last executing test programs: 3m32.833069408s ago: executing program 2 (id=604): r0 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x19, {0x0, "f4"}}, @nested_intel_msr_list_add={0x155, 0x30, {0x0, 0x0, 0xc0000102, 0x1000}}, @nested_intel_msr_list_add={0x155, 0x30, {0x0, 0x0, 0xc0000103, 0x1}}, @nested_intel_msr_list_add={0x155, 0x30, {0x0, 0x1, 0xc0000102, 0x2000}}, @nested_intel_msr_list_add={0x155, 0x30, {0x0, 0x1, 0xc0000103, 0x2}}, @nested_intel_msr_list_add={0x155, 0x30, {0x0, 0x2, 0xc0000102}}, @nested_vmlaunch={0x12f, 0x18}], 0x151}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x800000000000000) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xe2e20001) 3m32.706859971s ago: executing program 2 (id=606): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2a8}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000003000)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000003040)={'bridge0\x00', 0x0}) sendto$packet(r4, &(0x7f0000003080)="05031600ffff1c0000004788031e09102c2847fcf0880fed26ff55c7a59ccd52be1137778b077d5c9cd2f942115b94ed5a7cebf1608e6f21d45a321b2e7433", 0x3f, 0x40804, &(0x7f00000030c0)={0x11, 0x7, r5, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x14) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000004c0)={0x2e, 0x64, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x411, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x60}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$EBT_SO_GET_ENTRIES(r9, 0x0, 0x81, &(0x7f0000000740)={'broute\x00', 0x0, 0x3, 0x0, [0xe, 0x3, 0x80000001, 0xc51, 0x8, 0x9], 0x0, 0x0, 0x0}, 0x0) r10 = dup(r8) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_ublk_setup_queues(r10, r7, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0xd4, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r6, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000200)=@req3={0xb, 0x3d7, 0x4, 0x14, 0xa, 0x0, 0x8}, 0x1c) r11 = socket(0x2, 0x2, 0x0) setsockopt$inet_opts(r11, 0x0, 0x19, 0x0, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) r13 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r13, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x8000, 0x40000200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000003340)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000003380)='./dev\x00', &(0x7f00000033c0)='devtmpfs\x00', 0x3940015, 0x0) openat(0xffffffffffffff9c, &(0x7f0000003400)='./dev/sda\x00', 0x101042, 0x0) r14 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42c40, 0xa0) finit_module(r14, 0x0, 0x1) mmap(&(0x7f0000612000/0x2000)=nil, 0x2000, 0x6, 0x28011, 0xffffffffffffffff, 0x2000) r15 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x180862) ioctl$LOOP_CONFIGURE(r15, 0x40101283, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3m32.639073618s ago: executing program 2 (id=607): r0 = socket$netlink(0x10, 0x3, 0x9) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000280)="58000000f30319234083feff040d8c560aed0413a55227affa060f0200ff0000000000000020ffff00000000000064009400ff0325010ebc000000020000d40ee8e77964ffe809005300fff5dd000000100001000a0c1000", 0x58}], 0x1) 3m32.638810058s ago: executing program 2 (id=608): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x9a101a, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x18d093, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0xb) 3m32.636038418s ago: executing program 2 (id=610): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x98e3}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, 0x0, 0x0) 3m32.398930483s ago: executing program 2 (id=613): socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa0000000000000000000000000000399f000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006000000000044000500ac1414bb000000000000000000000000000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x600c010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x6c, r2, 0x1, 0x170bd2b, 0x0, {0x3, 0x0, 0x12}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0x2d, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}, 0x1, 0x300}, 0x8000) 3m32.398643123s ago: executing program 32 (id=613): socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa0000000000000000000000000000399f000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006000000000044000500ac1414bb000000000000000000000000000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x600c010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x6c, r2, 0x1, 0x170bd2b, 0x0, {0x3, 0x0, 0x12}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0x2d, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}, 0x1, 0x300}, 0x8000) 1m31.670573533s ago: executing program 0 (id=1784): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x36, 0x31, 0x30, 0x37, 0x30, 0x31]}, &(0x7f00000006c0)={0x0, "00112233444566778899aabbccddeeff00112233445566778899aabbccddeeff0011fb2fa087e1a5a490aabbccddeeff001122334455667788d9aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000740), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f00000008c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x38}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000940), &(0x7f0000000980)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f00000009c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000b40), &(0x7f0000000b80)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000bc0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000c40), &(0x7f0000000c80)={'fscrypt:', @auto=[0x30, 0x35, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000cc0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000d40), &(0x7f0000000d80)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x38]}, &(0x7f0000000dc0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000e40), &(0x7f0000000e80)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x65]}, &(0x7f0000000ec0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff03002233445566778899aabbccddfeff00112233445566779f99aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "27f4a0e9801533b8189e75d4d1be03c15e703980d66c8f82b3a0ef4d9cc0b839992bbddea305016833999e53e2e88169ebce37a2ba617745178a548d9480a90e", 0x2c}, 0x48, r0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000f40), &(0x7f0000000f80)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000fc0)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001040), &(0x7f0000001080)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x33, 0x62]}, &(0x7f00000010c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001140), &(0x7f0000001180)={'fscrypt:', @desc2}, &(0x7f00000011c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001240), &(0x7f0000001280)={'fscrypt:', @auto=[0x30, 0x61, 0x67, 0x37, 0x32, 0x30, 0x66, 0x30, 0x32, 0x30, 0x32, 0x65, 0x35, 0x37, 0x30, 0x36]}, &(0x7f00000000c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001340), &(0x7f0000001380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x63, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x62, 0xf]}, &(0x7f00000013c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001440), &(0x7f0000001480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000014c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001540), &(0x7f0000001580)={'fscrypt:', @desc1}, &(0x7f00000015c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000001640), &(0x7f0000001680)={'syz', 0x2}, &(0x7f00000016c0)='c', 0x1, r0) 1m31.670178513s ago: executing program 0 (id=1785): openat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write(r1, &(0x7f0000000000)='8', 0x1) 1m31.558888295s ago: executing program 0 (id=1786): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bb8, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x2b}, 0xa, @in=@broadcast}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x4000}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x9}, 0x4040000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000200)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a88a400d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYRES8=r2], 0x0) syz_open_dev$evdev(&(0x7f0000000700), 0x4, 0x80200) 1m28.575991782s ago: executing program 0 (id=1808): mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)='sysfs\x00', 0x1214040, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) close(r0) (async) mount$overlay(0x0, &(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00), 0x0, &(0x7f0000000d40)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x100) (async) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000180)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x44, 0xe0) mkdirat(r1, &(0x7f00000002c0)='./bus\x00', 0x80) mount(0x0, &(0x7f00000001c0)='proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='proc/sys/net/ipv4/conf/default/accept_source_route\x00', 0x1, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7c0cab82ab03d1fc, 0x0) write(r2, 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f00000004c0)='./bus\x00', &(0x7f0000000500), 0x0, 0x0, 0x1) 1m28.557748554s ago: executing program 0 (id=1809): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x44, 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000001900), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_create_resource$futex(&(0x7f0000000000)=0x1) futex(r6, 0x6, 0x0, 0x0, 0x0, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x1a) futex(r6, 0x1, 0x1, 0x0, r6, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x10, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x191603, 0x0) sendfile(r7, r7, 0x0, 0x7) r8 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000001940)={0x0, &(0x7f0000000040)}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_create_resource$kvm_nested_state(&(0x7f0000001a00)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_GET_NESTED_STATE_res(r8, 0xc080aebe, r9) ioctl$KVM_SET_NESTED_STATE_res(r2, 0x4080aebf, r9) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m28.378906543s ago: executing program 0 (id=1810): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[], 0x54}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000480)={'nat\x00', 0x2, [{}, {}]}, 0x48) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r3 = syz_genetlink_get_family_id$tipc(0x0, r0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1c, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20004004) r4 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r4, &(0x7f00000001c0)={&(0x7f0000000240)={0xa, 0x2, 0x9, @empty, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="14000000000080fe2900000008000000000000000000f400480000000000000029000000370000000106000000000000c910fc000800000000000000000000000000010100c2040000000906010fc91000000000000000000000ffff0a010102873796c2bb6a6bfc7698e60af3254167468f973944e49b21"], 0x60}, 0x20040810) 1m28.378237943s ago: executing program 33 (id=1810): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[], 0x54}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000480)={'nat\x00', 0x2, [{}, {}]}, 0x48) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r3 = syz_genetlink_get_family_id$tipc(0x0, r0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1c, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20004004) r4 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r4, &(0x7f00000001c0)={&(0x7f0000000240)={0xa, 0x2, 0x9, @empty, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="14000000000080fe2900000008000000000000000000f400480000000000000029000000370000000106000000000000c910fc000800000000000000000000000000010100c2040000000906010fc91000000000000000000000ffff0a010102873796c2bb6a6bfc7698e60af3254167468f973944e49b21"], 0x60}, 0x20040810) 1m10.212184435s ago: executing program 5 (id=1989): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1e4) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./upper\x00', &(0x7f0000000100), &(0x7f00000001c0), 0x2, 0x0) mount(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000004f80)='lowerdir=lower,upperdir=upper,\\orkdir=work,index=on,nfs_export=on,uuid=off\x00') 1m10.208579935s ago: executing program 5 (id=1990): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./proc\x00', 0x173) mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='10', 0x2) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f000049b000/0x2000)=nil) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x4000, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, &(0x7f0000000680)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000440)='27', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7fffffe, 0x2000007, 0x401d031, r2, 0x0) syz_usb_connect$uac1(0x3, 0xb1, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000cb689316b00030000000000092406000601", @ANYRES64=0x0], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000000c0)={0x3000, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x2, 0x34000, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_usb_connect(0x3, 0x63, &(0x7f0000000480)=ANY=[@ANYRES16], 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_9p2000}, {@msize={'msize', 0x3d, 0x1000}}]}}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000180)={0xeeee8000, 0x102000, 0x40000001}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m8.241841587s ago: executing program 5 (id=1997): socket(0x11, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f00000000c0)='cramfs\x00', 0xb0440, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000080)={0xa, 0xffffffffffffffff, 0x1}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='p:s/_ ./file0:0', 0xf) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x141) write(r2, &(0x7f0000000500)='-:s/', 0x4) 1m8.22369985s ago: executing program 5 (id=1998): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f00000a0000/0x6000)=nil, 0x6000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002080)={0x4c, 0x0, &(0x7f00000020c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x70000000, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002140)={@raw_ptr={0x70742a85, 0x0, &(0x7f00000021c0)='\x00'/8081, 0x1f91}}, &(0x7f00000041c0)={0x0, 0x28, 0x40}}, 0x2000}]}) 1m8.158947996s ago: executing program 5 (id=1999): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f00000001c0)="0f228266b9802b00c00f326635000400000f3064d05c230f23730f06f3e03af4660f3801272e673626d3f3da7d6a", 0x2e}], 0x1, 0x44, 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000001900), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_NMI(r2, 0xae9a) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000001940)={0x0, &(0x7f0000001980)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1e, {0x0, "66ba3412eef4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x66}) ioctl$KVM_RUN(r6, 0xae80, 0xc00) r7 = syz_create_resource$kvm_nested_state(&(0x7f0000001a00)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_SET_NESTED_STATE_res(r2, 0x4080aebf, r7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m7.955870707s ago: executing program 5 (id=2003): mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0xfffffffc) pipe2$9p(&(0x7f0000000400), 0x0) (async) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="50000000300005040000000000000000000000003c000100380001000900010067616374000034d7bc68f30000280002801801000000000000000c000300010000000000002000"/80, 0x50}], 0x1}, 0x24040000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@xino_auto}], [], 0x2c}) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') lseek(r3, 0x10001, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x800000, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noxattr}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x800000, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noxattr}]}}) 52.794450419s ago: executing program 34 (id=2003): mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0xfffffffc) pipe2$9p(&(0x7f0000000400), 0x0) (async) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="50000000300005040000000000000000000000003c000100380001000900010067616374000034d7bc68f30000280002801801000000000000000c000300010000000000002000"/80, 0x50}], 0x1}, 0x24040000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@xino_auto}], [], 0x2c}) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') lseek(r3, 0x10001, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x800000, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noxattr}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x800000, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noxattr}]}}) 50.453354131s ago: executing program 4 (id=2234): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) getsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) mkdir(&(0x7f00000000c0)='./cgroup/../file0\x00', 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x2) (async) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000002c0)={0x3, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x2, 0x5, 0x0, 0x3, 0xa, 0x0, 0x70bd2b, 0x0, [@sadb_address={0x3, 0x6, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x64010100}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x2, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) sendmsg$key(r2, &(0x7f00000002c0)={0x3, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x2, 0x5, 0x0, 0x3, 0xa, 0x0, 0x70bd2b, 0x0, [@sadb_address={0x3, 0x6, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x64010100}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x2, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}}]}, 0x50}, 0x1, 0x7}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000180), 0x2, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') unshare(0x400) ppoll(&(0x7f0000000200)=[{r4, 0x3400}], 0x1, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000200)=[{r4, 0x3400}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be39", 0xffeb}, {0x0}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r7, &(0x7f0000000240)={0x0, 0x0}) (async) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000240)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000280)={0x66f}) recvmmsg(r1, &(0x7f000000cf00)=[{{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000008340)=[{&(0x7f0000006d00)=""/4082, 0x1000}, {0x0, 0x1e}], 0x2}, 0x6}], 0x2, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f000000cf00)=[{{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000008340)=[{&(0x7f0000006d00)=""/4082, 0x1000}, {0x0, 0x1e}], 0x2}, 0x6}], 0x2, 0x2, 0x0) recvfrom$inet6(r1, &(0x7f00000007c0)=""/195, 0xc3, 0x40000000, 0x0, 0x0) (async) recvfrom$inet6(r1, &(0x7f00000007c0)=""/195, 0xc3, 0x40000000, 0x0, 0x0) 49.533059306s ago: executing program 4 (id=2242): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x80) read(r2, &(0x7f00000000c0)=""/4, 0x4) fchdir(r1) ioctl$SIOCSIFHWADDR(r0, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="0b0000000010"}) 49.425148187s ago: executing program 4 (id=2245): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x5001}) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', 0x1}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000140)="de29b8c6008ed08ec00f79f53674f766b9800000c05f326635010000000f300f01cb672e660fc7b500500000baf80c66b805348a8fbaf80c66b8969c558b66efbafc0cb045eebafc0cb020ee670f01bcba01f39eb4", 0x55}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03031b003000320006006300000000443aff00000000000000000000ffffac141419ff02000000000000000000000000000191"], 0xfdef) 49.300222219s ago: executing program 4 (id=2251): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) socket(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f00000009c0)="7e64a727ad02cffbf1c9ab1b8c111919c155d147a3c58647b271b6aada037d471b4c2b5c8cc9c0c789d4d9d6ab7257418377c16b421b1847ea161779a92c8e027d236d9f012506e0a5c8edda631cd12a9ab2b9dbb29b1920d5a38b4a6e506e6008be189292db200408659f5a479791a5933c815cab1cd2998d8491307b9636b5d90eb63e48315061d89ae6c24d6bbc26992770060a6f0cb4fa59a6f9c71e768e809f58cdc45ee59ea5e93ea24f532565b3006104", 0xb4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socket$unix(0x1, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000100)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000b40)={0x1, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r4, 0x4068aea3, &(0x7f0000000b80)={0xc7, 0x0, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r7, &(0x7f0000000c40)={0x0, &(0x7f0000000c80)=[@rdmsr={0x66, 0x18, {0x4000009c}}], 0x18}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000224e0000", 0x58}], 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x200000a, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000640)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000680)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x569c02, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f00000006c0)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6, 0x0, r11}, &(0x7f0000000740)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdaf5, 0x1, 0x3, 0x3aa, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x3fff, 0x80000337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x20, 0x1, 0x30}}], 0x1, 0x0, 0x0) modify_ldt$read_default(0x2, 0xffffffffffffffff, 0x0) 49.272768242s ago: executing program 4 (id=2252): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x19f) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x2, 0x181) mkdirat(r0, &(0x7f0000000000)='./sys\x00', 0x1fb) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='nilfs2\x00', 0x40, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0d1, 0x20, 0x1, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x905b, 0x800, 0x0, 0x8003aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x20000, 0x40040001, 0x1de}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x80000, 0x0, 