1: BAAD MICROPHONE c_chmask mismatch [ 129.510831][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 129.517253][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 129.529630][ T63] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 129.539936][ T10] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 129.550470][ T63] usb 7-1: USB disconnect, device number 18 [ 129.556451][ T10] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 129.568654][ T10] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 129.578507][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 129.579217][ T10] usb 3-1: config 128 has no interface number 0 [ 129.597586][ T2591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2591 comm=syz.7.734 [ 129.600650][ T10] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 129.614938][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.624270][ T10] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 129.638455][ T45] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 129.644986][ T10] usb 3-1: config 128 interface 127 has no altsetting 0 [ 129.654085][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.663190][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 129.672412][ T45] usb 5-1: config 0 descriptor?? [ 129.680646][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.692883][ T10] usb 3-1: Product: syz [ 129.697616][ T10] usb 3-1: Manufacturer: syz [ 129.702372][ T10] usb 3-1: SerialNumber: syz [ 129.710440][ T36] audit: type=1400 audit(1787733916.159:577): avc: denied { bind } for pid=2594 comm="syz.7.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 129.870673][ T63] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 129.896315][ T45] usbhid 5-1:0.0: can't add hid device: -71 [ 129.902307][ T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 129.908628][ T2579] overlay: Unknown parameter '$' [ 129.914474][ T45] usb 5-1: USB disconnect, device number 29 [ 129.929453][ T10] usb 3-1: USB disconnect, device number 60 [ 129.935198][ T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 130.010668][ T63] usb 7-1: device descriptor read/64, error -71 [ 130.030664][ T402] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 130.182140][ T402] usb 8-1: unable to get BOS descriptor or descriptor too short [ 130.190934][ T402] usb 8-1: config 63 has an invalid interface number: 66 but max is 0 [ 130.199106][ T402] usb 8-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 130.209435][ T402] usb 8-1: config 63 has no interface number 0 [ 130.215691][ T402] usb 8-1: config 63 interface 66 has no altsetting 0 [ 130.223808][ T402] usb 8-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 130.232876][ T402] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.240903][ T402] usb 8-1: Product: syz [ 130.245065][ T402] usb 8-1: Manufacturer: syz [ 130.249638][ T402] usb 8-1: SerialNumber: syz [ 130.260680][ T63] usb 7-1: device descriptor read/64, error -71 [ 130.340713][ T45] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 130.458300][ T2597] /dev/nullb0: Can't lookup blockdev [ 130.501701][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.512696][ T45] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 130.520644][ T63] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 130.521985][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.538178][ T45] usb 5-1: config 0 descriptor?? [ 130.606384][ T402] usb 8-1: USB disconnect, device number 12 [ 130.650650][ T63] usb 7-1: device descriptor read/64, error -71 [ 130.890646][ T63] usb 7-1: device descriptor read/64, error -71 [ 131.000756][ T63] usb usb7-port1: attempt power cycle [ 131.108112][ T9] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 131.116119][ T9] hid-generic 0000:0000:0000.0019: hidraw1: HID v0.00 Device [syz1] on syz0 [ 131.340693][ T63] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 131.351185][ T45] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 131.358625][ T45] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input29 [ 131.364165][ T402] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 131.376637][ T63] usb 7-1: device descriptor read/8, error -71 [ 131.511700][ T63] usb 7-1: device descriptor read/8, error -71 [ 