last executing test programs: 16.404662433s ago: executing program 3 (id=266): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0, 0x0, 0x0, 0xfe80}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0801000000000025"], 0x108}}], 0x2, 0xc040) 16.371927734s ago: executing program 3 (id=267): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @multicast2}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0)) (fail_nth: 4) 16.270216486s ago: executing program 3 (id=268): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf0\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\x05\x00\x00\x00\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) syz_usb_connect(0x2, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0xd, 0x20, 0x55, 0x8, 0x403, 0xda70, 0x7f3f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x2, 0x90, 0x3b, "", [{{0x9, 0x4, 0x63, 0xf, 0x0, 0x90, 0x92, 0x8d, 0x80}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x457}}, {0x37, &(0x7f0000000040)=@string={0x37, 0x3, "dea11139b0cec645e324f61ae760f3ff5e2154cfbcc3e4f72d3edf142118e5db1ede84cf9431844db15d4b31deb343318f54e27384"}}]}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x1000007}) fcntl$addseals(r1, 0x409, 0xb) 14.906522956s ago: executing program 3 (id=276): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x0, 0x200, 0x6, 0x875f, 0x7, 'B\x00!_\x00', 0x4000000, 0x400}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @multicast2}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) pwrite64(r2, &(0x7f0000000200)='\x00', 0x1, 0x2e7a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x8, 0x4, 0x6, 0xd2d0, 0x1, 0x5, 0x0, 0x91, 0xffffffff, 0x101, 0x3, 0x0, 0x7f, 0x0, 0x7, 0x40, 0x0, 0x200008, 0xa, 0xa000000}}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r5, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x64008000) r6 = openat$incfs(r1, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f00000001c0), 0x2}, {0x3, &(0x7f0000000140)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0xc058671e, &(0x7f00000000c0)) 14.863510117s ago: executing program 3 (id=277): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x1) (async) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x1) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r0, &(0x7f0000000100)=@abs={0x27}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3d) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000080}]}) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000080}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="f3400fbd2b0f07b805000000b90a000000450fc7a5005800002e44d3db48b8d3dc0000000000000f23c00f21f835010006000f23f8c4422d926ce70766baf80cb8303ccc85ef66bafc0cb80ee60000ef66baa100eeb95b030000b808000000ba000000000f30b805000000b9f34400000f01d9", 0x73}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000000380)={0x160003, 0x0, {[0x7f, 0xf971, 0x0, 0x80000000, 0x17c1, 0xefc, 0x80000000]}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 14.747084669s ago: executing program 3 (id=278): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000103"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000080)={0x0, 0x23, 0x5, {0x5, 0x2, "65b305"}}, &(0x7f00000000c0)={0x0, 0x3, 0xd, @string={0xd, 0x3, "9c162f1987f515e025b616"}}, &(0x7f0000000140), 0x0}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x101800, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_usb_connect$midi(0x1, 0xdd, &(0x7f0000000200)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x30, 0x17cc, 0x839, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcb, 0x1, 0x1, 0x5, 0x40, 0xc, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x30, 0x6, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0xb, 0x1}, @midi_out_jack={0x9, 0x24, 0x3, 0x991302bd23a7fe, 0xf8, 0x1, [{0x7, 0x1}], 0xf}, @midi_out_jack={0x19, 0x24, 0x3, 0x2, 0x2, 0x9, [{0x2, 0xf7}, {0x1, 0x1}, {}, {0x6, 0x6}, {0x8, 0x3}, {0xff, 0xb}, {0x5, 0x5}, {0x7, 0xd3}, {0x6c, 0x28}], 0x8}, @ms_header={0x7, 0x24, 0x1, 0x1, 0x7}], [{{0x9, 0x5, 0xa, 0x0, 0x0, 0x0, 0x6, 0x65, {0xc, 0x25, 0x1, 0x8, "4c31c2d568424388"}}}, {{0x9, 0x5, 0xc60b0a3dd2a7d581, 0x0, 0x0, 0xf1, 0x67, 0x41, {0x9, 0x25, 0x1, 0x5, "7eccbc65d5"}}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x0, 0x6, 0x0, {0x14, 0x25, 0x1, 0x10, "2ba2b9ca9d36118925addd0e872fa2d0"}}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x5, 0x4, 0x4, {0x13, 0x25, 0x1, 0xf, "678555d8f4c357717dc9430d572646"}}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x2, 0xf7, 0x9, {0x5, 0x25, 0x1, 0x1, '@'}}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0xbc, 0x7, 0x3, {0x13, 0x25, 0x1, 0xf, "13914dc9de5a9c31474ee4eb1100b8"}}}]}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x201, 0xc, 0x1, 0x4, 0x20, 0x8}, 0x3f, &(0x7f00000003c0)={0x5, 0xf, 0x3f, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x3, 0xf, 0x5, [0x0, 0x3f00]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "adb3662ca8240142fb26d2e5d3b5778c"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xd, 0x9, 0xee9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x5, 0x20, 0x8}]}, 0x6, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x480a}}, {0xaf, &(0x7f0000000540)=@string={0xaf, 0x3, "e928a5fe52822e6bdbbec06cb620ff9a887d2acb7dbf20aedf62568d4eed2bab81288f43c6adf8bf63d7f7ee25b703cd87157b3f57a831978059f5460d9a61d69cb3b30c227681ff32cd713cd35bc670aa3298775ef6083e0ffe676d4044a68ec13a4e0bdcd4d7d658196c4bbafb0577b8c99eb8f071eab9d85d83422e186bbf25c6dd6102e1778c02f6f693abb18fea13b651a05411d095e7b5c58e7c60cdb8db5e6fa110ef293d5dd0630e73"}}]}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d3, &(0x7f0000000000)) 14.729160109s ago: executing program 32 (id=278): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000103"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000080)={0x0, 0x23, 0x5, {0x5, 0x2, "65b305"}}, &(0x7f00000000c0)={0x0, 0x3, 0xd, @string={0xd, 0x3, "9c162f1987f515e025b616"}}, &(0x7f0000000140), 0x0}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x101800, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_usb_connect$midi(0x1, 0xdd, &(0x7f0000000200)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x30, 0x17cc, 0x839, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcb, 0x1, 0x1, 0x5, 0x40, 0xc, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x30, 0x6, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0xb, 0x1}, @midi_out_jack={0x9, 0x24, 0x3, 0x991302bd23a7fe, 0xf8, 0x1, [{0x7, 0x1}], 0xf}, @midi_out_jack={0x19, 0x24, 0x3, 0x2, 0x2, 0x9, [{0x2, 0xf7}, {0x1, 0x1}, {}, {0x6, 0x6}, {0x8, 0x3}, {0xff, 0xb}, {0x5, 0x5}, {0x7, 0xd3}, {0x6c, 0x28}], 0x8}, @ms_header={0x7, 0x24, 0x1, 0x1, 0x7}], [{{0x9, 0x5, 0xa, 0x0, 0x0, 0x0, 0x6, 0x65, {0xc, 0x25, 0x1, 0x8, "4c31c2d568424388"}}}, {{0x9, 0x5, 0xc60b0a3dd2a7d581, 0x0, 0x0, 0xf1, 0x67, 0x41, {0x9, 0x25, 0x1, 0x5, "7eccbc65d5"}}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x0, 0x6, 0x0, {0x14, 0x25, 0x1, 0x10, "2ba2b9ca9d36118925addd0e872fa2d0"}}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x5, 0x4, 0x4, {0x13, 0x25, 0x1, 0xf, "678555d8f4c357717dc9430d572646"}}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x2, 0xf7, 0x9, {0x5, 0x25, 0x1, 0x1, '@'}}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0xbc, 0x7, 0x3, {0x13, 0x25, 0x1, 0xf, "13914dc9de5a9c31474ee4eb1100b8"}}}]}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x201, 0xc, 0x1, 0x4, 0x20, 0x8}, 0x3f, &(0x7f00000003c0)={0x5, 0xf, 0x3f, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x3, 0xf, 0x5, [0x0, 0x3f00]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "adb3662ca8240142fb26d2e5d3b5778c"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xd, 0x9, 0xee9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x5, 0x20, 0x8}]}, 0x6, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x480a}}, {0xaf, &(0x7f0000000540)=@string={0xaf, 0x3, "e928a5fe52822e6bdbbec06cb620ff9a887d2acb7dbf20aedf62568d4eed2bab81288f43c6adf8bf63d7f7ee25b703cd87157b3f57a831978059f5460d9a61d69cb3b30c227681ff32cd713cd35bc670aa3298775ef6083e0ffe676d4044a68ec13a4e0bdcd4d7d658196c4bbafb0577b8c99eb8f071eab9d85d83422e186bbf25c6dd6102e1778c02f6f693abb18fea13b651a05411d095e7b5c58e7c60cdb8db5e6fa110ef293d5dd0630e73"}}]}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d3, &(0x7f0000000000)) 6.43526866s ago: executing program 2 (id=325): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00220f000000b01b4550182185f57586b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000180), 0x0, 0x20000) ioctl$OCFS2_IOC_UNRESVSP(r1, 0x40305829, &(0x7f00000001c0)={0x0, 0x0, 0x8000000000000000, 0x6, 0x4, 0x40}) 3.455482295s ago: executing program 2 (id=354): mount$incfs(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100), 0xa18082, 0x0) (fail_nth: 23) 3.322114728s ago: executing program 1 (id=357): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8041}, 0x4000052) mount$cgroup(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x800006, &(0x7f0000000600)={[{@none}]}) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x2, 0x0, 0x42}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000040)={0x2, 'vlan0\x00', {0x7}, 0x2}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r6, &(0x7f0000000100)="84abad4b267d81fbf8", 0xfffffffffffffe4e, 0x4048010, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x9, 0xfff}, {0xd8, 0x8}]}}) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x502, 0x0, 0x0, {0x5, 0x0, 0xa}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x8080) 3.116581252s ago: executing program 2 (id=360): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300100000000000fbdbdf2500000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a0060803b00"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc00"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) (fail_nth: 6) 3.043175333s ago: executing program 2 (id=361): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x10, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003d40)=""/4063, 0xfdf}, {&(0x7f0000000300)=""/202, 0xca}, {&(0x7f0000000500)=""/85, 0x55}, {&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000002d00)=""/4106, 0x100a}, {&(0x7f0000000400)=""/242, 0xf2}, {&(0x7f00000009c0)=""/244, 0xf4}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000007c0)=""/238, 0xee}, {&(0x7f0000000000)=""/113, 0x71}], 0xa}, 0x5e}, {{0x0, 0x24cc, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1f75}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x99c5}, {{0x0, 0x0, 0x0}, 0x2090d2}, {{0x0, 0x0, 0x0}, 0xe52}, {{0x0, 0x0, 0x0}, 0x7a}], 0x8, 0x40000040, 0x0) 3.043076493s ago: executing program 2 (id=362): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00220f000000b01b4550182185f57586b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000180), 0x0, 0x20000) ioctl$OCFS2_IOC_UNRESVSP(r1, 0x40305829, &(0x7f00000001c0)={0x0, 0x0, 0x8000000000000000, 0x6, 0x4, 0x40}) 1.432371859s ago: executing program 4 (id=364): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x6040000, 0x8000}) 1.37916515s ago: executing program 4 (id=365): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x3) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be00442c", @ANYRESDEC=r2], 0xfdef) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 1.379077359s ago: executing program 4 (id=366): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0xf00) 1.37897031s ago: executing program 4 (id=367): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f0000000100)=[{0x6, 0x40, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.36018385s ago: executing program 4 (id=368): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x28d5, 0x200, 0x6, 0x7, 0xcc, 'B\x00!_\x00', 0x4000000, 0x402}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @multicast2}, 0xc) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x800, 0x4) io_setup(0x3, &(0x7f0000000400)=0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r2, &(0x7f00000002c0)={@void, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x1, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x5c, 0x67, 0x4000, 0x7, 0x1, 0x0, @rand_addr=0x64010100, @local}, @redirect={0x5, 0x3, 0x0, @broadcast, {0x10, 0x4, 0x0, 0x4, 0x6, 0x65, 0x1, 0x8, 0x29, 0xf, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x17, 0xa2, [@empty, @broadcast, @remote, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x12, 0x3, [{0x1, 0x5, "1b3a89"}, {0x1, 0x7, "807c45a964"}]}]}}}}}}}}, 0x72) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xe11, r0, 0x0, 0x0, 0x4, 0x0, 0x0, r0}]) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x440040, 0x0) sendto(r5, &(0x7f0000000300)="255d226a16eb0074f53d95ae3d71dfa616dc8c4fea810d56d815b9f5dedd400dc3f0284ab8d8e5613af1bb99f6e5509dfc2da066c19eead56aa9e19e913895517a5b63489dc93713bfffcee12411272a319a8def2918c555f8750e702d53243dfdff59fc6fa47ca386c33f191f6c9f92d63a1f90aa11dfe35521", 0x7a, 0x4008005, &(0x7f0000000380)=@qipcrtr={0x2a, 0x2, 0x3fff}, 0x80) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) clock_settime(0xcc80f84dcac64fc7, &(0x7f0000000680)) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r8, 0x4008ae48, 0xffffffffffffffff) r9 = openat$incfs(r6, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r9, 0xc058671e, &(0x7f00000000c0)) 1.224613173s ago: executing program 4 (id=369): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) 387.174311ms ago: executing program 0 (id=370): openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x2}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0xc07, 0x10000021, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4040084}, 0xc050) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x4, 0x2}}, 0x10) 386.913821ms ago: executing program 0 (id=371): setresgid(0xee00, 0x0, 0x0) r0 = getpgrp(0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x7, 0x1) kcmp(r0, r0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007150000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e00fe8000000000000000000000000000bb2400090003000000000000000100000000000080b40000000000000005"], 0x128}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0x7, 0x0, 0x60000, 0x0, 0x2000000001}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 386.821941ms ago: executing program 0 (id=372): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x44c}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 381.160211ms ago: executing program 0 (id=373): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x101800, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c9, &(0x7f0000000000)) 371.535122ms ago: executing program 0 (id=374): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x80000000000) 329.972682ms ago: executing program 0 (id=375): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000080)={0x20, 0x22, 0xe9, {0xe9, 0xa, "2fc441f47ccff0c2720c3cdba82b418ac2dc01e3fccc8eea80e1ab03f2b14394c7c37e3892ffc38c29c94598920171261e27d7f80b3c583385d0fb71d2f852bed87da3a9abfab2ffbcef53f48cbfdcc405c36a79c256d7c6cc1d81ecdba47a80d3d362b88438d74df42cb0ff45c7cdf9cbd6d84df7badc16b10b4b27ada2f0479984bd1a98484c63b5f4b2b1dc62a1d3c8c6b4c5d440caa65a6707f84bdb8153e09bd7a387c9b638e8e8a9739ac646f74ffe4723cbbe21860d018a02e6d94160588e4097e111280e78cffc339a5270fb207ec09813f598c4796d2e5829f018a9c94d17c97cdd84"}}, &(0x7f0000000180)={0x0, 0x3, 0xac, @string={0xac, 0x3, "55dff7f0441515904468d16e0633e23a330e04e38efe65119f30e8bcc058d9f8d2eec9061f1690aecbf93c844ab0594ea853061a5f554417e0a37150475af7957d1ce86e2ecde821db8030dbba8391d790915fb0dca204d4417d26b7fad3068e2a8b3fe608ffea03580f5014bae668358ff02e1571477c35daf960eb6cf1ba3ffd71dbdfe091f14bb41f29a0ef66d61d6a44ab9efcdf04929ebda978f5cc1a7a43029c8bb0b853e663cd"}}, &(0x7f0000000240)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x8, 0x3, 0x3, "c5cb4520", "c1c7407a"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x79, 0x80, 0x6, 0x1, 0x3, 0x7ff, 0x6144}}}, &(0x7f0000000780)={0x84, &(0x7f0000000340)={0x40, 0x1e, 0x49, "d77e7ab030e9c65ead36deef19b2e7fccba1a3910aaf36cf216f4f49fbb279209b596849f219e18296a0cacaa42fd3a8313f4f62bc210d5c17bae3c26d5587c3b8b55f5c7c5eaa9c15"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xd2}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x20, 0x2, [0x0]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000540)={0x40, 0xb, 0x2, "f4ac"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x1000}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000600)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x19, 0x2, "dc6a"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x8001}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0xfb}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x5}}) r1 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000840)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe, 0x80, 0xc, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x1, 0xa, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x3, 0x0, 0xc}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x10, 0xa, 0x80}}]}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x201, 0x5, 0x2, 0x5, 0x8, 0x20}, 0xf, &(0x7f00000008c0)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x16, 0x5, 0x6, 0x7}, @ptm_cap={0x3}]}, 0x3, [{0xbc, &(0x7f0000000900)=@string={0xbc, 0x3, "da422892b2853bf9bf600fcc1c737a44696467ebda46358b0b1c73b92a3bc4ae72c9d9af346f8b80a5047b5266d6fb0c8ff97e8d476ccaa91a8df5afeb014f806878b37cca74f457ba0e312a878277a44621da8714cf18b52322a68084f51a8e3cde031e2caae4abe397233f7dd501739901cd8764f019fbec1174bf854720e7930dc5904f9b4f4280b8256927d18c0ccfd864cfcd9e16f685395e979c29b231d006a204e2ce074796cd2c0df04d388209b83c6d4daf088f6c34"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x2801}}, {0x9, &(0x7f0000000a00)=@string={0x9, 0x3, "69352a02ade2d2"}}]}) syz_usb_control_io$printer(r1, &(0x7f0000000b40)={0x14, &(0x7f0000000a80)={0x0, 0x21, 0x4e, {0x4e, 0x4, "3e358eef0b1c25b165516ab904507fb16faf8d9ae578ba03d0bf1a89cbed171f2f3616342d0149e46e41c73779305d633b6725ef60bcc4be337d50df299308400b6bd5376677c17fa5bd09a3"}}, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}}, &(0x7f0000000d80)={0x34, &(0x7f0000000b80)={0x0, 0x14, 0x16, "cc9aaa6e66cbab5efe63fc84d6893fcc78d33a09a3de"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x27}, &(0x7f0000000c40)={0x20, 0x0, 0x94, {0x92, "9ccb7887fb91b68d06864d9ceac67f7ce3a5c18b7468f55a4376a8b1d56a92766c974d38c928cae402a20877860d5b29ce3a99a3fe4e239686c1789688bdb8417aeb6c4de73f3c1a5163f7ea6820581052bbf842fd7f41345b9b39467cf5a4f2204d82b6fd5b5ab3c31ed4fd8234dac16e10659048edf42bdd74b6165c84b9e87e1a22356d106e42d4eda2ec40c94cef007d"}}, &(0x7f0000000d00)={0x20, 0x1, 0x1, 0x88}, &(0x7f0000000d40)={0x20, 0x0, 0x1, 0x2}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000dc0)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000e00)=r3) syz_usb_disconnect(r0) ioprio_set$pid(0x2, r3, 0x2007) r4 = syz_usb_connect$cdc_ecm(0x4, 0x6f, &(0x7f0000000e40)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x1, 0x80, 0x10, 0xc6, "", [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x3ff, 0x2, 0xf7}, [@country_functional={0x8, 0x24, 0x7, 0xdf, 0x7, [0x2]}, @obex={0x5, 0x24, 0x15, 0xd2}, @dmm={0x7, 0x24, 0x14, 0x1, 0x80}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xd}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0xf9, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0xc, 0x6, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x81, 0xe, 0x6}}}}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x200, 0x7, 0x9, 0x4, 0x8, 0x6}, 0x51, &(0x7f0000000f00)={0x5, 0xf, 0x51, 0x4, [@ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0xf, 0xf, 0x3, [0xff3f00, 