last executing test programs: 1m6.153201879s ago: executing program 2 (id=105): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000001c0)="28033e000a00140000007ef506be1e000000000000000000000000143baa111f1f858c3d4fcd84e632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe85e3b574652510e08c6d8ec319c1ef17e9620e1a0dff70ea03f7b57205dcf116bdf27bfd7fd5f007037c181c952049f543fed12e3c44a154c8d244bb66d4826d51ad4c42f93ecb4015382992a", 0x90, 0x400c010, &(0x7f00000000c0)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @local}, 0x6f) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0x141) recvfrom$inet(r3, &(0x7f0000000100)=""/90, 0x5a, 0x100, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) 1m5.304987496s ago: executing program 2 (id=112): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x14, 0x0, 0xe3e8062aa2d02d3, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x24004881}, 0x200000c0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000980)) syz_io_uring_setup(0x2521, &(0x7f0000000000)={0x0, 0x49, 0x1, 0x1, 0x38b}, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x14, 0x0, 0xe3e8062aa2d02d3, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x24004881}, 0x200000c0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000980)) (async) syz_io_uring_setup(0x2521, &(0x7f0000000000)={0x0, 0x49, 0x1, 0x1, 0x38b}, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000000)) (async) 1m5.111972921s ago: executing program 2 (id=113): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x4b, 0x0, &(0x7f0000000040)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x119601, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) readv(r3, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000140)={'gretap0\x00'}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x105001, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r5, 0x4068aea3, &(0x7f0000000080)={0xd4, 0x0, 0x100004002}) 1m4.986229516s ago: executing program 2 (id=114): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x1a, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000c40)=@abs={0x1}, 0x6e) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1}, 0x6e) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f00000003c0)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x160, 0x0, 0xfffffffffffffff9, [{{0x4, 0x2, 0x5, 0x1000, 0x9, 0x1, {0x6, 0xc, 0x2, 0x7, 0xfffffffffffffff8, 0x8001, 0x8001, 0x6, 0x7, 0x4000, 0xfffffffc, r5, r6, 0x3, 0x4}}, {0x5, 0x7fffffff, 0xa, 0x107, 'IDLETIMER\x00'}}, {{0x6, 0x1, 0x200, 0x100, 0xb5, 0x1, {0x4, 0xcc0, 0x9, 0x4, 0x92, 0x14, 0x3, 0x1, 0x1746163, 0xa000, 0x80000000, r5, r6, 0x1, 0x10000}}, {0x1, 0x9, 0xa, 0x3, 'IDLETIMER\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r7, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2, &(0x7f0000002400)={[{@uid={'uid', 0x3d, r8}}]}) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) syz_clone3(&(0x7f0000000700)={0x60000000, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x2d}, &(0x7f00000005c0)=""/153, 0x99, &(0x7f0000000680)=""/21, &(0x7f00000006c0)=[0xffffffffffffffff], 0x1}, 0x58) getresgid(&(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000cc0)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000d00)) getgid() r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$setregs(0x1a, r9, 0xba, &(0x7f0000000040)) statx(0xffffffffffffffff, &(0x7f0000000d40)='./file0\x00', 0x400, 0x9, &(0x7f0000000d80)) getresgid(&(0x7f0000000e80), &(0x7f0000000ec0), &(0x7f0000000f00)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000f40)) 1m4.078005034s ago: executing program 2 (id=119): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb006}, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800}, 0x20) mremap(&(0x7f000009e000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f000000c000/0x1000)=nil) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58ca2280, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r4 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6, 0x39, 0xf000000}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)="e2cebc24a2542168ba2bcfd4ae249803a64af256ef511f5708973bfd8f5d0780eaa01c91430986800b56a393d984fafba17f1764dd6e4c3f60e6e8abad98c34194de56a8c083bbbfd25526dec37c7b4afa64b37412fa286f108601f5ad26bdbdd8a9e675d63688f9dd68173ce08b1c3a4d5e37ff023424f974cb7bd2", 0x7c}, {&(0x7f0000000100)="bc7db5186bd944fc3265dec0b68d0100e85a0e7008628cc4d2800d0d11d0f2b4e3c41ed1d1a827760445bd97c88f7e9bea195c51a2e93620f39562e984ca701dc2953c", 0x43}, {&(0x7f0000000180)="595f3b1624278827c3bfa056aaf77feec14d025b9da88abfac3133c7fcc244", 0x1f}, {&(0x7f00000001c0)="719bf5d91a9d710151e2905445b198f395f63acba3afaf784aa9708788d244d1520276d201537da2bf1aae054426b7f32a056020d12c2a3067240c520ae3573d2e70baa2b320abbb6c786aa42042a29062e0699905132947bff413c9c91ea76ae699deea2eb8632ff749855c3d8b10e548fc6e576e7852e170d1dfe05e10ba53d248f9bc3a2c8a983758231beaf5bc31537698f86e1a", 0x96}], 0x4}}], 0x1, 0x4000800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in6=@loopback, @in=@rand_addr=0x64010101, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0x1}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002940)={'veth1_to_team\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) 1m4.058860785s ago: executing program 2 (id=120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x48140}, 0x20008000) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x400, &(0x7f0000000180)=[0x6bd1a30f, 0xec66, 0xace, 0x8, 0x98bd, 0x8, 0x7, 0x4, 0x10000, 0x7, 0x0, 0x9, 0x6, 0x9, 0x5, 0x3f2, 0x3ff, 0x5, 0x2, 0x4000000001, 0x8, 0x1, 0xc1, 0x1, 0x2, 0x2, 0x800000006, 0x1000000000, 0x96, 0xffffffff, 0xffffffff00000000, 0x3, 0x5, 0x7, 0x4, 0x3541, 0x9, 0x888f, 0x1000, 0x8, 0x46, 0x6, 0x10000000000003, 0xa3df, 0x20000000006, 0x0, 0x8, 0x3fe, 0x0, 0xfffffffffffffff7, 0xd, 0x2, 0xe, 0x1, 0x4, 0xf5, 0xfd, 0x7, 0x9, 0xfffffffffffffffc, 0x9, 0x7, 0x40000005, 0xffffffff00000000, 0x9, 0xd, 0x10001, 0x6, 0x10000000200000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x4000000007, 0x2, 0x3, 0x0, 0x2, 0xfff, 0x6, 0x3, 0x1, 0xab6, 0xa, 0x0, 0x0, 0xffffffffffffff84, 0x9, 0x8d, 0x3, 0x3ff, 0x6, 0x8, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x203, 0x7, 0x5a0, 0x4, 0x8, 0x2293332d, 0x6, 0x5, 0x1e, 0xffffffffffffffff, 0x2, 0x4, 0xfffffffffffffffb, 0x2, 0x7, 0x470ddba2, 0x8, 0xd, 0x5, 0x8, 0x1, 0xfffffffffffffff9, 0xeb4, 0x0, 0xfffffffffffffffe, 0xb692, 0x142, 0x8, 0x1000003]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_io_uring_setup(0x702, &(0x7f0000000500)={0x0, 0xfffffffc, 0x8, 0x7, 0x1e6}, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2040) 1m4.021198286s ago: executing program 32 (id=120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x48140}, 0x20008000) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x400, &(0x7f0000000180)=[0x6bd1a30f, 0xec66, 0xace, 0x8, 0x98bd, 0x8, 0x7, 0x4, 0x10000, 0x7, 0x0, 0x9, 0x6, 0x9, 0x5, 0x3f2, 0x3ff, 0x5, 0x2, 0x4000000001, 0x8, 0x1, 0xc1, 0x1, 0x2, 0x2, 0x800000006, 0x1000000000, 0x96, 0xffffffff, 0xffffffff00000000, 0x3, 0x5, 0x7, 0x4, 0x3541, 0x9, 0x888f, 0x1000, 0x8, 0x46, 0x6, 0x10000000000003, 0xa3df, 0x20000000006, 0x0, 0x8, 0x3fe, 0x0, 0xfffffffffffffff7, 0xd, 0x2, 0xe, 0x1, 0x4, 0xf5, 0xfd, 0x7, 0x9, 0xfffffffffffffffc, 0x9, 0x7, 0x40000005, 0xffffffff00000000, 0x9, 0xd, 0x10001, 0x6, 0x10000000200000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x4000000007, 0x2, 0x3, 0x0, 0x2, 0xfff, 0x6, 0x3, 0x1, 0xab6, 0xa, 0x0, 0x0, 0xffffffffffffff84, 0x9, 0x8d, 0x3, 0x3ff, 0x6, 0x8, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x203, 0x7, 0x5a0, 0x4, 0x8, 0x2293332d, 0x6, 0x5, 0x1e, 0xffffffffffffffff, 0x2, 0x4, 0xfffffffffffffffb, 0x2, 0x7, 0x470ddba2, 0x8, 0xd, 0x5, 0x8, 0x1, 0xfffffffffffffff9, 0xeb4, 0x0, 0xfffffffffffffffe, 0xb692, 0x142, 0x8, 0x1000003]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_io_uring_setup(0x702, &(0x7f0000000500)={0x0, 0xfffffffc, 0x8, 0x7, 0x1e6}, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2040) 25.929963648s ago: executing program 4 (id=363): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000780)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in=@local, 0x0, 0xe0c, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0xfffffffffffffffd, 0x7f, 0x0, 0xffffffffffffffff, 0x200}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x84, 0x5, [{{@in=@remote, 0x4d3, 0x33}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5, 0x4, 0x2, 0x6, 0x2826, 0xa, 0x9}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x3c}, 0xa, @in=@broadcast, 0x3502, 0x4, 0x3, 0x7, 0x28c0, 0x3ff, 0x4}]}]}, 0x13c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 25.857977241s ago: executing program 4 (id=364): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000007c0)={{r0, &(0x7f0000000080)='^}})\x00', 0x230203, &(0x7f0000000100)={@align=0x3, {0xe, 0x5, 0x4, 0x4}}, 0x8000, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x9}, {[0x2, 0xa, 0x6, 0x4]}, 0x7, 0x81, &(0x7f0000000700)=""/129}) ioctl$BLKDISCARDZEROES(r1, 0x127c, &(0x7f0000000840)) r2 = syz_io_uring_setup(0x46b2, &(0x7f0000000ac0)={0x0, 0xd5e9, 0x80, 0xffffffe9, 0x800037f}, 0x0, 0x0, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x5460, &(0x7f0000000540)={'veth0_macvtap\x00', @link_local}) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @uid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010002000000fbdbdf254100001b06e99ade41e3ef719a2b413ac433000e0001006e657464657673696d0000000f0002006e657464657673796d3000000f0087006c325f64726f7073000000000500870000000000"], 0x4c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)={0x5c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xea, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0x3c, 0xcd, 0x0, 0x1, [@typed={0x36, 0x1, 0x0, 0x0, @str='@\xf6s\v\x18\xce \xd4*{,-)\x00\x00\x00\x00\x00\x00\x00\xe0\x19\xf2#\xd9\xca\x93\xf00%\xee\xa1\xa0\x98y\xcd\x8aO\xe8\xbc\xc9\x900j\xbc\x84g\x9e\x04\x05'}]}]}, 0x5c}], 0x1, 0x0, 0x0, 0x40040}, 0x8016) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000a00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="20010000", @ANYRES16=r9, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/vlan/vlan0\x00') syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r15, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) writev(r14, &(0x7f0000000380)=[{&(0x7f00000002c0)="52be", 0x2}], 0x1) syz_ublk_setup_queues(r3, r13, &(0x7f0000000400)={0x0, 0xf39b, 0x80, 0x8000003, 0xb0}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd5fb, 0x1, 0x1, 0x31b, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7685, 0x800, 0x1, 0x3df, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xab1c, 0x10, 0x1, 0x902c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4bc6, 0x400, 0x2, 0x40021a, 0x0, r3}}], 0x4, &(0x7f0000001540)={0x2e, 0x35, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r12, '\x00', {0x5, 0xa0b, 0x0, 0x0}}, 0x0) 25.857598881s ago: executing program 4 (id=365): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x33, 0x0, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x12) ioctl$TCFLSH(r2, 0x400455c8, 0x1000000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000031c0)={0x2c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x2, 0x0, 0x0, @uid=r5}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xea}]}]}, 0x2c}], 0x1}, 0xcc000) r6 = getgid() r7 = getpgrp(0x0) tkill(r7, 0x0) r8 = geteuid() getgroups(0x7, &(0x7f0000000d40)=[0xee01, 0xffffffffffffffff, 0xee01, 0xee01, 0xffffffffffffffff, 0x0, 0xee01]) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000d80)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) stat(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000ec0)={0x0, 0xffff, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(r13, r13, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000f40)={0x0, 0x0, 0x0}, &(0x7f0000000f80)=0xc) pipe2(&(0x7f0000000fc0)={0xffffffffffffffff}, 0x0) r17 = accept4$inet6(0xffffffffffffffff, &(0x7f0000001000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000001040)=0x1c, 0x180c00) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d00)=[{&(0x7f0000000300)={0x208, 0x1a, 0x2, 0x70bd26, 0x25dfdbfd, "", [@generic="dd228bdfbeee0592ec1238e186049bd4114a1ad8646fb6c1a70d8240fb8aa1196d702b1dde474ab792ac0a071e679612eb8c2a058376adf49c33343d4cefbcf60a2fa5d146b3b3f4b39f1cdaebdfa68ba9b22ce6640393b60c269963af53a7e79807a85b358d3ca43eb10de784dd0b2f7905fc2e76", @generic="64abd1255740c9f7f92b1700750f4133eb34e43983399df6e4401545b96dbd80144960c0156f0989d9ac18c1c34ea868dbe7b5966723beb9f5a96412c215d5965a89dc21bbe29a73416e98e1a4115b7c88145744c60ff113f9ddc9d355086e61e0bb1ca551867930a218808d86108da5503434ac44334fd352a53388f32180f23e1f711c0ab9ff0b", @typed={0x8, 0x60, 0x0, 0x0, @pid}, @generic="221ef4b744ed3d006b6ffd13c70a6a3bc2e46ff0e892d679bbf11cc28cf65df241d0d20085e0357e75c8c32559f8af4228c318e1ace1d1188f84df1e3f550d8c010325feb8f2d011f4e2f1e76c7d78afe89c90c4298b3220341574497f38f6b9d1616ac10013b3ab550e841deff5e1fc8e6e06391477efd3d38eb98a0f26b2780cf9aa4f7ec7eedfd6b492ee93fc4106b8347512e6aaaeb3fb7c672b7ecdbf432d36f6009b839d14085337efcb1146d6ec72106884a7d6abc164b4a66724ce21fe31822d68ac9d3c996ee023793f78578b09e6a2df2de1f8a53666476e", @typed={0xc, 0x37, 0x0, 0x0, @u64=0x6}, @typed={0x8, 0x12a, 0x0, 0x0, @ipv4=@empty}]}, 0x208}, {&(0x7f0000003200)={0x17d8, 0x21, 0x10, 0x70bd2a, 0x25dfdbfb, "", [@generic="f091a5b3a7395efd15103af7336bbabffb178dd004d9b56a583172b40cfbe13a0c4065a22884b4482bcbba71a1985a90d68416de207e32356522d6d25f79e1598a8f", @nested={0x81, 0xf3, 0x0, 0x1, [@typed={0xc, 0xb5, 0x0, 0x0, @u64=0xffffffff}, @generic="881a72bd244dc9542333ff356e7675b436733d6980540891e11a6269800b0618ed09f946b19cb46970842aa9efadaf752d66532c0df939ecdd055067353a29fc212a5aa6e3248fc77bf4d05268519e0bd4c38485cfd573f845", @typed={0x14, 0x11a, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @nested={0x4, 0x13b}]}, @typed={0x8, 0xa5, 0x0, 0x0, @uid=0xee00}, @generic="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", @typed={0x8, 0xe4, 0x0, 0x0, @ipv4=@broadcast}, @generic="9249eb83c987e0e12ff3a2a9b2338578d2d0caddba03629fa97f11e0ee6666e0b94f4871fbf4454831c997035a3ed196b6f81e800503f605e05e", @generic="414c74afac288a342df5adfd27753f4738b25acdccc0ce31c562a84afa45736200377dad", @nested={0xe9, 0x93, 0x0, 0x1, [@generic="a0c5c2e7b1b64760b3bf52489b37e6b043f182f478ae19e27bf635796f36796b02fe586d8140f6813575a1dc7f4f7acceee1d9a0e039fb00e44d202d089ef6107af85cadceb224da6719d47a9fe3235af81745aa933203ea7b6d168f55404989267d20b9d4d9bdf90c7300c1de2b576f2e1fc34b6380c465aaf200773161fdf9b804", @generic="d16b59747fde71f1f3b5d70cf0d844850819eeb314ee9d8b4efeef134cae6cc8ae0e5a9ce759c3897e31a0", @generic="3ae0c1fd7c1a8287b443678ce5aaa96952dee9625bdb6804fa8b51b27518631f600a1b51803b726d7a94950af38dc1a17c418e42", @nested={0x4, 0x38}]}, @generic="f8dab50f58c028abc78f0e30b79a2cdedd26176c622242a6152983e952ae2cab17b31c10f0546ffb6a3513c7f5ecbd48124e72657542a38982171ccf9cd486878b6b3c43", @nested={0xf7, 0x13b, 0x0, 0x1, [@generic="34822ad722b914fcb6e7af4088febe5e8eb6dbde22be683eb0f685e35234bba69d5144221e641aff9b592b4a0ea0da2f4d61d6d29e4300d7d1694649cd26ae3f3a7ea5607c185313505687768077c8c91178f7e2f43b09a5ee07a3d2b9b20970eb93a91610dcc7f32f6d980ffb28f83bd882958953f9a92ab6859fed0c74bc11d8f5ed9aaf4f8cca9c6be38dc6a8d53e6a1eeb6ffdbb7ac9a8a0fcae3e5dc3d57e6de4f46ec93723c753ea68c458cacd7fddf555bfc7b2bd05bc20d913f7485b795f8e6aa116122d70c880000b27d2236f4936f9269de5e7bf3ae2702f32af0eb8fd6e870a933cb7a9c3731d77f17608fb708c"]}, @nested={0x141, 0x115, 0x0, 0x1, [@nested={0xe2, 0x86, 0x0, 0x1, [@nested={0x4, 0x161}, @typed={0x8, 0x6, 0x0, 0x0, @pid}, @nested={0x4, 0x136}, @typed={0x8, 0x131, 0x0, 0x0, @ipv4=@remote}, @generic="3947f337685adac84fd60102d6239cfaafe21ba276df20529cab2e238676676cfaf0e911cf49bc54d0c58c62e5e345fd17ba4db26cbfaaa3c5fb1dc5453409d8d3b6f0dda5105c1b5d8d04ec5dc7f85204e8d3cc4844addceb1d2f23f4bf6c411c39f883fa49be6969d3394f9a09d36f7b37a1c0d45e8b3f3fd695f6bb3d6b0fa97f7cb408fad40ea8db194e8ef8c503549aa1b6187947f510013c9eec406027fd18a6bbb6471d11786182cbd14c81893dae6aae0b815bce9c7d", @typed={0x4, 0xf0}, @nested={0x4, 0x128}, @nested={0x4, 0x160}]}, @generic="3a344a168f6b7fa09d78641c990a6c9eafcf50bbae5c547c0bc2155124d73b316a47c6cedb82ee4e2c4333cc9dd2774f423a72962af558c5a075a69beffd76185c7b82657390b91e2f080f0ba8fd4f6a0fd40daadfb8e5821f"]}, @typed={0xc, 0x105, 0x0, 0x0, @str=').#[*!,\x00'}, @nested={0x11cc, 0x39, 0x0, 0x1, [@generic="8769be7e991b8ba56d50b7331dd13a5e", @nested={0x11b6, 0x107, 0x0, 0x1, [@generic="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", @typed={0x8, 0x2f, 0x0, 0x0, @fd=r17}, @typed={0x8, 0x145, 0x0, 0x0, @uid=r13}, @nested={0x4, 0x13a}, @typed={0x8, 0x52, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x54, 0x0, 0x0, @pid=r14}, @generic="b058d2defaeaec3a00cd89fe336c74deb376fa2d841cb76d4eb8a7cf7c5b09c8cbbda0712ba9e6d1cf8341067581492cabcb834da70fa2a77eacd829f11cd95aa0af88612772622fd07a9989d6f1c20c595056dadf6bc6c5575a89d5440efc4f4d17c617d54e75cbe3d8201dff33dac9df6b68499ec296b21a9ea50a3df86c339cc3b6bbbe2e9751285df39feb2a", @generic="9456c5f31aad6b6871c3b8c93a652db488edf55fb6db37f5e0b719ef1704dc50", @generic="945ab9b72b94b4f5364bc46706148b251f96a23ebb3efd0bdcb18c66e64d0a2a32ec224f37f0778d96f150b4602b22be984408c39f10bac8cc910e14c84caf9f75e5e636eb1699ee4d6b70461e6e14ddb93069798bd3e02c96bf3335298394bf05ac5e90e6199a18193d05cbbe88d061e4c1fd1a34cee6ab9837496f6ac9fe59010ae6bac0299bbe2fe2cf86ac303f5b748d9ff26bfbd83d40c160db47fb0e0f69689bce06c54ef5d2cb3e9b3c2d3b954d54c6648a437618058f301ab0c5592d1c5f751bd90aa81197d8d84d07816781bf3b37c0f950edb270f60e1657d0a0f7"]}]}]}, 0x17d8}, {&(0x7f0000000940)={0x6c, 0x42, 0x100, 0x70bd2b, 0x25dfdbff, "", [@generic="d9bf9d996687e9b27db0d75112c4d3025ac0a56e34fd35afb2db17c07a9c8a67185709db6c4190d650d029e1264c6a32e1b1714a8045cd0afb5f678744578d924c6ffe24399a5bdfe19d8b17da054e3421eb999ad6d6a32e77"]}, 0x6c}, {&(0x7f00000009c0)={0x310, 0x25, 0x4, 0x70bd2d, 0x25dfdbfe, "", [@generic="97a90791894497b4f9201d551ddb0fdf24d5c86aa2ec2605c82d10d7c31cf933f25ddd83d2341c99761ff4b127436773876091d2f2409de1d69011cae32ea2f5f687c1bc97c3a7696267023a2869", @nested={0x1cf, 0x44, 0x0, 0x1, [@typed={0x4, 0x13d}, @nested={0x4, 0xb2}, @generic="9b9202fd6c4866a094d2c595e1d0a215629648bb8e7de74da8ceddc3114cc6119f9cce8ea02cc10e2e091521b6922c7d0f832217515a63041ea283e8f4de61f4ccfc12938183c1db7a16bb091068facf62c13f7e8a3faafe6b8a48341f3ead3859b96d97786a3a996e8de418707ded0a914acbc8cb9d074e79989e9e40335013a72582cd136cff05e29af932344bb64560b1592db7b1a366ebbd58e710bb182cc1", @generic="14be041a2e7ab77145bfdfb7d19efb6b6d320910ba510cf06a4317c16e5bcc34bdccba6d318a4758912ea95692a1eabfd0c9524583515e277a506e1238a66d5913d8d14426655ee903cd845b8585eb8f6028ffcdc921e852428fc95a2a320e02fe0546681c787e68a45a33cfe9f70c618cd6e97cb3c2438d15e1dccae7850591f188a38433908e17a5827cf8c1ad55cbfd2836554ae5b3d995d4091ef3187f93a33cdb4ec653136d8451811941ba109ad276500591e040f17f47ec6a00b0ed992231d24f584549e6cd85c696ea", @typed={0x14, 0x87, 0x0, 0x0, @ipv6=@private1}, @nested={0x4, 0x55}, @generic="b96a37c34b6b7cb49184505b11c1b4fb0830f8372c560c4a55730ba387bbe5efc3534e4f65500b1b9583e5492676535792a313ff66f431dd10", @nested={0x4, 0x41}]}, @generic="1b7441b33be61f61fc4d15dba3be2f4a8f2f8ec34969f3fda60c90074b0f0895b16c5d490889941a5daa4df31d6edc05e84edb5a526a728da6f9ef6abe068630c4e1b4da3b0481cd703e6f5906357f4443cd22ad6f6579343e3b7c97ad5ca4442c65e329895d00bb3477483ed9dd97356ead18222e1a44a796c773d8948c5cf31dac43b77de23817e5d8577522c2215d4e00486b7c16097e7b1d35085a3293976533b8650b71ab995d16b1ea051cb3228aa6dd5a783dec4b5834397be586dba041ddfc8c772f70153480f3cc5bd47684f3458fda9b005efa74ba416c4b94ba83"]}, 0x310}], 0x4, &(0x7f0000001080)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r3, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xffffffffffffffff, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r15}}}, @rights={{0x1c, 0x1, 0x1, [r16, r1, r17]}}], 0xe0, 0x40081}, 0x0) r18 = socket$inet6_tcp(0xa, 0x1, 0x0) r19 = dup(r18) ioctl$SIOCSIFHWADDR(r19, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffff0261f59878aa826a00e0ff08060001080006040001aaaaaaaaaa0600000000000000b6ecd4ac1414"], 0x2e) ioctl$sock_bt_hci(r1, 0x400448df, &(0x7f0000000180)) 25.827481062s ago: executing program 4 (id=366): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x10000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x1fd) fsconfig$FSCONFIG_SET_FD(r1, 0x5, 0x0, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_usb_connect(0x2, 