last executing test programs: 6.416958906s ago: executing program 0 (id=72): r0 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x80842) write$evdev(r1, &(0x7f0000000000)=[{{0x0, 0xea60}, 0x0, 0x1, 0x2}], 0xfe72) read(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x300, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xbc8ade810be1d404}, 0x20000980) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, 0xffffffffffffffff, 0x2d81d000) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x14) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0xfffffffffffffffd, 0x7, 0x7fff, 0x5, 0x48, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x4, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x100000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.362454267s ago: executing program 0 (id=73): r0 = syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12014101175129205705092006c70102010109022400010200100009045819028ab53800090506020001000006090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)={0x2c, 0x18, 0x15, 0x70bd28, 0xfefffbff, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0x10, 0x6, 0x0, 0x1, [@typed={0xb, 0x0, 0x0, 0x0, @str='FROZEN\x00'}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x40800}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x51, 0x28, 0xfffeffff, 0xfffd, 0xa, 0x9, 0x10, 0x6, 0x2, 0x40, 0x1, 0x9, 0x9, 0xd, 0xff, 0xfffffffd, [0x3, 0x3]}}) syz_usb_control_io$uac2(r0, 0x0, 0x0) 4.828108694s ago: executing program 1 (id=85): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000bf9d8cbdd060102000400078005000100"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.859532947s ago: executing program 1 (id=93): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$bind(0x0, 0x0, 0x0, 0x2a05404, 0x0) (async) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/mmu_shadow_zapped\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$binfmt_register(r8, &(0x7f0000002300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x3ff, 0x3a, '.', 0x3a, '#:', 0x3a, './file0'}, 0x2a) (async) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000099, 0x0, 0x7e}]}) (async) fsopen(0x0, 0x0) (async) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) sendto$inet(r0, &(0x7f0000000240)='+', 0x1, 0x40088c0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 32) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[{@max={'max', 0x3d, 0x6}}, {@stats}], [{@seclabel}]}) (rerun: 32) 3.838531048s ago: executing program 1 (id=94): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./cgroup\x00', &(0x7f00000003c0), 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB=',msize=0']) r2 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setresuid(0x0, 0x0, 0xee00) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000100001e903000000fedbdf250a0000000400"], 0x28}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) fchdir(r0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x80800000024) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000340)="b9db836e00c0c032eb004000000f0d55ecb9fa000000130f01d9300d76c4020a1bf7b805000000b90000c0fe0f660f3a0e6200090a41d9410f01c30f32ba00e500000f30660fc775022e0fba600c9864660ffc76009ac8ab0000c9003166b85766baa00066ed00d0", 0x68}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r5) recvmmsg(r5, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}, 0xfffffffe}], 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0xeeee8000, 0xf6ea5000, {0x6}}, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000"}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8923, &(0x7f00000000c0)={'bridge_slave_0\x00', @random="0163014030d9"}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r10 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r10, 0x1000006) fcntl$addseals(r10, 0x409, 0x7) 3.74037298s ago: executing program 2 (id=96): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000100)={@val={0x0, 0x88a8}, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x22, 0x14, 0x68, 0x0, 0x9, 0x29, 0x0, @remote, @multicast1}}}}}}, 0x26) syz_usb_connect$uac1(0x5, 0xa6, &(0x7f0000000280)=ANY=[@ANYBLOB="12011001000000406b1d0101400001020301090294000301080008090400000001010000062401"], 0x0) 3.73976921s ago: executing program 1 (id=97): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r2) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r3, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xf, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40040}, 0x8004) r4 = dup3(r0, r0, 0x80000) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x7) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x40, 0x20, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000300)) unshare(0x400) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f00000002c0)={0x0, 0x1, 0x3eb}) r9 = dup3(r1, r0, 0x0) r10 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r10, r11, r12, r13, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r15 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r15, r14, &(0x7f0000000180)={0x0, 0xfb87, 0x800, 0x5, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x0, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x2000, 0x82, 0x29b}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r15, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x14, {0x3c7, 0xffffffff, 0x0, 0x80000000, 0x5, 0xfff}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x6adef8a518bb13e}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 3.666940792s ago: executing program 1 (id=98): r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='my_debugfs/asoc/dais\x00', 0x0, 0x0) read(r0, &(0x7f0000000700), 0x400) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x0, 0x600000000, 0x766f16962f757307, 0xfff, 0x8, 0x0, [{0x8000000000000001, 0x3ff, 0x2, '\x00', 0x2009}, {0x8, 0x3b, 0x7, '\x00', 0x3104}, {0x101, 0x1, 0x85b, '\x00', 0x801}, {0x7fff, 0x7, 0x2, '\x00', 0x1382}, {0x3, 0x1, 0x0, '\x00', 0x1a89}, {0xd, 0x3, 0xe59, '\x00', 0x3200}, {0xed, 0x1a2, 0xfffffffffffffffb, '\x00', 0x230e}, {0xe7, 0xf, 0x5, '\x00', 0x1004}]}) write$P9_RXATTRCREATE(r0, &(0x7f0000000000)={0x7, 0x21, 0x2}, 0x7) syz_usb_connect$uac2(0x0, 0x9f, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) 3.32030489s ago: executing program 0 (id=99): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x6, 0x8ae83) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000200)={r1, 0x11, {0x2a00, 0x80010000, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x20, 0xd, "fee8a2ab78fc189fd1f8a0e91dc3aca7bd6447a4b4e00d9683dda1af1ea09de2b7ff0a01000000000000000003003904000000000000000000001000", "2809e8dbe10800000000000000002d0000b420a9c800", "90beab1c55070000120000000000000000000000000000e9000000000000c29e", [0x4, 0x40000000000000]}}) 3.249172402s ago: executing program 0 (id=100): r0 = syz_usb_connect(0x0, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x0, @empty}, {0x4, 0x4e22, @empty}, {0x2, 0x0, @remote}, 0x10c, 0x0, 0x0, 0xfdffffffffffffff, 0x18eb, &(0x7f00000001c0)='team_slave_1\x00', 0x40005, 0x1, 0x3}) syz_usb_disconnect(r0) 2.094281279s ago: executing program 3 (id=104): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004008, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x757, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xdc, 0x3, 0x1, {0x22, 0x27}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="2002000000002723c26313852642792c3cbdeace918d0fb74237cc0000ff0f00008881ce2a52973661d67a0c55"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.052478851s ago: executing program 2 (id=105): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x81, 0x3e, 0xe5, 0x81, 0x9, 0xf9, 0x37, 0x42, 0xfb, 0x8, 0x5, 0x2, 0xe9, 0x8, 0xda, 0x38}}) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000140)={0x3, 0x90}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="af4fd73a", 0xffffffffffffff19, 0x840, 0x0, 0x0) 1.945721013s ago: executing program 2 (id=106): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000000c0)={0x5, r0, 'id0\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000040)=0xc) setreuid(r2, 0x0) setresuid(0x0, 0xee00, 0x0) r3 = syz_clone(0x48411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(r3, 0x0, 0x40000000, 0x0) 1.944096894s ago: executing program 2 (id=107): pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)) setreuid(0x0, 0xee01) mmap$IORING_OFF_CQ_RING(0x0, 0xc00000, 0x7cc74eb8cea42275, 0x8031, 0xffffffffffffffff, 0x8000000) mlockall(0x1) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xf, 0xfffffff0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x81}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x3000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdc67, 0x2000, 0x4003bfff, 0x802b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d, 0x0, r6}}], 0x1, 0x0, 0x0) (async) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x81}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x3000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdc67, 0x2000, 0x4003bfff, 0x802b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d, 0x0, r6}}], 0x1, 0x0, 0x0) 1.943763823s ago: executing program 2 (id=108): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000002117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200", 0x55}], 0x1) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000100)={[0x5, 0x0, 0xfffffffffffffff9, 0xfff, 0x719b, 