0x0, 0x3f00, 0xcf, 0xc0c0, 0x7f417f]}, @ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0xa7c, 0xf, 0xfff9, [0xc000, 0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x3, 0xf, 0x1ff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x3, 0x81, 0x7}]}, 0x1, [{0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x280a}}]}) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000001100)={0x14, &(0x7f0000001000)={0x0, 0x2, 0x91, {0x91, 0x11, "4a74ea1f335ad1669fc099b11b053a141438e0ce2142ead54be759cb55ed5fe484c035a21fd9c574db21dd4e997ffd790c4a100a7d1456a036b60e7f86158059459d83340bdf8b616d047ff8bd17d6c80b6240808f62de36f61174d49a0837b9371c92236683ed3783f4cc3912994f1d27bb28e7ef5a557da0e2ca5495d1209e623fae1da25d8d41a4edba2e3e62ad"}}, &(0x7f00000010c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001280)={0x1c, &(0x7f0000001140)={0x20, 0xd, 0xb6, "8c0774c200bc434e8d37a991e1dd6c50d830bb3ea5618a38b2d2503565ace8f170ef28bdc5e3df992bfabb9f69514df9173c15f5b254e90429c148ac0a5d90160dde9fea7a3c615d15d2b7db894fe6a988795b635e4b1f3a1ffcd59de0703664c4a99bacd94aa96f88e4d42473d150a110c8122961da5ef7a4958b7c9632143659a1ecfe810753178738d0ec8e87ab8901a132ad2adac9a7651ce8a0383f959b53b7296c5617ea7b946a73b206a50262d2e0b30f0934"}, &(0x7f0000001200)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001240)={0x0, 0x8, 0x1}}) syz_usb_connect$uac3(0x4, 0xd2, &(0x7f00000012c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x499, 0x101d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x3, 0x1, 0x7, 0x20, 0x8, {0x8, 0xb, 0x1, 0x1, 0x1, 0x26, 0x30, 0x46}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0x4e, 0x7}, [@multiply_unit={0xb, 0x24, 0xd, 0x0, 0x3, 0x5, 0xf}, @processing_unit={0x1d, 0x24, 0x9, 0x1, 0x2, [0x3, 0x2, 0x4b3ee11c5c29fe28, 0x4, 0x3, 0x1]}, @power_domain={0xa, 0x24, 0x10, 0x0, 0xd, 0x7, 0x5, "7f"}, @source_unit={0xc, 0x24, 0xb, 0x6, 0x0, 0xa, 0x6, 0x7}, @cluster_info_segment={0x6, 0x20, 0x6, 0xa8, 0x10}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x2, 0x2, 0xe, {0xa, 0x25, 0x25, 0x1, 0x5, 0x7ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x3, 0x1, 0x4, 0x46, "f056b8c5d227"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xe, 0x7, 0x0, {0xa, 0x25, 0x25, 0x800, 0x9, 0x4}}}}}}}}]}}, &(0x7f00000014c0)={0xa, &(0x7f00000013c0)={0xa, 0x6, 0x250, 0x6, 0x0, 0x81, 0x20, 0x8}, 0x21, &(0x7f0000001400)={0x5, 0xf, 0x21, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xfc, 0x8, 0x5}, @wireless={0xb, 0x10, 0x1, 0x4, 0xc8, 0x9, 0x1, 0x8001, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x0, 0xdc15}]}, 0x2, [{0x29, &(0x7f0000001440)=@string={0x29, 0x3, "c1e0c0494ec0df3cc9984535991049ba934be0a62d4d8ea08e4fc5601349e910460f02742c91d5"}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x2009}}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001500), 0x60000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x40) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000001540)={0x0, 0x1, 0xfc, 0xc086, @vifc_lcl_addr=@remote, @empty}, 0x10) lseek(r5, 0x0, 0x3) timer_create(0x0, &(0x7f0000001780)={0x0, 0x1a, 0x4, @thr={&(0x7f0000001580)="fb2356cfe2e5de5f816cbfd3a495547ab633a9ff79bbb19e6299788a02d2e92de6845d8a2144917cf0fde393dec57ff760bd471945a607ce744e84cadfee853e39f0cc0bf7bb863c0e55fa295904d772c10e7539cf9239ee5bfc72c9a8bf8fd871b83166d9b08386b8151d4a43e5b56fdc8019c3099a5511a192d7de859e59dd1bf6d3516d1b0fe1e0c7a08873c82d9d0958587d492e545a04bdee882225e64a90b5429c5e797ea88f65764cc390aa48b7d4a1f8cff5e1bad591d8a9100eb5566df6d284", &(0x7f0000001680)="f3ba699359305cd4a753998981c945a2fdfe5871558fb97febd3a3b870f905772e6a9b8a5f3d4431988b348009aea9730dc63795c0ee2dd89c012be67a7a52a461192da70258d21aa3ab8aba498659ef806c2a6b58761991bb4267db99fdee6750109403a0f0f16418e5e12025ea2571f27c2a89f036f051a2d79c52f6065dec0b7f075be2d3db34d7152e7d8596e213f1db4bcda4218820b8cbf9c893cb81d7e997c6ad36b7288a04cf08dac990137eca24b4459628ea6cbc3efebfed9cc283cff19a9212365266aa271ff503a61d863b"}}, &(0x7f00000017c0)) r8 = syz_usb_connect$cdc_ncm(0x0, 0x7e, &(0x7f0000001800)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x6, 0x0, 0x5, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "4b6bf5f1"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x800, 0x80, 0x7}, {0x6, 0x24, 0x1a, 0xd97, 0x13}, [@obex={0x5}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x0, 0x5, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x7c, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0xf7, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x9, 0xf, 0x6}}}}}}}]}}, &(0x7f0000001c80)={0xa, &(0x7f0000001880)={0xa, 0x6, 0x9bcc2cfec66241bd, 0x7, 0x2, 0x0, 0x10, 0xc}, 0x10, &(0x7f00000018c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x0, 0x30, 0x6, 0x2, 0x6, 0xfc}]}, 0x7, [{0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x2c0a}}, {0xf, &(0x7f0000001940)=@string={0xf, 0x3, "be2c599491486206b73dee6ee4"}}, {0x4, &(0x7f0000001980)=@lang_id={0x4, 0x3, 0x104e}}, {0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x2801}}, {0xd1, &(0x7f0000001a00)=@string={0xd1, 0x3, "5a1a05e526cc0da2fdd10a4eced0d9774d047ce30b79acdd2deea196d0db5991a7b6d0a6227fa65f95de67dde225588e40a2dd27f450026e1815b54e13fe5d5a8f9791c32918bbcab8f2495da98ef76996b845f0c167e19d1fea389f4fc3777379ff7f80720de72f221a4cde5b7a1c55107cfdb43173b0dcb5e56409f89fce889d140c6955c3d7641321f6cb8c69b71713cb2418a9e45e5869943d1f7b4bbab4b685b95bf4aebfc9f3968bcc31453ec60ef730b6cc30ce85b041a16db93c52a9527d207e150d9950f87f14ad49b968"}}, {0x5c, &(0x7f0000001b00)=@string={0x5c, 0x3, "80af10ff7958384e3593a6ce197ac0cfd11e35e05fed848fd7f5ba67ac7a57a8da7ea9126a51c3f6dc554fd79e2166300e5430056dabed0f899f32b43710f6dc89b51867a0b5332470f9f6f0ce7af321031f59b25a90936a4e6c"}}, {0xfa, &(0x7f0000001b80)=@string={0xfa, 0x3, "03dac166cac2cbf15686c4e808959a6e47277539eccbe4a646998f471c956ec520abbc3ef5370736ade3fe404d898eca6ae2ded4fe0c5c76881c09a088ede516cbc7fb68e419a37118b2e280a81e60b9b9c8bf51293f020159afab92b03796257f834f9348d2b99fbc7517cc237b0c24339ad190b3aa1834343dadfc6644f0ee94fac8eab27c4a5c51063244cee5c0be4bf939cb1f8575a588a1b507c0cfb90d48c61d1ee460cc1aeb6e7d3a7b52b99df0662cb060783be45c10ee658d13cd79e53511667cd0ffd127fa92aee02f60eec9d4c81301ba63195a634d4ddf7c699a2e89c07c1c384e910795f15618b8cc3ca49a6d81d38ecc12"}}]}) syz_usb_control_io$cdc_ncm(r8, &(0x7f0000001e40)={0x14, &(0x7f0000001d00)={0x40, 0x22, 0xe7, {0xe7, 0x23, "59bd5028bad80498ec0e23e5ce9a42a80792ad606bb7fdd233c661009109c3288d46bf3ff089ca05d2884c9834d840fbb2cf1ac4d792474eee5881dc394b181eece4f91a949be672ea7a0e43af82d8f59508d9375e0396e1bd0f53985718b7a8c2aaf00bc72db742ac684e128babe81a1fa6c48d12c46a235c397251ca026dd38d7174d9bdf06e146dd5d1e19e64a92f62ac6023f53cbc002bad7cfc3b5a0a919955d5496dcd1ab21ce0f64973ee11b7fbe7f1926685c20910100eb9e2d0227b8c392042c952324129c02546c4965cf32cd7eca73e571f80a1f9e1866aa5bac71c89a088ce"}}, &(0x7f0000001e00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002080)={0x44, &(0x7f0000001e80)={0x40, 0x3f, 0x1c, "7e814ce60460ec835cdfae65db8a0a3eb078108f98f020c51424fda3"}, &(0x7f0000001ec0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001f00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001f40)={0x20, 0x80, 0x1c, {0x0, 0x3, 0x9, 0x1, 0x8, 0x8000, 0xffff, 0x4, 0x2, 0x0, 0x3, 0xb}}, &(0x7f0000001f80)={0x20, 0x85, 0x4, 0xffff}, &(0x7f0000001fc0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000002000)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000002040)={0x20, 0x89, 0x2}}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000002340)={0x2c, &(0x7f0000002100)={0x0, 0x22, 0x100, {0x100, 0xc, "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"}}, &(0x7f0000002240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140c}}, &(0x7f0000002280)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000022c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x1, 0x2, 0x4, "a2e48c95", "acac938a"}}, &(0x7f0000002300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x10, 0xd, 0x9, 0x3, 0xff, 0xfff8}}}, &(0x7f0000002780)={0x84, &(0x7f0000002380)={0x20, 0x5, 0x36, "a072bad0fcbddbd44b46ff3b991eb2e9228a7c06c7bdbab23585dfc5a426c627b0c9cab8c2cca1d197d4370be0ed63fe453061dce363"}, &(0x7f00000023c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000002400)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000002440)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000002480)={0x20, 0x0, 0x4, {0x0, 0x40}}, &(0x7f00000024c0)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000002500)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000002540)={0x40, 0xb, 0x2, "b1d2"}, &(0x7f0000002580)={0x40, 0xf, 0x2, 0x9}, &(0x7f00000025c0)={0x40, 0x13, 0x6}, &(0x7f0000002600)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000002640)={0x40, 0x19, 0x2, "2f81"}, &(0x7f0000002680)={0x40, 0x1a, 0x2}, &(0x7f00000026c0)={0x40, 0x1c, 0x1, 0xd}, &(0x7f0000002700)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000002740)={0x40, 0x21, 0x1, 0xb3}}) syz_usb_connect(0x6, 0x347, &(0x7f0000002840)={{0x12, 0x1, 0x201, 0xbf, 0xe9, 0x58, 0x10, 0x257a, 0x160c, 0x9e39, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x335, 0x1, 0x5, 0x1, 0x0, 0x6, "", [{{0x9, 0x4, 0xea, 0x0, 0x6, 0xa1, 0x34, 0x3c, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0xf16, 0x21}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x100, 0x4, 0xba, 0xffff, 0xa, 0x10}, @mixer_unit={0xb, 0x24, 0x4, 0x2, 0x2, "b90af00cc072"}]}, @generic={0x46, 0x10, "fa61ee9ddbd1f346ba4ebceba929510f95b2771a0f2e6c72b5d135c059566edfa5fd1ed9ca25970950ef9a233792078384974c54b7169a05a35cabcde3ba1669b40c2f64"}], [{{0x9, 0x5, 0x80, 0x0, 0x40, 0x8c, 0xf}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x3, 0xf, 0x5, [@generic={0xd5, 0x0, "5f495c336093e402893c6dbe2f37bb38e560b9ad0a0268f26f784ed9639722c6360ea8b98c95defdb37f4e02e7bbc9cc57c8ca9159e6df6cd8913a9a6dbcce35d3f02ddc415213f717483a298b4a4f532716d4202fa98888dbccce5dc1271c957eda45184aac2b6d19210680a4be000c300e90f5bd48532dcbe0943c92c25cef7ca15e6a3b3f986a814c301e6ef0b12881bf37dc6f8b8a4abe7ea5a7bae175eca4a5aacd861ab88fa203e3a2c7ba9aa6d73a1c32abd93565245e438524090725b4d375daefa2ab087cd8c852d696ac6a00067c"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x9, 0x4a, 0x4, [@generic={0xa3, 0x23, "b74db9d1002988e5a8e24edc0b085f56eaacd2554d8fc7fe048695b9a64c0fefde285e8c3232d7952ea1b472f71f543527ffab7c62741e116d69187e71ed9eeb78033168e4a927864281be2e4803b5b28c199e6d03c70d5ec0cbe3d8fe7b91efc7163d3aeb12f2736dc17c7f37870f813ce5acb1cfb2823861824485d616e27791d7198df7dfb785b2dac505448d9be32d1fa81199b310e46b036c02cae29c7f34"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x0, 0xd, 0x0, 0xfd, [@generic={0x100, 0x23, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x25}]}}, {{0x9, 0x5, 0xf, 0x2, 0x3ff, 0x5, 0x0, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x2}]}}, {{0x9, 0x5, 0x1, 0x4, 0x10, 0x7, 0xd, 0x2}}]}}]}}]}}, &(0x7f0000002e80)={0xa, &(0x7f0000002bc0)={0xa, 0x6, 0x310, 0x9, 0x80, 0x3, 0x40, 0x6}, 0x5, &(0x7f0000002c00)={0x5, 0xf, 0x5}, 0x4, [{0xe1, &(0x7f0000002c40)=@string={0xe1, 0x3, "160284eb070a0367c23cafe0d67e70b3ff789e2239058fc927e3adb4dde450d87531a756304b4a2b7a286215f027db0514e97896270d83812b4a66a14dd5eabc03c5dd285d071cde4396172d940a6c890f21760e35abe1778c81d5ea04d53a0aa926cfabef1c08df3d55cb650aa48555fb8bd2f3ede7f936703437a226fc9afa350314409e3d17d6e86b485126eb36a5fa8f515a6dd6398dedf72732246eda825a46e6f4ba50bf654f2e5b2048fd211141cd9a36400430b6112d5228af499b0e5d20d09d6f9bb9ad9010c56e6ae2c5f1eaaef8bd5fc6dd4003c55add228852"}}, {0xa4, &(0x7f0000002d40)=@string={0xa4, 0x3, "8cfe1852b51963ce412e3e40ee331271125d55ff06ffd65e986db5c5c0ec8658cc075ead28a600fc34342bf2d4bb196701ff71d3f1d317d8f114010abc3eb36370d31317e0ea7136b86aff0f9d94fab24d0d82d9c2cb1c2bc8e890bb9c215f632eb9e4393202a332ba12b6b403d7f45a255f5087b601ca353dd2d22ee77b0dc1ccfea93c3f987c6c5ed1420c5b15ab48a0cd0769434ebf5d876a6c60ddb38a80ea3b"}}, {0x4, &(0x7f0000002e00)=@lang_id={0x4, 0x3, 0x401}}, {0x35, &(0x7f0000002e40)=@string={0x35, 0x3, "356170e01a0c8fdca996393f3d0eb92f90c1cbd300b993dc94793e3ee5144c9f791d648f96c607d2f36d1dcd9e7d1cf46da444"}}]}) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$XFS_IOC_EXCHANGE_RANGE(r9, 0x40285881, &(0x7f0000002f00)={r6, 0x0, 0x7, 0x100, 0x9, 0x4}) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000002f40), 0x210000, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCSPGRP(r10, 0x8902, &(0x7f0000002f80)=r3) r11 = syz_usb_connect$midi(0x2, 0x97, &(0x7f0000002fc0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x86a, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x1, 0x1, 0x5, 0xf0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x0, [@midi_in_jack={0x6, 0x24, 0x2, 0x7, 0x3, 0x6}], [{{0x9, 0x5, 0x0, 0x2, 0x200, 0x0, 0x4, 0xff, {0xf, 0x25, 0x1, 0xb, "8149554ab18d6dbc0bb76d"}}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x4, 0x4, 0x4, {0x4}}}, {{0x9, 0x5, 0x8, 0x2, 0x20, 0x5, 0x0, 0x8, {0x6, 0x25, 0x1, 0x2, "b1e9"}}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x3, 0x0, 0x5, {0x5, 0x25, 0x1, 0x1, "81"}}}, {{0x9, 0x5, 0x4, 0x2, 0x400, 0x5, 0x40, 0x40, {0xe, 0x25, 0x1, 0xa, "e4621f456d44432afef1"}}}, {{0x9, 0x5, 0xe, 0x2, 0x20, 0x6, 0x7, 0x80, {0xb, 0x25, 0x1, 0x7, "e1d8f2a64e7164"}}}]}}}}}]}}, &(0x7f0000003240)={0xa, &(0x7f0000003080)={0xa, 0x6, 0x250, 0xe, 0x1, 0x5, 0x8, 0x1}, 0x12, &(0x7f00000030c0)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x0, 0x8, 0x3}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000003100)=@lang_id={0x4, 0x3, 0x280a}}, {0x12, &(0x7f0000003140)=@string={0x12, 0x3, "a9b9786b72a7ee0e5aa03e40e4baaabb"}}, {0x4, &(0x7f0000003180)=@lang_id={0x4, 0x3, 0x443}}, {0xd, &(0x7f00000031c0)=@string={0xd, 0x3, "15dbaf99e8666bf520f0b7"}}, {0x4, &(0x7f0000003200)=@lang_id={0x4, 0x3, 0x1c09}}]}) syz_usb_control_io(r11, &(0x7f0000003500)={0x2c, &(0x7f00000032c0)={0x20, 0xc, 0xe6, {0xe6, 0x1, "d12b32474acc0b5cc8b6880904a3afea0f62f4278392aaab2a64a43f111866100e50c2e7e2b246365e568d47f51887d982296171a5d8e8f690dcd24258456f2b8d3de1391d3d6f585ea8b118b1b63abaa052e6925962771b5292d717bf93d4ba24143e5cb0976e0bf31953d9478402fd260261c4d6a70b9ae493c0ad85ed975dfa83ca6662bcc4dacde0ba394c20f095d6a7f9f76067ec6cdbd88307aebbf9443392cca200958d557670e800ecb03d9f8067d2cd36d68f21c873df6cd36468740983ca4e48957e3c2d1be59cc5dcc7a78555560ab5c1ea60831d2ea96ed274b171327fc3"}}, &(0x7f00000033c0)={0x0, 0x3, 0x5b, @string={0x5b, 0x3, "153293ddc283e78335362f2dc7bef010a52aec6f8bf70fc24f40fa4cafd409925fb5cc804252affd2676e4d5b8881713363ab6370a4a93bd8ec0b29f818cfad11e3bcf83bddf84ebb3efb85e962a8c4c10d60a5c6d08454cf1"}}, &(0x7f0000003440)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000003480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x3, 0x52, 0x5, "9023664d", "3174b032"}}, &(0x7f00000034c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x4, 0x4, 0x9, 0x7, 0xfc}}}, &(0x7f0000003940)={0x84, &(0x7f0000003540)={0x40, 0xb, 0x22, "a126f9134dfe7d771ee1a208fde59cd8fcff8f8678dd15f715593edad96f3cefa722"}, &(0x7f0000003580)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000035c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000003600)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000003640)={0x20, 0x0, 0x4, {0x8, 0x2}}, &(0x7f0000003680)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000036c0)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000003700)={0x40, 0xb, 0x2, ',h'}, &(0x7f0000003740)={0x40, 0xf, 0x2, 0xf5}, &(0x7f0000003780)={0x40, 0x13, 0x6, @random="530549937ac7"}, &(0x7f00000037c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000003800)={0x40, 0x19, 0x2, "c92f"}, &(0x7f0000003840)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000003880)={0x40, 0x1c, 0x1, 0x5}, &(0x7f00000038c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000003900)={0x40, 0x21, 0x1, 0x8b}}) 329.654362ms ago: executing program 1 (id=376): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f0000000100)=[{0x6, 0x40, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 329.539142ms ago: executing program 1 (id=377): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0)) 279.173894ms ago: executing program 1 (id=378): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009740)=ANY=[@ANYBLOB="280000001200170a26bd70000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) unshare(0x20000400) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xe, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x440007, @empty, 0xffff8000}, 0x1c) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x10000001, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x14, 0x1, 0x2, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x800) r5 = fsopen(&(0x7f0000000500)='pstore\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 279.062823ms ago: executing program 1 (id=379): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x1e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (fail_nth: 41) 25.615319ms ago: executing program 2 (id=380): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x0, 0x200, 0x6, 0x875f, 0x7, 'B\x00!