0x7c1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000c80)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x201, 0x9, 0x4, 0xe7, 0x8, 0xd}, 0x3c, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f3c000c8b0003080700ad0710021a78ec0014100404eead85537bb77ed1c955d0008071a35f0b10010c2b0003060000113ef34c45"], 0x1, [{0x81, &(0x7f0000000240)=@string={0x81, 0x3, "fbc96d86293a7e94b0e3349abb29cdd39c90d187c83723ea492d4eb26616f0a2704f31db160ee6693b76cfdc2d257d468570ff544974ce7e7b39550d2a74c939bf90706d93b467e52133616824004e11cbbbbbd8fe1686bacfb41d6f41689cd5aebbdbb17894539754ea849b744ddc0d88118f9853bc8129ebbca07bef87a4"}}]}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)) 23.995515169s ago: executing program 4 (id=379): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@private1={0xfc, 0x1, '\x00', 0x3}, @private1, @loopback, 0x9, 0x8, 0x0, 0x100, 0x4, 0x200002, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r6, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x2}]}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x400}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) r9 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r9, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 23.830761744s ago: executing program 4 (id=380): ioprio_set$pid(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) clock_getres(0xfffffffffffffff1, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000034000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200", 0x2000, &(0x7f00000041c0)={&(0x7f0000000480)={0x50, 0x0, 0x0, {0x7, 0x29, 0x80000001, 0x5230860e, 0xfffd, 0xc, 0x1, 0x4056, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23.762681246s ago: executing program 33 (id=380): ioprio_set$pid(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) clock_getres(0xfffffffffffffff1, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000034000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200", 0x2000, &(0x7f00000041c0)={&(0x7f0000000480)={0x50, 0x0, 0x0, {0x7, 0x29, 0x80000001, 0x5230860e, 0xfffd, 0xc, 0x1, 0x4056, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.142786427s ago: executing program 0 (id=495): socket$packet(0x11, 0x3, 0x300) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000304fcff", 0x58}], 0x1) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) mremap(&(0x7f000009e000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f000000c000/0x1000)=nil) socket(0x1e, 0x4, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3, 0x39, 0xf000000}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)="e2cebc24a2", 0x5}], 0x1}}], 0x1, 0x4000800) 7.109336078s ago: executing program 0 (id=496): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) (async, rerun: 64) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (rerun: 64) ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000280)={0x3, 0x100, 0x0, 0x50d, 0x80000}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x100, 0x1000000000, 0x7bfffffffffffffe, 0x45, 0x3, 0x9, 0x2004ca, 0x800, 0x9, 0x4, 0x4, 0x0, 0x3, 0x0, 0x3], 0xfec00000, 0x350400}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 32) 6.06783625s ago: executing program 0 (id=503): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x1000000000000, 0x5, 0xfffffffffffffffa}, {0xfffffffffffffffc, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xd9) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000200)={0x200003, 0x200003, 0x101, 0x6, 0x7, 0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 5.213516627s ago: executing program 0 (id=510): socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, 0x0, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x13, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="0000080001050700ffff80"], 0x96) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syslog(0x2, &(0x7f00000000c0)=""/102, 0x66) 5.015013554s ago: executing program 0 (id=513): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "da9483aa"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x20, 0x3, 0x54, {0x54, 0xb, "9269c9998459f7e4fa81b51ea66f5b00b81810dff4e2eb9128c0852b33972b1bf5360c0dc404f9c7ed22c5a7671d210af40767e0e531cd9158e0d3e7d936211d93d7695b85cebb5fc19180c243fc3313d9e3"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1404}}}, &(0x7f0000000400)={0x34, &(0x7f0000000240)={0x0, 0xf, 0x61, "a3115bfa11e24495411cc2d92a4947dfbf15c3b31948c60d04eb52ca1d736fd70ab3e989be3362d28d8e0845d11badef6699818fe0da1cd4c2b2e04f225618634a64d62dbaa632a171a0c5f8b16b13f8b412850dce3224d4f081b41887dcb91096"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000340)={0xc0, 0xa1, 0x4, 0x2}, &(0x7f0000000380)={0x40, 0xa0, 0x4, 0x7}, &(0x7f00000003c0)={0xc0, 0xa2, 0x2f, "46ec6240955d4783c82284cc2779cae132854bbb05eb43f492989cb12a35458f7686062b56a155e013282a324c60ed"}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000040)={0x40, 0x17, 0x5, "7010ce0664"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.141844411s ago: executing program 5 (id=520): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x3, 0x8, 0x6, 0x2b, 0x8, 0x20, 0x4b, 0x6, 0x4f, 0xfe, 0x8, 0x6, 0x1}, {0x5296, 0x401, 0x5, 0xbf, 0x7, 0x1, 0x47, 0xf3, 0x3, 0x3, 0x3, 0x3, 0x3ffffffffff}, {0x7fffffff, 0x4, 0x40, 0xa, 0x5a, 0xf4, 0x5, 0xf8, 0xfc, 0x0, 0xf0, 0xd2, 0xffffffff7fffffff}], 0xa}) (async) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406"], 0x0) (async) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) (async, rerun: 32) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) (rerun: 32) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) 3.034100376s ago: executing program 1 (id=526): r0 = socket(0xa, 0x1, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) 3.031169926s ago: executing program 1 (id=527): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000006c0)="f3440fc7b729000000f20f5f0d00000080460f5ba4b07a000000470f38c9403736460fc7b10f240000660f3881078fa9189021da820001c0fef3440f0966b881000f00d8", 0x44}], 0xaaaabbc, 0x74, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x5, 0x6, 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x0, 0xbcf90d47cd4794dd) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/reserved_size', 0x202, 0x46) copy_file_range(r4, 0x0, r4, &(0x7f0000000100)=0x20008a, 0x400000000000002, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000003640)) 3.009861526s ago: executing program 1 (id=528): socket$packet(0x11, 0x3, 0x300) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) mremap(&(0x7f000009e000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f000000c000/0x1000)=nil) socket(0x1e, 0x4, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2, 0x39, 0xf000060}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)="e2cebc24a2", 0x5}], 0x1}}], 0x1, 0x4000800) 2.995995277s ago: executing program 1 (id=529): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x315, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0xf7}}}}}]}}]}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000b72000/0x400000)=nil, 0x400000}, 0x2}) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x80001, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1, 0x1, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) timer_create(0x3, &(0x7f0000000140)={0x0, 0x1, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) timer_settime(r4, 0x1, &(0x7f0000000380)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r4, &(0x7f0000000000)) setresgid(0x0, 0x0, 0xee01) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r5) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000140)={0x20, 0x37, 0x2e, {0x2e, 0x31, "f70ba381030000000000000000cb4fdca0560f920d54f365c5b1d43ee44fbf6fc93f0808251f5f10e0c0502e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.802114983s ago: executing program 5 (id=530): r0 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYBLOB="cfeb3787db2fc88945336ac6f7df1e7e6331e9897872e794497cc1183b01f54e6a8ba81d5ea5bed00a101186781a1402c1fb3212730a97bf44838f520c38b2ffc11e6f83611a4f0d38ca63e1f23c6aa426f130df34307af9709572166941fbbbb8f8d3b7584c3792641b6e0e7c5fc623446511af455bc194eeb155247ef8938e6992cbc9ad0b21ac1258977612a5c929b9287a3ecc7d14031bde500e83a88121721d85e017fd53"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="04ba9e08096f"]}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x81, 0x1, '('}, 0x0, 0x0, 0x0, 0x0}) 2.765554864s ago: executing program 0 (id=531): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, 0x1000}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x16, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f003f0001332564aa11f6bbf44d00000000008984", 0x39}], 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xa, 0x3, 0x5, "1d6613ebb4d4108ba25a8b02fbe1bf8fb4dbf77e1a83543041967a0a39e696cd98098c9c8bcc37ee1b8c4b9d96802c3499a07192875c837629dc4e9d0d129707", "2842d06fb051c0b0b3fe9a50b5dbddf1a408dbc4b9caa9d341e921d3738eb56077e4a245b191c2a6e704677d5af59bfda3d97c6a1cd1e6d87b9d2520ac86946c", "8f6cb4b2375678583090475f640afa9c3c7c9a584a1d5a77d3b0cbb5d6521bcb", [0xa, 0x8]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4004811}, 0xc) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) ioctl$OCFS2_IOC_GROUP_ADD(r3, 0x40186f02, &(0x7f0000000400)={0x200, 0x2bb6, 0x0, 0x3}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="0a009000ffffffffffffaaaaaaaaaaaa1663d8cda8af89e98a8a5d441c64e186dd69040000001a3aff00000000000000000000ffffe0000002ff0200000000000000000000000000018800907892000000fc0000000000000000000000000000010200", @ANYRES64=r6, @ANYRESDEC=r7, @ANYRESOCT], 0x54) ioctl$BLKSECTGET(r4, 0x1267, &(0x7f0000000080)) listen(r7, 0x100) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$WPAN_SECURITY(r8, 0x0, 0x1, &(0x7f00000003c0)=0x2, 0x4) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r10, 0x29, 0x48, 0x0, 0x0) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) sendto$inet(r9, &(0x7f0000000040)="1000", 0xffffffffffffff1a, 0x4040090, &(0x7f0000000180)={0x2, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 1.655629308s ago: executing program 5 (id=532): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000780)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in=@local, 0x0, 0xe0c, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0xfffffffffffffffd, 0x7f, 0x0, 0xffffffffffffffff, 0x200}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x84, 0x5, [{{@in=@remote, 0x4d3, 0x33}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5, 0x4, 0x2, 0x6, 0x2826, 0xa, 0x9}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x3c}, 0xa, @in=@broadcast, 0x3502, 0x4, 0x3, 0x7, 0x28c0, 0x3ff, 0x4}]}]}, 0x13c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x3a, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0x2, 0xa}]}]}, 0xa0}}, 0x0) 1.59411288s ago: executing program 5 (id=533): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb006}, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800}, 0x20) mremap(&(0x7f000009e000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f000000c000/0x1000)=nil) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58ca2280, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r4 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6, 0x39, 0xf000000}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)="e2cebc24a2542168ba2bcfd4ae249803a64af256ef511f5708973bfd8f5d0780eaa01c91430986800b56a393d984fafba17f1764dd6e4c3f60e6e8abad98c34194de56a8c083bbbfd25526dec37c7b4afa64b37412fa286f108601f5ad26bdbdd8a9e675d63688f9dd68173ce08b1c3a4d5e37ff023424f974", 0x79}, {0x0}], 0x2}}], 0x1, 0x4000800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in6=@loopback, @in=@rand_addr=0x64010101, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0x1}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002940)={'veth1_to_team\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) 1.550283692s ago: executing program 5 (id=534): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x303000, 0x0) close_range(r0, r0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x20000051) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x20}, @val={0x8}, @val={0xc, 0x99, {0x8e68, 0x5d}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x22) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000280)={0x2}) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000300)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@private1}}, &(0x7f0000000440)=0xe8) r6 = dup(0xffffffffffffffff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x0, &(0x7f00000004c0)=0x5, 0x4) (async) write(r7, &(0x7f0000000500)="f4787c", 0x3) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r8, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r2, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8800}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x40) (async) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x1d4, r2, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x33}}}}, [@NL80211_ATTR_NAN_FUNC={0x1a4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x180, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x70, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x6}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x9}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xa3}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x9}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x24008000}, 0xef7956aba92972d9) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r8) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x6c, r10, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x815}, 0x80000) (async) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000ac0)='rdma.current\x00', 0x0, 0x0) r12 = openat(r11, &(0x7f0000000b00)='./file0\x00', 0x70b481, 0x36) (async) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x58, r10, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0xc, 0x4d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}]}, 0x58}, 0x1, 0x0, 0x0, 0x44844}, 0x4000) (async) unlinkat(r12, &(0x7f0000000cc0)='./file0\x00', 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x40, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1ff}]}, 0x40}, 0x1, 0x0, 0x0, 0x401b5}, 0x20004001) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f0000000e00)={@mcast2, r5}, 0x14) (async) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f00000015c0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001580)={&(0x7f0000000e80)={0x6c4, r2, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x6, 0x7d}}}}, [@NL80211_ATTR_TX_RATES={0x318, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x3, 0x9, 0xc, 0x1, 0x1b, 0x18, 0xc, 0x5, 0x4, 0xc, 0x3, 0x0, 0x18, 0x24]}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x5, 0x30, 0x60, 0x1, 0x3, 0x1, 0x1b, 0x12, 0x30, 0x24, 0xb, 0x3, 0x1d, 0x30, 0xb, 0x1, 0x60, 0x5, 0x6, 0x18, 0x9, 0x60, 0x16, 0x2, 0x48]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x4}, {0x7, 0x8}, {0x3, 0xa}, {0x1}, {0x7, 0x3}, {0x4, 0x3}, {0x6, 0x6}, {0x2, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x1000, 0x5, 0x8001, 0x1, 0x0, 0x4, 0x7]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x18]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0xb, 0x0, 0x2a, 0x18, 0x12, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x12, 0x1b, 0xb, 0x48, 0xc, 0x6c, 0x12, 0x4, 0x4, 0x6, 0x30, 0x36, 0x30, 0x12, 0x24, 0xc, 0x6]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x4, 0x5}, {0x4, 0x4}, {0x5, 0x1}, {0x4, 0x2}, {0x7, 0x3}, {0x4, 0x9}, {0x3, 0x7}, {0x1, 0x2}, {0x1, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x1, 0x5, 0x4, 0x1ff, 0x9, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xffff, 0x101, 0x2, 0x2, 0x4, 0x2, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x9, 0x0, 0x0, 0x3, 0x4, 0x3, 0xffc0]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x4, 0xa1c9, 0x8db1, 0x6402, 0x7, 0x0, 0x2d]}}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xbd, 0x0, 0x8af, 0x1ff, 0x46c, 0x9, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x5, 0x3}, {0x7, 0x9}, {0x0, 0x2}, {0x1, 0xa}, {0x0, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x0, 0x12, 0x6c, 0x24, 0x48, 0xc, 0x24, 0x18, 0x4, 0x60, 0x48, 0x9, 0x18, 0x1b, 0x6c, 0x12, 0x18, 0x0, 0x18, 0x1b, 0x1, 0xc, 0x16, 0x4, 0xb, 0x48, 0x36]}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x45, 0x2, [{0x2, 0x4}, {0x7, 0x6}, {0x5, 0x8}, {0x3, 0x2}, {0x7, 0x3}, {0x6, 0x6}, {0x5, 0x5}, {0x2, 0x9}, {0x2, 0x3}, {0x6, 0x6}, {0x1, 0x2}, {0x1, 0x9}, {0x7, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x5}, {0x0, 0x9}, {0x5, 0x7}, {0x0, 0x8}, {0x1, 0x4}, {0x4, 0x1}, {0x1, 0x6}, {0x1, 0x3}, {0x0, 0x2}, {0x0, 0x5}, {0x4}, {0x7, 0x2}, {0x0, 0x2}, {0x2, 0x6}, {0x7}, {0x4, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x5, 0x7}, {0x0, 0x7}, {0x4, 0x4}, {0x1, 0x5}, {0x3, 0x8}, {0x6, 0x9}, {0x0, 0x2}, {0x0, 0x6}, {0x6}, {0x0, 0x2}, {0x6, 0x4}, {0x1, 0x7}, {0x0, 0x1}, {0x1, 0x6}, {0x1}, {0x2, 0x7}, {0x7, 0x2}, {0x1, 0x9}, {0x6, 0x1}, {0x5, 0x4}, {0x7, 0x8}, {0x4, 0x8}, {0x7, 0x2}, {}, {0x7, 0xa}, {0x0, 0x6}, {0x6, 0x5}, {0x1}, {0x2, 0x9}, {0x3, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x526, 0x7, 0x6, 0xff74, 0xb, 0x5, 0x1, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0xfd, 0xfffe, 0x8, 0x5, 0x0, 0x94]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0xb, 0x4, 0x4, 0x1, 0x9, 0x1]}}]}, @NL80211_BAND_2GHZ={0xec, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfa8c, 0xe6, 0xff, 0x7, 0x2, 0x2, 0xb9e3, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x24, 0xb, 0x36, 0x60, 0x2, 0x6c, 0x2e, 0x1b, 0x16, 0xc, 0x5, 0x78, 0x0, 0x2, 0xc, 0x15, 0x18, 0x12, 0x6c, 0x5, 0x2]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x2, 0x7}, {0x1, 0x7}, {0x0, 0x7}, {0x0, 0x9}, {0x2, 0x6}, {0x4, 0xa}, {0x2, 0x6}, {0x2, 0x3}, {0x5, 0x6}, {0x4, 0x6}, {0x0, 0x2}, {0x6, 0xa}, {0x2}, {0x6, 0x8}, {0x3, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x45, 0x7, 0x2, 0x1, 0x8001, 0x1, 0x7]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x0, 0x1}, {0x1, 0x9}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x2}, {0x6, 0x3}, {0x2, 0x4}, {0x7, 0x3}, {0x5, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x5, 0xc, 0xc, 0x8000, 0x3, 0x0, 0x9]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x5, 0x7}, {0x1, 0x8}, {0x6, 0x5}, {0x1, 0x4}, {0x3, 0xa}, {0x7, 0x3}, {0x7, 0xa}, {0x2, 0x2}, {0x0, 0xa}, {0x4, 0x3}, {0x0, 0x9}, {0x1, 0x4}, {0x0, 0x3}, {0x4, 0x7}, {0x0, 0x7}, {0x3}, {0x1, 0x5}, {0x4, 0x2}, {0x5, 0x3}, {0x6, 0x6}, {0x6, 0x5}, {0x4}, {0x4, 0x5}, {0x5, 0x5}, {0x7, 0x7}, {0x5, 0x4}, {0x3, 0x3}, {0x7, 0x1}, {0x3, 0x1}, {0x3, 0x4}, {0x6, 0x7}, {0x3, 0x1}, {0x1, 0x1}, {0x7, 0x8}, {0x7, 0x3}, {0x5, 0x4}, {0x6, 0x1}, {0x4, 0x9}, {0x2, 0x5}, {0x1, 0x1}, {0x7}, {0x3, 0x6}]}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x7, 0x2}, {0x5, 0x2}, {0x6, 0x4}, {0x0, 0x5}, {0x6, 0x2}, {0x3, 0x4}, {0x5, 0xa}, {0x3, 0x9}, {0x2, 0x3}, {0x3, 0x7}, {0x2, 0x6}, {0x0, 0x6}, {0x0, 0x4}, {0x7, 0x5}, {0x0, 0x9}, {0x6, 0x4}, {0x6}, {0x3, 0x7}, {0x2, 0x2}, {0x4, 0x7}, {0x6}, {0x5, 0x3}, {0x2, 0x9}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x4}, {0x5, 0x5}, {0x3}, {0x4, 0x7}, {0x6, 0x8}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x7}, {0x0, 0xa}, {0x3, 0xa}, {0x5}, {0x6, 0xa}, {0x4, 0x9}, {0x0, 0xa}, {0x7, 0xa}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5d1}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x17}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x8}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x5}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}]}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x13}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x2b}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x1ca}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x6}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_TX_RATES={0x1bc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x8, 0x8, 0x2, 0x3, 0x1ff, 0x7, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xfffb, 0x1, 0x53d0, 0x7fff, 0x1, 0x3, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x84aa, 0x5727, 0x0, 0x7, 0x7, 0x8, 0x4, 0x8]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x11, 0x5, 0x12, 0x30, 0x16, 0x6, 0x30, 0x5, 0x18, 0x48, 0x9, 0x3, 0xb, 0x1, 0x30, 0x68, 0x5, 0xa, 0x36, 0x1, 0x60, 0x30, 0x6c, 0x60, 0x24, 0x48, 0x6c, 0xb, 0xb, 0x36, 0x2, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x2, 0x8, 0x6, 0x8001, 0x2, 0x7, 0x5]}}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x7, 