0xfffffffb}}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000600)=0xf3f, 0x4) sendto$packet(r1, &(0x7f0000000640)="3f0302e90302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f00000006c0)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bridge0/bridge/multicast_querier_interval\x00', 0x0, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000780)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_clone(0x1100400, 0x0, 0xffffffffffffff2b, 0x0, 0x0, 0x0) syz_open_procfs(r4, &(0x7f00000007c0)='fdinfo/4\x00') syz_open_procfs(r4, &(0x7f0000001880)='fd/3\x00') r5 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000800)='./binderfs/binder_logs/state\x00', 0x0, 0x0) read(r5, &(0x7f0000000840)=""/4096, 0x1000) read(r3, &(0x7f0000000240)=""/256, 0x100) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000200)={&(0x7f0000000700)={0x2, 0x4e1f, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="240000000000000000000000070000004414"], 0x28}, 0x4000810) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001840), 0x2200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001940)=[@text32={0x20, &(0x7f0000001980)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080321100c4e28ddc8dcd000000c182fd3f0000c850220000b801000000b9a6080000b9800000c00f3235000800000f30ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x6a}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001a00)=[@text16={0x10, 0x0}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000003ac0)={[0x80000000, 0xdb58, 0x9, 0x800, 0x7fe, 0x404, 0x5, 0x800000000000007, 0xfffffffffffffe00, 0x400000ffffffff, 0x7fffffffffffffff, 0x1000000089, 0xc183, 0x0, 0x7f, 0xbe], 0x3ff8, 0x312283}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) write(r10, &(0x7f00000018c0)="580000001800050401000000000000000a800000fe040002000000001400010020010db800000000000000000000000106001500070000001800160008000100010000000c000b00086001000b0000000800040001000000", 0x58) 49.071042183s ago: executing program 4 (id=2254): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = userfaultfd(0x80001) (async, rerun: 64) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0x9aa9b000) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) (async, rerun: 32) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000000)="64be00000000000000000300000000000700", 0x0, 0x18) (async, rerun: 32) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 33.995317397s ago: executing program 35 (id=2254): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = userfaultfd(0x80001) (async, rerun: 64) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0x9aa9b000) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) (async, rerun: 32) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000000)="64be00000000000000000300000000000700", 0x0, 0x18) (async, rerun: 32) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 5.558988417s ago: executing program 7 (id=2814): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.mem_hardwall\x00', 0x2, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0x6460, 0x800, 0x0, 0x1d3}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000400)={0xa, 0x4e22, 0xfffffffc, @local}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="580000000000000029000000370000002c070000000000000502fffc01050000000000000100c910fc02000000e8ffff0300000000000000c20400000005c91000000000000200000000ffffac14143ff7010000000000001400000000000000290000003e0000000000010000"], 0x70}}], 0x2, 0x801) pipe(&(0x7f0000000540)={0xffffffffffffffff}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x1, 0x7) sendfile(r1, r1, 0x0, 0x9a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$binder_report(0xffffffffffffffff, &(0x7f0000000200)={""/44, 0x0}, 0x80, 0x40010042, 0x0, 0x0) ptrace(0x10, r6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000100)=@ethtool_cmd={0x3a, 0x5, 0x0, 0x4, 0x7, 0x0, 0x3, 0xfc, 0x0, 0xfc, 0x0, 0x0, 0x0, 0xff, 0x0, 0x45, [0x0, 0x1]}}) syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5c200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc02010111240301010200000000000000000200000924030201010001"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) process_madvise(0xffffffffffffffff, 0x0, 0x33, 0x17, 0x0) 4.373342799s ago: executing program 7 (id=2826): r0 = landlock_create_ruleset(&(0x7f0000000280)={0x0, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000040)={&(0x7f0000000080)={0xa, 0x4e22, 0x951, @local}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000029000000040000002f000000000000001800000000000000290000003b00000002000000000000002800"], 0x60}, 0x0) ioctl$int_in(r1, 0x5f2a63f77cb494ea, &(0x7f0000000000)=0x4) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/clients\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="20399f5d", @ANYRES16=r5, @ANYBLOB="b1db27bd700010000000060000000c0001800800030005000000"], 0x20}}, 0x800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x29, 0xdb, 0x4, 0x7, 0x4, @mcast1, @local, 0x10, 0x1, 0x2, 0x7fff}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r8 = socket$packet(0x11, 0x3, 0x300) sendmsg(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000800)="dcb39d938fc98716c72a0281f522b581c3854ae11e73e52d56eb0fc4f36d3478489860b9da569d1958bfa86d3eb2fca3c72d6753d756a19e0219b97810c672fbdbf70b5e541e6ff600409c37912a04830587b08b1fecae66efc69ba9c77dc82fc8fba3c5c2da1754d827ba7de7312190eb2647cd1c58d8de166e1f6714b5444027a3f73109bc2b8a09e233c0aeb4f4af8a7732d6686ed0fed315359a99358f46379ccf75f751b9ade4e2a4471b92870909bc34dc5bac81bf33c93b3c62e13df05bcec5d59f997575668d5e0f6b12c6931313169981af78041c0f5227", 0xdc}, {&(0x7f0000000900)="6d42a1c258b0af72ba0263d2c42c41394dab57a03df64a5088058ddc60545b33b91824601b88753cafee430c61c6162ef30af32aa54a7509f8748ce06a9534b9877da20e46a4bc6266fa5f75afe8a38ba0c57ec8ccf315168522a67defad6b5fc92ef95b4acf9e9dce68b642a1d63856973133b14997cc12bdc7370bf0aa521131a1b2954728fd3c527b5fa19635c77710ab147e1e9ca23e4d06e9f5cc5643dbab0cc5c022a00d3ee8a6cc9297251d1f0c91fe119977c7c5c9180c0b6b4ac05130b6690cc66fc702b841be077524b859788e3f", 0xd3}, {&(0x7f0000000a00)="8c81b19774d4054ac90c3bd27c5ed371c0d95816963a0922eb718cd547c805be97eaa637ac2e9ed51e1d3e1b72193111cf51fa92258666a674ed733365c6c5ab9b776f500377f823e8ed2dd5b94946c9a654df21fdf627ba1187d20e81f5ba90fecc44aee65d3de8a0162b0db4e62e630fa8e8e9ffa48899b401cd8ba8804ae04d289318b54a0c60a6d290e37e96607e0b6895595e607279bc7636c936d7757a8c27d5f57b55f7c60e14324bcec741121ee3d9e7cab900135fd4d4b6eb94b4bb0d2b933d8b2394036a40bfa80bce59743abc960cae56337e53e7a2d87418977942ac41016045a25e9719fb049d5d65b7e7bdc50a", 0xf4}, {&(0x7f0000000b00)="954f4456b766f42cb21d2df17edd68cef2ece721733104ee290be15ad952f1bb366b59f8621a497b2c499fefc736fe4ebe672c982fcd78d2c1e922f3886b6cdd52c9cda7b54d49829fe1ce240fc8c0209c35ba250f03dabe1765495c52f54b938aaaf1f6ea0a96a4f34a6687a85d3a5908f801e2a1d4579553057332d10cf5c94faf332a3e244e68dedb13c4f83b27e60f6c22436f4d0030f953072bf6", 0x9d}, {&(0x7f0000000bc0)="4d9af47de884bb8cabcf946e2336beb5cdac768f5b2a515febb73c151802dd1c0ef4011e26767412b61c175866c7344e34cce65276c53239701d7425f3b33a0c378f0a053e71d7c26e8bbfdf3d8a9e049edd1c169c34bee736171015f744011bdab42f4a2eb5e7f531c9a485fd15a4eeefa780e5094d", 0x76}, {&(0x7f0000000c40)="ee6fa9511f739e966afd9236f250a1906759e843ce1e48ff121666bd223cea896b3246bc59ce236cde", 0x29}], 0x6, &(0x7f0000000d00)=ANY=[@ANYBLOB="b000000000000000000000001bdc0000a4f98411c213b849a29a10e2173de4d8f5ae48643b51cf4a9917e0d026fa955d96e6c37349dd0765cca37d1de3665c447a85d7296ad9152c3eababde00abcae86ded4e9c58555f382fd6a6ea7fa1cd5afce056a83513accc71c3582f6ee29d5e3bc7ca3731078533ffaeb66c1a5d79c6557f8411efe4e25eb8fbeafb763fc5bc241f0ed30da5d7215f50ce03359a71faf70f128699b18c"], 0xb0}, 0x400c005) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000500)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000540)={'ip6tnl0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000580)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f00000005c0)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000600)={@remote, 0x0}, &(0x7f0000000640)=0x14) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f00000007c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xf4, r5, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) 4.36634383s ago: executing program 7 (id=2828): mkdirat(0xffffffffffffff9c, &(0x7f0000007600)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000007640)='./config\x00', &(0x7f0000007680)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000076c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000007700)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000007740)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) symlinkat(&(0x7f0000007780)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f00000077c0)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000007800)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0x4f8, '\x00'/1272}, &(0x7f0000000540)=0x520) write(r0, &(0x7f0000007840)='dummy_udc.0', 0xb) unlinkat(0xffffffffffffff9c, &(0x7f0000007880)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00', 0x0) 4.348230951s ago: executing program 7 (id=2829): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r2, &(0x7f0000000140)=[{{&(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10, &(0x7f00000001c0)}}], 0x1, 0x852) getsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x2, 0xcf, 0x2, 0xf2, 0x80, 0x0, 0xe0, 0xe, 0x10, 0x4, 0x7, 0x2, 0x1, 0x40, 0x4, 0x2}}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000500)={0x1, 0x0, @pic={0xff, 0x9, 0xc, 0x8, 0x4, 0x5, 0x9, 0x89, 0x9, 0x6, 0x8, 0x5, 0xb, 0x0, 0x80, 0x6}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) write(r0, &(0x7f0000000100)='0', 0x1) 4.206913496s ago: executing program 7 (id=2831): prlimit64(0x0, 0xe, &(0x7f0000001040)={0x9, 0xfffffffffffffffa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x2000006) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000010c0)=0x9) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv6/conf/default/disable_ipv6\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00') sendfile(r1, r1, 0x0, 0x1) write$FUSE_LSEEK(r1, &(0x7f0000000300)={0x18, 0x0, 0x0, {0x1000}}, 0x18) syslog(0x4, 0xfffffffffffffffe, 0xff14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1a8) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r2, &(0x7f0000000140)='3', 0x1) ioprio_set$uid(0x3, 0x0, 0x0) syz_clone(0x840c0200, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$PTP_PIN_GETFUNC2(r3, 0x3d13, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./proc\x00', 0x1ff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone(0xf21e4000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) socket$igmp6(0xa, 0x3, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) 3.384097231s ago: executing program 7 (id=2834): madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mlock(&(0x7f0000158000/0x4000)=nil, 0x4000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x4001af84, 0x0) syz_clone3(&(0x7f0000000080)={0x204801600, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bind$inet6(r0, &(0x7f0000001800)={0xa, 0x4e22, 0x9, @private0, 0x3}, 0x1c) r2 = openat$incfs(r0, &(0x7f0000000100)='.log\x00', 0x2, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000180)={0xf, 0x4, {0x53, 0x2, 0x2, {0x8, 0x7}, {0xde1, 0xfaa}, @rumble={0xc1, 0xf5e3}}, {0x56, 0x4, 0x10, {0x5}, {0x1, 0xd}, @period={0x59, 0x800, 0x6, 0x2, 0x6, {0x16, 0x0, 0x0, 0x2}, 0x1, &(0x7f0000000140)=[0x6]}}}) write(r0, &(0x7f0000000040)='\a', 0x1) 3.363115993s ago: executing program 6 (id=2836): timer_create(0x3, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setrlimit(0xf, &(0x7f00000003c0)={0x0, 0x3}) r0 = socket(0x400000010, 0x3, 0x0) write(r0, &(0x7f0000000540)="fc0000001400073eac093a00090007000aab0800080000000400e293210001c000000000060000000100000009002100fa2c1eff8656aaa79bffffffff0000002d00024000036c6c256f1a272fdf0d11512fd633d4400007f60eb8fa2e6b00000016fd368934d07302ade01720d7d5bbc91a3e2e80772c05f70c9ddef2fe082038f4f8b29d3ef3d92883170efdffffff3ae4f50504000000000040d815b2ccd243f295edbabc7c3f1a5f4e023dd16b176e83df150c3b8829a1ad0a4f41f0d48f6f0000080548deac270e37429f3694dec896592d69d381873cf1582740000000000000001ace36f071d0c22700"/252, 0xfc) 3.258747154s ago: executing program 6 (id=2845): prlimit64(0x0, 0xe, &(0x7f0000001040)={0x9, 0xfffffffffffffffa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x2000006) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000010c0)=0x9) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv6/conf/default/disable_ipv6\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00') sendfile(r1, r1, 0x0, 0x1) write$FUSE_LSEEK(r1, &(0x7f0000000300)={0x18, 0x0, 0x0, {0x1000}}, 0x18) syslog(0x4, 0xfffffffffffffffe, 0xff14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1a8) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r2, &(0x7f0000000140)='3', 0x1) ioprio_set$uid(0x3, 0x0, 0x0) syz_clone(0x840c0200, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$PTP_PIN_GETFUNC2(r3, 0x3d13, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./proc\x00', 0x1ff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone(0xf21e4000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) socket$igmp6(0xa, 0x3, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) 2.03340547s ago: executing program 6 (id=2854): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1.831972351s ago: executing program 6 (id=2858): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', 0x1}) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) write(r0, &(0x7f00000002c0)="ffffffffffffaabbccddeeff88ca5bf0004c00000000010001020000000200000001000000000000000000000001aabbccddeeff00000000000000400e000000000000000000000001020304", 0x5a) 1.710238874s ago: executing program 6 (id=2859): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1e4) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./upper\x00', &(0x7f0000000100), &(0x7f00000001c0), 0x2, 0x0) mount(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000004f80)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=\\n,uuid=off\x00') 1.630547672s ago: executing program 6 (id=2862): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="66b843008ee066bad004ec0f01c966ba4100b0a5eec42130c6a816eb71e235b8010000000f01d9660f38822042394a04b8010000000f01d9410f01df", 0x3c}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000000c0)={{0x1, 0x2000, 0xb, 0xad, 0x4, 0xff, 0x7f, 0x5, 0x0, 0x2b, 0x9}, {0x2, 0x70000, 0x0, 0x2a, 0x8, 0x0, 0x7f, 0x1, 0x3, 0xf0, 0x9, 0x5}, {0x2, 0x5000, 0x8, 0x5, 0x1, 0xf3, 0x0, 0xb, 0x0, 0x5, 0xb, 0x9}, {0xdddd0000, 0xffff1000, 0x0, 0xe3, 0x4, 0x2, 0x1, 0x86, 0x8, 0x8b, 0xd}, {0x4, 0x8080000, 0x8, 0x3, 0x5, 0x86, 0x9, 0x7f, 0xa, 0x0, 0xf2, 0x43}, {0x70000, 0x6000, 0xb, 0x7c, 0xb1, 0x24, 0x7f, 0xaf, 0x83, 0xc, 0x15, 0x3d}, {0xd000, 0x100002, 0x9, 0x3, 0x2, 0x5, 0x0, 0x3, 0x5, 0x7f, 0x5}, {0x3000, 0xffff1000, 0x5, 0x5, 0x9, 0xf, 0x0, 0x37, 0x4, 0x9, 0xf0}, {0xeeee8000, 0x2070}, {0x2, 0x7}, 0x80000033, 0x0, 0xeeef0000, 0x2104, 0x0, 0x0, 0x80a0000, [0x4, 0x7, 0x7, 0x9]}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0xffff8881f6c0a000) r4 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c00020100e0000904000001020d0000052406000105240000800d240f0101010000000000000006241a0000150905810308003600000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000940)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x80, 0x1c, {0x7ff, 0x9, 0x9, 0x1, 0xffff, 0x7, 0x400, 0x4, 0x8, 0x3, 0xe, 0x800}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) 1.269507069s ago: executing program 3 (id=2863): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f00000001c0)="0f228266b9802b00c00f326635000400000f3064d05c230f23730f06f3e03af4660f3801272e673626d3f3da7d6a", 0x2e}], 0x1, 0x44, 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000001900), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_NMI(r2, 0xae9a) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000001940)={0x0, &(0x7f0000001980)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1e, {0x0, "66ba3412eef4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x66}) ioctl$KVM_RUN(r6, 0xae80, 0x100000000000000) r7 = syz_create_resource$kvm_nested_state(&(0x7f0000001a00)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_SET_NESTED_STATE_res(r2, 0x4080aebf, r7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.193842397s ago: executing program 3 (id=2864): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) sigaltstack(&(0x7f00000017c0)={0x0, 0x2}, 0x0) (rerun: 32) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) sigaltstack(&(0x7f0000000380)={&(0x7f0000000600)=""/4096, 0x1, 0x1000}, 0x0) (async) ptrace$getregset(0x4204, r0, 0x202, &(0x7f00000001c0)={0x0}) (async) ptrace$getenv(0x4201, r0, 0xff, &(0x7f00000003c0)) (async) r1 = syz_ublk_setup_io_uring(0x101f, &(0x7f0000000000)={0x0, 0xc42a, 0x10000, 0x1, 0x19}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000001640)) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_targets\x00') readv(r2, &(0x7f0000000180)=[{&(0x7f0000000200)=""/193, 0xc1}], 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r3 = eventfd2(0x8, 0x400) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001680)='./debug\x00', &(0x7f00000016c0)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./debug/split_huge_pages\x00', 0x1, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000001740)='test_file\x00', 0x42, 0x1ff) write(r5, &(0x7f0000001780), 0x2000000) (async) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f00000018c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000003100)=""/4112, 0x1010}, {&(0x7f0000004140)=""/105, 0x69}, {&(0x7f00000041c0)=""/42, 0x2a}, {&(0x7f0000004200)=""/95, 0x5f}, {&(0x7f0000004280)=""/4084, 0xff4}], 0x5}, 0x8}, {{0x0, 0x0, 0x0}, 0x8000000}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x10120, 0x0) preadv(r2, &(0x7f0000000300)=[{&(0x7f0000001bc0)=""/241, 0xf1}], 0x1, 0x64, 0x4000000) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000001780)={0x4, 0x0, 0x200000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000500)={0x0, 0xffff, 0x0, 0x0, r0}) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x80000000, 0x2000001, 0x8012, r1, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001840), 0xffffffffffffffff) sendmmsg$unix(r2, &(0x7f0000002c40)=[{{&(0x7f0000001980)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001a00)="256d8537903de926abd75fbaf26036d9f3b87b2dbc375b24dfb673d0401e182c7be356eafdae476450ec57b9ff7ab3207bbd755ca5ad48982cd37158a1be4c7caa9291361f282cdf49e0697c4be236b6a82f5893df0073c66ae16618b136627615234895cabb370615257b62137bfafdf3be0994f9", 0x75}, {&(0x7f0000001a80)="5abcbb2398afe00110b8e98f7aa6911213c1dbd6bf414d572bf7957a7d8cfdde3a7f2dced31fd7fd27597007d8409536aad7472e6bc4d355244391f04c2407bdf6f8bc44c65c4a95eac2c27ed6f9956453f003db09adc835ee71f4c5659f24f25b89386ec0152e5476f935a721bee1b0fe1b1dada1eaa990097a2b8d36652e2e5b2d15b6e725d3cae7453c463963a930fbb00ec40f2c2d801bd074f7e3d1c52e51d26afe306961b6b267e1124c59d0d1ae3ed4f7308475a1229c80f11999ba88dcf46759a71cd306fe192e525e3db474d42330405ded8d11f765dde0ae0d3e59191eb0bc9d", 0xe5}], 0x2, &(0x7f0000002d40)=ANY=[@ANYBLOB="1c00ea00000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r5, @ANYRESHEX=r3, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="dba42e52bf9d2824cb055e7b1fe67f55f20fa3b10b66c0b2166926097d294c3c7cc006cced9b9b63974ceff4873fa8c7f1324c1f41c4120005e6d247cda10a3d383abbad197baa80b3c98da7a34a4e0378965f3d20795f91ac03d69a86acdcd1ec0e8c1ac838f2f1c4e0ddfbe31396df142516a923b830ba2be64390acd639d46c0886a8853cfbbdf9b1f1a9b31e8f34f74e799263680da19b99671869b8ccfbe3ebd60c3e14e9fb655229678921e0369c9516f4", @ANYRES32=r5, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a102788da3a61bb305172fb86fbac7cf38a081679b465594df6911f45366e064e40e09fdb85431d27d7335369dfd3eccf6446deb9cdbe4c408271caa18bbe56654ed6f4961ea63a7c99a8bd14a7a71e5b736d491a7f1f860f4c22151df11a4895d356ddaffcc5b9dc25758"], 0x70}}, {{&(0x7f0000001f00)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000025c0)=[{&(0x7f0000001f80)="41ad9c9330ce939a379c40b585581a83b9814f427a7990b3f5cbc6919f683ff60415f0f195ffb9de0defddea72ff63b37f7c9c6d1e9833e93179d9a31cd383526e6f206336141579881222a93df6c3833519069b658b0246629a746ecfaa", 0x5e}, {&(0x7f0000002000)="dd13548c215ba58572a923bdc2f1b03280083408eff9df7e7b62cdc1c4112a3c0fa0388ba5ca9aa62308a4af56480914319287a4559d967d231de0b5fe4a6d935f9a0e8b4b8ee1a13fadacb11e2b8426d7800da00c66682e81c8b69a1bbdc82ac2d62f771d26cce449d285dd6668aed5ef07ab", 0x73}, {&(0x7f0000002080)="4ffbb41cda26c59dff784b3dbdd732a396970f5a9a8d5bfda24f13a17e39c512d5d2fd21a6811e3a7954fd47bacc264495a2ccbb53778fa334577754bd51127e92b5", 0x42}, {&(0x7f0000002100)="9f2ee923fee50e86a7a9a7ece10a82aeb67232273b405b29553e2fb58f1cb4ed16a0807f84f474803fe4c684bb9b77090c7e8a36b94f816dbc07e5c4b85d0a522db397e520b50a1f352013df3bc9f31b8ba3b050a5a130719141962fc9b5b306114bd3e8150f61b742464912fd2e38ff77207a051de20e5929257769ec0f42e63bb7a80b25b3e8d5259bccdf52ec791312c6b4b224423e73d005fd8f31243e2221b7be1a563bb7432636aa794eaf6056111c2773d5834d0833a7e2e4bcd8c2c658d15752ab91d825423658eb09c8ed2027a099f2058d8569665e172720aa1098c4", 0xe1}, {&(0x7f0000001d40)="93e20d1cd28e31b8c8c957ef0c1f5167d505e867025e8c6199558b4abefe0b22342aebbec9f635ea8023b63c297a63a2706f97396b4747f902b53a93166e00834ae4808bd7d72029fb2cf009f2a2828a01d92176d279fd5ad14efdd959cadccce355e3b23b50a11d61f8138fab473651676ff78499c6d309aa015b9283ca9ab4669593c5704b20a41fa7a0250674fe5265b27d804f75307a8cd7d155d2fa73e8743d45446d3f9eff7c0eb97fdcfe3bdd242b4e4e6127e12e79c65a49bd645328903797cb952baa8202da47fce51268f09b5f70bf331f1628f5b07c221a2346648275bcd8adfe428807c57d72", 