last executing test programs: 53.773756894s ago: executing program 0 (id=51): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x25dfdbfd, {{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x9, 0x0, 0x80}, {@in=@local, 0x0, 0x33}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0xd}, {0x0, 0x0, 0x8000}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x880, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x7}, 0x10) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000100)) 53.704894428s ago: executing program 0 (id=52): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_regs={0x12}}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000180)=0x28) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x80900, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='fusectl\x00', 0x2001022, 0x0) 53.703827708s ago: executing program 0 (id=53): mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x8, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4, 0x94}) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4, 0x94}) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x3, 0x1, 0xb6cc, 0x7, 0x3b, 0x3, {0x1, 0xfffffffffffffc34, 0x1, 0x3, 0x7fff, 0x100, 0x5, 0xfffffffd, 0x7, 0x4000, 0x0, r2, r3, 0x8001, 0xdfb80000}}, {0x2, 0x4000009, 0x1, 0x4, '*'}}]}, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x800, 0x0, 0x2, 0x3, 0x0, 0x6}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='net/ip6_tables_names\x00') lseek(r6, 0x2000, 0x0) getdents64(r4, &(0x7f0000000100)=""/134, 0x86) clock_adjtime(0xa, &(0x7f0000000f40)={0x9, 0x2, 0x5, 0xffffffffffffffff, 0x100, 0x3, 0x9, 0x7, 0x8, 0x1, 0x83, 0x100000000, 0xdf9, 0x4, 0x4, 0x0, 0x6, 0x0, 0x5, 0x8, 0xb07, 0x4, 0x3ff, 0x80, 0x3, 0x5}) (async) clock_adjtime(0xa, &(0x7f0000000f40)={0x9, 0x2, 0x5, 0xffffffffffffffff, 0x100, 0x3, 0x9, 0x7, 0x8, 0x1, 0x83, 0x100000000, 0xdf9, 0x4, 0x4, 0x0, 0x6, 0x0, 0x5, 0x8, 0xb07, 0x4, 0x3ff, 0x80, 0x3, 0x5}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000800) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000800) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) (async) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) 53.560766936s ago: executing program 0 (id=54): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000076001f03000000000000000008000000", @ANYRES32, @ANYBLOB="08000500e0025ab2"], 0x20}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000100)) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10005, &(0x7f0000002340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="132a66c9376f0a8e49c9ac4a31aa56e917b5ec7d47b202acf410c84b3b7a744e175c9d2b614536c0a60d3d212d0f1abab2b53106d0bbab9ffd864bd8cfd9da73ee0722a3ad9df5054679c3d7"]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10005, &(0x7f0000002340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="132a66c9376f0a8e49c9ac4a31aa56e917b5ec7d47b202acf410c84b3b7a744e175c9d2b614536c0a60d3d212d0f1abab2b53106d0bbab9ffd864bd8cfd9da73ee0722a3ad9df5054679c3d7"]) read$FUSE(r2, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000022c0)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0xffffffff81a00000, 0x13, 0x0, 0x87, 0x1, 0x0, 0x0, 0x10, 0xfffffffe}}, 0x50) (async) write$FUSE_INIT(r2, &(0x7f00000022c0)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0xffffffff81a00000, 0x13, 0x0, 0x87, 0x1, 0x0, 0x0, 0x10, 0xfffffffe}}, 0x50) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000021c0)=@loop={'/dev/loop', 0x0}, r4, &(0x7f0000002200)='./file0/file1\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000002000)='./file0/file1\x00', &(0x7f0000002040)={0x101140, 0x101, 0x8}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000002280), 0xd0c1, &(0x7f0000002240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000040)=0xffffeffc, 0x4) setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x45833af92e4b38ff, 0x0) (async) recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x45833af92e4b38ff, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000500), 0x800) fstat(r1, &(0x7f0000000580)) 53.393651756s ago: executing program 0 (id=55): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) unshare(0x60000600) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000010c0)={0x24, 0x12, 0x1, 0x70bd23, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x4, 0x1e}]}, 0x24}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0x18, 0x31, 0x69b6754e5abcd1c9, 0x70bd28, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) syz_usb_connect$cdc_ncm(0x4, 0xe2, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd0, 0x2, 0x1, 0x0, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "23ff"}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x1, 0x8, 0x3}, {0x6, 0x24, 0x1a, 0x4, 0x3d}, [@acm={0x4, 0x24, 0x2, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x400}, @mdlm_detail={0x59, 0x24, 0x13, 0x7, "0a9af7051e0149381bda59bcb69084dd7295c5a1f8c0c9bdd93e5a9ccbfa5f6aad5919f5d481834a5f904e12af83c2a9b57ca6c49760fd9e9654da3bab8421cbde64705b1ee446a8079ad9b9a3cc7b61859cfb4190"}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x66, 0x3, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x68, 0x4, 0x48}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x3, 0x3, 0x40}}}}}}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x310, 0x9, 0x6, 0x2, 0x20, 0xe}, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="050f08000103100befa4ff0c4644ca61e90778a178fe9a5875225a865413b21803324e766cb4ef0d645db97733434591d3898357c16deca071ed8069384660a59fd3d9322a71ac7a868bbc542d12af2a656f64514c0c796be07cb4f6ac9001cb78bd85e5ff3a577a848c2a79b3b4b0fb460752484971cd36b666b8b2aeba967d37aa0afe759897675c834537925e80645b68e1f3"], 0x6, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x820}}, {0x102, &(0x7f0000000b00)=@string={0x102, 0x3, "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"}}, {0x93, &(0x7f0000000c40)=@string={0x93, 0x3, "9549edc4561c604c88b2dadad426ad1ddfd85307d9d060d939f33db113bc19a466164f9acd94bfab857e22e7643ea80d80f84e8db6fc5a8c2cc5bbcbbb0ca01f7092e9b82cc364031566eddee5310bbf76d69d332fb20e7ad84423a2505847bc782a80023407b7051ad13386797ed08dac11bd745c8bc0fde6ee7dd49c105330d19cd42333aa8cb45d78ee2e79408cc374"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x424}}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) prctl$PR_MCE_KILL(0x48, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r6, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup(r3, &(0x7f00000000c0)='syz1\x00', 0x1ff) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r5, 0xc00c6211, &(0x7f0000000e00)) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x8c, 0x97, 0x47, 0x8, 0x5f9, 0xffff, 0xb378, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x6, 0x0, 0x0, [{{0x9, 0x4, 0x9b, 0x0, 0x0, 0xf4, 0x27, 0xf}}]}}]}}, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r8 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) fchdir(r8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)={0x40, 0x6, 0xe8, {0xe8, 0xd, "d426686efa9b5129f30db9bd37f28b037de3023e4d25d5b040651b79dee7e49481277f61ccc83d761258f7dcce2460dce2609faa1a1bbbc0fbea53d3f7b2e738cc44f62cb4e580f77b072dfe264f0af6761844f6d9c9e1d85d96b73e64ff9a2d05dba27a12a239d67be05dd492d236db54dc312518f702030dbd98da9784b537b78bde5f7000d8c1d05a08e380395e3fefc8974114cff17eebaa8e2ceeb38f6c1d4f1b4fd8d823eea284c50221625449241b7752962382a690eeca068b2885bf16dc6f980a64771df098965af7bbc74f845e27c3a77cf93d60d7c7d43eeeadd9db18e7b701ab"}}, &(0x7f0000000200)=ANY=[@ANYBLOB="0003c9000000c96f4369a8d980242503253ddf5fc40fac8d5cd73da277270d7310a99d000d14ce3c2ecc2dea94a38cb17632ccc63a6bc6b7438edf02348b790595bdb25b790be6c84ca3473749e6c62b4305bc77d9ba880ce7d757c4b70955c8bc082b9aa40264f92d748cbccfb375cbf30f48e64d399b5f86a97e6e83d0fac4bdc8fadbe92d557c381b97c539e1158dcca92ae22956e019c81c417f9dc77d1135be34e2676cc4284dec19843ad13a1732a4a86fc5d75866912f15af9d0bda2a6df8a3d46319456e61e6f309b98aa1"], &(0x7f0000000300)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0xbd, 0x2, 0x5, 0x7, "a3a0d187", "75fdb65b"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x4, 0x0, 0x8, 0xed, 0x8001, 0x7}}}, &(0x7f0000000840)={0x84, &(0x7f0000000440)={0x0, 0x17, 0xd, "3b20fb1bd0f179f57c89223f6b"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xc0}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0xe0, 0x1}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x2}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x66}, &(0x7f0000000600)={0x40, 0xb, 0x2, "b280"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000680)={0x40, 0x13, 0x6, @random="92f45d44e047"}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000700)={0x40, 0x19, 0x2, "93bb"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x2fe8}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0xfc}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0xfe}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x4}}) 53.286373333s ago: executing program 0 (id=57): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1f, 0x28011, r1, 0xffff9000) (async, rerun: 32) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="c80000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000244e2000014e2404000200800087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba4100000000000007000000000000000000009299a214468f8000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e00000003010000007fbc922b5828e2148b5d1e690004000008000000000800"], 0xc8}}, 0x0) (rerun: 32) 53.237951455s ago: executing program 32 (id=57): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1f, 0x28011, r1, 0xffff9000) (async, rerun: 32) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="c80000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000244e2000014e2404000200800087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba4100000000000007000000000000000000009299a214468f8000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e00000003010000007fbc922b5828e2148b5d1e690004000008000000000800"], 0xc8}}, 0x0) (rerun: 32) 7.229823489s ago: executing program 4 (id=361): r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x8000, 0x2) ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, &(0x7f0000000040)=""/237) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0xe) syz_usb_connect$printer(0x3, 0x36, &(0x7f00000013c0)=ANY=[@ANYBLOB="1201100300000008b8040202400001020301090224000101032002090400070207"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x8) write$char_usb(r1, &(0x7f0000000140), 0x0) 5.973353942s ago: executing program 4 (id=368): fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3d) personality(0x87bf5ac905ea0f7f) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) capset(&(0x7f0000000080)={0x20080522, r1}, &(0x7f0000000040)={0x1001, 0x10ffff, 0xfffffffd, 0x1, 0xfffff059, 0x7ff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x6, 0x4, 0x10001}}, 0x30) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/sockcreate\x00') ftruncate(r4, 0x3119c976) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) ppoll(0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0)={[0x7e54cae7]}, 0x8) 5.956917014s ago: executing program 4 (id=369): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup\x00', 0x101000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x6, 0x7fff0000}]}) r1 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r1, &(0x7f0000001000)=""/4075, 0xfeb) getdents64(r0, &(0x7f0000000080)=""/45, 0x2d) getdents64(r0, 0x0, 0x18) syz_usb_connect(0x0, 0x9c, &(0x7f0000000440)=ANY=[@ANYBLOB="120150022df49f408616dd00c4370102030109028a00030261100e090401be013e04f200021109050600000208fc060904220803eb1b50080a2401a0771ac9b3c436381f40974c10dfd1010201020905050008000c04060725010100f8ff07250100fa04000905020140000602bec6f41ee3487596beda961b0107250187034c0f07250101056000090505081000024090090402"], &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}) 4.336414857s ago: executing program 4 (id=374): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'virt_wifi0\x00', {}, 0x9}) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x32, &(0x7f0000000000)=0x32a7, 0x27) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6f) write$binfmt_elf64(r2, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d0000f0ffffffffec08000000000000f0ffffffffffffff0000000000000000080000000000000003"], 0x5b0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 4.324177248s ago: executing program 4 (id=375): r0 = socket(0x1e, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x8, 0x8000, 0x1ff, 0x9, {{0x6, 0x4, 0x0, 0xf, 0x18, 0x66, 0xfffe, 0x6, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@lsrr={0x83, 0x3, 0x4}]}}}}}) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/156, 0x9c}], 0x1}, 0x8000}], 0x1, 0x2102, 0x0) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000000)={'veth1\x00', 0x3}) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308", @ANYRES64=r0], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000200)={'bridge0\x00', @random="010001ff00"}) r4 = accept4(0xffffffffffffffff, &(0x7f0000000740)=@vsock, &(0x7f00000007c0)=0x80, 0x80000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r4, 0x8982, &(0x7f0000000800)) io_setup(0x6, &(0x7f0000000040)) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002205000000c3f50a515955a0244cd2b5d24bf1bf0a27cf9e9e1f4c567ab5b7343a14a483fd3c910c46739b7f0968a7ef96d0f9b9f608004becacd0900a02c1f550e5671779b53b0751c688eae1e46f185fbfe11bff7bb3e24eb6"], 0x0}, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000002280), &(0x7f00000022c0)={'fscrypt:', @desc2}, &(0x7f0000002300)={0x0, "2a4cea898139e0e0c019a74d3ea26dd02e4c241b97774cc682857eed746418339edb88181d7a65049884e401847aef386af7be95cb8e40e633ea34c59d08c962", 0x27}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r5, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0xfffffffd, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="2003470000004722b1b65515e95b2c5a5384f1dc73c7007b09fe7d51e810962652d42ccceccfd7cfe4efe1ef29092cc6f93fa29c832ae70fff02050b249181f50c184772319785516b9bbea4ce"], &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x44, &(0x7f00000003c0)={0x40, 0x15, 0xcd, "e4e726ffda86f19a5de4bf3f55aafb2a7d46c5597f910ed51c9a3b1b3b593f294873f197e1fa37ef25cf0792c05a562546a44b242aeff6a5a69ccf7478adc21110c304e341568dd1e9e0736931d7f62fd56ca06011a06bde62eb5ae67834a2878f022363eac8ca92754bb1b287f297296192a0d534cae8f199bae9fd4843b580b8b838d478ecd5eb6a501985b0075814233f6691cc5cc56f907a08f05f20452a71a93a32c38af9f527acd3f28486e43518fdea1cffa44ddb08c73c10c8e3149969930b69e618a2493ad0c21188"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xfc}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x3e}, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x0, 0x2, 0x10001, 0x7, 0xd, 0x400, 0x100, 0x400, 0x53be, 0xd9b, 0x2, 0x5}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x4a}, &(0x7f0000000600)={0x20, 0x83, 0x2}, &(0x7f0000000640)={0x20, 0x87, 0x2, 0x10}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) syz_usb_ep_write(r2, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 3.996729117s ago: executing program 2 (id=377): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000480)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/cpu_byteorder', 0x40901, 0x88) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) readahead(r3, 0x72be, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000480)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/cpu_byteorder', 0x40901, 0x88) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) munlockall() (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) (async) readahead(r3, 0x72be, 0x4) (async) 3.77460061s ago: executing program 2 (id=378): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000002200", @ANYRES8, @ANYBLOB="3632326bf5a7177c7124984091"], 0x1c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000140)={0x0, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) write$vga_arbiter(r2, &(0x7f0000000080)=@target={'target ', {'PCI:', '0', ':', '0', ':', '5', '.', '0'}}, 0x13) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x90}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x40001000, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x100, 0x3c, 0x811, 0x70bd2d, 0x25dfdbfe, {0x1a}, [@nested={0x1c, 0x25, 0x0, 0x1, [@nested={0x4, 0xb7}, @typed={0x8, 0x39, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0xbd, 0x0, 0x0, @str=':#-\x00'}, @nested={0x4, 0x57}]}, @nested={0xcd, 0x3a, 0x0, 0x1, [@generic="c7593c28a3a5e5c681e15520554c2929894174b2bbe21c29b72242d0e4e0ac3953201378448f51a9834a9c8428a4ae8e941502a8cf85b74d1ca83f78ed160ae54f77ad9a921e4c1e559e1ffe94240a57a4536e3113aeee32a7cd0bb5af885a5f5ed095bc203ee0a46d3c28d86084e02fa2f6613a11fb979bd84640fd0ac579db0f0811a6cc5c38fa7aa1346c4320907ed79a1dbd11", @typed={0x8, 0x1, 0x0, 0x0, @u32=0x8}, @nested={0x4, 0xd2}, @typed={0x14, 0xc7, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x73, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x92, 0x0, 0x0, @ipv4=@private=0xa010100}, @nested={0x4, 0x8f}, @generic]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4011}, 0x4008010) 2.845066574s ago: executing program 2 (id=380): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r1, 0xffffd000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x3, 0x10000000, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r3, 0x201, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x6080}, 0x4000) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r5, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x50, r4, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x50}}, 0x8004) mlockall(0x1) syz_clone3(&(0x7f0000001880)={0x80801000, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x50, r3, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x5) 2.5637347s ago: executing program 2 (id=381): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x43, 0x0, &(0x7f00000029c0)) (async) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) (async) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="656e633d6f61657020686173683df7"], 0x0, 0x0) (async) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) (async) futex(&(0x7f000000cffc), 0x5, 0x100000, 0x0, &(0x7f0000000000), 0x3000000) (async, rerun: 32) clock_gettime(0x2, &(0x7f0000000040)) (rerun: 32) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af25, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x17, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000a00)={[0x8001]}, 0x8, 0x80800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r2) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f00)={0x4c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x5}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x96}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x7f}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x7}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000008c}, 0x10) (async, rerun: 32) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') (rerun: 32) read$FUSE(r4, &(0x7f0000000a40)={0x2020}, 0x2020) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400009fa83a06001e00090002000000ffdbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000080)='.\x00', &(0x7f0000000000)='pvfs2\x00', 0x0, 0x0) 2.215688451s ago: executing program 1 (id=382): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = dup(r0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000040)={0xffff1000, 0x104000}) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x198, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x64e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1550}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x46}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2b}]}]}, @TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfff}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "d5a3b7f7aefa50d7a7bfd0f29f805b99eab2a897ef56d418cf44c10f1716e159"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb60c}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x52ae9692}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6b72}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xba3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x5) (async) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x821, &(0x7f00000000c0)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@cache_none}, {@msize={'msize', 0x3d, 0x55a}}, {@mmap}], [{@appraise}, {@subj_user={'subj_user', 0x3d, '}'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@pcr={'pcr', 0x3d, 0xe}}, {@smackfshat={'smackfshat', 0x3d, '@-!#+$*.