last executing test programs: 14.869881011s ago: executing program 2 (id=1383): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000000)='overlay\x00', 0x141940, &(0x7f0000000140)={@_ha_fsid={[0x3, 0x9f]}, {0xe1, 0x4, 0x6000000, 0x3}}, 0x547, &(0x7f0000000180)={@_ha_fsid}, &(0x7f0000000200)=0xfffffffa}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000380)={{r1}, 0x1, &(0x7f00000002c0)=[0x92], 0x3, 0x5, 0x1}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200004, 0x200004, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300), 0x401, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@userxattr}], [], 0x2c}) 14.839382061s ago: executing program 2 (id=1384): fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x81, &(0x7f0000000300)=ANY=[@ANYBLOB='nr_inodes=%,fsname=tls,audit,fowner>', @ANYRESDEC=r0, @ANYBLOB="2c683130303005003030303030303030a1c90600342c0000000000008800000028c951e816af19f14495f6795331"]) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r1 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000380)={0x0, 0x2, 0x2, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0x200, 0x8, 0x84, 0x0, 0x7, 0xc4, 0x1, 0x0, 0x9, 0xf, 0x8, 0x9}, {0x8, 0xaff2, 0xa, 0x5, 0xc, 0x1, 0x9, 0x3, 0x4, 0x13, 0x1, 0x6, 0x12005}, {0x2, 0x7, 0xa, 0xf, 0x1, 0x14, 0x0, 0xfb, 0x72, 0xfb, 0x1, 0x3, 0x2}], 0x8}) (async, rerun: 64) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000b40)={[0x1, 0x400000000006, 0xfffffffffffffffd, 0x0, 0x8000000000010004, 0xfffffffffffffffb, 0x4002004c0, 0xffe, 0x0, 0x2a, 0x20000000014, 0xffff, 0x0, 0x0, 0x7f, 0x7], 0xeeee8000, 0x2}) (async) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) (async, rerun: 32) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) (async) readv(r6, &(0x7f00000031c0)=[{&(0x7f0000000140)=""/20, 0x14}, {&(0x7f00000001c0)=""/30, 0x1e}], 0x2) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) (async, rerun: 32) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) (async, rerun: 32) setns(r5, 0x24020000) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) (async, rerun: 32) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000000500)={0x0, 0x3, 0x647, 0x0, 0x40000}) (rerun: 32) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14.765427583s ago: executing program 2 (id=1385): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)={0x14, r1, 0x303, 0x0, 0x4, {0x13}}, 0x14}}, 0x0) r2 = socket(0x1, 0x3, 0x6) write(r2, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8070000001d00000000000100", 0x1c) 14.709963104s ago: executing program 2 (id=1386): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket(0x1, 0x3, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x40, 0x20001, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r0}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) pipe(&(0x7f0000000340)) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x5, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x7ffe}}, 0x50) syz_fuse_handle_req(r7, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc7f1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98fe1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a00000000fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f7ee81c7142cf36447ab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f2d050000000000003bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8eb0002000000000000bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b5267288949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0x5, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x13, 0xffffffff, 0x8, 0x0, 0x80000, 0xa000, 0x6, 0x0, r9, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) unshare(0x22020400) writev(r10, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) sigaltstack(&(0x7f0000000000)={0x0, 0x80000001, 0x54797c198fc260f8}, 0x0) sigaltstack(&(0x7f0000000080)={0x0, 0x3}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone3(&(0x7f0000000340)={0x105480, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14.317566763s ago: executing program 2 (id=1390): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000bd00000000001000330002030000003fff00000000000200000000000000000000570d45f3dd65602100000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}, 0x1, 0x0, 0x0, 0xffef}, 0x0) 14.121358487s ago: executing program 2 (id=1397): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2) 14.034556848s ago: executing program 32 (id=1397): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2) 10.2260238s ago: executing program 0 (id=1431): syz_usb_connect$midi(0x5, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000002030144b4740000102030109022e00010118100409040000020103000609058e0b20000fd702052501012709058c0200066df78005250101"], &(0x7f0000000640)={0x0, 0x0, 0x8, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x5000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0x0, 0x2, 0x3}, 0x1c) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x1c}}, 0x4000000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newsa={0x214, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x393, 0x4e25, 0x5, 0x0, 0x0, 0x0, 