_\x00', 0x4000000, 0x400}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @multicast2}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) r0 = syz_open_pts(0xffffffffffffffff, 0x410002) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x200, 0xffff7fff, 0x6, 0xffff, 0x0, "9110c75a04fcd6974865f43a9cc389379e93da", 0xc, 0x6}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) r2 = openat$incfs(r1, &(0x7f0000000280)='.pending_reads\x00', 0x2ee801, 0x130) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="cc5741bcb1d3b83d09a58bdafc2c7108", 0x10) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, &(0x7f00000000c0)) 0s ago: executing program 1 (id=381): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x5, 0x4, 0x8c, "aad7680f0430"}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(r1, 0x1, 0x10000000000009, &(0x7f00000000c0)="f5c89e1e", 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000040)=0x3e, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e25, 0x4, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x2}, 0x1c) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a210283"], 0x0}, 0x0) syz_usb_connect$uac3(0x3, 0xa4, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x9, 0x20, 0xc, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0xf7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x2e, 0x1003}, [@output_terminal={0x13, 0x24, 0x3, 0x3, 0x0, 0x0, 0x6, 0x0, 0x4, 0x8, 0x4, 0xa}, @extension_unit={0x11, 0x24, 0xa, 0x6, 0x1, [0x0, 0x173ea21786b5b7df, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x2b0, 0x8, 0x5, 0xf8, {0xa, 0x25, 0x25, 0x2, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x2, 0x21, {0xa, 0x25, 0x25, 0x4, 0x2}}}}}}}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000002c0)={0x14, &(0x7f00000000c0)={0x0, 0x25, 0xec, {0xec, 0x6, "f4d335d3c658aa6e2b607e097ea486a90029f308f0056e17a991882252410a053d6c7b118aec7f2c59f5bc7e181266de8773996993cbeae810132214e51d3659320bca79b57014db751dcd24c11c051618c77f277b6c37f900c9a29ac8e934ea43284ad64e8aaafbd859ebebcf268643da5679682db419aecf378690f0883b756d62cbea7dd2bd9d2eb256b20fd11d1de4c950a780d42e53868e97af7cb1f3ea855e685d1bb82d6c62b041395017859a937e5fe0be3c225cc4ea36e4e81b3176172e39134cc979b5a0d2ff259acc73007b36a22f4e8e2c2b015821857e5d4a6fdae9af9d265b7ab8571f"}}, &(0x7f0000000200)={0x0, 0x3, 0xab, @string={0xab, 0x3, "815f60a33df8314d5715b5efb4569dfc1b44d3a346edd501972ff18a647056ce719ea43bae041bb52c3ce8683d9940dae1268e313f8c540098d90f4c9e4c585bea1c6ad9e15aea0ba4532ce113d19758167ed4b330dc5e33b5e4f0e81ed13695cff87cc1c9a5b528b7de5d69ff5b6532c536235c2c5a06f67dfbf72a7535a7a53b3028ad48cdfc1421b0099f48ea70d7b8a19bd4ac45148bed8f8bf106ae2fc17381613ab9167a4f19"}}}, &(0x7f0000000580)={0x34, &(0x7f0000000300)={0x0, 0x3, 0xd1, "bc72b45ed682e39ba155798d2dddd7a15289bce125638b887d968d8f417c595049c9e3efd91994497b439f6cf8eebaef78dcb78e01d7675e58669b97a8ebfd7e452142996698b7c4527772ac9613eaa3e1e7bb7b60da0860188b4964840d872db8eff6f6a9ee2892db753cc56f9b630468f35cafb3cfcc97da0295a62ed1622ecede50583f21811951911f6d9f889cf3646ed775144411f279877b957d984b16333d844642b862e30bdc5803a53337246e64cbaac5a12619a8c28aa32d4f88224f2454175c67e8a3e10e33ee2a2b4c31c9"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000480)={0x20, 0x0, 0x63, {0x61, "296e176c88b85a504f5f2b3b0568782ffd9b01b19fd723e488f47e4cdaef2a2b55c43615157b0ecbd1ef7d99f746758ab5727d01704bcdd08b98a1d8042b614b4d6116cd1033b10fc170e408a9aa0e6af7991a756a091d85f1b00138e26c8cad16"}}, &(0x7f0000000500)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000540)={0x20, 0x0, 0x1, 0x3}}) 0s ago: executing program 2 (id=382): mount$incfs(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100), 0xa18082, 0x0) (fail_nth: 24) kernel console output (not intermixed with test programs): 60.643557][ T444] usb 1-1: config 1 has no interface number 0 [ 60.649673][ T349] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 60.658743][ T444] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 60.668669][ T349] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.676967][ T444] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 60.687260][ T444] usb 1-1: config 1 interface 105 has no altsetting 0 [ 60.694866][ T349] hub 3-1:4.0: USB hub found [ 60.700568][ T444] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 60.709641][ T444] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 60.717849][ T444] usb 1-1: Product: syz [ 60.722056][ T444] usb 1-1: Manufacturer: syz [ 60.726663][ T444] usb 1-1: SerialNumber: syz [ 60.732367][ T908] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 60.739579][ T908] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 60.786874][ T336] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 60.797729][ T336] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 60.807319][ T336] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 60.817052][ T336] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 60.895143][ T910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.903895][ T910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.912740][ T349] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 60.938821][ T349] usb 3-1: USB disconnect, device number 22 [ 61.149384][ T908] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 61.156622][ T908] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 61.364459][ T444] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 0 [ 61.375183][ T444] aqc111 1-1:1.105: probe with driver aqc111 failed with error -61 [ 61.627852][ T311] usb 2-1: USB disconnect, device number 17 [ 61.658484][ T444] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 61.809556][ T444] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.819722][ T444] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 61.828844][ T444] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 61.837949][ T444] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.846472][ T444] usb 3-1: config 0 descriptor?? [ 62.018492][ T311] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 62.169564][ T311] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 62.180611][ T311] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.190478][ T311] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 62.199540][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.211457][ T311] hub 2-1:4.0: USB hub found [ 62.356301][ T9] usb 4-1: USB disconnect, device number 24 [ 62.408900][ T311] hub 2-1:4.0: 2 ports detected [ 62.413835][ T311] usb 2-1: selecting invalid altsetting 1 [ 62.419717][ T311] hub 2-1:4.0: Using single TT (err -22) [ 62.610050][ T311] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 62.616437][ T311] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 62.698480][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 62.788856][ T311] usb 2-1: USB disconnect, device number 18 [ 62.828473][ T9] usb 4-1: device descriptor read/64, error -71 [ 63.068475][ T9] usb 4-1: device descriptor read/64, error -71 [ 63.088468][ T311] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 63.129699][ T444] usb 1-1: USB disconnect, device number 27 [ 63.238470][ T311] usb 2-1: Using ep0 maxpacket: 16 [ 63.244653][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.255550][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.265437][ T311] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 63.278258][ T311] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 63.287311][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.295826][ T311] usb 2-1: config 0 descriptor?? [ 63.308546][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 63.438462][ T9] usb 4-1: device descriptor read/64, error -71 [ 63.518471][ T444] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 63.669778][ T444] usb 1-1: unable to get BOS descriptor or descriptor too short [ 63.677825][ T444] usb 1-1: not running at top speed; connect to a high speed hub [ 63.686279][ T444] usb 1-1: config 1 has an invalid interface number: 99 but max is 0 [ 63.688455][ T9] usb 4-1: device descriptor read/64, error -71 [ 63.694475][ T444] usb 1-1: config 1 has no interface number 0 [ 63.707983][ T311] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 63.715234][ T444] usb 1-1: config 1 interface 99 has no altsetting 0 [ 63.721988][ T311] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 63.729269][ T311] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 63.736579][ T311] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 63.743842][ T311] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 63.751170][ T311] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 63.758435][ T311] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 63.765739][ T311] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 63.773002][ T311] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 63.780272][ T444] usb 1-1: New USB device found, idVendor=0403, idProduct=da70, bcdDevice=7f.3f [ 63.789338][ T311] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 63.796531][ T311] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 63.803738][ T444] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.811770][ T311] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 63.818573][ T9] usb usb4-port1: attempt power cycle [ 63.818996][ T444] usb 1-1: Product: syz [ 63.828492][ T311] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 63.835686][ T311] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 63.842911][ T444] usb 1-1: Manufacturer: ꇞ㤑캰䗆ⓣ᫶惧￳⅞코쎼㸭ᓟᠡ􉘞쾄㆔䶄嶱ㅋ돞ㅃ咏珢 [ 63.853871][ T444] usb 1-1: SerialNumber: syz [ 63.858509][ T311] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 63.868172][ T311] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000C/input/input8 [ 63.881880][ T311] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 63.912988][ T311] usb 2-1: USB disconnect, device number 19 [ 64.114392][ T444] usb 1-1: NDI device with a latency value of 1 [ 64.120889][ T444] ftdi_sio 1-1:1.99: FTDI USB Serial Device converter detected [ 64.130638][ T444] ftdi_sio ttyUSB0: unknown device type: 0x7f3f [ 64.138937][ T444] usb 1-1: USB disconnect, device number 28 [ 64.145434][ T444] ftdi_sio 1-1:1.99: device disconnected [ 64.168525][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 64.189610][ T9] usb 4-1: device descriptor read/8, error -71 [ 64.319441][ T9] usb 4-1: device descriptor read/8, error -71 [ 64.434198][ T336] usb 3-1: USB disconnect, device number 23 [ 64.558475][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 64.579493][ T9] usb 4-1: device descriptor read/8, error -71 [ 64.698479][ T444] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 64.709403][ T9] usb 4-1: device descriptor read/8, error -71 [ 64.788522][ T336] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 64.818551][ T9] usb usb4-port1: unable to enumerate USB device [ 64.849544][ T444] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 64.860563][ T444] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.870308][ T444] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 64.879361][ T444] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.890234][ T444] hub 2-1:4.0: USB hub found [ 64.898445][ T311] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 64.938682][ T336] usb 3-1: Using ep0 maxpacket: 32 [ 64.944868][ T336] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 64.953211][ T336] usb 3-1: config 0 has no interface number 0 [ 64.959419][ T336] usb 3-1: config 0 interface 184 has no altsetting 0 [ 64.967512][ T336] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 64.976592][ T336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.984596][ T336] usb 3-1: Product: syz [ 64.988766][ T336] usb 3-1: Manufacturer: syz [ 64.993357][ T336] usb 3-1: SerialNumber: syz [ 64.998861][ T336] usb 3-1: config 0 descriptor?? [ 65.004652][ T336] smsc75xx v1.0.0 [ 65.049470][ T311] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 65.062454][ T311] usb 1-1: config 0 interface 0 has no altsetting 0 [ 65.069087][ T311] usb 1-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00 [ 65.078166][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.086867][ T311] usb 1-1: config 0 descriptor?? [ 65.090790][ T939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.100591][ T939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.109495][ T444] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 65.128816][ T444] usb 2-1: USB disconnect, device number 20 [ 65.494646][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 65.494674][ T36] audit: type=1400 audit(1782781935.628:356): avc: denied { write } for pid=942 comm="syz.0.220" name="001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 65.496485][ T311] logitech-hidpp-device 0003:046D:C343.000D: unknown main item tag 0x2 [ 65.531684][ T311] logitech-hidpp-device 0003:046D:C343.000D: unexpected long global item [ 65.540355][ T311] logitech-hidpp-device 0003:046D:C343.000D: hidpp_probe:parse failed [ 65.548583][ T311] logitech-hidpp-device 0003:046D:C343.000D: probe with driver logitech-hidpp-device failed with error -22 [ 65.605838][ T336] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 65.618435][ T336] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 65.698420][ T349] usb 1-1: USB disconnect, device number 29 [ 65.818495][ T444] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 65.829353][ T336] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 65.840204][ T336] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 65.849865][ T336] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 65.860129][ T336] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 65.869561][ T336] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 65.879704][ T311] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 65.968486][ T444] usb 4-1: Using ep0 maxpacket: 16 [ 65.974643][ T444] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 65.982907][ T444] usb 4-1: config 1 has no interface number 0 [ 65.989042][ T444] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 65.999084][ T444] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 66.009080][ T444] usb 4-1: config 1 interface 105 has no altsetting 0 [ 66.017146][ T444] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 66.026277][ T444] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 66.034402][ T444] usb 4-1: Product: syz [ 66.038561][ T444] usb 4-1: Manufacturer: syz [ 66.043142][ T444] usb 4-1: SerialNumber: syz [ 66.048431][ T311] usb 2-1: Using ep0 maxpacket: 32 [ 66.048493][ T947] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 66.056011][ T311] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 66.060957][ T947] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 66.068936][ T311] usb 2-1: config 0 has no interface number 0 [ 66.082038][ T311] usb 2-1: config 0 interface 184 has no altsetting 0 [ 66.090429][ T311] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 66.099484][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.107467][ T311] usb 2-1: Product: syz [ 66.111695][ T311] usb 2-1: Manufacturer: syz [ 66.116314][ T311] usb 2-1: SerialNumber: syz [ 66.121523][ T311] usb 2-1: config 0 descriptor?? [ 66.127368][ T311] smsc75xx v1.0.0 [ 66.486319][ T947] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 66.493590][ T947] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 66.500777][ T9] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 66.659551][ T9] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 66.670618][ T9] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.680399][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 66.689447][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.699477][ T9] hub 1-1:4.0: USB hub found [ 66.701769][ T444] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 3 [ 66.714811][ T444] aqc111 4-1:1.105: probe with driver aqc111 failed with error -61 [ 66.728643][ T311] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 66.739455][ T311] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 66.899232][ T9] hub 1-1:4.0: 2 ports detected [ 66.904142][ T9] usb 1-1: selecting invalid altsetting 1 [ 66.910062][ T9] hub 1-1:4.0: Using single TT (err -22) [ 67.103488][ T9] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 67.109888][ T9] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 67.149872][ T311] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 67.160886][ T311] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 67.170555][ T311] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 67.180030][ T311] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 67.190133][ T311] usb 2-1: USB disconnect, device number 21 [ 67.279208][ T9] usb 1-1: USB disconnect, device number 30 [ 67.479304][ T336] usb 3-1: USB disconnect, device number 24 [ 67.578488][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 67.728476][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 67.734697][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.745648][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.755402][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 67.768309][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 67.777455][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.786121][ T9] usb 1-1: config 0 descriptor?? [ 67.828446][ T336] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 67.908476][ T64] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 67.979935][ T336] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.990070][ T336] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 68.003007][ T336] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 68.012171][ T336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.020921][ T336] usb 3-1: config 0 descriptor?? [ 68.026798][ T336] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 68.059716][ T64] usb 2-1: unable to get BOS descriptor or descriptor too short [ 68.067723][ T64] usb 2-1: not running at top speed; connect to a high speed hub [ 68.076166][ T64] usb 2-1: config 1 has an invalid interface number: 99 but max is 0 [ 68.084288][ T64] usb 2-1: config 1 has no interface number 0 [ 68.090412][ T64] usb 2-1: config 1 interface 99 has no altsetting 0 [ 68.098549][ T64] usb 2-1: New USB device found, idVendor=0403, idProduct=da70, bcdDevice=7f.3f [ 68.107606][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.115671][ T64] usb 2-1: Product: syz [ 68.119875][ T64] usb 2-1: Manufacturer: ꇞ㤑캰䗆ⓣ᫶惧￳⅞코쎼㸭ᓟᠡ􉘞쾄㆔䶄嶱ㅋ돞ㅃ咏珢 [ 68.130853][ T64] usb 2-1: SerialNumber: syz [ 68.204809][ T9] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 68.212104][ T9] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 68.219458][ T9] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 68.226684][ T9] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 68.233960][ T9] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 68.241241][ T9] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 68.248496][ T9] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 68.255721][ T9] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 68.262994][ T9] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 68.270246][ T9] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 68.277457][ T9] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 68.284698][ T9] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 68.291923][ T9] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 68.299153][ T9] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 68.306369][ T9] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 68.316309][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000E/input/input9 [ 68.329564][ T9] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 68.385653][ T64] usb 2-1: NDI device with a latency value of 1 [ 68.395234][ T64] ftdi_sio 2-1:1.99: FTDI USB Serial Device converter detected [ 68.403393][ T64] ftdi_sio ttyUSB0: unknown device type: 0x7f3f [ 68.418777][ T311] usb 4-1: USB disconnect, device number 29 [ 68.421718][ T64] usb 2-1: USB disconnect, device number 22 [ 68.433585][ T9] usb 1-1: USB disconnect, device number 31 [ 68.443982][ T64] ftdi_sio 2-1:1.99: device disconnected [ 68.758483][ T311] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 68.888478][ T311] usb 4-1: device descriptor read/64, error -71 [ 68.993850][ T36] audit: type=1400 audit(1782781939.128:357): avc: denied { read } for pid=970 comm="syz.1.232" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 69.016700][ T36] audit: type=1400 audit(1782781939.128:358): avc: denied { open } for pid=970 comm="syz.1.232" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 69.040261][ T36] audit: type=1400 audit(1782781939.128:359): avc: denied { ioctl } for pid=970 comm="syz.1.232" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 69.188510][ T311] usb 4-1: device descriptor read/64, error -71 [ 69.208469][ T444] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 69.288481][ T64] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 69.358490][ T444] usb 1-1: Using ep0 maxpacket: 32 [ 69.364660][ T444] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 69.372980][ T444] usb 1-1: config 0 has no interface number 0 [ 69.379248][ T444] usb 1-1: config 0 interface 184 has no altsetting 0 [ 69.387333][ T444] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 69.396403][ T444] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.404440][ T444] usb 1-1: Product: syz [ 69.408626][ T444] usb 1-1: Manufacturer: syz [ 69.413300][ T444] usb 1-1: SerialNumber: syz [ 69.418469][ T444] usb 1-1: config 0 descriptor?? [ 69.424068][ T444] smsc75xx v1.0.0 [ 69.438440][ T64] usb 2-1: Using ep0 maxpacket: 32 [ 69.438444][ T311] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 69.452221][ T64] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 69.460418][ T64] usb 2-1: config 0 has no interface number 0 [ 69.466508][ T64] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 576 [ 69.476515][ T64] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 69.487966][ T64] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 69.497042][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.505058][ T64] usb 2-1: Product: syz [ 69.509246][ T64] usb 2-1: Manufacturer: syz [ 69.513885][ T64] usb 2-1: SerialNumber: syz [ 69.519138][ T64] usb 2-1: config 0 descriptor?? [ 69.524475][ T979] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 69.531664][ T979] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 69.578479][ T311] usb 4-1: device descriptor read/64, error -71 [ 69.739697][ T979] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 69.746967][ T979] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 69.818458][ T311] usb 4-1: device descriptor read/64, error -71 [ 69.928529][ T311] usb usb4-port1: attempt power cycle [ 70.025760][ T444] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 70.036632][ T444] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 70.246465][ T444] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 70.257338][ T444] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 70.267010][ T444] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 70.277307][ T311] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 70.284972][ T444] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 70.294500][ T444] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 70.319426][ T311] usb 4-1: device descriptor read/8, error -71 [ 70.449446][ T311] usb 4-1: device descriptor read/8, error -71 [ 70.506256][ T340] usb 3-1: USB disconnect, device number 25 [ 70.556390][ T64] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 70.566606][ T64] asix 2-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 70.577284][ T64] asix 2-1:0.188: probe with driver asix failed with error -61 [ 70.688469][ T311] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 70.709408][ T311] usb 4-1: device descriptor read/8, error -71 [ 70.791996][ T985] 9pnet_fd: Insufficient options for proto=fd [ 70.839556][ T311] usb 4-1: device descriptor read/8, error -71 [ 70.948563][ T311] usb usb4-port1: unable to enumerate USB device [ 71.128471][ T444] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 71.279686][ T444] usb 3-1: unable to get BOS descriptor or descriptor too short [ 71.287689][ T444] usb 3-1: not running at top speed; connect to a high speed hub [ 71.296110][ T444] usb 3-1: config 1 has an invalid interface number: 99 but max is 0 [ 71.304249][ T444] usb 3-1: config 1 has no interface number 0 [ 71.310358][ T444] usb 3-1: config 1 interface 99 has no altsetting 0 [ 71.318362][ T444] usb 3-1: New USB device found, idVendor=0403, idProduct=da70, bcdDevice=7f.3f [ 71.327440][ T444] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.335431][ T444] usb 3-1: Product: syz [ 71.339608][ T444] usb 3-1: Manufacturer: ꇞ㤑캰䗆ⓣ᫶惧￳⅞코쎼㸭ᓟᠡ􉘞쾄㆔䶄嶱ㅋ돞ㅃ咏珢 [ 71.350570][ T444] usb 3-1: SerialNumber: syz [ 71.589039][ T444] usb 3-1: NDI device with a latency value of 1 [ 71.596286][ T444] ftdi_sio 3-1:1.99: FTDI USB Serial Device converter detected [ 71.604419][ T444] ftdi_sio ttyUSB0: unknown device type: 0x7f3f [ 71.611993][ T444] usb 3-1: USB disconnect, device number 26 [ 71.619654][ T444] ftdi_sio 3-1:1.99: device disconnected [ 71.838487][ T311] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 71.981862][ T444] usb 1-1: USB disconnect, device number 32 [ 71.990480][ T311] usb 4-1: Using ep0 maxpacket: 32 [ 71.994748][ T995] netlink: 'syz.0.240': attribute type 27 has an invalid length. [ 71.997714][ T311] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 72.016873][ T311] usb 4-1: config 0 has no interface number 0 [ 72.018500][ T36] audit: type=1400 audit(1782781942.148:360): avc: denied { write } for pid=996 comm="syz.0.241" name="/" dev="incremental-fs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.023043][ T311] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 576 [ 72.050014][ T36] audit: type=1400 audit(1782781942.148:361): avc: denied { add_name } for pid=996 comm="syz.0.241" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.056624][ T311] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 72.082660][ T64] usb 2-1: USB disconnect, device number 23 [ 72.086159][ T36] audit: type=1400 audit(1782781942.148:362): avc: denied { create } for pid=996 comm="syz.0.241" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 72.113483][ T36] audit: type=1400 audit(1782781942.148:363): avc: denied { associate } for pid=996 comm="syz.0.241" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 72.142259][ T311] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 72.151497][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.165209][ T999] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.243' resets device [ 72.170475][ T311] usb 4-1: Product: syz [ 72.178539][ T311] usb 4-1: Manufacturer: syz [ 72.187547][ T311] usb 4-1: SerialNumber: syz [ 72.201354][ T311] usb 4-1: config 0 descriptor?? [ 72.211287][ T991] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 72.218544][ T991] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 72.408480][ T340] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 72.427851][ T991] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 72.435087][ T991] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 72.448450][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 72.528452][ T64] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 72.559543][ T340] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.569749][ T340] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 72.582745][ T340] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 72.591884][ T340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.600728][ T340] usb 3-1: config 0 descriptor?? [ 72.606698][ T340] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 72.614050][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 72.620694][ T9] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 72.628907][ T9] usb 1-1: config 0 has no interface number 0 [ 72.635047][ T9] usb 1-1: config 0 interface 184 has no altsetting 0 [ 72.643323][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 72.652400][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.660445][ T64] usb 2-1: device descriptor read/64, error -71 [ 72.666712][ T9] usb 1-1: Product: syz [ 72.670911][ T9] usb 1-1: Manufacturer: syz [ 72.675502][ T9] usb 1-1: SerialNumber: syz [ 72.680806][ T9] usb 1-1: config 0 descriptor?? [ 72.686481][ T9] smsc75xx v1.0.0 [ 72.898450][ T64] usb 2-1: device descriptor read/64, error -71 [ 73.138485][ T64] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 73.268467][ T64] usb 2-1: device descriptor read/64, error -71 [ 73.288018][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 73.298963][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 73.508932][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 73.519967][ T64] usb 2-1: device descriptor read/64, error -71 [ 73.526245][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 73.535940][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 73.546203][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 73.555643][ T9] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 73.628543][ T64] usb usb2-port1: attempt power cycle [ 73.968452][ T64] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 73.989441][ T64] usb 2-1: device descriptor read/8, error -71 [ 74.119445][ T64] usb 2-1: device descriptor read/8, error -71 [ 74.246548][ T311] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 74.256960][ T311] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 74.267504][ T311] asix 4-1:0.188: probe with driver asix failed with error -71 [ 74.277499][ T311] usb 4-1: USB disconnect, device number 34 [ 74.368463][ T64] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 74.399682][ T64] usb 2-1: device descriptor read/8, error -71 [ 74.529421][ T64] usb 2-1: device descriptor read/8, error -71 [ 74.638585][ T64] usb usb2-port1: unable to enumerate USB device [ 75.174031][ T311] usb 3-1: USB disconnect, device number 27 [ 75.209623][ T1019] FAULT_INJECTION: forcing a failure. [ 75.209623][ T1019] name failslab, interval 1, probability 0, space 0, times 0 [ 75.226176][ T9] usb 1-1: USB disconnect, device number 33 [ 75.237197][ T1019] CPU: 0 UID: 0 PID: 1019 Comm: syz.2.250 Not tainted syzkaller #0 111b2e0850fa4a367413a3971448b32f560820b7 [ 75.237225][ T1019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 75.237234][ T1019] Call Trace: [ 75.237240][ T1019] [ 75.237247][ T1019] __dump_stack+0x21/0x30 [ 75.237274][ T1019] dump_stack_lvl+0x140/0x1c0 [ 75.237295][ T1019] ? __cfi_dump_stack_lvl+0x10/0x10 [ 75.237315][ T1019] dump_stack+0x19/0x20 [ 75.237333][ T1019] should_fail_ex+0x3c2/0x510 [ 75.237350][ T1019] should_failslab+0xac/0x100 [ 75.237369][ T1019] __kmalloc_cache_node_noprof+0x46/0x430 [ 75.237387][ T1019] ? __get_vm_area_node+0x150/0x390 [ 75.237407][ T1019] ? kasan_save_alloc_info+0x3a/0x50 [ 75.237427][ T1019] ? __kasan_slab_alloc+0x73/0x90 [ 75.237444][ T1019] ? kmem_cache_alloc_node_noprof+0x1ca/0x420 [ 75.237461][ T1019] __get_vm_area_node+0x150/0x390 [ 75.237482][ T1019] __vmalloc_node_range_noprof+0x340/0x1300 [ 75.237505][ T1019] ? copy_process+0x57c/0x3350 [ 75.237528][ T1019] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 75.237549][ T1019] ? kasan_save_alloc_info+0x3a/0x50 [ 75.237570][ T1019] ? __kasan_slab_alloc+0x73/0x90 [ 75.237587][ T1019] ? arch_dup_task_struct+0x5b/0xe0 [ 75.237621][ T1019] ? __asan_memcpy+0x5a/0x80 [ 75.237636][ T1019] dup_task_struct+0x5d6/0xd80 [ 75.237654][ T1019] ? copy_process+0x57c/0x3350 [ 75.237673][ T1019] ? _raw_spin_lock_irq+0x93/0x120 [ 75.237692][ T1019] ? copy_process+0x3350/0x3350 [ 75.237711][ T1019] ? __kasan_check_write+0x18/0x20 [ 75.237727][ T1019] copy_process+0x57c/0x3350 [ 75.237747][ T1019] ? kasan_save_alloc_info+0x3a/0x50 [ 75.237769][ T1019] ? __cfi_copy_process+0x10/0x10 [ 75.237788][ T1019] ? __kmalloc_cache_noprof+0x23c/0x470 [ 75.237805][ T1019] ? __kasan_check_write+0x18/0x20 [ 75.237820][ T1019] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 75.237839][ T1019] vhost_task_create+0x1f7/0x3f0 [ 75.237858][ T1019] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 75.237876][ T1019] ? __cfi_vhost_task_create+0x10/0x10 [ 75.237892][ T1019] ? __cfi_vhost_task_fn+0x10/0x10 [ 75.237907][ T1019] ? __kasan_check_write+0x18/0x20 [ 75.237923][ T1019] ? mutex_lock+0x97/0x1d0 [ 75.237940][ T1019] ? __cfi_mutex_lock+0x10/0x10 [ 75.237957][ T1019] ? kernel_text_address+0xa9/0xe0 [ 75.237978][ T1019] kvm_mmu_post_init_vm+0x161/0x300 [ 75.238001][ T1019] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 75.238022][ T1019] ? _parse_integer_limit+0x195/0x1e0 [ 75.238040][ T1019] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 75.238061][ T1019] ? kstrtoull+0x13b/0x1e0 [ 75.238075][ T1019] ? kstrtouint+0x78/0xf0 [ 75.238090][ T1019] ? ioctl_has_perm+0x1bc/0x500 [ 75.238103][ T1019] ? __asan_memcpy+0x5a/0x80 [ 75.238118][ T1019] ? ioctl_has_perm+0x408/0x500 [ 75.238132][ T1019] ? has_cap_mac_admin+0xd0/0xd0 [ 75.238148][ T1019] ? __kasan_check_write+0x18/0x20 [ 75.238163][ T1019] ? mutex_lock_killable+0x97/0x1d0 [ 75.238182][ T1019] ? __cfi_mutex_lock_killable+0x10/0x10 [ 75.238203][ T1019] ? proc_fail_nth_write+0x184/0x220 [ 75.238227][ T1019] kvm_vcpu_ioctl+0xa43/0x1000 [ 75.238244][ T1019] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 75.238260][ T1019] ? __cfi_vfs_write+0x10/0x10 [ 75.238276][ T1019] ? __kasan_check_write+0x18/0x20 [ 75.238291][ T1019] ? mutex_unlock+0x90/0x240 [ 75.238309][ T1019] ? __cfi_mutex_unlock+0x10/0x10 [ 75.238330][ T1019] ? bpf_lsm_file_ioctl+0xd/0x20 [ 75.238350][ T1019] ? security_file_ioctl+0x3e/0x110 [ 75.238373][ T1019] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 75.238392][ T1019] __se_sys_ioctl+0x132/0x1b0 [ 75.238409][ T1019] __x64_sys_ioctl+0x7f/0xa0 [ 75.238426][ T1019] x64_sys_call+0x1878/0x2ee0 [ 75.238440][ T1019] do_syscall_64+0x57/0xf0 [ 75.238454][ T1019] ? clear_bhb_loop+0x50/0xa0 [ 75.238474][ T1019] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.238490][ T1019] RIP: 0033:0x7f331a59ce59 [ 75.238505][ T1019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.238518][ T1019] RSP: 002b:00007f331b42d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.238536][ T1019] RAX: ffffffffffffffda RBX: 00007f331a815fa0 RCX: 00007f331a59ce59 [ 75.238549][ T1019] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 75.238559][ T1019] RBP: 00007f331b42d090 R08: 0000000000000000 R09: 0000000000000000 [ 75.238569][ T1019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.238579][ T1019] R13: 00007f331a816038 R14: 00007f331a815fa0 R15: 00007fff17999ee8 [ 75.238593][ T1019] [ 75.332006][ T1034] FAULT_INJECTION: forcing a failure. [ 75.332006][ T1034] name failslab, interval 1, probability 0, space 0, times 0 [ 75.333275][ T1019] syz.2.250: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 75.340809][ T1034] CPU: 1 UID: 0 PID: 1034 Comm: syz.3.256 Not tainted syzkaller #0 111b2e0850fa4a367413a3971448b32f560820b7 [ 75.340835][ T1034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 75.340847][ T1034] Call Trace: [ 75.340853][ T1034] [ 75.340859][ T1034] __dump_stack+0x21/0x30 [ 75.340885][ T1034] dump_stack_lvl+0x140/0x1c0 [ 75.340906][ T1034] ? __cfi_dump_stack_lvl+0x10/0x10 [ 75.340926][ T1034] ? mutex_unlock+0x90/0x240 [ 75.340946][ T1034] ? pcpu_alloc_noprof+0x1440/0x1440 [ 75.340965][ T1034] dump_stack+0x19/0x20 [ 75.340985][ T1034] should_fail_ex+0x3c2/0x510 [ 75.341002][ T1034] should_failslab+0xac/0x100 [ 75.341022][ T1034] __kmalloc_cache_noprof+0x41/0x470 [ 75.341039][ T1034] ? percpu_ref_init+0xe3/0x4d0 [ 75.341058][ T1034] percpu_ref_init+0xe3/0x4d0 [ 75.341074][ T1034] ? __cfi_css_release+0x10/0x10 [ 75.341099][ T1034] cgroup_mkdir+0x26f/0x1600 [ 75.341118][ T1034] ? __kasan_check_write+0x18/0x20 [ 75.341135][ T1034] ? __cfi_cgroup_mkdir+0x10/0x10 [ 75.341154][ T1034] kernfs_iop_mkdir+0x1bb/0x2d0 [ 75.341175][ T1034] vfs_mkdir+0x58e/0x810 [ 75.341197][ T1034] open_or_create_special_dir+0xf1/0x200 [ 75.341216][ T1034] incfs_mount_fs+0x433/0x970 [ 75.341233][ T1034] ? __cfi_incfs_mount_fs+0x10/0x10 [ 75.341249][ T1034] ? vfs_parse_fs_string+0x10f/0x180 [ 75.341270][ T1034] ? selinux_capable+0x38/0x50 [ 75.341289][ T1034] legacy_get_tree+0x103/0x1b0 [ 75.341308][ T1034] ? __cfi_incfs_mount_fs+0x10/0x10 [ 75.341325][ T1034] vfs_get_tree+0x9e/0x290 [ 75.341341][ T1034] do_new_mount+0x251/0xb40 [ 75.341356][ T1034] ? security_capable+0x44/0x130 [ 75.341374][ T1034] path_mount+0x66a/0xff0 [ 75.341388][ T1034] ? putname+0x113/0x150 [ 75.341406][ T1034] __se_sys_mount+0x2bf/0x480 [ 75.341423][ T1034] ? ksys_write+0x1f3/0x260 [ 75.341440][ T1034] ? __x64_sys_mount+0xf0/0xf0 [ 75.341456][ T1034] __x64_sys_mount+0xc3/0xf0 [ 75.341472][ T1034] x64_sys_call+0x2021/0x2ee0 [ 75.341487][ T1034] do_syscall_64+0x57/0xf0 [ 75.341503][ T1034] ? clear_bhb_loop+0x50/0xa0 [ 75.341523][ T1034] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.341542][ T1034] RIP: 0033:0x7f7a8db9ce59 [ 75.341558][ T1034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.341571][ T1034] RSP: 002b:00007f7a8e9f1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.341590][ T1034] RAX: ffffffffffffffda RBX: 00007f7a8de15fa0 RCX: 00007f7a8db9ce59 [ 75.341603][ T1034] RDX: 0000200000000100 RSI: 0000200000000000 RDI: 0000200000000080 [ 75.341616][ T1034] RBP: 00007f7a8e9f1090 R08: 0000000000000000 R09: 0000000000000000 [ 75.341626][ T1034] R10: 0000000000a18082 R11: 0000000000000246 R12: 0000000000000002 [ 75.341637][ T1034] R13: 00007f7a8de16038 R14: 00007f7a8de15fa0 R15: 00007ffdb47a73b8 [ 75.341652][ T1034] [ 75.341681][ T1034] incfs: Can't find or create .index dir in ./cgroup [ 75.343456][ T1019] ,cpuset= [ 75.350747][ T1034] incfs: mount failed -12 [ 75.353813][ T1019] syz2,mems_allowed=0 [ 76.006539][ T1019] CPU: 1 UID: 0 PID: 1019 Comm: syz.2.250 Not tainted syzkaller #0 111b2e0850fa4a367413a3971448b32f560820b7 [ 76.006567][ T1019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 76.006578][ T1019] Call Trace: [ 76.006584][ T1019] [ 76.006591][ T1019] __dump_stack+0x21/0x30 [ 76.006618][ T1019] dump_stack_lvl+0x140/0x1c0 [ 76.006641][ T1019] ? __cfi_dump_stack_lvl+0x10/0x10 [ 76.006663][ T1019] dump_stack+0x19/0x20 [ 76.006683][ T1019] warn_alloc+0x1e7/0x2c0 [ 76.006705][ T1019] ? __kasan_kmalloc+0x28/0xb0 [ 76.006726][ T1019] ? __cfi_warn_alloc+0x10/0x10 [ 76.006747][ T1019] ? __get_vm_area_node+0x150/0x390 [ 76.006769][ T1019] ? kasan_save_alloc_info+0x3a/0x50 [ 76.006793][ T1019] ? __get_vm_area_node+0x382/0x390 [ 76.006815][ T1019] __vmalloc_node_range_noprof+0x365/0x1300 [ 76.006843][ T1019] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 76.006866][ T1019] ? kasan_save_alloc_info+0x3a/0x50 [ 76.006889][ T1019] ? __kasan_slab_alloc+0x73/0x90 [ 76.006908][ T1019] ? arch_dup_task_struct+0x5b/0xe0 [ 76.006939][ T1019] ? __asan_memcpy+0x5a/0x80 [ 76.006955][ T1019] dup_task_struct+0x5d6/0xd80 [ 76.006976][ T1019] ? copy_process+0x57c/0x3350 [ 76.006995][ T1019] ? _raw_spin_lock_irq+0x93/0x120 [ 76.007014][ T1019] ? copy_process+0x3350/0x3350 [ 76.007033][ T1019] ? __kasan_check_write+0x18/0x20 [ 76.007051][ T1019] copy_process+0x57c/0x3350 [ 76.007073][ T1019] ? kasan_save_alloc_info+0x3a/0x50 [ 76.007097][ T1019] ? __cfi_copy_process+0x10/0x10 [ 76.007114][ T1019] ? __kmalloc_cache_noprof+0x23c/0x470 [ 76.007130][ T1019] ? __kasan_check_write+0x18/0x20 [ 76.007145][ T1019] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 76.007164][ T1019] vhost_task_create+0x1f7/0x3f0 [ 76.007181][ T1019] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 76.007202][ T1019] ? __cfi_vhost_task_create+0x10/0x10 [ 76.007221][ T1019] ? __cfi_vhost_task_fn+0x10/0x10 [ 76.007238][ T1019] ? __kasan_check_write+0x18/0x20 [ 76.007254][ T1019] ? mutex_lock+0x97/0x1d0 [ 76.007273][ T1019] ? __cfi_mutex_lock+0x10/0x10 [ 76.007293][ T1019] ? kernel_text_address+0xa9/0xe0 [ 76.007315][ T1019] kvm_mmu_post_init_vm+0x161/0x300 [ 76.007339][ T1019] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 76.007362][ T1019] ? _parse_integer_limit+0x195/0x1e0 [ 76.007381][ T1019] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 76.007406][ T1019] ? kstrtoull+0x13b/0x1e0 [ 76.007421][ T1019] ? kstrtouint+0x78/0xf0 [ 76.007435][ T1019] ? ioctl_has_perm+0x1bc/0x500 [ 76.007449][ T1019] ? __asan_memcpy+0x5a/0x80 [ 76.007465][ T1019] ? ioctl_has_perm+0x408/0x500 [ 76.007480][ T1019] ? has_cap_mac_admin+0xd0/0xd0 [ 76.007495][ T1019] ? __kasan_check_write+0x18/0x20 [ 76.007510][ T1019] ? mutex_lock_killable+0x97/0x1d0 [ 76.007527][ T1019] ? __cfi_mutex_lock_killable+0x10/0x10 [ 76.007544][ T1019] ? proc_fail_nth_write+0x184/0x220 [ 76.007565][ T1019] kvm_vcpu_ioctl+0xa43/0x1000 [ 76.007581][ T1019] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 76.007596][ T1019] ? __cfi_vfs_write+0x10/0x10 [ 76.007613][ T1019] ? __kasan_check_write+0x18/0x20 [ 76.007629][ T1019] ? mutex_unlock+0x90/0x240 [ 76.007648][ T1019] ? __cfi_mutex_unlock+0x10/0x10 [ 76.007670][ T1019] ? bpf_lsm_file_ioctl+0xd/0x20 [ 76.007691][ T1019] ? security_file_ioctl+0x3e/0x110 [ 76.007714][ T1019] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 76.007730][ T1019] __se_sys_ioctl+0x132/0x1b0 [ 76.007751][ T1019] __x64_sys_ioctl+0x7f/0xa0 [ 76.007768][ T1019] x64_sys_call+0x1878/0x2ee0 [ 76.007785][ T1019] do_syscall_64+0x57/0xf0 [ 76.007802][ T1019] ? clear_bhb_loop+0x50/0xa0 [ 76.007822][ T1019] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.007840][ T1019] RIP: 0033:0x7f331a59ce59 [ 76.007855][ T1019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.007871][ T1019] RSP: 002b:00007f331b42d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.007891][ T1019] RAX: ffffffffffffffda RBX: 00007f331a815fa0 RCX: 00007f331a59ce59 [ 76.007904][ T1019] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 76.007923][ T1019] RBP: 00007f331b42d090 R08: 0000000000000000 R09: 0000000000000000 [ 76.007935][ T1019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.007947][ T1019] R13: 00007f331a816038 R14: 00007f331a815fa0 R15: 00007fff17999ee8 [ 76.007963][ T1019] [ 76.009058][ T1019] Mem-Info: [ 76.258468][ T444] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 76.265756][ T1019] active_anon:7704 inactive_anon:0 isolated_anon:0 [ 76.265756][ T1019] active_file:7899 inactive_file:12547 isolated_file:0 [ 76.265756][ T1019] unevictable:0 dirty:196 writeback:0 [ 76.265756][ T1019] slab_reclaimable:4860 slab_unreclaimable:71714 [ 76.265756][ T1019] mapped:24778 shmem:167 pagetables:1035 [ 76.265756][ T1019] sec_pagetables:0 bounce:0 [ 76.265756][ T1019] kernel_misc_reclaimable:0 [ 76.265756][ T1019] free:1524777 free_pcp:2418 free_cma:0 [ 76.338490][ T311] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 76.342122][ T1019] Node 0 active_anon:30744kB inactive_anon:0kB active_file:31596kB inactive_file:50192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99096kB dirty:796kB writeback:0kB shmem:656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6560kB pagetables:4088kB sec_pagetables:0kB all_unreclaimable? no [ 76.429804][ T444] usb 2-1: unable to get BOS descriptor or descriptor too short [ 76.434271][ T1019] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963396kB mlocked:0kB bounce:0kB free_pcp:5232kB local_pcp:5232kB free_cma:0kB [ 76.437403][ T444] usb 2-1: not running at top speed; connect to a high speed hub [ 76.440152][ T1019] lowmem_reserve[]: 0 3921 [ 76.448798][ T444] usb 2-1: config 1 has an invalid interface number: 99 but max is 0 [ 76.493735][ T1019] 3921 [ 76.502566][ T444] usb 2-1: config 1 has no interface number 0 [ 76.531978][ T1019] [ 76.539556][ T311] usb 4-1: Using ep0 maxpacket: 32 [ 76.569615][ T1019] Normal free:3141848kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30744kB inactive_anon:0kB active_file:31596kB inactive_file:50192kB unevictable:0kB writepending:796kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:4888kB local_pcp:4528kB free_cma:0kB [ 76.577109][ T444] usb 2-1: config 1 interface 99 has no altsetting 0 [ 76.581526][ T1019] lowmem_reserve[]: [ 76.590814][ T311] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 76.592427][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 76.598674][ T311] usb 4-1: config 0 has no interface number 0 [ 76.600796][ T1019] 0 [ 76.605944][ T311] usb 4-1: config 0 interface 184 has no altsetting 0 [ 76.637352][ T1019] 0 [ 76.644222][ T444] usb 2-1: New USB device found, idVendor=0403, idProduct=da70, bcdDevice=7f.3f [ 76.647650][ T1019] 0 [ 76.655876][ T444] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.663707][ T1019] [ 76.670657][ T444] usb 2-1: Product: syz [ 76.672139][ T1019] DMA32: [ 76.681384][ T444] usb 2-1: Manufacturer: ꇞ㤑캰䗆ⓣ᫶惧￳⅞코쎼㸭ᓟᠡ􉘞쾄㆔䶄嶱ㅋ돞ㅃ咏珢 [ 76.690580][ T1019] 5*4kB [ 76.692953][ T444] usb 2-1: SerialNumber: syz [ 76.701242][ T1019] (M) [ 76.704002][ T311] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 76.707445][ T1019] 4*8kB [ 76.710307][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.721803][ T1019] (M) [ 76.726959][ T311] usb 4-1: Product: syz [ 76.728803][ T1019] 4*16kB [ 76.733021][ T311] usb 4-1: Manufacturer: syz [ 76.740625][ T1019] (M) [ 76.743770][ T311] usb 4-1: SerialNumber: syz [ 76.752102][ T1019] 5*32kB [ 76.762090][ T311] usb 4-1: config 0 descriptor?? [ 76.766015][ T1019] (M) [ 76.770522][ T311] smsc75xx v1.0.0 [ 76.773048][ T1019] 3*64kB [ 76.787313][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 76.787468][ T1019] (M) [ 76.791332][ T9] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 76.795565][ T1019] 5*128kB [ 76.798076][ T9] usb 1-1: config 0 has no interface number 0 [ 76.798106][ T9] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 576 [ 76.806358][ T1019] (M) [ 76.809767][ T9] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 76.815445][ T1019] 5*256kB [ 76.826982][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 76.828133][ T1019] (M) [ 76.838365][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.841157][ T1019] 5*512kB [ 76.850428][ T9] usb 1-1: Product: syz [ 76.852862][ T1019] (M) [ 76.861017][ T9] usb 1-1: Manufacturer: syz [ 76.863945][ T1019] 4*1024kB [ 76.867997][ T9] usb 1-1: SerialNumber: syz [ 76.869216][ T9] usb 1-1: config 0 descriptor?? [ 76.874066][ T1019] (UM) [ 76.875732][ T1022] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 76.878376][ T1019] 4*2048kB [ 76.883227][ T1022] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 76.887980][ T1019] (M) 718*4096kB (M) = 2958164kB [ 76.913031][ T1019] Normal: 268*4kB (UE) 415*8kB (UME) 522*16kB (UME) 121*32kB (UME) 114*64kB (UME) 31*128kB (UME) 15*256kB (ME) 7*512kB (ME) 10*1024kB (ME) 12*2048kB (M) 751*4096kB (UM) = 3146216kB [ 76.931198][ T1019] 20609 total pagecache pages [ 76.936052][ T1019] 1 pages in swap cache [ 76.940636][ T1019] Free swap = 124832kB [ 76.944815][ T1019] Total swap = 124996kB [ 76.949311][ T1019] 2097051 pages RAM [ 76.953136][ T1019] 0 pages HighMem/MovableOnly [ 76.957824][ T1019] 352236 pages reserved [ 76.962551][ T1019] 0 pages cma reserved [ 76.968684][ T1019] Memory allocations: [ 76.972811][ T1019] 0 B 0 init/main.c:1477 func:do_initcalls [ 76.980294][ T1019] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 76.988695][ T1019] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 76.994083][ T444] usb 2-1: NDI device with a latency value of 1 [ 76.997361][ T1019] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 77.008641][ T444] ftdi_sio 2-1:1.99: FTDI USB Serial Device converter detected [ 77.011465][ T1019] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 77.026617][ T444] ftdi_sio ttyUSB0: unknown device type: 0x7f3f [ 77.027022][ T1019] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 77.041805][ T1019] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 77.048637][ T444] usb 2-1: USB disconnect, device number 28 [ 77.049933][ T1019] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 77.056873][ T444] ftdi_sio 2-1:1.99: device disconnected [ 77.063890][ T1019] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 77.078052][ T1019] 0 B 0 init/initramfs.c:101 func:find_link [ 77.095067][ T1022] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 77.102531][ T1022] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 77.370885][ T311] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 77.381738][ T311] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 77.390923][ T349] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 77.528450][ T349] usb 3-1: device descriptor read/64, error -71 [ 77.599258][ T311] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 77.610333][ T311] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 77.620079][ T311] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 77.629743][ T311] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 77.642744][ T311] usb 4-1: USB disconnect, device number 35 [ 77.778451][ T349] usb 3-1: device descriptor read/64, error -71 [ 77.868462][ T64] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 77.911233][ T9] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 77.921399][ T9] asix 1-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 77.931819][ T9] asix 1-1:0.188: probe with driver asix failed with error -61 [ 78.018457][ T64] usb 2-1: Using ep0 maxpacket: 32 [ 78.018462][ T349] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 78.032329][ T64] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 78.040621][ T64] usb 2-1: config 0 has no interface number 0 [ 78.046700][ T64] usb 2-1: config 0 interface 184 has no altsetting 0 [ 78.054911][ T64] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 78.064659][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.072725][ T64] usb 2-1: Product: syz [ 78.076898][ T64] usb 2-1: Manufacturer: syz [ 78.081519][ T64] usb 2-1: SerialNumber: syz [ 78.086601][ T64] usb 2-1: config 0 descriptor?? [ 78.092302][ T64] smsc75xx v1.0.0 [ 78.158459][ T349] usb 3-1: device descriptor read/64, error -71 [ 78.358452][ T340] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 78.398461][ T349] usb 3-1: device descriptor read/64, error -71 [ 78.508528][ T349] usb usb3-port1: attempt power cycle [ 78.510806][ T340] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 78.523028][ T340] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.531048][ T340] usb 4-1: Product: syz [ 78.535217][ T340] usb 4-1: Manufacturer: syz [ 78.539834][ T340] usb 4-1: SerialNumber: syz [ 78.815596][ T340] rtl8150 4-1:1.0: couldn't reset the device [ 78.821727][ T340] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 78.831459][ T340] usb 4-1: USB disconnect, device number 36 [ 78.848456][ T349] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 78.869440][ T349] usb 3-1: device descriptor read/8, error -71 [ 78.999457][ T349] usb 3-1: device descriptor read/8, error -71 [ 79.094145][ T64] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 79.105023][ T64] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 79.134734][ T311] usb 1-1: USB disconnect, device number 34 [ 79.146942][ T1051] fuse: Bad value for 'group_id' [ 79.151978][ T1051] fuse: Bad value for 'group_id' [ 79.169830][ T1053] FAULT_INJECTION: forcing a failure. [ 79.169830][ T1053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.182908][ T1053] CPU: 0 UID: 0 PID: 1053 Comm: syz.0.264 Not tainted syzkaller #0 111b2e0850fa4a367413a3971448b32f560820b7 [ 79.182934][ T1053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 79.182945][ T1053] Call Trace: [ 79.182949][ T1053] [ 79.182954][ T1053] __dump_stack+0x21/0x30 [ 79.182973][ T1053] dump_stack_lvl+0x140/0x1c0 [ 79.182986][ T1053] ? __cfi_dump_stack_lvl+0x10/0x10 [ 79.182999][ T1053] ? check_stack_object+0x138/0x150 [ 79.183009][ T1053] dump_stack+0x19/0x20 [ 79.183024][ T1053] should_fail_ex+0x3c2/0x510 [ 79.183036][ T1053] should_fail+0xf/0x20 [ 79.183045][ T1053] should_fail_usercopy+0x1e/0x30 [ 79.183056][ T1053] _copy_to_user+0x24/0xa0 [ 79.183068][ T1053] simple_read_from_buffer+0xed/0x160 [ 79.183082][ T1053] proc_fail_nth_read+0x1aa/0x220 [ 79.183096][ T1053] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 79.183109][ T1053] ? bt_sock_ioctl+0xf0/0x290 [ 79.183122][ T1053] ? bpf_lsm_file_permission+0xd/0x20 [ 79.183135][ T1053] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 79.183148][ T1053] vfs_read+0x28b/0xc70 [ 79.183158][ T1053] ? __cfi_vfs_read+0x10/0x10 [ 79.183166][ T1053] ? __kasan_check_write+0x18/0x20 [ 79.183176][ T1053] ? mutex_lock+0x97/0x1d0 [ 79.183188][ T1053] ? __cfi_mutex_lock+0x10/0x10 [ 79.183200][ T1053] ksys_read+0x145/0x260 [ 79.183209][ T1053] ? __cfi_ksys_read+0x10/0x10 [ 79.183219][ T1053] ? __kasan_check_read+0x15/0x20 [ 79.183228][ T1053] __x64_sys_read+0x7f/0x90 [ 79.183237][ T1053] x64_sys_call+0x2638/0x2ee0 [ 79.183246][ T1053] do_syscall_64+0x57/0xf0 [ 79.183256][ T1053] ? clear_bhb_loop+0x50/0xa0 [ 79.183268][ T1053] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.183279][ T1053] RIP: 0033:0x7f5ee3d5d68e [ 79.183289][ T1053] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 79.183297][ T1053] RSP: 002b:00007f5ee4bebfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 79.183309][ T1053] RAX: ffffffffffffffda RBX: 00007f5ee4bec6c0 RCX: 00007f5ee3d5d68e [ 79.183317][ T1053] RDX: 000000000000000f RSI: 00007f5ee4bec0a0 RDI: 0000000000000004 [ 79.183323][ T1053] RBP: 00007f5ee4bec090 R08: 0000000000000000 R09: 0000000000000000 [ 79.183330][ T1053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.183336][ T1053] R13: 00007f5ee4016038 R14: 00007f5ee4015fa0 R15: 00007ffe2bacfe48 [ 79.183344][ T1053] [ 79.278528][ T349] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 79.360845][ T1055] kvm: pic: single mode not supported [ 79.382619][ T1060] FAULT_INJECTION: forcing a failure. [ 79.382619][ T1060] name failslab, interval 1, probability 0, space 0, times 0 [ 79.383905][ T1055] kvm: pic: level sensitive irq not supported [ 79.392313][ T1060] CPU: 1 UID: 0 PID: 1060 Comm: syz.3.267 Not tainted syzkaller #0 111b2e0850fa4a367413a3971448b32f560820b7 [ 79.392339][ T1060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 79.392349][ T1060] Call Trace: [ 79.392354][ T1060] [ 79.392362][ T1060] __dump_stack+0x21/0x30 [ 79.392387][ T1060] dump_stack_lvl+0x140/0x1c0 [ 79.392412][ T1060] ? __cfi_dump_stack_lvl+0x10/0x10 [ 79.392434][ T1060] dump_stack+0x19/0x20 [ 79.392454][ T1060] should_fail_ex+0x3c2/0x510 [ 79.392472][ T1060] should_failslab+0xac/0x100 [ 79.392491][ T1060] __kmalloc_cache_noprof+0x41/0x470 [ 79.392509][ T1060] ? file_id_to_str+0xb9/0x1f0 [ 79.392528][ T1060] file_id_to_str+0xb9/0x1f0 [ 79.392545][ T1060] ? __kasan_check_write+0x18/0x20 [ 79.392561][ T1060] ? __cfi_file_id_to_str+0x10/0x10 [ 79.392587][ T1060] ? memdup_user+0xb1/0x170 [ 79.392609][ T1060] ? validate_name+0x186/0x1d0 [ 79.392630][ T1060] pending_reads_dispatch_ioctl+0xd0b/0x2080 [ 79.392653][ T1060] ? proc_fail_nth_write+0x184/0x220 [ 79.392675][ T1060] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 79.392697][ T1060] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 79.392720][ T1060] ? selinux_file_ioctl+0x732/0x1480 [ 79.392744][ T1060] ? vfs_write+0xbcf/0xfd0 [ 79.392759][ T1060] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 79.392783][ T1060] ? __cfi_vfs_write+0x10/0x10 [ 79.392799][ T1060] ? __kasan_check_write+0x18/0x20 [ 79.392814][ T1060] ? mutex_unlock+0x90/0x240 [ 79.392834][ T1060] ? __cfi_mutex_unlock+0x10/0x10 [ 79.392854][ T1060] ? bpf_lsm_file_ioctl+0xd/0x20 [ 79.392874][ T1060] ? security_file_ioctl+0x3e/0x110 [ 79.392896][ T1060] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 79.392919][ T1060] __se_sys_ioctl+0x132/0x1b0 [ 79.392938][ T1060] __x64_sys_ioctl+0x7f/0xa0 [ 79.392956][ T1060] x64_sys_call+0x1878/0x2ee0 [ 79.392972][ T1060] do_syscall_64+0x57/0xf0 [ 79.392988][ T1060] ? clear_bhb_loop+0x50/0xa0 [ 79.393007][ T1060] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.393026][ T1060] RIP: 0033:0x7f7a8db9ce59 [ 79.393040][ T1060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.393055][ T1060] RSP: 002b:00007f7a8e9f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.393074][ T1060] RAX: ffffffffffffffda RBX: 00007f7a8de15fa0 RCX: 00007f7a8db9ce59 [ 79.393087][ T1060] RDX: 00002000000000c0 RSI: 00000000c058671e RDI: 0000000000000004 [ 79.393099][ T1060] RBP: 00007f7a8e9f1090 R08: 0000000000000000 R09: 0000000000000000 [ 79.393110][ T1060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.393121][ T1060] R13: 00007f7a8de16038 R14: 00007f7a8de15fa0 R15: 00007ffdb47a73b8 [ 79.393135][ T1060] [ 79.393628][ T349] usb 3-1: device descriptor read/8, error -71 [ 79.400136][ T64] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 79.539462][ T349] usb 3-1: device descriptor read/8, error -71 [ 79.543846][ T64] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 79.678766][ T349] usb usb3-port1: unable to enumerate USB device [ 79.684984][ T64] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 79.776802][ T64] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 79.786265][ T64] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 79.798159][ T64] usb 2-1: USB disconnect, device number 29 [ 79.808486][ T444] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 79.840585][ T36] audit: type=1400 audit(1782781949.978:364): avc: denied { create } for pid=1063 comm="syz.0.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.860082][ T36] audit: type=1400 audit(1782781949.978:365): avc: denied { write } for pid=1063 comm="syz.0.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.969672][ T444] usb 4-1: unable to get BOS descriptor or descriptor too short [ 79.977727][ T444] usb 4-1: not running at top speed; connect to a high speed hub [ 79.986146][ T444] usb 4-1: config 1 has an invalid interface number: 99 but max is 0 [ 79.994287][ T444] usb 4-1: config 1 has no interface number 0 [ 80.000600][ T444] usb 4-1: config 1 interface 99 has no altsetting 0 [ 80.008591][ T444] usb 4-1: New USB device found, idVendor=0403, idProduct=da70, bcdDevice=7f.3f [ 80.017646][ T444] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.025675][ T444] usb 4-1: Product: syz [ 80.029885][ T444] usb 4-1: Manufacturer: ꇞ㤑캰䗆ⓣ᫶惧￳⅞코쎼㸭ᓟᠡ􉘞쾄㆔䶄嶱ㅋ돞ㅃ咏珢 [ 80.040913][ T444] usb 4-1: SerialNumber: syz [ 80.128456][ T349] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 80.160985][ T1073] netlink: 'syz.2.273': attribute type 27 has an invalid length. [ 80.188373][ T1077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.275'. [ 80.218443][ T64] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 80.282546][ T444] usb 4-1: NDI device with a latency value of 1 [ 80.288914][ T349] usb 1-1: Using ep0 maxpacket: 32 [ 80.294999][ T444] ftdi_sio 4-1:1.99: FTDI USB Serial Device converter detected [ 80.304186][ T349] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 80.312441][ T444] ftdi_sio ttyUSB0: unknown device type: 0x7f3f [ 80.318721][ T349] usb 1-1: config 0 has no interface number 0 [ 80.324793][ T349] usb 1-1: config 0 interface 184 has no altsetting 0 [ 80.332493][ T444] usb 4-1: USB disconnect, device number 37 [ 80.338878][ T444] ftdi_sio 4-1:1.99: device disconnected [ 80.347011][ T349] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 80.356352][ T349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.364350][ T349] usb 1-1: Product: syz [ 80.368522][ T349] usb 1-1: Manufacturer: syz [ 80.373105][ T349] usb 1-1: SerialNumber: syz [ 80.378187][ T349] usb 1-1: config 0 descriptor?? [ 80.383933][ T349] smsc75xx v1.0.0 [ 80.388447][ T64] usb 2-1: Using ep0 maxpacket: 16 [ 80.394619][ T64] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.404757][ T64] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.416157][ T64] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 80.425243][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.433467][ T64] usb 2-1: Product: syz [ 80.437634][ T64] usb 2-1: Manufacturer: syz [ 80.442265][ T64] usb 2-1: SerialNumber: syz [ 80.558448][ T340] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 80.649510][ T64] usb 2-1: 0:2 : does not exist [ 80.656246][ T64] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 80.667239][ T64] usb 2-1: USB disconnect, device number 30 [ 80.709822][ T340] usb 3-1: unable to get BOS descriptor or descriptor too short [ 80.718181][ T340] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.728306][ T340] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.738529][ T340] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 80.747581][ T340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.755679][ T340] usb 3-1: Product: syz [ 80.759886][ T340] usb 3-1: Manufacturer: syz [ 80.764474][ T340] usb 3-1: SerialNumber: syz [ 80.771261][ T340] usb 3-1: selecting invalid altsetting 1 [ 80.777222][ T340] usb 3-1: unit 6 not found! [ 80.840867][ T36] audit: type=1400 audit(1782781950.978:366): avc: denied { remove_name } for pid=296 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.865239][ T36] audit: type=1400 audit(1782781950.978:367): avc: denied { unlink } for pid=296 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.930906][ T310] bridge_slave_1: left allmulticast mode [ 80.936901][ T310] bridge_slave_1: left promiscuous mode [ 80.942854][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.950643][ T310] bridge_slave_0: left allmulticast mode [ 80.956367][ T310] bridge_slave_0: left promiscuous mode [ 80.962262][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.988480][ T349] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 81.000286][ T349] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 81.067489][ T36] audit: type=1400 audit(1782781951.198:368): avc: denied { mounton } for pid=1082 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 81.093149][ T310] veth1_macvtap: left promiscuous mode [ 81.098793][ T310] veth0_vlan: left promiscuous mode [ 81.172485][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.179762][ T1082] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.186948][ T1082] bridge_slave_0: entered allmulticast mode [ 81.193650][ T1082] bridge_slave_0: entered promiscuous mode [ 81.200901][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.208021][ T1082] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.211012][ T349] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 81.215442][ T1082] bridge_slave_1: entered allmulticast mode [ 81.225875][ T349] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 81.232903][ T1082] bridge_slave_1: entered promiscuous mode [ 81.244011][ T349] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 81.257053][ T349] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 81.267207][ T349] usb 1-1: USB disconnect, device number 35 [ 81.294712][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.301795][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.309089][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.316109][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.336617][ T414] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.344322][ T414] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.353797][ T385] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.360847][ T385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.369898][ T385] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.376941][ T385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.401220][ T1082] veth0_vlan: entered promiscuous mode [ 81.408614][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 81.412010][ T1082] veth1_macvtap: entered promiscuous mode [ 81.434005][ T36] audit: type=1400 audit(1782781951.568:369): avc: denied { mounton } for pid=1082 comm="syz-executor" path="/root/syzkaller.N2LltO/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 81.461842][ T36] audit: type=1400 audit(1782781951.568:370): avc: denied { unmount } for pid=1082 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 81.568446][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 81.574710][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 81.582969][ T9] usb 2-1: config 0 has no interface number 0 [ 81.589289][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 81.598373][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 81.598652][ T340] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 81.616663][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.624713][ T9] usb 2-1: Product: syz [ 81.628950][ T9] usb 2-1: Manufacturer: syz [ 81.633531][ T9] usb 2-1: SerialNumber: syz [ 81.641094][ T9] usb 2-1: config 0 descriptor?? [ 81.646902][ T9] smsc75xx v1.0.0 [ 81.648272][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 81.738520][ T311] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.800107][ T349] usb 3-1: USB disconnect, device number 32 [ 81.878676][ T311] usb 5-1: device descriptor read/64, error -71 [ 82.118492][ T311] usb 5-1: device descriptor read/64, error -71 [ 82.358439][ T311] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 82.488461][ T311] usb 5-1: device descriptor read/64, error -71 [ 82.548437][ T340] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 82.578470][ T64] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 82.648925][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 82.659784][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 82.699833][ T340] usb 3-1: unable to get BOS descriptor or descriptor too short [ 82.707854][ T340] usb 3-1: not running at top speed; connect to a high speed hub [ 82.716288][ T340] usb 3-1: config 1 has an invalid interface number: 99 but max is 0 [ 82.724456][ T340] usb 3-1: config 1 has no interface number 0 [ 82.730656][ T64] usb 1-1: Using ep0 maxpacket: 16 [ 82.735800][ T340] usb 3-1: config 1 interface 99 has no altsetting 0 [ 82.743400][ T64] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 82.748438][ T311] usb 5-1: device descriptor read/64, error -71 [ 82.751625][ T64] usb 1-1: config 1 has no interface number 0 [ 82.763979][ T64] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 82.773910][ T64] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 82.784008][ T340] usb 3-1: New USB device found, idVendor=0403, idProduct=da70, bcdDevice=7f.3f [ 82.793080][ T340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.801114][ T64] usb 1-1: config 1 interface 105 has no altsetting 0 [ 82.807934][ T340] usb 3-1: Product: syz [ 82.812135][ T340] usb 3-1: Manufacturer: ꇞ㤑캰䗆ⓣ᫶惧￳⅞코쎼㸭ᓟᠡ􉘞쾄㆔䶄嶱ㅋ돞ㅃ咏珢 [ 82.823124][ T340] usb 3-1: SerialNumber: syz [ 82.829117][ T64] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 82.838163][ T64] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 82.846380][ T64] usb 1-1: Product: syz [ 82.850606][ T64] usb 1-1: Manufacturer: syz [ 82.855197][ T64] usb 1-1: SerialNumber: syz [ 82.861463][ T1102] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 82.868873][ T1102] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 82.869023][ T311] usb usb5-port1: attempt power cycle [ 82.877328][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 82.892305][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 82.902001][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 82.912313][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 82.922997][ T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 82.932639][ T9] usb 2-1: USB disconnect, device number 31 [ 83.048242][ T340] usb 3-1: NDI device with a latency value of 1 [ 83.055107][ T340] ftdi_sio 3-1:1.99: FTDI USB Serial Device converter detected [ 83.063246][ T340] ftdi_sio ttyUSB0: unknown device type: 0x7f3f [ 83.070643][ T340] usb 3-1: USB disconnect, device number 33 [ 83.077196][ T340] ftdi_sio 3-1:1.99: device disconnected [ 83.218443][ T311] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 83.239421][ T311] usb 5-1: device descriptor read/8, error -71 [ 83.283212][ T1102] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 83.290438][ T1102] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 83.369432][ T311] usb 5-1: device descriptor read/8, error -71 [ 83.391735][ T1104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.286'. [ 83.481095][ T1107] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3642988519 (466302530432 ns) > initial count (459226025088 ns). Using initial count to start timer. [ 83.499260][ T64] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 5 [ 83.509991][ T64] aqc111 1-1:1.105: probe with driver aqc111 failed with error -61 [ 83.618491][ T311] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 83.639430][ T311] usb 5-1: device descriptor read/8, error -71 [ 83.661630][ T1113] SELinux: Context system_u: is not valid (left unmapped). [ 83.673086][ T36] audit: type=1400 audit(1782781953.808:371): avc: denied { relabelto } for pid=1112 comm="syz.2.289" name="79" dev="tmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 83.699854][ T36] audit: type=1400 audit(1782781953.808:372): avc: denied { associate } for pid=1112 comm="syz.2.289" name="79" dev="tmpfs" ino=434 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:" [ 83.725196][ T36] audit: type=1400 audit(1782781953.808:373): avc: denied { write } for pid=1112 comm="syz.2.289" name="79" dev="tmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 83.790163][ T311] usb 5-1: device descriptor read/8, error -71 [ 83.898851][ T311] usb usb5-port1: unable to enumerate USB device [ 84.098470][ T64] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 84.248454][ T64] usb 3-1: Using ep0 maxpacket: 32 [ 84.254640][ T64] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 84.262873][ T64] usb 3-1: config 0 has no interface number 0 [ 84.271188][ T64] usb 3-1: config 0 interface 184 has no altsetting 0 [ 84.279375][ T64] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 84.288488][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.296681][ T64] usb 3-1: Product: syz [ 84.301989][ T64] usb 3-1: Manufacturer: syz [ 84.306805][ T64] usb 3-1: SerialNumber: syz [ 84.313513][ T64] usb 3-1: config 0 descriptor?? [ 84.319562][ T64] smsc75xx v1.0.0 [ 84.908445][ T340] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 84.921530][ T64] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 84.932378][ T64] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 85.058437][ T340] usb 5-1: Using ep0 maxpacket: 32 [ 85.064637][ T340] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 85.072858][ T340] usb 5-1: config 0 has no interface number 0 [ 85.078974][ T340] usb 5-1: config 0 interface 184 has no altsetting 0 [ 85.087069][ T340] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 85.096153][ T340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.104163][ T340] usb 5-1: Product: syz [ 85.108315][ T340] usb 5-1: Manufacturer: syz [ 85.112948][ T340] usb 5-1: SerialNumber: syz [ 85.118354][ T340] usb 5-1: config 0 descriptor?? [ 85.124190][ T340] smsc75xx v1.0.0 [ 85.142168][ T64] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 85.153029][ T64] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 85.162605][ T64] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 85.172069][ T64] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 85.181714][ T64] usb 3-1: USB disconnect, device number 34 [ 85.223549][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 85.223565][ T36] audit: type=1326 audit(1782781955.358:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1130 comm="syz.1.296" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f381dd9ce59 code=0x0 [ 85.347691][ T9] usb 1-1: USB disconnect, device number 36 [ 85.878444][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 85.902761][ T64] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 86.029390][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.039609][ T64] usb 3-1: device descriptor read/64, error -71 [ 86.045877][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 86.054904][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 86.068642][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.084250][ T9] usb 1-1: config 0 descriptor?? [ 86.126814][ T340] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 86.137689][ T340] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 86.278474][ T64] usb 3-1: device descriptor read/64, error -71 [ 86.347981][ T340] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 86.358916][ T340] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 86.368578][ T340] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 86.379399][ T340] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 86.388916][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 86.396672][ T340] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 86.406195][ T340] usb 5-1: USB disconnect, device number 6 [ 86.528491][ T64] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 86.548464][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 86.554694][ T9] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 86.562927][ T9] usb 2-1: config 1 has no interface number 0 [ 86.569802][ T9] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 86.579756][ T9] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 86.589748][ T9] usb 2-1: config 1 interface 105 has no altsetting 0 [ 86.597756][ T9] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 86.606920][ T9] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 86.615105][ T9] usb 2-1: Product: syz [ 86.619587][ T9] usb 2-1: Manufacturer: syz [ 86.624181][ T9] usb 2-1: SerialNumber: syz [ 86.629677][ T1157] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 86.636977][ T1157] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 86.668444][ T64] usb 3-1: device descriptor read/64, error -71 [ 86.912673][ T64] usb 3-1: device descriptor read/64, error -71 [ 86.932856][ T1164] FAULT_INJECTION: forcing a failure. [ 86.932856][ T1164] name failslab, interval 1, probability 0, space 0, times 0 [ 86.945590][ T1164] CPU: 0 UID: 0 PID: 1164 Comm: syz.4.309 Not tainted syzkaller #0 111b2e0850fa4a367413a3971448b32f560820b7 [ 86.945617][ T1164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 86.945627][ T1164] Call Trace: [ 86.945633][ T1164] [ 86.945640][ T1164] __dump_stack+0x21/0x30 [ 86.945663][ T1164] dump_stack_lvl+0x140/0x1c0 [ 86.945676][ T1164] ? __cfi_dump_stack_lvl+0x10/0x10 [ 86.945689][ T1164] ? expand_files+0xda/0x6f0 [ 86.945702][ T1164] dump_stack+0x19/0x20 [ 86.945713][ T1164] should_fail_ex+0x3c2/0x510 [ 86.945724][ T1164] should_failslab+0xac/0x100 [ 86.945736][ T1164] kmem_cache_alloc_noprof+0x42/0x410 [ 86.945746][ T1164] ? alloc_empty_file+0xbf/0x270 [ 86.945758][ T1164] ? _raw_spin_unlock+0x45/0x60 [ 86.945769][ T1164] alloc_empty_file+0xbf/0x270 [ 86.945781][ T1164] dentry_open+0x4b/0xb0 [ 86.945798][ T1164] dir_relative_path_resolve+0x7e/0x110 [ 86.945814][ T1164] pending_reads_dispatch_ioctl+0x10f5/0x2080 [ 86.945828][ T1164] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 86.945842][ T1164] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 86.945856][ T1164] ? selinux_file_ioctl+0x732/0x1480 [ 86.945871][ T1164] ? vfs_write+0xbcf/0xfd0 [ 86.945880][ T1164] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 86.945894][ T1164] ? __cfi_vfs_write+0x10/0x10 [ 86.945903][ T1164] ? __kasan_check_write+0x18/0x20 [ 86.945912][ T1164] ? mutex_unlock+0x90/0x240 [ 86.945924][ T1164] ? __cfi_mutex_unlock+0x10/0x10 [ 86.945936][ T1164] ? bpf_lsm_file_ioctl+0xd/0x20 [ 86.945949][ T1164] ? security_file_ioctl+0x3e/0x110 [ 86.945963][ T1164] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 86.945977][ T1164] __se_sys_ioctl+0x132/0x1b0 [ 86.945989][ T1164] __x64_sys_ioctl+0x7f/0xa0 [ 86.945999][ T1164] x64_sys_call+0x1878/0x2ee0 [ 86.946008][ T1164] do_syscall_64+0x57/0xf0 [ 86.946018][ T1164] ? clear_bhb_loop+0x50/0xa0 [ 86.946031][ T1164] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 86.946042][ T1164] RIP: 0033:0x7fe21b59ce59 [ 86.946051][ T1164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.946060][ T1164] RSP: 002b:00007fe21c3d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.946076][ T1164] RAX: ffffffffffffffda RBX: 00007fe21b815fa0 RCX: 00007fe21b59ce59 [ 86.946083][ T1164] RDX: 00002000000000c0 RSI: 00000000c058671e RDI: 0000000000000004 [ 86.946090][ T1164] RBP: 00007fe21c3d0090 R08: 0000000000000000 R09: 0000000000000000 [ 86.946097][ T1164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.946103][ T1164] R13: 00007fe21b816038 R14: 00007fe21b815fa0 R15: 00007fff9ccdde18 [ 86.946111][ T1164] [ 87.213008][ T64] usb usb3-port1: attempt power cycle [ 87.213649][ T1157] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 87.226631][ T1157] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 87.436999][ T9] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 5 [ 87.447838][ T9] aqc111 2-1:1.105: probe with driver aqc111 failed with error -61 [ 87.558710][ T64] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 87.597264][ T64] usb 3-1: device descriptor read/8, error -71 [ 87.652945][ T1176] FAULT_INJECTION: forcing a failure. [ 87.652945][ T1176] name failslab, interval 1, probability 0, space 0, times 0 [ 87.665582][ T1176] CPU: 0 UID: 0 PID: 1176 Comm: syz.4.313 Not tainted syzkaller #0 111b2e0850fa4a367413a3971448b32f560820b7 [ 87.665609][ T1176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 87.665619][ T1176] Call Trace: [ 87.665625][ T1176] [ 87.665631][ T1176] __dump_stack+0x21/0x30 [ 87.665652][ T1176] dump_stack_lvl+0x140/0x1c0 [ 87.665667][ T1176] ? __cfi_dump_stack_lvl+0x10/0x10 [ 87.665689][ T1176] dump_stack+0x19/0x20 [ 87.665710][ T1176] should_fail_ex+0x3c2/0x510 [ 87.665724][ T1176] should_failslab+0xac/0x100 [ 87.665736][ T1176] kmem_cache_alloc_noprof+0x42/0x410 [ 87.665746][ T1176] ? security_file_alloc+0x49/0x220 [ 87.665760][ T1176] ? kasan_save_alloc_info+0x3a/0x50 [ 87.665775][ T1176] security_file_alloc+0x49/0x220 [ 87.665787][ T1176] init_file+0x9e/0x210 [ 87.665800][ T1176] alloc_empty_file+0xd9/0x270 [ 87.665811][ T1176] dentry_open+0x4b/0xb0 [ 87.665823][ T1176] init_new_file+0x106/0x530 [ 87.665837][ T1176] ? chmod+0x310/0x310 [ 87.665850][ T1176] ? __kasan_check_write+0x18/0x20 [ 87.665859][ T1176] pending_reads_dispatch_ioctl+0x1c49/0x2080 [ 87.665874][ T1176] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 87.665887][ T1176] ? selinux_file_ioctl+0x732/0x1480 [ 87.665904][ T1176] ? vfs_write+0xbcf/0xfd0 [ 87.665912][ T1176] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 87.665926][ T1176] ? __cfi_vfs_write+0x10/0x10 [ 87.665935][ T1176] ? __kasan_check_write+0x18/0x20 [ 87.665944][ T1176] ? mutex_unlock+0x90/0x240 [ 87.665957][ T1176] ? __cfi_mutex_unlock+0x10/0x10 [ 87.665969][ T1176] ? bpf_lsm_file_ioctl+0xd/0x20 [ 87.665981][ T1176] ? security_file_ioctl+0x3e/0x110 [ 87.665994][ T1176] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 87.666008][ T1176] __se_sys_ioctl+0x132/0x1b0 [ 87.666019][ T1176] __x64_sys_ioctl+0x7f/0xa0 [ 87.666030][ T1176] x64_sys_call+0x1878/0x2ee0 [ 87.666039][ T1176] do_syscall_64+0x57/0xf0 [ 87.666048][ T1176] ? clear_bhb_loop+0x50/0xa0 [ 87.666060][ T1176] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 87.666071][ T1176] RIP: 0033:0x7fe21b59ce59 [ 87.666082][ T1176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.666090][ T1176] RSP: 002b:00007fe21c3d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.666102][ T1176] RAX: ffffffffffffffda RBX: 00007fe21b815fa0 RCX: 00007fe21b59ce59 [ 87.666110][ T1176] RDX: 00002000000000c0 RSI: 00000000c058671e RDI: 0000000000000004 [ 87.666116][ T1176] RBP: 00007fe21c3d0090 R08: 0000000000000000 R09: 0000000000000000 [ 87.666123][ T1176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 87.666129][ T1176] R13: 00007fe21b816038 R14: 00007fe21b815fa0 R15: 00007fff9ccdde18 [ 87.666136][ T1176] [ 87.959951][ T64] usb 3-1: device descriptor read/8, error -71 [ 88.198484][ T64] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 88.219495][ T64] usb 3-1: device descriptor read/8, error -71 [ 88.248465][ T311] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 88.359559][ T64] usb 3-1: device descriptor read/8, error -71 [ 88.399551][ T311] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 88.410587][ T311] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.420333][ T311] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 88.429402][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.438816][ T311] hub 5-1:4.0: USB hub found [ 88.468544][ T64] usb usb3-port1: unable to enumerate USB device [ 88.644472][ T311] hub 5-1:4.0: 2 ports detected [ 88.649453][ T311] usb 5-1: selecting invalid altsetting 1 [ 88.652250][ T64] usb 1-1: USB disconnect, device number 37 [ 88.655247][ T311] hub 5-1:4.0: Using single TT (err -22) [ 88.708006][ T36] audit: type=1400 audit(1782781958.838:382): avc: denied { read write } for pid=1189 comm="syz.2.319" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 88.708720][ T1190] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 88.732643][ T36] audit: type=1400 audit(1782781958.838:383): avc: denied { open } for pid=1189 comm="syz.2.319" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 88.766980][ T36] audit: type=1400 audit(1782781958.878:384): avc: denied { create } for pid=1189 comm="syz.2.