0x5, 0x100000000, 0x1, 0x6, 0x0, 0x6, 0x6, 0x10001, 0x9, 0x100000001, 0xfffffffffffffffe], 0x13a4fff, 0x201}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000069001500"], 0x18}], 0x1}, 0x8000) ioctl$KVM_GET_MSRS_cpu(r0, 0xc008ae88, &(0x7f0000000340)={0x10000000000000e6, 0x0, [{0xc0010000, 0x0, 0x3}]}) 1.940490874s ago: executing program 2 (id=109): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12014101175129205705092006c70102010109022400010200100009045819028ab53800090506020001000006090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x723, &(0x7f00000007c0)={{0x12, 0x1, 0x300, 0x7, 0x65, 0xa0, 0x8, 0x4b4, 0x931d, 0xfcc1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x711, 0x3, 0x86, 0xc, 0xa0, 0x6, "", [{{0x9, 0x4, 0x23, 0x2, 0xc, 0xc4, 0x19, 0x43, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0x8001, 0x4b}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x304, 0x5, 0x4, 0xe6}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x403, 0x4, 0xe, 0x0, 0x7, 0xf}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x303, 0x4, 0x1, 0x7}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x401, 0x5, 0xf, 0x8, 0x0, 0xe}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x400, 0x5, 0x1, 0x3, 0x7, 0x81}, @processing_unit={0xb, 0x24, 0x7, 0x6, 0x2, 0x1, "1bd5be89"}]}, @hid_hid={0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0x231}}], [{{0x9, 0x5, 0xc, 0xc, 0x3ff, 0xf3, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0xe241}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0xe276}]}}, {{0x9, 0x5, 0xf, 0x3, 0x8, 0x7, 0x9, 0xd9, [@generic={0xee, 0x30, "23eba4fb932e087d9d8bf4b18a3b2ac6391c4ac301eee7b39929e92f5f1c2a69c841970e1cafa4310a2119414ffddb6e47652c9595708cc4bae69caf351a4cd1494527ef29024e6210e04dbc66b9d57b85f2c5fdc610bb8e7f351a1711d8c4e0e54a098c645444f5a8b15097a830c1364d28d9562664b18d630dee6c37244757fbef85ad7fc8cb7dbbe5089a95ab067fea510509ac4437bea4325d35173bd953212a425139ff15dae28e2913c3d830a8f4e4132cf633f86e08f2db168fdb388c19ed463cae196050ef17afcc63fe71ba5d2605ea67fde7de08b501dfe698843cf001784d9180ab394591d1b1"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0x11, 0x5, 0x2, [@generic={0xc0, 0xa, "7009e0371e9b4838a28de49ba3c50f561a81573fc3a1d1fe377d4e20529b2f99e9ac7ec196c7f34c9c77644fcffec923d6f253cc3f93310abe3cd696280ee4b0e212bf99d3a2262693ab0b706227b1c8dacbd511ac00783487f8c2411100a7233430e9e00f49a9a23130ce74614e4802e85fc7f5b429c531dbe40e66c4afe9285691eca3426e221c3df74ae7547b2bae5b690f8eb41c16cebbd315bbb7ced24670ac59db09b407da8e0450e54fdd1e5010fbf530aeab3161af329e5cddc1"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x98, 0x6, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x401}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x0, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf4, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xe707}]}}, {{0x9, 0x5, 0x6, 0x2, 0x200, 0x7, 0x4, 0x12, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x87, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x80, 0x92a5}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0xc0, 0x2, 0xc}}, {{0x9, 0x5, 0x6, 0x1, 0x40, 0x7d, 0x6d, 0xb}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x2, 0xfc, 0x3, [@generic={0xac, 0x23, "e36789bcfb2e65f7e42b8481e3ff6599fdf7dffe0e50e1b67368547ab449417ee79670c9461bcfdf1b75cb30e5621eaa227195daff26dd4de44201b9f77a150f07898b9d406a9896bdae4fba1504c75c0c5aa1e54657262774b7a3b989b772edbb4affdbd42945d7326500942aae83758a546bb05cc65f9a5a1ac6fb519f352670a8607322ea244738d880973965956a7998bad48cf72009762a7dd42025e2c475c639ec8163bda66be2"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x9, 0x21, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x5}, @generic={0x78, 0x21, "1fbe26a1d5a9f647250c8f94a500982c5d35cf513427d57b799ed43e6b61ab59ec7582a73a3ea440f49dbc95da429700a1f1a7ada5e35f933818653ef3ac0142533db6142051cbca266ebaaabcbf27702f08b99a27cdc4b4c1da4110008dc7a62ce018007a87e3eebf4934d1ffed8f58cecb81de9248"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x7, 0xf8, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x10}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x4}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0xb, 0xf, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x81, 0x2}]}}]}}, {{0x9, 0x4, 0x6d, 0x4, 0x6, 0x48, 0xa0, 0x83, 0xd6, [@generic={0x4d, 0x23, "fec9064e2a1288b0fb1f616011ad5f93d8e5a7d429a7882eb46149cddffc8ffd65f065b09032fb174e65db8ef1ef505911f6c0ca1cfc71ce536cb387e9487b1a46f69be48d6554df24e774"}], [{{0x9, 0x5, 0x5, 0x10, 0x200, 0x1, 0x7, 0x5, [@generic={0xb2, 0x23, "ed9394486144c5b492f6d1532b19688034fadd724209318911c1fad17b773b24f8744b6e6340364a6fac94f1c62508a79d6314413f0d736355dcaaea3cab3f469bf2277bb81b36f647664cb4f9170a51963df4851d3d592800f3ea16a63dcda769867832ac24a28e6d405aaccbd6d7a02fa64bbd178c42ce51aba5ff860e2108dae0074cc1e01653222946dbbaf4320c2d097385fd75b30118e70ea6e0c45f22113f26aaa9c116908adaf8cb82ec8af9"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x6, 0x4, 0x40}}, {{0x9, 0x5, 0xa, 0x4, 0x3ff, 0x7, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf8, 0x18}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x5}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x9, 0x7, 0x58}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0x9, 0xe, 0x2, [@generic={0xcb, 0x2c, "333670ce4a3a74424bdc5183cc4d54e9be37bb48b26623643e5dc75268d56a92fa502c7f09716491bec84c1c6ba4e7396338e3cb1d0a23fdc9f7ba8b693c1f997c5a2e41475ebf2f3c8bbeb16db9631066a062a3ef0c09ef9629ecf431354771d24a8f95c0894cfcf4bc8c097c0132d80d44f2266ace12ac140ec4e1fd47d580a7199753c162e48834d756dbed0e136ee7f6f63f7916f300fe0ca613615d17abc4cb136050c1c411a258cc2a0305b76a58e0a287f49006dea01e1769dd8d8526c6ba93ef95482ed00f"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x53, 0x7}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x5, 0x1d, 0x2}}]}}, {{0x9, 0x4, 0x4, 0x3, 0x0, 0x75, 0x20, 0x89, 0x4, [@hid_hid={0x9, 0x21, 0x5, 0x32, 0x1, {0x22, 0xce}}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "2ef50f56"}, {0x5, 0x24, 0x0, 0x132}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x4, 0xf, 0xf1}, [@mdlm_detail={0xbe, 0x24, 0x13, 0xee, "4465eae2072158558fc3c07af54075c981d3c9b3368bf7bd3966934db9954ad797ffaf6427dd5ae9ff408bea428c5f249c2462d8c7938d75a75ff09725f0dc33b4efefcb2ebf27ebd3c942de2f7c56179561e1ca61eb83c77000dd05e659db5323104bcdbd0b1f2d3b4fa60b2cd2ad4f0a9177cbd07fae0b017e9f36a1dda1670137efa9d78e88ffcaaa715e6670ea57cd2ca82cd6eda63c193c8669561b4b33e7a8bfb74f8c8b27eb6ac8b370577efbae18c2d2a2f2a494ca1a"}, @ncm={0x6, 0x24, 0x1a, 0x9, 0xf}, @acm={0x4, 0x24, 0x2, 0xc}, @ncm={0x6, 0x24, 0x1a, 0x8, 0x4}]}]}}]}}]}}, &(0x7f0000001440)={0xa, &(0x7f0000000f00)={0xa, 0x6, 0x300, 0x0, 0x95, 0x8, 0x10, 0xfb}, 0x1a, &(0x7f0000000f40)={0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x30, 0x0, 0x69, 0x863e, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x8, 0x3, 0x9}]}, 0x9, [{0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x1409}}, {0xd1, &(0x7f0000000fc0)=@string={0xd1, 0x3, "717c0f057c02057cf278cbe5679479cea20b979bf3cc0257bc4ff3a40904b38ab676c518edf1ad0e2f1862fe33c04bf81e2f2407963ae95c8e320f7cff804a1b49408dbb201567374ff2fecb1875356821547b43c6d7595dfc756da132e63b6b6c5e68ac13cc97d6de2cbafd8272e8f944459ef975d485303453cf14afdf82fafd9abc07d24ec8425e2cb8e0e3da8ddad9202ebb17f69e79e05342753e90a8736d00cb42926c78f204bf9a0b45d27748d77e9766ffbec31d0852b942b480094646407c004ca45711e685edaac87390"}}, {0x101, &(0x7f00000010c0)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x458}}, {0x4f, &(0x7f0000001240)=@string={0x4f, 0x3, "354913249b4f1297525d2095e9ad0dba686733f534ce2e6d6da9749086790643d8fb5ebd99b9023135ec30e9fb12316a4e725efebd0108d44e30762aff40d23a5ce4fc3fc444aebfcbb12aa8f3"}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4d, &(0x7f0000001340)=@string={0x4d, 0x3, "2d12e78712ae1fbf989405bddfe303e57d1c5aab05e19360722d7ea8189e32dd2652a2cd1a4e5f095d7ea8270e3e84009e71b9c4900a4ebf13179d43b5531f1ea7f69a3e1932bc3b0231b0"}}, {0x63, &(0x7f00000013c0)=@string={0x63, 0x3, "d9afeb7b70eb778405babe09f459edd9bab6e674f670617b89be9629e22c940de186a47ade0435a9d8b76796a8b09bc37fe537c9482c5c49d5ec186217d4112e36ae674b4342f31e8eb4d6e4f1c85999611a1abccedd6c0832d599468b2f662de1"}}]}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) r1 = syz_usb_connect$sierra_net(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xa, 0x2, 0x200, 0xe4, 0x2, 0x8}, {0x9, 0x5, 0x80, 0x2, 0x3ff, 0x9, 0x7f, 0x9}, {0x9, 0x5, 0x9, 0x3, 0x220, 0x9, 0x0, 0x5a}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x20, 0xf, 0xbf, {0xbf, 0x5, "13204242376c112e89e4ca4d9ca18e13eca75baedc9723b729e339e745712e86f03743ccd2fc9dcc4c5d5f309ced9debd64f0ca8d11af8c7276490e0f1777e02c46da925deb7bcc78af2f27a5868aba15d7eb7193689bb20979a120ca48e960efd89588fa30bfd067dd3640db23a2dac71e46933cf6972cc06a609a9751920494bcdc836b4dafe9986188a66e81fdf10e94f9ee2c102684c40a6344e95f1435b4a71cd1d78f58b5167c596e8750a36e11d64edca6520e334e366724dc8"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3401}}}, &(0x7f0000000780)={0x1c, &(0x7f0000000200)={0x40, 0x30, 0xcf, "b6a2d88228435ab110b0dc5b1ac75c7283c25057365ce18472f14eb3e3e66c28a758db6bdfe2acaa40349c2327772f8c8462b3376f271d4e916cb357b0c936e2300495f7bec0cd28b796d20d9b356227499f505663f06dfb510a360434d87bee42a8420a6b5d825e3ee19c0c6bf502bc8e85ae5e9e32042f776f33e9b8484ff8a5a47556ccfd9699a06147a3b979545d76ea8e8397ccf304f0e4160388704c7f2aee4c5c69587f292994a5b44c7fe417fff8d93482f28d93fd290ed9242eaeab54ea9db90f7265e4f7bc17aecaa5ad"}, &(0x7f0000000300)={0xa1, 