0x6}, {0x7, 0xa}, {0x4, 0x6}, {0x3, 0x1e}, {0x3, 0xa}, {0x5, 0x4}, {0x1, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x3}, {0x7, 0x8}, {0x7, 0x1}, {0x0, 0x3}, {0x3, 0xa}, {0x6, 0x5}, {0x3}, {0x1, 0x4}, {0x3, 0x6}, {0x5, 0x2}, {}, {0x7, 0x5}, {0x1, 0x3}, {0x4, 0x9}, {0x0, 0x3}, {0x7, 0xa}, {0x6, 0x8}, {0x1, 0x2}, {0x0, 0x9}, {0x0, 0x5}, {0x1, 0x3}, {0x4, 0x2}, {0x4, 0x4}, {0x2, 0x7}, {0x0, 0x4}, {0x2, 0x5}, {0x3, 0x3}, {0x3, 0x1}, {0x5, 0x3}, {0x4, 0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x341, 0x1, 0x2, 0x0, 0x200, 0x8, 0x8001, 0xa5e]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x6, 0x4}, {0x2, 0x8}, {0x0, 0x4}, {0x2, 0x4}, {0x5, 0x8}, {0x5, 0x8}, {0x6, 0x5}, {0x7, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x3, 0x5}, {0x3, 0x5}, {0x2, 0x7}, {0x4, 0x4}, {0x0, 0x4}, {0x7, 0x4}, {0x4, 0x8}, {0x2, 0x7}, {0x6, 0x7}, {0x1, 0x1}, {0x4, 0x2}, {0x3, 0x4}, {0x5, 0x7}, {0x1, 0x5}, {0x6, 0x1}, {0x3, 0x8}, {0x6, 0x1}, {0x6, 0x3}, {0x5, 0x2}, {0x3, 0x3}, {0x0, 0x4}, {0x7, 0x3}, {0x2, 0x6}, {0x6, 0x7}]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x1, 0x3}, {0x1, 0x4}]}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xf4a4, 0x8000, 0xb, 0x6, 0x0, 0x2, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x0, 0x1}, {0x0, 0x1}, {0x0, 0x5}, {0x1, 0x8}, {0x1, 0x6}, {0x5, 0x1}, {0x0, 0x9}, {0x7, 0xa}, {0x3, 0xa}, {}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x3}, {0x4, 0x6}, {0x1, 0x7}, {0x6, 0x2}, {0x6, 0x2}, {0x1, 0x9}, {0x3, 0x7}, {0x3, 0x8}, {0x3, 0xa}, {0x6, 0x4}, {0x0, 0x7}, {0x2, 0x5}, {0x6, 0x5}, {0x4, 0x5}, {0x0, 0x9}, {0x0, 0x1}, {0x0, 0x8}, {0x7, 0x9}, {0x7, 0xa}, {0x4, 0x3}, {0x2, 0x2}, {0x1, 0x5}, {0x5, 0x5}, {0x6, 0x8}, {0x0, 0x1}, {0x2, 0x1}, {0x7, 0x5}, {0x7, 0x1}, {0x6, 0x8}, {0x3, 0x7}, {0x6, 0x2}, {0x7, 0x5}, {0x5}, {0x1, 0x5}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xda9fadc007a9dfe9, 0x6, 0x24, 0x4, 0x37, 0x4, 0x6c, 0x0, 0x48, 0x1, 0x2, 0x6, 0x5, 0x2, 0x1b, 0x6, 0x2, 0x3, 0x3, 0x18, 0x9, 0x1b, 0x2, 0x4, 0x26, 0xb, 0x36, 0x48, 0x18, 0xa242aef37be182c8]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x2, 0x76f, 0x401, 0x1ff, 0xfe00, 0x4, 0xa]}}]}]}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x4}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x10000}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x32}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x8}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xf8}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff5c}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x200}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x6}]}, @NL80211_ATTR_TX_RATES={0x104, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x0, 0x9, 0x2, 0x101, 0x81, 0x81, 0x8b3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ae7, 0x3, 0x4, 0x1, 0xeb8, 0x2, 0x101, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x2, 0x48, 0x48, 0xb, 0x24, 0x35, 0x30, 0x1, 0x60, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x8, 0x3, 0x80, 0x7, 0x8, 0x7, 0xd]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x6, 0x505b, 0x0, 0x7, 0x0, 0xba, 0x8]}}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xd, 0x5, 0x8f, 0x6000, 0xaa73, 0x401, 0xe]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0xfffa, 0x3, 0x3, 0x60, 0x7, 0xb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x2e5, 0x7, 0x9, 0x9, 0x0, 0xfff, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x7, 0x6}, {0x0, 0x4}, {0x4, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0x0, 0x2adc, 0x7, 0x8, 0x4, 0x6ba8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0x800, 0x0, 0x6, 0x3ff, 0x2, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}]}]}]}, 0x6c4}, 0x1, 0x0, 0x0, 0x40800}, 0x24000090) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 1.514713903s ago: executing program 5 (id=535): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) r2 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000380)={0x40, 0x15, 0x6, "77808dd5871b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r2, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000004c0)={0x40, 0x16, 0x1, 'F'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000000c00)={0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="400606000000b93ad8facfbc"], 0x0, 0x0}) ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000180)) 1.29406068s ago: executing program 1 (id=536): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582020002"], 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@remote, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) userfaultfd(0x80001) (async) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x4bc9, 0x200, 0x1, 0x29}, &(0x7f0000c57000), 0x0, 0x0) (async) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x4bc9, 0x200, 0x1, 0x29}, &(0x7f0000c57000), 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc018aa06, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}}) (async) ioctl$UFFDIO_ZEROPAGE(r2, 0xc018aa06, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x2b}}, &(0x7f0000000040)=0x20) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x2b}}, &(0x7f0000000040)=0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'sit0\x00'}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f00000001c0)={&(0x7f0000bcb000/0x1000)=nil, &(0x7f00001fc000/0x2000)=nil, 0x1000}) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffd3a, &(0x7f0000000080)=ANY=[]) 238.783833ms ago: executing program 3 (id=538): socket$packet(0x11, 0x3, 0x300) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) mremap(&(0x7f000009e000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f000000c000/0x1000)=nil) socket(0x1e, 0x4, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2, 0x39, 0xf000300}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)="e2cebc24a2", 0x5}], 0x1}}], 0x1, 0x4000800) 178.073825ms ago: executing program 1 (id=539): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000080)={[{0x5, 0x1, 0xa, 0xd, 0x3, 0x7, 0xc, 0x2d, 0x7f, 0x5, 0x8, 0xf5, 0x9}, {0xf, 0x9, 0xa, 0xa, 0x8, 0xe, 0xc, 0x1, 0x8, 0x0, 0x46, 0xe8, 0x6}, {0x0, 0x7, 0xe8, 0x7f, 0x2, 0x7, 0x0, 0x4, 0x6, 0x8, 0x4, 0x4, 0x2}], 0xf}) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000040)={[{@nfs_export_on}]}) 86.374408ms ago: executing program 3 (id=540): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x2f0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x8) fcntl$setlease(r0, 0x400, 0x3) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x20d401, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000480)={{}, {}, [], {0x4, 0x1}, [], {0x10, 0x3}, {0x20, 0x6}}, 0x24, 0x1) setreuid(0xffffffffffffffff, 0xee01) setxattr$incfs_metadata(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 85.998558ms ago: executing program 3 (id=541): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000780)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in=@local, 0x0, 0xe0c, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0xfffffffffffffffd, 0x7f, 0x0, 0xffffffffffffffff, 0x200}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x84, 0x5, [{{@in=@remote, 0x4d3, 0x33}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5, 0x4, 0x2, 0x6, 0x2826, 0xa, 0x9}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x3c}, 0xa, @in=@broadcast, 0x3502, 0x4, 0x3, 0x7, 0x28c0, 0x3ff, 0x4}]}]}, 0x13c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x84, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0x2, 0xa}]}]}, 0xa0}}, 0x0) 85.831378ms ago: executing program 3 (id=542): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb006}, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800}, 0x20) mremap(&(0x7f000009e000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f000000c000/0x1000)=nil) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58ca2280, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r4 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6, 0x39, 0xf000000}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)="e2cebc24a2542168ba2bcfd4ae249803a64af256ef511f5708973bfd8f5d0780eaa01c91430986800b56a393d984fafba17f1764dd6e4c3f60e6e8abad98c34194de56a8c083bbbfd25526dec37c7b4afa64b37412fa286f108601f5ad26bdbdd8a9e675d63688f9dd68173ce08b1c3a4d5e37ff023424f974", 0x79}, {0x0}], 0x2}}], 0x1, 0x4000800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in6=@loopback, @in=@rand_addr=0x64010101, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0x1}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002940)={'veth1_to_team\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) 75.930518ms ago: executing program 3 (id=543): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0xc4ddfbc9bba2bd78}}}, &(0x7f0000000300)=0x0) munmap$IORING_OFF_CQ_RING(r4, 0x3) (async) munmap$IORING_OFF_CQ_RING(r4, 0x3) r9 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r6, 0x2) r10 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_setup_queues(r10, r8, &(0x7f0000000340)={0x0, 0xfb7c, 0x800, 0x2, 0x321, 0x0, r2}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3dc, 0x200, 0x1, 0x3de, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x1, 0x278, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60e, 0x8, 0x1, 0x321, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc9b0, 0x2, 0x3, 0xc4}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, r7, '\x00', {0x2, 0xc81, 0x0, 0x0}}, &(0x7f0000001840)) (async) syz_ublk_setup_queues(r10, r8, &(0x7f0000000340)={0x0, 0xfb7c, 0x800, 0x2, 0x321, 0x0, r2}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3dc, 0x200, 0x1, 0x3de, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x1, 0x278, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60e, 0x8, 0x1, 0x321, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc9b0, 0x2, 0x3, 0xc4}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, r7, '\x00', {0x2, 0xc81, 0x0, 0x0}}, &(0x7f0000001840)) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0x7fffbffe) ptrace$pokeuser(0x6, r0, 0x358, 0xfffffffffffffffe) (async) ptrace$pokeuser(0x6, r0, 0x358, 0xfffffffffffffffe) 0s ago: executing program 3 (id=544): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x81, 0x4, 0x0, 0xb9ff, 0x9}) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TIOCEXCL(r1, 0x540c) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xbfb3) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_open_pts(r0, 0x101000) r3 = dup3(r2, r0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17) kernel console output (not intermixed with test programs): main item tag 0x0 [ 62.585847][ T317] playstation 0003:054C:09CC.0010: item fetching failed at offset 7/9 [ 62.596197][ T317] playstation 0003:054C:09CC.0010: Parse failed [ 62.602545][ T317] playstation 0003:054C:09CC.0010: probe with driver playstation failed with error -22 [ 62.623758][ T36] audit: type=1400 audit(1782224489.770:258): avc: denied { write } for pid=1150 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.649763][ T36] audit: type=1400 audit(1782224489.770:259): avc: denied { add_name } for pid=1150 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.697462][ T36] audit: type=1400 audit(1782224489.850:260): avc: denied { remove_name } for pid=1164 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=2057 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.770681][ T1143] kvm: emulating exchange as write [ 62.835634][ T766] usb 4-1: USB disconnect, device number 30 [ 62.949009][ T1172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.244'. [ 63.024130][ T1176] netlink: 'syz.0.246': attribute type 10 has an invalid length. [ 63.110007][ T320] usb 2-1: USB disconnect, device number 18 [ 63.116687][ T320] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 63.316032][ T317] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 63.446095][ T31] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 63.487691][ T317] usb 1-1: unable to get BOS descriptor or descriptor too short [ 63.496169][ T317] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.506559][ T317] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 63.515522][ T317] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 63.526428][ T317] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 63.539686][ T317] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 63.550505][ T317] usb 1-1: config 1 interface 1 has no altsetting 0 [ 63.559361][ T317] usb 1-1: string descriptor 0 read error: -22 [ 63.565564][ T317] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 63.574643][ T317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.607594][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 63.616056][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 63.627203][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 63.636312][ T320] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 63.636993][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt [ 63.654348][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 63.664092][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 63.681760][ T31] usb 5-1: string descriptor 0 read error: -22 [ 63.688253][ T31] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 63.697481][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.706349][ T31] usb 5-1: config 0 descriptor?? [ 63.711685][ T1190] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 63.784549][ T317] usb 1-1: 2:0: failed to get current value for ch 0 (-32) [ 63.817495][ T320] usb 4-1: unable to get BOS descriptor or descriptor too short [ 63.826003][ T320] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.836181][ T320] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 63.845166][ T320] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 63.856088][ T320] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 63.869288][ T320] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 63.880241][ T320] usb 4-1: config 1 interface 1 has no altsetting 0 [ 63.889040][ T320] usb 4-1: string descriptor 0 read error: -22 [ 63.895280][ T320] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 63.904417][ T320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.976019][ T766] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 63.993993][ T1176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.002658][ T1176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.011121][ T317] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 64.023438][ T317] usb 1-1: USB disconnect, device number 17 [ 64.045934][ T31] usb 5-1: USB disconnect, device number 11 [ 64.126105][ T766] usb 2-1: Using ep0 maxpacket: 32 [ 64.132397][ T766] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.143502][ T766] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.153420][ T766] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 64.162535][ T766] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.171510][ T766] usb 2-1: config 0 descriptor?? [ 64.177558][ T766] hub 2-1:0.0: USB hub found [ 64.385288][ T766] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 64.394782][ T766] usbhid 2-1:0.0: can't add hid device: -71 [ 64.400813][ T766] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 64.430558][ T766] usb 2-1: USB disconnect, device number 19 [ 64.529142][ T1218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.254'. [ 64.696042][ T31] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 64.847129][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.858092][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.867894][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 64.880856][ T31] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 64.889972][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.898109][ T766] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 64.906766][ T31] usb 5-1: config 0 descriptor?? [ 65.056011][ T766] usb 2-1: Using ep0 maxpacket: 32 [ 65.062387][ T766] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.073364][ T766] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.083284][ T766] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 65.092384][ T766] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.101383][ T766] usb 2-1: config 0 descriptor?? [ 65.107837][ T766] hub 2-1:0.0: USB hub found [ 65.116959][ T1221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.125585][ T1221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.156626][ T320] usb 4-1: USB disconnect, device number 31 [ 65.309187][ T766] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 65.318996][ T31] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 65.328156][ T766] usbhid 2-1:0.0: can't add hid device: -71 [ 65.334284][ T31] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 65.346751][ T766] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 65.366480][ T766] usb 2-1: USB disconnect, device number 20 [ 65.401459][ T1232] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 65.409770][ T1232] overlayfs: overlapping lowerdir path [ 65.433693][ T1234] team_slave_0: entered allmulticast mode [ 65.506153][ T320] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 65.565739][ T1241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.263'. [ 65.666028][ T320] usb 4-1: Using ep0 maxpacket: 16 [ 65.676855][ T320] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 65.686945][ T1245] __vm_enough_memory: pid: 1245, comm: syz.4.253, bytes: 70373039144960 not enough memory for the allocation [ 65.687346][ T320] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 65.736087][ T320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.744177][ T320] usb 4-1: Product: syz [ 65.756113][ T320] usb 4-1: Manufacturer: syz [ 65.760795][ T320] usb 4-1: SerialNumber: syz [ 65.777359][ T320] r8152-cfgselector 4-1: Unknown version 0x0000 [ 65.783690][ T320] r8152-cfgselector 4-1: config 0 descriptor?? [ 65.816049][ T766] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 65.846039][ T317] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 65.966020][ T766] usb 2-1: Using ep0 maxpacket: 32 [ 65.972492][ T766] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.983718][ T766] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.993715][ T766] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 65.996127][ T317] usb 1-1: Using ep0 maxpacket: 32 [ 66.003357][ T766] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.018361][ T766] usb 2-1: config 0 descriptor?? [ 66.027235][ T317] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.038562][ T766] hub 2-1:0.0: USB hub found [ 66.045989][ T317] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.076016][ T317] usb 1-1: config 0 interface 0 has no altsetting 0 [ 66.082708][ T317] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 66.092044][ T317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.106323][ T317] usb 1-1: config 0 descriptor?? [ 66.219900][ T312] r8152-cfgselector 4-1: USB disconnect, device number 32 [ 66.236568][ T766] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 66.248237][ T766] usbhid 2-1:0.0: can't add hid device: -71 [ 66.254249][ T766] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 66.276520][ T766] usb 2-1: USB disconnect, device number 21 [ 66.730165][ T317] usbhid 1-1:0.0: can't add hid device: -71 [ 66.736948][ T317] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 66.745855][ T317] usb 1-1: USB disconnect, device number 18 [ 66.774000][ T445] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.813132][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 66.813151][ T36] audit: type=1400 audit(1782224493.960:270): avc: denied { write } for pid=1255 comm="syz.1.268" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 66.851402][ T1256] rust_binder: 1255:1256 transaction to 0 failed: ENOENT [ 66.851576][ T1256] rust_binder: Write failure EINVAL in pid:153 [ 66.911294][ T1258] fuse: Bad value for 'fd' [ 67.177138][ T1260] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 67.505601][ T1025] Bluetooth: hci2: Frame reassembly failed (-84) [ 67.656070][ T320] usb 5-1: reset high-speed USB device number 12 using dummy_hcd [ 67.664213][ T320] usb 5-1: device reset changed ep0 maxpacket size! [ 67.671255][ T10] usb 5-1: USB disconnect, device number 12 [ 67.806080][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 67.956050][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 67.962402][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.973398][ T320] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 67.981040][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8347, setting to 1024 [ 67.992303][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 68.001433][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.010257][ T10] usb 5-1: config 0 descriptor?? [ 68.157181][ T320] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 68.166383][ T320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.175151][ T320] usb 2-1: config 0 descriptor?? [ 68.416943][ T10] apple 0003:05AC:024B.0012: fixing up MacBook JIS keyboard report descriptor [ 68.426953][ T10] apple 0003:05AC:024B.0012: unknown global tag 0xe [ 68.433733][ T10] apple 0003:05AC:024B.0012: item 0 1 1 14 parsing failed [ 68.441126][ T10] apple 0003:05AC:024B.0012: parse failed [ 68.446982][ T10] apple 0003:05AC:024B.0012: probe with driver apple failed with error -22 [ 68.616784][ T312] usb 5-1: USB disconnect, device number 13 [ 68.806020][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 68.806038][ T993] Bluetooth: hci0: command 0x1003 tx timeout [ 69.086021][ T312] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 69.185550][ T320] usb 2-1: Cannot set autoneg [ 69.190373][ T320] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 69.216285][ T1289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.281'. [ 69.237368][ T312] usb 4-1: unable to get BOS descriptor or descriptor too short [ 69.246571][ T312] usb 4-1: not running at top speed; connect to a high speed hub [ 69.256578][ T312] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 69.265644][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.273701][ T312] usb 4-1: Product: syz [ 69.277998][ T312] usb 4-1: Manufacturer: syz [ 69.282644][ T312] usb 4-1: SerialNumber: syz [ 69.457123][ T317] usb 2-1: USB disconnect, device number 22 [ 69.486068][ T10] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 69.494153][ T1287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.502837][ T1287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.511911][ T36] audit: type=1400 audit(1782224496.660:271): avc: denied { setattr } for pid=1286 comm="syz.3.280" name="RAW" dev="sockfs" ino=10761 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.526111][ T994] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 69.534624][ T55] Bluetooth: hci2: command 0x1003 tx timeout [ 69.549569][ T312] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 69.560715][ T312] usb 4-1: USB disconnect, device number 33 [ 69.637324][ T10] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 69.648151][ T10] usb 5-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 69.661040][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 69.667927][ T10] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 69.677048][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.685655][ T10] usb 5-1: config 0 descriptor?? [ 69.691316][ T1291] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 69.816073][ T320] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 69.946041][ T320] usb 1-1: device descriptor read/64, error -71 [ 70.072270][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 70.085458][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 70.095572][ T10] usb 5-1: USB disconnect, device number 14 [ 70.112594][ T1301] overlayfs: workdir and upperdir must be separate subtrees [ 70.188025][ T320] usb 1-1: device descriptor read/64, error -71 [ 70.198086][ T36] audit: type=1400 audit(1782224497.350:272): avc: denied { ioctl } for pid=1314 comm="syz.3.289" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 70.238346][ T1025] Bluetooth: hci0: Frame reassembly failed (-84) [ 70.239744][ T1317] FAULT_INJECTION: forcing a failure. [ 70.239744][ T1317] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 70.244767][ T447] Bluetooth: hci0: Frame reassembly failed (-84) [ 70.258095][ T1317] CPU: 0 UID: 0 PID: 1317 Comm: syz.3.290 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 70.258244][ T1317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 70.258294][ T1317] Call Trace: [ 70.258316][ T1317] [ 70.258339][ T1317] __dump_stack+0x21/0x30 [ 70.258436][ T1317] dump_stack_lvl+0x140/0x1c0 [ 70.258506][ T1317] ? __cfi_dump_stack_lvl+0x10/0x10 [ 70.258600][ T1317] dump_stack+0x19/0x20 [ 70.258685][ T1317] should_fail_ex+0x3d7/0x530 [ 70.258754][ T1317] should_fail+0xf/0x20 [ 70.258831][ T1317] should_fail_usercopy+0x1e/0x30 [ 70.258915][ T1317] _copy_from_user+0x20/0xa0 [ 70.258969][ T1317] hci_dev_cmd+0xae/0x770 [ 70.259042][ T1317] ? __kasan_check_write+0x18/0x20 [ 70.259105][ T1317] ? __cfi_hci_dev_cmd+0x10/0x10 [ 70.259185][ T1317] ? selinux_capable+0x38/0x50 [ 70.259270][ T1317] ? bpf_lsm_capable+0xd/0x20 [ 70.259361][ T1317] ? security_capable+0x44/0x130 [ 70.259435][ T1317] hci_sock_ioctl+0x69a/0x9e0 [ 70.259519][ T1317] sock_do_ioctl+0x118/0x330 [ 70.259594][ T1317] ? sock_show_fdinfo+0xd0/0xd0 [ 70.259646][ T1317] ? __cfi_vfs_write+0x10/0x10 [ 70.259732][ T1317] ? __kasan_check_write+0x18/0x20 [ 70.259794][ T1317] ? mutex_unlock+0x90/0x240 [ 70.259864][ T1317] sock_ioctl+0x5b5/0x7f0 [ 70.259942][ T1317] ? __cfi_sock_ioctl+0x10/0x10 [ 70.260019][ T1317] ? __fget_files+0x2c5/0x340 [ 70.260093][ T1317] ? bpf_lsm_file_ioctl+0xd/0x20 [ 70.260168][ T1317] ? security_file_ioctl+0x3e/0x110 [ 70.260270][ T1317] ? __cfi_sock_ioctl+0x10/0x10 [ 70.260355][ T1317] __se_sys_ioctl+0x132/0x1b0 [ 70.260428][ T1317] __x64_sys_ioctl+0x7f/0xa0 [ 70.260502][ T1317] x64_sys_call+0x1878/0x2ee0 [ 70.260564][ T1317] do_syscall_64+0x57/0xf0 [ 70.260649][ T1317] ? clear_bhb_loop+0x50/0xa0 [ 70.260704][ T1317] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 70.260824][ T1317] RIP: 0033:0x7f455fd9ce59 [ 70.260925][ T1317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.260997][ T1317] RSP: 002b:00007f4560c9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.261062][ T1317] RAX: ffffffffffffffda RBX: 00007f4560015fa0 RCX: 00007f455fd9ce59 [ 70.261112][ T1317] RDX: 0000200000000180 RSI: 00000000400448df RDI: 0000000000000004 [ 70.261154][ T1317] RBP: 00007f4560c9b090 R08: 0000000000000000 R09: 0000000000000000 [ 70.261188][ T1317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.261238][ T1317] R13: 00007f4560016038 R14: 00007f4560015fa0 R15: 00007fffac442a18 [ 70.261290][ T1317] [ 70.436094][ T320] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 70.625395][ T36] audit: type=1400 audit(1782224497.770:273): avc: denied { validate_trans } for pid=1318 comm="syz.1.292" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 70.666012][ T320] usb 1-1: device descriptor read/64, error -71 [ 70.752305][ T1326] fuseblk: Unknown parameter 'h#W>—b' [ 70.758169][ T36] audit: type=1400 audit(1782224497.910:274): avc: denied { remount } for pid=1318 comm="syz.1.292" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.916063][ T320] usb 1-1: device descriptor read/64, error -71 [ 70.916060][ T312] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 71.036160][ T320] usb usb1-port1: attempt power cycle [ 71.066064][ T312] usb 5-1: Using ep0 maxpacket: 32 [ 71.072516][ T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.083673][ T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.093496][ T312] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 71.102630][ T312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.111478][ T312] usb 5-1: config 0 descriptor?? [ 71.386027][ T320] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 71.407237][ T320] usb 1-1: device descriptor read/8, error -71 [ 71.537075][ T320] usb 1-1: device descriptor read/8, error -71 [ 71.576621][ T312] savu 0003:1E7D:2D5A.0013: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 71.776043][ T320] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 71.807080][ T320] usb 1-1: device descriptor read/8, error -71 [ 71.937145][ T320] usb 1-1: device descriptor read/8, error -71 [ 71.961102][ T317] usb 5-1: USB disconnect, device number 15 [ 72.046244][ T320] usb usb1-port1: unable to enumerate USB device [ 72.146056][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 72.246044][ T994] Bluetooth: hci0: command 0x1003 tx timeout [ 72.246044][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 72.277328][ T10] usb 2-1: device descriptor read/64, error -71 [ 72.516032][ T312] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 72.516038][ T10] usb 2-1: device descriptor read/64, error -71 [ 72.666015][ T312] usb 4-1: Using ep0 maxpacket: 16 [ 72.672806][ T312] usb 4-1: unable to get BOS descriptor or descriptor too short [ 72.681503][ T312] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.691845][ T312] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 72.702616][ T312] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 0.40 [ 72.711793][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.720101][ T312] usb 4-1: Product: syz [ 72.724383][ T312] usb 4-1: Manufacturer: syz [ 72.729095][ T312] usb 4-1: SerialNumber: syz [ 72.766022][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 72.916029][ T10] usb 2-1: device descriptor read/64, error -71 [ 72.947143][ T312] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 72.961397][ T312] usb 4-1: USB disconnect, device number 34 [ 72.973629][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 72.986157][ T317] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 73.030014][ T1354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.302'. [ 73.156145][ T10] usb 2-1: device descriptor read/64, error -71 [ 73.162760][ T317] usb 1-1: Using ep0 maxpacket: 32 [ 73.171588][ T317] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.185897][ T317] usb 1-1: config 0 interface 0 has no altsetting 0 [ 73.192839][ T317] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 73.202034][ T36] audit: type=1400 audit(1782224500.350:275): avc: denied { connect } for pid=1358 comm="syz.4.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.202253][ T317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.231390][ T317] usb 1-1: config 0 descriptor?? [ 73.276149][ T10] usb usb2-port1: attempt power cycle [ 73.458039][ T422] Bluetooth: hci0: Frame reassembly failed (-84) [ 73.465007][ T1369] FAULT_INJECTION: forcing a failure. [ 73.465007][ T1369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.478222][ T1369] CPU: 1 UID: 0 PID: 1369 Comm: syz.3.307 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 73.478258][ T1369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 73.478275][ T1369] Call Trace: [ 73.478283][ T1369] [ 73.478298][ T1369] __dump_stack+0x21/0x30 [ 73.478359][ T1369] dump_stack_lvl+0x140/0x1c0 [ 73.478408][ T1369] ? __cfi_dump_stack_lvl+0x10/0x10 [ 73.478443][ T1369] ? check_stack_object+0x12b/0x150 [ 73.478463][ T1369] dump_stack+0x19/0x20 [ 73.478513][ T1369] should_fail_ex+0x3d7/0x530 [ 73.478545][ T1369] should_fail+0xf/0x20 [ 73.478578][ T1369] should_fail_usercopy+0x1e/0x30 [ 73.478603][ T1369] _copy_to_user+0x24/0xa0 [ 73.478619][ T1369] simple_read_from_buffer+0xed/0x160 [ 73.478669][ T1369] proc_fail_nth_read+0x1aa/0x220 [ 73.478705][ T1369] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 73.478743][ T1369] ? bpf_lsm_file_permission+0xd/0x20 [ 73.478767][ T1369] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 73.478814][ T1369] vfs_read+0x289/0xcb0 [ 73.478840][ T1369] ? sock_show_fdinfo+0xd0/0xd0 [ 73.478863][ T1369] ? __cfi_vfs_read+0x10/0x10 [ 73.478891][ T1369] ? __kasan_check_write+0x18/0x20 [ 73.478912][ T1369] ? mutex_lock+0x97/0x1d0 [ 73.478930][ T1369] ? __cfi_mutex_lock+0x10/0x10 [ 73.478977][ T1369] ? __fget_files+0x2c5/0x340 [ 73.479008][ T1369] ksys_read+0x145/0x260 [ 73.479032][ T1369] ? __cfi_ksys_read+0x10/0x10 [ 73.479064][ T1369] ? __kasan_check_read+0x15/0x20 [ 73.479082][ T1369] __x64_sys_read+0x7f/0x90 [ 73.479118][ T1369] x64_sys_call+0x2638/0x2ee0 [ 73.479144][ T1369] do_syscall_64+0x57/0xf0 [ 73.479177][ T1369] ? clear_bhb_loop+0x50/0xa0 [ 73.479205][ T1369] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 73.479234][ T1369] RIP: 0033:0x7f455fd5d68e [ 73.479250][ T1369] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 73.479288][ T1369] RSP: 002b:00007f4560c9afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 73.479314][ T1369] RAX: ffffffffffffffda RBX: 00007f4560c9b6c0 RCX: 00007f455fd5d68e [ 73.479332][ T1369] RDX: 000000000000000f RSI: 00007f4560c9b0a0 RDI: 0000000000000005 [ 73.479348][ T1369] RBP: 00007f4560c9b090 R08: 0000000000000000 R09: 0000000000000000 [ 73.479374][ T1369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.479385][ T1369] R13: 00007f4560016038 R14: 00007f4560015fa0 R15: 00007fffac442a18 [ 73.479441][ T1369] [ 73.606156][ T361] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 73.737543][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 73.767003][ T10] usb 2-1: device descriptor read/8, error -71 [ 73.844338][ T317] usb 1-1: string descriptor 0 read error: -71 [ 73.851637][ T317] uclogic 0003:5543:004D.0014: failed retrieving string descriptor #200: -71 [ 73.860839][ T317] uclogic 0003:5543:004D.0014: failed retrieving pen parameters: -71 [ 73.869229][ T317] uclogic 0003:5543:004D.0014: failed probing pen v2 parameters: -71 [ 73.877445][ T317] uclogic 0003:5543:004D.0014: failed probing parameters: -71 [ 73.884958][ T317] uclogic 0003:5543:004D.0014: probe with driver uclogic failed with error -71 [ 73.895781][ T317] usb 1-1: USB disconnect, device number 23 [ 73.903805][ T10] usb 2-1: device descriptor read/8, error -71 [ 73.910358][ T361] usb 5-1: Using ep0 maxpacket: 16 [ 73.917345][ T361] usb 5-1: unable to get BOS descriptor or descriptor too short [ 73.927144][ T361] usb 5-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 73.936332][ T361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.944337][ T361] usb 5-1: Product: ႆ뇳鹥㶢쓈à«å™ê¥è…”Ƨ㞛滵噱컿⌡ᘫ誾爖蒙褷ျìŒî¥žê½£ç’²ãµ„碼鎑﨩ꄢåœã»ç›‚â‚餅è´ç´¾á± [ 73.958576][ T361] usb 5-1: Manufacturer: ꆇ컠ﻜ퇒ꌕҗӺꤲ뙌慛맒앲㦓貫 [ 73.966559][ T361] usb 5-1: SerialNumber: ဨ핿ᆅ뽹餚籤л蘪ç“㈳纎겖ò—–‘樰éžç–´ã¡žÞ⊾톣è‚갵諜晈⸄ﳇ⃻ë­ê§©éŠ»Ñå–‹î¿‚ï©Žé€ì§ä’ꉫꤣ厜᎞늋穜蕾窃á¿ï´‡êŒ“ᡕ죞è¯å”åŠÊ¥åŽ©é¨”à¢ì¨§ê”¢é°µáœ§é°£ëšá²ªéŸŽé‰ƒâƒì¿¾è‹„Ớ䭭﫭è‰î¶—䈞駮⿴Ꚛ㪖ç–嘸硫ږﱩáŽâ襙軿䕕丞謩 [ 74.146046][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 74.167032][ T10] usb 2-1: device descriptor read/8, error -71 [ 74.297031][ T10] usb 2-1: device descriptor read/8, error -71 [ 74.403317][ T361] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 74.411535][ T10] usb usb2-port1: unable to enumerate USB device [ 74.425332][ T361] usb 5-1: USB disconnect, device number 16 [ 74.441196][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.746080][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 74.896066][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 74.902857][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 74.930533][ T10] usb 1-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 74.942679][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.950918][ T10] usb 1-1: Product: syz [ 74.951340][ T1382] incfs: Backing dir is not set, filesystem can't be mounted. [ 74.955621][ T10] usb 1-1: Manufacturer: syz [ 74.964442][ T1382] incfs: mount failed -2 [ 74.968866][ T10] usb 1-1: SerialNumber: syz [ 74.976020][ T36] audit: type=1400 audit(1782224502.120:276): avc: denied { mount } for pid=1383 comm="syz.1.310" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 75.213753][ T10] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 75.226136][ T317] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 75.238703][ T10] usb 1-1: USB disconnect, device number 24 [ 75.253589][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 75.376071][ T317] usb 5-1: device descriptor read/64, error -71 [ 75.456065][ T312] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 75.526050][ T994] Bluetooth: hci0: command 0x1003 tx timeout [ 75.526046][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 75.548850][ T36] audit: type=1400 audit(1782224502.700:277): avc: denied { nlmsg_write } for pid=1393 comm="syz.3.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 75.606993][ T312] usb 2-1: Using ep0 maxpacket: 32 [ 75.613578][ T312] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 75.616150][ T317] usb 5-1: device descriptor read/64, error -71 [ 75.626129][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 75.642843][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 75.654333][ T312] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 75.663910][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.680198][ T312] usb 2-1: config 0 descriptor?? [ 75.685744][ T1392] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 75.693965][ T312] hub 2-1:0.0: USB hub found [ 75.876009][ T317] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 75.895027][ T312] hub 2-1:0.0: 2 ports detected [ 76.006092][ T31] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 76.016012][ T317] usb 5-1: device descriptor read/64, error -71 [ 76.166230][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 76.172714][ T31] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 76.181231][ T31] usb 1-1: config 0 has no interface number 0 [ 76.189371][ T31] usb 1-1: New USB device found, idVendor=0424, idProduct=bc01, bcdDevice=c2.57 [ 76.198859][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.207087][ T31] usb 1-1: Product: syz [ 76.211393][ T31] usb 1-1: Manufacturer: syz [ 76.216444][ T31] usb 1-1: SerialNumber: syz [ 76.222181][ T31] usb 1-1: config 0 descriptor?? [ 76.266059][ T317] usb 5-1: device descriptor read/64, error -71 [ 76.376240][ T317] usb usb5-port1: attempt power cycle [ 76.504966][ T36] audit: type=1400 audit(1782224503.650:278): avc: denied { module_load } for pid=1391 comm="syz.1.313" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 76.506400][ T1392] kernel read not supported for file /policy (pid: 1392 comm: syz.1.313) [ 76.546081][ T10] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 76.697284][ T10] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 76.710210][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 76.716939][ T317] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 76.724582][ T10] usb 4-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 76.733758][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.743456][ T10] usb 4-1: config 0 descriptor?? [ 76.751783][ T317] usb 5-1: device descriptor read/8, error -71 [ 76.887327][ T317] usb 5-1: device descriptor read/8, error -71 [ 76.945455][ T1392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=1392 comm=syz.1.313 [ 77.126070][ T317] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 77.147089][ T317] usb 5-1: device descriptor read/8, error -71 [ 77.158913][ T1419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.167600][ T1419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.177417][ T10] elecom 0003:056E:00E6.0015: unknown main item tag 0x0 [ 77.184446][ T10] elecom 0003:056E:00E6.0015: unknown main item tag 0x0 [ 77.191555][ T10] elecom 0003:056E:00E6.0015: unknown main item tag 0x0 [ 77.198589][ T10] elecom 0003:056E:00E6.0015: unknown main item tag 0x0 [ 77.205613][ T10] elecom 0003:056E:00E6.0015: unknown main item tag 0x0 [ 77.212708][ T10] elecom 0003:056E:00E6.0015: unknown main item tag 0x0 [ 77.219836][ T10] elecom 0003:056E:00E6.0015: unknown main item tag 0x0 [ 77.226885][ T10] elecom 0003:056E:00E6.0015: unknown main item tag 0x0 [ 77.233980][ T10] elecom 0003:056E:00E6.0015: unknown main item tag 0x0 [ 77.241127][ T10] elecom 0003:056E:00E6.0015: unknown main item tag 0x0 [ 77.248178][ T10] elecom 0003:056E:00E6.0015: unknown main item tag 0x0 [ 77.257028][ T10] elecom 0003:056E:00E6.0015: hidraw0: USB HID v0.81 Device [HID 056e:00e6] on usb-dummy_hcd.3-1/input0 [ 77.287227][ T317] usb 5-1: device descriptor read/8, error -71 [ 77.396160][ T317] usb usb5-port1: unable to enumerate USB device [ 77.963564][ T312] usb 2-1-port2: cannot reset (err = -71) [ 77.969469][ T31] usb 2-1: USB disconnect, device number 27 [ 77.975622][ T312] usb 2-1-port2: attempt power cycle [ 78.286057][ T46] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 78.436081][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 78.442527][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 78.449223][ T46] usb 5-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 78.458390][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.467522][ T46] usb 5-1: config 0 descriptor?? [ 78.518100][ T1435] FAULT_INJECTION: forcing a failure. [ 78.518100][ T1435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.531300][ T1435] CPU: 0 UID: 0 PID: 1435 Comm: syz.1.327 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 78.531337][ T1435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 78.531351][ T1435] Call Trace: [ 78.531358][ T1435] [ 78.531367][ T1435] __dump_stack+0x21/0x30 [ 78.531405][ T1435] dump_stack_lvl+0x140/0x1c0 [ 78.531438][ T1435] ? __cfi_dump_stack_lvl+0x10/0x10 [ 78.531472][ T1435] ? kernel_text_address+0xa9/0xe0 [ 78.531506][ T1435] dump_stack+0x19/0x20 [ 78.531537][ T1435] should_fail_ex+0x3d7/0x530 [ 78.531566][ T1435] should_fail+0xf/0x20 [ 78.531591][ T1435] should_fail_usercopy+0x1e/0x30 [ 78.531622][ T1435] _copy_from_user+0x20/0xa0 [ 78.531642][ T1435] ___sys_sendmsg+0x1c7/0x370 [ 78.531671][ T1435] ? __sys_sendmsg+0x2a0/0x2a0 [ 78.531700][ T1435] ? kstrtouint+0x78/0xf0 [ 78.531732][ T1435] __sys_sendmmsg+0x2b4/0x4e0 [ 78.531764][ T1435] ? __cfi___sys_sendmmsg+0x10/0x10 [ 78.531800][ T1435] ? __cfi_ksys_write+0x10/0x10 [ 78.531826][ T1435] __x64_sys_sendmmsg+0xa4/0xc0 [ 78.531856][ T1435] x64_sys_call+0xfec/0x2ee0 [ 78.531879][ T1435] do_syscall_64+0x57/0xf0 [ 78.531910][ T1435] ? clear_bhb_loop+0x50/0xa0 [ 78.531932][ T1435] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 78.531982][ T1435] RIP: 0033:0x7fbeeab9ce59 [ 78.531997][ T1435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.532047][ T1435] RSP: 002b:00007fbeeb9f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 78.532071][ T1435] RAX: ffffffffffffffda RBX: 00007fbeeae15fa0 RCX: 00007fbeeab9ce59 [ 78.532087][ T1435] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000005 [ 78.532101][ T1435] RBP: 00007fbeeb9f5090 R08: 0000000000000000 R09: 0000000000000000 [ 78.532121][ T1435] R10: 0000000004000800 R11: 0000000000000246 R12: 0000000000000001 [ 78.532132][ T1435] R13: 00007fbeeae16038 R14: 00007fbeeae15fa0 R15: 00007ffdb2adbab8 [ 78.532146][ T1435] [ 78.772728][ T31] usb 1-1: USB disconnect, device number 25 [ 78.795723][ T1442] rust_binder: Error while translating object. [ 78.795767][ T1442] rust_binder: Failure in copy_transaction_data: EPERM [ 78.799885][ T36] audit: type=1400 audit(1782224505.940:279): avc: denied { transfer } for pid=1440 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 78.802983][ T1442] rust_binder: 1440:1442 transaction to 1440 failed: EPERM [ 78.829286][ T36] audit: type=1400 audit(1782224505.980:280): avc: denied { wake_alarm } for pid=1440 comm="syz.0.331" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.918257][ T426] Bluetooth: hci0: Frame reassembly failed (-84) [ 78.940427][ T46] usbhid 5-1:0.0: can't add hid device: -71 [ 78.946711][ T46] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 78.955518][ T46] usb 5-1: USB disconnect, device number 21 [ 79.196068][ T31] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 79.316502][ T317] usb 4-1: USB disconnect, device number 35 [ 79.326129][ T31] usb 1-1: device descriptor read/64, error -71 [ 79.345123][ T36] audit: type=1400 audit(1782224506.490:281): avc: denied { bind } for pid=1452 comm="syz.3.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.365856][ T36] audit: type=1400 audit(1782224506.490:282): avc: denied { name_bind } for pid=1452 comm="syz.3.334" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 79.386974][ T36] audit: type=1400 audit(1782224506.490:283): avc: denied { node_bind } for pid=1452 comm="syz.3.334" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 79.464673][ T1455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.336'. [ 79.497709][ T1462] FAULT_INJECTION: forcing a failure. [ 79.497709][ T1462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.511206][ T1462] CPU: 0 UID: 0 PID: 1462 Comm: syz.4.337 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 79.511240][ T1462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 79.511254][ T1462] Call Trace: [ 79.511261][ T1462] [ 79.511270][ T1462] __dump_stack+0x21/0x30 [ 79.511306][ T1462] dump_stack_lvl+0x140/0x1c0 [ 79.511337][ T1462] ? __cfi_dump_stack_lvl+0x10/0x10 [ 79.511368][ T1462] ? check_stack_object+0x12b/0x150 [ 79.511403][ T1462] dump_stack+0x19/0x20 [ 79.511434][ T1462] should_fail_ex+0x3d7/0x530 [ 79.511474][ T1462] should_fail+0xf/0x20 [ 79.511499][ T1462] should_fail_usercopy+0x1e/0x30 [ 79.511529][ T1462] _copy_from_user+0x20/0xa0 [ 79.511550][ T1462] __copy_msghdr+0x3ec/0x5d0 [ 79.511578][ T1462] ___sys_sendmsg+0x214/0x370 [ 79.511606][ T1462] ? __sys_sendmsg+0x2a0/0x2a0 [ 79.511636][ T1462] ? kstrtouint+0x78/0xf0 [ 79.511673][ T1462] __sys_sendmmsg+0x2b4/0x4e0 [ 79.511695][ T1462] ? __cfi___sys_sendmmsg+0x10/0x10 [ 79.511720][ T1462] ? __cfi_ksys_write+0x10/0x10 [ 79.511756][ T1462] __x64_sys_sendmmsg+0xa4/0xc0 [ 79.511778][ T1462] x64_sys_call+0xfec/0x2ee0 [ 79.511794][ T1462] do_syscall_64+0x57/0xf0 [ 79.511816][ T1462] ? clear_bhb_loop+0x50/0xa0 [ 79.511833][ T1462] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.511858][ T1462] RIP: 0033:0x7f5063f9ce59 [ 79.511872][ T1462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.511886][ T1462] RSP: 002b:00007f5064e60028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 79.511906][ T1462] RAX: ffffffffffffffda RBX: 00007f5064215fa0 RCX: 00007f5063f9ce59 [ 79.511918][ T1462] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000005 [ 79.511928][ T1462] RBP: 00007f5064e60090 R08: 0000000000000000 R09: 0000000000000000 [ 79.511939][ T1462] R10: 0000000004000800 R11: 0000000000000246 R12: 0000000000000001 [ 79.511949][ T1462] R13: 00007f5064216038 R14: 00007f5064215fa0 R15: 00007ffeca2d9208 [ 79.511963][ T1462] [ 79.616667][ T31] usb 1-1: device descriptor read/64, error -71 [ 79.966011][ T31] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 80.116041][ T31] usb 1-1: device descriptor read/64, error -71 [ 80.347508][ T36] audit: type=1400 audit(1782224507.500:284): avc: denied { nlmsg_read } for pid=1485 comm="syz.3.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.368263][ T31] usb 1-1: device descriptor read/64, error -71 [ 80.486152][ T31] usb usb1-port1: attempt power cycle [ 80.545180][ T36] audit: type=1400 audit(1782224507.690:285): avc: denied { accept } for pid=1497 comm="syz.4.351" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.585246][ T36] audit: type=1400 audit(1782224507.730:286): avc: denied { read } for pid=1499 comm="syz.3.352" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.629831][ T1498] kvm: kvm [1497]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 80.638729][ T1498] kvm: kvm [1497]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 80.663053][ T36] audit: type=1400 audit(1782224507.810:287): avc: denied { mmap_zero } for pid=1497 comm="syz.4.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 80.780434][ T1511] incfs: Options parsing error. -22 [ 80.785736][ T1511] incfs: mount failed -22 [ 80.836021][ T31] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 80.857215][ T31] usb 1-1: device descriptor read/8, error -71 [ 80.966058][ T994] Bluetooth: hci0: command 0x1003 tx timeout [ 80.972151][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 80.987032][ T31] usb 1-1: device descriptor read/8, error -71 [ 81.230614][ T1525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.359'. [ 81.246028][ T31] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 81.267154][ T31] usb 1-1: device descriptor read/8, error -71 [ 81.288426][ T36] audit: type=1400 audit(1782224508.440:288): avc: denied { ioctl } for pid=1526 comm="syz.1.360" path="/dev/usbmon0" dev="devtmpfs" ino=87 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 81.322609][ T1529] FAULT_INJECTION: forcing a failure. [ 81.322609][ T1529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.335915][ T1529] CPU: 1 UID: 0 PID: 1529 Comm: syz.4.361 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 81.335975][ T1529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 81.335989][ T1529] Call Trace: [ 81.335997][ T1529] [ 81.336006][ T1529] __dump_stack+0x21/0x30 [ 81.336042][ T1529] dump_stack_lvl+0x140/0x1c0 [ 81.336070][ T1529] ? __cfi_dump_stack_lvl+0x10/0x10 [ 81.336101][ T1529] dump_stack+0x19/0x20 [ 81.336127][ T1529] should_fail_ex+0x3d7/0x530 [ 81.336153][ T1529] should_fail+0xf/0x20 [ 81.336176][ T1529] should_fail_usercopy+0x1e/0x30 [ 81.336203][ T1529] _copy_from_iter+0x1a9/0x1510 [ 81.336233][ T1529] ? __virt_addr_valid+0x2a6/0x380 [ 81.336258][ T1529] ? __cfi__copy_from_iter+0x10/0x10 [ 81.336286][ T1529] ? __check_object_size+0x527/0x830 [ 81.336307][ T1529] ? __cfi___check_object_size+0x10/0x10 [ 81.336343][ T1529] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 81.336370][ T1529] skb_copy_datagram_from_iter+0x100/0x700 [ 81.336397][ T1529] packet_sendmsg+0x3d18/0x5740 [ 81.336423][ T1529] ? __asan_memcpy+0x5a/0x80 [ 81.336459][ T1529] ? avc_has_perm+0x155/0x240 [ 81.336484][ T1529] ? selinux_socket_sendmsg+0x281/0x380 [ 81.336510][ T1529] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 81.336540][ T1529] ? __cfi_packet_sendmsg+0x10/0x10 [ 81.336568][ T1529] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 81.336591][ T1529] ? security_socket_sendmsg+0x3d/0x100 [ 81.336617][ T1529] ? __cfi_packet_sendmsg+0x10/0x10 [ 81.336643][ T1529] ____sys_sendmsg+0x9e1/0xa30 [ 81.336670][ T1529] ? __import_iovec+0x5ad/0x7c0 [ 81.336689][ T1529] ? __sys_sendmsg_sock+0x50/0x50 [ 81.336716][ T1529] ? import_iovec+0x80/0xb0 [ 81.336735][ T1529] ___sys_sendmsg+0x2a6/0x370 [ 81.336761][ T1529] ? __sys_sendmsg+0x2a0/0x2a0 [ 81.336786][ T1529] ? kstrtouint+0x78/0xf0 [ 81.336816][ T1529] __sys_sendmmsg+0x2b4/0x4e0 [ 81.336844][ T1529] ? __cfi___sys_sendmmsg+0x10/0x10 [ 81.336874][ T1529] ? __cfi_ksys_write+0x10/0x10 [ 81.336900][ T1529] __x64_sys_sendmmsg+0xa4/0xc0 [ 81.336926][ T1529] x64_sys_call+0xfec/0x2ee0 [ 81.336945][ T1529] do_syscall_64+0x57/0xf0 [ 81.336972][ T1529] ? clear_bhb_loop+0x50/0xa0 [ 81.336992][ T1529] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 81.337023][ T1529] RIP: 0033:0x7f5063f9ce59 [ 81.337041][ T1529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.337058][ T1529] RSP: 002b:00007f5064e60028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 81.337078][ T1529] RAX: ffffffffffffffda RBX: 00007f5064215fa0 RCX: 00007f5063f9ce59 [ 81.337093][ T1529] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000005 [ 81.337107][ T1529] RBP: 00007f5064e60090 R08: 0000000000000000 R09: 0000000000000000 [ 81.337120][ T1529] R10: 0000000004000800 R11: 0000000000000246 R12: 0000000000000001 [ 81.337133][ T1529] R13: 00007f5064216038 R14: 00007f5064215fa0 R15: 00007ffeca2d9208 [ 81.337150][ T1529] [ 81.647090][ T31] usb 1-1: device descriptor read/8, error -71 [ 81.683452][ T1538] netlink: 56 bytes leftover after parsing attributes in process `syz.4.364'. [ 81.694146][ T1538] ªªªªªª: renamed from vlan0 (while UP) [ 81.762607][ T1542] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 81.766361][ T31] usb usb1-port1: unable to enumerate USB device [ 81.882164][ T1544] x_tables: unsorted underflow at hook 3 [ 82.006011][ T317] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 82.157601][ T317] usb 5-1: not running at top speed; connect to a high speed hub [ 82.166512][ T317] usb 5-1: config 6 has an invalid interface number: 77 but max is 2 [ 82.174627][ T317] usb 5-1: config 6 has an invalid interface number: 137 but max is 2 [ 82.182923][ T317] usb 5-1: config 6 has an invalid interface number: 232 but max is 2 [ 82.191221][ T317] usb 5-1: config 6 has an invalid interface number: 216 but max is 2 [ 82.199562][ T317] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 82.214955][ T317] usb 5-1: config 6 has 4 interfaces, different from the descriptor's value: 3 [ 82.226842][ T317] usb 5-1: config 6 has no interface number 0 [ 82.233035][ T317] usb 5-1: config 6 has no interface number 1 [ 82.239276][ T317] usb 5-1: config 6 has no interface number 2 [ 82.249335][ T317] usb 5-1: config 6 has no interface number 3 [ 82.255495][ T317] usb 5-1: config 6 interface 137 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 82.271340][ T10] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 82.279089][ T317] usb 5-1: config 6 interface 137 altsetting 9 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 82.290259][ T317] usb 5-1: config 6 interface 137 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 82.301286][ T317] usb 5-1: config 6 interface 137 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 82.312432][ T317] usb 5-1: config 6 interface 137 altsetting 9 endpoint 0x4 has invalid maxpacket 1088, setting to 64 [ 82.323519][ T317] usb 5-1: config 6 interface 137 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 82.340144][ T317] usb 5-1: config 6 interface 137 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 82.354962][ T317] usb 5-1: config 6 interface 137 altsetting 9 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 82.366025][ T317] usb 5-1: config 6 interface 137 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 82.376992][ T317] usb 5-1: config 6 interface 137 altsetting 9 has 12 endpoint descriptors, different from the interface descriptor's value: 15 [ 82.390320][ T317] usb 5-1: too many endpoints for config 6 interface 232 altsetting 49: 115, using maximum allowed: 30 [ 82.401507][ T317] usb 5-1: config 6 interface 232 altsetting 49 endpoint 0x8 has invalid maxpacket 544, setting to 64 [ 82.422730][ T317] usb 5-1: config 6 interface 232 altsetting 49 has 2 endpoint descriptors, different from the interface descriptor's value: 115 [ 82.452359][ T317] usb 5-1: config 6 interface 216 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 82.476078][ T317] usb 5-1: config 6 interface 216 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 82.486932][ T317] usb 5-1: config 6 interface 77 has no altsetting 0 [ 82.493771][ T317] usb 5-1: config 6 interface 137 has no altsetting 0 [ 82.500840][ T10] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 82.509502][ T10] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 82.519960][ T317] usb 5-1: config 6 interface 232 has no altsetting 0 [ 82.526919][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 82.535907][ T10] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 82.547768][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 82.559815][ T317] usb 5-1: New USB device found, idVendor=1b3d, idProduct=013a, bcdDevice=6b.7f [ 82.569142][ T317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.577413][ T317] usb 5-1: Product: syz [ 82.581676][ T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 82.590962][ T317] usb 5-1: Manufacturer: syz [ 82.595596][ T317] usb 5-1: SerialNumber: syz [ 82.600414][ T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 82.609737][ T10] usb 1-1: Product: syz [ 82.614140][ T10] usb 1-1: Manufacturer: syz [ 82.621295][ T1551] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 82.629503][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 82.634781][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 82.641712][ T10] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 82.647848][ T10] cdc_wdm 1-1:1.0: Unknown control protocol [ 82.654912][ T1561] FAULT_INJECTION: forcing a failure. [ 82.654912][ T1561] name failslab, interval 1, probability 0, space 0, times 0 [ 82.667600][ T1561] CPU: 1 UID: 0 PID: 1561 Comm: syz.1.371 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 82.667633][ T1561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 82.667646][ T1561] Call Trace: [ 82.667654][ T1561] [ 82.667662][ T1561] __dump_stack+0x21/0x30 [ 82.667708][ T1561] dump_stack_lvl+0x140/0x1c0 [ 82.667741][ T1561] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.667776][ T1561] dump_stack+0x19/0x20 [ 82.667808][ T1561] should_fail_ex+0x3d7/0x530 [ 82.667837][ T1561] should_failslab+0xac/0x100 [ 82.667865][ T1561] kmem_cache_alloc_noprof+0x42/0x410 [ 82.667890][ T1561] ? skb_clone+0x229/0x460 [ 82.667919][ T1561] skb_clone+0x229/0x460 [ 82.667946][ T1561] dev_queue_xmit_nit+0x1ad/0xae0 [ 82.667982][ T1561] dev_hard_start_xmit+0x187/0x760 [ 82.668008][ T1561] __dev_queue_xmit+0x1927/0x3680 [ 82.668033][ T1561] ? __dev_queue_xmit+0x267/0x3680 [ 82.668058][ T1561] ? __kasan_check_write+0x18/0x20 [ 82.668083][ T1561] ? arch_stack_walk+0x10a/0x170 [ 82.668107][ T1561] ? __cfi___dev_queue_xmit+0x10/0x10 [ 82.668131][ T1561] ? __kasan_check_write+0x18/0x20 [ 82.668154][ T1561] ? _copy_from_iter+0x218/0x1510 [ 82.668189][ T1561] ? __virt_addr_valid+0x2a6/0x380 [ 82.668218][ T1561] ? packet_parse_headers+0x7de/0xaf0 [ 82.668251][ T1561] ? packet_parse_headers+0x871/0xaf0 [ 82.668286][ T1561] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 82.668317][ T1561] ? skb_setup_tx_timestamp+0x210/0x210 [ 82.668350][ T1561] packet_xmit+0x75/0x380 [ 82.668382][ T1561] packet_sendmsg+0x4485/0x5740 [ 82.668412][ T1561] ? __asan_memcpy+0x5a/0x80 [ 82.668438][ T1561] ? avc_has_perm+0x155/0x240 [ 82.668467][ T1561] ? selinux_socket_sendmsg+0x281/0x380 [ 82.668495][ T1561] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 82.668526][ T1561] ? __cfi_packet_sendmsg+0x10/0x10 [ 82.668559][ T1561] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 82.668586][ T1561] ? security_socket_sendmsg+0x3d/0x100 [ 82.668616][ T1561] ? __cfi_packet_sendmsg+0x10/0x10 [ 82.668646][ T1561] ____sys_sendmsg+0x9e1/0xa30 [ 82.668686][ T1561] ? __import_iovec+0x5ad/0x7c0 [ 82.668709][ T1561] ? __sys_sendmsg_sock+0x50/0x50 [ 82.668748][ T1561] ? import_iovec+0x80/0xb0 [ 82.668770][ T1561] ___sys_sendmsg+0x2a6/0x370 [ 82.668797][ T1561] ? __sys_sendmsg+0x2a0/0x2a0 [ 82.668825][ T1561] ? kstrtouint+0x78/0xf0 [ 82.668856][ T1561] __sys_sendmmsg+0x2b4/0x4e0 [ 82.668884][ T1561] ? __cfi___sys_sendmmsg+0x10/0x10 [ 82.668918][ T1561] ? __cfi_ksys_write+0x10/0x10 [ 82.668941][ T1561] __x64_sys_sendmmsg+0xa4/0xc0 [ 82.668972][ T1561] x64_sys_call+0xfec/0x2ee0 [ 82.668992][ T1561] do_syscall_64+0x57/0xf0 [ 82.669022][ T1561] ? clear_bhb_loop+0x50/0xa0 [ 82.669045][ T1561] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.669078][ T1561] RIP: 0033:0x7fbeeab9ce59 [ 82.669098][ T1561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.669117][ T1561] RSP: 002b:00007fbeeb9f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 82.669141][ T1561] RAX: ffffffffffffffda RBX: 00007fbeeae15fa0 RCX: 00007fbeeab9ce59 [ 82.669158][ T1561] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000005 [ 82.669171][ T1561] RBP: 00007fbeeb9f5090 R08: 0000000000000000 R09: 0000000000000000 [ 82.669186][ T1561] R10: 0000000004000800 R11: 0000000000000246 R12: 0000000000000001 [ 82.669199][ T1561] R13: 00007fbeeae16038 R14: 00007fbeeae15fa0 R15: 00007ffdb2adbab8 [ 82.669229][ T1561] [ 82.811986][ T1542] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 82.814149][ T46] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 82.835100][ T10] usb 1-1: USB disconnect, device number 30 [ 82.856908][ T1542] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 83.053599][ T317] ftdi_sio 5-1:6.77: FTDI USB Serial Device converter detected [ 83.066431][ T317] ftdi_sio ttyUSB0: unknown device type: 0x6b7f [ 83.083511][ T317] ftdi_sio 5-1:6.137: FTDI USB Serial Device converter detected [ 83.091904][ T317] ftdi_sio ttyUSB1: unknown device type: 0x6b7f [ 83.101710][ T317] ftdi_sio 5-1:6.232: FTDI USB Serial Device converter detected [ 83.112723][ T317] ftdi_sio ttyUSB2: unknown device type: 0x6b7f [ 83.122250][ T317] ftdi_sio 5-1:6.216: FTDI USB Serial Device converter detected [ 83.130733][ T317] ftdi_sio ttyUSB3: unknown device type: 0x6b7f [ 83.137891][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.151851][ T46] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 83.161307][ T317] usb 5-1: USB disconnect, device number 22 [ 83.173010][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.186723][ T317] ftdi_sio 5-1:6.77: device disconnected [ 83.192918][ T46] usb 4-1: config 0 descriptor?? [ 83.202055][ T317] ftdi_sio 5-1:6.137: device disconnected [ 83.209810][ T317] ftdi_sio 5-1:6.232: device disconnected [ 83.218506][ T317] ftdi_sio 5-1:6.216: device disconnected [ 83.403408][ T46] usbhid 4-1:0.0: can't add hid device: -71 [ 83.409519][ T46] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 83.418390][ T46] usb 4-1: USB disconnect, device