131.520750][ T402] usb 8-1: Using ep0 maxpacket: 16 [ 131.526973][ T402] usb 8-1: config 0 has an invalid interface number: 34 but max is 0 [ 131.537818][ T402] usb 8-1: config 0 has no interface number 0 [ 131.544226][ T402] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 131.559260][ T402] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 131.575500][ T402] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 131.584789][ T402] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.592971][ T402] usb 8-1: Product: syz [ 131.595691][ T45] usb 5-1: USB disconnect, device number 30 [ 131.597142][ C1] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 131.597214][ T402] usb 8-1: Manufacturer: syz [ 131.624209][ T402] usb 8-1: SerialNumber: syz [ 131.630961][ T402] usb 8-1: config 0 descriptor?? [ 131.636535][ T2634] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 131.643809][ T2634] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 131.750651][ T63] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 131.771545][ T63] usb 7-1: device descriptor read/8, error -71 [ 131.852198][ T2634] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 131.859405][ T2634] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 131.901578][ T63] usb 7-1: device descriptor read/8, error -71 [ 132.014458][ T63] usb usb7-port1: unable to enumerate USB device [ 132.067236][ T402] asix 8-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 132.267542][ T402] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 132.277604][ T402] asix 8-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 132.288010][ T402] asix 8-1:0.34: probe with driver asix failed with error -61 [ 132.360694][ T45] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 132.471221][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 132.471238][ T36] audit: type=1400 audit(1787733918.929:580): avc: denied { cmd } for pid=2650 comm="iou-wrk-2651" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 132.501121][ T36] audit: type=1400 audit(1787733918.929:581): avc: denied { ioctl } for pid=2633 comm="syz.7.746" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.526010][ T36] audit: type=1400 audit(1787733918.929:582): avc: denied { read write } for pid=2650 comm="syz.2.752" name="ublkc0" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.537579][ T2654] overlayfs: failed to resolve './file2': -2 [ 132.554998][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 132.555522][ T36] audit: type=1400 audit(1787733918.929:583): avc: denied { open } for pid=2650 comm="syz.2.752" path="/dev/ublkc0" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.561455][ T45] usb 5-1: too many endpoints for config 0 interface 0 altsetting 6: 255, using maximum allowed: 30 [ 132.583706][ T36] audit: type=1400 audit(1787733918.929:584): avc: denied { map } for pid=2650 comm="syz.2.752" path="/dev/ublkc0" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.612517][ T45] usb 5-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 132.629710][ T45] usb 5-1: config 0 interface 0 has no altsetting 0 [ 132.636484][ T45] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 132.645802][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.654335][ T45] usb 5-1: config 0 descriptor?? [ 132.750676][ T402] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 132.901724][ T402] usb 3-1: config 0 has no interfaces? [ 132.907926][ T402] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.910640][ T318] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 132.917130][ T402] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 132.932531][ T402] usb 3-1: SerialNumber: syz [ 132.937669][ T402] usb 3-1: config 0 descriptor?? [ 133.050648][ T318] usb 7-1: device descriptor read/64, error -71 [ 133.064177][ T45] input: HID 5543:0042 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:5543:0042.001A/input/input30 [ 133.079276][ T45] uclogic 0003:5543:0042.001A: input,hidraw2: USB HID v0.02 Joystick [HID 5543:0042] on usb-dummy_hcd.4-1/input0 [ 133.148691][ T2651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.157271][ T2651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.176304][ T2661] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 