0x1, 0x400, "0139854750e59a96712ae654ba990e470979ba0f2c4cc118c0983d30b8945e23eb2b81e0f064c7a2fa7a1303d16be1161d880a860c2eaff067aa5f3f34d8b42772173701aa83a78fb5cf47db561bbadb6f37e2724de223bf78a2106b4c1a0f95d5ffb43e09b45482cb8ffa96ebe0d2c9461df022c15a5132b51910cef680f0c1a6647b33292d19ae794cd8155755f801a101c0309b6975c99b76fcb897c43d8b322aa32cfd60101a54c6544485a38f25163a10568d6960d59a0884006318e8e7acc3de2c1f7d6aaee444488c4105d1986b1bbb831ce729cb5b75b6f63cb76ebb1f590625cb8788c441a1ea6aba670ba0ab4f7bb9b5f88e09ff51a3307318fd107c71cc3aefd7e936701676460b29b1197c8bf5a5deebf7a73b00c1f55143f19eea1577c18c00b0cfcafbc5eaa19dfe91f2549e4de6966d7118149b5d4f9f3417caf787a40c25b816d987897028847796e9747f844150b7f625a712a226c7e9d75364c234d912790b3482d9f188b108d9faf5e2e8227026a14b5303db2d03505cdf46163d240bdd88a609a37b84985972e9e9be2c43da0974c841a94b991aa64f38fde244a38cb828ac81e22560f0a0a86b14d64e6c31fc3341cbf6e1c9e856c6943e575fe7fa1db785633f673168addfa56d9006e3b650784a1aa670d6e15528fb5c88b6d5271d2d0034f1a439e4f979267cdb6563ad23953037a4a7f940156a3edd53aa31252b77c248a09bd6178e54dd790765da511e8cf0e96bd3bdf5b735b1497ef996c301fa2fab4c412040904e084294a1ea20a5641b4ae0dce99a763214e4e2324b10a5469546c347b13a3cee273c5c6c9bc93c67e07e34346a28ca78cf6ebbd069dce729210cfbcc3b350ff2510e74ef819a2a39a471b39186e7d4f4057bd6d24ce912211c5e56d5460e196de5eacd236cd4fb44320648d75339bfcb8a20eb69afeb69bf440f1d006653f515871a6f3027c74b30cbbcec2f3f6f8575a72053e002c0b4c7c33c62e1c29bb19ce3846119b9382cd3d0963235e82129544321a0ba33fc64c9c5232ffec5cee2f629bb8c241f4af0b8a3fded886976702ba3caa8d8c574c7785b857b294a88652ca44f33e01491fac580464904b4befe3b17bba526e345ff03d13976acd98e8e22506ccc9be0bf8f5d6fe5a289f88efbb0a70f67602873e5e70605b49b44f53a21828f9e982ad91aa59738773660af4ab85ff3774c438500ac7d56c5405d1c424703c4149abb6183222ae2014c102dd3f907c9cf01f0316af535695c552e8479c749a4c9bc69ba5b2b35b7bba6747a26e3656c8eda4825ead5ccbc76715ccbd0a83f09a52cb967e28f6657b143c84f2b497a494f4942a0d380b3a5ae75e04848806b8a0876502861ff1ac7178fe412f890e3f9c2862496c1d3dc7411b7cd4194133e024de3943d712d0b6f6ec8186b1e1a"}, &(0x7f0000000740)={0x21, 0x0, 0x4, "b1d7739d"}}) 1.2690817s ago: executing program 0 (id=110): arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000000)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) flock(r0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) close(r1) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, 0x0, 0x0, 0x3}}) pipe(0x0) execve(&(0x7f0000019140)='./file0\x00', 0x0, &(0x7f0000000040)={[&(0x7f0000000200)=' ']}) 1.26673032s ago: executing program 0 (id=111): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x14001, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0xfb, 0x9a, 0x0, 0x7, "142b1f05ef24340d0734dc68ea70b101", "9aea10516f79a414d81274fbacf90be42a094c08a54f3426293a20b21d6149ba851f4009e16f94374703292a04364bcfd0e42c3039343f2f08b31a69e84aa1dc367ce6b2cf6e1aaf7f8643e2e8cd7663acc4f122408c4f733433affb413740d1f4ec09249f6f898b3460184aa9fa5a4f3f4f95f70c117572c5aa9024e7874f983a93063650"}, 0x9a, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) sync_file_range(0xffffffffffffffff, 0xfffffffffffff800, 0x10001, 0x5) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 648.002384ms ago: executing program 1 (id=112): r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x40002b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r4}}], 0x1, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) setrlimit(0x6, &(0x7f0000000080)={0x5, 0x9}) setrlimit(0xe, &(0x7f00000000c0)={0x1, 0xfffffffffffffff8}) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendto(r0, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x10, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000001a00), 0x2080, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r8, 0x0) 532.162137ms ago: executing program 3 (id=113): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/sync_on_suspend', 0x1a3001, 0x18) write$khugepaged_scan(r1, &(0x7f0000000000), 0x8) (async) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) (async) r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000140), 0x1, 0x0) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x94b7777fd1709e3a, 0xffffffffffffffff, 0x2fde4000) write$binfmt_register(r2, &(0x7f0000000200)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x9, 0x3a, '\\', 0x3a, 'resv_level', 0x3a, './file0'}, 0x32) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) (async) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x1400037e) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0x11) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030025642564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) (async) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) (async) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000080)) 331.504902ms ago: executing program 3 (id=114): r0 = socket$netlink(0x10, 0x3, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) 222.831715ms ago: executing program 3 (id=115): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x10001, 0xc}, 0x8) (async) syz_io_uring_setup(0x519a, &(0x7f00000000c0)={0x0, 0x2c3c, 0x200, 0x0, 0x1dc, 0x0, r0}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) (async) bind$bt_sco(r1, &(0x7f0000000400), 0x8) listen(r1, 0x0) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0xa, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x18, &(0x7f0000000000)=0x800, 0x4) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (async, rerun: 32) setreuid(0x0, 0xee01) (async, rerun: 32) setresuid(0x0, 0xee01, 0x0) (async) ioprio_set$uid(0x3, 0x0, 0x0) (async) write$cgroup_int(r0, &(0x7f0000000040)=0x8000000001cb, 0x12) 191.884486ms ago: executing program 3 (id=116): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet(0x2, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x98f5, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) (async) r3 = open(0x0, 0x148640, 0x78e22799f4a46f8e) (async) pipe2$9p(0x0, 0x800) (async) dup(r2) (async) socket(0x10, 0x3, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000140)={0x0, 0x200000bd, 0x2, 0x5, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca70, 0x20000, 0x1000002, 0x95, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x1, 0x1, 0x3aa, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b25, 0x8c0, 0x4003bfff, 0x2b9, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8, 0x2000, 0x1, 0x26d}}], 0x1, 0x0, 0x0) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a3000"], 0xfc}}, 0x0) (async) socket(0x10, 0x3, 0xc) 0s ago: executing program 3 (id=117): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$input_event(r0, &(0x7f0000000180)={{0x0, 0x2710}, 0x0, 0xd, 0x200}, 0x18) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x700000b, 0x12, r4, 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0xa041, 0x0) write$vga_arbiter(r6, &(0x7f0000000040)=@target={'target ', {'PCI:', '13', ':', '1e', ':', '1b', '.', '18'}}, 0x17) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x2000) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r7, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x0) keyctl$search(0xa, r1, &(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x0}, r1) syz_usb_connect$midi(0x6, 0x52, &(0x7f0000000140)=ANY=[@ANYRES64=r1], 0x0) syz_usb_connect$uac1(0x5, 0x110, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x41e, 0x30df, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfe, 0x3, 0x1, 0xc, 0x10, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x41}, [@selector_unit={0x6, 0x24, 0x5, 0x2, 0x7f, 'Q'}, @feature_unit={0xd, 0x24, 0x6, 0x4, 0x2, 0x3, [0x3, 0x8, 0xa], 0xfc}, @extension_unit={0xc, 0x24, 0x8, 0x2, 0x9, 0x2, "ed9eec8da1"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x100, 0x1, 0xf9, 0x3ff, 0x7, 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x206, 0x4, 0x7, 0x8208, 0x3, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x0, 0xe, 0x3, 0xfd}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x7, 0x81, 0x81}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x3, 0x8, 0x5, 0xf}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x1, 0x7, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfff, 0x9, 0x7, 0xd}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xf229, 0xe, 0x7, 0x81}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xe, 0x5, 0xc, {0x7, 0x25, 0x1, 0xc, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xd, 0x6a, 0x3, 0x7, 0xa5}, @as_header={0x7, 0x24, 0x1, 0x75, 0x8}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x4, 0xf8, 0xd4}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x4, 0x2, 0x2, 0xfe, "0de8d0fa"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x4, 0x2, 0x1, 0xfa, "", '_'}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xd, 0xf, 0x0, {0x7, 0x25, 0x1, 0xc, 0x1, 0xf}}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0xa, 0xb8, 0x6, 0x20, 0x2}, 0x3e, &(0x7f0000000300)={0x5, 0xf, 0x3e, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x1, 0x9, 0x401}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0xa3, 0x3, 0x40, 0x0, 0x5, [0xff0030, 0x3f00, 0x3f0f]}, @ssp_cap={0x14, 0x10, 0xa, 0x90, 0x2, 0x9, 0x1100, 0x8, [0xfffff0, 0xc030]}]}, 0x1, [{0xe6, &(0x7f0000000340)=@string={0xe6, 