0xec}, {&(0x7f0000002300)="6c843d187d7bdfcdd60e26a9a31f710e2c519f9b10b5f43fb967cd57c2b6f085efc313efae2939f66039917ff10ac9e87b29ac346084292b71aa6bda69b026ace0113cd5a0be0b45309e9cfedc01c67adbeeae2d6e6c0ededf095c50c8ef14105096eb63b951e9adf2271dd372272d1bd7884894ee9d160ea0278da17468fdfe3443371335c4b9e25772abdab3be946b353676f59f2d41b2b4132cb01205b6f1d6f5c2bfe804a000afc0d394b7c587f38246da33bc6416faec1603e0ded45d302c38f6ab024b5303575d8661e63274e45b932f4b836e75071df86c", 0xdb}, {&(0x7f0000002400)="6eb5f9c9c0a9280c2c5b7437b5e15847b8fb7e00fd16b2067c3214562daff3439428634690cee6fd24682f984aacb82ac5ac001f6c133e1847be1fc2883abc6ad324326f90126b15b28371dda6ef787a750bdc2b7b5616e5d3b2440f9ae7910d323dbdff76b46807670de7496d31323a08795772e96217d617f64ff98cbd257d9bb97f68731893cc8336fe8a19f515c9b900a333a408354883a275bb7e0de0917895f1dc70b0974d2977a8f5b3d85f72741f335e2ff6dc2bfaa4637b28e7032d2136dca5ceaf61e6753ab46a4ec0c78006393cba754e96bf24cafcdcb1dd87594811f55c685105356271cc3b13", 0xed}, {&(0x7f0000002500)="b12913821ba9e753ed71645070160c2e69c54ccb8bb4e44a417eb11e54ff66b087231b8e5c861a742dd07a1bd7dbe8cd450b61317d7d662837f7beeb288382eeb67d9da18cd53c259c24e43d51ca89b766a3d12c6dba7465fa7638e61cd2f820bdfbb46a065ba897c034864c25a2d58be366a63b9b3b8a35fbfba7f58cbd02b45496bf33bb4f62674aef15adc6e04fd31674fd958a66ddf6a3ed0576a32fdd978bc80b1e0384cd87", 0xa8}], 0x8, 0x0, 0x0, 0x4000081}}, {{&(0x7f0000002640)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002880)=[{&(0x7f0000000400)="9a2213d01c88861f54316f33d0b4e81950f3d96c22f270a8fc258bd23c1b70c5554411ba16b0db9157d0271d2f9f806d17f11aaf2404b5741f993ef056ee1b4403995adc874536a7e56d4a96516ea13645e3102a23d4a09a9efcc2c12ae125fcf691decf66051ca25d19dd4e448aba74dd914db08ea070c1", 0x78}, {&(0x7f0000002740)="643ae27d2386aaff9629341d53f8240dc2cb0658df1ee3b5944d8e218f29f3816b9f38fcfd9cc1370077f128e96d176fa5c802bf67d5b6c575132f", 0x3b}, {&(0x7f0000002780)="66a4524e4207681052d5a4800097ddb8dd5001a14c86cf798860597f0a157f179369a8c97f25b5c3af8eb05f9ab0bbbd379b316f9a7f0b7d1a43bb595721102bd43f0e3837042184f276eecc7e4ae737f335517ad89bce60e48f45035791ff77c7", 0x61}, {&(0x7f0000000480)="a6ccdfc024cebd9f838483276598a365099fa6c3df5e06d0e069db358a742f53782222e3d370278fb57d4a65fc0aee88a31893ecf84c323cfaba56da439d40727c684599c00cf82e51f5d7", 0x4b}], 0x4, 0x0, 0x0, 0x8000010}}, {{&(0x7f00000028c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002bc0)=[{&(0x7f0000000340)="bb8c696f44eef05f209f05af09083265d13d34e10e018e44f181ab6666c3e98dc2b45c3b", 0x24}, {&(0x7f0000002980)="36c4a52eb2478af04522fb2da395a46c504317164b2e99e892e421b97779", 0x1e}, {&(0x7f0000002200)="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", 0xfb}, {&(0x7f0000002ac0)="35ba00d2b7860df7ec23f71e03369a9e0be8c780b0058d9ac910a6f846cef1dd2c20561127e0d332f051bbf34d069b900b9371cf2010550f72e43b6d5faef98f20cdf8bdcf1e6c9bee5bbabebc9fd643529d1dff34875f8abef76c51d13ab19c1344662a7aaa56859966b41b01d5f70e6973e7", 0x73}, {&(0x7f0000002f00)="f1cc832a77d8b6f0f893f5884a1a8cd3e65ae7defae6fe65e43bf974d8db5e8a2067653f14f19700664b2377498a1d705487b3be177c976546ccc04cc290d6a21cc313c23aafb75657d995657c205795a57c102d4272f1dcee867ea1897a50da4355690d9a8d09c9710e63679abeb294010619f13d9dda104c288680c9cf5cd1d56ed27c6158ba85013966eab84789b93128ac7724cdf1dc07fe9cbc9147a0d24db1c9864175533f81293c64fc3ab1c0961c75ef4b4bd029b3844116e6c8ed98a051dbe881c74bb03acd1ae8a27d86b1238da012e2241b665f4fe0366164f75730777aabeb183e34734e669b020000000000000063dddf65a4d5e157e71b859a4521038b0efad821c7c37b2dd8bce9acdf6372f3f1230000000000000000eab56fed0ca82ec3fa80926b3c803281772300fdb61442779ab41b3e07e7c1924107546cc4597c320baadadb030adef680bf3317ec62fba849651ffbf1b7315aeaa8993524a9b0599f4894b55d697b583efa8aeb6bdddd60625fd9fa132f5638bc0ef69a1b1f7a0fbad1e960e14e54832b723e6088ea3b07724a476302373c9b01148afc73ab8f5b4d205b004ce0a1a69427d830501b70426e27b047d203f43d9f213a5c02091b28b2de81329e1311d9c300db641efe6d3cc98ef64876e1c3e23bf005046f5fd7b6f186", 0x1e8}], 0x5, 0x0, 0x0, 0x4000}}], 0x4, 0x4000000) (async) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)=ANY=[@ANYRES16=r7, @ANYRES64=r1, @ANYRESOCT=r5], 0x48}, 0x1, 0x0, 0x0, 0x20000804}, 0x810) (async) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000001600)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) 611.303477ms ago: executing program 1 (id=2865): mkdirat(0xffffffffffffff9c, &(0x7f0000007600)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000007640)='./config\x00', &(0x7f0000007680)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000076c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000007700)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000007740)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) symlinkat(&(0x7f0000007780)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f00000077c0)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000007800)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0x4f8, '\x00'/1272}, &(0x7f0000000540)=0x520) unlinkat(0xffffffffffffff9c, &(0x7f0000007880)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00', 0x0) 609.992627ms ago: executing program 1 (id=2866): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x36, 0x31, 0x30, 0x37, 0x30, 0x31]}, &(0x7f00000006c0)={0x0, "00112233444566778899aabbccddeeff00112233445566778899aabbccddeeff0011fb2fa087e1a5a490aabbccddeeff001122334455667788d9aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000740), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f00000007c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f00000008c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x38}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000940), &(0x7f0000000980)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f00000009c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000b40), &(0x7f0000000b80)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000bc0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000c40), &(0x7f0000000c80)={'fscrypt:', @auto=[0x30, 0x35, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000cc0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000d40), &(0x7f0000000d80)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x38]}, &(0x7f0000000dc0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000e40), &(0x7f0000000e80)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x65]}, &(0x7f0000000ec0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff03002233445566778899aabbccddfeff00112233445566779f99aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "27f4a0e9801533b8189e75d4d1be03c15e703980d66c8f82b3a0ef4d9cc0b839992bbddea305016833999e53e2e88169ebce37a2ba617745178a548d9480a90e", 0x2c}, 0x48, r0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000f40), &(0x7f0000000f80)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000fc0)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001040), &(0x7f0000001080)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x33, 0x62]}, &(0x7f00000010c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001140), &(0x7f0000001180)={'fscrypt:', @desc2}, &(0x7f00000011c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001240), &(0x7f0000001280)={'fscrypt:', @auto=[0x30, 0x61, 0x67, 0x37, 0x32, 0x30, 0x66, 0x30, 0x32, 0x30, 0x32, 0x65, 0x35, 0x37, 0x30, 0x36]}, &(0x7f00000000c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001340), &(0x7f0000001380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x63, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x62, 0xf]}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000001440), &(0x7f0000001480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000014c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001540), &(0x7f0000001580)={'fscrypt:', @desc1}, &(0x7f00000015c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000001640), &(0x7f0000001680)={'syz', 0x2}, &(0x7f00000016c0)='c', 0x1, r0) 581.71758ms ago: executing program 1 (id=2867): getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x4) 515.049927ms ago: executing program 3 (id=2868): r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/sda\x00', 0x1c5e42, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000740)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 514.850697ms ago: executing program 1 (id=2869): mkdirat(0xffffffffffffff9c, &(0x7f0000007600)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000007640)='./config\x00', &(0x7f0000007680)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000076c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000007700)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000007740)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) symlinkat(&(0x7f0000007780)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f00000077c0)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000007800)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0x4f8, '\x00'/1272}, &(0x7f0000000540)=0x520) write(r0, &(0x7f0000007840)='dummy_udc.0', 0xb) 513.761517ms ago: executing program 1 (id=2870): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) write(r0, &(0x7f0000000100)='0', 0x1) 338.540365ms ago: executing program 1 (id=2871): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bb8, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x2b}, 0xa, @in=@broadcast}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x4000}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x9}, 0x4040000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000200)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8dbffa4dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYRES8=r2], 0x0) syz_open_dev$evdev(&(0x7f0000000700), 0x4, 0x80200) 252.731454ms ago: executing program 3 (id=2872): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[], 0x54}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000480)={'nat\x00', 0x2, [{}, {}]}, 0x48) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r3 = syz_genetlink_get_family_id$tipc(0x0, r0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1c, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20004004) r4 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r4, &(0x7f00000001c0)={&(0x7f0000000240)={0xa, 0x2, 0x9, @empty, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="14000000000000002900000a08000000000000000000f400480000000000000029000000370000000106000000000000c910fc000800000000000000000000000000010100c2040000000906010fc91000000000000000000000ffff0a010102873796c2bb6a6bfc7698e60af3254167468f973944e49b21"], 0x60}, 0x20040810) 190.95866ms ago: executing program 3 (id=2873): madvise(&(0x7f00002c5000/0x2000)=nil, 0x2000, 0xf) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000040)="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", 0x1d8, 0xfffffffffffffffe) write(r0, &(0x7f0000000380)='0', 0x1) 0s ago: executing program 3 (id=2874): mkdirat(0xffffffffffffff9c, &(0x7f0000007600)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000007640)='./config\x00', &(0x7f0000007680)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000076c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000007700)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000007740)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) symlinkat(&(0x7f0000007780)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f00000077c0)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000007800)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0x4f8, '\x00'/1272}, &(0x7f0000000540)=0x520) unlinkat(0xffffffffffffff9c, &(0x7f0000007880)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00', 0x0) kernel console output (not intermixed with test programs): 6762] device_add_attrs+0x1b2/0x850 [ 253.466448][ T6762] ? device_add_class_symlinks+0x260/0x260 [ 253.466463][ T6762] ? __kasan_check_write+0x18/0x20 [ 253.466480][ T6762] ? kobject_put+0x1cc/0x2a0 [ 253.466493][ T6762] ? device_add_class_symlinks+0x22e/0x260 [ 253.466508][ T6762] device_add+0x4db/0xbf0 [ 253.466523][ T6762] netdev_register_kobject+0x196/0x330 [ 253.466589][ T6762] register_netdevice+0x1042/0x1a80 [ 253.466632][ T6762] ? __kmalloc_cache_noprof+0x23c/0x470 [ 253.466651][ T6762] ? __cfi_register_netdevice+0x10/0x10 [ 253.466664][ T6762] tun_set_iff+0x828/0xec0 [ 253.466708][ T6762] __tun_chr_ioctl+0x852/0x1fb0 [ 253.466725][ T6762] ? tun_flow_create+0x400/0x400 [ 253.466743][ T6762] ? __fget_files+0x2bc/0x330 [ 253.466782][ T6762] tun_chr_ioctl+0x2e/0x40 [ 253.466797][ T6762] ? __cfi_tun_chr_ioctl+0x10/0x10 [ 253.466812][ T6762] __se_sys_ioctl+0x123/0x1b0 [ 253.466826][ T6762] __x64_sys_ioctl+0x7f/0xa0 [ 253.466838][ T6762] x64_sys_call+0x1878/0x2ee0 [ 253.466852][ T6762] do_syscall_64+0x57/0xf0 [ 253.466865][ T6762] ? clear_bhb_loop+0x50/0xa0 [ 253.466883][ T6762] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 253.466900][ T6762] RIP: 0033:0x7f57a0f9fb19 [ 253.466914][ T6762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.466925][ T6762] RSP: 002b:00007f57a1dd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.466941][ T6762] RAX: ffffffffffffffda RBX: 00007f57a1225fa0 RCX: 00007f57a0f9fb19 [ 253.466950][ T6762] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000008 [ 253.466959][ T6762] RBP: 00007f57a1037b70 R08: 0000000000000000 R09: 0000000000000000 [ 253.466967][ T6762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.466976][ T6762] R13: 00007f57a1226038 R14: 00007f57a1225fa0 R15: 00007ffc16fe36f8 [ 253.466986][ T6762] [ 253.471050][ T6765] tipc: Enabled bearer , priority 10 [ 253.904225][ T6764] tipc: Resetting bearer [ 253.912968][ T6764] tipc: Disabling bearer [ 253.932326][ T6777] overlayfs: failed to resolve 'ork': -2 [ 253.948335][ T6780] incfs: Options parsing error. -22 [ 253.954707][ T6780] incfs: mount failed -22 [ 253.973112][ T312] rust_binder: 6781: undelivered TRANSACTION_COMPLETE [ 253.976644][ T6784] tipc: Enabled bearer , priority 10 [ 253.992989][ T6783] tipc: Disabling bearer [ 254.001301][ T312] rust_binder: 6781: undelivered transaction 406, process died [ 254.137672][ T312] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 254.146798][ T6787] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2189'. [ 254.318699][ T312] usb 2-1: Using ep0 maxpacket: 8 [ 254.328976][ T312] usb 2-1: unable to get BOS descriptor or descriptor too short [ 254.341570][ T312] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.358233][ T312] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 254.380550][ T312] usb 2-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 254.391600][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.403498][ T312] usb 2-1: Product: syz [ 254.410752][ T312] usb 2-1: Manufacturer: syz [ 254.419628][ T312] usb 2-1: SerialNumber: syz [ 254.638314][ T312] usb 2-1: unknown interface protocol 0xc5, assuming v1 [ 254.647511][ T312] usb 2-1: cannot find UAC_HEADER [ 254.661256][ T312] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 254.673872][ T312] usb 2-1: USB disconnect, device number 87 [ 254.679763][ T1414] udevd[1414]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 254.925139][ T6803] overlayfs: failed to resolve 'w': -2 [ 254.977145][ T6809] tipc: Enabled bearer , priority 10 [ 254.985763][ T6808] tipc: Resetting bearer [ 254.994533][ T6808] tipc: Disabling bearer [ 255.022222][ T2147] rust_binder: 6810: undelivered TRANSACTION_COMPLETE [ 255.030996][ T312] rust_binder: 6810: undelivered transaction 410, process died [ 255.062438][ T6815] tipc: Enabled bearer , priority 10 [ 255.071348][ T6814] tipc: Disabling bearer [ 255.097592][ T6816] overlayfs: failed to resolve './bus': -2 [ 255.247137][ T6826] overlayfs: failed to resolve 'w/rk': -2 [ 255.406641][ T6827] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.420602][ T6827] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.437899][ T6827] bridge_slave_0: entered allmulticast mode [ 255.453590][ T6827] bridge_slave_0: entered promiscuous mode [ 255.462410][ T6827] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.468822][ T468] rust_binder: 6867: undelivered TRANSACTION_COMPLETE [ 255.494623][ T6827] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.497444][ T468] rust_binder: 6867: undelivered transaction 414, process died [ 255.510526][ T6827] bridge_slave_1: entered allmulticast mode [ 255.526599][ T6827] bridge_slave_1: entered promiscuous mode [ 255.585015][ T6829] FAULT_INJECTION: forcing a failure. [ 255.585015][ T6829] name failslab, interval 1, probability 0, space 0, times 0 [ 255.600623][ T6827] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.606464][ T6829] CPU: 1 UID: 0 PID: 6829 Comm: syz.1.2206 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 255.606496][ T6829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 255.606509][ T6829] Call Trace: [ 255.606516][ T6829] [ 255.606524][ T6829] __dump_stack+0x21/0x30 [ 255.606551][ T6829] dump_stack_lvl+0x140/0x1c0 [ 255.606579][ T6829] ? __cfi_dump_stack_lvl+0x10/0x10 [ 255.606600][ T6829] dump_stack+0x19/0x20 [ 255.606618][ T6829] should_fail_ex+0x3c2/0x510 [ 255.606648][ T6829] should_failslab+0xac/0x100 [ 255.606670][ T6829] kmem_cache_alloc_noprof+0x42/0x410 [ 255.606698][ T6829] ? __kvm_mmu_topup_memory_cache+0x1dd/0x7e0 [ 255.606720][ T6829] __kvm_mmu_topup_memory_cache+0x1dd/0x7e0 [ 255.606742][ T6829] kvm_mmu_topup_memory_cache+0x24/0x30 [ 255.606762][ T6829] kvm_mmu_load+0xa1/0x2900 [ 255.606869][ T6829] ? __kasan_check_read+0x15/0x20 [ 255.606898][ T6829] ? kvm_lapic_sync_to_vapic+0x2ab/0x880 [ 255.606970][ T6829] ? __cfi_kvm_lapic_sync_to_vapic+0x10/0x10 [ 255.607000][ T6829] vcpu_run+0x4d56/0x7810 [ 255.607029][ T6829] ? kvm_sched_clock_read+0x15/0x30 [ 255.607066][ T6829] ? signal_pending+0xc0/0xc0 [ 255.607093][ T6829] ? __kasan_check_write+0x18/0x20 [ 255.607120][ T6829] ? xfd_validate_state+0x68/0x140 [ 255.607158][ T6829] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 255.607182][ T6829] ? __kasan_check_write+0x18/0x20 [ 255.607207][ T6829] ? fpregs_mark_activate+0x68/0x160 [ 255.607231][ T6829] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 255.607254][ T6829] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 255.607278][ T6829] kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0 [ 255.607305][ T6829] ? try_to_wake_up+0x1052/0x1d10 [ 255.607356][ T6829] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 255.607384][ T6829] ? __cfi_try_to_wake_up+0x10/0x10 [ 255.607407][ T6829] ? plist_del+0x3f0/0x410 [ 255.607428][ T6829] ? ioctl_has_perm+0x1bc/0x500 [ 255.607479][ T6829] ? __asan_memcpy+0x5a/0x80 [ 255.607506][ T6829] ? ioctl_has_perm+0x408/0x500 [ 255.607533][ T6829] ? has_cap_mac_admin+0xd0/0xd0 [ 255.607568][ T6829] ? __kasan_check_write+0x18/0x20 [ 255.607595][ T6829] ? mutex_lock_killable+0x97/0x1d0 [ 255.607619][ T6829] ? __cfi_mutex_lock_killable+0x10/0x10 [ 255.607645][ T6829] kvm_vcpu_ioctl+0xa43/0x1000 [ 255.607665][ T6829] ? kobject_uevent_net_broadcast+0x49d/0x5e0 [ 255.607689][ T6829] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 255.607709][ T6829] ? hook_file_ioctl+0x1ef/0x590 [ 255.607783][ T6829] ? kvm_uevent_notify_change+0x4f6/0x560 [ 255.607803][ T6829] ? __cfi_hook_file_ioctl+0x10/0x10 [ 255.607828][ T6829] ? __cfi_do_futex+0x10/0x10 [ 255.607850][ T6829] ? fd_install+0x246/0x400 [ 255.607872][ T6829] ? __fget_files+0x2bc/0x330 [ 255.607893][ T6829] ? bpf_lsm_file_ioctl+0xd/0x20 [ 255.607914][ T6829] ? security_file_ioctl+0x3e/0x110 [ 255.607942][ T6829] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 255.607964][ T6829] __se_sys_ioctl+0x123/0x1b0 [ 255.607986][ T6829] __x64_sys_ioctl+0x7f/0xa0 [ 255.608006][ T6829] x64_sys_call+0x1878/0x2ee0 [ 255.608028][ T6829] do_syscall_64+0x57/0xf0 [ 255.608047][ T6829] ? clear_bhb_loop+0x50/0xa0 [ 255.608073][ T6829] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 255.608098][ T6829] RIP: 0033:0x7f57a0f9fb19 [ 255.608116][ T6829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.608134][ T6829] RSP: 002b:00007f57a1dd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 255.608156][ T6829] RAX: ffffffffffffffda RBX: 00007f57a1225fa0 RCX: 00007f57a0f9fb19 [ 255.608172][ T6829] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 255.608185][ T6829] RBP: 00007f57a1037b70 R08: 0000000000000000 R09: 0000000000000000 [ 255.608198][ T6829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.608211][ T6829] R13: 00007f57a1226038 R14: 00007f57a1225fa0 R15: 00007ffc16fe36f8 [ 255.608228][ T6829] [ 256.061413][ T6827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.070184][ T6827] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.072100][ T36] audit: type=1400 audit(1700000215.819:510): avc: denied { map } for pid=6882 comm="syz.4.2209" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 256.078643][ T6827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.117191][ T6827] veth0_vlan: entered promiscuous mode [ 256.136232][ T6827] veth1_macvtap: entered promiscuous mode [ 256.181495][ T6890] tipc: Started in network mode [ 256.187472][ T6890] tipc: Node identity aa80ea207061, cluster identity 4711 [ 256.196209][ T6890] tipc: Enabled bearer , priority 10 [ 256.204859][ T6889] tipc: Resetting bearer [ 256.211834][ T2147] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 256.221458][ T6889] tipc: Disabling bearer [ 256.240565][ T6892] tipc: Enabled bearer , priority 10 [ 256.249606][ T6891] tipc: Disabling bearer [ 256.357637][ T6901] netlink: 'syz.1.2215': attribute type 6 has an invalid length. [ 256.369500][ T2147] usb 4-1: Using ep0 maxpacket: 32 [ 256.377988][ T2147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.391309][ T2147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.403496][ T2147] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 256.414810][ T2147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.425998][ T2147] usb 4-1: config 0 descriptor?? [ 256.435575][ T6902] kvm: emulating exchange as write [ 256.442993][ T2147] hub 4-1:0.0: USB hub found [ 256.542228][ T6906] overlayfs: failed to resolve 'w:rk': -2 [ 256.562105][ T9] rust_binder: 6907: undelivered TRANSACTION_COMPLETE [ 256.574241][ T312] rust_binder: 6907: undelivered transaction 418, process died [ 256.606829][ T6914] tipc: Enabled bearer , priority 10 [ 256.615369][ T6913] tipc: Resetting bearer [ 256.624912][ T6913] tipc: Disabling bearer [ 256.634505][ T2147] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 256.637535][ T6916] tipc: Enabled bearer , priority 10 [ 256.655266][ T6915] tipc: Disabling bearer [ 256.855524][ T6934] overlayfs: failed to resolve 'wrk': -2 [ 256.874123][ T312] rust_binder: 6935: undelivered TRANSACTION_COMPLETE [ 256.883242][ T64] rust_binder: 6935: undelivered transaction 422, process died [ 256.900518][ T2147] hid-generic 0003:046D:C31C.0027: unknown main item tag 0x0 [ 256.913173][ T2147] hid-generic 0003:046D:C31C.0027: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 256.930063][ T9] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 256.945742][ T6946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.956329][ T6946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.062886][ T9] usb 2-1: device descriptor read/64, error -71 [ 257.216391][ T6948] tipc: Enabled bearer , priority 10 [ 257.225080][ T6947] tipc: Resetting bearer [ 257.232784][ T6947] tipc: Disabling bearer [ 257.284234][ T64] usb 4-1: USB disconnect, device number 90 [ 257.333258][ T9] usb 2-1: device descriptor read/64, error -71 [ 257.585351][ T9] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 257.677156][ T6967] bridge0: port 3(gretap0) entered blocking state [ 257.684991][ T6967] bridge0: port 3(gretap0) entered disabled state [ 257.692879][ T6967] gretap0: entered allmulticast mode [ 257.699646][ T6967] gretap0: entered promiscuous mode [ 257.706179][ T6967] bridge0: port 3(gretap0) entered blocking state [ 257.713929][ T6967] bridge0: port 3(gretap0) entered forwarding state [ 257.726003][ T9] usb 2-1: device descriptor read/64, error -71 [ 257.744572][ T6971] overlayfs: failed to resolve 'wo/k': -2 [ 257.762757][ T2147] rust_binder: 6972: undelivered TRANSACTION_COMPLETE [ 257.771918][ T31] rust_binder: 6972: undelivered transaction 426, process died [ 257.800897][ T36] audit: type=1400 audit(1700000217.540:511): avc: denied { bind } for pid=6976 comm="syz.3.