\''}}, {@permit_directio}, {@dont_appraise}]}}) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x10, 0x8f, 0x8c, 0x40, 0x46d, 0xc11f, 0x8a13, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x2, 0x9, 0x80, 0xe, [{{0x9, 0x4, 0x6a, 0x4, 0x0, 0x2, 0xa, 0x0, 0x4}}, {{0x9, 0x4, 0x4b, 0x3, 0x0, 0xcc, 0x85, 0xcf, 0x2}}]}}]}}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0}) 1.672470702s ago: executing program 2 (id=383): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="200000006d0001"], 0x28}], 0x1}, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x541b, &(0x7f0000000100)={'veth1_to_hsr\x00', @link_local}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000300)={[0x3ff, 0x7, 0x0, 0x6, 0x1, 0x5, 0x0, 0x7, 0x8, 0xb7, 0x0, 0x0, 0x5, 0x2, 0xfffffffffffffffe], 0x50000, 0x8b40}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x26f, 0x0, 0x80000001}]}) landlock_create_ruleset(&(0x7f0000000080)={0x80, 0x10, 0x5}, 0x18, 0x1) r11 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r12 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x25, &(0x7f0000000080)=0x3300, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_int(r13, 0x1, 0x34, &(0x7f0000000340)=0x80000001, 0x4) ioctl$USBDEVFS_CONTROL(r11, 0xc0185500, &(0x7f0000000000)={0x1, 0x6, 0x5, 0x6, 0x0, 0x1, 0x0}) ioctl$USBDEVFS_GET_CAPABILITIES(r11, 0x8004551a, &(0x7f0000000040)) 1.588942327s ago: executing program 3 (id=384): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000400)=0x3ff, 0x4) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d0000000000000005090290000301038000090400000001"], 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000400)=0x3ff, 0x4) (async) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d0000000000000005090290000301038000090400000001"], 0x0) (async) 1.36624464s ago: executing program 2 (id=385): mount$9p_fd(0x0, 0x0, 0x0, 0x800008, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f00000002c0)='./bus\x00', 0x6) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async, rerun: 32) chdir(&(0x7f0000000140)='./bus\x00') (rerun: 32) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents(r0, 0x0, 0x0) (async, rerun: 32) lseek(r0, 0x7, 0x1) (rerun: 32) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "7738e21f"}]}}, 0x0}, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2001100009000000"], 0x0}) (rerun: 32) 1.19947858s ago: executing program 4 (id=386): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)={0x2c, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0x3a, 0x0, 0x0, @u64=0x7fff8}]}, 0x2c}], 0x1}, 0x0) r1 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380)={0x20, 0xe, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001240)={0x84, &(0x7f0000000b00)={0x20, 0x16, 0x2, "e44e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc01082c}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3168}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x4040) syz_usb_control_io$uac1(r1, &(0x7f0000000400)={0x14, &(0x7f0000000240)={0x0, 0x10, 0xe6, {0xe6, 0x0, "d26824d6ffa4bf75aee3deeabc32a95d1f507d4e070d366c4f6a4abe5b48ce843ba512d0d7796d49bcd80b282cc28abe24579a984369b8983126670e8e85c4897bbece00d8292f27da22fd1f8c678c071146f31b4e624f43452132eedc847d47fdcfac863aed3ce17006be39f0fbd2c515dad9ec405bbaaf1404c1218b1271ba305807abe9f4f370e43a50749d6384a6563a4673e72eb200f336bd34488a9659d6855e94b7d33ff33ca3c4b5e2c86a05d4f7cc49245e4401cc160fd6b198dba853c4f72e5a7e122f87b8ef2b04986c95fe1f12b14bdca0b72ffd7cf149b64c41d01a6fbb"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}}, &(0x7f0000000700)={0x44, &(0x7f0000000440)={0x40, 0xc, 0xdb, "daec7e636b99ff13fbb9d5190a8588cb041a4762b5028542cfdbaf551dab88ef274e7d8c1824ecf64fd97a3d1c5d5d0f860b80db878d46ca7460c20ac8dc3a61d3d0f94b0cefa47a5de8b8a566f78866c698d5ae5eb8fc1bcf10db99045f1762d45c900fc7dbb09e9e3a5d54797bea18d64531abd16d50cad859ed26a21de6f73003c38903fc8e462a9e8d5a2400b0e66927483039a938f771631812040d7cee2420f5bb7d8ffd7c9c383ad57b2f032e8a2e002c51ab0a4849874c8c081154f10a27fe8efaa5697418f6e1f48a20f54b99344bfcd2bface7b38fec"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xfe}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000005c0)={0x20, 0x81, 0x1, "a1"}, &(0x7f0000000600)={0x20, 0x82, 0x1, 'Q'}, &(0x7f0000000640)={0x20, 0x83, 0x2, '%1'}, &(0x7f0000000680)={0x20, 0x84, 0x4, "45641746"}, &(0x7f00000006c0)={0x20, 0x85, 0x3, "cf2f99"}}) syz_usb_control_io(r1, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000340)={0x20, 0x31, 0x2, "60ef"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0) r4 = syz_usb_connect$printer(0x1, 0x36, &(0x7f00000014c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x90, 0xd, [{{0x9, 0x4, 0x0, 0xca, 0x1, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xb2, 0x45, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x6, 0x9}}]}}}]}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000001500)={0xa, 0x6, 0x300, 0x7, 0x8, 0x7, 0x20}, 0x19, &(0x7f0000001540)={0x5, 0xf, 0x19, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x9, 0x3, 0xad}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x8, 0x7, 0x7}, @ptm_cap={0x3}]}, 0x3, [{0x7b, &(0x7f0000001580)=@string={0x7b, 0x3, "1ad2e6ece926020345f7e28801ac279858ccab5174c418e6cc0e391c9fb71a0f6f026b74371bc04b3dd76506f88336bc9f51d24cf117805935a705b20a454771a90be8b5b48b3cba2a4b8f92b842d138ce22c56bf177491bfc20a2e3ab80c148bdbacce92f7a50be3d1c4d0e74e9329fecd7edb0e4dc52a65e"}}, {0x72, &(0x7f0000001600)=@string={0x72, 0x3, "bc2682059adc67f2c5bea47a2dcfcbcee3c7aad14f23fb7c002f3c526d75c6fcb6fe59d277322e42488ecf1a9e6cf1551e35db519512d6758720b3d08c1060fafe22a070833de56ed4e6fb2f489562f360567b2b6ca08a465db5419294d6877d9eb2619451c70caa179462095a1fb433"}}, {0x58, &(0x7f0000001680)=@string={0x58, 0x3, "4190a2a8c3a4a095ca339f4fd9f4a526607242f62dc4a333f9ce407839574c2503cf8aaee699e55b48fa558185b8031034f1bb23664897c6a232c1244ae05649be28a3acba69fe0338a5a086234eb9a366a986ccf23f"}}]}) syz_usb_control_io$printer(r4, &(0x7f00000017c0)={0x14, &(0x7f0000001740)={0x20, 0x22, 0xb, {0xb, 0xb, "9faf6d85562986160d"}}, &(0x7f0000001780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000001ac0)={0x34, &(0x7f0000001800)={0x20, 0x12, 0xae, "305a1f2f59ffeadc311ef84c83c88ba998f7e512c071418dbaa3d75dfe22814c32c4c89888f38697bc841bca5304dffa12f0ca85ffab17f9f6d7949041e280ab16f5fd8484250b8f0a167567c093f29710e41820a503becc79a4a3e53e7e4a8a3daccb1214406637b4ba22c87705d4340ff47453b8f1d3decbeb4b177ba8e380c372db1f330065309873000782102051f00c7b6d5b1f81359b3933941e2e15ea72c7af513d8933bc2843a807d42f"}, &(0x7f00000018c0)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000001900)={0x0, 0x8, 0x1, 0x1d}, &(0x7f0000001940)={0x20, 0x0, 0xf1, {0xef, "6b1ecc162718606e8b55df22c47ddfa176be341aaba7b0fac11dfe0e77db9f59ed92d797a5c0337587b820464228864b16aa2928b01aadee8252c25eef81bd2a3b5b22bdc80b669764c401305a461a7b97f7955ff76e12edbe4a1ecfbaa329f22d8d17727c86d52c4de246b4d60c89edef13281aacc869f5523d90bef557432dedeb28e35697bb3f944f5c2b11fafcd43319d19299f5c1aa034c557178cfe9b643d2910eec7bf2fca93dc1a6701049e127f8e1e00f4afe5e8c72ec7281d4634c46e1c97fee8add24bdc349a9ea2c0e928d7a8c2556846574c496195885a771a3dd077dbb1a7f583caab7d2039dead0"}}, &(0x7f0000001a40)={0x20, 0x1, 0x1, 0x4}, &(0x7f0000001a80)={0x20, 0x0, 0x1, 0x80}}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000980)={0x178, r3, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x62}}}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x4, 0x4}, {0x7, 0x1}, {0x80, 0x2}], "90ef06193bd5057d"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x7, 0x1}, {0x8, 0x7}, {0xd, 0x4}, {0x5, 0x3}, {0x4, 0x6}, {0x1}, {0x5, 0x4}, {0x5, 0x7}, {0x7, 0x6}, {0x8, 0x4}, {0xff, 0x2}, {0x8}, {0xf, 0x3}, {0x1, 0x6}, {0x0, 0x6}, {0xff, 0x6}, {0xaa, 0x6}], "320f75b7c906bcab"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x6, 0x3}, {0x0, 0x2}, {0xf, 0x7}, {0x5, 0x4}, {0x52}, {0x7, 0x5}, {0x65}], "5856e5f0f983ba3e"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x4}, {0x0, 0x5}, {0x6, 0x2}, {0xe}, {0xda, 0x3}, {0x9, 0x6}, {0x40, 0x4}, {0xf7, 0x1}, {0x7, 0x7}, {0xef, 0x7}, {0x8, 0x5}, {0x53, 0x4}, {0x3e, 0x1}, {0xa, 0x5}, {0x9, 0x2}, {0x1, 0x5}, {0xb0, 0x4}, {0x7, 0x6}, {0xc6}, {0x80}], "3bd322de750741aa"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x2, 0x7}, {0x3, 0x6}, {0xfc, 0x4}, {0x1, 0x3}, {0x0, 0x3}, {0x9, 0x3}, {0x9, 0x4}, {0x4, 0x7}, {0xc}, {0x9, 0x2}], "b694606b5ca03a96"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x10}, {0x6, 0x2}, {0x2, 0x2}, {0x7, 0x5}, {}, {0xf, 0x6}, {0x39, 0x7}, {0x0, 0x3}, {0x3, 0x7}, {0x0, 0x2}, {0x0, 0x5}, {0xb0, 0x4}, {0x9, 0x2}, {0x5, 0x5}, {0x9, 0x4}, {0x3, 0x7}, {0xb7, 0x7}], "cc1f8e7937c2e371"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0xfb, 0x7}, {0xa, 0x2}, {0x2f, 0x3}, {0xd}, {0x3, 0x1}, {0x12, 0x1}, {0xff, 0x1}], "b9b2a6665e3a52c2"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x10, 0x5}, {0x7, 0x5}, {0xe}, {0x0, 0x1}, {0x7f, 0x6}, {0x8, 0x4}, {0x5}, {0x1, 0x5}, {0x4, 0x5}, {0x1, 0x5}, {0x81, 0x6}, {0x2, 0x3}], "0247aea3e62a6a26"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x81, 0x4}, {0x2, 0x4}, {0x8, 0x7}, {0x7, 0x4}, {0xf5}, {0x4, 0x6}, {0xb7, 0x1}, {0x1e, 0x5}, {0x1, 0x5}, {0xff, 0x5}, {0x2}, {0x5, 0x3}, {0x77}, {0x61}, {0x3b, 0x3}], "5ccc8ec9feae1a58"}}]}, 0x178}, 0x1, 0x0, 0x0, 0x4800}, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r6) syz_usb_control_io(r1, &(0x7f0000000e80)={0x2c, &(0x7f0000000d40)={0x0, 0x3, 0x7d, {0x7d, 0x1, "ceea31c1a2593bb5cc1e02615ff7ca8e61d8f7d6996d0c4a4946ef1e6b7efee5178d62370a31e550b12414d6f1903e925968ee2ce98cd136e87f54feaa2eefd60420871507f1a92ff46686024dc26ad2d9f5f3efbdb5beb62da6a5974f99e97d5c5ef2812a7c4dcdaf412436dd5999c9286513ffada0df88c36e1f"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x809}}, &(0x7f0000000c00)={0x0, 0xf, 0x75, {0x5, 0xf, 0x75, 0x1, [@generic={0x70, 0x10, 0xa, "5e1997da27de8b5173a9de94bf2c3b7ade3e4306bc45d4e41087430c76a44b1d8ea152b3b9b1d78eaea97a065db2ca9e07259ed1ce347981c25a1576a2fa65be8278e637ccaaaca6e173df759f536786cd81bc0c1cc492f2341f3b9b0d336efe7f55139ecf33fa7118ce131cce"}]}}, &(0x7f0000000e00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x18, 0x1, 0x10, "14e668ff", "b6017988"}}, &(0x7f0000000e40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xd6, 0x18, 0x8, 0x2, 0x4, 0xc, 0x1}}}, &(0x7f0000001400)={0x84, &(0x7f0000000ec0)={0x0, 0x0, 0x99, "2cd3ea91ad98a4ee4a95ebf4976142e6fc900a01c00495710eb9045f1a989af7b81ad5a248b8e6d712f2e97783d6afe4cc8673bcad63a0a0b8a70a86de7c47eb2c1ab6bf57afc7afd8b976660c3691a7f6716a86b54399a5b08c5410454eeda1313f7f955de75764fbd9cc211ce6db1a549adb4903648d26e786b639b63cea54ec27de4d3799afbf9221f01a96910d4327c96dadbd736e6dd4"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x2e}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001000)={0x20, 0x0, 0x4, {0x6, 0x2}}, &(0x7f0000001040)={0x20, 0x0, 0x8, {0x4, 0x1, [0xf0f]}}, &(0x7f0000001080)={0x40, 0x7, 0x2, 0xba17}, &(0x7f00000010c0)={0x40, 0x9, 0x1}, &(0x7f0000001100)={0x40, 0xb, 0x2, "cfde"}, &(0x7f0000001140)={0x40, 0xf, 0x2, 0xc912}, &(0x7f0000001180)={0x40, 0x13, 0x6, @random="ddf39de7b4dd"}, &(0x7f00000011c0)={0x40, 0x17, 0x6}, &(0x7f0000001200)={0x40, 0x19, 0x2, "cda3"}, &(0x7f0000001300)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000001340)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000001380)={0x40, 0x1e, 0x1, 0x9d}, &(0x7f00000013c0)={0x40, 0x21, 0x1, 0xaa}}) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 661.650881ms ago: executing program 1 (id=387): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000080000009fce41d9ba733cf9c87f6979054fbc2a73a391083c3805fa800d29030000e1bbd6e8286c953b4c8955629db3faa360c7898847b4db745945f3598e503f2ea07deea25879c8dd3a7f5dae86a67abd1a6178b7f29696eeb412ae3b66ed739dfa3c95b36c1025bfd06b00800000910000000000000000000000000000d0e4b218218bf4ede5658dccc741b5cc82da6a8326b7459781379c31a971f51ed38d", @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x2c, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) chdir(&(0x7f00000001c0)='./file0\x00') r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0xb}, 0x800, 0x2, 0x1, 0xd, 0x7fc, 0xfffe}, 0x20) setuid(0xee01) creat(&(0x7f0000000200)='./file0\x00', 0x102) syz_usb_connect(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b", @ANYBLOB='ag'], 0x0) mount$binderfs(&(0x7f0000000040), &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000100), 0x400, &(0x7f0000000300)={[{@stats}, {@stats}, {@max={'max', 0x3d, 0x1}}, {@max={'max', 0x3d, 0x7fff}}, {@stats}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x7}}]}) 300.622552ms ago: executing program 3 (id=388): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='pids.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='pids.events\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="c0e568626966b4b138fbde8b781c59f7f3da7b46150fefff064dbd4d8b361d2a4c3b7bd6f5aeced92fb972c46d58fbf26f3b8cbf29ff9f444b34d8f8e3107b09b6efb511d5bc7690a30edc633601b18a5f88bc436e1e0700b57c67fc5a3770e5c26a0b87235faa1ddad01e38ad390dffac79d1332e6d16984067b50510ed2eefac885c7a74b12b21742e5d4a86a8b4af6012de651df1e10ec40cf8479cbdf95584d80874dda22af0c5178434bfb4ef786f788e32489a1d85063bd12e610979b61feb53d673b0c54074f1d1b15229d3d36f8c6d15b5bc74dda289c0cb200ba168370d906467973ecbec5a"], 0x9) (async) write$cgroup_devices(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="c0e568626966b4b138fbde8b781c59f7f3da7b46150fefff064dbd4d8b361d2a4c3b7bd6f5aeced92fb972c46d58fbf26f3b8cbf29ff9f444b34d8f8e3107b09b6efb511d5bc7690a30edc633601b18a5f88bc436e1e0700b57c67fc5a3770e5c26a0b87235faa1ddad01e38ad390dffac79d1332e6d16984067b50510ed2eefac885c7a74b12b21742e5d4a86a8b4af6012de651df1e10ec40cf8479cbdf95584d80874dda22af0c5178434bfb4ef786f788e32489a1d85063bd12e610979b61feb53d673b0c54074f1d1b15229d3d36f8c6d15b5bc74dda289c0cb200ba168370d906467973ecbec5a"], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) gettid() (async) r1 = gettid() rt_sigqueueinfo(r1, 0x21, &(0x7f00000002c0)={0xb, 0x4, 0xfffffffe}) (async) rt_sigqueueinfo(r1, 0x21, &(0x7f00000002c0)={0xb, 0x4, 0xfffffffe}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x5) getdents64(r2, 0x0, 0x44) (async) getdents64(r2, 0x0, 0x44) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x5, 0x0, 0x0, 0x0, 0x74, 0x2, 0xa, 0x54}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000140)={0x20080522, r1}, &(0x7f0000000280)={0x0, 0x6, 0x74, 0x0, 0x6, 0x8}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r5, 0x321, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x20}}, 0x4000000) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 240.838535ms ago: executing program 3 (id=389): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000640)={'filter\x00', 0xb001, 0x4, 0x3e0, 0x1f0, 0x1f0, 0x1f0, 0x2f8, 0x2f8, 0x2f8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xf296, 0xd}}}, {{@arp={@private=0xa010101, @loopback, 0x0, 0x0, 0x6, 0x70, {@mac=@random="c1328a2329f2", {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@remote, {[0x0, 0x0, 0x0, 0xff]}}, 0x4, 0x7, 0xfffd, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10000, 'syz0\x00', {0x7b}}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x9}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6f) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fdatasync(r1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002780)={0x0, @empty, @remote}, &(0x7f00000027c0)=0xc) syz_clone3(&(0x7f0000000180)={0x42907480, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async, rerun: 64) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) sendmmsg$sock(r0, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000000000)="79adf43d0117726963b90735a8f60acb8e3354ee873d23c21f30b0a7b799cb6ef2b2145f6877a2ecdffd595eef24c261d73d7ae6529fcf15b36006ac89eb1a860e579219041db553485451e336aae56931459f810e5a7436fa3f8eb938c2e08391cfd2410a1728f8826fb6df588a4f6c0624065cb5f3719b5a9c52cf4483258f6a72", 0x82}, {&(0x7f00000000c0)="b780848ed9104c78dbee927fa870ab8b9ed1b8fcd95fb29c24fa85ba6dcda54dfbceb07856942802ad80438698d4ad7e2687c0c47f39", 0x36}, {&(0x7f0000000100)="0df062de761aeb14e98f", 0xa}, {&(0x7f0000000140)="2c243e0befa6cae0b3e2b729167141574566608208cfa73a4ba07bacef7714ce872f05f8bfbecb91999c4dbe94897b3e31cd4d2afa1be693921e2f084965a7f7f7dbc23ab2f4ac9e694022ae049b3c98cb2848b061372e3d581cf15f349f934b6b2f56765986ba542c506b8e0ea6a68605d8eae4735aafeafd9d667cf9ece51d057b5f94561b0b0bc19f5ae15f716fcf734c6b8501974c6f9fcae853f05409600167844afa5c2653cff5c057b8f57b6c4f931b29643405108ac7e9e62d5425", 0xbf}, {&(0x7f0000000200)="beb41bd3cffe7d25b30889325db0a7e76d2d8c63299a0587469de6e768d2db4bd9b19b27f9c2819e3fa7639ecb9e0fdb82dcf7ad28fe5b9e21c2704777c8b6f350127c2dcc5b797190d8f3fcb42548cf44f0996c536ad89fc920dfd00ea171b1150f8680da801a37ec2557978f88185917373c212d7abcdc7ddb3218cdbcd18f0c8262227515a36a4b4300997b45f4cced88a5780b66e3e97c9a10647461af1e2a6041797d2f4ecf81b1f63866f669cc0d73ccd5be593dd501ff39d7497061a94ec0a9497d5234f5f5566f04a6256674f1e20e0410490cd811c3441879a5776956361435eb3bf6ddeeaa732004b0179b32f23cac70", 0xf5}, {&(0x7f0000000300)="98ac37b54ed95b73557d00a2afeb632996fe998e5ad105370f44c27265e8039ada0650de8441e751cdd65ed102aba960fc7d982676220a9e2c5d426af93bcc99c73729d354abf6", 0x47}, {&(0x7f0000000380)="e31cb485b34e10bd1c0c9a460c3919df7cef8ca09230f21467cd0c009d23816cce117e1b377a71811cb82fc03d95ac9bc9034e7fce1631f6aca076fc40d8a45abdd5f6dbf9e3643d722d327f7ddc9dfce541988f01b853dbe40159a76932d7dd2e7059bf499a13930b51bbb9c70fa1322fe9b3c8d0ca7b70280a06ed256fc4cd31976658f58b949688b4157b3daed448db8fdc107063fd3ebc16fc9e0028aea3d7baa279892f87155e80b145cdbf19b86e42724357e83d224a066c6fdf6e118c79f7019cd628d5a652dd3c53b24658c8d8af8cad89caa68feb7fab5f4d65cc6660cd7e26885d7b3978c0adf78d52", 0xee}, {&(0x7f0000000480)="aa41a27592b4ecd1a186788a8fe826b969bec9308cf17f2ca43fa33e12c28e23e92c3e4c9c353d114288e73ccbee34b34ced09c545397c47c47db3e80b510dcff7ab84a37e185869858a0b0b174747c3c3c6d01d0dbd9594783f85d7c2b49c08e6d351791ba6d485eaf5e972ceee", 0x6e}, {&(0x7f0000000500)="9c1101919147d89827a176ae23714982db315e13bbf2631af32c6bdd1e28b30a6ace00bcf0d308b7931e473da601ef5f1223347266c6ae5570e70b4931376a50a5807abca7fed8375bf06aeeb1541ce321866306c9977ad2e16164f8205b31ec71c113d899335bb0fdd63cede1de6138503f72d8270e7d9c4d9dfd000601115502c1a27f21169492a411d43f47da6b70178bff9921c052f2652560e389ec0459e5377f643d280dd6529e13bd8125d32aef", 0xb1}], 0xa, &(0x7f00000005c0)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x18}}, {{&(0x7f0000001b40)=@ethernet={0x1, @broadcast}, 0x80, &(0x7f0000000600)=[{&(0x7f0000001bc0)="6c148d1e4b0fb0a71935f1a3a04c895acb056405b5e2afded2a354e5a0fbb17edfa895a937748ab2bdfe9269e545e769e824361f01b098b8bc6b87a089d8c3e1203002228bad6a09b6522f42f3a5f814e498c4c5f71af182c89e12acd095d8aa92da30c21779e82b018938e531b29c737fb4d3f6eb9864d6e53a0b0799b0d9f3e1d4edc3a846167803dfa639ce988bff31dec52342cbe0c576a26b217699d5e9358ca971062a4f44e5b5428c8f49c23e619e234501bb1375c79046ca066eafc393178a4cd149e290ee657225", 0xcc}, {&(0x7f0000001cc0)="2c9130a53a83e21f950eeaa1ba86ae7f41043733e47a9cf72f779d3c20bd86872f7946310d2449fa1dd4c7c5a3e76f8c0570cf31e26f5c6872bd7f5e5b0f72864e77cc62f2ebb16f7e2540bd4f1fdac44908c293b7dd84505a1f7418e7998dcd5305573224925e2ef371862e1f5a64718ca98c6348e190d481e5fab723d6c7ea0569076dcd11bf61b7f6bf17747b6fedbd929881d01605eae92e4d4291c528fe5e359ee648095f3cabf1d2a745a2c74615b2058b96ab87a04aa937b426ad6d36c3e8ca46bcb2c270c81515e037ca16702426d3557346b31563a0a7017e", 0xdd}, {&(0x7f0000001dc0)="f0dc62f786902ede5aaeb3b5fe7d625179d280e560ec02aa7288ebc5b930cc1d04337b22d47e08b432356fe02fcd9e961488819a93ebd7ff03b7944da7841d295223659c2b05d5cde3a139b115b9f0e1382c50821fef03aa336e13399dcbf6ed28530ecc32e8706ebd747f21dd7c250718f389a0a13ac61cdf95b03f5670df2cb6af2d237740c988aa3f57f47c24c29aa4a5a46aefa6b73158e2ec98f8598399ed0a44a3f7d8a4c1a65675639abfa593561af726b8dcc1667aece863b8c005cab8c3f79d36b2c6e3bc8c8332e28d76a7dd06cb481ebc9411f9a9843b8c8b8a312f39e9258d47443f5cb531d73efe704f56f4eaedd26a1dcb261b4458", 0xfc}], 0x3, &(0x7f0000001ec0)=[@txtime={{0x18, 0x1, 0x3d, 0x200}}], 0x18}}, {{&(0x7f0000001f00)=@xdp={0x2c, 0x4, r2, 0x3e}, 0x80, &(0x7f0000002480)=[{&(0x7f0000001f80)="b01ad6d12da677d1f951d88fad94f25e6a09c0ffd9213fca1a9481b712dba8afc7599dc7f34ea4dc5ecb9d75a522b6c44159065edeccd6a2565519b298e3c6405e7b2f43d6509583da027972c3b4de400c7ab98140dd5a9e7bcb005c23e7a4c19b5a52984898c323845a5b2ac9366ac505ef2131eee2129e1337f9ff477c78b103abf114ebd7b18f38a1d5061fa7907f68e68809bc3c27135341177f25b4d1720c45f40b237ce9116a4c3f8cbaaa378392844fd37b56ae7bba02200330a56acc6f5bc9ad3538efda7cea878380d8a496f1fc16dabb9c31061e1bc524576d54ad05e976b95e61b7", 0xe7}, {&(0x7f0000002080)="d4c2e632b9d444ca80bded3ebbaf527821642b444419fb1113492eb0542e6d3c234bb28b2c3baff72f89d7b93c2259999c82c661ba9fcca0cda8ca20ddf18c8a5d97cdf31373c5377dc49a48c1eb8f732f3d1da7a0932d3e49e3c0d55366d034afc8664ee143a2b0f501c3bcb182868575015d896d0e0c2a7fecfc62b1d8a62ffe36cc0417715f316eda1ae32baefb835d13bf17deeee32e4244968a0e1773e01b9a39f89132a2e5e41e646df6a092e3d4431a59455b75550fdb18896e0f83c1fe8cfe47924e98145ee794", 0xcb}, {&(0x7f0000002180)="d8872bd53cf901a763bf3bfe019fcdee4443ac5f5b25228e8e0aff6f51a0279592ae42", 0x23}, {&(0x7f00000021c0)="d0fe198ae9211f5e930aabe0c11b9aba071453993f90b084", 0x18}, {&(0x7f0000002200)="f945c1aa49ea7ad90e8343b48b756e753634aee75e26d18fa2ef191476ce11c27f35cdd0ee17b7c5e0266872fc47836698f651b39e9fb90f1bf7c193b8f2470e57b178db25c8f136f08c3aaf33954f23c55131f17179b44841ce14f0e5e453df2a1592affe35925d798123a73a8daad35f14229550e7d818cd29580e3c2dcc6d27e7111174b3decafdf96128bec0897a99f9033575db2048ea8d20106d2c646c8d93b47dff39f0aed229bb6efaf1d1a20b5697f8f89951d62ed74fb97327e9db", 0xc0}, {&(0x7f00000022c0)="74a3092da8eaada77f58e7a17e34b2f50ca7bf069784f029e1133de0263d43f4dcd3", 0x22}, {&(0x7f0000002300)="801eea46022f603667b56212009739e4a294a65d4672e74bc35fe7d06c2d145947a5630c9a9684e00085006be1cd7dfe29e1ff9a62062f719539", 0x3a}, {&(0x7f0000002340)="2a962c594f245204504bfb4a03b5a5758509b4dbbae105a403659e2cbd4dbf084ca5a286d556234bb68413e31998ab95f90cbcb7ad7a796be2e8c8452a7c75358a74c65c8afcc54413528f0276c71ddb3a", 0x51}, {&(0x7f00000023c0)="0259dde45de6436fe1db8350efb478e576f478ec2dba57cbbfb40425e8791648c194aaeaaa4ffda9d616aad608095e92cd4ef663d4fd991b55f9025f43dca0a4d3ed771f7c7756180db3216607a67b551bd4b26b4ccd19d9baea278b15685f17c4c78aab07e324db47710deb96a235d9c887b3ef2bb1c142d87ced6e05790b1e9e83583ca2c2440baacfbb57", 0x8c}], 0x9, &(0x7f0000002540)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x5b240000000000}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x78}}], 0x3, 0x0) r3 = dup3(r0, r0, 0x80000) syz_io_uring_setup(0x35a5, &(0x7f0000002680)={0x0, 0xcfed, 0x1000, 0x0, 0x81, 0x0, r3}, &(0x7f0000002700), &(0x7f0000002740)) 214.566667ms ago: executing program 3 (id=390): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3fb, 0x408, 0x70bd25, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000000)="0f01cf0f1c40190f06baf80c66b8a9b6568d66efbafc0cecba4300b0d3ee3e0f320fec2d440f20c0663509000000440f22c0660f3a219ab3d2060f20e06635000004000f22e0", 0x46}], 0x1, 0x70, 0x0, 0x0) r3 = socket$inet6(0xa, 0x5, 0x1) (async) r4 = socket(0x1000000000000010, 0x80802, 0x0) sendmsg(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843209100fe800c00080008000c00080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000003, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x24020400) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005fb000/0x400000)=nil) (async, rerun: 32) sendmsg$nl_xfrm(r6, &(0x7f0000000400)={0x0, 0x29, &(0x7f0000001f40)={&(0x7f0000000440)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x4800}, 0x200c0005) (rerun: 32) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000700)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x24004000}, 0x2004c801) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fbdbdf250700000008000300", @ANYRES32=r9, @ANYBLOB="04d4d6000a00e800ffffffffffff00000a00e800080211000001000014001780040002000400060004000400040005937d1419f3a4b3f0a9f0321d4ea52cdabb62ae1c06642114eb21acde387dc45365ca5b26ea95622c2673ab35e301f9209b6ae056bbb6a23594ab23539b43e602d6cb"], 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) (async) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xe01, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0xf) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x802) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000001, 0x0, 0xffffffffffffff80}]}) (async) r14 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r14, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) (async, rerun: 32) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) (async, rerun: 32) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000240)=ANY=[], 0x310) (async) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44050100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04002cbd7000fbdbdf25170000000c009900040000001e0000000a001a00f8fffffffffff9ff09001a0008021100000100000a001a000802110000000000"], 0x44}}, 0x1) 162.47106ms ago: executing program 3 (id=391): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f806000100"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) (async) sendto$inet6(r1, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160005000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async) setreuid(0xee00, 