0x3, "2763647387c8f5c5f399a469916706f87cb25bb2b13f40aa6aeb1152f7406d8ba24812a02a7672ed83163b819869b33e8684d909c7cb8cb7d7ffa8c57e4b1f30ba543ded1167b4738bca64fbca1e35ea85d0791bdcee79ce3b5c2544c4527d9d03b4d13ea7f4c800d4e7f0b39bdc9e47d9e8382b25f1ffca9a51a08af72b53c673cf7515368a8ff85c854ac21e05a71f2c59bf6163a7e1bcf5e413437fd080c1540bd27e817a61f30bc245958f1468eefc02cc37ac892c1ccd222eec89625fde32333d6333257a2cebed73461f22575712d297dd7e8bc5900940adc20064d4bd25bd90b9"}}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.16' (ED25519) to the list of known hosts. [ 20.324531][ T36] audit: type=1400 audit(1786481886.060:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.325972][ T286] cgroup: Unknown subsys name 'net' [ 20.347563][ T36] audit: type=1400 audit(1786481886.060:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.376378][ T36] audit: type=1400 audit(1786481886.090:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.376583][ T286] cgroup: Unknown subsys name 'devices' [ 20.503351][ T286] cgroup: Unknown subsys name 'hugetlb' [ 20.509339][ T286] cgroup: Unknown subsys name 'rlimit' [ 20.602679][ T36] audit: type=1400 audit(1786481886.340:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.626586][ T36] audit: type=1400 audit(1786481886.340:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.649021][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.652534][ T36] audit: type=1400 audit(1786481886.340:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.685608][ T36] audit: type=1400 audit(1786481886.400:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.701511][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.713747][ T36] audit: type=1400 audit(1786481886.400:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.748867][ T36] audit: type=1400 audit(1786481886.440:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.775981][ T36] audit: type=1400 audit(1786481886.440:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.043059][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.050242][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.057677][ T294] bridge_slave_0: entered allmulticast mode [ 22.064135][ T294] bridge_slave_0: entered promiscuous mode [ 22.071614][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.079162][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.086953][ T293] bridge_slave_0: entered allmulticast mode [ 22.094124][ T293] bridge_slave_0: entered promiscuous mode [ 22.100567][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.108976][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.117839][ T294] bridge_slave_1: entered allmulticast mode [ 22.125810][ T294] bridge_slave_1: entered promiscuous mode [ 22.138240][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.145620][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.153668][ T293] bridge_slave_1: entered allmulticast mode [ 22.160302][ T293] bridge_slave_1: entered promiscuous mode [ 22.221840][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.228987][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.236410][ T295] bridge_slave_0: entered allmulticast mode [ 22.242975][ T295] bridge_slave_0: entered promiscuous mode [ 22.255099][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.262321][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.269711][ T295] bridge_slave_1: entered allmulticast mode [ 22.276312][ T295] bridge_slave_1: entered promiscuous mode [ 22.316009][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.323581][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.330856][ T296] bridge_slave_0: entered allmulticast mode [ 22.337226][ T296] bridge_slave_0: entered promiscuous mode [ 22.345948][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.353168][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.360330][ T296] bridge_slave_1: entered allmulticast mode [ 22.366991][ T296] bridge_slave_1: entered promiscuous mode [ 22.468535][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.475809][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.483532][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.490954][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.507742][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.514844][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.522319][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.529698][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.542506][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.549568][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.556976][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.564248][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.589131][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.596492][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.603895][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.610919][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.653983][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.661479][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.668798][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.677081][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.684923][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.692689][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.700730][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.708661][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.723790][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.731445][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.743085][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.750421][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.758551][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.765624][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.786495][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.793941][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.803596][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.811092][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.819864][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.827204][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.837177][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.844447][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.873371][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.881786][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.923622][ T295] veth0_vlan: entered promiscuous mode [ 22.938639][ T293] veth0_vlan: entered promiscuous mode [ 22.947715][ T294] veth0_vlan: entered promiscuous mode [ 22.962195][ T295] veth1_macvtap: entered promiscuous mode [ 22.970427][ T296] veth0_vlan: entered promiscuous mode [ 22.987740][ T293] veth1_macvtap: entered promiscuous mode [ 22.997881][ T294] veth1_macvtap: entered promiscuous mode [ 23.017445][ T296] veth1_macvtap: entered promiscuous mode [ 23.053194][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.121605][ T317] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.402650][ T66] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.461369][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.571706][ T66] usb 1-1: Using ep0 maxpacket: 8 [ 23.579837][ T66] usb 1-1: New USB device found, idVendor=17cc, idProduct=4712, bcdDevice= 0.40 [ 23.592166][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.600596][ T66] usb 1-1: Product: syz [ 23.622671][ T66] usb 1-1: Manufacturer: syz [ 23.627675][ T66] usb 1-1: SerialNumber: syz [ 23.635086][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 23.645969][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 23.658232][ T9] usb 4-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 23.670815][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.679275][ T9] usb 4-1: Product: syz [ 23.683754][ T9] usb 4-1: Manufacturer: syz [ 23.689404][ T9] usb 4-1: SerialNumber: syz [ 23.860167][ T321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 23.869543][ T321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 23.881159][ T321] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 23.899676][ T66] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 23.921564][ T66] usb 1-1: unit 2 not found! [ 23.931688][ T66] usb 1-1: USB disconnect, device number 2 [ 23.940944][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 23.970788][ T9] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 23.975464][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 24.003850][ T9] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 24.024896][ T418] fuse: blksize only supported for fuseblk [ 24.030039][ T9] usb 4-1: USB disconnect, device number 2 [ 24.056496][ T412] udevd[412]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 24.085059][ T420] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13'. [ 24.139501][ T426] syz.1.15 (426): /proc/426/oom_adj is deprecated, please use /proc/426/oom_score_adj instead. [ 24.431385][ T66] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.466548][ T433] kvm: MWAIT instruction emulated as NOP! [ 24.531365][ T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 24.584032][ T447] batadv_slave_1: entered promiscuous mode [ 24.592537][ T66] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 24.601569][ T66] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 24.640938][ T66] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 