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 257.801448][ T6977] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2239'. [ 257.837817][ T6977] veth2: entered allmulticast mode [ 257.967081][ T9] usb 2-1: device descriptor read/64, error -71 [ 258.077644][ T9] usb usb2-port1: attempt power cycle [ 258.087976][ T31] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 258.248923][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 258.253975][ T6980] tipc: Enabled bearer , priority 10 [ 258.256346][ T31] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 258.276270][ T6979] tipc: Resetting bearer [ 258.277811][ T31] usb 4-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 258.294290][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.304767][ T6979] tipc: Disabling bearer [ 258.304965][ T31] usb 4-1: Product: syz [ 258.316729][ T31] usb 4-1: Manufacturer: syz [ 258.322449][ T31] usb 4-1: SerialNumber: syz [ 258.418985][ T9] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 258.431846][ T6984] bridge0: port 3(syz_tun) entered blocking state [ 258.439645][ T6984] bridge0: port 3(syz_tun) entered disabled state [ 258.447403][ T6984] syz_tun: entered allmulticast mode [ 258.454562][ T6984] syz_tun: entered promiscuous mode [ 258.455207][ T9] usb 2-1: device descriptor read/8, error -71 [ 258.461241][ T6984] bridge0: port 3(syz_tun) entered blocking state [ 258.476106][ T6984] bridge0: port 3(syz_tun) entered forwarding state [ 258.515255][ T6994] overlayfs: failed to resolve 'wo:k': -2 [ 258.546425][ T31] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 258.560226][ T31] usb 4-1: USB disconnect, device number 91 [ 258.574634][ T6999] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2248'. [ 258.590802][ T9] usb 2-1: device descriptor read/8, error -71 [ 258.655252][ T7006] futex_wake_op: syz.4.2251 tries to shift op by 144; fix this program [ 258.697666][ T36] audit: type=1400 audit(1700000218.426:512): avc: denied { read } for pid=7007 comm="syz.4.2252" name="state" dev="binder" ino=1048664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 258.743046][ T36] audit: type=1400 audit(1700000218.426:513): avc: denied { open } for pid=7007 comm="syz.4.2252" path="/dev/binderfs/binder_logs/state" dev="binder" ino=1048664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 258.860870][ T9] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 258.892166][ T9] usb 2-1: device descriptor read/8, error -71 [ 258.991395][ T64] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 259.022598][ T9] usb 2-1: device descriptor read/8, error -71 [ 259.132033][ T64] usb 7-1: device descriptor read/64, error -71 [ 259.139775][ T9] usb usb2-port1: unable to enumerate USB device [ 259.366876][ T2147] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 259.393094][ T64] usb 7-1: device descriptor read/64, error -71 [ 259.534918][ T2147] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.548695][ T2147] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 259.559649][ T2147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.569499][ T2147] usb 4-1: Product: syz [ 259.574805][ T2147] usb 4-1: Manufacturer: syz [ 259.580337][ T2147] usb 4-1: SerialNumber: syz [ 259.644048][ T64] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 259.734128][ T312] rust_binder: 7018: undelivered TRANSACTION_COMPLETE [ 259.750505][ T312] rust_binder: 7018: undelivered transaction 430, process died [ 259.784613][ T64] usb 7-1: device descriptor read/64, error -71 [ 260.025594][ T64] usb 7-1: device descriptor read/64, error -71 [ 260.118644][ T750] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 260.136324][ T64] usb usb7-port1: attempt power cycle [ 260.276567][ T750] usb 2-1: Using ep0 maxpacket: 32 [ 260.284107][ T750] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 260.296611][ T750] usb 2-1: config 0 has no interface number 0 [ 260.308628][ T750] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 260.319666][ T750] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.329351][ T750] usb 2-1: Product: syz [ 260.337525][ T750] usb 2-1: Manufacturer: syz [ 260.343179][ T750] usb 2-1: SerialNumber: syz [ 260.353555][ T750] usb 2-1: config 0 descriptor?? [ 260.362564][ T750] smsc95xx v2.0.0 [ 260.477329][ T64] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 260.498736][ T64] usb 7-1: device descriptor read/8, error -71 [ 260.602146][ T7015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.613380][ T7015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.636245][ T64] usb 7-1: device descriptor read/8, error -71 [ 260.664108][ T2147] cdc_ncm 4-1:1.0: bind() failure [ 260.672303][ T2147] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 260.682301][ T2147] cdc_ncm 4-1:1.1: bind() failure [ 260.691145][ T2147] usb 4-1: USB disconnect, device number 92 [ 260.888851][ T64] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 260.920001][ T64] usb 7-1: device descriptor read/8, error -71 [ 261.051871][ T64] usb 7-1: device descriptor read/8, error -71 [ 261.159956][ T64] usb usb7-port1: unable to enumerate USB device [ 261.194738][ T7023] tipc: Enabled bearer , priority 10 [ 261.203606][ T7022] tipc: Resetting bearer [ 261.210258][ T750] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 261.223703][ T750] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 261.235440][ T7022] tipc: Disabling bearer [ 261.344475][ T7027] devpts: called with bogus options [ 261.351064][ T7028] devpts: called with bogus options [ 261.437542][ T7021] FAULT_INJECTION: forcing a failure. [ 261.437542][ T7021] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 261.453591][ T7021] CPU: 1 UID: 0 PID: 7021 Comm: syz.1.2258 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 261.453630][ T7021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 261.453649][ T7021] Call Trace: [ 261.453657][ T7021] [ 261.453666][ T7021] __dump_stack+0x21/0x30 [ 261.453696][ T7021] dump_stack_lvl+0x140/0x1c0 [ 261.453715][ T7021] ? __cfi_dump_stack_lvl+0x10/0x10 [ 261.453736][ T7021] ? kasan_save_track+0x4f/0x80 [ 261.453759][ T7021] ? __kmalloc_noprof+0x261/0x510 [ 261.453791][ T7021] ? splice_direct_to_actor+0x40e/0xbf0 [ 261.453923][ T7021] ? do_splice_direct+0x196/0x290 [ 261.453948][ T7021] ? do_sendfile+0x511/0xed0 [ 261.453972][ T7021] ? x64_sys_call+0xa26/0x2ee0 [ 261.453996][ T7021] dump_stack+0x19/0x20 [ 261.454014][ T7021] should_fail_ex+0x3c2/0x510 [ 261.454046][ T7021] should_fail_alloc_page+0xec/0x110 [ 261.454070][ T7021] __alloc_pages_noprof+0x1c0/0x7e0 [ 261.454098][ T7021] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 261.454127][ T7021] alloc_pages_bulk_noprof+0x3b8/0x880 [ 261.454155][ T7021] ? copy_splice_read+0x18f/0xca0 [ 261.454179][ T7021] copy_splice_read+0x1c7/0xca0 [ 261.454202][ T7021] ? __cfi_pipe_to_null+0x10/0x10 [ 261.454316][ T7021] ? __cfi_splice_from_pipe+0x10/0x10 [ 261.454343][ T7021] ? __cfi_copy_splice_read+0x10/0x10 [ 261.454367][ T7021] ? __kmalloc_noprof+0x261/0x510 [ 261.454400][ T7021] ? __cfi_splice_write_null+0x10/0x10 [ 261.454425][ T7021] ? direct_splice_actor+0x384/0x4b0 [ 261.454450][ T7021] ? __cfi_copy_splice_read+0x10/0x10 [ 261.454473][ T7021] splice_direct_to_actor+0x40e/0xbf0 [ 261.454510][ T7021] ? __cfi_direct_splice_actor+0x10/0x10 [ 261.454535][ T7021] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 261.454561][ T7021] do_splice_direct+0x196/0x290 [ 261.454583][ T7021] ? __cfi_do_splice_direct+0x10/0x10 [ 261.454607][ T7021] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 261.454633][ T7021] ? security_file_permission+0x38/0xf0 [ 261.454665][ T7021] ? rw_verify_area+0xac/0x230 [ 261.454695][ T7021] do_sendfile+0x511/0xed0 [ 261.454720][ T7021] ? vfs_writev+0xe90/0xe90 [ 261.454744][ T7021] ? __se_sys_futex+0x13c/0x320 [ 261.454769][ T7021] __x64_sys_sendfile64+0x19d/0x200 [ 261.454794][ T7021] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 261.454818][ T7021] ? switch_fpu_return+0x12/0x20 [ 261.454846][ T7021] x64_sys_call+0xa26/0x2ee0 [ 261.454869][ T7021] do_syscall_64+0x57/0xf0 [ 261.454891][ T7021] ? clear_bhb_loop+0x50/0xa0 [ 261.454920][ T7021] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 261.454947][ T7021] RIP: 0033:0x7f57a0f9fb19 [ 261.454967][ T7021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.454985][ T7021] RSP: 002b:00007f57a1dd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 261.455011][ T7021] RAX: ffffffffffffffda RBX: 00007f57a1225fa0 RCX: 00007f57a0f9fb19 [ 261.455029][ T7021] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 261.455043][ T7021] RBP: 00007f57a1037b70 R08: 0000000000000000 R09: 0000000000000000 [ 261.455057][ T7021] R10: 0000000002000009 R11: 0000000000000246 R12: 0000000000000000 [ 261.455072][ T7021] R13: 00007f57a1226038 R14: 00007f57a1225fa0 R15: 00007ffc16fe36f8 [ 261.455091][ T7021] [ 261.456825][ T36] audit: type=1326 audit(1700000221.176:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.1.2258" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57a0f9fb19 code=0x0 [ 261.591378][ T2147] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 261.662147][ T750] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 261.862675][ T2147] usb 4-1: Using ep0 maxpacket: 16 [ 261.869731][ T750] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 261.879609][ T2147] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 261.939651][ T2147] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.952606][ T2147] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 261.964775][ T2147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.974897][ T2147] usb 4-1: Product: syz [ 261.975948][ T7033] overlayfs: failed to resolve 'wok': -2 [ 261.979905][ T2147] usb 4-1: Manufacturer: syz [ 261.992486][ T2147] usb 4-1: SerialNumber: syz [ 262.099637][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2264'. [ 262.110515][ T7036] netlink: 'syz.6.2264': attribute type 4 has an invalid length. [ 262.119922][ T7036] netlink: 'syz.6.2264': attribute type 4 has an invalid length. [ 262.133230][ T7036] netlink: 'syz.6.2264': attribute type 4 has an invalid length. [ 262.146031][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2264'. [ 262.158283][ T7036] netlink: 'syz.6.2264': attribute type 4 has an invalid length. [ 262.167835][ T7036] netlink: 'syz.6.2264': attribute type 4 has an invalid length. [ 262.177168][ T7036] netlink: 'syz.6.2264': attribute type 4 has an invalid length. [ 262.186784][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2264'. [ 262.197722][ T7036] netlink: 'syz.6.2264': attribute type 4 has an invalid length. [ 262.207142][ T7036] netlink: 'syz.6.2264': attribute type 4 has an invalid length. [ 262.218108][ T2147] usb 4-1: 0:2 : does not exist [ 262.225334][ T2147] usb 4-1: unit 9 not found! [ 262.226862][ T36] audit: type=1400 audit(1700000221.933:515): avc: denied { bind } for pid=7026 comm="syz.3.2261" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 262.255075][ T7036] netlink: 'syz.6.2264': attribute type 4 has an invalid length. [ 262.260754][ T2147] usb 4-1: USB disconnect, device number 93 [ 262.264447][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2264'. [ 262.282232][ T7039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=7039 comm=syz.1.2258 [ 262.298699][ T36] audit: type=1400 audit(1700000221.933:516): avc: denied { name_bind } for pid=7026 comm="syz.3.2261" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 262.323952][ T7036] netlink: 'syz.6.2264': attribute type 4 has an invalid length. [ 262.334932][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2264'. [ 262.347443][ T36] audit: type=1400 audit(1700000221.933:517): avc: denied { node_bind } for pid=7026 comm="syz.3.2261" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 262.364146][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2264'. [ 262.389119][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2264'. [ 262.400268][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2264'. [ 262.411223][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2264'. [ 262.422148][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2264'. [ 262.703219][ T750] rust_binder: 7051: undelivered TRANSACTION_COMPLETE [ 262.721540][ T750] rust_binder: 7051: undelivered transaction 434, process died [ 262.821278][ T7060] tipc: Enabled bearer , priority 10 [ 262.829912][ T7059] tipc: Resetting bearer [ 262.838283][ T7059] tipc: Disabling bearer [ 263.006134][ T64] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 263.188075][ T64] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.204829][ T64] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 263.216051][ T64] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.229260][ T64] usb 7-1: Product: syz [ 263.234327][ T64] usb 7-1: Manufacturer: syz [ 263.240134][ T64] usb 7-1: SerialNumber: syz [ 263.246996][ T421] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 263.387382][ T421] usb 4-1: device descriptor read/64, error -71 [ 263.440797][ T2147] usb 2-1: USB disconnect, device number 92 [ 263.491996][ T7079] overlayfs: failed to resolve 'wor/': -2 [ 263.638128][ T421] usb 4-1: device descriptor read/64, error -71 [ 263.888920][ T421] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 264.029405][ T421] usb 4-1: device descriptor read/64, error -71 [ 264.266988][ T64] cdc_ncm 7-1:1.0: bind() failure [ 264.276900][ T64] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 264.285165][ T421] usb 4-1: device descriptor read/64, error -71 [ 264.292816][ T64] cdc_ncm 7-1:1.1: bind() failure [ 264.303070][ T64] usb 7-1: USB disconnect, device number 6 [ 264.411158][ T421] usb usb4-port1: attempt power cycle [ 264.494008][ T7090] tipc: New replicast peer: 255.255.255.255 [ 264.501535][ T7090] tipc: Enabled bearer , priority 10 [ 264.751469][ T421] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 264.782287][ T31] rust_binder: 7096: undelivered TRANSACTION_COMPLETE [ 264.796376][ T31] rust_binder: 7096: undelivered transaction 438, process died [ 264.797412][ T421] usb 4-1: device descriptor read/8, error -71 [ 264.830826][ T7102] tipc: Enabled bearer , priority 10 [ 264.839644][ T7101] tipc: Resetting bearer [ 264.847813][ T7101] tipc: Disabling bearer [ 264.963231][ T421] usb 4-1: device descriptor read/8, error -71 [ 265.042276][ T31] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 265.101082][ T7110] overlayfs: failed to resolve 'wor,index=on': -2 [ 265.193779][ T31] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 265.212772][ T421] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 265.226623][ T31] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 265.243929][ T421] usb 4-1: device descriptor read/8, error -71 [ 265.247835][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 265.261173][ T31] usb 7-1: Product: syz [ 265.266233][ T31] usb 7-1: Manufacturer: syz [ 265.271880][ T31] usb 7-1: SerialNumber: syz [ 265.376803][ T421] usb 4-1: device descriptor read/8, error -71 [ 265.486031][ T31] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 265.504686][ T1414] udevd[1414]: setting mode of /dev/bus/usb/007/007 to 020664 failed: Read-only file system [ 265.509234][ T421] usb usb4-port1: unable to enumerate USB device [ 265.523720][ T31] usb 7-1: USB disconnect, device number 7 [ 265.525737][ T1414] udevd[1414]: setting owner of /dev/bus/usb/007/007 to uid=0, gid=7 failed: Read-only file system [ 265.544519][ T31] usblp0: removed [ 265.555988][ T1414] udevd[1414]: symlink '../bus/usb/007/007' '/dev/char/189:774.tmp-c189:774' failed: Read-only file system [ 265.574079][ T1414] udevd[1414]: symlink '../bus/usb/007/007' '/dev/char/189:774.tmp-c189:774' failed: Read-only file system [ 265.704109][ T64] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 265.865727][ T64] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.879568][ T64] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 265.890862][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.900712][ T64] usb 2-1: Product: syz [ 265.904644][ T31] tipc: Node number set to 3346487646 [ 265.905991][ T64] usb 2-1: Manufacturer: syz [ 265.919942][ T64] usb 2-1: SerialNumber: syz [ 266.029000][ T421] rust_binder: 7130: undelivered TRANSACTION_COMPLETE [ 266.043727][ T421] rust_binder: 7130: undelivered transaction 442, process died [ 266.168161][ T7135] tipc: Enabled bearer , priority 10 [ 266.176829][ T7134] tipc: Resetting bearer [ 266.185060][ T7134] tipc: Disabling bearer [ 266.280333][ T7143] overlayfs: failed to resolve 'workindex=on': -2 [ 266.326043][ T7147] bridge0: mtu less than device minimum [ 266.517742][ T750] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 266.676676][ T750] usb 7-1: Using ep0 maxpacket: 32 [ 266.685984][ T750] usb 7-1: unable to get BOS descriptor or descriptor too short [ 266.697765][ T750] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 266.709009][ T750] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.718824][ T750] usb 7-1: Product: syz [ 266.724139][ T750] usb 7-1: Manufacturer: syz [ 266.731213][ T750] usb 7-1: SerialNumber: syz [ 266.838333][ T31] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 266.938243][ T64] cdc_ncm 2-1:1.0: bind() failure [ 266.945536][ T64] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 266.957547][ T64] cdc_ncm 2-1:1.1: bind() failure [ 266.966571][ T64] usb 2-1: USB disconnect, device number 93 [ 266.978584][ T31] usb 4-1: device descriptor read/64, error -71 [ 267.218047][ T31] usb 4-1: device descriptor read/64, error -71 [ 267.458645][ T31] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 267.490765][ T311] rust_binder: 7160: undelivered TRANSACTION_COMPLETE [ 267.505580][ T311] rust_binder: 7160: undelivered transaction 446, process died [ 267.608984][ T31] usb 4-1: device descriptor read/64, error -71 [ 267.639809][ T7168] tipc: Enabled bearer , priority 10 [ 267.648529][ T7167] tipc: Resetting bearer [ 267.659144][ T7167] tipc: Disabling bearer [ 267.707688][ T7170] vxcan1: tun_chr_ioctl cmd 1074025675 [ 267.714394][ T7170] vxcan1: persist enabled [ 267.721959][ T7170] vxcan1: tun_chr_ioctl cmd 1074025678 [ 267.728605][ T7170] vxcan1: group set to 0 [ 267.734615][ T7170] overlayfs: conflicting options: metacopy=off,verity=require [ 267.757954][ T7172] overlay: Unknown parameter '.ndex' [ 267.765696][ T750] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 267.782929][ T750] usb 7-1: USB disconnect, device number 8 [ 267.796064][ T7174] __nla_validate_parse: 29 callbacks suppressed [ 267.796230][ T7174] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2320'. [ 267.849530][ T31] usb 4-1: device descriptor read/64, error -71 [ 267.959940][ T31] usb usb4-port1: attempt power cycle [ 268.121224][ T64] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 268.280560][ T64] usb 2-1: Using ep0 maxpacket: 16 [ 268.293771][ T64] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.310619][ T31] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 268.311443][ T64] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 268.335535][ T64] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 268.347620][ T64] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 268.348213][ T31] usb 4-1: device descriptor read/8, error -71 [ 268.364784][ T64] usb 2-1: New USB device found, idVendor=0499, idProduct=474b, bcdDevice= 0.40 [ 268.381377][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.415783][ T64] usb 2-1: Product: syz [ 268.430865][ T64] usb 2-1: Manufacturer: syz [ 268.436510][ T64] usb 2-1: SerialNumber: syz [ 268.502223][ T31] usb 4-1: device descriptor read/8, error -71 [ 268.743136][ T31] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 268.782714][ T31] usb 4-1: device descriptor read/8, error -71 [ 268.933091][ T31] usb 4-1: device descriptor read/8, error -71 [ 269.042361][ T31] usb usb4-port1: unable to enumerate USB device [ 269.402685][ T7193] validate_nla: 90 callbacks suppressed [ 269.402815][ T7193] netlink: 'syz.6.2326': attribute type 9 has an invalid length. [ 269.635804][ T750] rust_binder: 7194: undelivered TRANSACTION_COMPLETE [ 269.650314][ T421] rust_binder: 7194: undelivered transaction 450, process died [ 269.663872][ T7197] 8021q: VLANs not supported on ip_vti0 [ 269.683622][ T2147] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 269.777818][ T7201] tipc: Enabled bearer , priority 10 [ 269.799850][ T7200] tipc: Resetting bearer [ 269.835579][ T7200] tipc: Disabling bearer [ 269.855141][ T2147] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.885643][ T2147] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 269.908813][ T2147] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.934115][ T2147] usb 7-1: Product: syz [ 269.939582][ T2147] usb 7-1: Manufacturer: syz [ 269.954235][ T2147] usb 7-1: SerialNumber: syz [ 270.099841][ T7208] overlay: Unknown parameter '/ndex' [ 270.149394][ T7210] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2334'. [ 270.214794][ T7213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.246715][ T7213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.445394][ T421] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 270.564250][ T7193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.580534][ T7193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.616652][ T421] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.635574][ T421] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.668882][ T421] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 270.685635][ T421] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.705480][ T421] usb 4-1: Product: syz [ 270.715621][ T421] usb 4-1: Manufacturer: syz [ 270.721236][ T421] usb 4-1: SerialNumber: syz [ 270.733932][ T421] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 270.753159][ T421] cdc_ncm 4-1:1.0: bind() failure [ 270.849779][ T64] usb 2-1: USB disconnect, device number 94 [ 270.860400][ T1414] udevd[1414]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 270.932854][ T421] usb 4-1: USB disconnect, device number 102 [ 271.003593][ T2147] cdc_ncm 7-1:1.0: bind() failure [ 271.016191][ T2147] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 271.041237][ T2147] cdc_ncm 7-1:1.1: bind() failure [ 271.051770][ T2147] usb 7-1: USB disconnect, device number 9 [ 271.435871][ T421] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 271.461173][ T750] rust_binder: 7230: undelivered TRANSACTION_COMPLETE [ 271.474822][ T750] rust_binder: 7230: undelivered transaction 454, process died [ 271.562090][ T7240] tipc: Enabled bearer , priority 10 [ 271.570414][ T421] usb 2-1: device descriptor read/64, error -71 [ 271.580067][ T7241] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2345'. [ 271.591749][ T7238] tipc: Resetting bearer [ 271.607984][ T7238] tipc: Disabling bearer [ 271.621785][ T7243] overlay: Unknown parameter 'i/dex' [ 271.643256][ T7245] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2347'. [ 271.827810][ T421] usb 2-1: device descriptor read/64, error -71 [ 272.078304][ T421] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 272.108307][ T750] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 272.218603][ T421] usb 2-1: device descriptor read/64, error -71 [ 272.270130][ T750] usb 4-1: unable to get BOS descriptor or descriptor too short [ 272.281616][ T750] usb 4-1: config 1 has an invalid descriptor of length 120, skipping remainder of the config [ 272.296130][ T750] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x82 has an invalid bInterval 91, changing to 7 [ 272.309610][ T750] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid maxpacket 50237, setting to 1024 [ 272.324767][ T750] usb 4-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 272.335947][ T750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.347387][ T750] usb 4-1: Product: syz [ 272.352608][ T750] usb 4-1: Manufacturer: syz [ 272.358212][ T750] usb 4-1: SerialNumber: syz [ 272.458940][ T421] usb 2-1: device descriptor read/64, error -71 [ 272.565741][ T31] rust_binder: 7260: undelivered TRANSACTION_COMPLETE [ 272.579451][ T421] usb usb2-port1: attempt power cycle [ 272.580943][ T750] usb 4-1: 0:1 : UAC_AS_GENERAL descriptor not found [ 272.597133][ T31] rust_binder: 7260: undelivered transaction 458, process died [ 272.612340][ T750] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 272.626132][ T750] usb 4-1: 0:1 : UAC_AS_GENERAL descriptor not found [ 272.635128][ T750] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 272.649127][ T750] usb 4-1: 0:1 : UAC_AS_GENERAL descriptor not found [ 272.681997][ T750] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 272.694976][ T1414] udevd[1414]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 272.714039][ T750] usb 4-1: USB disconnect, device number 103 [ 272.869675][ T64] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 272.939767][ T421] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 272.960879][ T421] usb 2-1: device descriptor read/8, error -71 [ 273.031935][ T64] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.046948][ T64] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 273.058012][ T64] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.067656][ T64] usb 7-1: Product: syz [ 273.072929][ T64] usb 7-1: Manufacturer: syz [ 273.078467][ T64] usb 7-1: SerialNumber: syz [ 273.101105][ T421] usb 2-1: device descriptor read/8, error -71 [ 273.370495][ T421] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 273.391606][ T421] usb 2-1: device descriptor read/8, error -71 [ 273.521869][ T421] usb 2-1: device descriptor read/8, error -71 [ 273.641050][ T421] usb usb2-port1: unable to enumerate USB device [ 273.984472][ T7272] overlay: Unknown parameter 'in/ex' [ 274.010544][ T421] usb 5-1: USB disconnect, device number 64 [ 274.094190][ T64] cdc_ncm 7-1:1.0: bind() failure [ 274.112284][ T64] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 274.120460][ T64] cdc_ncm 7-1:1.1: bind() failure [ 274.137156][ T64] usb 7-1: USB disconnect, device number 10 [ 274.192402][ T7275] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.204563][ T7275] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.213550][ T7275] bridge_slave_0: entered allmulticast mode [ 274.221381][ T7275] bridge_slave_0: entered promiscuous mode [ 274.229141][ T7282] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2359'. [ 274.253185][ T3158] bridge0: port 3(syz_tun) entered disabled state [ 274.268029][ T3158] syz_tun (unregistering): left allmulticast mode [ 274.276439][ T3158] syz_tun (unregistering): left promiscuous mode [ 274.284340][ T3158] bridge0: port 3(syz_tun) entered disabled state [ 274.294011][ T7275] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.302524][ T7275] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.311111][ T7275] bridge_slave_1: entered allmulticast mode [ 274.318727][ T7275] bridge_slave_1: entered promiscuous mode [ 274.335798][ T7286] tipc: Enabled bearer , priority 10 [ 274.344407][ T7288] fuse: Bad value for 'fd' [ 274.355451][ T7285] tipc: Resetting bearer [ 274.364477][ T7285] tipc: Disabling bearer [ 274.398052][ T7275] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.406528][ T7275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.415278][ T7275] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.423733][ T7275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.451581][ T1123] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.460743][ T1123] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.474218][ T6873] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.482710][ T6873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.491645][ T6873] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.500097][ T6873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.531698][ T7275] veth0_vlan: entered promiscuous mode [ 274.555669][ T7275] veth1_macvtap: entered promiscuous mode [ 274.616019][ T750] rust_binder: 7306: undelivered TRANSACTION_COMPLETE [ 274.625274][ T64] rust_binder: 7306: undelivered transaction 462, process died [ 274.640917][ T7311] overlay: Unknown parameter 'ind/x' [ 274.671602][ T36] audit: type=1400 audit(1700000234.354:518): avc: denied { listen } for pid=7312 comm="syz.6.2368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 274.737510][ T7324] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2371'. [ 274.779046][ T7328] tipc: Enabled bearer , priority 10 [ 274.787745][ T7327] tipc: Resetting bearer [ 274.796235][ T7327] tipc: Disabling bearer [ 274.822291][ T7332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7332 comm=syz.6.2375 [ 274.925524][ T311] rust_binder: 7349: undelivered TRANSACTION_COMPLETE [ 274.941171][ T311] rust_binder: 7349: undelivered transaction 466, process died [ 274.951019][ T750] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 274.964474][ T7357] overlay: Unknown parameter 'ind:x' [ 275.103268][ T750] usb 8-1: device descriptor read/64, error -71 [ 275.123288][ T64] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 275.233721][ T7373] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2384'. [ 275.274303][ T7379] tipc: Enabled bearer , priority 10 [ 275.275084][ T64] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.294616][ T7378] tipc: Resetting bearer [ 275.296950][ T64] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 275.312521][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.322578][ T64] usb 2-1: Product: syz [ 275.322902][ T7378] tipc: Disabling bearer [ 275.327724][ T64] usb 2-1: Manufacturer: syz [ 275.327743][ T64] usb 2-1: SerialNumber: syz [ 275.353610][ T750] usb 8-1: device descriptor read/64, error -71 [ 275.422480][ T421] rust_binder: 7386: undelivered TRANSACTION_COMPLETE [ 275.431625][ T31] rust_binder: 7386: undelivered transaction 472, process died [ 275.471255][ T7391] overlay: Unknown parameter 'ind\x' [ 275.576502][ T36] audit: type=1400 audit(1700000235.263:519): avc: denied { load_policy } for pid=7395 comm="syz.3.2395" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 275.576550][ T7398] SELinux: policydb version -627502579 does not match my version range 15-33 [ 275.611404][ T750] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 275.611722][ T7398] SELinux: failed to load policy [ 275.636821][ T7400] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2396'. [ 275.693671][ T7409] tipc: Enabled bearer , priority 10 [ 275.702541][ T7408] tipc: Resetting bearer [ 275.713318][ T7408] tipc: Disabling bearer [ 275.744445][ T750] usb 8-1: device descriptor read/64, error -71 [ 275.798091][ T421] rust_binder: 7415: undelivered TRANSACTION_COMPLETE [ 275.813897][ T421] rust_binder: 7415: undelivered transaction 476, process died [ 275.830847][ T7418] overlay: Unknown parameter 'inde/' [ 275.855517][ T7420] tipc: New replicast peer: 255.255.255.255 [ 275.862924][ T7420] tipc: Enabled bearer , priority 10 [ 275.985324][ T750] usb 8-1: device descriptor read/64, error -71 [ 276.073496][ T7428] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2408'. [ 276.095760][ T750] usb usb8-port1: attempt power cycle [ 276.163523][ T7434] tipc: Enabled bearer , priority 10 [ 276.172279][ T7433] tipc: Resetting bearer [ 276.182057][ T7433] tipc: Disabling bearer [ 276.233690][ T7436] 9pnet_fd: Insufficient options for proto=fd [ 276.375966][ T64] cdc_ncm 2-1:1.0: bind() failure [ 276.385946][ T64] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 276.394152][ T64] cdc_ncm 2-1:1.1: bind() failure [ 276.403630][ T64] usb 2-1: USB disconnect, device number 99 [ 276.455427][ T750] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 276.503580][ T750] usb 8-1: device descriptor read/8, error -71 [ 276.527628][ T468] rust_binder: 7441: undelivered TRANSACTION_COMPLETE [ 276.536784][ T311] rust_binder: 7441: undelivered transaction 480, process died [ 276.563068][ T7446] overlay: Bad value for 'index' [ 276.589386][ T7452] syzkaller1: entered promiscuous mode [ 276.596085][ T7452] syzkaller1: entered allmulticast mode [ 276.636628][ T750] usb 8-1: device descriptor read/8, error -71 [ 276.647447][ T7455] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2420'. [ 276.737716][ T7461] tipc: Enabled bearer , priority 10 [ 276.746335][ T7460] tipc: Resetting bearer [ 276.754231][ T7460] tipc: Disabling bearer [ 276.846048][ T64] rust_binder: 7470: undelivered TRANSACTION_COMPLETE [ 276.857785][ T31] rust_binder: 7470: undelivered transaction 484, process died [ 276.864995][ T7473] overlay: Bad value for 'index' [ 276.877088][ T750] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 276.911259][ T750] usb 8-1: device descriptor read/8, error -71 [ 276.919712][ T7479] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2430'. [ 276.930677][ T311] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 277.066932][ T750] usb 8-1: device descriptor read/8, error -71 [ 277.085947][ T311] usb 4-1: Using ep0 maxpacket: 8 [ 277.093155][ T311] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 277.103171][ T311] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 277.115546][ T311] usb 4-1: config 179 has no interface number 0 [ 277.123456][ T311] usb 4-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 277.139495][ T311] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 277.151254][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.176911][ T750] usb usb8-port1: unable to enumerate USB device [ 277.284211][ T7499] tipc: Enabled bearer , priority 10 [ 277.300198][ T311] rust_binder: 7502: undelivered TRANSACTION_COMPLETE [ 277.308694][ T7498] tipc: Resetting bearer [ 277.321554][ T311] rust_binder: 7502: undelivered transaction 488, process died [ 277.332036][ T7498] tipc: Disabling bearer [ 277.359310][ T7507] overlay: Bad value for 'index' [ 277.545726][ T421] usb 4-1: USB disconnect, device number 104 [ 277.646732][ T64] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 277.716774][ T311] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 277.746964][ T7515] netlink: 140 bytes leftover after parsing attributes in process `syz.7.2443'. [ 277.774653][ T36] audit: type=1400 audit(1700000237.460:520): avc: denied { map } for pid=7518 comm="syz.7.2445" path="socket:[82519]" dev="sockfs" ino=82519 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 277.828788][ T7510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.842610][ T7510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.877006][ T311] usb 2-1: Using ep0 maxpacket: 32 [ 277.885098][ T311] usb 2-1: unable to get BOS descriptor or descriptor too short [ 277.895283][ T311] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.908373][ T311] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 277.923963][ T64] usb 7-1: unable to get BOS descriptor or descriptor too short [ 277.927514][ T311] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 277.937355][ T64] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 277.945153][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.954738][ T64] usb 7-1: can't read configurations, error -71 [ 277.977068][ T311] usb 2-1: Product: syz [ 277.982767][ T311] usb 2-1: Manufacturer: syz [ 277.988644][ T311] usb 2-1: SerialNumber: syz [ 278.004407][ T421] rust_binder: 7531: undelivered TRANSACTION_COMPLETE [ 278.007597][ T7534] tipc: Enabled bearer , priority 10 [ 278.023399][ T7532] tipc: Resetting bearer [ 278.023490][ T421] rust_binder: 7531: undelivered transaction 492, process died [ 278.041097][ T7532] tipc: Disabling bearer [ 278.054228][ T7540] overlay: Bad value for 'index' [ 278.225669][ T311] usb 2-1: USB disconnect, device number 100 [ 278.234443][ T7544] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.243244][ T7544] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.252408][ T7544] bridge_slave_0: entered allmulticast mode [ 278.260246][ T7544] bridge_slave_0: entered promiscuous mode [ 278.269504][ T7544] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.278079][ T7544] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.286714][ T7544] bridge_slave_1: entered allmulticast mode [ 278.294456][ T7544] bridge_slave_1: entered promiscuous mode [ 278.307482][ T750] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 278.359484][ T1123] gretap0: left allmulticast mode [ 278.365621][ T1123] gretap0: left promiscuous mode [ 278.371740][ T1123] bridge0: port 3(gretap0) entered disabled state [ 278.379756][ T1123] bridge_slave_1: left allmulticast mode [ 278.386536][ T1123] bridge_slave_1: left promiscuous mode [ 278.393530][ T1123] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.402547][ T1123] bridge_slave_0: left allmulticast mode [ 278.409444][ T1123] bridge_slave_0: left promiscuous mode [ 278.416134][ T1123] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.447685][ T750] usb 8-1: device descriptor read/64, error -71 [ 278.470198][ T458] tipc: Node number set to 3672238624 [ 278.477517][ T7551] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2457'. [ 278.497283][ T6846] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.505810][ T6846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.515564][ T6846] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.524051][ T6846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.552138][ T1123] tipc: Left network mode [ 278.561589][ T7544] veth0_vlan: entered promiscuous mode [ 278.573228][ T1123] veth0_vlan: left promiscuous mode [ 278.619098][ T7544] veth1_macvtap: entered promiscuous mode [ 278.680903][ T421] rust_binder: 7565: undelivered TRANSACTION_COMPLETE [ 278.690607][ T421] rust_binder: 7565: undelivered transaction 496, process died [ 278.697247][ T7568] overlay: Bad value for 'index' [ 278.705752][ T750] usb 8-1: device descriptor read/64, error -71 [ 278.724007][ T7570] binder: Unknown parameter 'defcontext01777777777777777777777' [ 278.724111][ T36] audit: type=1400 audit(1700000238.409:521): avc: denied { remount } for pid=7569 comm="syz.6.2465" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 278.850500][ T7575] tipc: Enabled bearer , priority 10 [ 278.859279][ T7574] tipc: Resetting bearer [ 278.867079][ T7574] tipc: Disabling bearer [ 278.949130][ T750] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 279.088567][ T750] usb 8-1: device descriptor read/64, error -71 [ 279.188549][ T64] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 279.328916][ T750] usb 8-1: device descriptor read/64, error -71 [ 279.341011][ T64] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.354727][ T64] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 279.365739][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.375398][ T64] usb 2-1: Product: syz [ 279.380576][ T64] usb 2-1: Manufacturer: syz [ 279.386101][ T64] usb 2-1: SerialNumber: syz [ 279.438951][ T750] usb usb8-port1: attempt power cycle [ 279.516781][ T36] audit: type=1400 audit(1700000239.198:522): avc: denied { remount } for pid=7578 comm="syz.3.2468" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 279.560212][ T7583] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2470'. [ 279.587477][ T7588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.600329][ T7588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.610763][ T7588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.622222][ T7588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.632708][ T7593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.642997][ T7593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.738672][ T7597] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.2475'. [ 279.779151][ T750] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 279.800369][ T750] usb 8-1: device descriptor read/8, error -71 [ 279.818922][ T458] rust_binder: 7600: undelivered TRANSACTION_COMPLETE [ 279.827228][ T31] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 279.828684][ T468] rust_binder: 7600: undelivered transaction 500, process died [ 279.844886][ T7603] overlay: Bad value for 'index' [ 279.930404][ T750] usb 8-1: device descriptor read/8, error -71 [ 279.999605][ T31] usb 4-1: config 0 interface 0 altsetting 21 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 280.015311][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 280.023356][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 280.034650][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.046169][ T31] usb 4-1: config 0 descriptor?? [ 280.169586][ T750] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 280.190583][ T750] usb 8-1: device descriptor read/8, error -71 [ 280.255094][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 280.262344][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 280.272685][ T31] usb 4-1: USB disconnect, device number 105 [ 