133.201325][ T402] usb 3-1: USB disconnect, device number 61 [ 133.290664][ T318] usb 7-1: device descriptor read/64, error -71 [ 133.530687][ T318] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 133.660674][ T318] usb 7-1: device descriptor read/64, error -71 [ 133.720675][ T2663] netlink: 'syz.2.755': attribute type 4 has an invalid length. [ 133.774238][ T63] usb 5-1: USB disconnect, device number 31 [ 133.910898][ T318] usb 7-1: device descriptor read/64, error -71 [ 133.911540][ T2675] netlink: 'syz.4.760': attribute type 4 has an invalid length. [ 133.924958][ T2675] netlink: 'syz.4.760': attribute type 32 has an invalid length. [ 133.933457][ T2676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2676 comm=syz.4.760 [ 133.957133][ T2679] netlink: 388 bytes leftover after parsing attributes in process `syz.4.761'. [ 133.970650][ T402] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 134.020785][ T318] usb usb7-port1: attempt power cycle [ 134.120658][ T402] usb 3-1: Using ep0 maxpacket: 32 [ 134.126930][ T402] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.137876][ T402] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.147668][ T402] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 134.156729][ T402] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.165251][ T402] usb 3-1: config 0 descriptor?? [ 134.174201][ T402] hub 3-1:0.0: USB hub found [ 134.191962][ T63] usb 8-1: USB disconnect, device number 13 [ 134.202735][ T45] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 134.360655][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 134.365871][ T318] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 134.374617][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.374993][ T2663] tc_dump_action: action bad kind [ 134.385567][ T45] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 134.395692][ T402] hub 3-1:0.0: 4 ports detected [ 134.399687][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.413165][ T318] usb 7-1: device descriptor read/8, error -71 [ 134.419536][ T45] usb 5-1: config 0 descriptor?? [ 134.425415][ T45] hub 5-1:0.0: USB hub found [ 134.541631][ T318] usb 7-1: device descriptor read/8, error -71 [ 134.605271][ T402] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 134.611726][ T402] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 134.620373][ T402] usbhid 3-1:0.0: can't add hid device: -71 [ 134.626372][ T402] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 134.636007][ T45] hub 5-1:0.0: 1 port detected [ 134.651346][ T402] usb 3-1: USB disconnect, device number 62 [ 134.790651][ T318] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 134.811655][ T318] usb 7-1: device descriptor read/8, error -71 [ 134.871575][ T2686] netlink: 'syz.7.764': attribute type 4 has an invalid length. [ 134.893210][ T2688] netlink: 'syz.7.765': attribute type 4 has an invalid length. [ 134.901209][ T2688] netlink: 'syz.7.765': attribute type 4 has an invalid length. [ 134.941553][ T318] usb 7-1: device descriptor read/8, error -71 [ 135.050779][ T318] usb usb7-port1: unable to enumerate USB device [ 135.235712][ T36] audit: type=1400 audit(1787733921.689:585): avc: denied { read } for pid=2704 comm="syz.2.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 135.259055][ T31] usb 5-1: USB disconnect, device number 32 [ 135.264999][ T45] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 135.330667][ T318] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 135.481974][ T318] usb 8-1: unable to get BOS descriptor or descriptor too short [ 135.490371][ T318] usb 8-1: config 63 has an invalid interface number: 66 but max is 0 [ 135.498591][ T318] usb 8-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 135.508819][ T318] usb 8-1: config 63 has no interface number 0 [ 135.515068][ T318] usb 8-1: config 63 interface 66 has no altsetting 0 [ 135.523290][ T318] usb 8-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 135.532355][ T318] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.540335][ T318] usb 8-1: Product: syz [ 135.544505][ T318] usb 8-1: Manufacturer: syz [ 135.549091][ T318] usb 8-1: SerialNumber: syz [ 135.758347][ T318] usb 8-1: USB disconnect, device number 14 [ 135.801412][ T36] audit: type=1400 audit(1787733922.259:586): avc: denied { create } for pid=2723 comm="syz.4.776" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 135.843559][ T36] audit: type=1400 audit(1787733922.299:587): avc: denied { link } for pid=2723 comm="syz.4.776" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=19983 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 135.944937][ T2726] kvm: kvm [2725]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xffffffffffffffff [ 136.060677][ T402] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 136.082870][ T2731] overlayfs: workdir and upperdir must be separate subtrees [ 136.211890][ T402] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.222866][ T402] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.232631][ T402] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 136.241720][ T402] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.250239][ T402] usb 7-1: config 0 descriptor?? [ 136.340665][ T63] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 136.490651][ T63] usb 3-1: Using ep0 maxpacket: 32 [ 136.497052][ T63] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.508140][ T63] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 136.510649][ T318] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 136.518002][ T63] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 136.535516][ T63] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 136.549204][ T63] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.558286][ T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 136.566524][ T63] usb 3-1: SerialNumber: syz [ 136.572223][ T2733] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 136.579398][ T2733] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 136.587016][ T63] hub 3-1:1.0: bad descriptor, ignoring hub [ 136.592957][ T63] hub 3-1:1.0: probe with driver hub failed with error -5 [ 136.600164][ T63] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 136.671725][ T318] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 136.680786][ T318] usb 8-1: config 1 has no interface number 0 [ 136.686878][ T318] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 136.696057][ T318] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 30, changing to 7 [ 136.708270][ T318] usb 8-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 136.717353][ T318] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.725366][ T318] usb 8-1: Product: syz [ 136.729829][ T318] usb 8-1: Manufacturer: syz [ 136.734464][ T318] usb 8-1: SerialNumber: syz [ 136.789423][ T63] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 136.821582][ T63] usb 3-1: USB disconnect, device number 63 [ 136.856704][ T2714] ------------[ cut here ]------------ [ 136.862279][ T2714] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:131:9 [ 136.870530][ T2714] index 16382 is out of range for type 'unsigned long[8]' [ 136.877655][ T2714] CPU: 0 UID: 0 PID: 2714 Comm: syz.6.773 Not tainted syzkaller #0 02f2c9a1947d185dcc234937001f7d1e6f97c77a [ 136.877684][ T2714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.877697][ T2714] Call Trace: [ 136.877704][ T2714] [ 136.877711][ T2714] __dump_stack+0x21/0x30 [ 136.877740][ T2714] dump_stack_lvl+0x140/0x1c0 [ 136.877765][ T2714] ? __cfi_dump_stack_lvl+0x10/0x10 [ 136.877789][ T2714] ? stack_depot_save_flags+0x399/0x800 [ 136.877815][ T2714] dump_stack+0x19/0x20 [ 136.877838][ T2714] ubsan_epilogue+0xe/0x40 [ 136.877855][ T2714] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 136.877881][ T2714] __pv_queued_spin_lock_slowpath+0xbf7/0xe90 [ 136.877910][ T2714] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 136.877937][ T2714] _raw_spin_lock_irqsave+0x153/0x160 [ 136.877962][ T2714] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 136.877987][ T2714] ? irqentry_exit+0x4a/0x60 [ 136.878008][ T2714] __pm_runtime_resume+0x60/0xa0 [ 136.878031][ T2714] usb_autopm_get_interface+0x25/0xf0 [ 136.878049][ T2714] usbhid_power+0x84/0xd0 [ 136.878073][ T2714] hidraw_open+0x257/0x960 [ 136.878097][ T2714] chrdev_open+0x4e8/0x610 [ 136.878118][ T2714] ? __cfi_chrdev_open+0x10/0x10 [ 136.878139][ T2714] ? bpf_lsm_file_open+0xd/0x20 [ 136.878163][ T2714] ? __cfi_chrdev_open+0x10/0x10 [ 136.878183][ T2714] do_dentry_open+0x97f/0x1510 [ 136.878209][ T2714] vfs_open+0x86/0x240 [ 136.878231][ T2714] ? __cfi_vfs_open+0x10/0x10 [ 136.878254][ T2714] ? may_open+0x352/0x430 [ 136.878275][ T2714] path_openat+0x2c49/0x35a0 [ 136.878298][ T2714] ? schedule+0xc5/0x240 [ 136.878321][ T2714] ? kasan_save_alloc_info+0x3a/0x50 [ 136.878339][ T2714] ? getname+0x1b/0x30 [ 136.878357][ T2714] ? x64_sys_call+0xe69/0x2ee0 [ 136.878373][ T2714] ? do_syscall_64+0x57/0xf0 [ 136.878396][ T2714] ? do_filp_open+0x440/0x440 [ 136.878420][ T2714] do_filp_open+0x1f2/0x440 [ 136.878443][ T2714] ? __cfi_do_filp_open+0x10/0x10 [ 136.878468][ T2714] ? alloc_fd+0x4c1/0x570 [ 136.878489][ T2714] do_sys_openat2+0x134/0x1d0 [ 136.878512][ T2714] ? common_nsleep+0x93/0xb0 [ 136.878534][ T2714] ? do_sys_open+0x100/0x100 [ 136.878567][ T2714] __x64_sys_openat+0x13a/0x170 [ 136.878591][ T2714] x64_sys_call+0xe69/0x2ee0 [ 136.878609][ T2714] do_syscall_64+0x57/0xf0 [ 136.878630][ T2714] ? clear_bhb_loop+0x50/0xa0 [ 136.878649][ T2714] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 136.878667][ T2714] RIP: 0033:0x7fb329f5e90e [ 136.878683][ T2714] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 136.878699][ T2714] RSP: 002b:00007fb32ae9cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 136.878719][ T2714] RAX: ffffffffffffffda RBX: 00007fb32ae9d6c0 RCX: 00007fb329f5e90e [ 136.878733][ T2714] RDX: 0000000000000602 RSI: 00007fb32ae9cc00 RDI: ffffffffffffff9c [ 136.878747][ T2714] RBP: 00007fb32ae9cc00 R08: 0000000000000000 R09: 0000000000000000 [ 136.878759][ T2714] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 136.878771][ T2714] R13: 00007fb32a226038 R14: 00007fb32a225fa0 R15: 00007ffeeef44b68 [ 136.878787][ T2714] [ 136.878794][ T2714] ---[ end trace ]--- [ 136.907411][ T2742] loop9: detected capacity change from 0 to 7 [ 136.910862][ T2714] Oops: general protection fault, probably for non-canonical address 0xff8724b39f87c9d1: 0000 [#1] PREEMPT SMP KASAN PTI [ 136.916628][ T36] audit: type=1400 audit(1787733923.329:588): avc: denied { create } for pid=2736 comm="syz.4.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 136.920700][ T2714] KASAN: maybe wild-memory-access in range [0xfc39459cfc3e4e88-0xfc39459cfc3e4e8f] [ 136.920720][ T2714] CPU: 0 UID: 0 PID: 2714 Comm: syz.6.773 Not tainted syzkaller #0 02f2c9a1947d185dcc234937001f7d1e6f97c77a [ 136.920743][ T2714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.920756][ T2714] RIP: 0010:__pv_queued_spin_lock_slowpath+0x38c/0xe90 [ 136.930097][ T36] audit: type=1400 audit(1787733923.379:589): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 136.930500][ T2714] Code: fc ff df 80 3c 10 00 74 17 48 89 df e8 9d 70 39 fc 48 8b 7c 24 10 48 ba 00 00 00 00 00 fc ff df 4c 03 3b 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 17 4c 89 ff e8 96 71 39 fc 48 8b 7c 24 10 48 ba 00 [ 137.040751][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.043457][ T2714] RSP: 0018:ffffc9000aa4f4c0 EFLAGS: 00010806 [ 137.048287][ C1] buffer_io_error: 3 callbacks suppressed [ 137.048300][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.052835][ T2714] RAX: 1f8728b39f87c9d1 RBX: ffffffff8721cb70 RCX: ffff888135953900 [ 137.052853][ T2714] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff8881f5990d64 [ 137.052866][ T2714] RBP: ffffc9000aa4f5d0 R08: 0000000000000003 R09: 0000000000000004 [ 137.052878][ T2714] R10: dffffc0000000000 R11: fffffbfff1176e80 R12: 1ffff1103edca161 [ 137.058268][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.062025][ T2714] R13: 1ffff1103eb321ac R14: ffff8881f6e50b00 R15: fc39459cfc3e4e8a [ 137.062042][ T2714] FS: 00007fb32ae9d6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 137.062060][ T2714] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.067068][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.071369][ T2714] CR2: 000055f0706671a0 CR3: 000000010b3aa000 CR4: 00000000003526b0 [ 137.071387][ T2714] Call Trace: [ 137.071394][ T2714] [ 137.071404][ T2714] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 137.078088][ T2742] loop9: unable to read partition table [ 137.080651][ T2714] _raw_spin_lock_irqsave+0x153/0x160 [ 137.080685][ T2714] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 