0x0) (async) ioprio_get$uid(0x3, 0xee00) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f040000ff170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$cgroup2(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x80, &(0x7f0000000140)={[{@memory_hugetlb_accounting}, {@memory_recursiveprot}, {@subsystem='freezer'}, {@pids_localevents}]}) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 73.441715ms ago: executing program 1 (id=392): futex(0x0, 0xb, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async, rerun: 64) r0 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r1, &(0x7f000000c3c0)={0x2020}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x1000, 0x0, 0x0, 0xa, 0xe0, 0x0, 0xc}, 0xfffffffe}, [@migrate={0x50, 0x11, [{@in=@local, @in6=@rand_addr=' \x01\x00', @in6=@loopback, @in=@loopback, 0x3c, 0x0, 0x0, 0x6, 0x8, 0x2}]}]}, 0xa0}}, 0x0) 73.087875ms ago: executing program 3 (id=393): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) bind$inet(r0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f0000000180)="d0849e", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x20000004) syz_usb_connect$uac1(0x1, 0x96, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000086b1d0101400001020301090284000f010980090904000005010100000a2401d000f402010206240506"], &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 72.843065ms ago: executing program 1 (id=394): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x2b1, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000020005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x158, 0x10, 0x1, 0x70bd2c, 0x8, {{@in6=@remote, @in=@private=0xa010100}, {@in=@empty, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x70bd29, 0x0, 0xa, 0x0, 0x0, 0xad}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x2, [0x40000000]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x48001}, 0x0) 29.974878ms ago: executing program 1 (id=395): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb8, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_KEYS={0x98, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_SEQ={0xb, 0x4, "078c08d086a2b2"}, @NL80211_KEY_DEFAULT={0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "0fdf935fe3"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_SEQ={0x11, 0x4, "0ea3248f3719422af304c580a0"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "f31dc8478b"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e7463ff17b"}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0xc891}, 0x4000010) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f00000001c0)=0x7, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000240)={0x1d, r2}, 0x10) close_range(r1, r0, 0x2) r3 = fsmount(r0, 0x1, 0x5) close(r3) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) r4 = socket$inet6(0xa, 0xa, 0xffff7fff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r5 = accept4$unix(r0, 0x0, &(0x7f0000000300), 0x80000) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r5, 0x8008f511, &(0x7f0000000340)) close(r0) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000001940)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x108}, 0xc, &(0x7f0000001900)={&(0x7f00000003c0)={0x1508, 0x1, 0x5, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [{{0x254, 0x1, {{}, 0x80, 0x2, 0x81, 0x7, 0x1b, 'syz0\x00', "f9c78af15776fd4594067c267816853d0165431246072bdf8c820aad8ea00e86", "dd86ba0a02c9df6afe09aa30f722c2d685fbb8764a6efefc4b1595006b051789", [{0x6, 0x7, {0x1, 0x62}}, {0x6, 0x1, {0x1, 0x6}}, {0x1ff, 0x2, {0x1, 0xffffffff}}, {0x9, 0xa67a, {0x1, 0x8}}, {0x0, 0x5faf, {0x3, 0xfffffffd}}, {0xce93, 0xf000, {0x0, 0x7}}, {0xf1a, 0x9, {0x0, 0x5}}, {0x97, 0x8, {0x3, 0x1}}, {0xf, 0x8, {0x0, 0x3}}, {0x0, 0x5aa2, {0x3, 0x9}}, {0x4c, 0x9, {0x1, 0xb}}, {0x200, 0x9}, {0x6, 0x0, {0x3, 0x3}}, {0x5, 0x7, {0x1, 0xa}}, {0x1, 0x1, {0x0, 0xc}}, {0xd, 0xd2, {0x2, 0x5}}, {0x0, 0x0, {0x1}}, {0xe, 0x8000, {0x1, 0x80b}}, {0x5, 0x10, {0x3, 0x6}}, {0x2e0, 0x31c, {0x2, 0x5}}, {0x5, 0x0, {0x0, 0x82d2}}, {0x1ff, 0xa21, {0x2, 0xf3c9}}, {0xd, 0x6, {0x1, 0x9}}, {0x7fff, 0xb4, {0x0, 0xf1}}, {0x401, 0x5, {0x3, 0xd02}}, {0x9, 0x3, {0x0, 0x200}}, {0xf4, 0xe, {0x0, 0x8}}, {0xff, 0x7f, {0x1, 0x4}}, {0x2, 0x2, {0x1, 0x4}}, {0x7, 0x6, {0x1, 0x6}}, {0x1, 0xc, {0x2, 0x40}}, {0x5, 0x4, {0x2}}, {0x7ff, 0x5, {0x0, 0xcb83}}, {0x1, 0x0, {0x2, 0xff}}, {0x0, 0x0, {0x1, 0x40}}, {0xb, 0xe5, {0x3}}, {0x5, 0x8, {0x3, 0x5}}, {0x3, 0x2, {0x2, 0x8}}, {0x0, 0x0, {0x1, 0x17b}}, {0x1ff, 0x7, {0x1, 0x5}}]}}}, {{0x254, 0x1, {{0x3, 0x9}, 0x7, 0x4, 0x3, 0x7c, 0xa, 'syz0\x00', "4b294a34688a000ea2f9635c740735911d2dbf599f76fa9089950e2e804f1357", "cd260b4738495db8a79e74356a1f58ef70b2aef7251b3cf99136b2881bdb22a6", [{0x8fb8, 0x8, {0x1, 0x7}}, {0x2, 0x1, {0x3, 0x32}}, {0x8, 0x81, {0x1, 0x5}}, {0x88, 0x0, {0x0, 0xffffff39}}, {0x7, 0xe2e5, {0x2, 0x2}}, {0x7, 0x5, {0x3, 0x400}}, {0x9, 0x4184, {0x3, 0x5}}, {0x3, 0x7350, {0x3, 0x4}}, {0x2, 0x8, {0x2, 0x600}}, {0x4, 0x8, {0x1, 0x3}}, {0x5, 0x1ff, {0x1, 0x5}}, {0x0, 0x1, {0x2, 0x7}}, {0x69b, 0x1, {0x2, 0x3}}, {0x9, 0x7ff, {0x3, 0x14}}, {0xffff, 0x3, {0x2, 0x4}}, {0x0, 0x0, {0x3, 0x80}}, {0x535, 0xfffd, {0x3, 0xf}}, {0xda, 0x2ae, {0x2, 0x7}}, {0x1000, 0x3, {0x1, 0x2051}}, {0x1, 0x40, {0x2, 0x3000}}, {0x35, 0x6, {0x2, 0x3}}, {0x7ff, 0x10, {0x2, 0x7ff}}, {0x3ff, 0x6, {0x2, 0x340}}, {0xfb24, 0x1, {0x2, 0x361e}}, {0x7, 0x5, {0x0, 0x400}}, {0x9, 0xc36, {0x1, 0x6}}, {0x3b, 0x7fff, {0x0, 0x3}}, {0x800, 0x5, {0x2, 0x7}}, {0xfff, 0x9, {0x3, 0x10001}}, {0x6, 0x3, {0x2, 0x8000}}, {0x5, 0xc3, {0x3, 0x5}}, {0x5, 0xf001, {0x1, 0x9}}, {0x8, 0x7, {0x1, 0x400}}, {0x5, 0xd741, {0x3}}, {0x8, 0x4, {0x1, 0x9}}, {0x0, 0x1, {0x0, 0xffff}}, {0x2, 0x9, {0x1, 0x67}}, {0x4, 0x5b6, {0x1, 0xfff}}, {0x9, 0x7, {0x2, 0x5}}, {0x1, 0x6, {0x2, 0xbd}}]}}}, {{0x254, 0x1, {{}, 0x7, 0x1, 0x1, 0x2, 0x13, 'syz1\x00', "5950ebef0806fa40858d64aa6ea77e03765963d4ad94ab36943179dee02f1092", "65e0d61e3f29600130a5a3dc45d41bc3c2d639ec6c44e3a510b5ac525429a86d", [{0x7f, 0x0, {0x3, 0x6}}, {0x3dc4, 0x5, {0x1, 0x3}}, {0x66, 0x10, {0xbeaeac47716526a8, 0x1}}, {0x8, 0x2, {0x1, 0x7fffffff}}, {0x2, 0x3, {0x2, 0x9}}, {0x8, 0x3, {0x3, 0x4000000}}, {0x9, 0x7, {0x0, 0x101}}, {0x0, 0x2, {0x2}}, {0x0, 0x0, {0x1, 0x5}}, {0x1, 0x81, {0x2, 0xb}}, {0x2, 0x7f, {0x0, 0xcdd}}, {0x9, 0xd, {0x1, 0x1}}, {0x2, 0x28, {0x1, 0x9}}, {0x9, 0x4, {0x3, 0xfff}}, {0xdbb4, 0x7, {0x2, 0x2}}, {0x7, 0xe, {0x1, 0x4}}, {0x5, 0x5, {0x1, 0xb80}}, {0x67bb, 0x7, {0x2, 0x48a}}, {0x3, 0x0, {0x2, 0xffff}}, {0x4, 0x3, {0xd36cd432b33e0d1, 0xf89}}, {0x5, 0xa, {0x2, 0xfffffffe}}, {0x0, 0x8, {0x3, 0xa0cf}}, {0x8, 0x3, {0x0, 0xffffffff}}, {0x8, 0xb, {0x2, 0x1}}, {0x1, 0x9, {0x1, 0x7}}, {0x7, 0x8000, {0x2, 0x8}}, {0x5, 0xd0, {0x2, 0x5}}, {0x9, 0x8, {0x2, 0x101}}, {0x7, 0x5, {0x3, 0x101}}, {0xa682, 0xf000, {0x2, 0x3}}, {0x7ff, 0x0, {0x3, 0x8}}, {0x7, 0xfff, {0x1, 0x1}}, {0xb1, 0xc57, {0x1, 0x2}}, {0xfff7, 0x4, {0x2, 0x1ff}}, {0xd25, 0x2, {0x1, 0xfb}}, {0xfffb, 0xa79, {0x2, 0x200}}, {0x55, 0x4, {0x1}}, {0x2, 0x6, {0x1, 0x8000}}, {0x8, 0x7, {0x2, 0x56d4}}, {0x81, 0x2, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x2, 0x8}, 0x1, 0x0, 0x2, 0x12e1, 0x10, 'syz1\x00', "fa2af4f6db34d7db29cf69f83e5c376af2fa549e09ddf643044f52b0902c4dad", "2ec5c6db3c7e8097091b04a06f9bf77864aa2702941c0a93cf39b4888121d0b5", [{0x8, 0x8, {0x2, 0x8}}, {0x1, 0x40, {0x0, 0x80000001}}, {0x800, 0x2, {0x3, 0xae}}, {0x8, 0xff, {0x0, 0xffff13b4}}, {0xe26, 0xe, {0x3, 0xffff}}, {0x6, 0x2, {0x3, 0x8000}}, {0x4, 0xfff, {0x0, 0x7}}, {0xfff7, 0x7fff, {0x0, 0x16c9}}, {0x0, 0x8001, {0x3, 0x6}}, {0x7, 0x0, {0x0, 0xf}}, {0x7, 0x3, {0x0, 0x3}}, {0x9, 0xd, {0x0, 0xe}}, {0x6, 0x81, {0x2, 0x3}}, {0x9, 0x7, {0x2, 0x200}}, {0x9, 0x8, {0x1, 0x4}}, {0x0, 0xb43e, {0x1, 0x4}}, {0x5, 0x5, {0x1, 0x6}}, {0x0, 0x200, {0x3, 0xff}}, {0xb, 0x6, {0x2, 0x2}}, {0x87be, 0x4, {0x0, 0x8fa}}, {0x9, 0x100, {0x1, 0x6b7}}, {0xb, 0xfff, {0x1, 0x3}}, {0x81, 0x6, {0x1, 0x8}}, {0x9, 0x88, {0x2, 0x6}}, {0x8, 0x8, {0x0, 0x59}}, {0xe, 0x11, {0x1, 0x8}}, {0xff21, 0xe, {0x3, 0xa2}}, {0x2, 0x3, {0x3, 0x9}}, {0xe65, 0xfffe, {0x3, 0x5}}, {0x5, 0x5, {0x0, 0xfff}}, {0x7, 0x3bf, {0x3, 0xe975}}, {0x0, 0x8, {0x1, 0x7}}, {0x9, 0x6, {0x3, 0x4}}, {0xff00, 0x7f, {0x2}}, {0x22b0, 0x4, {0x3, 0x4}}, {0x3, 0x41, {0x0, 0x9}}, {0x7, 0xfff7}, {0x6, 0x9, {0x1, 0x8}}, {0x2, 0x6, {0x3, 0xb}}, {0x3, 0x5, {0x0, 0x9}}]}}}, {{0x254, 0x1, {{0x2, 0xc}, 0x59, 0x8, 0x6, 0x7, 0x15, 'syz1\x00', "bae941760ff929c29da3391c1c71cb0cb0384e74f09fe1f1cdebec1eb6e0ebda", "5c1a7ab5497461471425f2544014ba2e2f18dbee1a3d6a3bf81e07cf7de45937", [{0x101, 0x601e, {0x2, 0x18}}, {0x59, 0x8, {0x0, 0x7}}, {0x7, 0x80, {0x2, 0x4}}, {0x9, 0x0, {0x3, 0x120}}, {0xf137, 0x8ab, {0x0, 0x8f8}}, {0x3, 0x7, {0x2, 0xfffffffa}}, {0x9, 0xe}, {0x3, 0x2, {0x3, 0x7}}, {0x4, 0xffff, {0x2, 0x756}}, {0x8, 0x7ff, {0x0, 0xd3}}, {0x4000, 0x7, {0x0, 0x3}}, {0x0, 0x4}, {0x100, 0x9, {0x2, 0x80}}, {0x7, 0x7, {0x1}}, {0x7ff, 0x5, {0x3, 0x7}}, {0x8, 0x8, {0x0, 0x43}}, {0x67c, 0x9, {0x2, 0x88}}, {0x46da, 0xfffe, {0x2, 0xffff}}, {0x0, 0x5, {0x1, 0x10}}, {0x1000, 0x7ff, {0x3, 0x47e}}, {0x5, 0x10, {0x1}}, {0x6, 0xd423, {0x2, 0x1}}, {0x4, 0x55, {0x3, 0x7}}, {0x101, 0x7ff, {0x0, 0x6}}, {0xcf, 0xe, {0x0, 0xb1}}, {0x8, 0x3, {0x2, 0x40}}, {0x1, 0xff, {0x0, 0x3}}, {0xba1c, 0x8, {0x2, 0x80}}, {0xffff, 0x2, {0x2, 0x2}}, {0xf0be, 0x4000, {0x2, 0x6}}, {0x0, 0x3, {0x1, 0xfffffff1}}, {0x3, 0xffff, {0x0, 0x1ff}}, {0x8000, 0x5, {0x0, 0x2}}, {0x5, 0x4, {0x2, 0x80000000}}, {0x0, 0x7fb, {0x3, 0xc}}, {0x4539, 0x7ff, {0x0, 0xb3708cd}}, {0xc20, 0x1, {0x0, 0x1}}, {0x8, 0x9, {0x2, 0x8}}, {0xffff, 0x85, {0x3, 0x7}}, {0x4, 0x2000, {0x0, 0x7}}]}}}, {{0x254, 0x1, {{0x3}, 0x40, 0x2, 0x6, 0x400, 0x17, 'syz1\x00', "5b5ea3c0441e8192fe598cdaec47a350447e8731ea7a67c01581543131295f5d", "4a94c697e930406b33c278912edcedec3b3fa65a8b23edda4bfcc5cc7a203fbe", [{0x2, 0xbef, {0x0, 0x6}}, {0x3, 0xcc, {0x3, 0x80000}}, {0xc, 0xc, {0x1, 0x1}}, {0x4, 0x2, {0x3, 0x7}}, {0x0, 0x10, {0x2, 0xfffffffc}}, {0xc, 0x100, {0x3, 0x5}}, {0x3, 0x1, {0x0, 0x8b}}, {0x6d9, 0x7f, {0x3, 0x1}}, {0x8, 0x4, {0x2}}, {0x6, 0x0, {0x1, 0x2}}, {0xb5e, 0x8001, {0x3, 0xfffffffb}}, {0xc, 0xfff7, {0x0, 0x9}}, {0x2, 0xa, {0x2, 0x5}}, {0x8, 0x3, {0x3, 0xffffac39}}, {0x1b, 0x6, {0x3, 0x5}}, {0x3, 0x1, {0x1, 0x7fff}}, {0x9, 0x1, {0x2}}, {0xffff, 0x7470, {0x3, 0x9}}, {0x4, 0x4, {0x2, 0x1}}, {0xc8e, 0x7, {0x3, 0x1}}, {0x9, 0x6, {0x0, 0x8}}, {0xc, 0x4, {0x0, 0xffffff5b}}, {0xf, 0x2, {0x0, 0x9}}, {0x4, 0x9, {0x3, 0x8}}, {0x7, 0x7, {0x3, 0x42}}, {0x4, 0x8, {0x2, 0x80000001}}, {0x3, 0xffff, {0x0, 0x2a6}}, {0x3, 0x400, {0x1, 0x1}}, {0xc4, 0x81, {0x2, 0x1}}, {0x8, 0xb, {0x2, 0x5}}, {0x5, 0x1ff, {0x3, 0x48}}, {0x50d, 0xfff, {0x2, 0x2}}, {0x3, 0xf7, {0x1, 0x5}}, {0x7, 0x1, {0x0, 0x4}}, {0x0, 0xe82, {0x3, 0x5}}, {0xff80, 0x3, {0x1}}, {0x0, 0x7, {0x3, 0x3cd}}, {0x3, 0x9, {0x1, 0x2c4}}, {0x1000, 0x9487, {0x0, 0x1}}, {0xff80, 0x4, {0x1, 0xc5d5}}]}}}, {{0x254, 0x1, {{0x1, 0x5}, 0x9, 0x23, 0x9, 0x6d, 0x1a, 'syz1\x00', "bbf505b164a0326c296099d6d350957b92d68c9e04708db6c5a6179ee36efed6", "6461e6e0fcfda9432cf7ac113d4713eb7009f06c0b05fbb0f6c387dd187c58f2", [{0xff80, 0x2, {0x1, 0x4}}, {0x7, 0x4, {0x3, 0x9b3}}, {0x5, 0x401, {0x1, 0x691}}, {0x2, 0x0, {0x3, 0x2}}, {0x2, 0x4, {0xcb8bef1b70c6f45b, 0x401}}, {0x317, 0x9, {0x1, 0xfc15}}, {0x3, 0xbf, {0x0, 0x5}}, {0x5bd8, 0x1, {0x7a7a32cbdf96e1a}}, {0x400, 0x7, {0x0, 0x7}}, {0x6, 0x5ce, {0x2, 0xfffffffc}}, {0x9, 0x0, {0x0, 0x8}}, {0xb1b8, 0x8, {0x0, 0x8}}, {0x6, 0xba13, {0x3, 0x3}}, {0x918, 0x2, {0x0, 0x6}}, {0x0, 0x8a53, {0x3, 0x6}}, {0x4, 0x1, {0x2}}, {0x0, 0x7f, {0x3, 0x7}}, {0x3b51, 0x9, {0x1, 0x5}}, {0xff, 0x6, {0x1, 0x40}}, {0x1, 0x5, {0x1, 0x8}}, {0x3, 0x5, {0x3, 0x6}}, {0x800, 0x4, {0x2, 0x9}}, {0xa86, 0xd, {0x2}}, {0xf73, 0x8b71, {0x2, 0xc9}}, {0x4, 0x2, {0x0, 0x44b5}}, {0x8, 0x5, {0x1, 0x9}}, {0x3, 0x1ff, {0x1, 0x6638}}, {0x8, 0xb0db, {0x0, 0x93748325}}, {0xfbff, 0x7, {0x3, 0x6}}, {0x5, 0x5, {0x0, 0xffff}}, {0x8001, 0x1, {0x1, 0x1}}, {0x4, 0x4, {0x2, 0x8}}, {0x5745, 0x141, {0x1, 0x9}}, {0x10, 0x5, {0x1, 0x10001}}, {0x4ecc, 0xb, {0x1, 0xe3a}}, {0x9, 0x3, {0x0, 0x1}}, {0x5, 0xffff, {0x3, 0x3ff}}, {0x8, 0x0, {0x0, 0xfffffffc}}, {0x91f3, 0x8, {0x1, 0x1}}, {0xff, 0x4, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{0x2, 0x8}, 0x4, 0xf4, 0x3ff, 0xe, 0x1a, 'syz0\x00', "64d2b08547606a12aa6f73e89f22dbc167a0c776e3170932341beb2ddf964115", "d90ffc5ffe1bc95dd6e654ffcb5f58291566f33ccddc280411055958c0c01be5", [{0x45af, 0x6, {0x3, 0x44}}, {0x40, 0x3, {0x0, 0xfffff000}}, {0x1ff, 0x2, {0x0, 0x2bd}}, {0x3, 0x1, {0x0, 0xe}}, {0x3, 0x400, {0x0, 0x7}}, {0xc, 0xb, {0x2, 0x400}}, {0xfffc, 0x4, {0x0, 0x62a50000}}, {0x0, 0x4, {0x2, 0x3ff}}, {0xa, 0x5, {0x2, 0x5}}, {0x2, 0x8, {0x1, 0xdede}}, {0xfda, 0x7fff, {0x0, 0xca18}}, {0x8, 0x6, {0x1, 0x1}}, {0xf, 0x6, {0x2, 0xfffffff1}}, {0x1d45, 0x1, {0x0, 0x8001}}, {0x7fff, 0x43, {0x1, 0x3}}, {0x7, 0x7, {0x3, 0x9}}, {0x1000, 0x6, {0x2, 0x690}}, {0xe5d5, 0xc3f, {0x2, 0x7f}}, {0x1, 0x8, {0x0, 0x4}}, {0x6, 0x7, {0x2, 0xfa99}}, {0xffff, 0x0, {0x3, 0x6}}, {0x1, 0x7ff, {0x3, 0x4}}, {0x2, 0x5, {0x3, 0xfffffffa}}, {0x7, 0x9, {0x3, 0x6}}, {0x7fff, 0x3, {0x0, 0x8}}, {0x4, 0x0, {0x3, 0x8}}, {0x401, 0xd8fa, {0x1, 0x9}}, {0x0, 0xffff, {0x1, 0xfffffe01}}, {0x2, 0x10, {0x2, 0xff6a}}, {0x9, 0xffff, {0x2, 0x8d80}}, {0x7, 0xfffe, {0x1, 0x5}}, {0x2, 0xd398, {0x1, 0xbff3}}, {0x10, 0x4, {0x2, 0x2}}, {0x20, 0x6, {0x1, 0xe}}, {0x2, 0xc39, {0x1, 0xfffffffc}}, {0x5, 0xe929, {0x3, 0x1}}, {0x7, 0x2b2, {0x1, 0x1}}, {0x8, 0x9, {0x3, 0x2}}, {0x3, 0xf989, {0x2ac5bfdc7e756a55, 0x4}}, {0xf30a, 0x1bba, {0x2, 0x80}}]}}}, {{0x254, 0x1, {{0x1, 0x80}, 0x8, 0xff, 0xd, 0x0, 0x7, 'syz0\x00', "36468b8736a600ef6c5fb5845c6ed30f80cfd5c9792be8778bf27559493271ce", "8f4d1f92b5dcaa31fec1aa66c031d7db9c4ee646b480b37c68d17d3003a5a23a", [{0x0, 0x4, {0x2, 0x9}}, {0x7, 0x2, {0x1, 0x80000001}}, {0x1, 0x1, {0x1, 0x6}}, {0x9, 0x400, {0x1, 0x1}}, {0x1, 0xeb, {0x3, 0x9}}, {0x5, 0x2, {0x2, 0x6}}, {0x1685, 0x4, {0x0, 0x40}}, {0xffff, 0x5, {0x0, 0x10}}, {0x2, 0x4, {0x1, 0xfffffff9}}, {0x0, 0x9, {0x2}}, {0x1, 0x8000, {0x3, 0x15}}, {0x1000, 0xd83b, {0x1, 0xa}}, {0xe, 0xe, {0x1, 0x2}}, {0x81, 0x318c, {0x0, 0xffffff19}}, {0x4, 0x8, {0x1, 0xed5}}, {0xc, 0x5, {0x2, 0x2}}, {0x401, 0xfffc, {0x1, 0x101}}, {0x8, 0x1db, {0x0, 0xe733}}, {0x3, 0x8, {0x1, 0xfe73}}, {0x400, 0x8, {0x2, 0x2}}, {0x9, 0x9072, {0x3, 0x8}}, {0xcc3d, 0x800, {0x3, 0xa}}, {0x4cb, 0x818a, {0x2, 0x70cf}}, {0x6, 0x9, {0x2, 0x6}}, {0x5, 0xfff7, {0x0, 0x9}}, {0x207d, 0x2, {0x2, 0x4}}, {0x3, 0x8, {0x0, 0x3a3}}, {0x7, 0x2, {0x2, 0x7fffffff}}, {0x9, 0x1, {0x0, 0x2}}, {0xd, 0xfff, {0x3}}, {0xffff, 0x4}, {0x5, 0x6, {0x1, 0x8}}, {0xbda7, 0xfffa, {0x3, 0xed6e}}, {0x5, 0x6, {0x3, 0xb}}, {0x0, 0x7, {0x2, 0x401}}, {0x169, 0x8, {0x1, 0x3}}, {0x1c0, 0x3, {0x2, 0x2}}, {0x1861, 0x8, {0x2, 0x2}}, {0x400, 0xde6e, {0x0, 0x2}}, {0x7fff, 0x7, {0x0, 0x800}}]}}}]}, 0x1508}, 0x1, 0x0, 0x0, 0x40801}, 0x400c005) timer_create(0x7, &(0x7f0000001b40)={0x0, 0x11, 0x4, @thr={&(0x7f0000001980)="88ee8fe85e6e6a22c7161acb79d7953a96f6811ee8492dde19e2c3727f8614978efcbf975dc16ca28cfbf3078ef7b19b0992537f0ccc68f34011d760b75e64cc9d03087ec18c90ee68fc47fdd7bebee490cd027c87fb9fee5d1a90f483e78f1b92af731eccdf950dd09fbe817c80132f3019af4009d4fa5ef0c374a31e72ea018c3be774db27722940e618e7974d8c42aadb33fea6affbc394a12b009bbb2e8d67c669449c19ce8c9893ce887bad9fa70d710483799ef30ea14f1bc93ffb70a3054b96028aa7655b5d81bb28e1817e9402c0cc3b6c2aedc363860b2c835085fc811e5e50d4d59f255c", &(0x7f0000001a80)="508408a230204be2de025d4443d57a0ec059c6086b433edc12ad2904d7e6875c29a04daae23fcc1a06235954bf2e222202a437cd713932262b0183e82b7ec98832c6522c6c588dababaf947fdb08f18bcef5013e82478cf0d184a5c2c5fc9b16ced419eb5d5911e647795e68fafb374da8fb452e9d4cce10b0c4155b1fe72fe63f2cf3b070c938ca49b2209e"}}, &(0x7f0000001b80)=0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9) ioctl$BLKRRPART(r3, 0x125f, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), r3) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000002380)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002340)={&(0x7f0000001c40)={0x6f8, r7, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2e3770cb, 0x1b}}}}, [@NL80211_ATTR_NAN_FUNC={0x360, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x14}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x32c, 0xe, 0x0, 0x1, [{0x8b, 0x0, "0945428dcb45769b7499f2bd94a2c68f4e8f656da2d9c7d6e54a2c8e1f29931043f049c7fc1c73b5467ee6098a4c0387517811137d7c8da6e3856a1e9d3769c337e7fd99aa15ff4ff745e9b8de2d5f12640352f7198ba9ac2ebf85114ef49a2b9d0745771dbea1daec416f55b19b257e15c6b0253d36dc251e6bb75adda32e3de35aaf6c54c381"}, {0x90, 0x0, "b654ad9900bc90eba2d13ad1de296f0e5bca24164e3ab46d5f4c33311e27cd0989e8294f0e4907e0b7576c7ba0a540c552f1fc3c292f702f5280b5ea1aac1136b6e8239262982db2e2b772c1871395c9d37fa9228f9ddbf33d1971f6d2a60d8caba0c92922b062b0be14ad70f5086b12cfea472a852cfdc55c98feaa1dc78dcf0378610e5691c0f02d7353e7"}, {0xb5, 0x0, "a34415aa18ce60dd45df136de8d4d4f37b8715cc6bd2ca46901f348282eb10f74db08a927efb629879fdab04335a3fbec3945215c33781a14d451f9bda24ec152270348c73c3acbd22f6ecea0bd2323a53cb81b3fa31e5c4c8a0e1a6064893af065b54a038c9555c0aa816584496b8dec6cfad076b8c76be802fd93adb0c45203530b58a8c8a85ede154815dcefbf3b31d9021b1640889864ba98c42056f4667f2e325865cf20326e6f4b94ab05604daad"}, {0x72, 0x0, "9c2202f07f22e5f6c35655f5d793578964e220421d25ca066cadd8f5821f9e985b896b2f1a0250a0074dfd67155945a9d58c6cb2d628bfbb6db1f1848116cdef62e7963f8cef74e86821f61d78c088604932d54b277394d1334910be3ed22b6ce64598301144d2214b5d36844fe0"}, {0xdf, 0x0, "5229f9e45611c380a7dcec9cac06f97c2d7f9dba684609394a9d98585103c717e9b9b88d98b88fdcb2bfc4f1e0658585f8dc36179af15ccd630f72fcc22d02377ee7608d10d2dfb28eadccb24c46d1eab18b9bc26334f0478906940405378bbed0271e2394ea72804794b8dd83a411968e8241e3df4ae84e492d29f7db2647282696ceb25a21e28d70f9ec37812f39020b1225010b34a809eaf53e1b7cc360a3ae21e0b871ac1803eef69424432c361cf2204794d96136d2ef43bcd40bf8a8bc9c4e42cf5a29f0774d765e6026602cf9e7527b68850d5fad2daeb0"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x378, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x6b}, @NL80211_NAN_FUNC_TERM_REASON={0x5}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x35c, 0xe, 0x0, 0x1, [{0x30, 0x0, "08e961089ff8274b472a896cbf6a48a12f59497e771bff89b1cb1e495cd4f15dd89252bdab649866c40bec8d"}, {0x7f, 0x0, "44c709be216c00694c9d0720903c202bc814e4c0cf95b6bff60221f7859a9fcacc86a685d1dd6b024310a90ce3b4d3087c8941c60783788e13161a9db4d0fc275bdc9feee70acc9d164609283ee21131b58dde3ae2196457bbbae9fa77b6f261ca913b43907de8fcecfe92e148b979821ea9310d8a9e4fef42888c"}, {0xab, 0x0, "c45d92445249df53b216c21bd49dd4d251644c4720b33103d26d60bb719199be1f231e43d31ca33f2ec400f3461c1cd89a521d6343c2bd9d41750a7ea87453ec7309a71530d19153585aacca543bb9eca8186cc96c507408eed2a917808cc1faf84c499fde8416bf2f93ab62dde308298fa27b54c342731d83fe675a1a12c48844799856db75dd38e65649c4f132c35e19e994e4114b65e5c05e6188c76c29bdd7cf0d61ee4f32"}, {0x5f, 0x0, "422232f71cd04dbe6f8b96f89afc9f85bea379c4e8e10fc6bfe3ba90280572e800c342f8e988ded76ccf6a59ade826bcb6ebafc47dfc5fc8eb6db426bbf0aa30837e4bf666021df913b79c0c90d6701228dd715706c2bac89b0de0"}, {0xdf, 0x0, "c9f41c9883eba4ba6ae91792add3f94f8ccd890c53809d4f5333d8330e061669a667cfb43ae283c2f2f4fc5cb1dbdc04e23cb0401bc689395563095176a3acdc6deb3127f76cb263b27e1361ad814a2317ca9a1913094466b0bfccdc8dfb3256452e3d48f6392ee62038bd1769cde3f0ea5df3f764d2a320ec967c7c7b28b15a8d68ed72a6ee7a4fe5de2e2f97b24370249932063d75a20f2f5a7ecadce65a6c32f474121fe06e068839965dfa94fd76a3e3528b409a4768bef83d6117e35873771b7b0b17a68c745f25a8c57db67255cb2f3f86c0f24700436d38"}, {0xba, 0x0, "f9d71777d862bc2e5ea12dab29dce72fcb2249187c0d88efd77eb9df1c3ae354c7fbe5eee14789c24c149bf449e92a25abc51b787422d98cc436862ed8b7fb37329eff3f9932ba8068b78b94edf8008e2098c89a4676261440daf1e95a43bc25bd5bbfcfea4dd313d8a5534bda032373d00e93f68589b004ad92d1c5776f9d1fc0ec9deb7e5f506519e2c39f4aeeb7a3e8dfec5c6c157c0202c478ecdc69c02a0c07358e4a8135e6e2a933bef285a759cfe054617c4d"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x5}]}]}, 0x6f8}, 0x1, 0x0, 0x0, 0x80}, 0x40001) timer_gettime(r6, &(0x7f00000023c0)) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000002400)=[{{0x1}, {0x1, 0x0, 0x0, 0x1}}, {{0x3, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x4, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x1, 0x1}, {0x2, 0x1, 0x1}}, {{0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x2}}, {{}, {0x4, 0x0, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}, {{0x4, 0x1}, {0x1, 0x1, 0x1, 0x1}}], 0x50) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000002480)='nl80211\x00', 0x0, r4) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f00000024c0)={0x9, [0x5, 0xd], 0x120}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000002640)={&(0x7f0000002500), 0xc, &(0x7f0000002600)={&(0x7f0000002580)={0x70, r7, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xdf42, 0x33}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "e4d3cfa1a1e7068dfce127f0d68f1e29"}, @NL80211_ATTR_PMKID={0x14, 0x55, "70b23b5b961bf1c1bc6cd5081ccdb52f"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x39}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_BSSID={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x80) timer_delete(r6) 0s ago: executing program 1 (id=396): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) landlock_create_ruleset(0x0, 0x0, 0x1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x6, @remote, 0x1}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000040)={0x2b, {{0x29, 0x0, 0x2000000, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0x6}}}, 0x88) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = socket(0x2, 0x3, 0x2a) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x8, 0x90, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfffd}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7f, 0x8, 0x4}, {0x6, 0x24, 0x1a, 0x2, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x80, 0x93}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0x9, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7f, 0x20, 0x8}}}}}}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x12, &(0x7f0000000500)=ANY=[@ANYBLOB="050f1200020addffffffffffffff000310004f693099a74f6aec9e16d3008e095412dda9f2424e0a7becca90af1cfc1885a43c29fcfa567260799c70d1b1b19d3adfffc0e1ddf79f9e05eba099e06f4609aabd60757be48968d0e9d2b2149dc72763049a73c2ff95a434ddbbfa6b16d199999ae2971a762f8346e3c2529d89d5d9a86b370bb5e51bc359879616084ff6337a4e15e29ed1c441b04e31104b343f200db046019c95ceb5b72b5f2c"], 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f00000005c0)) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "ed27fbb5d5ba69000e6769b69dc51dc5c32930bc5b6886786c9c975fe54da42154c59a884c54b5ff1e0501c423c33cd3314f79fd035e590fec690ad23ecae1dc", 0x33}, 0x48, 0xfffffffffffffffe) io_setup(0x7f, &(0x7f0000000000)=0x0) io_submit(r5, 0x2000007b, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) keyctl$assume_authority(0x10, r4) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000280)={'syztnl1\x00', r7, 0x29, 0x10, 0x9, 0x1, 0x12, @private1, @local, 0x10, 0x20, 0x2, 0x8001}}) add_key$keyring(&(0x7f0000000380), 0x0, 0x0, 0x0, r6) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) finit_module(r8, 0x0, 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYRESOCT=0x0, @ANYRES64=r6, @ANYBLOB="9092d0dd33d91d4ad207c521af89b8eadcc633b9e3121c500b5369422367a0a1a1a2df085d6b7394ec649063b253fd8e8a65a3641ad73cb260ee1475aceb50cde6362b8c9335437e88b403eb6fdd6e0f5ea0571abc0a4845480c77589e25e96c3a632ac815a75f85cbb5843da297db23e32de05745dd431610e634105f4d0cbc831e8f12b2b4fbef0281f86f876c488cf4dbff6cd439641c7d244f5450a0630279030471f23fdabebf057d62", @ANYRESHEX=r8], 0x78) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0xffaf) setsockopt$MRT_FLUSH(r8, 0x0, 0xd4, &(0x7f0000000180)=0x4, 0x4) kernel console output (not intermixed with test programs): ext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.314076][ T36] audit: type=1326 audit(1769965879.400:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=904 comm="syz.4.181" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faa0a59aeb9 code=0x0 [ 52.337759][ T36] audit: type=1326 audit(1769965879.400:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=904 comm="syz.4.181" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faa0a59aeb9 code=0x0 [ 52.367661][ T446] usb 4-1: USB disconnect, device number 17 [ 52.412198][ T36] audit: type=1400 audit(1769965879.480:285): avc: denied { write } for pid=909 comm="syz.3.