280.330897][ T750] usb 8-1: device descriptor read/8, error -71 [ 280.440148][ T750] usb usb8-port1: unable to enumerate USB device [ 280.513789][ T64] cdc_ncm 2-1:1.0: bind() failure [ 280.520825][ T64] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 280.528955][ T64] cdc_ncm 2-1:1.1: bind() failure [ 280.536064][ T64] usb 2-1: USB disconnect, device number 101 [ 280.720414][ T7629] tipc: Enabled bearer , priority 10 [ 280.729007][ T7628] tipc: Resetting bearer [ 280.737183][ T7628] tipc: Disabling bearer [ 280.764405][ T7631] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2481'. [ 280.994097][ T31] rust_binder: 7646: undelivered TRANSACTION_COMPLETE [ 281.002847][ T468] rust_binder: 7646: undelivered transaction 504, process died [ 281.033529][ T7652] overlay: Unknown parameter '/fs_export' [ 281.053898][ T7656] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2491'. [ 281.080499][ T36] audit: type=1400 audit(1700000240.756:523): avc: denied { create } for pid=7657 comm="syz.3.2492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 281.104340][ T64] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 281.133099][ T7662] tipc: Started in network mode [ 281.139317][ T7662] tipc: Node identity 0e8d05ffa513, cluster identity 4711 [ 281.147971][ T7662] tipc: Enabled bearer , priority 10 [ 281.164640][ T7661] tipc: Resetting bearer [ 281.172856][ T7661] tipc: Disabling bearer [ 281.260767][ T64] usb 7-1: Using ep0 maxpacket: 32 [ 281.271918][ T64] usb 7-1: unable to get BOS descriptor or descriptor too short [ 281.283520][ T64] usb 7-1: config 1 has an invalid interface number: 52 but max is 2 [ 281.296929][ T31] rust_binder: 7680: undelivered TRANSACTION_COMPLETE [ 281.298665][ T64] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.311999][ T31] rust_binder: 7680: undelivered transaction 508, process died [ 281.326913][ T64] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 281.337710][ T64] usb 7-1: config 1 has no interface number 0 [ 281.352668][ T64] usb 7-1: config 1 interface 52 altsetting 34 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 281.369297][ T64] usb 7-1: config 1 interface 52 has no altsetting 0 [ 281.379282][ T64] usb 7-1: New USB device found, idVendor=0421, idProduct=048e, bcdDevice=8b.ad [ 281.390637][ T64] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.391263][ T7688] overlay: Unknown parameter 'n:s_export' [ 281.400280][ T64] usb 7-1: Product: syz [ 281.412192][ T64] usb 7-1: Manufacturer: syz [ 281.417716][ T64] usb 7-1: SerialNumber: syz [ 281.429522][ T7690] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2504'. [ 281.456940][ T7692] FAULT_INJECTION: forcing a failure. [ 281.456940][ T7692] name failslab, interval 1, probability 0, space 0, times 0 [ 281.472431][ T7692] CPU: 0 UID: 0 PID: 7692 Comm: syz.1.2505 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 281.472470][ T7692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 281.472483][ T7692] Call Trace: [ 281.472492][ T7692] [ 281.472501][ T7692] __dump_stack+0x21/0x30 [ 281.472534][ T7692] dump_stack_lvl+0x140/0x1c0 [ 281.472553][ T7692] ? __cfi_dump_stack_lvl+0x10/0x10 [ 281.472575][ T7692] ? do_futex+0x32a/0x510 [ 281.472602][ T7692] dump_stack+0x19/0x20 [ 281.472621][ T7692] should_fail_ex+0x3c2/0x510 [ 281.472653][ T7692] should_failslab+0xac/0x100 [ 281.472677][ T7692] kmem_cache_alloc_noprof+0x42/0x410 [ 281.472708][ T7692] ? prepare_creds+0x47/0x6b0 [ 281.472820][ T7692] ? __cfi_make_kgid+0x10/0x10 [ 281.472853][ T7692] prepare_creds+0x47/0x6b0 [ 281.472874][ T7692] __sys_setgid+0xa0/0x4e0 [ 281.472922][ T7692] __x64_sys_setgid+0x3b/0x50 [ 281.472939][ T7692] x64_sys_call+0x2c8c/0x2ee0 [ 281.472952][ T7692] do_syscall_64+0x57/0xf0 [ 281.472969][ T7692] ? clear_bhb_loop+0x50/0xa0 [ 281.472989][ T7692] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 281.473006][ T7692] RIP: 0033:0x7f57a0f9fb19 [ 281.473019][ T7692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.473032][ T7692] RSP: 002b:00007f57a1dd2028 EFLAGS: 00000246 ORIG_RAX: 000000000000006a [ 281.473048][ T7692] RAX: ffffffffffffffda RBX: 00007f57a1225fa0 RCX: 00007f57a0f9fb19 [ 281.473058][ T7692] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 281.473066][ T7692] RBP: 00007f57a1037b70 R08: 0000000000000000 R09: 0000000000000000 [ 281.473074][ T7692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.473082][ T7692] R13: 00007f57a1226038 R14: 00007f57a1225fa0 R15: 00007ffc16fe36f8 [ 281.473093][ T7692] [ 281.571010][ T31] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 281.710788][ T750] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 281.871966][ T750] usb 4-1: Using ep0 maxpacket: 16 [ 281.879212][ T31] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.891446][ T750] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.903971][ T750] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 281.916036][ T31] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 281.927190][ T750] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 281.938068][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.947687][ T750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.957308][ T31] usb 8-1: Product: syz [ 281.962336][ T750] usb 4-1: Product: syz [ 281.967328][ T750] usb 4-1: Manufacturer: syz [ 281.972857][ T31] usb 8-1: Manufacturer: syz [ 281.978363][ T31] usb 8-1: SerialNumber: syz [ 281.983934][ T311] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 281.993140][ T750] usb 4-1: SerialNumber: syz [ 282.131524][ T311] usb 2-1: device descriptor read/64, error -71 [ 282.371758][ T311] usb 2-1: device descriptor read/64, error -71 [ 282.416203][ T7685] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 282.420023][ T7696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7696 comm=syz.3.2502 [ 282.426372][ T36] audit: type=1400 audit(1700000242.095:524): avc: denied { mounton } for pid=7684 comm="syz.3.2502" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 282.444673][ T750] usb 4-1: 0:2 : does not exist [ 282.478375][ T750] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 282.492553][ T750] usb 4-1: USB disconnect, device number 106 [ 282.503868][ T360] udevd[360]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 282.611978][ T311] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 282.752110][ T311] usb 2-1: device descriptor read/64, error -71 [ 283.002938][ T311] usb 2-1: device descriptor read/64, error -71 [ 283.004943][ T7706] tipc: Enabled bearer , priority 10 [ 283.013379][ T31] cdc_ncm 8-1:1.0: bind() failure [ 283.024753][ T7705] tipc: Resetting bearer [ 283.025759][ T31] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 283.039857][ T31] cdc_ncm 8-1:1.1: bind() failure [ 283.046807][ T7705] tipc: Disabling bearer [ 283.050156][ T31] usb 8-1: USB disconnect, device number 10 [ 283.122888][ T311] usb usb2-port1: attempt power cycle [ 283.362653][ T468] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 283.462734][ T311] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 283.483802][ T311] usb 2-1: device descriptor read/8, error -71 [ 283.512774][ T468] usb 4-1: Using ep0 maxpacket: 32 [ 283.520027][ T468] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 283.534468][ T468] usb 4-1: config 0 has no interface number 0 [ 283.541828][ T468] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 283.542822][ T457] rust_binder: 7711: undelivered TRANSACTION_COMPLETE [ 283.562860][ T2147] rust_binder: 7711: undelivered transaction 512, process died [ 283.573320][ T468] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 283.585154][ T468] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.594908][ T468] usb 4-1: Product: syz [ 283.599995][ T468] usb 4-1: Manufacturer: syz [ 283.606489][ T468] usb 4-1: SerialNumber: syz [ 283.613494][ T468] usb 4-1: config 0 descriptor?? [ 283.619299][ T311] usb 2-1: device descriptor read/8, error -71 [ 283.626939][ T7710] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 283.736106][ T421] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 283.753191][ T421] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 283.823892][ T64] rndis_host 7-1:1.52: More than one union descriptor, skipping ... [ 283.833639][ T64] usb 7-1: bad CDC descriptors [ 283.836605][ T7710] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 283.839607][ T64] cdc_acm 7-1:1.52: More than one union descriptor, skipping ... [ 283.861965][ T64] usb 7-1: USB disconnect, device number 13 [ 283.873547][ T7722] overlay: Unknown parameter 'nf' [ 283.884573][ T311] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 283.901871][ T7724] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2517'. [ 283.914234][ T311] usb 2-1: device descriptor read/8, error -71 [ 283.950333][ T7732] tipc: Enabled bearer , priority 10 [ 283.959091][ T7731] tipc: Resetting bearer [ 283.966639][ T36] audit: type=1400 audit(1700000243.643:525): avc: denied { unmount } for pid=7275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 283.991947][ T7731] tipc: Disabling bearer [ 284.044298][ T311] usb 2-1: device descriptor read/8, error -71 [ 284.061385][ T64] rust_binder: 7747: undelivered TRANSACTION_COMPLETE [ 284.070383][ T457] rust_binder: 7747: undelivered transaction 516, process died [ 284.153457][ T311] usb usb2-port1: unable to enumerate USB device [ 284.238239][ T7759] overlay: Unknown parameter 'nf:_export' [ 284.243409][ T421] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 284.265287][ T7761] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2531'. [ 284.341920][ T36] audit: type=1400 audit(1700000244.013:526): avc: denied { unmount } for pid=6827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 284.352067][ T7778] tipc: Enabled bearer , priority 10 [ 284.378173][ T7777] tipc: Resetting bearer [ 284.383744][ T421] usb 8-1: device descriptor read/64, error -71 [ 284.393866][ T7777] tipc: Disabling bearer [ 284.444709][ T2147] rust_binder: 7779: undelivered TRANSACTION_COMPLETE [ 284.453866][ T311] rust_binder: 7779: undelivered transaction 520, process died [ 284.460779][ T468] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 284.475332][ T468] asix 4-1:0.188: probe with driver asix failed with error -71 [ 284.488644][ T468] usb 4-1: USB disconnect, device number 107 [ 284.624876][ T7793] overlay: Unknown parameter 'nf\_export' [ 284.633863][ T421] usb 8-1: device descriptor read/64, error -71 [ 284.644229][ T7797] overlayfs: conflicting options: nfs_export=on,index=off [ 284.661079][ T7799] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2543'. [ 284.688759][ T7803] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2545'. [ 284.719911][ T7808] tipc: Enabled bearer , priority 10 [ 284.728627][ T7807] tipc: Resetting bearer [ 284.736417][ T7807] tipc: Disabling bearer [ 284.785508][ T31] rust_binder: 7814: undelivered TRANSACTION_COMPLETE [ 284.794374][ T2147] rust_binder: 7814: undelivered transaction 524, process died [ 284.893994][ T421] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 284.982385][ T7824] overlay: Unknown parameter 'nft_export' [ 284.988105][ T7826] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2554'. [ 285.034062][ T421] usb 8-1: device descriptor read/64, error -71 [ 285.060776][ T468] smpboot: CPU 1 is now offline [ 285.117200][ T7840] tipc: Enabled bearer , priority 10 [ 285.131261][ T7839] tipc: Resetting bearer [ 285.139773][ T7839] tipc: Disabling bearer [ 285.167644][ T2147] rust_binder: 7835: undelivered TRANSACTION_COMPLETE [ 285.195265][ T468] rust_binder: 7844: undelivered TRANSACTION_COMPLETE [ 285.220749][ T468] rust_binder: 7844: undelivered transaction 538, process died [ 285.276424][ T421] usb 8-1: device descriptor read/64, error -71 [ 285.301202][ T7855] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 285.314262][ T2147] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 285.355574][ T7862] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2566'. [ 285.404433][ T421] usb usb8-port1: attempt power cycle [ 285.413656][ T7866] overlay: Unknown parameter 'nfs:export' [ 285.464345][ T2147] usb 4-1: device descriptor read/64, error -71 [ 285.654557][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 285.684552][ T468] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 285.704523][ T2147] usb 4-1: device descriptor read/64, error -71 [ 285.754794][ T421] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 285.775725][ T421] usb 8-1: device descriptor read/8, error -71 [ 285.804624][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 285.811813][ T9] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 285.822112][ T9] usb 7-1: config 0 has no interface number 0 [ 285.829688][ T9] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 285.841817][ T468] usb 2-1: Using ep0 maxpacket: 8 [ 285.849055][ T468] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 285.860140][ T468] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.869747][ T9] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 285.881262][ T468] usb 2-1: config 0 descriptor?? [ 285.889450][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.899310][ T9] usb 7-1: Product: syz [ 285.904386][ T9] usb 7-1: Manufacturer: syz [ 285.912227][ T9] usb 7-1: SerialNumber: syz [ 285.918267][ T421] usb 8-1: device descriptor read/8, error -71 [ 285.929056][ T9] usb 7-1: config 0 descriptor?? [ 285.935393][ T7868] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 285.945513][ T2147] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 286.084804][ T2147] usb 4-1: device descriptor read/64, error -71 [ 286.148811][ T7868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.160114][ T7868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.170313][ T421] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 286.181230][ T7868] FAULT_INJECTION: forcing a failure. [ 286.181230][ T7868] name failslab, interval 1, probability 0, space 0, times 0 [ 286.198000][ T7868] CPU: 0 UID: 0 PID: 7868 Comm: syz.6.2569 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 286.198028][ T7868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 286.198037][ T7868] Call Trace: [ 286.198042][ T7868] [ 286.198047][ T7868] __dump_stack+0x21/0x30 [ 286.198066][ T7868] dump_stack_lvl+0x140/0x1c0 [ 286.198079][ T7868] ? __cfi_dump_stack_lvl+0x10/0x10 [ 286.198090][ T7868] ? pcpu_memcg_post_alloc_hook+0x202/0x2e0 [ 286.198174][ T7868] ? mutex_unlock+0x90/0x240 [ 286.198191][ T7868] ? pcpu_alloc_noprof+0x1440/0x1440 [ 286.198203][ T7868] dump_stack+0x19/0x20 [ 286.198215][ T7868] should_fail_ex+0x3c2/0x510 [ 286.198235][ T7868] should_failslab+0xac/0x100 [ 286.198248][ T7868] kmem_cache_alloc_noprof+0x42/0x410 [ 286.198267][ T7868] ? __kasan_check_write+0x18/0x20 [ 286.198284][ T7868] ? alloc_vfsmnt+0x31/0x610 [ 286.198302][ T7868] ? __cfi__raw_spin_lock+0x10/0x10 [ 286.198315][ T7868] alloc_vfsmnt+0x31/0x610 [ 286.198330][ T7868] clone_mnt+0x6e/0xbe0 [ 286.198345][ T7868] ? is_subdir+0x145/0x160 [ 286.198357][ T7868] copy_tree+0x43d/0xcb0 [ 286.198373][ T7868] ? __cfi_down_write+0x10/0x10 [ 286.198389][ T7868] __do_loopback+0x1da/0x3c0 [ 286.198419][ T7868] __se_sys_open_tree+0x35b/0x900 [ 286.198435][ T7868] ? fput+0x1a4/0x230 [ 286.198448][ T7868] ? xfd_validate_state+0x68/0x140 [ 286.198461][ T7868] ? __x64_sys_open_tree+0xa0/0xa0 [ 286.198478][ T7868] ? __kasan_check_write+0x18/0x20 [ 286.198495][ T7868] ? fpregs_restore_userregs+0x11c/0x260 [ 286.198512][ T7868] __x64_sys_open_tree+0x7f/0xa0 [ 286.198529][ T7868] x64_sys_call+0x2d58/0x2ee0 [ 286.198543][ T7868] do_syscall_64+0x57/0xf0 [ 286.198555][ T7868] ? clear_bhb_loop+0x50/0xa0 [ 286.198573][ T7868] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 286.198588][ T7868] RIP: 0033:0x7f479979fb19 [ 286.198602][ T7868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.198613][ T7868] RSP: 002b:00007f479a675028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 286.198628][ T7868] RAX: ffffffffffffffda RBX: 00007f4799a25fa0 RCX: 00007f479979fb19 [ 286.198639][ T7868] RDX: 0000000000089101 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 286.198648][ T7868] RBP: 00007f4799837b70 R08: 0000000000000000 R09: 0000000000000000 [ 286.198656][ T7868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.198664][ T7868] R13: 00007f4799a26038 R14: 00007f4799a25fa0 R15: 00007ffcf07e4798 [ 286.198675][ T7868] [ 286.199872][ T7868] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 286.506296][ T421] usb 8-1: device descriptor read/8, error -71 [ 286.565142][ T2147] usb 4-1: device descriptor read/64, error -71 [ 286.636198][ T421] usb 8-1: device descriptor read/8, error -71 [ 286.675324][ T2147] usb usb4-port1: attempt power cycle [ 286.718676][ T9] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 286.733032][ T9] asix 7-1:0.188: probe with driver asix failed with error -71 [ 286.744860][ T9] usb 7-1: USB disconnect, device number 14 [ 286.753114][ T421] usb usb8-port1: unable to enumerate USB device [ 287.025666][ T2147] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 287.040573][ T7877] tipc: Started in network mode [ 287.047424][ T7877] tipc: Node identity a2023b3b1d65, cluster identity 4711 [ 287.056355][ T7877] tipc: Enabled bearer , priority 10 [ 287.065180][ T2147] usb 4-1: device descriptor read/8, error -71 [ 287.072896][ T7876] tipc: Resetting bearer [ 287.081260][ T7876] tipc: Disabling bearer [ 287.115790][ T64] rust_binder: 7878: undelivered TRANSACTION_COMPLETE [ 287.130133][ T64] rust_binder: 7878: undelivered transaction 542, process died [ 287.152788][ T7881] FAULT_INJECTION: forcing a failure. [ 287.152788][ T7881] name failslab, interval 1, probability 0, space 0, times 0 [ 287.168750][ T7881] CPU: 0 UID: 0 PID: 7881 Comm: syz.7.2575 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 287.168782][ T7881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 287.168790][ T7881] Call Trace: [ 287.168794][ T7881] [ 287.168800][ T7881] __dump_stack+0x21/0x30 [ 287.168817][ T7881] dump_stack_lvl+0x140/0x1c0 [ 287.168828][ T7881] ? __cfi_dump_stack_lvl+0x10/0x10 [ 287.168840][ T7881] ? handle_mm_fault+0x16fe/0x1ba0 [ 287.168853][ T7881] dump_stack+0x19/0x20 [ 287.168864][ T7881] should_fail_ex+0x3c2/0x510 [ 287.168881][ T7881] should_failslab+0xac/0x100 [ 287.168894][ T7881] kmem_cache_alloc_noprof+0x42/0x410 [ 287.168911][ T7881] ? __cfi_handle_mm_fault+0x10/0x10 [ 287.168922][ T7881] ? lock_vma_under_rcu+0x4cf/0x590 [ 287.168933][ T7881] ? getname_flags+0xcc/0x6b0 [ 287.168946][ T7881] getname_flags+0xcc/0x6b0 [ 287.168956][ T7881] getname+0x1b/0x30 [ 287.168967][ T7881] do_sys_openat2+0xda/0x1d0 [ 287.168981][ T7881] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 287.168995][ T7881] ? do_sys_open+0x100/0x100 [ 287.169009][ T7881] ? __kasan_check_write+0x18/0x20 [ 287.169025][ T7881] ? fpregs_restore_userregs+0x11c/0x260 [ 287.169041][ T7881] __x64_sys_openat+0x13a/0x170 [ 287.169056][ T7881] x64_sys_call+0xe69/0x2ee0 [ 287.169068][ T7881] do_syscall_64+0x57/0xf0 [ 287.169080][ T7881] ? clear_bhb_loop+0x50/0xa0 [ 287.169097][ T7881] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 287.169112][ T7881] RIP: 0033:0x7f2269d6034e [ 287.169123][ T7881] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 287.169134][ T7881] RSP: 002b:00007f226ac07b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 287.169149][ T7881] RAX: ffffffffffffffda RBX: 00007f226ac086c0 RCX: 00007f2269d6034e [ 287.169159][ T7881] RDX: 0000000000001501 RSI: 00007f226ac07c00 RDI: ffffffffffffff9c [ 287.169168][ T7881] RBP: 00007f226ac07c00 R08: 0000000000000000 R09: 0000000000000000 [ 287.169176][ T7881] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 287.169184][ T7881] R13: 00007f226a026038 R14: 00007f226a025fa0 R15: 00007ffcea001ec8 [ 287.169194][ T7881] [ 287.467522][ T2147] usb 4-1: device descriptor read/8, error -71 [ 287.495775][ T7890] netlink: 140 bytes leftover after parsing attributes in process `syz.7.2577'. [ 287.524703][ T36] audit: type=1326 audit(1700000247.201:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.7.2579" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2269d9fb19 code=0x0 [ 287.566222][ T7896] overlay: Unknown parameter 'nfs_/xport' [ 287.590890][ T7900] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2582'. [ 287.735947][ T2147] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 287.757116][ T2147] usb 4-1: device descriptor read/8, error -71 [ 287.887034][ T2147] usb 4-1: device descriptor read/8, error -71 [ 287.896159][ T421] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 287.996197][ T2147] usb usb4-port1: unable to enumerate USB device [ 288.047184][ T421] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.069597][ T421] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 288.081307][ T421] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.100796][ T421] usb 7-1: Product: syz [ 288.112334][ T421] usb 7-1: Manufacturer: syz [ 288.119497][ T7910] tipc: Enabled bearer , priority 10 [ 288.127563][ T421] usb 7-1: SerialNumber: syz [ 288.133524][ T7909] tipc: Resetting bearer [ 288.144983][ T7909] tipc: Disabling bearer [ 288.186599][ T2147] rust_binder: 7913: undelivered TRANSACTION_COMPLETE [ 288.198922][ T2147] rust_binder: 7913: undelivered transaction 550, process died [ 288.368311][ T7920] netlink: 140 bytes leftover after parsing attributes in process `syz.7.2590'. [ 288.456425][ T2147] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 288.480541][ T468] usb 2-1: string descriptor 0 read error: -71 [ 288.500096][ T468] uvcvideo 2-1:0.0: Found multiple Units with ID 1 [ 288.509610][ T7927] overlay: Unknown parameter 