24.651024][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 24.659848][ T66] usb 2-1: SerialNumber: syz [ 24.664636][ T9] usb 3-1: device descriptor read/64, error -71 [ 24.673015][ T66] usb 2-1: bad CDC descriptors [ 24.761471][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 24.884259][ T429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.895636][ T429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.905762][ T66] usb 2-1: USB disconnect, device number 2 [ 24.912562][ T9] usb 3-1: device descriptor read/64, error -71 [ 24.920623][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 24.941989][ T10] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 24.950641][ T10] usb 4-1: config 2 has no interface number 0 [ 24.971967][ T10] usb 4-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 24.982874][ T10] usb 4-1: config 2 interface 88 has no altsetting 0 [ 24.991351][ T10] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 25.000857][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 25.009871][ T10] usb 4-1: Product: syz [ 25.014580][ T10] usb 4-1: Manufacturer: syz [ 25.019253][ T10] usb 4-1: SerialNumber: syz [ 25.025608][ T439] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 25.151307][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 25.235300][ T439] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 25.281270][ T9] usb 3-1: device descriptor read/64, error -71 [ 25.443265][ T446] batadv_slave_1: left promiscuous mode [ 25.469467][ T36] kauditd_printk_skb: 76 callbacks suppressed [ 25.469484][ T36] audit: type=1400 audit(1786481891.200:150): avc: denied { unlink } for pid=455 comm="syz.0.23" name="#1" dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 25.502160][ T36] audit: type=1400 audit(1786481891.240:151): avc: denied { mount } for pid=455 comm="syz.0.23" name="/" dev="overlay" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 25.526135][ T9] usb 3-1: device descriptor read/64, error -71 [ 25.533583][ T36] audit: type=1400 audit(1786481891.240:152): avc: denied { getattr } for pid=457 comm="syz.1.24" path="cgroup:[4026532349]" dev="nsfs" ino=4026532349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 25.558463][ T36] audit: type=1400 audit(1786481891.260:153): avc: denied { read } for pid=459 comm="syz.1.25" dev="nsfs" ino=4026532390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 25.582013][ T36] audit: type=1400 audit(1786481891.260:154): avc: denied { open } for pid=459 comm="syz.1.25" path="net:[4026532390]" dev="nsfs" ino=4026532390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 25.582479][ T462] netlink: 'syz.1.26': attribute type 2 has an invalid length. [ 25.607656][ T36] audit: type=1400 audit(1786481891.260:155): avc: denied { bind } for pid=459 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 25.636080][ T36] audit: type=1400 audit(1786481891.260:156): avc: denied { setopt } for pid=459 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 25.656986][ T9] usb usb3-port1: attempt power cycle [ 25.663644][ T36] audit: type=1400 audit(1786481891.320:157): avc: denied { read write } for pid=461 comm="syz.1.26" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 25.688106][ T36] audit: type=1400 audit(1786481891.320:158): avc: denied { open } for pid=461 comm="syz.1.26" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 25.714245][ T36] audit: type=1400 audit(1786481891.380:159): avc: denied { create } for pid=461 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 25.771375][ T310] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 25.829679][ T476] netlink: 388 bytes leftover after parsing attributes in process `syz.1.30'. [ 25.933183][ T310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.945604][ T310] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 25.957497][ T310] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 25.977751][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.987837][ T310] usb 1-1: Product: syz [ 25.992380][ T310] usb 1-1: Manufacturer: syz [ 25.997971][ T310] usb 1-1: SerialNumber: syz [ 26.011296][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 26.032424][ T9] usb 3-1: device descriptor read/8, error -71 [ 26.058573][ T10] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 26.069882][ T10] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 26.081223][ T10] asix 4-1:2.88: probe with driver asix failed with error -71 [ 26.090181][ T10] usb 4-1: USB disconnect, device number 3 [ 26.101381][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 26.162538][ T9] usb 3-1: device descriptor read/8, error -71 [ 26.207130][ T310] usb 1-1: 0:2 : does not exist [ 26.212429][ T310] usb 1-1: unit 9 not found! [ 26.218890][ T310] usb 1-1: USB disconnect, device number 3 [ 26.282932][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.294624][ T31] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 26.308519][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 26.318094][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.326530][ T31] usb 2-1: Product: syz [ 26.332102][ T31] usb 2-1: Manufacturer: syz [ 26.336826][ T31] usb 2-1: SerialNumber: syz [ 26.421337][ T9] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 26.442498][ T9] usb 3-1: device descriptor read/8, error -71 [ 26.544365][ T478] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 26.572722][ T9] usb 3-1: device descriptor read/8, error -71 [ 26.681675][ T9] usb usb3-port1: unable to enumerate USB device [ 26.811306][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 26.971337][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 26.978172][ T10] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.990110][ T10] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 27.004435][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 27.011441][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0730, bcdDevice= 0.00 [ 27.021131][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.031445][ T10] usb 4-1: config 0 descriptor?? [ 27.157852][ T478] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 27.166804][ T31] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 27.173620][ T31] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 27.182942][ T31] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 27.189450][ T31] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 27.211352][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 27.240139][ T10] input: HID 045e:0730 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:0730.0001/input/input5 [ 27.254029][ T10] microsoft 0003:045E:0730.0001: input,hidraw0: USB HID v0.00 Joystick [HID 045e:0730] on usb-dummy_hcd.3-1/input0 [ 27.292670][ T505] device-mapper: ioctl: Unable to rename non-existent device, to uuid B [ 27.372722][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 27.383209][ T45] usb 1-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 27.394309][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.403045][ T31] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 27.414987][ T45] usb 1-1: Product: syz [ 27.419221][ T45] usb 1-1: Manufacturer: syz [ 27.426698][ T31] usb 2-1: USB disconnect, device number 3 [ 27.433411][ T45] usb 1-1: SerialNumber: syz [ 27.439049][ T479] usb 4-1: USB disconnect, device number 4 [ 27.446414][ T31] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 27.528848][ T520] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.659963][ T499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.668626][ T499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.682624][ T45] usb 1-1: USB disconnect, device number 4 [ 27.831371][ T310] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 27.981310][ T310] usb 3-1: Using ep0 maxpacket: 8 [ 27.989338][ T310] usb 3-1: New USB device found, idVendor=17cc, idProduct=4712, bcdDevice= 0.40 [ 27.999558][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.008145][ T310] usb 3-1: Product: syz [ 28.012874][ T310] usb 3-1: Manufacturer: syz [ 28.018031][ T310] usb 3-1: SerialNumber: syz [ 28.141277][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 28.160137][ T535] veth1: entered allmulticast mode [ 28.168419][ T534] veth1: left allmulticast mode [ 28.238321][ T528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.256348][ T528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.272914][ T528] erofs: (device loop2): erofs_read_superblock: cannot find valid erofs superblock [ 28.298422][ T310] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 28.302317][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.311508][ T310] usb 3-1: unit 2 not found! [ 28.320832][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 28.343145][ T310] usb 3-1: USB disconnect, device number 6 [ 28.343330][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.370520][ T10] usb 2-1: config 0 descriptor?? [ 28.788197][ T10] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 28.795795][ T10] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 28.802995][ T10] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 28.809950][ T10] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 28.817792][ T10] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 28.825214][ T10] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 28.832630][ T310] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 28.833036][ T10] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 28.849539][ T10] pyra 0003:1E7D:2CF6.