number 36 [ 83.488489][ T1572] fuse: Bad value for 'group_id' [ 83.493464][ T1572] fuse: Bad value for 'group_id' [ 83.530112][ T1573] rust_binder: 1569:1573 transaction to 0 failed: ENOENT [ 83.530250][ T1573] rust_binder: Write failure EINVAL in pid:272 [ 83.717829][ T463] bridge_slave_1: left allmulticast mode [ 83.729858][ T463] bridge_slave_1: left promiscuous mode [ 83.735588][ T463] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.756280][ T463] bridge_slave_0: left allmulticast mode [ 83.762138][ T463] bridge_slave_0: left promiscuous mode [ 83.768208][ T463] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.846044][ T317] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 83.887580][ T463] tipc: Left network mode [ 83.899344][ T463] veth1_macvtap: left promiscuous mode [ 83.904909][ T463] veth0_vlan: left promiscuous mode [ 84.002326][ T1577] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.007960][ T317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.009891][ T1577] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.021017][ T317] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 84.029887][ T1577] bridge_slave_0: entered allmulticast mode [ 84.043901][ T1577] bridge_slave_0: entered promiscuous mode [ 84.050754][ T1577] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.054284][ T317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.059224][ T1577] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.073332][ T1577] bridge_slave_1: entered allmulticast mode [ 84.078220][ T317] usb 4-1: config 0 descriptor?? [ 84.081236][ T1577] bridge_slave_1: entered promiscuous mode [ 84.141178][ T1577] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.148289][ T1577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.155593][ T1577] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.162677][ T1577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.189113][ T421] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.196646][ T421] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.207310][ T1022] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.214419][ T1022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.227159][ T1022] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.234266][ T1022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.262468][ T1577] veth0_vlan: entered promiscuous mode [ 84.275366][ T1577] veth1_macvtap: entered promiscuous mode [ 84.299329][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 84.299348][ T36] audit: type=1400 audit(1782224511.450:297): avc: denied { mount } for pid=1577 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.387734][ T1591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.384'. [ 84.564232][ T1608] netlink: 55 bytes leftover after parsing attributes in process `syz.5.389'. [ 84.666091][ T312] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 84.817334][ T312] usb 2-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 84.828368][ T312] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 84.841463][ T312] usb 2-1: config 0 interface 0 has no altsetting 0 [ 84.848120][ T312] usb 2-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 84.857296][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.866054][ T361] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 84.867472][ T312] usb 2-1: config 0 descriptor?? [ 84.896708][ T1559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.905185][ T317] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 84.913212][ T1559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.913953][ T317] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 85.026015][ T361] usb 6-1: Using ep0 maxpacket: 32 [ 85.032557][ T361] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 8 [ 85.042295][ T361] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 54, changing to 9 [ 85.055066][ T361] usb 6-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 85.064468][ T361] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.073076][ T361] usb 6-1: Product: syz [ 85.077330][ T361] usb 6-1: Manufacturer: syz [ 85.083058][ T361] usb 6-1: SerialNumber: syz [ 85.090987][ T1610] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 85.154481][ T36] audit: type=1400 audit(1782224512.300:298): avc: denied { open } for pid=1613 comm="syz.0.392" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=14775 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 85.157085][ T1614] 9pnet_fd: Insufficient options for proto=fd [ 85.215658][ T1559] capability: warning: `syz.3.374' uses 32-bit capabilities (legacy support in use) [ 85.233844][ T317] usb 4-1: USB disconnect, device number 37 [ 85.234002][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 85.288365][ T312] wacom 0003:056A:0015.0016: ignoring exceeding usage max [ 85.298355][ T312] wacom 0003:056A:0015.0016: Unknown device_type for 'HID 056a:0015'. Assuming pen. [ 85.308744][ T312] wacom 0003:056A:0015.0016: hidraw0: USB HID v0.0c Device [HID 056a:0015] on usb-dummy_hcd.1-1/input0 [ 85.320701][ T312] input: Wacom Graphire4 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0015.0016/input/input13 [ 85.490894][ T312] usb 2-1: USB disconnect, device number 32 [ 85.506602][ T361] usb 6-1: MIDIStreaming interface descriptor not found [ 85.513667][ T361] usb 6-1: too many endpoints [ 85.523587][ T361] usb 6-1: USB disconnect, device number 2 [ 85.566049][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 85.716052][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 85.722306][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 85.732779][ T10] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 85.741939][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.750083][ T10] usb 1-1: Product: syz [ 85.754266][ T10] usb 1-1: Manufacturer: syz [ 85.758947][ T10] usb 1-1: SerialNumber: syz [ 85.764581][ T10] usb 1-1: config 0 descriptor?? [ 85.772574][ T10] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 85.780827][ T10] usb 1-1: Detected FT232R [ 85.793546][ T36] audit: type=1400 audit(1782224512.940:299): avc: denied { setopt } for pid=1620 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.814819][ T36] audit: type=1400 audit(1782224512.970:300): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 85.980908][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 85.988077][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 86.000675][ T10] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 86.016028][ T10] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 86.033793][ T10] usb 1-1: USB disconnect, device number 31 [ 86.043041][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 86.056092][ T10] ftdi_sio 1-1:0.0: device disconnected [ 86.072289][ T1629] 9pnet_fd: Insufficient options for proto=fd [ 86.074724][ T36] audit: type=1400 audit(1782224513.220:301): avc: denied { read } for pid=1628 comm="syz.1.399" dev="sockfs" ino=13201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.086177][ T1429] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 86.257165][ T1429] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.268187][ T312] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 86.268233][ T1429] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.286422][ T1429] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 86.295602][ T1429] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.304723][ T1429] usb 4-1: config 0 descriptor?? [ 86.346093][ T46] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 86.426076][ T312] usb 6-1: device descriptor read/64, error -71 [ 86.496023][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 86.502170][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.515185][ T46] usb 2-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00 [ 86.524481][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.534085][ T46] usb 2-1: config 0 descriptor?? [ 86.676055][ T312] usb 6-1: device descriptor read/64, error -71 [ 86.734693][ T1429] steelseries 0003:1038:12B6.0017: unknown main item tag 0x1 [ 86.742272][ T1429] steelseries 0003:1038:12B6.0017: item fetching failed at offset 6/7 [ 86.750885][ T1429] steelseries 0003:1038:12B6.0017: probe with driver steelseries failed with error -22 [ 86.786023][ T10] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 86.916033][ T312] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 86.937233][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 86.948384][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.958335][ T10] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 86.967481][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.972036][ T46] wacom 0003:056A:00B0.0018: unknown main item tag 0x7 [ 86.978295][ T10] usb 1-1: config 0 descriptor?? [ 86.985866][ T46] wacom 0003:056A:00B0.0018: unknown main item tag 0x0 [ 86.994918][ T46] wacom 0003:056A:00B0.0018: unknown main item tag 0x1 [ 87.002064][ T46] wacom 0003:056A:00B0.0018: unknown main item tag 0xd [ 87.009400][ T46] wacom 0003:056A:00B0.0018: Unknown device_type for 'HID 056a:00b0'. Assuming pen. [ 87.019825][ T46] wacom 0003:056A:00B0.0018: hidraw0: USB HID v0.77 Device [HID 056a:00b0] on usb-dummy_hcd.1-1/input0 [ 87.031925][ T46] input: Wacom Intuos3 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B0.0018/input/input16 [ 87.046028][ T312] usb 6-1: device descriptor read/64, error -71 [ 87.187873][ T361] usb 2-1: USB disconnect, device number 33 [ 87.286222][ T312] usb 6-1: device descriptor read/64, error -71 [ 87.299791][ T1633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.308386][ T1633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.323542][ T46] usb 4-1: USB disconnect, device number 38 [ 87.359462][ T36] audit: type=1400 audit(1782224514.510:302): avc: denied { create } for pid=1638 comm="syz.3.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 87.392826][ T1022] Bluetooth: hci0: Frame reassembly failed (-84) [ 87.399345][ T312] usb usb6-port1: attempt power cycle [ 87.413359][ T1631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.422538][ T1631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.431448][ T10] hid (null): unknown global tag 0xc [ 87.436852][ T10] hid (null): report_id 0 is invalid [ 87.443672][ T10] itetech 0003:06CB:73F6.0019: unknown global tag 0xc [ 87.450598][ T10] itetech 0003:06CB:73F6.0019: item 0 2 1 12 parsing failed [ 87.458232][ T10] itetech 0003:06CB:73F6.0019: probe with driver itetech failed with error -22 [ 87.632906][ T46] usb 1-1: USB disconnect, device number 32 [ 87.711343][ T36] audit: type=1400 audit(1782224514.860:303): avc: denied { append } for pid=1645 comm="syz.1.404" name="pfkey" dev="proc" ino=4026532362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 87.734435][ T36] audit: type=1400 audit(1782224514.860:304): avc: denied { associate } for pid=1645 comm="syz.1.404" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 87.755318][ T312] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 87.777111][ T312] usb 6-1: device descriptor read/8, error -71 [ 87.907157][ T312] usb 6-1: device descriptor read/8, error -71 [ 88.006197][ T31] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 88.136028][ T31] usb 2-1: device descriptor read/64, error -71 [ 88.146138][ T312] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 88.168996][ T312] usb 6-1: device descriptor read/8, error -71 [ 88.297047][ T312] usb 6-1: device descriptor read/8, error -71 [ 88.329798][ T36] audit: type=1400 audit(1782224515.480:305): avc: denied { mounton } for pid=1662 comm="syz.0.409" path="/97/file0" dev="tmpfs" ino=526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 88.329925][ T1663] fuse: Unknown parameter 'euid<00000000000000000000-fs2-}bbc-5283-7a57-éyR\118d' [ 88.363414][ T36] audit: type=1400 audit(1782224515.520:306): avc: denied { write } for pid=1662 comm="syz.0.409" name="fib_triestat" dev="proc" ino=4026532546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 88.386786][ T31] usb 2-1: device descriptor read/64, error -71 [ 88.406240][ T312] usb usb6-port1: unable to enumerate USB device [ 88.626043][ T31] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 88.666016][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 88.756030][ T31] usb 2-1: device descriptor read/64, error -71 [ 88.816000][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 88.822839][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 88.832645][ T10] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 88.841787][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.849833][ T10] usb 1-1: Product: syz [ 88.854088][ T10] usb 1-1: Manufacturer: syz [ 88.858734][ T10] usb 1-1: SerialNumber: syz [ 88.996048][ T31] usb 2-1: device descriptor read/64, error -71 [ 89.106093][ T31] usb usb2-port1: attempt power cycle [ 89.271724][ T10] usb 1-1: unit 0 not found! [ 89.446163][ T994] Bluetooth: hci0: command 0x1003 tx timeout [ 89.446298][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 89.452668][ T31] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 89.466692][ T361] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 89.477504][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 89.492335][ T10] usb 1-1: unit 0 not found! [ 89.498206][ T31] usb 2-1: device descriptor read/8, error -71 [ 89.504409][ T10] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 89.511679][ T10] usb 1-1: unit 0 not found! [ 89.523851][ T10] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 89.534445][ T10] usb 1-1: USB disconnect, device number 33 [ 89.553853][ T372] udevd[372]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 89.626053][ T361] usb 6-1: Using ep0 maxpacket: 8 [ 89.632535][ T361] usb 6-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 89.645862][ T361] usb 6-1: config 0 interface 0 has no altsetting 0 [ 89.647558][ T31] usb 2-1: device descriptor read/8, error -71 [ 89.653172][ T361] usb 6-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 89.668126][ T361] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.684657][ T361] usb 6-1: config 0 descriptor?? [ 89.896025][ T31] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 89.916107][ T766] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 89.924757][ T31] usb 2-1: device descriptor read/8, error -71 [ 90.057169][ T31] usb 2-1: device descriptor read/8, error -71 [ 90.077232][ T766] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 90.085476][ T766] usb 4-1: config 0 has no interface number 0 [ 90.092857][ T361] cherry 0003:046A:0023.001A: unknown main item tag 0x7 [ 90.094838][ T766] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 90.104304][ T361] cherry 0003:046A:0023.001A: item fetching failed at offset 12/41 [ 90.110829][ T766] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.117757][ T361] cherry 0003:046A:0023.001A: probe with driver cherry failed with error -22 [ 90.125324][ T766] usb 4-1: Product: syz [ 90.138129][ T766] usb 4-1: Manufacturer: syz [ 90.142797][ T766] usb 4-1: SerialNumber: syz [ 90.148548][ T766] usb 4-1: config 0 descriptor?? [ 90.166114][ T31] usb usb2-port1: unable to enumerate USB device [ 90.306874][ T31] usb 6-1: USB disconnect, device number 7 [ 90.820258][ T1692] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 90.820327][ T1692] rust_binder: 1691:1692 transaction to 1691 failed: BR_DEAD_REPLY [ 90.859479][ T1698] syzkaller1: entered promiscuous mode [ 90.873023][ T1698] syzkaller1: entered allmulticast mode [ 90.957642][ T766] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 90.969545][ T766] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 90.980340][ T766] asix 4-1:0.251: probe with driver asix failed with error -71 [ 90.990830][ T766] usb 4-1: USB disconnect, device number 39 [ 91.076008][ T361] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 91.186058][ T10] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 91.227072][ T361] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.238047][ T361] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 91.247197][ T361] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.255771][ T361] usb 6-1: config 0 descriptor?? [ 91.336003][ T46] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 91.338208][ T10] usb 2-1: config index 0 descriptor too short (expected 65088, got 120) [ 91.352260][ T10] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 91.362426][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 91.371410][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 91.385734][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.394968][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.403074][ T10] usb 2-1: Product: syz [ 91.407436][ T10] usb 2-1: Manufacturer: syz [ 91.412049][ T10] usb 2-1: SerialNumber: syz [ 91.419519][ T10] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 91.426412][ T10] cdc_ncm 2-1:1.0: bind() failure [ 91.465804][ T361] usbhid 6-1:0.0: can't add hid device: -71 [ 91.472325][ T361] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 91.483535][ T361] usb 6-1: USB disconnect, device number 8 [ 91.487704][ T46] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 91.506180][ T46] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 91.519529][ T46] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 91.530468][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.538539][ T46] usb 1-1: Product: syz [ 91.542730][ T46] usb 1-1: Manufacturer: syz [ 91.547489][ T46] usb 1-1: SerialNumber: syz [ 91.621687][ T1694] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 91.630673][ T1694] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 91.641701][ T435] Bluetooth: hci0: Frame reassembly failed (-84) [ 91.757162][ T46] usb 1-1: Can't get UAC3 power state for id 10 [ 91.764374][ T46] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 91.773950][ T46] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 91.795084][ T46] usb 1-1: USB disconnect, device number 35 [ 91.807889][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 91.906040][ T361] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 92.057874][ T361] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.068868][ T361] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 92.077943][ T361] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.086604][ T361] usb 6-1: config 0 descriptor?? [ 92.885999][ T10] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 92.896334][ T361] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 92.904145][ T361] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input19 [ 93.047338][ T10] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 93.066008][ T10] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 93.086025][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 93.106783][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.116067][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 93.124624][ T10] usb 4-1: SerialNumber: syz [ 93.199091][ T1696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.208361][ T1696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.218516][ T361] usb 6-1: USB disconnect, device number 9 [ 93.224409][ C0] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 93.333051][ T1730] can0: slcan on ptm2. [ 93.339531][ T10] usb 4-1: USB disconnect, device number 40 [ 93.366608][ T1729] can0 (unregistered): slcan off ptm2. [ 93.379137][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 93.379155][ T36] audit: type=1400 audit(1782224520.530:310): avc: denied { create } for pid=1745 comm="syz.0.