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 88.786725][ T36] audit: type=1400 audit(1782781958.878:385): avc: denied { unlink } for pid=1189 comm="syz.2.319" name="#1" dev="tmpfs" ino=480 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 88.814968][ T36] audit: type=1400 audit(1782781958.878:386): avc: denied { mount } for pid=1189 comm="syz.2.319" name="/" dev="overlay" ino=475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 88.848304][ T311] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 88.854714][ T311] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 88.889534][ T1196] FAULT_INJECTION: forcing a failure. [ 88.889534][ T1196] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 88.902978][ T1196] CPU: 1 UID: 0 PID: 1196 Comm: syz.2.321 Not tainted syzkaller #0 111b2e0850fa4a367413a3971448b32f560820b7 [ 88.903004][ T1196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 88.903014][ T1196] Call Trace: [ 88.903019][ T1196] [ 88.903026][ T1196] __dump_stack+0x21/0x30 [ 88.903052][ T1196] dump_stack_lvl+0x140/0x1c0 [ 88.903071][ T1196] ? __cfi_dump_stack_lvl+0x10/0x10 [ 88.903091][ T1196] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 88.903109][ T1196] dump_stack+0x19/0x20 [ 88.903127][ T1196] should_fail_ex+0x3c2/0x510 [ 88.903144][ T1196] should_fail_alloc_page+0xec/0x110 [ 88.903163][ T1196] __alloc_pages_noprof+0x1c0/0x7e0 [ 88.903183][ T1196] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 88.903206][ T1196] __folio_alloc_noprof+0x14/0x80 [ 88.903225][ T1196] folio_prealloc+0x46/0x220 [ 88.903243][ T1196] do_pte_missing+0x16af/0x4440 [ 88.903262][ T1196] ? pte_marker_clear+0x1b0/0x1b0 [ 88.903279][ T1196] ? cgroup_rstat_updated+0x144/0x800 [ 88.903297][ T1196] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 88.903318][ T1196] handle_mm_fault+0x1189/0x1ba0 [ 88.903334][ T1196] ? __kasan_check_write+0x18/0x20 [ 88.903351][ T1196] ? __cfi_handle_mm_fault+0x10/0x10 [ 88.903368][ T1196] ? follow_page_pte+0x4b2/0xba0 [ 88.903388][ T1196] ? gup_must_unshare+0x1e0/0x1e0 [ 88.903407][ T1196] ? vma_is_secretmem+0x11/0x50 [ 88.903426][ T1196] ? check_vma_flags+0x36d/0x3a0 [ 88.903444][ T1196] __get_user_pages+0x114b/0x22d0 [ 88.903466][ T1196] ? populate_vma_page_range+0x220/0x220 [ 88.903483][ T1196] ? down_read+0x7f/0xe0 [ 88.903502][ T1196] ? __cfi_down_read+0x10/0x10 [ 88.903522][ T1196] __mm_populate+0x300/0x440 [ 88.903540][ T1196] do_mlock+0x7f3/0xa10 [ 88.903559][ T1196] ? fput+0x1a4/0x230 [ 88.903576][ T1196] ? lru_gen_add_folio+0x880/0x880 [ 88.903595][ T1196] ? ksys_write+0x1f3/0x260 [ 88.903609][ T1196] ? __cfi_ksys_write+0x10/0x10 [ 88.903624][ T1196] ? __kasan_check_read+0x15/0x20 [ 88.903639][ T1196] __x64_sys_mlock+0x64/0x80 [ 88.903657][ T1196] x64_sys_call+0x670/0x2ee0 [ 88.903671][ T1196] do_syscall_64+0x57/0xf0 [ 88.903685][ T1196] ? clear_bhb_loop+0x50/0xa0 [ 88.903702][ T1196] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 88.903720][ T1196] RIP: 0033:0x7f331a59ce59 [ 88.903733][ T1196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.903746][ T1196] RSP: 002b:00007f331b42d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 88.903763][ T1196] RAX: ffffffffffffffda RBX: 00007f331a815fa0 RCX: 00007f331a59ce59 [ 88.903774][ T1196] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 88.903784][ T1196] RBP: 00007f331b42d090 R08: 0000000000000000 R09: 0000000000000000 [ 88.903794][ T1196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 88.903803][ T1196] R13: 00007f331a816038 R14: 00007f331a815fa0 R15: 00007fff17999ee8 [ 88.903816][ T1196] [ 89.078439][ T64] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 89.163960][ T312] usb 2-1: USB disconnect, device number 32 [ 89.197410][ T1200] syzkaller1: entered promiscuous mode [ 89.217183][ T1200] syzkaller1: entered allmulticast mode [ 89.218794][ T311] usb 5-1: USB disconnect, device number 7 [ 89.241412][ T36] audit: type=1400 audit(1782781959.368:387): avc: denied { create } for pid=1201 comm="syz.2.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 89.318445][ T64] usb 1-1: Using ep0 maxpacket: 32 [ 89.324558][ T64] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 89.332915][ T64] usb 1-1: config 0 has no interface number 0 [ 89.339085][ T64] usb 1-1: config 0 interface 184 has no altsetting 0 [ 89.347133][ T64] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 89.356252][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.364451][ T64] usb 1-1: Product: syz [ 89.368635][ T64] usb 1-1: Manufacturer: syz [ 89.373245][ T64] usb 1-1: SerialNumber: syz [ 89.378354][ T64] usb 1-1: config 0 descriptor?? [ 89.384062][ T64] smsc75xx v1.0.0 [ 89.488436][ T340] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 89.518465][ T311] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 89.639385][ T340] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.649552][ T340] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 89.658546][ T340] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.667618][ T340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.676231][ T340] usb 3-1: config 0 descriptor?? [ 89.688433][ T311] usb 5-1: Using ep0 maxpacket: 16 [ 89.694664][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.705550][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.715309][ T311] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 89.728118][ T311] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 89.737271][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.745986][ T311] usb 5-1: config 0 descriptor?? [ 89.786587][ T64] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 89.797462][ T64] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 89.798431][ T349] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 89.807350][ T64] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 89.824976][ T64] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 89.965153][ T349] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 89.976134][ T349] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 89.988518][ T349] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 89.997574][ T349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.005606][ T349] usb 2-1: Product: syz [ 90.009856][ T349] usb 2-1: Manufacturer: syz [ 90.014457][ T349] usb 2-1: SerialNumber: syz [ 90.166090][ T311] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 90.173433][ T311] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 90.180678][ T311] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 90.187926][ T311] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 90.195168][ T311] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 90.202430][ T311] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 90.209681][ T311] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 90.216886][ T311] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 90.224246][ T311] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 90.232023][ T311] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 90.239346][ T311] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 90.246627][ T311] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 90.253938][ T311] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 90.261317][ T311] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 90.268569][ T349] usb 2-1: Can't get UAC3 power state for id 10 [ 90.274991][ T311] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 90.282766][ T349] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 90.292068][ T311] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000F/input/input10 [ 90.304989][ T311] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 90.318209][ T349] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 90.335179][ T349] usb 2-1: USB disconnect, device number 33 [ 90.344136][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 90.389266][ T311] usb 5-1: USB disconnect, device number 8 [ 90.829572][ T36] audit: type=1400 audit(1782781960.968:388): avc: denied { read } for pid=1226 comm="syz.1.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.909090][ T36] audit: type=1400 audit(1782781961.048:389): avc: denied { map } for pid=1232 comm="syz.4.334" path="socket:[11565]" dev="sockfs" ino=11565 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 90.939118][ T36] audit: type=1400 audit(1782781961.048:390): avc: denied { read accept } for pid=1232 comm="syz.4.334" path="socket:[11565]" dev="sockfs" ino=11565 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.032903][ T1246] FAULT_INJECTION: forcing a failure. [ 91.032903][ T1246] name failslab, interval 1, probability 0, space 0, times 0 [ 91.046475][ T1246] CPU: 0 UID: 0 PID: 1246 Comm: syz.1.339 Not tainted syzkaller #0 111b2e0850fa4a367413a3971448b32f560820b7 [ 91.046505][ T1246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 91.046516][ T1246] Call Trace: [ 91.046522][ T1246] [ 91.046530][ T1246] __dump_stack+0x21/0x30 [ 91.046556][ T1246] dump_stack_lvl+0x140/0x1c0 [ 91.046577][ T1246] ? __cfi_dump_stack_lvl+0x10/0x10 [ 91.046606][ T1246] dump_stack+0x19/0x20 [ 91.046626][ T1246] should_fail_ex+0x3c2/0x510 [ 91.046645][ T1246] should_failslab+0xac/0x100 [ 91.046664][ T1246] kmem_cache_alloc_noprof+0x42/0x410 [ 91.046682][ T1246] ? security_file_alloc+0x49/0x220 [ 91.046704][ T1246] ? kasan_save_alloc_info+0x3a/0x50 [ 91.046725][ T1246] security_file_alloc+0x49/0x220 [ 91.046747][ T1246] init_file+0x9e/0x210 [ 91.046767][ T1246] alloc_empty_file+0xd9/0x270 [ 91.046788][ T1246] dentry_open+0x4b/0xb0 [ 91.046808][ T1246] dir_relative_path_resolve+0x7e/0x110 [ 91.046831][ T1246] pending_reads_dispatch_ioctl+0x10f5/0x2080 [ 91.046855][ T1246] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 91.046878][ T1246] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 91.046900][ T1246] ? selinux_file_ioctl+0x732/0x1480 [ 91.046923][ T1246] ? vfs_write+0xbcf/0xfd0 [ 91.046937][ T1246] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 91.046958][ T1246] ? __cfi_vfs_write+0x10/0x10 [ 91.046974][ T1246] ? __kasan_check_write+0x18/0x20 [ 91.046989][ T1246] ? mutex_unlock+0x90/0x240 [ 91.047008][ T1246] ? __cfi_mutex_unlock+0x10/0x10 [ 91.047028][ T1246] ? bpf_lsm_file_ioctl+0xd/0x20 [ 91.047046][ T1246] ? security_file_ioctl+0x3e/0x110 [ 91.047067][ T1246] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 91.047088][ T1246] __se_sys_ioctl+0x132/0x1b0 [ 91.047109][ T1246] __x64_sys_ioctl+0x7f/0xa0 [ 91.047125][ T1246] x64_sys_call+0x1878/0x2ee0 [ 91.047139][ T1246] do_syscall_64+0x57/0xf0 [ 91.047154][ T1246] ? clear_bhb_loop+0x50/0xa0 [ 91.047170][ T1246] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 91.047184][ T1246] RIP: 0033:0x7f381dd9ce59 [ 91.047197][ T1246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.047213][ T1246] RSP: 002b:00007f381eba8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.047229][ T1246] RAX: ffffffffffffffda RBX: 00007f381e015fa0 RCX: 00007f381dd9ce59 [ 91.047239][ T1246] RDX: 00002000000000c0 RSI: 00000000c058671e RDI: 0000000000000004 [ 91.047248][ T1246] RBP: 00007f381eba8090 R08: 0000000000000000 R09: 0000000000000000 [ 91.047256][ T1246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.047265][ T1246] R13: 00007f381e016038 R14: 00007f381e015fa0 R15: 00007ffdaf331ae8 [ 91.047276][ T1246] [ 91.368472][ T311] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 91.440727][ T36] audit: type=1400 audit(1782781961.578:391): avc: denied { create } for pid=1253 comm="syz.1.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 91.520090][ T311] usb 5-1: unable to get BOS descriptor or descriptor too short [ 91.527878][ T36] audit: type=1400 audit(1782781961.658:392): avc: denied { write } for pid=1255 comm="syz.1.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 91.550414][ T311] usb 5-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 91.560978][ T311] usb 5-1: New USB device found, idVendor=6e6e, idProduct=1874, bcdDevice=fe.df [ 91.570449][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.578944][ T311] usb 5-1: Product: syz [ 91.583284][ T311] usb 5-1: Manufacturer: syz [ 91.587962][ T311] usb 5-1: SerialNumber: syz [ 91.597280][ T36] audit: type=1400 audit(1782781961.728:393): avc: denied { read } for pid=1255 comm="syz.1.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 91.681262][ T349] usb 1-1: USB disconnect, device number 38 [ 91.689216][ T1260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.345'. [ 91.721574][ T1264] netlink: 'syz.0.347': attribute type 27 has an invalid length. [ 91.803362][ T311] usb 5-1: USB disconnect, device number 9 [ 92.027749][ T36] audit: type=1400 audit(1782781962.158:394): avc: denied { cmd } for pid=1271 comm="iou-wrk-1272" path="socket:[11751]" dev="sockfs" ino=11751 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 92.116939][ T1285] FAULT_INJECTION: forcing a failure. [ 92.116939][ T1285] name failslab, interval 1, probability 0, space 0, times 0 [ 92.129712][ T1285] CPU: 0 UID: 0 PID: 1285 Comm: syz.0.352 Not tainted syzkaller #0 111b2e0850fa4a367413a3971448b32f560820b7 [ 92.129742][ T1285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 92.129754][ T1285] Call Trace: [ 92.129760][ T1285] [ 92.129769][ T1285] __dump_stack+0x21/0x30 [ 92.129797][ T1285] dump_stack_lvl+0x140/0x1c0 [ 92.129818][ T1285] ? __cfi_dump_stack_lvl+0x10/0x10 [ 92.129842][ T1285] dump_stack+0x19/0x20 [ 92.129862][ T1285] should_fail_ex+0x3c2/0x510 [ 92.129880][ T1285] should_failslab+0xac/0x100 [ 92.129901][ T1285] __kmalloc_cache_noprof+0x41/0x470 [ 92.129928][ T1285] ? incfs_alloc_bfc+0x68/0x200 [ 92.129949][ T1285] incfs_alloc_bfc+0x68/0x200 [ 92.129970][ T1285] init_new_file+0x144/0x530 [ 92.129993][ T1285] ? chmod+0x310/0x310 [ 92.130015][ T1285] ? __kasan_check_write+0x18/0x20 [ 92.130032][ T1285] pending_reads_dispatch_ioctl+0x1c49/0x2080 [ 92.130057][ T1285] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 92.130081][ T1285] ? selinux_file_ioctl+0x732/0x1480 [ 92.130106][ T1285] ? vfs_write+0xbcf/0xfd0 [ 92.130123][ T1285] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 92.130149][ T1285] ? __cfi_vfs_write+0x10/0x10 [ 92.130165][ T1285] ? __kasan_check_write+0x18/0x20 [ 92.130181][ T1285] ? mutex_unlock+0x90/0x240 [ 92.130202][ T1285] ? __cfi_mutex_unlock+0x10/0x10 [ 92.130224][ T1285] ? bpf_lsm_file_ioctl+0xd/0x20 [ 92.130246][ T1285] ? security_file_ioctl+0x3e/0x110 [ 92.130269][ T1285] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 92.130293][ T1285] __se_sys_ioctl+0x132/0x1b0 [ 92.130313][ T1285] __x64_sys_ioctl+0x7f/0xa0 [ 92.130332][ T1285] x64_sys_call+0x1878/0x2ee0 [ 92.130347][ T1285] do_syscall_64+0x57/0xf0 [ 92.130364][ T1285] ? clear_bhb_loop+0x50/0xa0 [ 92.130384][ T1285] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 92.130404][ T1285] RIP: 0033:0x7f5ee3d9ce59 [ 92.130420][ T1285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.130435][ T1285] RSP: 002b:00007f5ee4bec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.130455][ T1285] RAX: ffffffffffffffda RBX: 00007f5ee4015fa0 RCX: 00007f5ee3d9ce59 [ 92.130468][ T1285] RDX: 00002000000000c0 RSI: 00000000c058671e RDI: 0000000000000004 [ 92.130480][ T1285] RBP: 00007f5ee4bec090 R08: 0000000000000000 R09: 0000000000000000 [ 92.130493][ T1285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 92.130504][ T1285] R13: 00007f5ee4016038 R14: 00007f5ee4015fa0 R15: 00007ffe2bacfe48 [ 92.130520][ T1285] [ 92.266268][ T311] usb 3-1: USB disconnect, device number 39 [ 92.281102][ T1287] FAULT_INJECTION: forcing a failure. [ 92.281102][ T1287] name failslab, interval 1, probability 0, space 0, times 0 [ 92.334479][ T1293] capability: warning: `syz.4.356' uses 32-bit capabilities (legacy support in use) [ 92.339531][ T1287] CPU: 0 UID: 0 PID: 1287 Comm: syz.2.354 Not tainted syzkaller #0 111b2e0850fa4a367413a3971448b32f560820b7 [ 92.339560][ T1287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 92.339572][ T1287] Call Trace: [ 92.339578][ T1287] [ 92.339586][ T1287] __dump_stack+0x21/0x30 [ 92.339614][ T1287] dump_stack_lvl+0x140/0x1c0 [ 92.339635][ T1287] ? __cfi_dump_stack_lvl+0x10/0x10 [ 92.339656][ T1287] ? pcpu_memcg_post_alloc_hook+0x202/0x2e0 [ 92.339677][ T1287] ? mutex_unlock+0x90/0x240 [ 92.339698][ T1287] ? pcpu_alloc_noprof+0x1440/0x1440 [ 92.339717][ T1287] dump_stack+0x19/0x20 [ 92.339737][ T1287] should_fail_ex+0x3c2/0x510 [ 92.339755][ T1287] should_failslab+0xac/0x100 [ 92.339776][ T1287] __kmalloc_cache_noprof+0x41/0x470 [ 92.339794][ T1287] ? percpu_ref_init+0xe3/0x4d0 [ 92.339813][ T1287] percpu_ref_init+0xe3/0x4d0 [ 92.339830][ T1287] ? __cfi_cgroup_bpf_release_fn+0x10/0x10 [ 92.339854][ T1287] cgroup_bpf_inherit+0x66/0x4c0 [ 92.339882][ T1287] cgroup_mkdir+0xd38/0x1600 [ 92.339903][ T1287] ? __cfi_cgroup_mkdir+0x10/0x10 [ 92.339922][ T1287] kernfs_iop_mkdir+0x1bb/0x2d0 [ 92.339943][ T1287] vfs_mkdir+0x58e/0x810 [ 92.339965][ T1287] open_or_create_special_dir+0xf1/0x200 [ 92.339983][ T1287] incfs_mount_fs+0x433/0x970 [ 92.340001][ T1287] ? __cfi_incfs_mount_fs+0x10/0x10 [ 92.340027][ T1287] ? vfs_parse_fs_string+0x10f/0x180 [ 92.340047][ T1287] ? selinux_capable+0x38/0x50 [ 92.340068][ T1287] legacy_get_tree+0x103/0x1b0 [ 92.340089][ T1287] ? __cfi_incfs_mount_fs+0x10/0x10 [ 92.340106][ T1287] vfs_get_tree+0x9e/0x290 [ 92.340123][ T1287] do_new_mount+0x251/0xb40 [ 92.340140][ T1287] ? security_capable+0x44/0x130 [ 92.340158][ T1287] path_mount+0x66a/0xff0 [ 92.340173][ T1287] ? putname+0x113/0x150 [ 92.340191][ T1287] __se_sys_mount+0x2bf/0x480 [ 92.340208][ T1287] ? ksys_write+0x1f3/0x260 [ 92.340230][ T1287] ? __x64_sys_mount+0xf0/0xf0 [ 92.340247][ T1287] __x64_sys_mount+0xc3/0xf0 [ 92.340264][ T1287] x64_sys_call+0x2021/0x2ee0 [ 92.340280][ T1287] do_syscall_64+0x57/0xf0 [ 92.340296][ T1287] ? clear_bhb_loop+0x50/0xa0 [ 92.340316][ T1287] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 92.340335][ T1287] RIP: 0033:0x7f331a59ce59 [ 92.340351][ T1287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.340366][ T1287] RSP: 002b:00007f331b42d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 92.340384][ T1287] RAX: ffffffffffffffda RBX: 00007f331a815fa0 RCX: 00007f331a59ce59 [ 92.340398][ T1287] RDX: 0000200000000100 RSI: 0000200000000000 RDI: 0000200000000080 [ 92.340410][ T1287] RBP: 00007f331b42d090 R08: 0000000000000000 R09: 0000000000000000 [ 92.340422][ T1287] R10: 0000000000a18082 R11: 0000000000000246 R12: 0000000000000002 [ 92.340433][ T1287] R13: 00007f331a816038 R14: 00007f331a815fa0 R15: 00007fff17999ee8 [ 92.340448][ T1287] [ 92.340584][ T1287] incfs: Can't find or create .index dir in ./cgroup [ 92.388175][ T1297] fuse: Unknown parameter 'grou00000000000000000000' [ 92.390547][ T1287] incfs: mount failed -12 [ 92.558631][ T349] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 92.621439][ T1301] FAULT_INJECTION: forcing a failure. [ 92.621439][ T1301] name failslab, interval 1, probability 0, space 0, times 0 [ 92.624341][ T31] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 92.630437][ T1301] CPU: 0 UID: 0 PID: 1301 Comm: syz.2.360 Not tainted syzkaller #0 