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 28.991290][ T310] usb 4-1: Using ep0 maxpacket: 16 [ 28.998099][ T310] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 29.006996][ T310] usb 4-1: config 1 has no interface number 0 [ 29.013399][ T310] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 29.023773][ T310] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 29.034055][ T310] usb 4-1: config 1 interface 105 has no altsetting 0 [ 29.042909][ T310] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 29.052434][ T310] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 29.060623][ T310] usb 4-1: Product: syz [ 29.065501][ T310] usb 4-1: Manufacturer: syz [ 29.070636][ T310] usb 4-1: SerialNumber: syz [ 29.077004][ T552] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 29.084693][ T552] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 29.221290][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 29.388089][ T530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.400212][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 29.409690][ T530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.423842][ T31] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 29.432721][ T31] usb 3-1: config 0 has no interface number 0 [ 29.440296][ T31] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 29.449687][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.460674][ T31] usb 3-1: Product: syz [ 29.465373][ T31] usb 3-1: Manufacturer: syz [ 29.470545][ T31] usb 3-1: SerialNumber: syz [ 29.481483][ T31] usb 3-1: config 0 descriptor?? [ 29.489107][ T31] smsc95xx v2.0.0 [ 29.496278][ T552] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 29.504128][ T552] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 29.548310][ T584] fuse: root generation should be zero [ 29.712505][ T310] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 0 [ 29.723788][ T310] aqc111 4-1:1.105: probe with driver aqc111 failed with error -61 [ 29.826006][ T10] pyra 0003:1E7D:2CF6.0002: couldn't init struct pyra_device [ 29.833919][ T10] pyra 0003:1E7D:2CF6.0002: couldn't install mouse [ 29.841137][ T10] pyra 0003:1E7D:2CF6.0002: probe with driver pyra failed with error -71 [ 29.852372][ T10] usb 2-1: USB disconnect, device number 4 [ 29.918825][ T310] usb 4-1: USB disconnect, device number 5 [ 30.399427][ T594] 9pnet_fd: Insufficient options for proto=fd [ 30.408527][ T594] IPv6: A: Disabled Multicast RS [ 30.661272][ T479] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 30.681313][ T310] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 30.691579][ T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): EEPROM is busy [ 30.811308][ T479] usb 2-1: Using ep0 maxpacket: 32 [ 30.811308][ T10] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 30.825863][ T479] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 30.834574][ T479] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 30.843610][ T479] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.855492][ T479] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 30.865609][ T479] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 30.878043][ T479] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 30.893652][ T479] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 30.903886][ T479] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.912636][ T310] usb 4-1: config 0 interface 0 altsetting 72 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 30.924541][ T310] usb 4-1: config 0 interface 0 altsetting 72 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 30.938634][ T310] usb 4-1: config 0 interface 0 has no altsetting 0 [ 30.946070][ T479] usb 2-1: config 0 descriptor?? [ 30.951586][ T310] usb 4-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 30.962109][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.974624][ T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 30.988747][ T310] usb 4-1: config 0 descriptor?? [ 30.994029][ T31] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 31.001451][ T10] usb 1-1: Invalid ep0 maxpacket: 32 [ 31.006522][ T31] usb 3-1: USB disconnect, device number 7 [ 31.011475][ T596] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 31.151320][ T10] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 31.182942][ T593] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.301295][ T10] usb 1-1: Invalid ep0 maxpacket: 32 [ 31.307665][ T10] usb usb1-port1: attempt power cycle [ 31.490349][ T36] kauditd_printk_skb: 63 callbacks suppressed [ 31.490366][ T36] audit: type=1400 audit(1786481897.220:223): avc: denied { setopt } for pid=603 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 31.634011][ T310] usbhid 4-1:0.0: can't add hid device: -71 [ 31.640839][ T310] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 31.650226][ T310] usb 4-1: USB disconnect, device number 6 [ 31.657371][ T36] audit: type=1400 audit(1786481897.390:224): avc: denied { setopt } for pid=610 comm="syz.2.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.679018][ T10] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 31.687176][ T36] audit: type=1400 audit(1786481897.430:225): avc: denied { read } for pid=610 comm="syz.2.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.721598][ T10] usb 1-1: Invalid ep0 maxpacket: 32 [ 31.727446][ T36] audit: type=1400 audit(1786481897.460:226): avc: denied { write } for pid=610 comm="syz.2.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.751584][ T9] usb 2-1: USB disconnect, device number 5 [ 31.779553][ T36] audit: type=1400 audit(1786481897.510:227): avc: denied { accept } for pid=615 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.830578][ T625] netlink: 36 bytes leftover after parsing attributes in process `syz.1.81'. [ 31.871422][ T10] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 31.892216][ T10] usb 1-1: Invalid ep0 maxpacket: 32 [ 31.899506][ T10] usb usb1-port1: unable to enumerate USB device [ 31.912694][ T627] 9pnet: p9_errstr2errno: server reported unknown error [ 31.934166][ T36] audit: type=1326 audit(1786481897.670:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=629 comm="syz.1.83" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f2c99e0d9 code=0x0 [ 31.991382][ T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 32.054128][ T36] audit: type=1326 audit(1786481897.790:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=629 comm="syz.1.83" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f2c99e0d9 code=0x0 [ 32.141422][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 32.150312][ T31] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 32.164551][ T31] usb 3-1: config 1 interface 0 has no altsetting 0 [ 32.173998][ T31] usb 3-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 32.183444][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.199935][ T31] usb 3-1: Product: syz [ 32.204619][ T31] usb 3-1: Manufacturer: syz [ 32.210058][ T31] usb 3-1: SerialNumber: syz [ 32.439269][ T31] usb 3-1: USB disconnect, device number 8 [ 32.451551][ T36] audit: type=1400 audit(1786481898.190:230): avc: denied { bind } for pid=644 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.897780][ T36] audit: type=1400 audit(1786481898.630:231): avc: denied { setcheckreqprot } for pid=650 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 32.957799][ T36] audit: type=1400 audit(1786481898.690:232): avc: denied { execute } for pid=653 comm="syz.2.91" name="file0" dev="tmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 32.981123][ T654] process 'syz.2.91' launched './file0' with NULL argv: empty string added [ 33.071933][ T656] 9pnet: Could not find request transport: rdma [ 33.103045][ T664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.94'. [ 33.123464][ T664] @0Ù: renamed from bridge_slave_0 (while UP) [ 33.141292][ T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 33.200140][ T670] rust_binder: Write failure EINVAL in pid:83 [ 33.312538][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 33.329042][ T31] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 33.339337][ T31] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 33.353867][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 33.363503][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 33.371969][ T31] usb 4-1: Product: syz [ 33.376241][ T31] usb 4-1: Manufacturer: syz [ 33.381193][ T31] usb 4-1: SerialNumber: syz [ 33.411358][ T496] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 33.511319][ T479] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 33.562678][ T496] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.575071][ T496] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 33.589371][ T31] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 33.609492][ T496] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 33.624330][ T496] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.633478][ T496] usb 3-1: Product: syz [ 33.638140][ T496] usb 3-1: Manufacturer: syz [ 33.643509][ T496] usb 3-1: SerialNumber: syz [ 33.658887][ T9] usb 4-1: USB disconnect, device number 7 [ 33.668811][ T9] usblp0: removed [ 33.671300][ T479] usb 2-1: device descriptor read/64, error -71 [ 33.727907][ T681] syz.3.101 