'nfs_:xport' [ 288.525928][ T468] usb 2-1: Found UVC 0.00 device (2833:0201) [ 288.552317][ T468] usb 2-1: No valid video chain found. [ 288.576733][ T7931] tipc: Enabled bearer , priority 10 [ 288.593071][ T468] usb 2-1: USB disconnect, device number 106 [ 288.610673][ T7930] tipc: Resetting bearer [ 288.622780][ T7930] tipc: Disabling bearer [ 288.636545][ T2147] usb 4-1: Using ep0 maxpacket: 16 [ 288.646001][ T2147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.664887][ T2147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.681979][ T2147] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 288.697823][ T2147] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 288.721527][ T2147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.732658][ T7939] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2599'. [ 288.746805][ T7905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.757585][ T2147] usb 4-1: config 0 descriptor?? [ 288.774379][ T7905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.798860][ T7941] tipc: Enabled bearer , priority 10 [ 288.807356][ T7940] tipc: Resetting bearer [ 288.822277][ T7940] tipc: Disabling bearer [ 288.856451][ T64] rust_binder: 7942: undelivered TRANSACTION_COMPLETE [ 288.874524][ T64] rust_binder: 7942: undelivered transaction 554, process died [ 288.926695][ T404] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 288.975320][ T2147] usbhid 4-1:0.0: can't add hid device: -71 [ 288.983378][ T2147] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 288.993538][ T7945] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 289.005850][ T2147] usb 4-1: USB disconnect, device number 112 [ 289.066813][ T404] usb 8-1: device descriptor read/64, error -71 [ 289.075156][ T7948] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2603'. [ 289.165858][ T7957] overlay: Unknown parameter 'nfs_\xport' [ 289.206165][ T421] cdc_ncm 7-1:1.0: bind() failure [ 289.213044][ T64] rust_binder: 7904: undelivered TRANSACTION_COMPLETE [ 289.224511][ T421] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 289.239192][ T7962] FAULT_INJECTION: forcing a failure. [ 289.239192][ T7962] name fail_futex, interval 1, probability 0, space 0, times 0 [ 289.254615][ T421] cdc_ncm 7-1:1.1: bind() failure [ 289.265345][ T421] usb 7-1: USB disconnect, device number 15 [ 289.274973][ T7962] CPU: 0 UID: 0 PID: 7962 Comm: syz.1.2609 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 289.274994][ T7962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 289.275003][ T7962] Call Trace: [ 289.275007][ T7962] [ 289.275013][ T7962] __dump_stack+0x21/0x30 [ 289.275030][ T7962] dump_stack_lvl+0x140/0x1c0 [ 289.275042][ T7962] ? __cfi_dump_stack_lvl+0x10/0x10 [ 289.275053][ T7962] ? unwind_get_return_address+0x51/0x90 [ 289.275151][ T7962] dump_stack+0x19/0x20 [ 289.275162][ T7962] should_fail_ex+0x3c2/0x510 [ 289.275180][ T7962] should_fail+0xf/0x20 [ 289.275190][ T7962] get_futex_key+0x178/0x940 [ 289.275202][ T7962] ? __cfi_get_futex_key+0x10/0x10 [ 289.275214][ T7962] ? kasan_save_track+0x4f/0x80 [ 289.275225][ T7962] ? kasan_save_track+0x3e/0x80 [ 289.275236][ T7962] ? kasan_save_free_info+0x44/0x50 [ 289.275251][ T7962] futex_wake+0x150/0x950 [ 289.275284][ T7962] ? __cfi_futex_wake+0x10/0x10 [ 289.275298][ T7962] do_futex+0x37d/0x510 [ 289.275311][ T7962] ? __cfi_do_futex+0x10/0x10 [ 289.275322][ T7962] ? __kasan_slab_free+0x6a/0x80 [ 289.275334][ T7962] ? kmem_cache_free+0x1bd/0x4f0 [ 289.275350][ T7962] __se_sys_futex+0x13c/0x320 [ 289.275362][ T7962] ? putname+0x113/0x150 [ 289.275373][ T7962] ? __x64_sys_futex+0x110/0x110 [ 289.275385][ T7962] ? __cfi_do_mkdirat+0x10/0x10 [ 289.275399][ T7962] ? __kasan_check_write+0x18/0x20 [ 289.275414][ T7962] __x64_sys_futex+0xe9/0x110 [ 289.275427][ T7962] x64_sys_call+0x227f/0x2ee0 [ 289.275439][ T7962] do_syscall_64+0x57/0xf0 [ 289.275452][ T7962] ? clear_bhb_loop+0x50/0xa0 [ 289.275468][ T7962] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 289.275482][ T7962] RIP: 0033:0x7f57a0f9fb19 [ 289.275494][ T7962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.275504][ T7962] RSP: 002b:00007f57a1db10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 289.275519][ T7962] RAX: ffffffffffffffda RBX: 00007f57a1226098 RCX: 00007f57a0f9fb19 [ 289.275529][ T7962] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f57a122609c [ 289.275537][ T7962] RBP: 00007f57a1226090 R08: 4000000000000000 R09: 0000000000000000 [ 289.275546][ T7962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.275554][ T7962] R13: 00007f57a1226128 R14: 00007ffc16fe3610 R15: 00007ffc16fe36f8 [ 289.275564][ T7962] [ 289.560359][ T404] usb 8-1: device descriptor read/64, error -71 [ 289.598144][ T7967] tipc: Enabled bearer , priority 10 [ 289.606518][ T7966] tipc: Resetting bearer [ 289.622840][ T7966] tipc: Disabling bearer [ 289.651501][ T7969] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2612'. [ 289.723018][ T7979] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2614'. [ 289.737510][ T421] rust_binder: 7976: undelivered transaction 558, process died [ 289.746629][ T421] rust_binder: 7976: undelivered TRANSACTION_COMPLETE [ 289.782345][ T7985] overlay: Unknown parameter 'nfs_e/port' [ 289.798018][ T7987] fuse: Bad value for 'user_id' [ 289.803855][ T7987] fuse: Bad value for 'user_id' [ 289.823287][ T404] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 289.940213][ T8000] tipc: Enabled bearer , priority 10 [ 289.948708][ T7999] tipc: Resetting bearer [ 289.961301][ T7999] tipc: Disabling bearer [ 289.977373][ T404] usb 8-1: device descriptor read/64, error -71 [ 290.001771][ T421] rust_binder: 8001: undelivered transaction 562, process died [ 290.013166][ T421] rust_binder: 8001: undelivered TRANSACTION_COMPLETE [ 290.036791][ T2147] rust_binder: 7904: undelivered transaction 546, process died [ 290.083779][ T8010] overlay: Unknown parameter 'nfs_ex:ort' [ 290.091405][ T8008] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2627'. [ 290.162224][ T8022] drivers/android/binder/context.rs:113: 22 callbacks suppressed [ 290.162240][ T8022] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 290.185432][ T8022] rust_binder: 8021:8022 got transaction to invalid handle 1 [ 290.203311][ T8022] rust_binder: 8021:8022 transaction call to 0:0 failed ENOENT, code 0 size 120-0 line process.rs:958 [ 290.237457][ T404] usb 8-1: device descriptor read/64, error -71 [ 290.253940][ T468] rust_binder: 8021: undelivered TRANSACTION_ERROR: 29201 [ 290.272359][ T8030] tipc: Enabled bearer , priority 10 [ 290.281128][ T8029] tipc: Resetting bearer [ 290.296782][ T8029] tipc: Disabling bearer [ 290.347588][ T404] usb usb8-port1: attempt power cycle [ 290.368742][ T468] rust_binder: 8035: undelivered TRANSACTION_COMPLETE [ 290.387183][ T468] rust_binder: 8035: undelivered transaction 570, process died [ 290.439419][ T8040] input: syz1 as /devices/virtual/input/input69 [ 290.546673][ T8045] overlay: Unknown parameter 'nfs_ex\ort' [ 290.562261][ T8047] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2641'. [ 290.628028][ T468] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 290.687704][ T404] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 290.723002][ T404] usb 8-1: device descriptor read/8, error -71 [ 290.766566][ T8064] tipc: Enabled bearer , priority 10 [ 290.780846][ T8063] tipc: Resetting bearer [ 290.799717][ T468] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.812427][ T8063] tipc: Disabling bearer [ 290.835513][ T468] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 290.858101][ T468] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.872590][ T421] rust_binder: 8068: undelivered transaction 574, process died [ 290.884355][ T404] usb 8-1: device descriptor read/8, error -71 [ 290.895781][ T8071] overlay: Unknown parameter 'nfs_exp' [ 290.902392][ T468] usb 7-1: Product: syz [ 290.907906][ T421] rust_binder: 8068: undelivered TRANSACTION_COMPLETE [ 290.916235][ T468] usb 7-1: Manufacturer: syz [ 290.926382][ T468] usb 7-1: SerialNumber: syz [ 290.999023][ T8079] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2653'. [ 291.127946][ T404] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 291.169976][ T404] usb 8-1: device descriptor read/8, error -71 [ 291.207250][ T8098] tipc: Enabled bearer , priority 10 [ 291.215815][ T8097] tipc: Resetting bearer [ 291.226220][ T8097] tipc: Disabling bearer [ 291.267542][ T2147] rust_binder: 8099: undelivered TRANSACTION_COMPLETE [ 291.279140][ T6846] bridge_slave_1: left allmulticast mode [ 291.285948][ T6846] bridge_slave_1: left promiscuous mode [ 291.308923][ T421] rust_binder: 8099: undelivered transaction 578, process died [ 291.318302][ T404] usb 8-1: device descriptor read/8, error -71 [ 291.325917][ T6846] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.335309][ T8105] overlay: Unknown parameter 'nfs_exp/rt' [ 291.358410][ T6846] bridge_slave_0: left allmulticast mode [ 291.381172][ T6846] bridge_slave_0: left promiscuous mode [ 291.394020][ T6846] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.429204][ T404] usb usb8-port1: unable to enumerate USB device [ 291.439221][ T8107] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2664'. [ 291.453944][ T8111] netlink: 'syz.3.2665': attribute type 21 has an invalid length. [ 291.477382][ T6846] tipc: Left network mode [ 291.491108][ T6846] veth1_macvtap: left promiscuous mode [ 291.814190][ T8134] tipc: Enabled bearer , priority 10 [ 291.842118][ T8133] tipc: Resetting bearer [ 291.867443][ T8133] tipc: Disabling bearer [ 292.003462][ T2147] rust_binder: 8138: undelivered TRANSACTION_COMPLETE [ 292.020003][ T468] cdc_ncm 7-1:1.0: bind() failure [ 292.037101][ T468] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 292.049215][ T2147] rust_binder: 8138: undelivered transaction 582, process died [ 292.075138][ T468] cdc_ncm 7-1:1.1: bind() failure [ 292.097475][ T468] usb 7-1: USB disconnect, device number 16 [ 292.138357][ T8142] overlay: Unknown parameter 'nfs_exp:rt' [ 292.237062][ T8146] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2676'. [ 292.430187][ T8170] tipc: Enabled bearer , priority 10 [ 292.449045][ T8169] tipc: Resetting bearer [ 292.462829][ T8169] tipc: Disabling bearer [ 292.504794][ T8172] batadv_slave_1: entered promiscuous mode [ 292.522056][ T8171] batadv_slave_1: left promiscuous mode [ 292.553606][ T421] rust_binder: 8173: undelivered TRANSACTION_COMPLETE [ 292.575111][ T8176] overlay: Unknown parameter 'nfs_exp\rt' [ 292.582090][ T468] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 292.602879][ T421] rust_binder: 8173: undelivered transaction 586, process died [ 292.626221][ T8179] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x00000000000000080000000000000000000700000000000000000000' [ 292.677083][ T8186] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2690'. [ 292.778810][ T468] usb 2-1: device descriptor read/64, error -71 [ 292.832126][ T8201] tipc: Enabled bearer , priority 10 [ 292.856914][ T8200] tipc: Resetting bearer [ 292.877543][ T8200] tipc: Disabling bearer [ 292.961916][ T8211] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 293.068918][ T468] usb 2-1: device descriptor read/64, error -71 [ 293.094819][ T2147] rust_binder: 8249: undelivered TRANSACTION_COMPLETE [ 293.116760][ T2147] rust_binder: 8249: undelivered transaction 590, process died [ 293.129968][ T8254] overlay: Unknown parameter 'nfs_expo/t' [ 293.139083][ T404] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 293.168969][ T421] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 293.230605][ T8266] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2703'. [ 293.319705][ T8199] cgroup: fork rejected by pids controller in /syz6 [ 293.337887][ T468] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 293.358138][ T421] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.385926][ T404] usb 7-1: config index 0 descriptor too short (expected 65003, got 45) [ 293.410430][ T421] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 293.439116][ T421] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.489120][ T404] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 293.500444][ T421] usb 8-1: Product: syz [ 293.505417][ T421] usb 8-1: Manufacturer: syz [ 293.531161][ T404] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.540871][ T468] usb 2-1: device descriptor read/64, error -71 [ 293.568600][ T421] usb 8-1: SerialNumber: syz [ 293.574332][ T404] usb 7-1: Product: syz [ 293.591873][ T404] usb 7-1: Manufacturer: syz [ 293.607618][ T404] usb 7-1: SerialNumber: syz [ 293.809267][ T468] usb 2-1: device descriptor read/64, error -71 [ 293.929393][ T468] usb usb2-port1: attempt power cycle [ 294.001165][ T404] rtl8150 7-1:1.0: couldn't reset the device [ 294.009346][ T404] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 294.031090][ T404] usb 7-1: USB disconnect, device number 17 [ 294.289442][ T468] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 294.310388][ T468] usb 2-1: device descriptor read/8, error -71 [ 294.440491][ T468] usb 2-1: device descriptor read/8, error -71 [ 294.514725][ T8331] tipc: Enabled bearer , priority 10 [ 294.524495][ T8330] tipc: Resetting bearer [ 294.532489][ T8330] tipc: Disabling bearer [ 294.569853][ T404] rust_binder: 8332: undelivered TRANSACTION_COMPLETE [ 294.583841][ T421] cdc_ncm 8-1:1.0: bind() failure [ 294.594165][ T404] rust_binder: 8332: undelivered transaction 594, process died [ 294.607498][ T421] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 294.619995][ T421] cdc_ncm 8-1:1.1: bind() failure [ 294.638524][ T421] usb 8-1: USB disconnect, device number 19 [ 294.666001][ T8338] overlay: Unknown parameter 'nfs_expo:t' [ 294.679617][ T468] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 294.692400][ T8340] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2714'. [ 294.723158][ T468] usb 2-1: device descriptor read/8, error -71 [ 294.841033][ T8361] tipc: Enabled bearer , priority 10 [ 294.849522][ T8360] tipc: Resetting bearer [ 294.857474][ T8360] tipc: Disabling bearer [ 294.865565][ T468] usb 2-1: device descriptor read/8, error -71 [ 294.979845][ T468] usb usb2-port1: unable to enumerate USB device [ 295.100642][ T468] rust_binder: 8364: undelivered TRANSACTION_COMPLETE [ 295.116103][ T468] rust_binder: 8364: undelivered transaction 598, process died [ 295.126493][ T8367] overlay: Unknown parameter 'nfs_expo\t' [ 295.152165][ T8371] netlink: 140 bytes leftover after parsing attributes in process `syz.7.2725'. [ 295.181785][ T36] audit: type=1400 audit(1700000254.857:528): avc: denied { watch watch_reads } for pid=8374 comm="syz.7.2727" path="/51/file0" dev="tmpfs" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 295.210491][ T8375] x_tables: unsorted underflow at hook 1 [ 295.291668][ T8384] tipc: New replicast peer: 255.255.255.255 [ 295.300102][ T8384] tipc: Enabled bearer , priority 10 [ 295.308143][ T8384] tipc: Enabling of bearer rejected, already enabled [ 295.318308][ T8384] tipc: Enabling of bearer rejected, already enabled [ 295.331242][ T8384] tipc: Enabling of bearer rejected, already enabled [ 295.349900][ T8388] tipc: Enabled bearer , priority 10 [ 295.358190][ T8384] tipc: Enabling of bearer rejected, already enabled [ 295.367866][ T8387] tipc: Resetting bearer [ 295.379432][ T8387] tipc: Disabling bearer [ 295.389608][ T8384] tipc: Enabling of bearer rejected, already enabled [ 295.399116][ T8384] tipc: Enabling of bearer rejected, already enabled [ 295.416342][ T8384] tipc: Enabling of bearer rejected, already enabled [ 295.428162][ T8384] tipc: Enabling of bearer rejected, already enabled [ 295.437893][ T8384] tipc: Enabling of bearer rejected, already enabled [ 295.447585][ T8384] tipc: Enabling of bearer rejected, already enabled [ 295.457080][ T8384] tipc: Enabling of bearer rejected, already enabled [ 295.466649][ T8384] tipc: Enabling of bearer rejected, already enabled [ 295.475994][ T8384] tipc: Enabling of bearer rejected, already enabled [ 295.485331][ T8384] tipc: Enabling of bearer rejected, already enabled [ 295.494655][ T8384] tipc: Enabling of bearer rejected, already enabled [ 295.503995][ T8384] tipc: Enabling of bearer rejected, already enabled [ 295.513453][ T8384] tipc: Enabling of bearer rejected, already enabled [ 295.522790][ T8384] tipc: Enabling of bearer rejected, already enabled [ 295.532127][ T8384] tipc: Enabling of bearer rejected, already enabled [ 295.541461][ T8384] tipc: Enabling of bearer rejected, already enabled [ 295.550772][ T8384] tipc: Enabling of bearer rejected, already enabled [ 295.560093][ T8384] tipc: Enabling of bearer rejected, already enabled [ 295.569335][ T8384] tipc: Enabling of bearer rejected, already enabled [ 295.578825][ T8384] tipc: Enabling of bearer rejected, already enabled [ 295.588185][ T8384] tipc: Enabling of bearer rejected, already enabled [ 295.597784][ T8384] tipc: Enabling of bearer rejected, already enabled [ 295.607163][ T8384] tipc: Enabling of bearer rejected, already enabled [ 295.619691][ T8384] tipc: Enabling of bearer rejected, already enabled [ 295.639609][ T8384] tipc: Enabling of bearer rejected, already enabled [ 295.652688][ T8384] tipc: Enabling of bearer rejected, already enabled [ 295.662071][ T8384] tipc: Enabling of bearer rejected, already enabled [ 295.676358][ T8384] tipc: Enabling of bearer rejected, already enabled [ 295.700027][ T421] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 295.719860][ T8397] overlay: Unknown parameter 'nfs_expor' [ 295.729174][ T468] rust_binder: 8394: undelivered transaction 602, process died [ 295.743491][ T36] audit: type=1400 audit(1700000255.416:529): avc: denied { read write } for pid=8398 comm="syz.3.2737" name="cpu_dma_latency" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 295.772912][ T468] rust_binder: 8394: undelivered TRANSACTION_COMPLETE [ 295.809773][ T8403] netlink: 140 bytes leftover after parsing attributes in process `syz.7.2739'. [ 295.820901][ T36] audit: type=1400 audit(1700000255.416:530): avc: denied { open } for pid=8398 comm="syz.3.2737" path="/79/dev/cpu_dma_latency" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 295.901106][ T421] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.930233][ T421] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 295.941448][ T421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.956890][ T421] usb 2-1: Product: syz [ 295.969405][ T421] usb 2-1: Manufacturer: syz [ 295.979203][ T421] usb 2-1: SerialNumber: syz [ 296.020164][ T2147] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 296.110259][ T404] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 296.170229][ T2147] usb 4-1: Using ep0 maxpacket: 8 [ 296.177401][ T2147] usb 4-1: config 0 interface 0 has no altsetting 0 [ 296.185666][ T2147] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 296.197532][ T2147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.210142][ T2147] usb 4-1: config 0 descriptor?? [ 296.216227][ T468] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 296.261256][ T404] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.274642][ T404] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 296.285896][ T404] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.298127][ T404] usb 7-1: config 0 descriptor?? [ 296.371281][ T468] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.384452][ T468] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.396738][ T468] usb 8-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 296.412271][ T64] tipc: Node number set to 3211213627 [ 296.418982][ T468] usb 8-1: config 0 interface 0 has no altsetting 0 [ 296.427271][ T468] usb 8-1: New USB device found, idVendor=1b96, idProduct=0006, bcdDevice= 0.00 [ 296.438661][ T468] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.449182][ T468] usb 8-1: config 0 descriptor?? [ 296.507365][ T404] usbhid 7-1:0.0: can't add hid device: -71 [ 296.514608][ T404] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 296.526870][ T404] usb 7-1: USB disconnect, device number 18 [ 296.649964][ T2147] input: HID 047f:ffff as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:047F:FFFF.0029/input/input70 [ 296.669560][ T8414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.688085][ T2147] plantronics 0003:047F:FFFF.0029: input,hiddev96,hidraw0: USB HID v0.0d Joystick [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 296.706476][ T8414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.736896][ T468] usbhid 8-1:0.0: can't add hid device: -32 [ 296.745090][ T468] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 296.871388][ T468] usb 4-1: USB disconnect, device number 113 [ 297.010512][ T404] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 297.028596][ T421] cdc_ncm 2-1:1.0: bind() failure [ 297.037484][ T421] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 297.047296][ T421] cdc_ncm 2-1:1.1: bind() failure [ 297.058672][ T421] usb 2-1: USB disconnect, device number 111 [ 297.150652][ T404] usb 7-1: device descriptor read/64, error -71 [ 297.391066][ T404] usb 7-1: device descriptor read/64, error -71 [ 297.549251][ T8421] tipc: Enabled bearer , priority 10 [ 297.557759][ T8420] tipc: Resetting bearer [ 297.566501][ T8420] tipc: Disabling bearer [ 297.609829][ T8425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2748'. [ 297.630228][ T2147] rust_binder: 8426: undelivered TRANSACTION_COMPLETE [ 297.640746][ T404] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 297.650011][ T421] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 297.665390][ T8429] overlay: Unknown parameter 'nfs_expor:' [ 