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 52.435796][ T36] audit: type=1400 audit(1769965879.520:286): avc: denied { connect } for pid=915 comm="syz.4.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 52.528078][ T36] audit: type=1400 audit(1769965879.620:287): avc: denied { setopt } for pid=919 comm="syz.2.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.716326][ T446] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 52.726246][ T532] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 52.796231][ T31] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 52.806222][ T330] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 52.867582][ T446] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 52.878651][ T446] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 52.891764][ T446] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 52.900972][ T446] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.909073][ T532] usb 5-1: not running at top speed; connect to a high speed hub [ 52.917708][ T446] usb 4-1: config 0 descriptor?? [ 52.923053][ T914] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 52.930328][ T532] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 52.940226][ T532] usb 5-1: config 1 has no interface number 1 [ 52.946499][ T532] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 52.959461][ T31] usb 2-1: Invalid ep0 maxpacket: 32 [ 52.966407][ T532] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 52.975512][ T532] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.983602][ T532] usb 5-1: Product: syz [ 52.987892][ T532] usb 5-1: Manufacturer: syz [ 52.992650][ T532] usb 5-1: SerialNumber: syz [ 52.997866][ T330] usb 3-1: config 0 interface 0 has no altsetting 0 [ 53.004524][ T330] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 53.013643][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.026253][ T330] usb 3-1: config 0 descriptor?? [ 53.086254][ T31] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 53.226727][ T927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.235782][ T927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.238220][ T31] usb 2-1: Invalid ep0 maxpacket: 32 [ 53.249589][ T31] usb usb2-port1: attempt power cycle [ 53.257037][ T532] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 53.268913][ T532] usb 5-1: USB disconnect, device number 9 [ 53.284489][ T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.429824][ T446] usbhid 4-1:0.0: can't add hid device: -71 [ 53.435879][ T446] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 53.445294][ T446] usb 4-1: USB disconnect, device number 18 [ 53.453029][ T330] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0 [ 53.461500][ T330] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0 [ 53.468641][ T330] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0 [ 53.475710][ T330] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0 [ 53.482839][ T330] hid-led 0003:0FC5:B080.000E: unknown main item tag 0x0 [ 53.596451][ T31] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 53.616628][ T31] usb 2-1: Invalid ep0 maxpacket: 32 [ 53.652464][ T330] hid-led 0003:0FC5:B080.000E: probe with driver hid-led failed with error -71 [ 53.662760][ T330] usb 3-1: USB disconnect, device number 18 [ 53.746296][ T31] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 53.766652][ T31] usb 2-1: Invalid ep0 maxpacket: 32 [ 53.772173][ T31] usb usb2-port1: unable to enumerate USB device [ 53.784333][ T934] can0: slcan on ttyS3. [ 53.815504][ T934] can0 (unregistered): slcan off ttyS3. [ 53.821270][ T934] Falling back ldisc for ttyS3. [ 53.955555][ T956] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 54.216221][ T375] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 54.367417][ T375] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 54.377564][ T375] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 54.386924][ T375] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.399011][ T375] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 54.426261][ T446] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 54.576221][ T446] usb 3-1: Using ep0 maxpacket: 16 [ 54.584545][ T446] usb 3-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 54.586475][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 54.594241][ T446] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.603995][ T375] usb 4-1: USB disconnect, device number 19 [ 54.609430][ T446] usb 3-1: Product: syz [ 54.620016][ T446] usb 3-1: Manufacturer: syz [ 54.624664][ T446] usb 3-1: SerialNumber: syz [ 54.629976][ T446] usb 3-1: config 0 descriptor?? [ 54.646852][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.747484][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.757425][ T9] usb 5-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 54.766536][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.775276][ T9] usb 5-1: config 0 descriptor?? [ 54.838741][ T446] usb 3-1: USB disconnect, device number 19 [ 54.981427][ T9] usb 5-1: string descriptor 0 read error: -71 [ 54.989887][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 54.995858][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 55.004685][ T9] usb 5-1: USB disconnect, device number 10 [ 55.333426][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 55.340715][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 55.480752][ T983] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=983 comm=syz.2.199 [ 55.766283][ T375] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 55.917560][ T375] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 55.928575][ T375] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 55.941671][ T375] usb 5-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 55.950798][ T375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.959521][ T375] usb 5-1: config 0 descriptor?? [ 55.964817][ T987] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 55.996630][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 56.147284][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 56.160651][ T9] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 56.170229][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.179409][ T9] usb 2-1: config 0 descriptor?? [ 56.204934][ T987] FAULT_INJECTION: forcing a failure. [ 56.204934][ T987] name failslab, interval 1, probability 0, space 0, times 0 [ 56.217782][ T987] CPU: 0 UID: 0 PID: 987 Comm: syz.4.200 Not tainted syzkaller #0 001c7e68fa735976e9f6b7ad125989e1d2b10b0e [ 56.217818][ T987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 56.217831][ T987] Call Trace: [ 56.217842][ T987] [ 56.217850][ T987] __dump_stack+0x21/0x30 [ 56.217881][ T987] dump_stack_lvl+0x140/0x1c0 [ 56.217907][ T987] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.217934][ T987] dump_stack+0x19/0x20 [ 56.217959][ T987] should_fail_ex+0x3d7/0x530 [ 56.217982][ T987] should_failslab+0xac/0x100 [ 56.218011][ T987] kmem_cache_alloc_noprof+0x42/0x410 [ 56.218037][ T987] ? __kvm_mmu_topup_memory_cache+0x1eb/0x850 [ 56.218066][ T987] __kvm_mmu_topup_memory_cache+0x1eb/0x850 [ 56.218094][ T987] ? folio_mark_accessed+0x34b/0x620 [ 56.218129][ T987] kvm_mmu_topup_memory_cache+0x24/0x30 [ 56.218156][ T987] kvm_mmu_load+0xa2/0x2890 [ 56.218180][ T987] ? __cfi__raw_spin_lock+0x10/0x10 [ 56.218211][ T987] ? __kasan_check_write+0x18/0x20 [ 56.218236][ T987] ? kvm_release_page_clean+0x10a/0x150 [ 56.218267][ T987] ? kvm_apic_has_interrupt+0x4fa/0x7a0 [ 56.218291][ T987] ? vmx_enable_irq_window+0x95/0x130 [ 56.218319][ T987] vcpu_run+0x4dad/0x7840 [ 56.218359][ T987] ? signal_pending+0xc0/0xc0 [ 56.218384][ T987] ? __kasan_check_write+0x18/0x20 [ 56.218407][ T987] ? xfd_validate_state+0x68/0x140 [ 56.218432][ T987] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 56.218453][ T987] ? __kasan_check_write+0x18/0x20 [ 56.218476][ T987] ? fpregs_mark_activate+0x68/0x160 [ 56.218498][ T987] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 56.218520][ T987] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 56.218544][ T987] kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0 [ 56.218572][ T987] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 56.218600][ T987] ? kstrtoull+0x13b/0x1e0 [ 56.218620][ T987] ? kstrtouint+0x78/0xf0 [ 56.218640][ T987] ? ioctl_has_perm+0x1bc/0x500 [ 56.218662][ T987] ? __asan_memcpy+0x5a/0x80 [ 56.218688][ T987] ? ioctl_has_perm+0x408/0x500 [ 56.218721][ T987] ? has_cap_mac_admin+0xd0/0xd0 [ 56.218743][ T987] ? __kasan_check_write+0x18/0x20 [ 56.218770][ T987] ? mutex_lock_killable+0x97/0x1d0 [ 56.218791][ T987] ? __cfi_mutex_lock_killable+0x10/0x10 [ 56.218813][ T987] ? proc_fail_nth_write+0x184/0x220 [ 56.218835][ T987] kvm_vcpu_ioctl+0xa48/0x1000 [ 56.218864][ T987] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 56.218893][ T987] ? __cfi_vfs_write+0x10/0x10 [ 56.218917][ T987] ? __kasan_check_write+0x18/0x20 [ 56.218940][ T987] ? mutex_unlock+0x90/0x240 [ 56.218960][ T987] ? __cfi_mutex_unlock+0x10/0x10 [ 56.218980][ T987] ? __fget_files+0x2c5/0x340 [ 56.219008][ T987] ? __fget_files+0x2c5/0x340 [ 56.219036][ T987] ? bpf_lsm_file_ioctl+0xd/0x20 [ 56.219054][ T987] ? security_file_ioctl+0x3e/0x110 [ 56.219074][ T987] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 56.219103][ T987] __se_sys_ioctl+0x132/0x1b0 [ 56.219131][ T987] __x64_sys_ioctl+0x7f/0xa0 [ 56.219158][ T987] x64_sys_call+0x1878/0x2ee0 [ 56.219187][ T987] do_syscall_64+0x57/0xf0 [ 56.219217][ T987] ? clear_bhb_loop+0x50/0xa0 [ 56.219247][ T987] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.219277][ T987] RIP: 0033:0x7faa0a59aeb9 [ 56.219296][ T987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.219315][ T987] RSP: 002b:00007faa0b4f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.219340][ T987] RAX: ffffffffffffffda RBX: 00007faa0a815fa0 RCX: 00007faa0a59aeb9 [ 56.219357][ T987] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 56.219371][ T987] RBP: 00007faa0b4f6090 R08: 0000000000000000 R09: 0000000000000000 [ 56.219385][ T987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.219399][ T987] R13: 00007faa0a816038 R14: 00007faa0a815fa0 R15: 00007fff87b369b8 [ 56.219418][ T987] [ 56.640444][ T375] usbhid 5-1:0.0: can't add hid device: -71 [ 56.646565][ T375] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 56.655475][ T375] usb 5-1: USB disconnect, device number 11 [ 56.745258][ T9] samsung 0003:0419:0600.000F: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.1-1/input0 [ 56.886397][ T31] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 56.946193][ T375] usb 2-1: USB disconnect, device number 19 [ 57.037342][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.048382][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.058194][ T31] usb 3-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 57.067351][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.076053][ T31] usb 3-1: config 0 descriptor?? [ 57.173948][ T1005] netlink: 140 bytes leftover after parsing attributes in process `syz.4.206'. [ 57.184476][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 57.184495][ T36] audit: type=1400 audit(1769965884.270:305): avc: denied { create } for pid=1004 comm="syz.4.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 57.226102][ T1007] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 57.313597][ T36] audit: type=1400 audit(1769965884.400:306): avc: denied { mount } for pid=1024 comm="syz.4.211" name="/" dev="configfs" ino=2422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 57.338915][ T36] audit: type=1400 audit(1769965884.400:307): avc: denied { search } for pid=1024 comm="syz.4.211" name="/" dev="configfs" ino=2422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 57.362832][ T979] Bluetooth: hci0: command 0x1003 tx timeout [ 57.368923][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 57.375548][ T36] audit: type=1400 audit(1769965884.410:308): avc: denied { setattr } for pid=1024 comm="syz.4.211" name="/" dev="configfs" ino=2422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 57.409489][ T36] audit: type=1400 audit(1769965884.500:309): avc: denied { map } for pid=1026 comm="syz.4.212" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 57.437462][ T36] audit: type=1400 audit(1769965884.500:310): avc: denied { execute } for pid=1026 comm="syz.4.212" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 57.495088][ T31] wacom 0003:056A:030C.0010: hidraw0: USB HID v0.06 Device [HID 056a:030c] on usb-dummy_hcd.2-1/input0 [ 57.746242][ T446] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 57.786221][ T31] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 57.826208][ T375] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 57.897373][ T446] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 57.908276][ T446] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 57.922124][ T446] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 57.931423][ T446] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.940777][ T446] usb 2-1: config 0 descriptor?? [ 57.946222][ T1033] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 57.946470][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 57.962655][ T31] usb 4-1: not running at top speed; connect to a high speed hub [ 57.966594][ T9] usb 3-1: USB disconnect, device number 20 [ 57.972102][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.987411][ T31] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 57.998617][ T31] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 58.009056][ T375] usb 5-1: config 0 has an invalid interface number: 190 but max is 0 [ 58.010878][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 58.022023][ T375] usb 5-1: config 0 has an invalid descriptor of length 142, skipping remainder of the config [ 58.026627][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.037750][ T375] usb 5-1: config 0 has no interface number 0 [ 58.045247][ T31] usb 4-1: Product: syz [ 58.051208][ T375] usb 5-1: too many endpoints for config 0 interface 190 altsetting 26: 45, using maximum allowed: 30 [ 58.055711][ T31] usb 4-1: Manufacturer: syz [ 58.066414][ T375] usb 5-1: config 0 interface 190 altsetting 26 has 0 endpoint descriptors, different from the interface descriptor's value: 45 [ 58.071297][ T31] usb 4-1: SerialNumber: syz [ 58.084494][ T375] usb 5-1: config 0 interface 190 has no altsetting 0 [ 58.098753][ T375] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 58.107888][ T375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.115930][ T375] usb 5-1: Product: syz [ 58.120246][ T375] usb 5-1: Manufacturer: syz [ 58.124883][ T375] usb 5-1: SerialNumber: syz [ 58.133185][ T375] usb 5-1: config 0 descriptor?? [ 58.189036][ T1033] FAULT_INJECTION: forcing a failure. [ 58.189036][ T1033] name failslab, interval 1, probability 0, space 0, times 0 [ 58.201786][ T1033] CPU: 1 UID: 0 PID: 1033 Comm: syz.1.214 Not tainted syzkaller #0 001c7e68fa735976e9f6b7ad125989e1d2b10b0e [ 58.201828][ T1033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 58.201851][ T1033] Call Trace: [ 58.201874][ T1033] [ 58.201883][ T1033] __dump_stack+0x21/0x30 [ 58.201923][ T1033] dump_stack_lvl+0x140/0x1c0 [ 58.201954][ T1033] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.201975][ T1033] dump_stack+0x19/0x20 [ 58.201994][ T1033] should_fail_ex+0x3d7/0x530 [ 58.202028][ T1033] should_failslab+0xac/0x100 [ 58.202061][ T1033] kmem_cache_alloc_noprof+0x42/0x410 [ 58.202087][ T1033] ? __kvm_mmu_topup_memory_cache+0x1eb/0x850 [ 58.202117][ T1033] __kvm_mmu_topup_memory_cache+0x1eb/0x850 [ 58.202139][ T1033] ? folio_mark_accessed+0x34b/0x620 [ 58.202182][ T1033] kvm_mmu_topup_memory_cache+0x24/0x30 [ 58.202212][ T1033] kvm_mmu_load+0xa2/0x2890 [ 58.202236][ T1033] ? __cfi__raw_spin_lock+0x10/0x10 [ 58.202268][ T1033] ? __kasan_check_write+0x18/0x20 [ 58.202286][ T1033] ? kvm_release_page_clean+0x10a/0x150 [ 58.202326][ T1033] ? kvm_apic_has_interrupt+0x4fa/0x7a0 [ 58.202353][ T1033] ? vmx_enable_irq_window+0x95/0x130 [ 58.202380][ T1033] vcpu_run+0x4dad/0x7840 [ 58.202419][ T1033] ? signal_pending+0xc0/0xc0 [ 58.202437][ T1033] ? __kasan_check_write+0x18/0x20 [ 58.202455][ T1033] ? xfd_validate_state+0x68/0x140 [ 58.202495][ T1033] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 58.202517][ T1033] ? __kasan_check_write+0x18/0x20 [ 58.202541][ T1033] ? fpregs_mark_activate+0x68/0x160 [ 58.202563][ T1033] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 58.202579][ T1033] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 58.202597][ T1033] kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0 [ 58.202636][ T1033] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 58.202663][ T1033] ? kstrtoull+0x13b/0x1e0 [ 58.202682][ T1033] ? kstrtouint+0x78/0xf0 [ 58.202706][ T1033] ? ioctl_has_perm+0x1bc/0x500 [ 58.202723][ T1033] ? __asan_memcpy+0x5a/0x80 [ 58.202741][ T1033] ? ioctl_has_perm+0x408/0x500 [ 58.202757][ T1033] ? has_cap_mac_admin+0xd0/0xd0 [ 58.202794][ T1033] ? __kasan_check_write+0x18/0x20 [ 58.202818][ T1033] ? mutex_lock_killable+0x97/0x1d0 [ 58.202853][ T1033] ? __cfi_mutex_lock_killable+0x10/0x10 [ 58.202870][ T1033] ? proc_fail_nth_write+0x184/0x220 [ 58.202888][ T1033] kvm_vcpu_ioctl+0xa48/0x1000 [ 58.202928][ T1033] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 58.202960][ T1033] ? __cfi_vfs_write+0x10/0x10 [ 58.202985][ T1033] ? __kasan_check_write+0x18/0x20 [ 58.203012][ T1033] ? mutex_unlock+0x90/0x240 [ 58.203028][ T1033] ? __cfi_mutex_unlock+0x10/0x10 [ 58.203044][ T1033] ? __fget_files+0x2c5/0x340 [ 58.203083][ T1033] ? __fget_files+0x2c5/0x340 [ 58.203113][ T1033] ? bpf_lsm_file_ioctl+0xd/0x20 [ 58.203133][ T1033] ? security_file_ioctl+0x3e/0x110 [ 58.203159][ T1033] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 58.203180][ T1033] __se_sys_ioctl+0x132/0x1b0 [ 58.203202][ T1033] __x64_sys_ioctl+0x7f/0xa0 [ 58.203243][ T1033] x64_sys_call+0x1878/0x2ee0 [ 58.203273][ T1033] do_syscall_64+0x57/0xf0 [ 58.203305][ T1033] ? clear_bhb_loop+0x50/0xa0 [ 58.203328][ T1033] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 58.203349][ T1033] RIP: 0033:0x7fb90919aeb9 [ 58.203379][ T1033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.203399][ T1033] RSP: 002b:00007fb909fa5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.203422][ T1033] RAX: ffffffffffffffda RBX: 00007fb909415fa0 RCX: 00007fb90919aeb9 [ 58.203438][ T1033] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 58.203456][ T1033] RBP: 00007fb909fa5090 R08: 0000000000000000 R09: 0000000000000000 [ 58.203466][ T1033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.203476][ T1033] R13: 00007fb909416038 R14: 00007fb909415fa0 R15: 00007fff7a45aad8 [ 58.203490][ T1033] [ 58.589639][ T1037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.598219][ T1037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.607454][ T375] dm9601 5-1:0.190: probe with driver dm9601 failed with error -22 [ 58.617592][ T375] usb 5-1: USB disconnect, device number 12 [ 58.629178][ T446] usbhid 2-1:0.0: can't add hid device: -71 [ 58.635171][ T446] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 58.643940][ T446] usb 2-1: USB disconnect, device number 20 [ 58.655817][ T31] usb 4-1: USB disconnect, device number 20 [ 58.666927][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.056230][ T375] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 59.123947][ T36] audit: type=1400 audit(1769965886.210:311): avc: denied { append } for pid=1046 comm="syz.4.220" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 59.148216][ T36] audit: type=1400 audit(1769965886.210:312): avc: denied { connect } for pid=1045 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.247391][ T375] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 159, changing to 11 [ 59.258998][ T375] usb 3-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 59.272319][ T375] usb 3-1: config 1 interface 0 has no altsetting 0 [ 59.282570][ T375] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.40 [ 59.292010][ T375] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.300368][ T375] usb 3-1: Product: syz [ 59.304628][ T375] usb 3-1: SerialNumber: syz [ 59.512924][ T1044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.522256][ T1044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.532947][ T375] usbhid 3-1:1.0: can't add hid device: -71 [ 59.539503][ T375] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 59.550171][ T375] usb 3-1: USB disconnect, device number 21 [ 59.727078][ T1060] netlink: 'syz.3.224': attribute type 4 has an invalid length. [ 59.756484][ T36] audit: type=1400 audit(1769965886.850:313): avc: denied { map } for pid=1064 comm="syz.3.225" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 59.780762][ T1066] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 59.813366][ T36] audit: type=1400 audit(1769965886.900:314): avc: denied { write } for pid=1068 comm="syz.4.226" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 59.972052][ T1079] SELinux: failed to load policy [ 60.076706][ T1095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.234'. [ 60.210113][ T1104] overlayfs: conflicting options: metacopy=off,verity=require [ 60.246376][ T375] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 60.397482][ T375] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 60.408440][ T375] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 60.421390][ T375] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 60.431161][ T375] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.439935][ T375] usb 2-1: config 0 descriptor?? [ 60.445266][ T1083] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 60.486212][ T331] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 60.661420][ T331] usb 3-1: unable to get BOS descriptor or descriptor too short [ 60.671604][ T331] usb 3-1: not running at top speed; connect to a high speed hub [ 60.683703][ T331] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 60.707995][ T331] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 60.719772][ T1083] FAULT_INJECTION: forcing a failure. [ 60.719772][ T1083] name failslab, interval 1, probability 0, space 0, times 0 [ 60.732515][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.746176][ T331] usb 3-1: Product: syz [ 60.750442][ T331] usb 3-1: Manufacturer: syz [ 60.755095][ T331] usb 3-1: SerialNumber: syz [ 60.761245][ T1083] CPU: 0 UID: 0 PID: 1083 Comm: syz.1.230 Not tainted syzkaller #0 001c7e68fa735976e9f6b7ad125989e1d2b10b0e [ 60.761283][ T1083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 60.761297][ T1083] Call Trace: [ 60.761305][ T1083] [ 60.761314][ T1083] __dump_stack+0x21/0x30 [ 60.761346][ T1083] dump_stack_lvl+0x140/0x1c0 [ 60.761373][ T1083] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.761403][ T1083] dump_stack+0x19/0x20 [ 60.761427][ T1083] should_fail_ex+0x3d7/0x530 [ 60.761451][ T1083] should_failslab+0xac/0x100 [ 60.761482][ T1083] kmem_cache_alloc_noprof+0x42/0x410 [ 60.761508][ T1083] ? __kvm_mmu_topup_memory_cache+0x1eb/0x850 [ 60.761541][ T1083] __kvm_mmu_topup_memory_cache+0x1eb/0x850 [ 60.761570][ T1083] ? folio_mark_accessed+0x34b/0x620 [ 60.761614][ T1083] kvm_mmu_topup_memory_cache+0x24/0x30 [ 60.761643][ T1083] kvm_mmu_load+0xa2/0x2890 [ 60.761667][ T1083] ? __cfi__raw_spin_lock+0x10/0x10 [ 60.761699][ T1083] ? __kasan_check_write+0x18/0x20 [ 60.761723][ T1083] ? kvm_release_page_clean+0x10a/0x150 [ 60.761756][ T1083] ? kvm_apic_has_interrupt+0x4fa/0x7a0 [ 60.761782][ T1083] ? vmx_enable_irq_window+0x95/0x130 [ 60.761810][ T1083] vcpu_run+0x4dad/0x7840 [ 60.761850][ T1083] ? signal_pending+0xc0/0xc0 [ 60.761873][ T1083] ? __kasan_check_write+0x18/0x20 [ 60.761898][ T1083] ? xfd_validate_state+0x68/0x140 [ 60.761924][ T1083] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 60.761944][ T1083] ? __kasan_check_write+0x18/0x20 [ 60.761968][ T1083] ? fpregs_mark_activate+0x68/0x160 [ 60.761989][ T1083] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 60.762011][ T1083] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 60.762035][ T1083] kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0 [ 60.762063][ T1083] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 60.762090][ T1083] ? kstrtoull+0x13b/0x1e0 [ 60.762111][ T1083] ? kstrtouint+0x78/0xf0 [ 60.762132][ T1083] ? ioctl_has_perm+0x1bc/0x500 [ 60.762155][ T1083] ? __asan_memcpy+0x5a/0x80 [ 60.762181][ T1083] ? ioctl_has_perm+0x408/0x500 [ 60.762203][ T1083] ? has_cap_mac_admin+0xd0/0xd0 [ 60.762225][ T1083] ? __kasan_check_write+0x18/0x20 [ 60.762250][ T1083] ? mutex_lock_killable+0x97/0x1d0 [ 60.762279][ T1083] ? __cfi_mutex_lock_killable+0x10/0x10 [ 60.762307][ T1083] ? proc_fail_nth_write+0x184/0x220 [ 60.762331][ T1083] kvm_vcpu_ioctl+0xa48/0x1000 [ 60.762370][ T1083] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 60.762399][ T1083] ? __cfi_vfs_write+0x10/0x10 [ 60.762425][ T1083] ? __kasan_check_write+0x18/0x20 [ 60.762449][ T1083] ? mutex_unlock+0x90/0x240 [ 60.762471][ T1083] ? __cfi_mutex_unlock+0x10/0x10 [ 60.762494][ T1083] ? __fget_files+0x2c5/0x340 [ 60.762525][ T1083] ? __fget_files+0x2c5/0x340 [ 60.762556][ T1083] ? bpf_lsm_file_ioctl+0xd/0x20 [ 60.762576][ T1083] ? security_file_ioctl+0x3e/0x110 [ 60.762603][ T1083] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 60.762633][ T1083] __se_sys_ioctl+0x132/0x1b0 [ 60.762662][ T1083] __x64_sys_ioctl+0x7f/0xa0 [ 60.762691][ T1083] x64_sys_call+0x1878/0x2ee0 [ 60.762720][ T1083] do_syscall_64+0x57/0xf0 [ 60.762749][ T1083] ? clear_bhb_loop+0x50/0xa0 [ 60.762780][ T1083] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.762813][ T1083] RIP: 0033:0x7fb90919aeb9 [ 60.762836][ T1083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.762855][ T1083] RSP: 002b:00007fb909fa5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.762879][ T1083] RAX: ffffffffffffffda RBX: 00007fb909415fa0 RCX: 00007fb90919aeb9 [ 60.762896][ T1083] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 60.762909][ T1083] RBP: 00007fb909fa5090 R08: 0000000000000000 R09: 0000000000000000 [ 60.762923][ T1083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.762936][ T1083] R13: 00007fb909416038 R14: 00007fb909415fa0 R15: 00007fff7a45aad8 [ 60.762955][ T1083] [ 61.261404][ T375] usbhid 2-1:0.0: can't add hid device: -71 [ 61.267477][ T375] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 61.285594][ T375] usb 2-1: USB disconnect, device number 21 [ 61.339622][ T1142] netlink: 'syz.4.249': attribute type 4 has an invalid length. [ 61.354399][ T331] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 61.361452][ T331] usb 3-1: unit 0 not found! [ 61.368338][ T331] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 61.383074][ T331] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 61.385164][ T1144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.404209][ T331] usb 3-1: USB disconnect, device number 22 [ 61.411876][ T1144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.496276][ T382] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 61.616244][ T446] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 61.626208][ T382] usb 4-1: device descriptor read/64, error -71 [ 61.768796][ T446] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 61.780740][ T446] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.791079][ T446] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 61.800109][ T446] usb 5-1: config 1 has no interface number 0 [ 61.806761][ T446] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 61.817534][ T446] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 61.832218][ T446] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 61.841341][ T446] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.849580][ T446] usb 5-1: Product: syz [ 61.853772][ T446] usb 5-1: Manufacturer: syz [ 61.858439][ T446] usb 5-1: SerialNumber: syz [ 61.864949][ T446] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 61.871843][ T446] cdc_ncm 5-1:1.1: bind() failure [ 61.876671][ T382] usb 4-1: device descriptor read/64, error -71 [ 61.897011][ T1149] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 61.906059][ T1149] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 61.916243][ T1149] overlayfs: failed to resolve './file1': -2 [ 62.016206][ T331] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 62.065393][ T9] usb 5-1: USB disconnect, device number 13 [ 62.126258][ T382] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 62.176222][ T331] usb 2-1: Using ep0 maxpacket: 32 [ 62.182596][ T331] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 62.191243][ T331] usb 2-1: config 0 has no interface number 0 [ 62.197787][ T331] usb 2-1: config 0 interface 196 has no altsetting 0 [ 62.206443][ T331] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 62.215811][ T331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.224406][ T331] usb 2-1: Product: syz [ 62.229245][ T331] usb 2-1: Manufacturer: syz [ 62.233882][ T331] usb 2-1: SerialNumber: syz [ 62.240083][ T331] usb 2-1: config 0 descriptor?? [ 62.256236][ T382] usb 4-1: device descriptor read/64, error -71 [ 62.276230][ T375] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 62.447645][ T1147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.457269][ T1147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.465304][ T375] usb 3-1: unable to get BOS descriptor or descriptor too short [ 62.476602][ T331] ipheth 2-1:0.196: Unable to find endpoints [ 62.486376][ T375] usb 3-1: not running at top speed; connect to a high speed hub [ 62.500115][ T331] usb 2-1: USB disconnect, device number 22 [ 62.509934][ T382] usb 4-1: device descriptor read/64, error -71 [ 62.522414][ T375] usb 3-1: config 2 has an invalid interface number: 212 but max is 1 [ 62.531053][ T375] usb 3-1: config 2 has an invalid interface number: 226 but max is 1 [ 62.539452][ T375] usb 3-1: config 2 has no interface number 0 [ 62.545662][ T375] usb 3-1: config 2 has no interface number 1 [ 62.552033][ T375] usb 3-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 62.563296][ T375] usb 3-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 62.574421][ T375] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 62.585890][ T375] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 62.597405][ T375] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 62.618109][ T375] usb 3-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 62.631885][ T382] usb usb4-port1: attempt power cycle [ 62.637794][ T375] usb 3-1: config 2 interface 212 has no altsetting 0 [ 62.660096][ T375] usb 3-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 62.663822][ T1164] syz.4.257 uses obsolete (PF_INET,SOCK_PACKET) [ 62.676590][ T375] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.692688][ T375] usb 3-1: Product: syz [ 62.706551][ T375] usb 3-1: Manufacturer: syz [ 62.711264][ T375] usb 3-1: SerialNumber: syz [ 62.925214][ T375] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.226/input/input17 [ 62.936563][ T330] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 62.944409][ T375] usb 3-1: USB disconnect, device number 23 [ 62.976256][ T382] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 62.997313][ T382] usb 4-1: device descriptor read/8, error -71 [ 63.097411][ T330] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 63.110498][ T330] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 63.119611][ T330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.127933][ T382] usb 4-1: device descriptor read/8, error -71 [ 63.134910][ T330] usb 5-1: config 0 descriptor?? [ 63.366267][ T382] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 63.387403][ T382] usb 4-1: device descriptor read/8, error -71 [ 63.517321][ T382] usb 4-1: device descriptor read/8, error -71 [ 63.545435][ T330] samsung 0003:0419:0600.0011: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.4-1/input0 [ 63.626468][ T382] usb usb4-port1: unable to enumerate USB device [ 63.686227][ T375] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 63.746406][ T382] usb 5-1: USB disconnect, device number 14 [ 63.837410][ T375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 63.848332][ T375] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 63.861239][ T375] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 63.870362][ T375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.879341][ T375] usb 3-1: config 0 descriptor?? [ 63.884630][ T1175] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 63.941349][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 63.941384][ T36] audit: type=1400 audit(1769965891.030:325): avc: denied { ioctl } for pid=1182 comm="syz.1.263" path="socket:[9890]" dev="sockfs" ino=9890 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.158788][ T1175] syz.2.260: vmalloc error: size 12288, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 64.174812][ T1175] CPU: 0 UID: 0 PID: 1175 Comm: syz.2.260 Not tainted syzkaller #0 001c7e68fa735976e9f6b7ad125989e1d2b10b0e [ 64.174846][ T1175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.174858][ T1175] Call Trace: [ 64.174865][ T1175] [ 64.174872][ T1175] __dump_stack+0x21/0x30 [ 64.174907][ T1175] dump_stack_lvl+0x140/0x1c0 [ 64.174931][ T1175] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.174958][ T1175] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 64.174992][ T1175] dump_stack+0x19/0x20 [ 64.175019][ T1175] warn_alloc+0x1e7/0x2c0 [ 64.175043][ T1175] ? __cfi_warn_alloc+0x10/0x10 [ 64.175065][ T1175] ? alloc_pages_bulk_noprof+0x3c3/0x870 [ 64.175090][ T1175] ? __vmalloc_node_range_noprof+0x549/0x1480 [ 64.175117][ T1175] __vmalloc_node_range_noprof+0x1139/0x1480 [ 64.175148][ T1175] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 64.175174][ T1175] ? kasan_save_alloc_info+0x40/0x50 [ 64.175199][ T1175] ? __kasan_slab_alloc+0x73/0x90 [ 64.175228][ T1175] ? arch_dup_task_struct+0x5b/0xe0 [ 64.175257][ T1175] ? __asan_memcpy+0x5a/0x80 [ 64.175291][ T1175] dup_task_struct+0x5d6/0xd50 [ 64.175316][ T1175] ? copy_process+0x55a/0x3220 [ 64.175340][ T1175] ? _raw_spin_lock_irq+0x93/0x120 [ 64.175372][ T1175] ? copy_process+0x3220/0x3220 [ 64.175395][ T1175] ? __kasan_check_write+0x18/0x20 [ 64.175422][ T1175] copy_process+0x55a/0x3220 [ 64.175448][ T1175] ? __cfi_copy_process+0x10/0x10 [ 64.175468][ T1175] ? __kmalloc_cache_noprof+0x23c/0x470 [ 64.175494][ T1175] ? __kasan_check_write+0x18/0x20 [ 64.175516][ T1175] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 64.175546][ T1175] vhost_task_create+0x1f7/0x400 [ 64.175574][ T1175] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 64.175607][ T1175] ? __cfi_vhost_task_create+0x10/0x10 [ 64.175638][ T1175] ? __cfi_vhost_task_fn+0x10/0x10 [ 64.175668][ T1175] ? __kasan_check_write+0x18/0x20 [ 64.175691][ T1175] ? mutex_lock+0x97/0x1d0 [ 64.175713][ T1175] ? __cfi_mutex_lock+0x10/0x10 [ 64.175733][ T1175] ? kernel_text_address+0xa9/0xe0 [ 64.175758][ T1175] kvm_mmu_post_init_vm+0x161/0x300 [ 64.175784][ T1175] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 64.175810][ T1175] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 64.175835][ T1175] ? kstrtoull+0x13b/0x1e0 [ 64.175853][ T1175] ? kstrtouint+0x78/0xf0 [ 64.175870][ T1175] ? ioctl_has_perm+0x1bc/0x500 [ 64.175891][ T1175] ? __asan_memcpy+0x5a/0x80 [ 64.175914][ T1175] ? ioctl_has_perm+0x408/0x500 [ 64.175934][ T1175] ? has_cap_mac_admin+0xd0/0xd0 [ 64.175954][ T1175] ? __kasan_check_write+0x18/0x20 [ 64.175977][ T1175] ? mutex_lock_killable+0x97/0x1d0 [ 64.175998][ T1175] ? __cfi_mutex_lock_killable+0x10/0x10 [ 64.176019][ T1175] ? proc_fail_nth_write+0x184/0x220 [ 64.176042][ T1175] kvm_vcpu_ioctl+0xa48/0x1000 [ 64.176071][ T1175] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 64.176109][ T1175] ? __cfi_vfs_write+0x10/0x10 [ 64.176133][ T1175] ? __kasan_check_write+0x18/0x20 [ 64.176157][ T1175] ? mutex_unlock+0x90/0x240 [ 64.176177][ T1175] ? __cfi_mutex_unlock+0x10/0x10 [ 64.176197][ T1175] ? __fget_files+0x2c5/0x340 [ 64.176227][ T1175] ? __fget_files+0x2c5/0x340 [ 64.176256][ T1175] ? bpf_lsm_file_ioctl+0xd/0x20 [ 64.176276][ T1175] ? security_file_ioctl+0x3e/0x110 [ 64.176309][ T1175] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 64.176340][ T1175] __se_sys_ioctl+0x132/0x1b0 [ 64.176371][ T1175] __x64_sys_ioctl+0x7f/0xa0 [ 64.176402][ T1175] x64_sys_call+0x1878/0x2ee0 [ 64.176432][ T1175] do_syscall_64+0x57/0xf0 [ 64.176464][ T1175] ? clear_bhb_loop+0x50/0xa0 [ 64.176495][ T1175] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.176524][ T1175] RIP: 0033:0x7f5eaf99aeb9 [ 64.176544][ T1175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.176564][ T1175] RSP: 002b:00007f5eae3e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.176587][ T1175] RAX: ffffffffffffffda RBX: 00007f5eafc15fa0 RCX: 00007f5eaf99aeb9 [ 64.176604][ T1175] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 64.176618][ T1175] RBP: 00007f5eae3e3090 R08: 0000000000000000 R09: 0000000000000000 [ 64.176632][ T1175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 64.176646][ T1175] R13: 00007f5eafc16038 R14: 00007f5eafc15fa0 R15: 00007ffec1962368 [ 64.176665][ T1175] [ 64.276374][ T446] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 64.393357][ T1175] Mem-Info: [ 64.613957][ T1175] active_anon:7123 inactive_anon:2 isolated_anon:0 [ 64.613957][ T1175] active_file:7698 inactive_file:12536 isolated_file:0 [ 64.613957][ T1175] unevictable:0 dirty:82 writeback:0 [ 64.613957][ T1175] slab_reclaimable:4712 slab_unreclaimable:72131 [ 64.613957][ T1175] mapped:24533 shmem:165 pagetables:966 [ 64.613957][ T1175] sec_pagetables:0 bounce:0 [ 64.613957][ T1175] kernel_misc_reclaimable:0 [ 64.613957][ T1175] free:1525111 free_pcp:2185 free_cma:0 [ 64.627665][ T446] usb 2-1: config 202 has an invalid descriptor of length 0, skipping remainder of the config [ 64.659986][ T1175] Node 0 active_anon:28492kB inactive_anon:8kB active_file:30792kB inactive_file:50144kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98132kB dirty:328kB writeback:0kB shmem:660kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5504kB pagetables:3864kB sec_pagetables:0kB all_unreclaimable? no [ 64.674996][ T446] usb 2-1: config 202 has 0 interfaces, different from the descriptor's value: 1 [ 64.705632][ T1175] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963372kB mlocked:0kB bounce:0kB free_pcp:5208kB local_pcp:68kB free_cma:0kB [ 64.711327][ T446] usb 2-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=64.06 [ 64.740908][ T1175] lowmem_reserve[]: 0 3921 3921 [ 64.749138][ T446] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.754316][ T1175] Normal free:3142280kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28492kB inactive_anon:8kB active_file:30792kB inactive_file:50144kB unevictable:0kB writepending:328kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:1196kB free_cma:0kB [ 64.792979][ T1175] lowmem_reserve[]: 0 0 0 [ 64.797698][ T1175] DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 64.813398][ T1175] Normal: 14*4kB (UME) 190*8kB (UME) 595*16kB (UME) 82*32kB (UME) 100*64kB (UME) 55*128kB (UME) 26*256kB (UM) 18*512kB (ME) 13*1024kB (ME) 14*2048kB (UME) 747*4096kB (UM) = 3144728kB [ 64.831968][ T1175] 20398 total pagecache pages [ 64.836733][ T1175] 2 pages in swap cache [ 64.840927][ T1175] Free swap = 124984kB [ 64.845168][ T1175] Total swap = 124996kB [ 64.849392][ T1175] 2097051 pages RAM [ 64.853244][ T1175] 0 pages HighMem/MovableOnly [ 64.858234][ T1175] 352242 pages reserved [ 64.862552][ T1175] 0 pages cma reserved [ 64.866454][ T330] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 64.874301][ T1175] Memory allocations: [ 64.878357][ T1175] 0 B 0 init/main.c:1477 func:do_initcalls [ 64.885594][ T1175] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 64.893748][ T1175] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 64.901477][ T1175] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 64.909471][ T1175] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 64.917455][ T331] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 64.925133][ T1175] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 64.933967][ T1175] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 64.942149][ T1175] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 64.950221][ T1175] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 64.958451][ T1175] 0 B 0 init/initramfs.c:101 func:find_link [ 65.014361][ T446] usb 2-1: string descriptor 0 read error: -71 [ 65.025424][ T446] usb 2-1: USB disconnect, device number 23 [ 65.031731][ T330] usb 5-1: Using ep0 maxpacket: 8 [ 65.039432][ T330] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 65.043194][ T375] usbhid 3-1:0.0: can't add hid device: -71 [ 65.047603][ T330] usb 5-1: config 0 has no interface number 0 [ 65.059746][ T375] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 65.063636][ T330] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 65.071235][ T375] usb 3-1: USB disconnect, device number 24 [ 65.078934][ T330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.090957][ T330] usb 5-1: Product: syz [ 65.095185][ T330] usb 5-1: Manufacturer: syz [ 65.101369][ T331] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.111916][ T331] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 65.115656][ T330] usb 5-1: SerialNumber: syz [ 65.120875][ T331] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 65.138933][ T330] usb 5-1: config 0 descriptor?? [ 65.139755][ T331] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 65.153603][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 65.161698][ T331] usb 4-1: SerialNumber: syz [ 65.347138][ T330] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 65.356372][ T330] usb 5-1: No streaming interface found for terminal 6. [ 65.363475][ T330] usb 5-1: Failed to create links for entity 5 [ 65.371273][ T331] usb 4-1: 0:2 : does not exist [ 65.372362][ T330] usb 5-1: Failed to register entities (-22). [ 65.383856][ T331] usb 4-1: USB disconnect, device number 25 [ 65.393818][ T330] usb 5-1: USB disconnect, device number 15 [ 65.402781][ T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 65.569662][ T36] audit: type=1400 audit(1769965892.660:326): avc: denied { read } for pid=1196 comm="syz.2.268" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 65.592966][ T36] audit: type=1400 audit(1769965892.660:327): avc: denied { open } for pid=1196 comm="syz.2.268" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 65.617217][ T36] audit: type=1400 audit(1769965892.660:328): avc: denied { map } for pid=1196 comm="syz.2.268" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 65.776291][ T36] audit: type=1400 audit(1769965892.860:329): avc: denied { map } for pid=1205 comm="syz.2.272" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 65.936223][ T331] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 66.046253][ T375] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 66.096207][ T331] usb 2-1: Using ep0 maxpacket: 8 [ 66.102442][ T331] usb 2-1: config 3 has an invalid interface number: 45 but max is 0 [ 66.110621][ T331] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 66.119476][ T331] usb 2-1: config 3 has no interface number 0 [ 66.125574][ T331] usb 2-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.138779][ T331] usb 2-1: config 3 interface 45 has no altsetting 0 [ 66.146320][ T66] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 66.147080][ T331] usb 2-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 66.163143][ T331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.171205][ T331] usb 2-1: Product: syz [ 66.175457][ T331] usb 2-1: Manufacturer: syz [ 66.180111][ T331] usb 2-1: SerialNumber: syz [ 66.196270][ T9] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 66.216242][ T375] usb 3-1: Using ep0 maxpacket: 16 [ 66.222700][ T375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.233758][ T375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.244169][ T375] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 66.253314][ T375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.262032][ T375] usb 3-1: config 0 descriptor?? [ 66.297949][ T66] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 66.310867][ T66] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 66.320032][ T66] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.329477][ T66] usb 5-1: config 0 descriptor?? [ 66.357508][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 66.368610][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 66.381559][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 66.390690][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.406628][ T9] usb 4-1: config 0 descriptor?? [ 66.412470][ T1216] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 66.419098][ T331] usb 2-1: USB disconnect, device number 24 [ 66.433269][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.45/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 66.662859][ T1216] FAULT_INJECTION: forcing a failure. [ 66.662859][ T1216] name failslab, interval 1, probability 0, space 0, times 0 [ 66.675725][ T1216] CPU: 1 UID: 0 PID: 1216 Comm: syz.3.276 Not tainted syzkaller #0 001c7e68fa735976e9f6b7ad125989e1d2b10b0e [ 66.675766][ T1216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 66.675781][ T1216] Call Trace: [ 66.675788][ T1216] [ 66.675796][ T1216] __dump_stack+0x21/0x30 [ 66.675828][ T1216] dump_stack_lvl+0x140/0x1c0 [ 66.675856][ T1216] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.675886][ T1216] dump_stack+0x19/0x20 [ 66.675913][ T1216] should_fail_ex+0x3d7/0x530 [ 66.675938][ T1216] should_failslab+0xac/0x100 [ 66.675968][ T1216] kmem_cache_alloc_noprof+0x42/0x410 [ 66.675994][ T1216] ? __kvm_mmu_topup_memory_cache+0x1eb/0x850 [ 66.676026][ T1216] __kvm_mmu_topup_memory_cache+0x1eb/0x850 [ 66.676074][ T1216] ? folio_mark_accessed+0x34b/0x620 [ 66.676110][ T1216] kvm_mmu_topup_memory_cache+0x24/0x30 [ 66.676148][ T1216] kvm_mmu_load+0xa2/0x2890 [ 66.676172][ T1216] ? __cfi__raw_spin_lock+0x10/0x10 [ 66.676205][ T1216] ? __kasan_check_write+0x18/0x20 [ 66.676230][ T1216] ? kvm_release_page_clean+0x10a/0x150 [ 66.676261][ T1216] ? kvm_apic_has_interrupt+0x4fa/0x7a0 [ 66.676289][ T1216] ? vmx_enable_irq_window+0x95/0x130 [ 66.676316][ T1216] vcpu_run+0x4dad/0x7840 [ 66.676353][ T1216] ? signal_pending+0xc0/0xc0 [ 66.676376][ T1216] ? __kasan_check_write+0x18/0x20 [ 66.676398][ T1216] ? xfd_validate_state+0x68/0x140 [ 66.676422][ T1216] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 66.676441][ T1216] ? __kasan_check_write+0x18/0x20 [ 66.676466][ T1216] ? fpregs_mark_activate+0x68/0x160 [ 66.676486][ T1216] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 66.676505][ T1216] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 66.676527][ T1216] kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0 [ 66.676555][ T1216] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 66.676582][ T1216] ? kstrtoull+0x13b/0x1e0 [ 66.676603][ T1216] ? kstrtouint+0x78/0xf0 [ 66.676621][ T1216] ? ioctl_has_perm+0x1bc/0x500 [ 66.676644][ T1216] ? __asan_memcpy+0x5a/0x80 [ 66.676670][ T1216] ? ioctl_has_perm+0x408/0x500 [ 66.676691][ T1216] ? has_cap_mac_admin+0xd0/0xd0 [ 66.676713][ T1216] ? __kasan_check_write+0x18/0x20 [ 66.676738][ T1216] ? mutex_lock_killable+0x97/0x1d0 [ 66.676768][ T1216] ? __cfi_mutex_lock_killable+0x10/0x10 [ 66.676792][ T1216] ? proc_fail_nth_write+0x184/0x220 [ 66.676816][ T1216] kvm_vcpu_ioctl+0xa48/0x1000 [ 66.676847][ T1216] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 66.676877][ T1216] ? __cfi_vfs_write+0x10/0x10 [ 66.676902][ T1216] ? __kasan_check_write+0x18/0x20 [ 66.676927][ T1216] ? mutex_unlock+0x90/0x240 [ 66.676947][ T1216] ? __cfi_mutex_unlock+0x10/0x10 [ 66.676969][ T1216] ? __fget_files+0x2c5/0x340 [ 66.676999][ T1216] ? __fget_files+0x2c5/0x340 [ 66.677027][ T1216] ? bpf_lsm_file_ioctl+0xd/0x20 [ 66.677047][ T1216] ? security_file_ioctl+0x3e/0x110 [ 66.677067][ T1216] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 66.677095][ T1216] __se_sys_ioctl+0x132/0x1b0 [ 66.677126][ T1216] __x64_sys_ioctl+0x7f/0xa0 [ 66.677163][ T1216] x64_sys_call+0x1878/0x2ee0 [ 66.677193][ T1216] do_syscall_64+0x57/0xf0 [ 66.677222][ T1216] ? clear_bhb_loop+0x50/0xa0 [ 66.677253][ T1216] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.677282][ T1216] RIP: 0033:0x7efc7cd9aeb9 [ 66.677302][ T1216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.677321][ T1216] RSP: 002b:00007efc7dc7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.677344][ T1216] RAX: ffffffffffffffda RBX: 00007efc7d015fa0 RCX: 00007efc7cd9aeb9 [ 66.677360][ T1216] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 66.677374][ T1216] RBP: 00007efc7dc7b090 R08: 0000000000000000 R09: 0000000000000000 [ 66.677388][ T1216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.677400][ T1216] R13: 00007efc7d016038 R14: 00007efc7d015fa0 R15: 00007fffaa124468 [ 66.677419][ T1216] [ 66.682555][ T375] gt683r_led 0003:1770:FF00.0012: unknown main item tag 0x0 [ 66.763875][ T66] samsung 0003:0419:0600.0013: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.4-1/input0 [ 66.766533][ T375] gt683r_led 0003:1770:FF00.0012: unknown main item tag 0x0 [ 66.963694][ T66] usb 5-1: USB disconnect, device number 16 [ 66.966905][ T375] gt683r_led 0003:1770:FF00.0012: item fetching failed at offset 2/5 [ 67.101789][ T375] gt683r_led 0003:1770:FF00.0012: hid parsing failed [ 67.109564][ T375] gt683r_led 0003:1770:FF00.0012: probe with driver gt683r_led failed with error -22 [ 67.121749][ T375] usb 3-1: USB disconnect, device number 25 [ 67.152451][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 67.158835][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 67.167986][ T9] usb 4-1: USB disconnect, device number 26 [ 67.246242][ T31] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 67.376232][ T31] usb 2-1: device descriptor read/64, error -71 [ 67.616249][ T31] usb 2-1: device descriptor read/64, error -71 [ 67.694459][ T36] audit: type=1400 audit(1769965894.780:330): avc: denied { create } for pid=1229 comm="syz.3.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 67.705136][ T1230] netlink: 84 bytes leftover after parsing attributes in process `syz.3.281'. [ 67.725751][ T36] audit: type=1400 audit(1769965894.820:331): avc: denied { read } for pid=1229 comm="syz.3.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.736324][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 67.866251][ T31] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 67.876578][ T9] usb 5-1: device descriptor read/64, error -71 [ 67.996242][ T31] usb 2-1: device descriptor read/64, error -71 [ 68.016280][ T375] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 68.116214][ T9] usb 5-1: device descriptor read/64, error -71 [ 68.166202][ T375] usb 4-1: Using ep0 maxpacket: 16 [ 68.173479][ T375] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 68.184886][ T375] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.197906][ T375] usb 4-1: config 1 interface 0 has no altsetting 0 [ 68.206111][ T375] usb 4-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.40 [ 68.215241][ T375] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.223276][ T375] usb 4-1: Product: І [ 68.227508][ T375] usb 4-1: Manufacturer: 춒彖ܝ睅눫蛆묥蝹⟆籈釃 䣭ꀸ峪䍶冟厷谫⠅삖ᔩ꧟﹫돭엫훀剝獸៌硆荝樦땡⯯ﭸᛌꏥ麆纂﫶颬㞑慛ฤダ鳫쥎 [ 68.246698][ T375] usb 4-1: SerialNumber: Ј [ 68.256430][ T31] usb 2-1: device descriptor read/64, error -71 [ 68.275458][ T1237] netlink: 96 bytes leftover after parsing attributes in process `syz.2.283'. [ 68.276803][ T1238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.293752][ T1238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.366378][ T31] usb usb2-port1: attempt power cycle [ 68.386535][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 68.467606][ T375] usbhid 4-1:1.0: can't add hid device: -71 [ 68.473688][ T375] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 68.482777][ T375] usb 4-1: USB disconnect, device number 27 [ 68.516218][ T331] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 68.523856][ T9] usb 5-1: device descriptor read/64, error -71 [ 68.656240][ T331] usb 3-1: device descriptor read/64, error -71 [ 68.716205][ T31] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 68.737223][ T31] usb 2-1: device descriptor read/8, error -71 [ 68.766250][ T9] usb 5-1: device descriptor read/64, error -71 [ 68.867318][ T31] usb 2-1: device descriptor read/8, error -71 [ 68.876331][ T9] usb usb5-port1: attempt power cycle [ 68.896207][ T331] usb 3-1: device descriptor read/64, error -71 [ 69.052069][ T36] audit: type=1400 audit(1769965896.140:332): avc: denied { getopt } for pid=1241 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.106229][ T31] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 69.127385][ T31] usb 2-1: device descriptor read/8, error -71 [ 69.136341][ T331] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 69.216409][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 69.237416][ T9] usb 5-1: device descriptor read/8, error -71 [ 69.257333][ T31] usb 2-1: device descriptor read/8, error -71 [ 69.266210][ T331] usb 3-1: device descriptor read/64, error -71 [ 69.366335][ T31] usb usb2-port1: unable to enumerate USB device [ 69.367747][ T9] usb 5-1: device descriptor read/8, error -71 [ 69.416242][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 69.506216][ T331] usb 3-1: device descriptor read/64, error -71 [ 69.567475][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 69.580432][ T10] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 69.589530][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.599164][ T10] usb 4-1: config 0 descriptor?? [ 69.616389][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 69.624072][ T331] usb usb3-port1: attempt power cycle [ 69.647352][ T9] usb 5-1: device descriptor read/8, error -71 [ 69.777431][ T9] usb 5-1: device descriptor read/8, error -71 [ 69.886347][ T9] usb usb5-port1: unable to enumerate USB device [ 69.966193][ T331] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 69.987262][ T331] usb 3-1: device descriptor read/8, error -71 [ 70.009288][ T10] samsung 0003:0419:0600.0014: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.3-1/input0 [ 70.117308][ T331] usb 3-1: device descriptor read/8, error -71 [ 70.208258][ T10] usb 4-1: USB disconnect, device number 28 [ 70.356239][ T331] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 70.377503][ T331] usb 3-1: device descriptor read/8, error -71 [ 70.446215][ T66] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 70.511593][ T331] usb 3-1: device descriptor read/8, error -71 [ 70.547732][ T1256] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.594657][ T1259] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 70.603670][ T1259] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 70.615358][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 70.615526][ T1259] overlayfs: missing 'lowerdir' [ 70.627232][ T66] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 70.632135][ T331] usb usb3-port1: unable to enumerate USB device [ 70.644936][ T66] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 70.659742][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.676612][ T66] usb 2-1: config 0 descriptor?? [ 70.682064][ T1254] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 70.919272][ T1254] FAULT_INJECTION: forcing a failure. [ 70.919272][ T1254] name failslab, interval 1, probability 0, space 0, times 0 [ 70.932007][ T1254] CPU: 0 UID: 0 PID: 1254 Comm: syz.1.289 Not tainted syzkaller #0 001c7e68fa735976e9f6b7ad125989e1d2b10b0e [ 70.932041][ T1254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 70.932057][ T1254] Call Trace: [ 70.932076][ T1254] [ 70.932086][ T1254] __dump_stack+0x21/0x30 [ 70.932119][ T1254] dump_stack_lvl+0x140/0x1c0 [ 70.932144][ T1254] ? __cfi_dump_stack_lvl+0x10/0x10 [ 70.932171][ T1254] dump_stack+0x19/0x20 [ 70.932189][ T1254] should_fail_ex+0x3d7/0x530 [ 70.932206][ T1254] should_failslab+0xac/0x100 [ 70.932247][ T1254] kmem_cache_alloc_noprof+0x42/0x410 [ 70.932274][ T1254] ? __kvm_mmu_topup_memory_cache+0x1eb/0x850 [ 70.932306][ T1254] __kvm_mmu_topup_memory_cache+0x1eb/0x850 [ 70.932327][ T1254] ? folio_mark_accessed+0x34b/0x620 [ 70.932353][ T1254] kvm_mmu_topup_memory_cache+0x24/0x30 [ 70.932393][ T1254] kvm_mmu_load+0xa2/0x2890 [ 70.932416][ T1254] ? __cfi__raw_spin_lock+0x10/0x10 [ 70.932447][ T1254] ? __kasan_check_write+0x18/0x20 [ 70.932480][ T1254] ? kvm_release_page_clean+0x10a/0x150 [ 70.932504][ T1254] ? kvm_apic_has_interrupt+0x4fa/0x7a0 [ 70.932541][ T1254] ? vmx_enable_irq_window+0x95/0x130 [ 70.932569][ T1254] vcpu_run+0x4dad/0x7840 [ 70.932609][ T1254] ? signal_pending+0xc0/0xc0 [ 70.932635][ T1254] ? __kasan_check_write+0x18/0x20 [ 70.932653][ T1254] ? xfd_validate_state+0x68/0x140 [ 70.932687][ T1254] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 70.932709][ T1254] ? __kasan_check_write+0x18/0x20 [ 70.932733][ T1254] ? fpregs_mark_activate+0x68/0x160 [ 70.932759][ T1254] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 70.932775][ T1254] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 70.932791][ T1254] kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0 [ 70.932811][ T1254] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 70.932850][ T1254] ? kstrtoull+0x13b/0x1e0 [ 70.932870][ T1254] ? kstrtouint+0x78/0xf0 [ 70.932888][ T1254] ? ioctl_has_perm+0x1bc/0x500 [ 70.932913][ T1254] ? __asan_memcpy+0x5a/0x80 [ 70.932932][ T1254] ? ioctl_has_perm+0x408/0x500 [ 70.932947][ T1254] ? has_cap_mac_admin+0xd0/0xd0 [ 70.932963][ T1254] ? __kasan_check_write+0x18/0x20 [ 70.932999][ T1254] ? mutex_lock_killable+0x97/0x1d0 [ 70.933023][ T1254] ? __cfi_mutex_lock_killable+0x10/0x10 [ 70.933046][ T1254] ? proc_fail_nth_write+0x184/0x220 [ 70.933069][ T1254] kvm_vcpu_ioctl+0xa48/0x1000 [ 70.933092][ T1254] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 70.933126][ T1254] ? __cfi_vfs_write+0x10/0x10 [ 70.933154][ T1254] ? __kasan_check_write+0x18/0x20 [ 70.933179][ T1254] ? mutex_unlock+0x90/0x240 [ 70.933204][ T1254] ? __cfi_mutex_unlock+0x10/0x10 [ 70.933221][ T1254] ? __fget_files+0x2c5/0x340 [ 70.933244][ T1254] ? __fget_files+0x2c5/0x340 [ 70.933277][ T1254] ? bpf_lsm_file_ioctl+0xd/0x20 [ 70.933299][ T1254] ? security_file_ioctl+0x3e/0x110 [ 70.933319][ T1254] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 70.933352][ T1254] __se_sys_ioctl+0x132/0x1b0 [ 70.933375][ T1254] __x64_sys_ioctl+0x7f/0xa0 [ 70.933397][ T1254] x64_sys_call+0x1878/0x2ee0 [ 70.933433][ T1254] do_syscall_64+0x57/0xf0 [ 70.933471][ T1254] ? clear_bhb_loop+0x50/0xa0 [ 70.933501][ T1254] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 70.933531][ T1254] RIP: 0033:0x7fb90919aeb9 [ 70.933545][ T1254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.933559][ T1254] RSP: 002b:00007fb909fa5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.933594][ T1254] RAX: ffffffffffffffda RBX: 00007fb909415fa0 RCX: 00007fb90919aeb9 [ 70.933611][ T1254] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 70.933624][ T1254] RBP: 00007fb909fa5090 R08: 0000000000000000 R09: 0000000000000000 [ 70.933638][ T1254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 70.933650][ T1254] R13: 00007fb909416038 R14: 00007fb909415fa0 R15: 00007fff7a45aad8 [ 70.933669][ T1254] [ 71.046579][ T31] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 71.339657][ T66] usbhid 2-1:0.0: can't add hid device: -71 [ 71.345684][ T66] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 71.364458][ T66] usb 2-1: USB disconnect, device number 29 [ 71.423193][ T36] audit: type=1400 audit(1769965898.510:333): avc: denied { map } for pid=1271 comm="syz.2.295" path="socket:[10288]" dev="sockfs" ino=10288 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 71.425719][ T1259] overlayfs: statfs failed on './file0' [ 71.447841][ T36] audit: type=1400 audit(1769965898.510:334): avc: denied { map } for pid=1271 comm="syz.2.295" path="socket:[9207]" dev="sockfs" ino=9207 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 71.496207][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 71.510472][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.522116][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.532832][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 71.542161][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.556352][ T31] usb 4-1: config 0 descriptor?? [ 71.562726][ T31] hub 4-1:0.0: USB hub found [ 71.665101][ T36] audit: type=1400 audit(1769965898.750:335): avc: denied { write } for pid=1282 comm="syz.4.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 71.762814][ T31] hub 4-1:0.0: 1 port detected [ 71.926248][ T66] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 71.936250][ T10] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 71.976253][ T31] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 71.982644][ T31] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 71.991719][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 71.997964][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 72.027101][ T31] usb 4-1: USB disconnect, device number 29 [ 72.076290][ T66] usb 5-1: Using ep0 maxpacket: 32 [ 72.083144][ T66] usb 5-1: unable to get BOS descriptor or descriptor too short [ 72.091970][ T66] usb 5-1: config 1 has an invalid interface number: 15 but max is 0 [ 72.100298][ T66] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.110779][ T66] usb 5-1: config 1 has no interface number 0 [ 72.111587][ T10] usb 3-1: No LPM exit latency info found, disabling LPM. [ 72.119669][ T66] usb 5-1: config 1 interface 15 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 72.137312][ T66] usb 5-1: config 1 interface 15 has no altsetting 0 [ 72.137348][ T10] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 72.146717][ T66] usb 5-1: New USB device found, idVendor=19d2, idProduct=7e26, bcdDevice=96.b3 [ 72.162648][ T66] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.166283][ T10] usb 3-1: config 1 has no interface number 1 [ 72.171426][ T66] usb 5-1: Product: syz [ 72.181359][ T66] usb 5-1: Manufacturer: syz [ 72.186010][ T66] usb 5-1: SerialNumber: syz [ 72.186427][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 72.226223][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0 [ 72.239134][ T10] usb 3-1: string descriptor 0 read error: -22 [ 72.245395][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 72.254748][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.267099][ T10] usb 3-1: low speed audio streaming not supported [ 72.399695][ T66] usb 5-1: bad CDC descriptors [ 72.405727][ T66] usb 5-1: USB disconnect, device number 21 [ 72.464755][ T10] usb 3-1: USB disconnect, device number 30 [ 72.535456][ T1295] incfs: Options parsing error. -22 [ 72.541171][ T1295] incfs: mount failed -22 [ 72.643579][ T36] audit: type=1400 audit(1769965899.730:336): avc: denied { setopt } for pid=1305 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 72.816295][ T31] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 72.886398][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 72.966214][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 72.973879][ T31] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 72.983181][ T31] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 72.991870][ T31] usb 4-1: Product: syz [ 72.996084][ T31] usb 4-1: Manufacturer: syz [ 73.000910][ T31] usb 4-1: SerialNumber: syz [ 73.012020][ T31] usb 4-1: config 0 descriptor?? [ 73.046660][ T10] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 73.062378][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 73.071581][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 73.079812][ T10] usb 2-1: Product: syz [ 73.084031][ T10] usb 2-1: Manufacturer: syz [ 73.088737][ T10] usb 2-1: SerialNumber: syz [ 73.094163][ T10] usb 2-1: config 0 descriptor?? [ 73.100236][ T10] cdc_acm 2-1:0.0: Zero length descriptor references [ 73.107136][ T10] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 73.166224][ T331] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 73.233373][ T31] usb 4-1: USB disconnect, device number 30 [ 73.240767][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 73.256629][ T9] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 73.301275][ T66] usb 2-1: USB disconnect, device number 30 [ 73.317572][ T331] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 73.325820][ T331] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 73.337651][ T331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 73.348714][ T331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 73.359943][ T331] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 73.372924][ T331] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 73.382002][ T331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.390716][ T331] usb 5-1: config 0 descriptor?? [ 73.396333][ T1308] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 73.417242][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 73.428255][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 73.441217][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 73.450545][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.459448][ T9] usb 3-1: config 0 descriptor?? [ 73.464959][ T1310] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 73.763713][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 73.770714][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 73.778423][ T1312] netlink: 9 bytes leftover after parsing attributes in process `syz.3.309'. [ 73.782330][ T9] usb 3-1: USB disconnect, device number 31 [ 73.788703][ T1312] z00X: renamed from gretap0 (while UP) [ 73.802239][ T1312] z00X: entered allmulticast mode [ 73.809385][ T331] plantronics 0003:047F:FFFF.0015: unknown main item tag 0xd [ 73.819997][ T331] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 73.828276][ T1313] netlink: 9 bytes leftover after parsing attributes in process `syz.3.309'. [ 73.832359][ T331] plantronics 0003:047F:FFFF.0015: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 73.866897][ T1313] z01X: renamed from z00X (while UP) [ 74.067127][ T1308] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=51 sclass=netlink_tcpdiag_socket pid=1308 comm=syz.4.307 [ 74.079872][ T1308] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=1308 comm=syz.4.307 [ 74.092465][ T1308] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=1308 comm=syz.4.307 [ 74.105819][ T9] usb 5-1: USB disconnect, device number 22 [ 74.166233][ T330] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 74.198225][ T36] audit: type=1400 audit(1769965901.290:337): avc: denied { watch } for pid=1328 comm="syz.1.315" path="/62/file0" dev="tmpfs" ino=350 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.198806][ T1329] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 74.230101][ T36] audit: type=1400 audit(1769965901.320:338): avc: denied { relabelto } for pid=1328 comm="syz.1.315" name="62" dev="tmpfs" ino=345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 74.256341][ T36] audit: type=1400 audit(1769965901.320:339): avc: denied { associate } for pid=1328 comm="syz.1.315" name="62" dev="tmpfs" ino=345 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_exec_t:s0" [ 74.316338][ T330] usb 4-1: device descriptor read/64, error -71 [ 74.342493][ T36] audit: type=1400 audit(1769965901.430:340): avc: denied { write } for pid=291 comm="syz-executor" name="62" dev="tmpfs" ino=345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 74.372268][ T66] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 74.375277][ T36] audit: type=1400 audit(1769965901.430:341): avc: denied { remove_name } for pid=291 comm="syz-executor" name="file0" dev="tmpfs" ino=350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 74.398354][ T66] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 74.410427][ T36] audit: type=1400 audit(1769965901.430:342): avc: denied { rmdir } for pid=291 comm="syz-executor" name="62" dev="tmpfs" ino=345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 74.538784][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 74.571361][ T330] usb 4-1: device descriptor read/64, error -71 [ 74.697297][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.708302][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.718203][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.731255][ T9] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 74.740362][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.749352][ T9] usb 3-1: config 0 descriptor?? [ 74.816249][ T330] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 74.876248][ T375] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 74.946238][ T330] usb 4-1: device descriptor read/64, error -71 [ 74.958566][ T9] acrux 0003:1A34:0802.0017: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 74.970288][ T9] acrux 0003:1A34:0802.0017: no inputs found [ 74.976500][ T9] acrux 0003:1A34:0802.0017: Failed to enable force feedback support, error: -19 [ 75.027581][ T375] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 75.038820][ T375] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.049577][ T375] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 75.060914][ T375] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 75.070647][ T375] usb 5-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 75.083569][ T375] usb 5-1: config 7 interface 0 has no altsetting 0 [ 75.090221][ T375] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 75.099298][ T375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.159081][ T9] usb 3-1: USB disconnect, device number 32 [ 75.186215][ T330] usb 4-1: device descriptor read/64, error -71 [ 75.296323][ T330] usb usb4-port1: attempt power cycle [ 75.513642][ T1353] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 75.525075][ T36] audit: type=1400 audit(1769965902.610:343): avc: denied { relabelto } for pid=1350 comm="syz.1.321" name="cgroup" dev="tmpfs" ino=377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 75.552932][ T375] usbhid 5-1:7.0: can't add hid device: -71 [ 75.553178][ T36] audit: type=1400 audit(1769965902.610:344): avc: denied { associate } for pid=1350 comm="syz.1.321" name="cgroup" dev="tmpfs" ino=377 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_log_t:s0" [ 75.559845][ T375] usbhid 5-1:7.0: probe with driver usbhid failed with error -71 [ 75.595361][ T375] usb 5-1: USB disconnect, device number 23 [ 75.612579][ T36] audit: type=1400 audit(1769965902.700:345): avc: denied { unlink } for pid=291 comm="syz-executor" name="cgroup" dev="tmpfs" ino=377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 75.646245][ T330] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 75.667223][ T330] usb 4-1: device descriptor read/8, error -71 [ 75.799742][ T330] usb 4-1: device descriptor read/8, error -71 [ 75.956216][ T9] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 76.037074][ T330] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 76.057324][ T330] usb 4-1: device descriptor read/8, error -71 [ 76.107312][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 76.118231][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 76.131108][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 76.140230][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.149114][ T9] usb 2-1: config 0 descriptor?? [ 76.154406][ T1361] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 76.163866][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 76.179300][ T1380] syzkaller0: entered promiscuous mode [ 76.184814][ T1380] syzkaller0: entered allmulticast mode [ 76.207281][ T330] usb 4-1: device descriptor read/8, error -71 [ 76.316400][ T330] usb usb4-port1: unable to enumerate USB device [ 76.428885][ T1361] FAULT_INJECTION: forcing a failure. [ 76.428885][ T1361] name failslab, interval 1, probability 0, space 0, times 0 [ 76.441598][ T1361] CPU: 0 UID: 0 PID: 1361 Comm: syz.1.324 Not tainted syzkaller #0 001c7e68fa735976e9f6b7ad125989e1d2b10b0e [ 76.441626][ T1361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.441637][ T1361] Call Trace: [ 76.441644][ T1361] [ 76.441651][ T1361] __dump_stack+0x21/0x30 [ 76.441676][ T1361] dump_stack_lvl+0x140/0x1c0 [ 76.441696][ T1361] ? __cfi_dump_stack_lvl+0x10/0x10 [ 76.441720][ T1361] dump_stack+0x19/0x20 [ 76.441739][ T1361] should_fail_ex+0x3d7/0x530 [ 76.441756][ T1361] should_failslab+0xac/0x100 [ 76.441779][ T1361] kmem_cache_alloc_noprof+0x42/0x410 [ 76.441799][ T1361] ? __kvm_mmu_topup_memory_cache+0x1eb/0x850 [ 76.441821][ T1361] __kvm_mmu_topup_memory_cache+0x1eb/0x850 [ 76.441844][ T1361] ? folio_mark_accessed+0x34b/0x620 [ 76.441869][ T1361] kvm_mmu_topup_memory_cache+0x24/0x30 [ 76.441890][ T1361] kvm_mmu_load+0xa2/0x2890 [ 76.441908][ T1361] ? __cfi__raw_spin_lock+0x10/0x10 [ 76.441932][ T1361] ? __kasan_check_write+0x18/0x20 [ 76.441950][ T1361] ? kvm_release_page_clean+0x10a/0x150 [ 76.441976][ T1361] ? kvm_apic_has_interrupt+0x4fa/0x7a0 [ 76.441995][ T1361] ? vmx_enable_irq_window+0x95/0x130 [ 76.442015][ T1361] vcpu_run+0x4dad/0x7840 [ 76.442044][ T1361] ? signal_pending+0xc0/0xc0 [ 76.442062][ T1361] ? __kasan_check_write+0x18/0x20 [ 76.442080][ T1361] ? xfd_validate_state+0x68/0x140 [ 76.442099][ T1361] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 76.442114][ T1361] ? __kasan_check_write+0x18/0x20 [ 76.442133][ T1361] ? fpregs_mark_activate+0x68/0x160 [ 76.442148][ T1361] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 76.442163][ T1361] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 76.442180][ T1361] kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0 [ 76.442200][ T1361] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 76.442225][ T1361] ? kstrtoull+0x13b/0x1e0 [ 76.442240][ T1361] ? kstrtouint+0x78/0xf0 [ 76.442271][ T1361] ? ioctl_has_perm+0x1bc/0x500 [ 76.442294][ T1361] ? __asan_memcpy+0x5a/0x80 [ 76.442320][ T1361] ? ioctl_has_perm+0x408/0x500 [ 76.442336][ T1361] ? has_cap_mac_admin+0xd0/0xd0 [ 76.442352][ T1361] ? __kasan_check_write+0x18/0x20 [ 76.442369][ T1361] ? mutex_lock_killable+0x97/0x1d0 [ 76.442387][ T1361] ? __cfi_mutex_lock_killable+0x10/0x10 [ 76.442419][ T1361] ? proc_fail_nth_write+0x184/0x220 [ 76.442443][ T1361] kvm_vcpu_ioctl+0xa48/0x1000 [ 76.442474][ T1361] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 76.442497][ T1361] ? __cfi_vfs_write+0x10/0x10 [ 76.442515][ T1361] ? __kasan_check_write+0x18/0x20 [ 76.442533][ T1361] ? mutex_unlock+0x90/0x240 [ 76.442549][ T1361] ? __cfi_mutex_unlock+0x10/0x10 [ 76.442564][ T1361] ? __fget_files+0x2c5/0x340 [ 76.442588][ T1361] ? __fget_files+0x2c5/0x340 [ 76.442609][ T1361] ? bpf_lsm_file_ioctl+0xd/0x20 [ 76.442624][ T1361] ? security_file_ioctl+0x3e/0x110 [ 76.442639][ T1361] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 76.442660][ T1361] __se_sys_ioctl+0x132/0x1b0 [ 76.442683][ T1361] __x64_sys_ioctl+0x7f/0xa0 [ 76.442705][ T1361] x64_sys_call+0x1878/0x2ee0 [ 76.442726][ T1361] do_syscall_64+0x57/0xf0 [ 76.442748][ T1361] ? clear_bhb_loop+0x50/0xa0 [ 76.442770][ T1361] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.442791][ T1361] RIP: 0033:0x7fb90919aeb9 [ 76.442805][ T1361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.442819][ T1361] RSP: 002b:00007fb909fa5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.442836][ T1361] RAX: ffffffffffffffda RBX: 00007fb909415fa0 RCX: 00007fb90919aeb9 [ 76.442848][ T1361] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 76.442858][ T1361] RBP: 00007fb909fa5090 R08: 0000000000000000 R09: 0000000000000000 [ 76.442869][ T1361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 76.442878][ T1361] R13: 00007fb909416038 R14: 00007fb909415fa0 R15: 00007fff7a45aad8 [ 76.442892][ T1361] [ 76.860725][ T1386] syzkaller0: entered promiscuous mode [ 76.866291][ T1386] syzkaller0: entered allmulticast mode [ 76.872678][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 76.880458][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 76.889406][ T9] usb 2-1: USB disconnect, device number 31 [ 77.326226][ T330] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 77.476203][ T330] usb 4-1: Using ep0 maxpacket: 32 [ 77.482633][ T330] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 77.490836][ T330] usb 4-1: config 0 has no interface number 0 [ 77.498370][ T330] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 77.507478][ T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.515487][ T330] usb 4-1: Product: syz [ 77.519728][ T330] usb 4-1: Manufacturer: syz [ 77.524352][ T330] usb 4-1: SerialNumber: syz [ 77.529744][ T330] usb 4-1: config 0 descriptor?? [ 77.535537][ T330] smsc95xx v2.0.0 [ 77.626228][ T9] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 77.786767][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.796977][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 15 [ 77.805977][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 77.816080][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 77.838216][ T9] usb 2-1: string descriptor 0 read error: -22 [ 77.844545][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 77.858968][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.872834][ T9] usb 2-1: 0:2 : does not exist [ 77.886424][ T1394] netlink: 'syz.2.335': attribute type 12 has an invalid length. [ 77.940893][ T1397] raw_sendmsg: syz.2.336 forgot to set AF_INET. Fix it! [ 77.965026][ T36] audit: type=1400 audit(1769965905.050:346): avc: denied { write } for pid=1398 comm="syz.2.337" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 78.033644][ T1406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.042281][ T1406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.236256][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 78.236270][ T979] Bluetooth: hci0: command 0x1003 tx timeout [ 78.266233][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 78.311522][ T1408] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=1408 comm=syz.4.339 [ 78.348801][ T330] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 78.359698][ T330] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 78.418412][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 78.426969][ T9] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 8 [ 78.436711][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 78.445182][ T9] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 78.456205][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.464232][ T9] usb 3-1: Product: syz [ 78.472116][ T9] usb 3-1: Manufacturer: syz [ 78.477065][ T9] usb 3-1: SerialNumber: syz [ 78.483153][ T1404] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 78.497296][ T1420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.507258][ T1420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.569833][ T330] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 78.580752][ T330] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 78.590024][ T330] usb 4-1: USB disconnect, device number 35 [ 78.697764][ T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 2 proto 1 vid 0x04B8 pid 0x0202 [ 78.711261][ T9] usb 3-1: USB disconnect, device number 33 [ 78.718496][ T9] usblp0: removed [ 78.726323][ T375] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 78.876365][ T375] usb 5-1: Using ep0 maxpacket: 32 [ 78.882813][ T375] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.893760][ T375] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.903575][ T375] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 78.912672][ T375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.921402][ T375] usb 5-1: config 0 descriptor?? [ 78.928102][ T375] hub 5-1:0.0: USB hub found [ 79.127917][ T1420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.136585][ T1420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.156630][ T375] hub 5-1:0.0: 19 ports detected [ 79.161808][ T375] hub 5-1:0.0: insufficient power available to use all downstream ports [ 79.357586][ T375] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 79.365609][ T375] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 79.374692][ T375] usbhid 5-1:0.0: can't add hid device: -71 [ 79.380803][ T375] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 79.406623][ T375] usb 5-1: USB disconnect, device number 24 [ 79.412505][ T1437] 9pnet_fd: p9_fd_create_tcp (1437): problem connecting socket to 127.0.0.1 [ 79.456255][ T330] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 79.607576][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 79.618480][ T330] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 79.631804][ T330] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 79.640913][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.649798][ T330] usb 3-1: config 0 descriptor?? [ 79.655130][ T1428] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 79.893984][ T1428] FAULT_INJECTION: forcing a failure. [ 79.893984][ T1428] name failslab, interval 1, probability 0, space 0, times 0 [ 79.908283][ T1428] CPU: 0 UID: 0 PID: 1428 Comm: syz.2.344 Not tainted syzkaller #0 001c7e68fa735976e9f6b7ad125989e1d2b10b0e [ 79.908321][ T1428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.908338][ T1428] Call Trace: [ 79.908345][ T1428] [ 79.908354][ T1428] __dump_stack+0x21/0x30 [ 79.908387][ T1428] dump_stack_lvl+0x140/0x1c0 [ 79.908415][ T1428] ? __cfi_dump_stack_lvl+0x10/0x10 [ 79.908442][ T1428] dump_stack+0x19/0x20 [ 79.908469][ T1428] should_fail_ex+0x3d7/0x530 [ 79.908492][ T1428] should_failslab+0xac/0x100 [ 79.908523][ T1428] kmem_cache_alloc_noprof+0x42/0x410 [ 79.908549][ T1428] ? __kvm_mmu_topup_memory_cache+0x1eb/0x850 [ 79.908580][ T1428] __kvm_mmu_topup_memory_cache+0x1eb/0x850 [ 79.908612][ T1428] ? folio_mark_accessed+0x34b/0x620 [ 79.908662][ T1428] kvm_mmu_topup_memory_cache+0x24/0x30 [ 79.908699][ T1428] kvm_mmu_load+0xa2/0x2890 [ 79.908724][ T1428] ? __cfi__raw_spin_lock+0x10/0x10 [ 79.908755][ T1428] ? __kasan_check_write+0x18/0x20 [ 79.908779][ T1428] ? kvm_release_page_clean+0x10a/0x150 [ 79.908812][ T1428] ? kvm_apic_has_interrupt+0x4fa/0x7a0 [ 79.908838][ T1428] ? vmx_enable_irq_window+0x95/0x130 [ 79.908865][ T1428] vcpu_run+0x4dad/0x7840 [ 79.908906][ T1428] ? signal_pending+0xc0/0xc0 [ 79.908929][ T1428] ? __kasan_check_write+0x18/0x20 [ 79.908954][ T1428] ? xfd_validate_state+0x68/0x140 [ 79.908981][ T1428] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 79.909003][ T1428] ? __kasan_check_write+0x18/0x20 [ 79.909028][ T1428] ? fpregs_mark_activate+0x68/0x160 [ 79.909049][ T1428] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 79.909071][ T1428] kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0 [ 79.909099][ T1428] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 79.909124][ T1428] ? kstrtoull+0x13b/0x1e0 [ 79.909145][ T1428] ? kstrtouint+0x78/0xf0 [ 79.909164][ T1428] ? ioctl_has_perm+0x1bc/0x500 [ 79.909186][ T1428] ? __asan_memcpy+0x5a/0x80 [ 79.909211][ T1428] ? ioctl_has_perm+0x408/0x500 [ 79.909233][ T1428] ? has_cap_mac_admin+0xd0/0xd0 [ 79.909257][ T1428] ? __kasan_check_write+0x18/0x20 [ 79.909283][ T1428] ? mutex_lock_killable+0x97/0x1d0 [ 79.909308][ T1428] ? __cfi_mutex_lock_killable+0x10/0x10 [ 79.909332][ T1428] ? proc_fail_nth_write+0x184/0x220 [ 79.909356][ T1428] kvm_vcpu_ioctl+0xa48/0x1000 [ 79.909388][ T1428] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 79.909420][ T1428] ? __cfi_vfs_write+0x10/0x10 [ 79.909444][ T1428] ? __kasan_check_write+0x18/0x20 [ 79.909467][ T1428] ? mutex_unlock+0x90/0x240 [ 79.909488][ T1428] ? __cfi_mutex_unlock+0x10/0x10 [ 79.909510][ T1428] ? __fget_files+0x2c5/0x340 [ 79.909540][ T1428] ? __fget_files+0x2c5/0x340 [ 79.909569][ T1428] ? bpf_lsm_file_ioctl+0xd/0x20 [ 79.909589][ T1428] ? security_file_ioctl+0x3e/0x110 [ 79.909609][ T1428] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 79.909638][ T1428] __se_sys_ioctl+0x132/0x1b0 [ 79.909668][ T1428] __x64_sys_ioctl+0x7f/0xa0 [ 79.909706][ T1428] x64_sys_call+0x1878/0x2ee0 [ 79.909735][ T1428] do_syscall_64+0x57/0xf0 [ 79.909765][ T1428] ? clear_bhb_loop+0x50/0xa0 [ 79.909795][ T1428] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.909824][ T1428] RIP: 0033:0x7f5eaf99aeb9 [ 79.909842][ T1428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.909861][ T1428] RSP: 002b:00007f5eae3e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.909885][ T1428] RAX: ffffffffffffffda RBX: 00007f5eafc15fa0 RCX: 00007f5eaf99aeb9 [ 79.909902][ T1428] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 79.909916][ T1428] RBP: 00007f5eae3e3090 R08: 0000000000000000 R09: 0000000000000000 [ 79.909930][ T1428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 79.909944][ T1428] R13: 00007f5eafc16038 R14: 00007f5eafc15fa0 R15: 00007ffec1962368 [ 79.909964][ T1428] [ 79.911771][ T1449] SELinux: failed to load policy [ 80.294009][ T1450] SELinux: failed to load policy [ 80.344076][ T330] usbhid 3-1:0.0: can't add hid device: -71 [ 80.350179][ T330] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 80.358972][ T330] usb 3-1: USB disconnect, device number 34 [ 80.398371][ T375] usb 2-1: USB disconnect, device number 32 [ 80.546218][ T331] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 80.696252][ T331] usb 4-1: Invalid ep0 maxpacket: 64 [ 80.826207][ T331] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 80.976250][ T331] usb 4-1: Invalid ep0 maxpacket: 64 [ 80.981763][ T331] usb usb4-port1: attempt power cycle [ 81.038176][ T1478] syz.1.364: attempt to access beyond end of device [ 81.038176][ T1478] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 81.051315][ T1478] EXT4-fs (loop1): unable to read superblock [ 81.051734][ T1479] cgroup2: Unknown parameter 'trans' [ 81.086219][ T375] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 81.099923][ T1483] /dev/rnullb0: Can't open blockdev [ 81.146215][ T330] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 81.246204][ T375] usb 5-1: Using ep0 maxpacket: 8 [ 81.252892][ T375] usb 5-1: unable to get BOS descriptor or descriptor too short [ 81.261461][ T375] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.271827][ T375] usb 5-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 81.285469][ T375] usb 5-1: config 1 interface 0 has no altsetting 0 [ 81.294678][ T375] usb 5-1: string descriptor 0 read error: -22 [ 81.299157][ T330] usb 3-1: unable to get BOS descriptor or descriptor too short [ 81.301115][ T375] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 81.310215][ T330] usb 3-1: not running at top speed; connect to a high speed hub [ 81.317680][ T375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.327766][ T330] usb 3-1: config 1 has an invalid interface number: 121 but max is 0 [ 81.333606][ T331] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 81.342573][ T330] usb 3-1: config 1 has no interface number 0 [ 81.355488][ T330] usb 3-1: config 1 interface 121 has no altsetting 0 [ 81.362987][ T66] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 81.370916][ T331] usb 4-1: Invalid ep0 maxpacket: 64 [ 81.373811][ T330] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0504, bcdDevice=5a.51 [ 81.385947][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.394051][ T330] usb 3-1: Product: syz [ 81.398361][ T330] usb 3-1: Manufacturer: ,ꏊ婧엽䮑흠鳴숩ꔲ킄ᢩ辬졘ꚯ뫭㌏駔질⛸䫕ྃﱵ薶琇Ꮔ胬㍛᎝禂⮘紒栢퀁䩰ﱻ䮥飲ী쾘聨학즏᜹嬥㪑ഇ。