111b2e0850fa4a367413a3971448b32f560820b7 [ 92.630465][ T1301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 92.630476][ T1301] Call Trace: [ 92.630483][ T1301] [ 92.630490][ T1301] __dump_stack+0x21/0x30 [ 92.630518][ T1301] dump_stack_lvl+0x140/0x1c0 [ 92.630540][ T1301] ? __cfi_dump_stack_lvl+0x10/0x10 [ 92.630563][ T1301] ? xfrm_user_rcv_msg+0x5b0/0x900 [ 92.630585][ T1301] dump_stack+0x19/0x20 [ 92.630604][ T1301] should_fail_ex+0x3c2/0x510 [ 92.630621][ T1301] should_failslab+0xac/0x100 [ 92.630645][ T1301] kmem_cache_alloc_node_noprof+0x45/0x420 [ 92.630664][ T1301] ? __alloc_skb+0x10c/0x360 [ 92.630685][ T1301] __alloc_skb+0x10c/0x360 [ 92.630704][ T1301] netlink_ack+0x155/0xa50 [ 92.630726][ T1301] ? avc_has_perm_noaudit+0x289/0x360 [ 92.630746][ T1301] ? avc_has_perm+0x155/0x240 [ 92.630765][ T1301] netlink_rcv_skb+0x2cb/0x4e0 [ 92.630787][ T1301] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 92.630810][ T1301] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 92.630833][ T1301] ? __kasan_check_write+0x18/0x20 [ 92.630849][ T1301] ? mutex_lock+0x97/0x1d0 [ 92.630869][ T1301] ? __cfi_mutex_lock+0x10/0x10 [ 92.630889][ T1301] ? netlink_autobind+0x1c0/0x1c0 [ 92.630906][ T1301] xfrm_netlink_rcv+0x76/0x90 [ 92.630928][ T1301] netlink_unicast+0x8bc/0xa70 [ 92.630950][ T1301] netlink_sendmsg+0x7d1/0xad0 [ 92.630980][ T1301] ? __cfi_netlink_sendmsg+0x10/0x10 [ 92.631003][ T1301] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 92.631021][ T1301] ? security_socket_sendmsg+0x3d/0x100 [ 92.631042][ T1301] ____sys_sendmsg+0x99e/0xa00 [ 92.631067][ T1301] ? __import_iovec+0x5b9/0x7d0 [ 92.631089][ T1301] ? __sys_sendmsg_sock+0x50/0x50 [ 92.631113][ T1301] ? import_iovec+0x80/0xb0 [ 92.631134][ T1301] ___sys_sendmsg+0x2a6/0x370 [ 92.631157][ T1301] ? __sys_sendmsg+0x2a0/0x2a0 [ 92.631180][ T1301] ? proc_fail_nth_write+0x184/0x220 [ 92.631203][ T1301] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 92.631228][ T1301] ? __fget_files+0x2bc/0x330 [ 92.631248][ T1301] __x64_sys_sendmsg+0x206/0x2e0 [ 92.631263][ T1301] ? fput+0x1a4/0x230 [ 92.631283][ T1301] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 92.631299][ T1301] ? ksys_write+0x1f3/0x260 [ 92.631316][ T1301] ? __kasan_check_read+0x15/0x20 [ 92.631333][ T1301] x64_sys_call+0x2a4c/0x2ee0 [ 92.631350][ T1301] do_syscall_64+0x57/0xf0 [ 92.631366][ T1301] ? clear_bhb_loop+0x50/0xa0 [ 92.631385][ T1301] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 92.631405][ T1301] RIP: 0033:0x7f331a59ce59 [ 92.631420][ T1301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.631433][ T1301] RSP: 002b:00007f331b42d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.631453][ T1301] RAX: ffffffffffffffda RBX: 00007f331a815fa0 RCX: 00007f331a59ce59 [ 92.631465][ T1301] RDX: 0000000000004000 RSI: 0000200000000440 RDI: 0000000000000004 [ 92.631477][ T1301] RBP: 00007f331b42d090 R08: 0000000000000000 R09: 0000000000000000 [ 92.631489][ T1301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.631500][ T1301] R13: 00007f331a816038 R14: 00007f331a815fa0 R15: 00007fff17999ee8 [ 92.631515][ T1301] [ 92.918424][ T64] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 93.058499][ T31] usb 2-1: device descriptor read/64, error -71 [ 93.099486][ T349] usb 1-1: Using ep0 maxpacket: 32 [ 93.105686][ T349] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 93.107348][ T36] audit: type=1400 audit(1782781963.238:395): avc: denied { write } for pid=1306 comm="syz.4.363" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.113908][ T349] usb 1-1: config 0 has no interface number 0 [ 93.140221][ T349] usb 1-1: config 0 interface 184 has no altsetting 0 [ 93.146561][ T36] audit: type=1400 audit(1782781963.278:396): avc: denied { ioctl } for pid=1306 comm="syz.4.363" path="socket:[11174]" dev="sockfs" ino=11174 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.152550][ T349] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 93.171535][ T36] audit: type=1400 audit(1782781963.278:397): avc: denied { bind } for pid=1306 comm="syz.4.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 93.180875][ T349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.207598][ T349] usb 1-1: Product: syz [ 93.211823][ T349] usb 1-1: Manufacturer: syz [ 93.216487][ T349] usb 1-1: SerialNumber: syz [ 93.219438][ T64] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.222036][ T349] usb 1-1: config 0 descriptor?? [ 93.231502][ T64] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 93.238478][ T349] smsc75xx v1.0.0 [ 93.245305][ T64] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.257780][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.266396][ T64] usb 3-1: config 0 descriptor?? [ 93.358485][ T31] usb 2-1: device descriptor read/64, error -71 [ 93.378433][ T312] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 93.538440][ T312] usb 5-1: Using ep0 maxpacket: 32 [ 93.544866][ T312] usb 5-1: unable to get BOS descriptor or descriptor too short [ 93.554548][ T312] usb 5-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 93.563742][ T312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.571757][ T312] usb 5-1: Product: syz [ 93.575936][ T312] usb 5-1: Manufacturer: syz [ 93.580940][ T312] usb 5-1: SerialNumber: syz [ 93.598878][ T31] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 93.639548][ T349] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 93.650354][ T349] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 93.660715][ T349] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 93.670998][ T349] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 93.738465][ T31] usb 2-1: device descriptor read/64, error -71 [ 93.788750][ T312] usb 5-1: Fast Track Pro switching to config #2 [ 93.795805][ T312] usb 5-1: USB disconnect, device number 10 [ 93.978490][ T31] usb 2-1: device descriptor read/64, error -71 [ 94.088544][ T31] usb usb2-port1: attempt power cycle [ 94.335654][ T1320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.366'. [ 94.356072][ T1323] fuse: Unknown parameter 'grou00000000000000000000' [ 94.375321][ T1325] syzkaller1: entered promiscuous mode [ 94.380832][ T1325] syzkaller1: entered allmulticast mode [ 94.428480][ T31] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 94.449403][ T31] usb 2-1: device descriptor read/8, error -71 [ 94.579401][ T31] usb 2-1: device descriptor read/8, error -71 [ 94.748488][ T312] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 94.818479][ T31] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 94.839536][ T31] usb 2-1: device descriptor read/8, error -71 [ 94.878494][ T312] usb 5-1: device descriptor read/64, error -71 [ 94.969481][ T31] usb 2-1: device descriptor read/8, error -71 [ 95.078507][ T31] usb usb2-port1: unable to enumerate USB device [ 95.118462][ T312] usb 5-1: device descriptor read/64, error -71 [ 95.295477][ T31] usb 1-1: USB disconnect, device number 39 [ 95.330296][ T1335] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=1335 comm=syz.0.372 [ 95.358432][ T312] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 95.385836][ T1343] fuse: Unknown parameter 'grou00000000000000000000' [ 95.412490][ T1347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.378'. [ 95.432626][ T1349] FAULT_INJECTION: forcing a failure. [ 95.432626][ T1349] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 95.445992][ T1349] CPU: 1 UID: 0 PID: 1349 Comm: syz.1.379 Not tainted syzkaller #0 111b2e0850fa4a367413a3971448b32f560820b7 [ 95.446020][ T1349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 95.446029][ T1349] Call Trace: [ 95.446034][ T1349] [ 95.446039][ T1349] __dump_stack+0x21/0x30 [ 95.446058][ T1349] dump_stack_lvl+0x140/0x1c0 [ 95.446072][ T1349] ? __cfi_dump_stack_lvl+0x10/0x10 [ 95.446085][ T1349] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 95.446098][ T1349] dump_stack+0x19/0x20 [ 95.446110][ T1349] should_fail_ex+0x3c2/0x510 [ 95.446122][ T1349] should_fail_alloc_page+0xec/0x110 [ 95.446135][ T1349] __alloc_pages_noprof+0x1c0/0x7e0 [ 95.446152][ T1349] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 95.446167][ T1349] __folio_alloc_noprof+0x14/0x80 [ 95.446180][ T1349] folio_prealloc+0x46/0x220 [ 95.446192][ T1349] do_pte_missing+0x16af/0x4440 [ 95.446205][ T1349] ? pte_marker_clear+0x1b0/0x1b0 [ 95.446217][ T1349] ? cgroup_rstat_updated+0x144/0x800 [ 95.446229][ T1349] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 95.446244][ T1349] handle_mm_fault+0x1189/0x1ba0 [ 95.446255][ T1349] ? __kasan_check_write+0x18/0x20 [ 95.446266][ T1349] ? __cfi_handle_mm_fault+0x10/0x10 [ 95.446277][ T1349] ? follow_page_pte+0x4b2/0xba0 [ 95.446291][ T1349] ? gup_must_unshare+0x1e0/0x1e0 [ 95.446303][ T1349] ? vma_is_secretmem+0x11/0x50 [ 95.446317][ T1349] ? check_vma_flags+0x36d/0x3a0 [ 95.446329][ T1349] __get_user_pages+0x114b/0x22d0 [ 95.446343][ T1349] ? populate_vma_page_range+0x220/0x220 [ 95.446355][ T1349] ? down_read+0x7f/0xe0 [ 95.446368][ T1349] ? __cfi_down_read+0x10/0x10 [ 95.446381][ T1349] __mm_populate+0x300/0x440 [ 95.446393][ T1349] do_mlock+0x7f3/0xa10 [ 95.446406][ T1349] ? fput+0x1a4/0x230 [ 95.446417][ T1349] ? lru_gen_add_folio+0x880/0x880 [ 95.446430][ T1349] ? ksys_write+0x1f3/0x260 [ 95.446440][ T1349] ? __cfi_ksys_write+0x10/0x10 [ 95.446450][ T1349] ? __kasan_check_read+0x15/0x20 [ 95.446459][ T1349] __x64_sys_mlock+0x64/0x80 [ 95.446471][ T1349] x64_sys_call+0x670/0x2ee0 [ 95.446480][ T1349] do_syscall_64+0x57/0xf0 [ 95.446490][ T1349] ? clear_bhb_loop+0x50/0xa0 [ 95.446502][ T1349] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 95.446513][ T1349] RIP: 0033:0x7f381dd9ce59 [ 95.446523][ T1349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.446532][ T1349] RSP: 002b:00007f381eba8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 95.446545][ T1349] RAX: ffffffffffffffda RBX: 00007f381e015fa0 RCX: 00007f381dd9ce59 [ 95.446553][ T1349] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 95.446560][ T1349] RBP: 00007f381eba8090 R08: 0000000000000000 R09: 0000000000000000 [ 95.446566][ T1349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 95.446573][ T1349] R13: 00007f381e016038 R14: 00007f381e015fa0 R15: 00007ffdaf331ae8 [ 95.446581][ T1349] [ 95.673570][ T64] usb 3-1: USB disconnect, device number 40 [ 95.686411][ T312] usb 5-1: device descriptor read/64, error -71 [ 95.757666][ T1354] FAULT_INJECTION: forcing a failure. [ 95.757666][ T1354] name failslab, interval 1, probability 0, space 0, times 0 [ 95.774314][ T1354] CPU: 0 UID: 0 PID: 1354 Comm: syz.2.382 Not tainted syzkaller #0 111b2e0850fa4a367413a3971448b32f560820b7 [ 95.774343][ T1354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 95.774353][ T1354] Call Trace: [ 95.774359][ T1354] [ 95.774366][ T1354] __dump_stack+0x21/0x30 [ 95.774392][ T1354] dump_stack_lvl+0x140/0x1c0 [ 95.774411][ T1354] ? __cfi_dump_stack_lvl+0x10/0x10 [ 95.774431][ T1354] ? cgroup_bpf_inherit+0x472/0x4c0 [ 95.774454][ T1354] dump_stack+0x19/0x20 [ 95.774473][ T1354] should_fail_ex+0x3c2/0x510 [ 95.774491][ T1354] should_failslab+0xac/0x100 [ 95.774509][ T1354] __kmalloc_cache_noprof+0x41/0x470 [ 95.774525][ T1354] ? cgroup_mkdir+0xbe2/0x1600 [ 95.774545][ T1354] cgroup_mkdir+0xbe2/0x1600 [ 95.774564][ T1354] ? __cfi_cgroup_mkdir+0x10/0x10 [ 95.774581][ T1354] kernfs_iop_mkdir+0x1bb/0x2d0 [ 95.774601][ T1354] vfs_mkdir+0x58e/0x810 [ 95.774621][ T1354] open_or_create_special_dir+0xf1/0x200 [ 95.774639][ T1354] incfs_mount_fs+0x433/0x970 [ 95.774655][ T1354] ? __cfi_incfs_mount_fs+0x10/0x10 [ 95.774671][ T1354] ? vfs_parse_fs_string+0x10f/0x180 [ 95.774691][ T1354] ? selinux_capable+0x38/0x50 [ 95.774710][ T1354] legacy_get_tree+0x103/0x1b0 [ 95.774728][ T1354] ? __cfi_incfs_mount_fs+0x10/0x10 [ 95.774743][ T1354] vfs_get_tree+0x9e/0x290 [ 95.774759][ T1354] do_new_mount+0x251/0xb40 [ 95.774774][ T1354] ? security_capable+0x44/0x130 [ 95.774792][ T1354] path_mount+0x66a/0xff0 [ 95.774807][ T1354] ? putname+0x113/0x150 [ 95.774823][ T1354] __se_sys_mount+0x2bf/0x480 [ 95.774838][ T1354] ? ksys_write+0x1f3/0x260 [ 95.774854][ T1354] ? __x64_sys_mount+0xf0/0xf0 [ 95.774871][ T1354] __x64_sys_mount+0xc3/0xf0 [ 95.774886][ T1354] x64_sys_call+0x2021/0x2ee0 [ 95.774901][ T1354] do_syscall_64+0x57/0xf0 [ 95.774916][ T1354] ? clear_bhb_loop+0x50/0xa0 [ 95.774934][ T1354] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 95.774952][ T1354] RIP: 0033:0x7f331a59ce59 [ 95.774967][ T1354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.774981][ T1354] RSP: 002b:00007f331b42d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 95.774998][ T1354] RAX: ffffffffffffffda RBX: 00007f331a815fa0 RCX: 00007f331a59ce59 [ 95.775011][ T1354] RDX: 0000200000000100 RSI: 0000200000000000 RDI: 0000200000000080 [ 95.775023][ T1354] RBP: 00007f331b42d090 R08: 0000000000000000 R09: 0000000000000000 [ 95.775034][ T1354] R10: 0000000000a18082 R11: 0000000000000246 R12: 0000000000000002 [ 95.775044][ T1354] R13: 00007f331a816038 R14: 00007f331a815fa0 R15: 00007fff17999ee8 [ 95.775058][ T1354] [ 95.775741][ T1354] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] PREEMPT SMP KASAN PTI [ 95.978486][ T31] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 95.984154][ T1354] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 96.001201][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 96.001216][ T36] audit: type=1400 audit(1782781966.138:402): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 96.008895][ T1354] CPU: 0 UID: 0 PID: 1354 Comm: syz.2.382 Not tainted syzkaller #0 111b2e0850fa4a367413a3971448b32f560820b7 [ 96.008915][ T1354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 96.008925][ T1354] RIP: 0010:cgroup_mkdir+0x122a/0x1600 [ 96.008950][ T1354] Code: eb 05 e8 69 4d 08 00 48 89 df e8 11 9e 00 00 48 81 fb 01 f0 ff ff 0f 83 9a fb ff ff 4c 8d b3 08 01 00 00 4d 89 f4 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 f7 e8 97 00 61 00 48 8b bb 08 01 00 00 [ 96.017037][ T36] audit: type=1400 audit(1782781966.138:403): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.024855][ T1354] RSP: 0018:ffffc9000ea4f988 EFLAGS: 00010206 [ 96.024873][ T1354] RAX: bb0480b7bb8f2500 RBX: 0000000000000000 RCX: ffff8881f6e3acc0 [ 96.024886][ T1354] RDX: ffff888136d6ef00 RSI: ffff888107731000 RDI: ffff888100042000 [ 96.033323][ T36] audit: type=1400 audit(1782781966.138:404): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.035856][ T1354] RBP: ffffc9000ea4fa38 R08: 00000000a823fa33 R09: 0000000062056b5f [ 96.048491][ T312] usb 5-1: device descriptor read/64, error -71 [ 96.055933][ T1354] R10: 0000000000000012 R11: ffffffff81759b00 R12: 0000000000000021 [ 96.064852][ T36] audit: type=1400 audit(1782781966.138:405): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.070295][ T1354] R13: dffffc0000000000 R14: 0000000000000108 R15: ffff888107731010 [ 96.070310][ T1354] FS: 00007f331b42d6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 96.070326][ T1354] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.070337][ T1354] CR2: 00007f331a817dac CR3: 0000000137ab2000 CR4: 00000000003526b0 [ 96.070352][ T1354] Call Trace: [ 96.070358][ T1354] [ 96.092634][ T36] audit: type=1400 audit(1782781966.138:406): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.103552][ T1354] ? __cfi_cgroup_mkdir+0x10/0x10 [ 96.103584][ T1354] kernfs_iop_mkdir+0x1bb/0x2d0 [ 96.103606][ T1354] vfs_mkdir+0x58e/0x810 [ 96.103626][ T1354] open_or_create_special_dir+0xf1/0x200 [ 96.103644][ T1354] incfs_mount_fs+0x433/0x970 [ 96.114056][ T36] audit: type=1400 audit(1782781966.138:407): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.119117][ T1354] ? __cfi_incfs_mount_fs+0x10/0x10 [ 96.119140][ T1354] ? vfs_parse_fs_string+0x10f/0x180 [ 96.139366][ T36] audit: type=1400 audit(1782781966.138:408): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.159979][ T1354] ? selinux_capable+0x38/0x50 [ 96.160009][ T1354] legacy_get_tree+0x103/0x1b0 [ 96.160029][ T1354] ? __cfi_incfs_mount_fs+0x10/0x10 [ 96.160046][ T1354] vfs_get_tree+0x9e/0x290 [ 96.180805][ T31] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 96.182021][ T1354] do_new_mount+0x251/0xb40 [ 96.203344][ T312] usb usb5-port1: attempt power cycle [ 96.211136][ T1354] ? security_capable+0x44/0x130 [ 96.211168][ T1354] path_mount+0x66a/0xff0 [ 96.211183][ T1354] ? putname+0x113/0x150 [ 96.211200][ T1354] __se_sys_mount+0x2bf/0x480 [ 96.217777][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.225379][ T1354] ? ksys_write+0x1f3/0x260 [ 96.225406][ T1354] ? __x64_sys_mount+0xf0/0xf0 [ 96.225424][ T1354] __x64_sys_mount+0xc3/0xf0 [ 96.225440][ T1354] x64_sys_call+0x2021/0x2ee0 [ 96.245968][ T349] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 96.253859][ T1354] do_syscall_64+0x57/0xf0 [ 96.253888][ T1354] ? clear_bhb_loop+0x50/0xa0 [ 96.263519][ T31] usb 1-1: Product: syz [ 96.269375][ T1354] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 96.269405][ T1354] RIP: 0033:0x7f331a59ce59 [ 96.269420][ T1354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.269433][ T1354] RSP: 002b:00007f331b42d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 96.269451][ T1354] RAX: ffffffffffffffda RBX: 00007f331a815fa0 RCX: 00007f331a59ce59 [ 96.269464][ T1354] RDX: 0000200000000100 RSI: 0000200000000000 RDI: 0000200000000080 [ 96.278075][ T31] usb 1-1: Manufacturer: syz [ 96.280713][ T1354] RBP: 00007f331b42d090 R08: 0000000000000000 R09: 0000000000000000 [ 96.280728][ T1354] R10: 0000000000a18082 R11: 0000000000000246 R12: 0000000000000002 [ 96.280739][ T1354] R13: 00007f331a816038 R14: 00007f331a815fa0 R15: 00007fff17999ee8 [ 96.280754][ T1354] [ 96.280761][ T1354] Modules linked in: [ 96.284335][ T31] usb 1-1: SerialNumber: syz [ 96.304621][ T1354] ---[ end trace 0000000000000000 ]--- [ 96.428427][ T349] usb 2-1: Using ep0 maxpacket: 16 [ 96.432733][ T1354] RIP: 0010:cgroup_mkdir+0x122a/0x1600 [ 96.437623][ T349] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.441254][ T1354] Code: eb 05 e8 69 4d 08 00 48 89 df e8 11 9e 00 00 48 81 fb 01 f0 ff ff 0f 83 9a fb ff ff 4c 8d b3 08 01 00 00 4d 89 f4 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 f7 e8 97 00 61 00 48 8b bb 08 01 00 00 [ 96.449520][ T349] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.453833][ T1354] RSP: 0018:ffffc9000ea4f988 EFLAGS: 00010206 [ 96.458736][ T349] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 96.463117][ T1354] [ 96.467869][ T349] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 96.475976][ T1354] RAX: bb0480b7bb8f2500 RBX: 0000000000000000 RCX: ffff8881f6e3acc0 [ 96.480142][ T349] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.484486][ T1354] RDX: ffff888136d6ef00 RSI: ffff888107731000 RDI: ffff888100042000 [ 96.484503][ T1354] RBP: ffffc9000ea4fa38 R08: 00000000a823fa33 R09: 0000000062056b5f [ 96.490975][ T349] usb 2-1: config 0 descriptor?? [ 96.494682][ T1354] R10: 0000000000000012 R11: ffffffff81759b00 R12: 0000000000000021 [ 96.568459][ T312] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 96.572004][ T1354] R13: dffffc0000000000 R14: 0000000000000108 R15: ffff888107731010 [ 96.599379][ T312] usb 5-1: device descriptor read/8, error -71 [ 96.611088][ T1354] FS: 00007f331b42d6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 96.745671][ T1354] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.752391][ T1354] CR2: 00007f331a817dac CR3: 0000000137ab2000 CR4: 00000000003526b0 [ 96.760451][ T1354] Kernel panic - not syncing: Fatal exception [ 96.766765][ T1354] Kernel Offset: disabled [ 96.771083][ T1354] Rebooting in 86400 seconds..