297.672724][ T2147] rust_binder: 8426: undelivered transaction 606, process died [ 297.810817][ T421] usb 4-1: device descriptor read/64, error -71 [ 297.818458][ T404] usb 7-1: device descriptor read/64, error -71 [ 298.060923][ T404] usb 7-1: device descriptor read/64, error -71 [ 298.068490][ T421] usb 4-1: device descriptor read/64, error -71 [ 298.181034][ T404] usb usb7-port1: attempt power cycle [ 298.310993][ T421] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 298.451066][ T421] usb 4-1: device descriptor read/64, error -71 [ 298.521052][ T404] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 298.540585][ T8435] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2752'. [ 298.552576][ T404] usb 7-1: device descriptor read/8, error -71 [ 298.651960][ T8448] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2758'. [ 298.691118][ T421] usb 4-1: device descriptor read/64, error -71 [ 298.699615][ T404] usb 7-1: device descriptor read/8, error -71 [ 298.801278][ T421] usb usb4-port1: attempt power cycle [ 298.884570][ T8452] tipc: Enabled bearer , priority 10 [ 298.893081][ T8451] tipc: Resetting bearer [ 298.900800][ T8451] tipc: Disabling bearer [ 298.961234][ T468] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 298.984350][ T2147] usb 8-1: USB disconnect, device number 20 [ 299.001922][ T64] rust_binder: 8455: undelivered TRANSACTION_COMPLETE [ 299.017718][ T64] rust_binder: 8455: undelivered transaction 610, process died [ 299.027488][ T8458] overlay: Unknown parameter 'nfs_expor\' [ 299.082297][ T8463] netlink: 140 bytes leftover after parsing attributes in process `syz.7.2765'. [ 299.112889][ T468] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.132128][ T468] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 255, using maximum allowed: 30 [ 299.147070][ T421] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 299.171243][ T468] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 299.197944][ T421] usb 4-1: device descriptor read/8, error -71 [ 299.212493][ T468] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 299.223428][ T404] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 299.238218][ T468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.248969][ T468] usb 2-1: Product: syz [ 299.254063][ T468] usb 2-1: Manufacturer: syz [ 299.259688][ T468] usb 2-1: SerialNumber: syz [ 299.266268][ T404] usb 7-1: device descriptor read/8, error -71 [ 299.342309][ T421] usb 4-1: device descriptor read/8, error -71 [ 299.402313][ T404] usb 7-1: device descriptor read/8, error -71 [ 299.512080][ T404] usb usb7-port1: unable to enumerate USB device [ 299.581384][ T421] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 299.625676][ T421] usb 4-1: device descriptor read/8, error -71 [ 299.717366][ T8482] tipc: Enabled bearer , priority 10 [ 299.726025][ T8481] tipc: Resetting bearer [ 299.733933][ T8481] tipc: Disabling bearer [ 299.766263][ T421] usb 4-1: device descriptor read/8, error -71 [ 299.781436][ T9] rust_binder: 8483: undelivered TRANSACTION_COMPLETE [ 299.797180][ T9] rust_binder: 8483: undelivered transaction 614, process died [ 299.891554][ T421] usb usb4-port1: unable to enumerate USB device [ 300.322598][ T468] cdc_ncm 2-1:1.0: bind() failure [ 300.331201][ T468] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 300.339678][ T468] cdc_ncm 2-1:1.1: bind() failure [ 300.347733][ T468] usb 2-1: USB disconnect, device number 112 [ 300.417491][ T8491] overlay: Unknown parameter 'nfs_expors' [ 300.434744][ T8493] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2777'. [ 300.543965][ T36] audit: type=1400 audit(1700000260.215:531): avc: denied { create } for pid=8504 comm="syz.3.2781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 300.630172][ T468] rust_binder: 8485: undelivered TRANSACTION_ERROR: 29189 [ 300.654446][ T8511] tipc: Enabled bearer , priority 10 [ 300.667996][ T8510] tipc: Resetting bearer [ 300.686093][ T8510] tipc: Disabling bearer [ 300.710563][ T468] rust_binder: 8516: undelivered TRANSACTION_COMPLETE [ 300.731854][ T9] rust_binder: 8516: undelivered transaction 620, process died [ 300.775466][ T8527] overlay: Bad value for 'nfs_export' [ 300.790615][ T8529] netlink: 140 bytes leftover after parsing attributes in process `syz.7.2790'. [ 300.881797][ T9] rust_binder: 8544: undelivered transaction 624, process died [ 300.897683][ T9] rust_binder: 8544: undelivered TRANSACTION_COMPLETE [ 300.923577][ T8549] tipc: Enabled bearer , priority 10 [ 300.932198][ T8548] tipc: Resetting bearer [ 300.939907][ T8548] tipc: Disabling bearer [ 300.971094][ T8552] overlay: Bad value for 'nfs_export' [ 300.981772][ T468] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 301.022248][ T8556] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2802'. [ 301.063461][ T8562] rust_binder: 8561:8562 no such ref 1 [ 301.070163][ T8562] rust_binder: 8561:8562 no such ref 2 [ 301.076928][ T8562] rust_binder: 8561:8562 no such ref 1 [ 301.083559][ T8562] rust_binder: 8561:8562 no such ref 2 [ 301.121859][ T468] usb 4-1: device descriptor read/64, error -71 [ 301.331963][ T421] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 301.361910][ T468] usb 4-1: device descriptor read/64, error -71 [ 301.401970][ T9] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 301.482896][ T421] usb 8-1: not running at top speed; connect to a high speed hub [ 301.492951][ T421] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.505303][ T421] usb 8-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 301.517099][ T421] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.531813][ T421] usb 8-1: Found UVC 1.00 device (0000:0000) [ 301.552879][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.566478][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 301.577544][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.587226][ T9] usb 2-1: Product: syz [ 301.592402][ T9] usb 2-1: Manufacturer: syz [ 301.597896][ T9] usb 2-1: SerialNumber: syz [ 301.603484][ T468] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 301.742036][ T468] usb 4-1: device descriptor read/64, error -71 [ 301.801704][ T421] usb 8-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 301.819397][ T421] uvcvideo 8-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 301.831627][ T421] uvcvideo 8-1:1.1: Failed to initialize the device (-71). [ 301.844403][ T421] usb 8-1: USB disconnect, device number 21 [ 301.957637][ T404] rust_binder: 8573: undelivered TRANSACTION_COMPLETE [ 301.974287][ T404] rust_binder: 8573: undelivered transaction 637, process died [ 301.985981][ T8576] tipc: Enabled bearer , priority 10 [ 301.994270][ T468] usb 4-1: device descriptor read/64, error -71 [ 302.002652][ T8575] tipc: Resetting bearer [ 302.010414][ T8575] tipc: Disabling bearer [ 302.099763][ T8579] overlayfs: failed to resolve './bus': -2 [ 302.112173][ T468] usb usb4-port1: attempt power cycle [ 302.452160][ T468] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 302.475000][ T468] usb 4-1: device descriptor read/8, error -71 [ 302.534566][ T8597] batadv_slave_0: entered promiscuous mode [ 302.542597][ T8596] batadv_slave_0: left promiscuous mode [ 302.592201][ T2147] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 302.613149][ T468] usb 4-1: device descriptor read/8, error -71 [ 302.620937][ T9] cdc_ncm 2-1:1.0: bind() failure [ 302.629412][ T9] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 302.639057][ T9] cdc_ncm 2-1:1.1: bind() failure [ 302.652267][ T9] usb 2-1: USB disconnect, device number 113 [ 302.753030][ T2147] usb 8-1: not running at top speed; connect to a high speed hub [ 302.765853][ T8602] overlay: Bad value for 'nfs_export' [ 302.773019][ T2147] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.789394][ T2147] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 302.802059][ T2147] usb 8-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 302.814784][ T2147] usb 8-1: New USB device strings: Mfr=245, Product=194, SerialNumber=0 [ 302.825205][ T2147] usb 8-1: Product: syz [ 302.830467][ T2147] usb 8-1: Manufacturer: syz [ 302.840488][ T2147] usb 8-1: Found UVC 1.00 device syz (225a:e1d4) [ 302.849460][ T2147] usb 8-1: Failed to create links for entity 1 [ 302.856967][ T2147] usb 8-1: Failed to register entities (-22). [ 302.872307][ T468] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 302.893238][ T468] usb 4-1: device descriptor read/8, error -71 [ 303.023659][ T468] usb 4-1: device descriptor read/8, error -71 [ 303.051273][ T2147] usb 8-1: USB disconnect, device number 22 [ 303.134908][ T468] usb usb4-port1: unable to enumerate USB device [ 303.232041][ T8608] overlayfs: failed to resolve './bus': -2 [ 303.600178][ T8621] batadv_slave_0: entered promiscuous mode [ 303.618405][ T8620] batadv_slave_0: left promiscuous mode [ 303.765874][ T8635] FAULT_INJECTION: forcing a failure. [ 303.765874][ T8635] name failslab, interval 1, probability 0, space 0, times 0 [ 303.797291][ T8635] CPU: 0 UID: 0 PID: 8635 Comm: syz.7.2831 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 303.797318][ T8635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 303.797327][ T8635] Call Trace: [ 303.797332][ T8635] [ 303.797338][ T8635] __dump_stack+0x21/0x30 [ 303.797357][ T8635] dump_stack_lvl+0x140/0x1c0 [ 303.797369][ T8635] ? __cfi_dump_stack_lvl+0x10/0x10 [ 303.797381][ T8635] ? avc_has_perm_noaudit+0x289/0x360 [ 303.797400][ T8635] dump_stack+0x19/0x20 [ 303.797411][ T8635] should_fail_ex+0x3c2/0x510 [ 303.797431][ T8635] should_failslab+0xac/0x100 [ 303.797446][ T8635] kmem_cache_alloc_node_noprof+0x45/0x420 [ 303.797467][ T8635] ? __kasan_check_write+0x18/0x20 [ 303.797485][ T8635] ? alloc_io_context+0x44/0x300 [ 303.797562][ T8635] ? __cfi__raw_spin_lock+0x10/0x10 [ 303.797577][ T8635] alloc_io_context+0x44/0x300 [ 303.797590][ T8635] set_task_ioprio+0x1f6/0x360 [ 303.797603][ T8635] __se_sys_ioprio_set+0x5d4/0x720 [ 303.797634][ T8635] __x64_sys_ioprio_set+0x7f/0xa0 [ 303.797655][ T8635] x64_sys_call+0x2b90/0x2ee0 [ 303.797668][ T8635] do_syscall_64+0x57/0xf0 [ 303.797681][ T8635] ? clear_bhb_loop+0x50/0xa0 [ 303.797698][ T8635] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 303.797714][ T8635] RIP: 0033:0x7f2269d9fb19 [ 303.797726][ T8635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.797737][ T8635] RSP: 002b:00007f226ac08028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fb [ 303.797754][ T8635] RAX: ffffffffffffffda RBX: 00007f226a025fa0 RCX: 00007f2269d9fb19 [ 303.797763][ T8635] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 303.797771][ T8635] RBP: 00007f2269e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 303.797779][ T8635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.797787][ T8635] R13: 00007f226a026038 R14: 00007f226a025fa0 R15: 00007ffcea001ec8 [ 303.797798][ T8635] [ 304.534453][ T8638] overlayfs: failed to resolve './bus': -2 [ 304.592352][ T8652] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2836'. [ 304.663593][ T8664] FAULT_INJECTION: forcing a failure. [ 304.663593][ T8664] name failslab, interval 1, probability 0, space 0, times 0 [ 305.274334][ T8664] CPU: 0 UID: 0 PID: 8664 Comm: syz.6.2845 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 305.274361][ T8664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 305.274370][ T8664] Call Trace: [ 305.274376][ T8664] [ 305.274381][ T8664] __dump_stack+0x21/0x30 [ 305.274400][ T8664] dump_stack_lvl+0x140/0x1c0 [ 305.274412][ T8664] ? __cfi_dump_stack_lvl+0x10/0x10 [ 305.274424][ T8664] ? avc_has_perm_noaudit+0x289/0x360 [ 305.274439][ T8664] dump_stack+0x19/0x20 [ 305.274451][ T8664] should_fail_ex+0x3c2/0x510 [ 305.274471][ T8664] should_failslab+0xac/0x100 [ 305.274485][ T8664] kmem_cache_alloc_node_noprof+0x45/0x420 [ 305.274506][ T8664] ? __kasan_check_write+0x18/0x20 [ 305.274524][ T8664] ? alloc_io_context+0x44/0x300 [ 305.274544][ T8664] ? __cfi__raw_spin_lock+0x10/0x10 [ 305.274558][ T8664] alloc_io_context+0x44/0x300 [ 305.274570][ T8664] set_task_ioprio+0x1f6/0x360 [ 305.274582][ T8664] __se_sys_ioprio_set+0x5d4/0x720 [ 305.274597][ T8664] __x64_sys_ioprio_set+0x7f/0xa0 [ 305.274611][ T8664] x64_sys_call+0x2b90/0x2ee0 [ 305.274624][ T8664] do_syscall_64+0x57/0xf0 [ 305.274636][ T8664] ? clear_bhb_loop+0x50/0xa0 [ 305.274654][ T8664] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 305.274671][ T8664] RIP: 0033:0x7f479979fb19 [ 305.274683][ T8664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.274694][ T8664] RSP: 002b:00007f479a675028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fb [ 305.274710][ T8664] RAX: ffffffffffffffda RBX: 00007f4799a25fa0 RCX: 00007f479979fb19 [ 305.274720][ T8664] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 305.274728][ T8664] RBP: 00007f4799837b70 R08: 0000000000000000 R09: 0000000000000000 [ 305.274736][ T8664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.274744][ T8664] R13: 00007f4799a26038 R14: 00007f4799a25fa0 R15: 00007ffcf07e4798 [ 305.274755][ T8664] [ 305.644189][ T421] rust_binder: 8678: undelivered transaction 641, process died [ 305.653336][ T421] rust_binder: 8678: undelivered TRANSACTION_COMPLETE [ 306.102985][ T9] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 306.127750][ T8695] tipc: Enabled bearer , priority 10 [ 306.150915][ T8694] tipc: Resetting bearer [ 306.171725][ T8694] tipc: Disabling bearer [ 306.230378][ T8697] overlay: Bad value for 'nfs_export' [ 306.264008][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 306.303023][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 306.326743][ T8702] fuse: Bad value for 'fd' [ 306.338174][ T8703] kvm: MWAIT instruction emulated as NOP! [ 306.354526][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 306.378864][ T8702] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2861'. [ 306.409928][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 306.421686][ T8702] tipc: Invalid UDP bearer configuration [ 306.421705][ T8702] tipc: Enabling of bearer rejected, failed to enable media [ 306.449272][ T9] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 306.465236][ T8702] kvm: kvm [8701]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 306.475880][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.503317][ T9] usb 2-1: Product: syz [ 306.508320][ T9] usb 2-1: Manufacturer: syz [ 306.514200][ T8702] kvm: kvm [8701]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 306.533087][ T9] usb 2-1: SerialNumber: syz [ 306.546534][ T8685] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 306.555630][ T8685] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 306.588341][ T9] pl2303 2-1:1.0: pl2303 converter detected [ 306.605495][ T9] pl2303 2-1:1.0: unknown device type, please report to linux-usb@vger.kernel.org [ 306.633465][ T468] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 306.790209][ T421] usb 2-1: USB disconnect, device number 114 [ 306.804446][ T468] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.830528][ T468] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 306.856960][ T468] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.885302][ T468] usb 7-1: Product: syz [ 306.900565][ T468] usb 7-1: Manufacturer: syz [ 306.914228][ T468] usb 7-1: SerialNumber: syz [ 307.107237][ T8712] cgroup: fork rejected by pids controller in /syz3 [ 307.653302][ T421] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 307.814477][ T421] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.835684][ T421] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 307.863529][ T421] usb 1-1: Dual-Role OTG device on HNP port [ 307.876486][ T421] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.12 [ 307.913725][ T404] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 307.922968][ T421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.937261][ T468] cdc_ncm 7-1:1.0: bind() failure [ 307.954750][ T468] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 307.973794][ C0] ------------[ cut here ]------------ [ 307.980340][ C0] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 307.988308][ C0] WARNING: CPU: 0 PID: 110 at drivers/usb/gadget/udc/core.c:134 usb_ep_enable+0x210/0x3c0 [ 308.000218][ C0] Modules linked in: [ 308.004874][ C0] CPU: 0 UID: 0 PID: 110 Comm: udevd Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 308.018063][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 308.030118][ C0] RIP: 0010:usb_ep_enable+0x210/0x3c0 [ 308.036541][ C0] Code: 4d 00 48 c7 c0 a0 c1 6d 86 49 c7 c0 c0 c1 6d 86 4c 0f 44 c0 48 c7 c7 60 c1 6d 86 48 c7 c6 a2 d6 1f 87 44 89 f2 e8 00 c0 46 fd <0f> 0b e9 4c ff ff ff e8 b4 d8 cb fd 49 bc 00 00 00 00 00 fc ff df [ 308.060051][ C0] RSP: 0018:ffffc90000007878 EFLAGS: 00010046 [ 308.067301][ C0] RAX: 5e7a61862294b200 RBX: ffff88810928c0b0 RCX: ffff88810ef64f00 [ 308.076840][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 308.086387][ C0] RBP: ffffc900000078a0 R08: 0000000000000003 R09: 0000000000000004 [ 308.095925][ C0] R10: dffffc0000000000 R11: fffffbfff0f9f344 R12: dffffc0000000000 [ 308.105464][ C0] R13: ffff88810928c0b8 R14: 0000000000000081 R15: ffff8881146a8b3a [ 308.115002][ C0] FS: 00007f3917c5e880(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 308.125690][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 308.133575][ C0] CR2: 00007f8fadd58078 CR3: 000000010eb9c000 CR4: 00000000003526b0 [ 308.143140][ C0] Call Trace: [ 308.147061][ C0] [ 308.150463][ C0] hidg_set_alt+0x138/0xa70 [ 308.155930][ C0] set_config+0x80f/0xd10 [ 308.161119][ C0] composite_setup+0x18b0/0x3320 [ 308.167022][ C0] ? __kasan_check_write+0x18/0x20 [ 308.173145][ C0] configfs_composite_setup+0xc6/0x110 [ 308.179668][ C0] dummy_timer+0x2eee/0x4900 [ 308.185183][ C0] ? try_to_wake_up+0xfc4/0x1d10 [ 308.191124][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 308.197041][ C0] ? _raw_spin_lock+0x92/0x120 [ 308.202738][ C0] ? timerqueue_del+0xd7/0x130 [ 308.208442][ C0] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 308.214926][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 308.220827][ C0] __hrtimer_run_queues+0x3ae/0x8e0 [ 308.227040][ C0] ? hrtimer_interrupt+0xf30/0xf30 [ 308.233159][ C0] ? read_tsc+0xd/0x20 [ 308.238010][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 308.245277][ C0] hrtimer_run_softirq+0x159/0x560 [ 308.251385][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 308.257637][ C0] handle_softirqs+0x1b0/0x5b0 [ 308.263365][ C0] __irq_exit_rcu+0x47/0xb0 [ 308.268743][ C0] irq_exit_rcu+0xd/0x30 [ 308.273919][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 308.280657][ C0] [ 308.284175][ C0] [ 308.287669][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 308.294828][ C0] RIP: 0010:__d_lookup_rcu+0xc2/0x3c0 [ 308.301250][ C0] Code: 45 8b 3f 44 89 fe 83 e6 02 31 ff e8 38 c3 94 ff 41 83 e7 02 0f 85 aa 02 00 00 4a 8d 1c f3 48 89 d8 48 c1 e8 03 42 80 3c 28 00 <74> 08 48 89 df e8 f4 6f ee ff 48 8b 1b 48 89 de 48 83 e6 fe 31 ff [ 308.324764][ C0] RSP: 0018:ffffc90000e7f8d8 EFLAGS: 00000246 [ 308.332032][ C0] RAX: 1ffff1103ecd1cde RBX: ffff8881f668e6f0 RCX: 0000000000000000 [ 308.341595][ C0] RDX: ffff88810ef64f00 RSI: 0000000000000000 RDI: 0000000000000000 [ 308.351157][ C0] RBP: ffffc90000e7f950 R08: ffff88810ef64f00 R09: 0000000000000002 [ 308.360730][ C0] R10: 0000000000002e2e R11: 0000000000000000 R12: ffffc90000e7fc50 [ 308.370285][ C0] R13: dffffc0000000000 R14: 0000000000051cde R15: 0000000000000000 [ 308.379858][ C0] ? __d_lookup_rcu+0xa8/0x3c0 [ 308.385579][ C0] lookup_fast+0xc8/0x540 [ 308.390772][ C0] path_openat+0x64f/0x35a0 [ 308.396158][ C0] ? kasan_save_alloc_info+0x3a/0x50 [ 308.402477][ C0] ? getname+0x1b/0x30 [ 308.407330][ C0] ? x64_sys_call+0xe69/0x2ee0 [ 308.413021][ C0] ? do_syscall_64+0x57/0xf0 [ 308.418503][ C0] ? do_filp_open+0x440/0x440 [ 308.424095][ C0] do_filp_open+0x1f2/0x440 [ 308.429471][ C0] ? __cfi_do_filp_open+0x10/0x10 [ 308.435488][ C0] ? alloc_fd+0x4c1/0x570 [ 308.440681][ C0] do_sys_openat2+0x134/0x1d0 [ 308.446265][ C0] ? do_sys_open+0x100/0x100 [ 308.451748][ C0] __x64_sys_openat+0x13a/0x170 [ 308.457552][ C0] x64_sys_call+0xe69/0x2ee0 [ 308.463037][ C0] do_syscall_64+0x57/0xf0 [ 308.468309][ C0] ? clear_bhb_loop+0x50/0xa0 [ 308.473921][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 308.480980][ C0] RIP: 0033:0x7f39174a7407 [ 308.486261][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 308.509791][ C0] RSP: 002b:00007ffd751c9d50 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 308.519978][ C0] RAX: ffffffffffffffda RBX: 00007f3917c5e880 RCX: 00007f39174a7407 [ 308.529520][ C0] RDX: 0000000000080141 RSI: 00005578bd15f02e RDI: ffffffffffffff9c [ 308.539071][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 308.548643][ C0] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff [ 308.558629][ C0] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000 [ 308.568188][ C0] [ 308.571808][ C0] ---[ end trace 0000000000000000 ]--- [ 308.578342][ C0] configfs-gadget.g1 gadget.0: Enable IN endpoint FAILED! [ 308.592140][ T468] cdc_ncm 7-1:1.1: bind() failure [ 309.293705][ T421] usb 1-1: can't set config #1, error -32 [ 309.313670][ T421] usb 1-1: USB disconnect, device number 100 [ 309.358155][ T468] usb 7-1: USB disconnect, device number 23 [ 309.373618][ T404] usb 2-1: device descriptor read/64, error -71 [ 309.613615][ T404] usb 2-1: device descriptor read/64, error -71 [ 309.853691][ T404] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 309.993673][ T404] usb 2-1: device descriptor read/64, error -71 [ 310.233716][ T404] usb 2-1: device descriptor read/64, error -71 [ 310.353821][ T404] usb usb2-port1: attempt power cycle