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 93.410850][ T36] audit: type=1400 audit(1782224520.560:311): avc: denied { write } for pid=1745 comm="syz.0.442" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 93.448727][ T1751] syzkaller1: entered promiscuous mode [ 93.454344][ T1751] syzkaller1: entered allmulticast mode [ 93.686197][ T994] Bluetooth: hci0: command 0x1003 tx timeout [ 93.686354][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 93.701067][ T31] usb 2-1: USB disconnect, device number 38 [ 93.704409][ T1790] FAULT_INJECTION: forcing a failure. [ 93.704409][ T1790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.721489][ T1790] CPU: 0 UID: 0 PID: 1790 Comm: syz.0.449 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 93.721522][ T1790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 93.721536][ T1790] Call Trace: [ 93.721543][ T1790] [ 93.721552][ T1790] __dump_stack+0x21/0x30 [ 93.721589][ T1790] dump_stack_lvl+0x140/0x1c0 [ 93.721620][ T1790] ? __cfi_dump_stack_lvl+0x10/0x10 [ 93.721662][ T1790] ? _parse_integer+0x2e/0x40 [ 93.721688][ T1790] ? kstrtoull+0x13b/0x1e0 [ 93.721713][ T1790] dump_stack+0x19/0x20 [ 93.721742][ T1790] should_fail_ex+0x3d7/0x530 [ 93.721770][ T1790] should_fail+0xf/0x20 [ 93.721797][ T1790] should_fail_usercopy+0x1e/0x30 [ 93.721826][ T1790] _copy_from_user+0x20/0xa0 [ 93.721846][ T1790] ___sys_sendmsg+0x1c7/0x370 [ 93.721877][ T1790] ? __sys_sendmsg+0x2a0/0x2a0 [ 93.721906][ T1790] ? proc_fail_nth_write+0x184/0x220 [ 93.721938][ T1790] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 93.721979][ T1790] __x64_sys_sendmsg+0x1fb/0x2d0 [ 93.722008][ T1790] ? fput+0x1a4/0x240 [ 93.722036][ T1790] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 93.722066][ T1790] ? ksys_write+0x1f3/0x260 [ 93.722091][ T1790] ? __kasan_check_read+0x15/0x20 [ 93.722115][ T1790] x64_sys_call+0x2a4c/0x2ee0 [ 93.722136][ T1790] do_syscall_64+0x57/0xf0 [ 93.722167][ T1790] ? clear_bhb_loop+0x50/0xa0 [ 93.722190][ T1790] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 93.722223][ T1790] RIP: 0033:0x7f98aa79ce59 [ 93.722242][ T1790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.722261][ T1790] RSP: 002b:00007f98ab5e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.722286][ T1790] RAX: ffffffffffffffda RBX: 00007f98aaa15fa0 RCX: 00007f98aa79ce59 [ 93.722303][ T1790] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 93.722317][ T1790] RBP: 00007f98ab5e0090 R08: 0000000000000000 R09: 0000000000000000 [ 93.722332][ T1790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.722345][ T1790] R13: 00007f98aaa16038 R14: 00007f98aaa15fa0 R15: 00007ffcb329c2e8 [ 93.722365][ T1790] [ 94.039251][ T1810] FAULT_INJECTION: forcing a failure. [ 94.039251][ T1810] name failslab, interval 1, probability 0, space 0, times 0 [ 94.052032][ T1810] CPU: 0 UID: 0 PID: 1810 Comm: syz.5.458 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 94.052066][ T1810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 94.052080][ T1810] Call Trace: [ 94.052087][ T1810] [ 94.052096][ T1810] __dump_stack+0x21/0x30 [ 94.052132][ T1810] dump_stack_lvl+0x140/0x1c0 [ 94.052164][ T1810] ? __cfi_dump_stack_lvl+0x10/0x10 [ 94.052197][ T1810] dump_stack+0x19/0x20 [ 94.052227][ T1810] should_fail_ex+0x3d7/0x530 [ 94.052256][ T1810] should_failslab+0xac/0x100 [ 94.052283][ T1810] kmem_cache_alloc_node_noprof+0x45/0x420 [ 94.052307][ T1810] ? selinux_socket_getpeersec_dgram+0x25b/0x370 [ 94.052338][ T1810] ? __alloc_skb+0x108/0x370 [ 94.052373][ T1810] __alloc_skb+0x108/0x370 [ 94.052395][ T1810] netlink_alloc_large_skb+0xf7/0x1b0 [ 94.052438][ T1810] netlink_sendmsg+0x594/0xb10 [ 94.052469][ T1810] ? __cfi_netlink_sendmsg+0x10/0x10 [ 94.052499][ T1810] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 94.052524][ T1810] ? security_socket_sendmsg+0x3d/0x100 [ 94.052553][ T1810] ? __cfi_netlink_sendmsg+0x10/0x10 [ 94.052582][ T1810] ____sys_sendmsg+0x9e1/0xa30 [ 94.052612][ T1810] ? __import_iovec+0x5ad/0x7c0 [ 94.052642][ T1810] ? __sys_sendmsg_sock+0x50/0x50 [ 94.052672][ T1810] ? import_iovec+0x80/0xb0 [ 94.052694][ T1810] ___sys_sendmsg+0x2a6/0x370 [ 94.052723][ T1810] ? __sys_sendmsg+0x2a0/0x2a0 [ 94.052751][ T1810] ? proc_fail_nth_write+0x184/0x220 [ 94.052784][ T1810] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 94.052824][ T1810] __x64_sys_sendmsg+0x1fb/0x2d0 [ 94.052852][ T1810] ? fput+0x1a4/0x240 [ 94.052881][ T1810] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 94.052910][ T1810] ? ksys_write+0x1f3/0x260 [ 94.052935][ T1810] ? __kasan_check_read+0x15/0x20 [ 94.052959][ T1810] x64_sys_call+0x2a4c/0x2ee0 [ 94.052980][ T1810] do_syscall_64+0x57/0xf0 [ 94.053010][ T1810] ? clear_bhb_loop+0x50/0xa0 [ 94.053032][ T1810] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 94.053066][ T1810] RIP: 0033:0x7fa728d9ce59 [ 94.053083][ T1810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.053102][ T1810] RSP: 002b:00007fa729c36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.053126][ T1810] RAX: ffffffffffffffda RBX: 00007fa729015fa0 RCX: 00007fa728d9ce59 [ 94.053143][ T1810] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 94.053157][ T1810] RBP: 00007fa729c36090 R08: 0000000000000000 R09: 0000000000000000 [ 94.053171][ T1810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.053184][ T1810] R13: 00007fa729016038 R14: 00007fa729015fa0 R15: 00007fff2dfa5a08 [ 94.053202][ T1810] [ 94.086623][ T46] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 94.416000][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 94.437696][ T36] audit: type=1400 audit(1782224521.590:312): avc: denied { bind } for pid=1827 comm="syz.3.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.463102][ T36] audit: type=1400 audit(1782224521.590:313): avc: denied { name_bind } for pid=1827 comm="syz.3.466" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 94.484928][ T36] audit: type=1400 audit(1782224521.590:314): avc: denied { node_bind } for pid=1827 comm="syz.3.466" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 94.488343][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 94.519152][ T46] usb 1-1: unable to get BOS descriptor or descriptor too short [ 94.527789][ T46] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 94.537721][ T46] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 94.549602][ T46] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.561293][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.569890][ T46] usb 1-1: Product: syz [ 94.574109][ T46] usb 1-1: Manufacturer: syz [ 94.578959][ T46] usb 1-1: SerialNumber: syz [ 94.606013][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 94.612250][ T10] usb 6-1: config 3 has an invalid interface number: 45 but max is 0 [ 94.620477][ T10] usb 6-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 94.629240][ T10] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 94.639441][ T10] usb 6-1: config 3 has no interface number 0 [ 94.645552][ T10] usb 6-1: config 3 interface 45 altsetting 2 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 94.656564][ T10] usb 6-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.669550][ T10] usb 6-1: config 3 interface 45 has no altsetting 0 [ 94.678127][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 94.687272][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.695302][ T10] usb 6-1: Product: syz [ 94.699622][ T10] usb 6-1: Manufacturer: syz [ 94.704245][ T10] usb 6-1: SerialNumber: syz [ 94.785843][ T1792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.794584][ T1792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.803900][ T1834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.812765][ T317] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 94.816569][ T1834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.829565][ T46] cdc_ncm 1-1:1.0: bind() failure [ 94.835755][ T46] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 94.842710][ T46] cdc_ncm 1-1:1.1: bind() failure [ 94.849390][ T46] usb 1-1: USB disconnect, device number 36 [ 94.918388][ T10] usb 6-1: USB disconnect, device number 10 [ 94.927794][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:3.45/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 94.967631][ T317] usb 2-1: unable to get BOS descriptor or descriptor too short [ 94.976164][ T317] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.986403][ T317] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.997616][ T317] usb 2-1: string descriptor 0 read error: -22 [ 95.003963][ T317] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 95.013174][ T317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.026147][ T317] usb 2-1: selecting invalid altsetting 1 [ 95.032146][ T317] usb 2-1: unit 6 not found! [ 95.224330][ T317] usb 2-1: 2:0: cannot get min/max values for control 1 (id 2) [ 95.235528][ T317] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 95.243004][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 95.266024][ T46] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 95.417061][ T46] usb 1-1: config index 0 descriptor too short (expected 122, got 92) [ 95.425363][ T46] usb 1-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config [ 95.435863][ T46] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 95.445102][ T46] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 3330, setting to 64 [ 95.463150][ T46] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40 [ 95.472863][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.481176][ T46] usb 1-1: Product: syz [ 95.485492][ T46] usb 1-1: Manufacturer: syz [ 95.490274][ T434] Bluetooth: hci0: Frame reassembly failed (-84) [ 95.498839][ T46] usb 1-1: SerialNumber: syz [ 95.509063][ T1792] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 95.920603][ T46] usb 1-1: __uac_clock_find_source(): clock selector control is not readable, id 0 [ 95.930235][ T46] usb 1-1: __uac_clock_find_source(): clock selector control is not readable, id 0 [ 95.949274][ T46] usb 1-1: USB disconnect, device number 37 [ 96.297388][ T10] usb 2-1: USB disconnect, device number 39 [ 96.362128][ T36] audit: type=1400 audit(1782224523.510:315): avc: denied { map } for pid=1860 comm="syz.1.476" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 96.529688][ T1872] input: syz0 as /devices/virtual/input/input20 [ 96.554645][ T1875] FAULT_INJECTION: forcing a failure. [ 96.554645][ T1875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.567867][ T1875] CPU: 0 UID: 0 PID: 1875 Comm: syz.1.481 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 96.567904][ T1875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 96.567919][ T1875] Call Trace: [ 96.567926][ T1875] [ 96.567935][ T1875] __dump_stack+0x21/0x30 [ 96.567972][ T1875] dump_stack_lvl+0x140/0x1c0 [ 96.568003][ T1875] ? __cfi_dump_stack_lvl+0x10/0x10 [ 96.568037][ T1875] dump_stack+0x19/0x20 [ 96.568068][ T1875] should_fail_ex+0x3d7/0x530 [ 96.568097][ T1875] should_fail+0xf/0x20 [ 96.568127][ T1875] should_fail_usercopy+0x1e/0x30 [ 96.568149][ T1875] _copy_from_iter+0x1a9/0x1510 [ 96.568173][ T1875] ? kmalloc_reserve+0xcf/0x4f0 [ 96.568191][ T1875] ? __virt_addr_valid+0x2a6/0x380 [ 96.568212][ T1875] ? __cfi__copy_from_iter+0x10/0x10 [ 96.568235][ T1875] ? __check_object_size+0x527/0x830 [ 96.568252][ T1875] ? __cfi___check_object_size+0x10/0x10 [ 96.568269][ T1875] ? skb_put+0x112/0x1f0 [ 96.568286][ T1875] netlink_sendmsg+0x68e/0xb10 [ 96.568309][ T1875] ? __cfi_netlink_sendmsg+0x10/0x10 [ 96.568330][ T1875] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 96.568349][ T1875] ? security_socket_sendmsg+0x3d/0x100 [ 96.568370][ T1875] ? __cfi_netlink_sendmsg+0x10/0x10 [ 96.568391][ T1875] ____sys_sendmsg+0x9e1/0xa30 [ 96.568440][ T1875] ? __import_iovec+0x5ad/0x7c0 [ 96.568456][ T1875] ? __sys_sendmsg_sock+0x50/0x50 [ 96.568478][ T1875] ? import_iovec+0x80/0xb0 [ 96.568494][ T1875] ___sys_sendmsg+0x2a6/0x370 [ 96.568515][ T1875] ? __sys_sendmsg+0x2a0/0x2a0 [ 96.568536][ T1875] ? proc_fail_nth_write+0x184/0x220 [ 96.568560][ T1875] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 96.568589][ T1875] __x64_sys_sendmsg+0x1fb/0x2d0 [ 96.568610][ T1875] ? fput+0x1a4/0x240 [ 96.568630][ T1875] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 96.568651][ T1875] ? ksys_write+0x1f3/0x260 [ 96.568669][ T1875] ? __kasan_check_read+0x15/0x20 [ 96.568687][ T1875] x64_sys_call+0x2a4c/0x2ee0 [ 96.568702][ T1875] do_syscall_64+0x57/0xf0 [ 96.568725][ T1875] ? clear_bhb_loop+0x50/0xa0 [ 96.568742][ T1875] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 96.568768][ T1875] RIP: 0033:0x7fbeeab9ce59 [ 96.568781][ T1875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.568795][ T1875] RSP: 002b:00007fbeeb9f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.568811][ T1875] RAX: ffffffffffffffda RBX: 00007fbeeae15fa0 RCX: 00007fbeeab9ce59 [ 96.568823][ T1875] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 96.568834][ T1875] RBP: 00007fbeeb9f5090 R08: 0000000000000000 R09: 0000000000000000 [ 96.568844][ T1875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.568853][ T1875] R13: 00007fbeeae16038 R14: 00007fbeeae15fa0 R15: 00007ffdb2adbab8 [ 96.568867][ T1875] [ 96.855793][ T317] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 97.007220][ T317] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.018281][ T317] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 97.027393][ T317] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.035400][ T317] usb 6-1: Product: syz [ 97.039611][ T317] usb 6-1: Manufacturer: syz [ 97.044316][ T317] usb 6-1: SerialNumber: syz [ 97.116036][ T312] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 97.253124][ T317] usb 6-1: unit 4 not found! [ 97.257911][ T317] usb 6-1: unit 8 not found! [ 97.277146][ T312] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 97.285346][ T312] usb 2-1: config 0 has no interface number 0 [ 97.291631][ T312] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 97.302930][ T312] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.312916][ T312] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.328615][ T312] usb 2-1: config 0 interface 1 has no altsetting 0 [ 97.335272][ T312] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 97.344426][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.353749][ T312] usb 2-1: config 0 descriptor?? [ 97.458743][ T317] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 97.468752][ T317] usb 6-1: unit 4 not found! [ 97.473408][ T317] usb 6-1: unit 8 not found! [ 97.479160][ T317] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 97.489136][ T317] usb 6-1: unit 4 not found! [ 97.493764][ T317] usb 6-1: unit 8 not found! [ 97.502436][ T317] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 97.512414][ T317] usb 6-1: USB disconnect, device number 11 [ 97.525780][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 97.542067][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 97.548856][ T994] Bluetooth: hci0: command 0x1003 tx timeout [ 97.607045][ T46] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 97.644198][ T1881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.484'. [ 97.766004][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 97.772098][ T46] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.784960][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 97.791736][ T46] usb 1-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 97.800920][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.809601][ T46] usb 1-1: config 0 descriptor?? [ 97.945996][ T317] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 97.963220][ T312] uclogic 0003:145F:0212.001B: pen parameters not found [ 97.970403][ T312] uclogic 0003:145F:0212.001B: interface is invalid, ignoring [ 98.097142][ T317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.120663][ T317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.133822][ T317] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 98.143232][ T317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.153426][ T317] usb 4-1: config 0 descriptor?? [ 98.171621][ T31] usb 2-1: USB disconnect, device number 40 [ 98.386001][ T312] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 98.538975][ T312] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 98.548289][ T312] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.556717][ T312] usb 6-1: Product: syz [ 98.561065][ T312] usb 6-1: Manufacturer: syz [ 98.565781][ T312] usb 6-1: SerialNumber: syz [ 98.571739][ T36] audit: type=1400 audit(1782224525.720:316): avc: denied { shutdown } for pid=1884 comm="syz.3.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.606580][ T317] usbhid 4-1:0.0: can't add hid device: -71 [ 98.612580][ T317] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 98.630147][ T317] usb 4-1: USB disconnect, device number 41 [ 99.106811][ T1899] FAULT_INJECTION: forcing a failure. [ 99.106811][ T1899] name failslab, interval 1, probability 0, space 0, times 0 [ 99.135989][ T1899] CPU: 1 UID: 0 PID: 1899 Comm: syz.3.491 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 99.136029][ T1899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 99.136043][ T1899] Call Trace: [ 99.136049][ T1899] [ 99.136058][ T1899] __dump_stack+0x21/0x30 [ 99.136095][ T1899] dump_stack_lvl+0x140/0x1c0 [ 99.136136][ T1899] ? __cfi_dump_stack_lvl+0x10/0x10 [ 99.136171][ T1899] ? xfrm_user_rcv_msg+0x711/0x910 [ 99.136212][ T1899] dump_stack+0x19/0x20 [ 99.136252][ T1899] should_fail_ex+0x3d7/0x530 [ 99.136287][ T1899] should_failslab+0xac/0x100 [ 99.136325][ T1899] kmem_cache_alloc_node_noprof+0x45/0x420 [ 99.136357][ T1899] ? __alloc_skb+0x108/0x370 [ 99.136389][ T1899] __alloc_skb+0x108/0x370 [ 99.136418][ T1899] ? __kasan_check_read+0x15/0x20 [ 99.136448][ T1899] netlink_ack+0x155/0xa50 [ 99.136491][ T1899] ? avc_has_perm_noaudit+0x28a/0x360 [ 99.136526][ T1899] ? avc_has_perm+0x155/0x240 [ 99.136559][ T1899] netlink_rcv_skb+0x2dd/0x4f0 [ 99.136595][ T1899] ? __cfi_xfrm_user_rcv_msg+0x10/0x10 [ 99.136630][ T1899] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 99.136669][ T1899] ? __kasan_check_write+0x18/0x20 [ 99.136699][ T1899] ? mutex_lock+0x97/0x1d0 [ 99.136728][ T1899] ? __cfi_mutex_lock+0x10/0x10 [ 99.136759][ T1899] ? netlink_autobind+0x1c0/0x1c0 [ 99.136796][ T1899] xfrm_netlink_rcv+0x76/0x90 [ 99.136833][ T1899] netlink_unicast+0x8c0/0xa60 [ 99.136868][ T1899] netlink_sendmsg+0x7fe/0xb10 [ 99.136904][ T1899] ? __cfi_netlink_sendmsg+0x10/0x10 [ 99.136944][ T1899] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 99.136979][ T1899] ? security_socket_sendmsg+0x3d/0x100 [ 99.137015][ T1899] ? __cfi_netlink_sendmsg+0x10/0x10 [ 99.137053][ T1899] ____sys_sendmsg+0x9e1/0xa30 [ 99.137092][ T1899] ? __import_iovec+0x5ad/0x7c0 [ 99.137127][ T1899] ? __sys_sendmsg_sock+0x50/0x50 [ 99.137167][ T1899] ? import_iovec+0x80/0xb0 [ 99.137197][ T1899] ___sys_sendmsg+0x2a6/0x370 [ 99.137233][ T1899] ? __sys_sendmsg+0x2a0/0x2a0 [ 99.137272][ T1899] ? proc_fail_nth_write+0x184/0x220 [ 99.137313][ T1899] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 99.137362][ T1899] __x64_sys_sendmsg+0x1fb/0x2d0 [ 99.137398][ T1899] ? fput+0x1a4/0x240 [ 99.137437][ T1899] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 99.137475][ T1899] ? ksys_write+0x1f3/0x260 [ 99.137505][ T1899] ? __kasan_check_read+0x15/0x20 [ 99.137537][ T1899] x64_sys_call+0x2a4c/0x2ee0 [ 99.137563][ T1899] do_syscall_64+0x57/0xf0 [ 99.137604][ T1899] ? clear_bhb_loop+0x50/0xa0 [ 99.137631][ T1899] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 99.137675][ T1899] RIP: 0033:0x7f455fd9ce59 [ 99.137702][ T1899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.137725][ T1899] RSP: 002b:00007f4560c9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.137758][ T1899] RAX: ffffffffffffffda RBX: 00007f4560015fa0 RCX: 00007f455fd9ce59 [ 99.137779][ T1899] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 99.137800][ T1899] RBP: 00007f4560c9b090 R08: 0000000000000000 R09: 0000000000000000 [ 99.137819][ T1899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.137837][ T1899] R13: 00007f4560016038 R14: 00007f4560015fa0 R15: 00007fffac442a18 [ 99.137862][ T1899] [ 99.576185][ T1903] netlink: 104 bytes leftover after parsing attributes in process `syz.3.493'. [ 99.621430][ T469] Bluetooth: hci0: Frame reassembly failed (-84) [ 100.435141][ T46] usbhid 1-1:0.0: can't add hid device: -71 [ 100.443480][ T46] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 100.452513][ T46] usb 1-1: USB disconnect, device number 38 [ 100.796009][ T46] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 100.947143][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.962751][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.975661][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.989006][ T46] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.998247][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.007584][ T46] usb 1-1: config 0 descriptor?? [ 101.124738][ T9] usb 6-1: USB disconnect, device number 12 [ 101.140929][ T1920] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 101.154124][ T1920] hub 5-0:1.0: USB hub found [ 101.158935][ T1920] hub 5-0:1.0: 1 port detected [ 101.306167][ T36] audit: type=1400 audit(1782224528.450:317): avc: denied { read } for pid=1923 comm="syz.5.502" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 101.344668][ T36] audit: type=1400 audit(1782224528.460:318): avc: denied { open } for pid=1923 comm="syz.5.502" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 101.373029][ T36] audit: type=1400 audit(1782224528.490:319): avc: denied { ioctl } for pid=1923 comm="syz.5.502" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 101.420415][ T46] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 101.439425][ T46] plantronics 0003:047F:FFFF.001C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 101.459492][ T46] usb 1-1: USB disconnect, device number 39 [ 101.479404][ T1930] fido_id[1930]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 101.686018][ T994] Bluetooth: hci0: command 0x1003 tx timeout [ 101.686030][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 101.736698][ T36] audit: type=1326 audit(1782224528.890:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1937 comm="syz.3.505" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455fd9ce59 code=0x7ffc0000 [ 101.762285][ T36] audit: type=1326 audit(1782224528.890:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1937 comm="syz.3.505" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455fd9ce59 code=0x7ffc0000 [ 101.787764][ T36] audit: type=1326 audit(1782224528.890:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1937 comm="syz.3.505" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f455fd5d68e code=0x7ffc0000 [ 101.813310][ T36] audit: type=1326 audit(1782224528.890:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1937 comm="syz.3.505" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f455fd5d68e code=0x7ffc0000 [ 101.838558][ T36] audit: type=1326 audit(1782224528.890:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1937 comm="syz.3.505" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455fd9ce59 code=0x7ffc0000 [ 101.863988][ T36] audit: type=1326 audit(1782224528.890:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1937 comm="syz.3.505" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f455fd9ce59 code=0x7ffc0000 [ 102.316009][ T317] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 102.467105][ T317] usb 6-1: config 8 has an invalid interface number: 223 but max is 0 [ 102.469938][ T1958] rust_binder: Write failure EINVAL in pid:306 [ 102.475499][ T317] usb 6-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 102.490108][ T1958] rust_binder: Error while translating object. [ 102.490669][ T1958] rust_binder: Failure in copy_transaction_data: EINVAL [ 102.496737][ T317] usb 6-1: config 8 has an invalid descriptor of length 121, skipping remainder of the config [ 102.514267][ T1958] rust_binder: 1957:1958 transaction to 1957 failed: EINVAL [ 102.517236][ T317] usb 6-1: config 8 has no interface number 0 [ 102.544288][ T317] usb 6-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 102.559429][ T317] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 102.568756][ T317] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.576954][ T317] usb 6-1: Product: syz [ 102.581157][ T317] usb 6-1: Manufacturer: syz [ 102.586070][ T317] usb 6-1: SerialNumber: syz [ 102.802120][ T317] usb 6-1: USB disconnect, device number 13 [ 102.826077][ T46] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 102.946000][ T361] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 102.976017][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 102.982226][ T46] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 102.990543][ T46] usb 1-1: config 0 has no interface number 0 [ 102.996709][ T31] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 103.004379][ T46] usb 1-1: config 0 interface 184 has no altsetting 0 [ 103.012758][ T46] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 103.021865][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.029910][ T46] usb 1-1: Product: syz [ 103.034111][ T46] usb 1-1: Manufacturer: syz [ 103.038755][ T46] usb 1-1: SerialNumber: syz [ 103.044040][ T46] usb 1-1: config 0 descriptor?? [ 103.050210][ T46] smsc75xx v1.0.0 [ 103.096000][ T361] usb 2-1: Using ep0 maxpacket: 8 [ 103.102753][ T361] usb 2-1: unable to get BOS descriptor or descriptor too short [ 103.111271][ T361] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.121465][ T361] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 103.136092][ T361] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 103.145272][ T361] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.153584][ T361] usb 2-1: Product: syz [ 103.157832][ T361] usb 2-1: Manufacturer: syz [ 103.162472][ T361] usb 2-1: SerialNumber: syz [ 103.166088][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 103.170749][ T361] usb 2-1: config 0 descriptor?? [ 103.179206][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.187110][ T361] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 103.190757][ T31] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 103.207482][ T31] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 103.218939][ T372] udevd[372]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 103.221147][ T31] usb 4-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 103.243916][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.252282][ T31] usb 4-1: Product: syz [ 103.257273][ T31] usb 4-1: Manufacturer: syz [ 103.261911][ T31] usb 4-1: SerialNumber: syz [ 103.381614][ T1429] usb 2-1: USB disconnect, device number 41 [ 103.388104][ T1974] netlink: 44 bytes leftover after parsing attributes in process `syz.5.519'. [ 103.397201][ T1974] netlink: 43 bytes leftover after parsing attributes in process `syz.5.519'. [ 103.406320][ T1974] netlink: 'syz.5.519': attribute type 5 has an invalid length. [ 103.414108][ T1974] netlink: 43 bytes leftover after parsing attributes in process `syz.5.519'. [ 103.468699][ T1969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.477469][ T1969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.488494][ T31] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 103.496467][ T31] usb 4-1: 1:1 : format type 33 is not supported yet [ 103.503456][ T31] usb 4-1: 0:2 : does not exist [ 103.511272][ T31] usb 4-1: USB disconnect, device number 42 [ 103.526187][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 103.676006][ T361] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 103.827128][ T361] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 103.835532][ T361] usb 6-1: config 220 has an invalid descriptor of length 243, skipping remainder of the config [ 103.846137][ T361] usb 6-1: config 220 has no interface number 2 [ 103.852536][ T361] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 103.865854][ T361] usb 6-1: config 220 interface 0 has no altsetting 0 [ 103.872765][ T361] usb 6-1: config 220 interface 76 has no altsetting 0 [ 103.879728][ T361] usb 6-1: config 220 interface 1 has no altsetting 0 [ 103.888040][ T361] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 103.897136][ T361] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.905169][ T361] usb 6-1: Product: syz [ 103.909393][ T361] usb 6-1: Manufacturer: syz [ 103.914127][ T361] usb 6-1: SerialNumber: syz [ 103.966042][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 103.966061][ T36] audit: type=1400 audit(1782224531.110:333): avc: denied { mount } for pid=1983 comm="syz.1.523" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 104.066542][ T46] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 104.077921][ T46] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 104.120545][ T1976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.131909][ T1976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.140738][ T1976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.150182][ T1976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.158915][ T1976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.168364][ T1976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.178392][ T1976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.187817][ T1976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.213868][ T361] usb 6-1: selecting invalid altsetting 0 [ 104.226142][ T361] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 104.232549][ T361] usb 6-1: No valid video chain found. [ 104.258827][ T361] usb 6-1: USB disconnect, device number 14 [ 104.288396][ T46] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 104.301192][ T46] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 104.311364][ T46] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 104.322058][ T46] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 104.331816][ T46] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 104.341668][ T46] usb 1-1: USB disconnect, device number 40 [ 104.476024][ T31] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 104.627206][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.638178][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.647976][ T31] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 104.657077][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.665750][ T31] usb 4-1: config 0 descriptor?? [ 104.815053][ T2002] netlink: 'syz.0.531': attribute type 63 has an invalid length. [ 104.822936][ T46] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 104.826162][ T2002] netlink: 5 bytes leftover after parsing attributes in process `syz.0.531'. [ 104.859879][ T36] audit: type=1400 audit(1782224532.010:334): avc: denied { listen } for pid=2001 comm="syz.0.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 104.975991][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 104.981175][ T1429] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 104.989958][ T46] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.000942][ T46] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 105.013762][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 105.020450][ T46] usb 2-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 105.029557][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.038386][ T46] usb 2-1: config 0 descriptor?? [ 105.082446][ T36] audit: type=1400 audit(1782224532.230:335): avc: denied { create } for pid=1988 comm="syz.3.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 105.106006][ T361] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 105.146009][ T1429] usb 6-1: Using ep0 maxpacket: 16 [ 105.152298][ T1429] usb 6-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 105.162782][ T1429] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.172562][ T1429] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 105.181849][ T1429] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 105.189898][ T1429] usb 6-1: SerialNumber: syz [ 105.197752][ T1429] usb 6-1: 0:2 : does not exist [ 105.245995][ T361] usb 1-1: device descriptor read/64, error -71 [ 105.401419][ T1429] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 105.412543][ T1429] usb 6-1: 5:0: failed to get current value for ch 2 (-22) [ 105.423617][ T1429] usb 6-1: 5:0: failed to get current value for ch 3 (-22) [ 105.435408][ T1429] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 105.447141][ T1429] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 105.458554][ T1429] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 105.469739][ T1429] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 105.482309][ T46] wacom 0003:056A:0315.001D: unknown main item tag 0x0 [ 105.489274][ T1429] usb 6-1: 5:0: cannot get min/max values for control 4 (id 5) [ 105.496059][ T361] usb 1-1: device descriptor read/64, error -71 [ 105.496965][ T46] wacom 0003:056A:0315.001D: unknown main item tag 0x0 [ 105.510234][ T46] wacom 0003:056A:0315.001D: unknown main item tag 0x0 [ 105.517250][ T46] wacom 0003:056A:0315.001D: unknown main item tag 0x0 [ 105.524267][ T46] wacom 0003:056A:0315.001D: unknown main item tag 0x0 [ 105.531284][ T46] wacom 0003:056A:0315.001D: unknown main item tag 0x0 [ 105.538282][ T46] wacom 0003:056A:0315.001D: unknown main item tag 0x0 [ 105.545682][ T46] wacom 0003:056A:0315.001D: Unknown device_type for 'HID 056a:0315'. Assuming pen. [ 105.556049][ T1429] usb 6-1: 5:0: cannot get min/max values for control 4 (id 5) [ 105.564185][ T46] wacom 0003:056A:0315.001D: hidraw0: USB HID v0.03 Device [HID 056a:0315] on usb-dummy_hcd.1-1/input0 [ 105.577888][ T46] input: Wacom Intuos Pro M Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0315.001D/input/input21 [ 105.590894][ T1429] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 105.603213][ T1429] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 105.617923][ T1429] usb 6-1: 5:0: cannot get min/max values for control 8 (id 5) [ 105.628582][ T1429] usb 6-1: 5:0: cannot get min/max values for control 8 (id 5) [ 105.642479][ T1429] usb 6-1: USB disconnect, device number 15 [ 105.652483][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 105.730850][ T317] usb 2-1: USB disconnect, device number 42 [ 105.755996][ T361] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 105.886041][ T361] usb 1-1: device descriptor read/64, error -71 [ 106.030481][ T36] audit: type=1400 audit(1782224533.180:336): avc: denied { getopt } for pid=2011 comm="syz.5.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.126009][ T361] usb 1-1: device descriptor read/64, error -71 [ 106.236088][ T361] usb usb1-port1: attempt power cycle [ 106.305991][ T317] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 106.457142][ T317] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 106.465493][ T317] usb 6-1: config 0 has no interface number 0 [ 106.473186][ T317] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 106.482375][ T317] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.490462][ T317] usb 6-1: Product: syz [ 106.494824][ T317] usb 6-1: Manufacturer: syz [ 106.496101][ T766] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 106.499507][ T317] usb 6-1: SerialNumber: syz [ 106.512609][ T317] usb 6-1: config 0 descriptor?? [ 106.586005][ T361] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 106.606998][ T361] usb 1-1: device descriptor read/8, error -71 [ 106.655989][ T766] usb 2-1: Using ep0 maxpacket: 32 [ 106.662249][ T766] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 106.670553][ T766] usb 2-1: config 0 has no interface number 0 [ 106.676800][ T766] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 106.687090][ T766] usb 2-1: config 0 interface 196 has no altsetting 0 [ 106.695420][ T766] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 106.704548][ T766] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.712648][ T766] usb 2-1: Product: syz [ 106.716968][ T766] usb 2-1: Manufacturer: syz [ 106.721634][ T766] usb 2-1: SerialNumber: syz [ 106.727177][ T766] usb 2-1: config 0 descriptor?? [ 106.732488][ T2019] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 106.747018][ T361] usb 1-1: device descriptor read/8, error -71 [ 106.985983][ T361] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 107.007020][ T361] usb 1-1: device descriptor read/8, error -71 [ 107.147055][ T361] usb 1-1: device descriptor read/8, error -71 [ 107.225426][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 107.231604][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 107.243729][ T31] usb 4-1: USB disconnect, device number 43 [ 107.259833][ T361] usb usb1-port1: unable to enumerate USB device [ 107.268212][ T2023] syzkaller1: entered promiscuous mode [ 107.273739][ T2023] syzkaller1: entered allmulticast mode [ 107.323991][ T317] asix 6-1:0.251 (unnamed net_device) (uninitialized): invalid PHY address: 185 [ 107.353978][ T766] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 107.367442][ T766] ipheth 2-1:0.196: probe with driver ipheth failed with error -71 [ 107.385133][ T766] usb 2-1: USB disconnect, device number 43 [ 107.504304][ T36] audit: type=1400 audit(1782224534.650:337): avc: denied { cmd } for pid=2039 comm="syz.3.543" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 107.532139][ T460] Bluetooth: hci0: Frame reassembly failed (-84) [ 107.540866][ T31] usb 6-1: USB disconnect, device number 16 [ 107.556158][ T469] ------------[ cut here ]------------ [ 107.561693][ T469] WARNING: CPU: 1 PID: 469 at drivers/block/ublk_drv.c:1579 ublk_uring_cmd_cancel_fn+0x34f/0x410 [ 107.572452][ T469] Modules linked in: [ 107.576650][ T469] CPU: 1 UID: 0 PID: 469 Comm: kworker/u8:51 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 107.588453][ T469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 107.598569][ T469] Workqueue: iou_exit io_ring_exit_work [ 107.604160][ T469] RIP: 0010:ublk_uring_cmd_cancel_fn+0x34f/0x410 [ 107.610736][ T469] Code: 5d e9 c5 46 55 02 cc e8 0f 14 32 fe 0f 0b eb e3 e8 06 14 32 fe 0f 0b eb da e8 fd 13 32 fe 0f 0b e9 4d fe ff ff e8 f1 13 32 fe <0f> 0b eb c5 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 0c fd ff ff 4c 89 [ 107.630460][ T469] RSP: 0018:ffffc9000df27990 EFLAGS: 00010293 [ 107.636580][ T469] RAX: ffffffff8355adbf RBX: 1ffff11021d72af5 RCX: ffff8881171ecc00 [ 107.644593][ T469] RDX: 0000000000000000 RSI: 0000000000000038 RDI: 0000000000000104 [ 107.652632][ T469] RBP: ffffc9000df279e0 R08: 0000000000000003 R09: 0000000000000004 [ 107.660667][ T469] R10: 0000000000000000 R11: ffffffff83559da0 R12: ffff888117dc2600 [ 107.668709][ T469] R13: ffff88810eb95780 R14: ffff88811826c000 R15: ffff88811826c010 [ 107.676790][ T469] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 107.685760][ T469] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.692501][ T469] CR2: 00007f4560c56ff8 CR3: 000000010db7a000 CR4: 00000000003526b0 [ 107.700613][ T469] DR0: 000000000000002a DR1: ffffffffff7fff00 DR2: 000000000000093d [ 107.708640][ T469] DR3: 0000000000000005 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 107.716675][ T469] Call Trace: [ 107.719981][ T469] [ 107.722941][ T469] ? _raw_spin_unlock+0x45/0x60 [ 107.727860][ T469] ublk_ch_uring_cmd+0x6f/0xa0 [ 107.732675][ T469] io_uring_try_cancel_uring_cmd+0x19e/0x280 [ 107.738798][ T469] io_uring_try_cancel_requests+0x4ce/0x5a5 [ 107.744740][ T469] ? io_uring_cancel_generic+0x6eb/0x6eb [ 107.750454][ T469] ? __cfi___switch_to+0x10/0x10 [ 107.755436][ T469] ? kthread_data+0x54/0xc0 [ 107.760015][ T469] io_ring_exit_work+0x23c/0x83b [ 107.764991][ T469] ? _raw_spin_unlock+0x45/0x60 [ 107.769915][ T469] ? __cfi_io_ring_exit_work+0x10/0x10 [ 107.775414][ T469] process_scheduled_works+0x7d4/0x1020 [ 107.781043][ T469] worker_thread+0xc51/0x1370 [ 107.785816][ T469] kthread+0x2c9/0x370 [ 107.789952][ T469] ? __cfi_worker_thread+0x10/0x10 [ 107.795103][ T469] ? __cfi_kthread+0x10/0x10 [ 107.799754][ T469] ret_from_fork+0x67/0xa0 [ 107.804217][ T469] ? __cfi_kthread+0x10/0x10 [ 107.808915][ T469] ret_from_fork_asm+0x1a/0x30 [ 107.813716][ T469] [ 107.816779][ T469] ---[ end trace 0000000000000000 ]--- [ 107.966001][ T766] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 108.117250][ T766] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 108.125673][ T766] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 108.135090][ T766] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 108.145784][ T766] usb 2-1: config 220 has no interface number 2 [ 108.152324][ T766] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 108.165893][ T766] usb 2-1: config 220 interface 0 has no altsetting 0 [ 108.172890][ T766] usb 2-1: config 220 interface 76 has no altsetting 0 [ 108.180223][ T766] usb 2-1: config 220 interface 1 has no altsetting 0 [ 108.188782][ T766] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 108.198133][ T766] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.206458][ T766] usb 2-1: Product: syz [ 108.210913][ T766] usb 2-1: Manufacturer: syz [ 108.215649][ T766] usb 2-1: SerialNumber: syz [ 108.422795][ T2032] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 108.434554][ T2032] overlayfs: missing 'lowerdir' [ 108.442960][ T766] usb 2-1: selecting invalid altsetting 0 [ 108.449577][ T766] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 108.456316][ T766] usb 2-1: No valid video chain found. [ 108.465357][ T766] usb 2-1: USB disconnect, device number 44 [ 109.606021][ T994] Bluetooth: hci0: command 0x1003 tx timeout [ 109.606200][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110