137.096368][ T2742] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 137.099077][ T2714] ? irqentry_exit+0x4a/0x60 [ 137.099108][ T2714] __pm_runtime_resume+0x60/0xa0 [ 137.190711][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.194902][ T2714] usb_autopm_get_interface+0x25/0xf0 [ 137.207518][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.226978][ T2714] usbhid_power+0x84/0xd0 [ 137.227007][ T2714] hidraw_open+0x257/0x960 [ 137.258302][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.264591][ T2714] chrdev_open+0x4e8/0x610 [ 137.264624][ T2714] ? __cfi_chrdev_open+0x10/0x10 [ 137.286404][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.305912][ T2714] ? bpf_lsm_file_open+0xd/0x20 [ 137.305951][ T2714] ? __cfi_chrdev_open+0x10/0x10 [ 137.321272][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.326806][ T2714] do_dentry_open+0x97f/0x1510 [ 137.326840][ T2714] vfs_open+0x86/0x240 [ 137.334652][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.342576][ T2714] ? __cfi_vfs_open+0x10/0x10 [ 137.342604][ T2714] ? may_open+0x352/0x430 [ 137.351211][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.358620][ T2714] path_openat+0x2c49/0x35a0 [ 137.366664][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.375680][ T2714] ? schedule+0xc5/0x240 [ 137.375714][ T2714] ? kasan_save_alloc_info+0x3a/0x50 [ 137.375732][ T2714] ? getname+0x1b/0x30 [ 137.384336][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.392604][ T2714] ? x64_sys_call+0xe69/0x2ee0 [ 137.392630][ T2714] ? do_syscall_64+0x57/0xf0 [ 137.399239][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.406994][ T2714] ? do_filp_open+0x440/0x440 [ 137.407024][ T2714] do_filp_open+0x1f2/0x440 [ 137.633826][ T2714] ? __cfi_do_filp_open+0x10/0x10 [ 137.638855][ T2714] ? alloc_fd+0x4c1/0x570 [ 137.643178][ T2714] do_sys_openat2+0x134/0x1d0 [ 137.647853][ T2714] ? common_nsleep+0x93/0xb0 [ 137.652434][ T2714] ? do_sys_open+0x100/0x100 [ 137.657038][ T2714] __x64_sys_openat+0x13a/0x170 [ 137.661883][ T2714] x64_sys_call+0xe69/0x2ee0 [ 137.666464][ T2714] do_syscall_64+0x57/0xf0 [ 137.670876][ T2714] ? clear_bhb_loop+0x50/0xa0 [ 137.675549][ T2714] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 137.681432][ T2714] RIP: 0033:0x7fb329f5e90e [ 137.685839][ T2714] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 137.705437][ T2714] RSP: 002b:00007fb32ae9cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 137.713846][ T2714] RAX: ffffffffffffffda RBX: 00007fb32ae9d6c0 RCX: 00007fb329f5e90e [ 137.721808][ T2714] RDX: 0000000000000602 RSI: 00007fb32ae9cc00 RDI: ffffffffffffff9c [ 137.729770][ T2714] RBP: 00007fb32ae9cc00 R08: 0000000000000000 R09: 0000000000000000 [ 137.737729][ T2714] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 137.745700][ T2714] R13: 00007fb32a226038 R14: 00007fb32a225fa0 R15: 00007ffeeef44b68 [ 137.753676][ T2714] [ 137.756689][ T2714] Modules linked in: [ 137.760596][ T2714] ---[ end trace 0000000000000000 ]--- [ 137.766050][ T2714] RIP: 0010:__pv_queued_spin_lock_slowpath+0x38c/0xe90 [ 137.772905][ T2714] Code: fc ff df 80 3c 10 00 74 17 48 89 df e8 9d 70 39 fc 48 8b 7c 24 10 48 ba 00 00 00 00 00 fc ff df 4c 03 3b 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 17 4c 89 ff e8 96 71 39 fc 48 8b 7c 24 10 48 ba 00 [ 137.792506][ T2714] RSP: 0018:ffffc9000aa4f4c0 EFLAGS: 00010806 [ 137.798578][ T2714] RAX: 1f8728b39f87c9d1 RBX: ffffffff8721cb70 RCX: ffff888135953900 [ 137.806545][ T2714] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff8881f5990d64 [ 137.814513][ T2714] RBP: ffffc9000aa4f5d0 R08: 0000000000000003 R09: 0000000000000004 [ 137.822489][ T2714] R10: dffffc0000000000 R11: fffffbfff1176e80 R12: 1ffff1103edca161 [ 137.830465][ T2714] R13: 1ffff1103eb321ac R14: ffff8881f6e50b00 R15: fc39459cfc3e4e8a [ 137.838441][ T2714] FS: 00007fb32ae9d6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 137.847369][ T2714] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.853949][ T2714] CR2: 000055f0706671a0 CR3: 000000010b3aa000 CR4: 00000000003526b0 [ 137.861918][ T2714] Kernel panic - not syncing: Fatal exception [ 137.868092][ T2714] Kernel Offset: disabled [ 137.872405][ T2714] Rebooting in 86400 seconds..