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 33.738393][ T681] CPU: 0 UID: 0 PID: 681 Comm: syz.3.101 Not tainted syzkaller #0 55bf8b22bdada172f4c106b01602b1dfb2209583 [ 33.738415][ T681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.738427][ T681] Call Trace: [ 33.738431][ T681] [ 33.738439][ T681] __dump_stack+0x21/0x30 [ 33.738464][ T681] dump_stack_lvl+0x140/0x1c0 [ 33.738477][ T681] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.738491][ T681] ? ___ratelimit+0x41c/0x5c0 [ 33.738504][ T681] ? __kasan_check_write+0x18/0x20 [ 33.738517][ T681] dump_stack+0x19/0x20 [ 33.738529][ T681] dump_header+0xd9/0x460 [ 33.738543][ T681] oom_kill_process+0x35d/0x640 [ 33.738556][ T681] out_of_memory+0x5d1/0xa20 [ 33.738567][ T681] ? __cfi_out_of_memory+0x10/0x10 [ 33.738578][ T681] ? mutex_lock_killable+0x97/0x1d0 [ 33.738592][ T681] ? __cfi_mutex_lock_killable+0x10/0x10 [ 33.738607][ T681] mem_cgroup_out_of_memory+0x2c5/0x390 [ 33.738620][ T681] ? css_next_descendant_pre+0x1ec/0x210 [ 33.738634][ T681] ? __kasan_check_write+0x18/0x20 [ 33.738643][ T681] ? drain_obj_stock+0xec0/0xec0 [ 33.738654][ T681] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 33.738665][ T681] try_charge_memcg+0x925/0xe10 [ 33.738678][ T681] ? static_key_count+0x45/0x70 [ 33.738814][ T681] ? lruvec_init+0x1f1/0x280 [ 33.738826][ T681] ? __cfi_try_charge_memcg+0x10/0x10 [ 33.738840][ T681] ? __alloc_pages_noprof+0x35a/0x7e0 [ 33.738856][ T681] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 33.738870][ T681] __mem_cgroup_charge+0xfc/0x420 [ 33.738880][ T681] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 33.738889][ T681] ? folio_add_lru+0x116/0x400 [ 33.738902][ T681] ? __cfi_folio_add_lru+0x10/0x10 [ 33.738915][ T681] folio_prealloc+0x67/0x220 [ 33.738928][ T681] do_wp_page+0x187e/0x2e80 [ 33.738940][ T681] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 33.738953][ T681] ? folio_put+0x90/0x90 [ 33.738963][ T681] ? __cfi__raw_spin_lock+0x10/0x10 [ 33.738975][ T681] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 33.738992][ T681] handle_mm_fault+0x1017/0x1ba0 [ 33.739008][ T681] ? __cfi_handle_mm_fault+0x10/0x10 [ 33.739019][ T681] ? find_vma+0xd3/0x120 [ 33.739030][ T681] ? lock_mm_and_find_vma+0xb8/0x390 [ 33.739042][ T681] do_user_addr_fault+0x4ee/0x1230 [ 33.739059][ T681] exc_page_fault+0x58/0xc0 [ 33.739068][ T681] asm_exc_page_fault+0x2b/0x30 [ 33.739081][ T681] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 33.739098][ T681] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 e9 bf 6a 03 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 33.739107][ T681] RSP: 0018:ffffc9000e33f998 EFLAGS: 00050206 [ 33.739117][ T681] RAX: ffffffff82aca701 RBX: ffff888008b97000 RCX: 00000000000002c0 [ 33.739125][ T681] RDX: 0000000000000000 RSI: ffff888008b97d40 RDI: 0000200000019000 [ 33.739132][ T681] RBP: ffffc9000e33fae8 R08: ffff888008b97fff R09: 1ffff11001172fff [ 33.739140][ T681] R10: dffffc0000000000 R11: ffffed1001173000 R12: 00002000000182c0 [ 33.739147][ T681] R13: 0000000000017fc0 R14: 0000000000001000 R15: ffffc9000e33fe28 [ 33.739155][ T681] ? _copy_to_iter+0x341/0x1520 [ 33.739171][ T681] ? _copy_to_iter+0x43f/0x1520 [ 33.739184][ T681] ? __cfi__copy_to_iter+0x10/0x10 [ 33.739200][ T681] ? pin_user_pages_remote+0x177/0x230 [ 33.739214][ T681] ? __cfi_pin_user_pages_remote+0x10/0x10 [ 33.739228][ T681] copy_page_to_iter+0x211/0x2f0 [ 33.739240][ T681] process_vm_rw+0x8aa/0xc70 [ 33.739253][ T681] ? __ia32_sys_process_vm_writev+0x110/0x110 [ 33.739266][ T681] ? file_init_path+0x3b/0x590 [ 33.739281][ T681] ? __se_sys_futex+0x13c/0x320 [ 33.739297][ T681] ? __kasan_check_write+0x18/0x20 [ 33.739307][ T681] __x64_sys_process_vm_readv+0xeb/0x100 [ 33.739319][ T681] x64_sys_call+0x2df4/0x2ee0 [ 33.739328][ T681] do_syscall_64+0x57/0xf0 [ 33.739340][ T681] ? clear_bhb_loop+0x50/0xa0 [ 33.739353][ T681] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.739365][ T681] RIP: 0033:0x7efcfa79e0d9 [ 33.739375][ T681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.739383][ T681] RSP: 002b:00007efcfb70f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 33.739469][ T681] RAX: ffffffffffffffda RBX: 00007efcfaa25fa0 RCX: 00007efcfa79e0d9 [ 33.739478][ T681] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 0000000000000032 [ 33.739485][ T681] RBP: 00007efcfa835024 R08: 0000000000000286 R09: 0000000000000000 [ 33.739491][ T681] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000000 [ 33.739498][ T681] R13: 00007efcfaa26038 R14: 00007efcfaa25fa0 R15: 00007fff28361478 [ 33.739508][ T681] [ 33.739540][ T681] memory: usage 96kB, limit 96kB, failcnt 80 [ 33.931265][ T479] usb 2-1: device descriptor read/64, error -71 [ 33.932398][ T681] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 34.191260][ T479] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 34.195800][ T681] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 34.265575][ T681] Memory cgroup stats for /syz3/test: [ 34.265914][ T681] cache 0 [ 34.265955][ T496] usb 3-1: cannot find UAC_HEADER [ 34.272098][ T681] rss 98304 [ 34.276939][ T496] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 34.281851][ T681] rss_huge 0 [ 34.284770][ T496] usb 3-1: USB disconnect, device number 9 [ 34.300015][ T500] udevd[500]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.304181][ T681] shmem 0 [ 34.321934][ T681] mapped_file 0 [ 34.325732][ T681] dirty 0 [ 34.328863][ T681] writeback 0 [ 34.332186][ T681] workingset_refault_anon 0 [ 34.336796][ T681] workingset_refault_file 0 [ 34.341367][ T479] usb 2-1: device descriptor read/64, error -71 [ 34.341550][ T681] swap 0 [ 34.350550][ T681] swapcached 0 [ 34.354321][ T681] pgpgin 24 [ 34.357447][ T681] pgpgout 0 [ 34.360815][ T681] pgfault 536 [ 34.364433][ T681] pgmajfault 0 [ 34.367890][ T681] inactive_anon 98304 [ 34.372012][ T681] active_anon 0 [ 34.375853][ T681] inactive_file 0 [ 34.379528][ T681] active_file 0 [ 34.383387][ T681] unevictable 0 [ 34.387323][ T681] hierarchical_memory_limit 98304 [ 34.393178][ T681] hierarchical_memsw_limit 9223372036854771712 [ 34.401068][ T681] total_cache 0 [ 34.405346][ T681] total_rss 98304 [ 34.409239][ T681] total_rss_huge 0 [ 34.413160][ T681] total_shmem 0 [ 34.417140][ T681] total_mapped_file 0 [ 34.421601][ T681] total_dirty 0 [ 34.425407][ T681] total_writeback 0 [ 34.429639][ T681] total_workingset_refault_anon 0 [ 34.435494][ T681] total_workingset_refault_file 0 [ 34.440778][ T681] total_swap 0 [ 34.444394][ T681] total_swapcached 0 [ 34.449010][ T681] total_pgpgin 24 [ 34.453154][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 34.460968][ T681] total_pgpgout 0 [ 34.465549][ T681] total_pgfault 536 [ 34.469914][ T681] total_pgmajfault 0 [ 34.474142][ T681] total_inactive_anon 98304 [ 34.479265][ T681] total_active_anon 0 [ 34.483444][ T681] total_inactive_file 0 [ 34.488001][ T681] total_active_file 0 [ 34.492348][ T681] total_unevictable 0 [ 34.496605][ T681] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.101,pid=680,uid=0 [ 34.512750][ T681] Memory cgroup out of memory: Killed process 680 (syz.3.101) total-vm:90404kB, anon-rss:1236kB, file-rss:21516kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 34.611382][ T479] usb 2-1: device descriptor read/64, error -71 [ 34.611409][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 34.624546][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.642294][ T10] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 34.658042][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.666326][ T10] usb 1-1: Product: syz [ 34.670601][ T10] usb 1-1: Manufacturer: syz [ 34.675490][ T10] usb 1-1: SerialNumber: syz [ 34.681029][ T10] usb 1-1: config 0 descriptor?? [ 34.687111][ T10] usb 1-1: bad CDC descriptors [ 34.692212][ T10] usb 1-1: unsupported MDLM descriptors [ 34.721484][ T479] usb usb2-port1: attempt power cycle [ 34.895974][ T9] usb 1-1: USB disconnect, device number 9 [ 34.954086][ T700] mmap: syz.2.107 (700) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.071352][ T479] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 35.081311][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 35.092464][ T479] usb 2-1: device descriptor read/8, error -71 [ 35.222492][ T479] usb 2-1: device descriptor read/8, error -71 [ 35.231312][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 35.231318][ T310] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 35.246115][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 35.252995][ T10] usb 4-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 35.262667][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.271760][ T10] usb 4-1: config 0 descriptor?? [ 35.391298][ T310] usb 3-1: Using ep0 maxpacket: 32 [ 35.398430][ T310] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 35.407334][ T310] usb 3-1: config 2 has no interface number 0 [ 35.413628][ T310] usb 3-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 35.424097][ T310] usb 3-1: config 2 interface 88 has no altsetting 0 [ 35.432372][ T310] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 35.441967][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 35.450309][ T310] usb 3-1: Product: syz [ 35.456027][ T310] usb 3-1: Manufacturer: syz [ 35.461070][ T310] usb 3-1: SerialNumber: syz [ 35.466918][ T705] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 