耉棏 [ 81.416335][ T330] usb 3-1: SerialNumber: syz [ 81.506285][ T331] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 81.526234][ T66] usb 2-1: Using ep0 maxpacket: 8 [ 81.526898][ T331] usb 4-1: Invalid ep0 maxpacket: 64 [ 81.533475][ T66] usb 2-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 81.537611][ T331] usb usb4-port1: unable to enumerate USB device [ 81.548882][ T66] usb 2-1: config 0 interface 0 altsetting 127 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.564515][ T66] usb 2-1: config 0 interface 0 has no altsetting 0 [ 81.571230][ T66] usb 2-1: New USB device found, idVendor=056a, idProduct=032a, bcdDevice= 0.00 [ 81.572264][ T331] usb 5-1: USB disconnect, device number 25 [ 81.580715][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.600475][ T66] usb 2-1: config 0 descriptor?? [ 81.625915][ T330] usb 3-1: USB disconnect, device number 35 [ 82.008435][ T1486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.017167][ T1486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.025977][ T1486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.034643][ T1486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.044753][ T66] wacom 0003:056A:032A.0018: unknown main item tag 0x0 [ 82.051750][ T66] wacom 0003:056A:032A.0018: unknown main item tag 0x0 [ 82.058677][ T66] wacom 0003:056A:032A.0018: unknown main item tag 0x0 [ 82.066525][ T66] wacom 0003:056A:032A.0018: hidraw0: USB HID v0.03 Device [HID 056a:032a] on usb-dummy_hcd.1-1/input0 [ 82.251762][ T66] usb 2-1: USB disconnect, device number 33 [ 82.356221][ T331] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 82.376237][ T375] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 82.507736][ T331] usb 5-1: unable to get BOS descriptor or descriptor too short [ 82.516233][ T331] usb 5-1: config 2 has an invalid interface number: 34 but max is 2 [ 82.524353][ T331] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 82.534999][ T331] usb 5-1: config 2 has no interface number 0 [ 82.541253][ T331] usb 5-1: config 2 interface 1 altsetting 190 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 82.552309][ T331] usb 5-1: config 2 interface 34 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 82.565283][ T331] usb 5-1: config 2 interface 1 has no altsetting 0 [ 82.572118][ T331] usb 5-1: config 2 interface 34 has no altsetting 0 [ 82.579148][ T375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 82.590036][ T375] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 82.603033][ T375] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 82.612173][ T375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.621137][ T331] usb 5-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice=37.c4 [ 82.630257][ T331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.638626][ T375] usb 3-1: config 0 descriptor?? [ 82.643700][ T331] usb 5-1: Product: syz [ 82.647981][ T331] usb 5-1: Manufacturer: syz [ 82.649367][ T1493] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 82.653109][ T331] usb 5-1: SerialNumber: syz [ 82.781269][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 82.781288][ T36] audit: type=1400 audit(1769965909.864:349): avc: denied { bpf } for pid=1494 comm="syz.1.371" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 82.818364][ T1495] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=1495 comm=syz.1.371 [ 82.871341][ T331] usb 5-1: selecting invalid altsetting 0 [ 82.883423][ T331] usb 5-1: USB disconnect, device number 26 [ 82.920922][ T1493] FAULT_INJECTION: forcing a failure. [ 82.920922][ T1493] name failslab, interval 1, probability 0, space 0, times 0 [ 82.933725][ T1493] CPU: 1 UID: 0 PID: 1493 Comm: syz.2.370 Not tainted syzkaller #0 001c7e68fa735976e9f6b7ad125989e1d2b10b0e [ 82.933763][ T1493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.933774][ T1493] Call Trace: [ 82.933780][ T1493] [ 82.933787][ T1493] __dump_stack+0x21/0x30 [ 82.933830][ T1493] dump_stack_lvl+0x140/0x1c0 [ 82.933857][ T1493] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.933886][ T1493] dump_stack+0x19/0x20 [ 82.933913][ T1493] should_fail_ex+0x3d7/0x530 [ 82.933930][ T1493] should_failslab+0xac/0x100 [ 82.933953][ T1493] kmem_cache_alloc_noprof+0x42/0x410 [ 82.933993][ T1493] ? __kvm_mmu_topup_memory_cache+0x1eb/0x850 [ 82.934024][ T1493] __kvm_mmu_topup_memory_cache+0x1eb/0x850 [ 82.934057][ T1493] ? folio_mark_accessed+0x34b/0x620 [ 82.934083][ T1493] kvm_mmu_topup_memory_cache+0x24/0x30 [ 82.934104][ T1493] kvm_mmu_load+0xa2/0x2890 [ 82.934142][ T1493] ? __cfi__raw_spin_lock+0x10/0x10 [ 82.934174][ T1493] ? __kasan_check_write+0x18/0x20 [ 82.934204][ T1493] ? kvm_release_page_clean+0x10a/0x150 [ 82.934228][ T1493] ? kvm_apic_has_interrupt+0x4fa/0x7a0 [ 82.934248][ T1493] ? vmx_enable_irq_window+0x95/0x130 [ 82.934286][ T1493] vcpu_run+0x4dad/0x7840 [ 82.934326][ T1493] ? signal_pending+0xc0/0xc0 [ 82.934355][ T1493] ? __kasan_check_write+0x18/0x20 [ 82.934373][ T1493] ? xfd_validate_state+0x68/0x140 [ 82.934392][ T1493] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 82.934408][ T1493] ? __kasan_check_write+0x18/0x20 [ 82.934451][ T1493] ? fpregs_mark_activate+0x68/0x160 [ 82.934473][ T1493] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 82.934494][ T1493] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 82.934526][ T1493] kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0 [ 82.934550][ T1493] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 82.934585][ T1493] ? kstrtoull+0x13b/0x1e0 [ 82.934606][ T1493] ? kstrtouint+0x78/0xf0 [ 82.934626][ T1493] ? ioctl_has_perm+0x1bc/0x500 [ 82.934648][ T1493] ? __asan_memcpy+0x5a/0x80 [ 82.934678][ T1493] ? ioctl_has_perm+0x408/0x500 [ 82.934693][ T1493] ? has_cap_mac_admin+0xd0/0xd0 [ 82.934709][ T1493] ? __kasan_check_write+0x18/0x20 [ 82.934748][ T1493] ? mutex_lock_killable+0x97/0x1d0 [ 82.934771][ T1493] ? __cfi_mutex_lock_killable+0x10/0x10 [ 82.934794][ T1493] ? proc_fail_nth_write+0x184/0x220 [ 82.934819][ T1493] kvm_vcpu_ioctl+0xa48/0x1000 [ 82.934842][ T1493] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 82.934879][ T1493] ? __cfi_vfs_write+0x10/0x10 [ 82.934906][ T1493] ? __kasan_check_write+0x18/0x20 [ 82.934929][ T1493] ? mutex_unlock+0x90/0x240 [ 82.934952][ T1493] ? __cfi_mutex_unlock+0x10/0x10 [ 82.934972][ T1493] ? __fget_files+0x2c5/0x340 [ 82.934995][ T1493] ? __fget_files+0x2c5/0x340 [ 82.935031][ T1493] ? bpf_lsm_file_ioctl+0xd/0x20 [ 82.935053][ T1493] ? security_file_ioctl+0x3e/0x110 [ 82.935073][ T1493] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 82.935107][ T1493] __se_sys_ioctl+0x132/0x1b0 [ 82.935131][ T1493] __x64_sys_ioctl+0x7f/0xa0 [ 82.935152][ T1493] x64_sys_call+0x1878/0x2ee0 [ 82.935192][ T1493] do_syscall_64+0x57/0xf0 [ 82.935222][ T1493] ? clear_bhb_loop+0x50/0xa0 [ 82.935253][ T1493] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.935279][ T1493] RIP: 0033:0x7f5eaf99aeb9 [ 82.935293][ T1493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.935306][ T1493] RSP: 002b:00007f5eae3e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.935342][ T1493] RAX: ffffffffffffffda RBX: 00007f5eafc15fa0 RCX: 00007f5eaf99aeb9 [ 82.935358][ T1493] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 82.935371][ T1493] RBP: 00007f5eae3e3090 R08: 0000000000000000 R09: 0000000000000000 [ 82.935384][ T1493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 82.935397][ T1493] R13: 00007f5eafc16038 R14: 00007f5eafc15fa0 R15: 00007ffec1962368 [ 82.935419][ T1493] [ 83.340577][ T375] usbhid 3-1:0.0: can't add hid device: -71 [ 83.346648][ T375] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 83.360342][ T375] usb 3-1: USB disconnect, device number 36 [ 83.446255][ T330] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 83.576253][ T330] usb 2-1: device descriptor read/64, error -71 [ 83.726199][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 83.816637][ T330] usb 2-1: device descriptor read/64, error -71 [ 83.927380][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 83.937387][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 83.947484][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 83.957348][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 83.973757][ T9] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 83.983061][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.991269][ T9] usb 4-1: Product: syz [ 83.995785][ T9] usb 4-1: Manufacturer: syz [ 84.000853][ T9] usb 4-1: SerialNumber: syz [ 84.010573][ T9] usb 4-1: config 0 descriptor?? [ 84.018270][ T9] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 84.086229][ T375] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 84.116257][ T330] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 84.225160][ T1521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.236446][ T1521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.245926][ T375] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.257283][ T9] scsi host1: usb-storage 4-1:0.0 [ 84.265650][ T375] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 84.268735][ T330] usb 2-1: device descriptor read/64, error -71 [ 84.278778][ T9] usb 4-1: USB disconnect, device number 40 [ 84.287086][ T375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.298230][ T375] usb 5-1: config 0 descriptor?? [ 84.546262][ T330] usb 2-1: device descriptor read/64, error -71 [ 84.656331][ T330] usb usb2-port1: attempt power cycle [ 84.720640][ T375] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 84.756714][ T375] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0019/input/input22 [ 84.836914][ T375] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 84.985444][ C0] usb 5-1: input irq status -75 received [ 84.996248][ T330] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 85.017276][ T330] usb 2-1: device descriptor read/8, error -71 [ 85.056217][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 85.147311][ T330] usb 2-1: device descriptor read/8, error -71 [ 85.196208][ T36] audit: type=1400 audit(1769965912.274:350): avc: denied { map } for pid=1531 comm="syz.2.380" path="socket:[12200]" dev="sockfs" ino=12200 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.227189][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.246195][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.256109][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 85.269109][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 85.278240][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.291222][ T9] usb 4-1: config 0 descriptor?? [ 85.386242][ T330] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 85.407701][ T330] usb 2-1: device descriptor read/8, error -71 [ 85.537352][ T330] usb 2-1: device descriptor read/8, error -71 [ 85.646317][ T330] usb usb2-port1: unable to enumerate USB device [ 85.701926][ T9] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x2 [ 85.709529][ T9] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x1 [ 85.717203][ T9] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x4 [ 85.724660][ T9] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 85.732331][ T9] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 85.740018][ T9] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 85.747508][ T9] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 85.755131][ T9] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 85.763057][ T9] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 85.770532][ T9] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 85.777998][ T9] plantronics 0003:047F:FFFF.001A: unbalanced collection at end of report description [ 85.787889][ T9] plantronics 0003:047F:FFFF.001A: parse failed [ 85.794195][ T9] plantronics 0003:047F:FFFF.001A: probe with driver plantronics failed with error -22 [ 85.912134][ T330] usb 4-1: USB disconnect, device number 41 [ 86.256246][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 86.365862][ T36] audit: type=1400 audit(1769965913.444:351): avc: denied { create } for pid=1543 comm="syz.2.383" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=bluetooth_socket permissive=1 [ 86.386399][ T36] audit: type=1400 audit(1769965913.454:352): avc: denied { create } for pid=1543 comm="syz.2.383" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 86.407153][ T36] audit: type=1400 audit(1769965913.454:353): avc: denied { setopt } for pid=1543 comm="syz.2.383" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 86.427654][ T36] audit: type=1400 audit(1769965913.474:354): avc: denied { create } for pid=1543 comm="syz.2.383" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 86.452656][ T36] audit: type=1400 audit(1769965913.474:355): avc: denied { write } for pid=1543 comm="syz.2.383" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 86.458684][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 86.485019][ T36] audit: type=1400 audit(1769965913.474:356): avc: denied { nlmsg_write } for pid=1543 comm="syz.2.383" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 86.506813][ T1547] usb usb6: usbfs: process 1547 (syz.2.383) did not claim interface 6 before use [ 86.516493][ T36] audit: type=1400 audit(1769965913.504:357): avc: denied { create } for pid=1543 comm="syz.2.383" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 86.537455][ T36] audit: type=1400 audit(1769965913.514:358): avc: denied { getattr } for pid=1543 comm="syz.2.383" path="socket:[12292]" dev="sockfs" ino=12292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 86.562389][ T9] usb 2-1: config 2 has an invalid interface number: 106 but max is 1 [ 86.570707][ T9] usb 2-1: config 2 has an invalid interface number: 75 but max is 1 [ 86.580685][ T9] usb 2-1: config 2 has no interface number 0 [ 86.586860][ T9] usb 2-1: config 2 has no interface number 1 [ 86.593180][ T9] usb 2-1: config 2 interface 106 has no altsetting 0 [ 86.600085][ T9] usb 2-1: config 2 interface 75 has no altsetting 0 [ 86.615755][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c11f, bcdDevice=8a.13 [ 86.624904][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.633231][ T9] usb 2-1: Product: syz [ 86.637523][ T9] usb 2-1: Manufacturer: syz [ 86.642178][ T9] usb 2-1: SerialNumber: syz [ 86.713600][ T1550] overlayfs: failed to resolve './file0': -2 [ 86.766368][ T330] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 86.813451][ T375] usb 5-1: USB disconnect, device number 27 [ 86.844348][ T1554] netlink: 'syz.4.386': attribute type 58 has an invalid length. [ 86.851398][ T9] usb 2-1: unsupported MDLM descriptors [ 86.864259][ T9] usb 2-1: USB disconnect, device number 38 [ 86.917493][ T330] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.927704][ T330] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.937481][ T330] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.947635][ T330] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.956777][ T446] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 86.965471][ T330] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.975640][ T330] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.985453][ T330] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.995643][ T330] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.005352][ T330] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.015518][ T330] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.024436][ T330] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0000, bcdDevice= 0.00 [ 87.033614][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.116187][ T446] usb 3-1: Using ep0 maxpacket: 16 [ 87.122627][ T446] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.133637][ T446] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.143458][ T446] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 87.152562][ T446] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.161411][ T446] usb 3-1: config 0 descriptor?? [ 87.166592][ T375] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 87.244554][ T1548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.253243][ T1548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.262776][ T330] usb 4-1: string descriptor 0 read error: -71 [ 87.270618][ T330] usb 4-1: USB disconnect, device number 42 [ 87.317903][ T375] usb 5-1: unable to get BOS descriptor or descriptor too short [ 87.326110][ T375] usb 5-1: not running at top speed; connect to a high speed hub [ 87.334719][ T375] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.344966][ T375] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.356560][ T375] usb 5-1: string descriptor 0 read error: -22 [ 87.363014][ T375] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 87.372285][ T375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.382398][ T446] playstation 0003:054C:05C4.001B: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.2-1/input0 [ 87.398645][ T375] usb 5-1: 0:2 : does not exist [ 87.575654][ T446] playstation 0003:054C:05C4.001B: Invalid byte count transferred, expected 16 got 0 [ 87.585253][ T446] playstation 0003:054C:05C4.001B: Failed to retrieve DualShock4 pairing info: -22 [ 87.594645][ T446] playstation 0003:054C:05C4.001B: Failed to get MAC address from DualShock4 [ 87.603570][ T446] playstation 0003:054C:05C4.001B: Failed to create dualshock4. [ 87.612343][ T446] playstation 0003:054C:05C4.001B: probe with driver playstation failed with error -22 [ 87.864424][ T1569] netlink: 'syz.3.390': attribute type 15 has an invalid length. [ 87.866866][ T36] audit: type=1400 audit(1769965914.944:359): avc: denied { nlmsg_read } for pid=1568 comm="syz.3.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 87.924054][ T1574] netlink: 'syz.3.391': attribute type 4 has an invalid length. [ 87.932245][ T1574] netlink: 'syz.3.391': attribute type 5 has an invalid length. [ 87.940794][ T1574] netlink: 'syz.3.391': attribute type 1 has an invalid length. [ 87.976627][ T36] audit: type=1400 audit(1769965915.064:360): avc: denied { setopt } for pid=1583 comm="syz.3.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.000826][ T36] audit: type=1400 audit(1769965915.084:361): avc: denied { bind } for pid=1583 comm="syz.3.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.020246][ T1554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1554 comm=syz.4.386 [ 88.047077][ T36] audit: type=1400 audit(1769965915.134:362): avc: denied { bind } for pid=1589 comm="syz.1.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.236209][ T9] usb 4-1: new low-speed USB device number 43 using dummy_hcd [ 88.326187][ T10] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 88.387424][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.397741][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 15 [ 88.406919][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 88.416656][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 88.431711][ T9] usb 4-1: string descriptor 0 read error: -22 [ 88.438002][ T1554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.439966][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 88.449072][ T1554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.456268][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.466273][ T1554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1554 comm=syz.4.386 [ 88.488036][ T10] usb 2-1: descriptor type invalid, skip [ 88.493739][ T10] usb 2-1: No LPM exit latency info found, disabling LPM. [ 88.502365][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 88.513123][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 88.523130][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 88.535223][ T10] usb 2-1: string descriptor 0 read error: -22 [ 88.541536][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.550649][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.559883][ T1592] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 88.775105][ T1592] ------------[ cut here ]------------ [ 88.780713][ T1592] WARNING: CPU: 1 PID: 1592 at mm/page_alloc.c:5234 __alloc_pages_noprof+0x109/0x7e0 [ 88.790277][ T1592] Modules linked in: [ 88.794226][ T1592] CPU: 1 UID: 0 PID: 1592 Comm: syz.1.396 Not tainted syzkaller #0 001c7e68fa735976e9f6b7ad125989e1d2b10b0e [ 88.806610][ T1592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.816745][ T1592] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 88.822781][ T1592] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 9a b7 0b 06 00 0f 85 c2 00 00 00 c6 05 8d b7 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 88.842488][ T1592] RSP: 0018:ffffc900110a7640 EFLAGS: 00010246 [ 88.848620][ T1592] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000 [ 88.856674][ T1592] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900110a76f8 [ 88.864697][ T1592] RBP: ffffc900110a7780 R08: ffffc900110a76f7 R09: 0000000000000000 [ 88.872765][ T1592] R10: ffffc900110a76e0 R11: fffff52002214edf R12: ffffc900110a7680 [ 88.880816][ T1592] R13: dffffc0000000000 R14: 1ffff92002214ecc R15: 0000000000000000 [ 88.888872][ T1592] FS: 00007fb909fa56c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 88.897913][ T1592] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.904547][ T1592] CR2: 000020000000f000 CR3: 000000010938c000 CR4: 00000000003526b0 [ 88.912620][ T1592] Call Trace: [ 88.914947][ T375] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 88.915942][ T1592] [ 88.915955][ T1592] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 88.915991][ T1592] ? __kasan_slab_alloc+0x73/0x90 [ 88.931650][ T375] usb 5-1: Warning! Unlikely big volume range (=4294967294), cval->res is probably wrong. [ 88.931958][ T1592] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 88.937718][ T375] usb 5-1: [5] FU [Mic Capture Volume] ch = 1, val = -4256/20196/-11476 [ 88.947089][ T1592] ? hashtab_init+0xdb/0x1f0 [ 88.947131][ T1592] ___kmalloc_large_node+0x81/0x210 [ 88.959278][ T375] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 88.961260][ T1592] ? hashtab_init+0xdb/0x1f0 [ 88.977384][ T375] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 88.978591][ T1592] __kmalloc_large_node_noprof+0x1e/0xd0 [ 88.996118][ T1592] ? hashtab_init+0xdb/0x1f0 [ 88.999839][ T9] usb 4-1: 0:2 : does not exist [ 89.000796][ T1592] __kmalloc_noprof+0x326/0x500 [ 89.010579][ T1592] ? __cfi_ebitmap_read+0x10/0x10 [ 89.015668][ T1592] hashtab_init+0xdb/0x1f0 [ 89.015689][ T375] usb 5-1: USB disconnect, device number 28 [ 89.015711][ T1592] ? policydb_read+0x87f/0x28b0 [ 89.015737][ T1592] symtab_init+0x44/0x70 [ 89.035265][ T1592] policydb_read+0x90e/0x28b0 [ 89.040079][ T1592] ? __kasan_kmalloc+0x96/0xb0 [ 89.044917][ T1592] ? __cfi_policydb_read+0x10/0x10 [ 89.050127][ T1592] ? security_load_policy+0x130/0x12d0 [ 89.055651][ T1592] security_load_policy+0x16a/0x12d0 [ 89.061050][ T1592] ? irqentry_exit+0x4a/0x60 [ 89.065698][ T1592] ? asm_exc_page_fault+0x2b/0x30 [ 89.066738][ T9] usb 4-1: USB disconnect, device number 43 [ 89.070812][ T1592] ? __cfi_security_load_policy+0x10/0x10 [ 89.082538][ T1592] ? rep_movs_alternative+0x4a/0xa0 [ 89.087826][ T1592] sel_write_load+0x2a7/0x5f0 [ 89.092602][ T1592] ? __cfi_sel_write_load+0x10/0x10 [ 89.097899][ T1592] ? __fget_files+0x2c5/0x340 [ 89.102641][ T1592] ? bpf_lsm_file_permission+0xd/0x20 [ 89.108122][ T1592] ? __cfi_sel_write_load+0x10/0x10 [ 89.113380][ T1592] vfs_write+0x3c8/0xf90 [ 89.117712][ T1592] ? __cfi_vfs_write+0x10/0x10 [ 89.122534][ T1592] ? __kasan_check_write+0x18/0x20 [ 89.127732][ T1592] ? mutex_lock+0x97/0x1d0 [ 89.132196][ T1592] ? __cfi_mutex_lock+0x10/0x10 [ 89.137140][ T1592] ? __fget_files+0x2c5/0x340 [ 89.141894][ T1592] ksys_write+0x145/0x260 [ 89.146304][ T1592] ? __cfi_ksys_write+0x10/0x10 [ 89.151212][ T1592] ? __kasan_check_write+0x18/0x20 [ 89.156399][ T1592] ? fpregs_restore_userregs+0x11c/0x260 [ 89.162111][ T1592] __x64_sys_write+0x7f/0x90 [ 89.166789][ T1592] x64_sys_call+0x271c/0x2ee0 [ 89.171539][ T1592] do_syscall_64+0x57/0xf0 [ 89.176012][ T1592] ? clear_bhb_loop+0x50/0xa0 [ 89.180799][ T1592] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 89.186783][ T1592] RIP: 0033:0x7fb90919aeb9 [ 89.191237][ T1592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.210959][ T1592] RSP: 002b:00007fb909fa5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 89.219460][ T1592] RAX: ffffffffffffffda RBX: 00007fb909415fa0 RCX: 00007fb90919aeb9 [ 89.227502][ T1592] RDX: 000000000000ffaf RSI: 0000200000000000 RDI: 0000000000000004 [ 89.235520][ T1592] RBP: 00007fb909208c1f R08: 0000000000000000 R09: 0000000000000000 [ 89.243577][ T1592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.251622][ T1592] R13: 00007fb909416038 R14: 00007fb909415fa0 R15: 00007fff7a45aad8 [ 89.259677][ T1592] [ 89.262733][ T1592] ---[ end trace 0000000000000000 ]--- [ 89.268322][ T1592] SELinux: failed to load policy [ 89.282186][ T10] cdc_ncm 2-1:1.0: bind() failure [ 89.289088][ T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 89.295913][ T10] cdc_ncm 2-1:1.1: bind() failure [ 89.303361][ T10] usb 2-1: USB disconnect, device number 39 [ 89.722883][ T446] usb 3-1: USB disconnect, device number 37