35.474305][ T479] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 35.502315][ T479] usb 2-1: device descriptor read/8, error -71 [ 35.634316][ T479] usb 2-1: device descriptor read/8, error -71 [ 35.683624][ T705] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 35.741428][ T479] usb usb2-port1: unable to enumerate USB device [ 35.871280][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 35.883776][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 35.891320][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 35.902710][ T10] usb 4-1: USB disconnect, device number 8 [ 36.021298][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 36.030206][ T9] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 36.039328][ T9] usb 1-1: config 0 has no interface number 0 [ 36.045561][ T9] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 36.055763][ T9] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 36.066264][ T9] usb 1-1: config 0 interface 41 has no altsetting 0 [ 36.074931][ T9] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 36.084674][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.096982][ T9] usb 1-1: Product: syz [ 36.101124][ T705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.102526][ T9] usb 1-1: Manufacturer: syz [ 36.102552][ T9] usb 1-1: SerialNumber: syz [ 36.103280][ T9] usb 1-1: config 0 descriptor?? [ 36.106331][ T709] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 36.113523][ T705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.117814][ T709] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 36.359663][ T709] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 36.367187][ T709] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 36.425279][ T716] can0: slcan on ttyS3. [ 36.492610][ T715] can0 (unregistered): slcan off ttyS3. [ 36.526955][ T705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.538702][ T705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.554751][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 36.554769][ T36] audit: type=1400 audit(1786481902.290:252): avc: denied { write } for pid=721 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.556202][ T310] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 36.562865][ T36] audit: type=1400 audit(1786481902.290:253): avc: denied { add_name } for pid=721 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.591240][ T310] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 36.614246][ T9] sr9700 1-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 36.629914][ T310] asix 3-1:2.88: probe with driver asix failed with error -71 [ 36.640869][ T36] audit: type=1400 audit(1786481902.290:254): avc: denied { create } for pid=721 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.668965][ T310] usb 3-1: USB disconnect, device number 10 [ 36.691351][ T9] usb 1-1: USB disconnect, device number 10 [ 36.706576][ T36] audit: type=1400 audit(1786481902.290:255): avc: denied { write } for pid=721 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=1094 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.738029][ T36] audit: type=1400 audit(1786481902.330:256): avc: denied { append } for pid=721 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=1094 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.766179][ T36] audit: type=1400 audit(1786481902.400:257): avc: denied { remove_name } for pid=734 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=1094 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.797082][ T36] audit: type=1400 audit(1786481902.400:258): avc: denied { unlink } for pid=734 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=1094 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.831255][ T36] audit: type=1400 audit(1786481902.440:259): avc: denied { listen } for pid=736 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.891463][ T756] ------------[ cut here ]------------ [ 36.898173][ T756] WARNING: CPU: 0 PID: 756 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 36.902614][ T36] audit: type=1400 audit(1786481902.620:260): avc: denied { load_policy } for pid=755 comm="syz.3.117" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 36.908406][ T756] Modules linked in: [ 36.933841][ T756] CPU: 0 UID: 0 PID: 756 Comm: syz.3.117 Not tainted syzkaller #0 55bf8b22bdada172f4c106b01602b1dfb2209583 [ 36.946149][ T756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.957089][ T756] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 36.963353][ T756] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 14 d9 0b 06 00 0f 85 c2 00 00 00 c6 05 07 d9 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 36.984124][ T756] RSP: 0018:ffffc9000e9af640 EFLAGS: 00010246 [ 36.990914][ T756] RAX: 0000000000000000 RBX: 0000000000000015 RCX: 0000000000000000 [ 36.999399][ T756] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000e9af6f8 [ 37.009348][ T756] RBP: ffffc9000e9af780 R08: ffffc9000e9af6f7 R09: 0000000000000000 [ 37.017979][ T756] R10: ffffc9000e9af6e0 R11: fffff52001d35edf R12: ffffc9000e9af680 [ 37.026215][ T756] R13: dffffc0000000000 R14: 1ffff92001d35ecc R15: 0000000000000000 [ 37.034463][ T756] FS: 00007efcfb70f6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 37.043541][ T756] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.050500][ T756] CR2: 0000200000001000 CR3: 00000001067b2000 CR4: 00000000003526b0 [ 37.058715][ T756] DR0: 0000000000000000 DR1: 0000000000000071 DR2: 0000000000000000 [ 37.066975][ T756] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 37.076175][ T756] Call Trace: [ 37.079751][ T756] [ 37.083428][ T756] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 37.089394][ T756] ? __kasan_slab_alloc+0x73/0x90 [ 37.094655][ T756] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 37.100760][ T756] ? hashtab_init+0xd6/0x1f0 [ 37.105425][ T756] ___kmalloc_large_node+0x81/0x220 [ 37.110830][ T756] ? hashtab_init+0xd6/0x1f0 [ 37.115658][ T756] __kmalloc_large_node_noprof+0x1e/0xd0 [ 37.121521][ T756] ? hashtab_init+0xd6/0x1f0 [ 37.126306][ T756] __kmalloc_noprof+0x326/0x510 [ 37.131377][ T756] ? __cfi_ebitmap_read+0x10/0x10 [ 37.137181][ T756] hashtab_init+0xd6/0x1f0 [ 37.141672][ T756] ? policydb_read+0x865/0x2860 [ 37.146764][ T756] symtab_init+0x44/0x70 [ 37.151521][ T756] policydb_read+0x8e1/0x2860 [ 37.156319][ T756] ? __kasan_kmalloc+0x96/0xb0 [ 37.161496][ T756] ? __cfi_policydb_read+0x10/0x10 [ 37.166809][ T756] ? security_load_policy+0x130/0x12d0 [ 37.172441][ T756] security_load_policy+0x16a/0x12d0 [ 37.178048][ T756] ? irqentry_exit+0x4a/0x60 [ 37.182716][ T756] ? __kasan_check_write+0x18/0x20 [ 37.187838][ T756] ? mutex_lock+0x97/0x1d0 [ 37.191276][ T310] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 37.192464][ T756] ? __cfi_security_load_policy+0x10/0x10 [ 37.206151][ T756] ? rep_movs_alternative+0x4a/0xa0 [ 37.211601][ T756] sel_write_load+0x258/0x600 [ 37.216439][ T756] ? __cfi_sel_write_load+0x10/0x10 [ 37.221771][ T756] ? bpf_lsm_file_permission+0xd/0x20 [ 37.227165][ T756] ? __cfi_sel_write_load+0x10/0x10 [ 37.232408][ T756] vfs_write+0x3c1/0xfd0 [ 37.236801][ T756] ? __cfi_vfs_write+0x10/0x10 [ 37.241715][ T756] ? __kasan_check_write+0x18/0x20 [ 37.247275][ T756] ? mutex_lock+0x97/0x1d0 [ 37.251995][ T756] ? __cfi_mutex_lock+0x10/0x10 [ 37.257012][ T756] ksys_write+0x145/0x260 [ 37.261713][ T756] ? __cfi_ksys_write+0x10/0x10 [ 37.267111][ T756] ? __kasan_check_write+0x18/0x20 [ 37.272434][ T756] ? fpregs_restore_userregs+0x11c/0x260 [ 37.278210][ T756] __x64_sys_write+0x7f/0x90 [ 37.282856][ T756] x64_sys_call+0x271c/0x2ee0 [ 37.287958][ T756] do_syscall_64+0x57/0xf0 [ 37.292643][ T756] ? clear_bhb_loop+0x50/0xa0 [ 37.297608][ T756] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.303703][ T756] RIP: 0033:0x7efcfa79e0d9 [ 37.308143][ T756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.329106][ T756] RSP: 002b:00007efcfb70f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 37.331334][ T310] usb 4-1: device descriptor read/64, error -71 [ 37.338189][ T756] RAX: ffffffffffffffda RBX: 00007efcfaa25fa0 RCX: 00007efcfa79e0d9 [ 37.353970][ T756] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000005 [ 37.362450][ T756] RBP: 00007efcfa835024 R08: 0000000000000000 R09: 0000000000000000 [ 37.370523][ T756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.380307][ T756] R13: 00007efcfaa26038 R14: 00007efcfaa25fa0 R15: 00007fff28361478 [ 37.389059][ T756] [ 37.392309][ T756] ---[ end trace 0000000000000000 ]--- [ 37.398544][ T756] SELinux: failed to load policy [ 37.581337][ T310] usb 4-1: device descriptor read/64, error -71 [ 37.821349][ T310] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 37.951305][ T310] usb 4-1: device descriptor read/64, error -71 [ 38.191310][ T310] usb 4-1: device descriptor read/64, error -71 [ 38.301395][ T310] usb usb4-port1: attempt power cycle [ 38.641324][ T310] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 38.662478][ T310] usb 4-1: device descriptor read/8, error -71 [ 38.792507][ T310] usb 4-1: device descriptor read/8, error -71 [ 39.031352][ T310] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 39.052569][ T310] usb 4-1: device descriptor read/8, error -71 [ 39.182529][ T310] usb 4-1: device descriptor read/8, error -71 [ 39.291535][ T310] usb usb4-port1: unable to enumerate USB device