0x3a, r5}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@private=0xa010101, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x0, 0xfd, 0x20}, [@algo_comp={0x119, 0x3, {{'deflate\x00'}, 0x688, "488ef294c6969930048b4ae329a52987353cbfd7aeb495b51c17f0bcf152284f95b4e8a3e459c9486a773ab5146d96997e6a4cb65b9c70e49cedd02a5d9b204899ea21685bd8319ad080a8ee10d6fb68a2510fda97bcba2db20e76c77cdd5561d87831f68f9b3c4f28559888046e00846885de305a5236fef2223b86c28d40c1f4665087b8b68c72d0b7997e2def985717dc764a6e5cae11d3cd794086e482fec5539c5999ce17ecbc99fa692b610137ff301051451783696ce2eac6907161d07ea5857fc27526449c4e48520f57c34403"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x214}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="380100001800010027bd700000010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e2300050000006073000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x94}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003f40)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010700000000fcdbdf256700000008000300", @ANYRES32, @ANYBLOB="08000400000000000800c3"], 0x2c}}, 0x40) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) ioprio_set$uid(0x3, 0x0, 0x0) io_submit(r11, 0x1, &(0x7f0000000300)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x6, 0x0, r9, 0x0, 0x0, 0x401, 0x0, 0x0, r10}]) r12 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r12, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x800000}, 0xc) mremap(&(0x7f0000a87000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 8.890908919s ago: executing program 0 (id=1435): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000800)=ANY=[@ANYBLOB="4008f447efc8653d24cf0000"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x5, 0x2, 0x21, @empty, @empty, 0x8000, 0x1, 0x100, 0x7}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)={0x68, 0x26, 0x603, 0x70bd28, 0x25dfdbfe, "", [@nested={0x58, 0xce, 0x0, 0x1, [@typed={0x51, 0xe9, 0x0, 0x0, @str='cmdline\x00\xa9\x1c\xe7\xdc\x85:\xd6\x87\xf4Q\xa7X$i\xb6\xa4G\xb7j\xcc\xa4\xadB`F\xd3_{\xd0\xd2\xa8b\xa0V\xf0\xe1\xa2\t\x04=\xd0w\xef\x1a\xcf\xc3<-\xe0\xfc\x81\xfcp\x8eQ\xdd(\x82\xbe\xc8\v\x11#J\xfa\x0e\x9a\x12/'}]}]}, 0x68}], 0x1, 0x0, 0x0, 0x4000000}, 0x40) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000440)={0x0, 0x11, 0x7, "ded938e4a399ec"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000800)=ANY=[@ANYBLOB="4008f447efc8653d24cf0000"], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x5, 0x2, 0x21, @empty, @empty, 0x8000, 0x1, 0x100, 0x7}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$netlink(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)={0x68, 0x26, 0x603, 0x70bd28, 0x25dfdbfe, "", [@nested={0x58, 0xce, 0x0, 0x1, [@typed={0x51, 0xe9, 0x0, 0x0, @str='cmdline\x00\xa9\x1c\xe7\xdc\x85:\xd6\x87\xf4Q\xa7X$i\xb6\xa4G\xb7j\xcc\xa4\xadB`F\xd3_{\xd0\xd2\xa8b\xa0V\xf0\xe1\xa2\t\x04=\xd0w\xef\x1a\xcf\xc3<-\xe0\xfc\x81\xfcp\x8eQ\xdd(\x82\xbe\xc8\v\x11#J\xfa\x0e\x9a\x12/'}]}]}, 0x68}], 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000440)={0x0, 0x11, 0x7, "ded938e4a399ec"}, 0x0, 0x0, 0x0, 0x0}) (async) 6.49434164s ago: executing program 0 (id=1449): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e24, @broadcast}, {0x50d, @link_local}, 0x60, {0x2, 0x4e22, @local}, 'pim6reg1\x00'}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = eventfd2(0x96, 0x80800) write$eventfd(r3, &(0x7f0000000140)=0xffffffffffffffff, 0x8) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x4000002, 0x2}}, 0x10) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) fsmount(0xffffffffffffffff, 0x0, 0x78) 6.455846371s ago: executing program 0 (id=1450): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) unshare(0x400) r1 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80284511, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50, 0x0, r3, {0x7, 0x1f, 0x1, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x11) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a440)={0x28, 0xffffffffffffffda, 0x5, {{0x3, 0xce7, 0x0, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r5, 0x5, &(0x7f0000000200)={0x1}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)=""/206, 0xce}], 0x1}, 0x6}], 0x1, 0x102, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "c8bf5d03ac85c25d", "9a5d38a17f00c500000000feff00", "a1c4776d", "3c84a3a3be2adbff"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 6.338168293s ago: executing program 3 (id=1451): syz_usb_connect$midi(0x0, 0x47, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x17cc, 0x815, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x1, 0x2, 0x1c0, 0x80, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x3d, [], [{{0x9, 0x5, 0xc, 0x2, 0x400, 0x6, 0x2, 0xf9, {0x14, 0x25, 0x1, 0x10, "99effeb5454df150f99cc8dd0c29ed0c"}}}]}}}}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, &(0x7f0000000000)=@string={0x0, 0x3, "5fed644fc988221817"}}]}) 5.207996548s ago: executing program 3 (id=1453): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mremap(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x7fff, 0x101) ppoll(&(0x7f0000000040)=[{r2}], 0x1, &(0x7f00000000c0), 0x0, 0x0) futex(0x0, 0x5, 0xfffefffe, 0x0, 0x0, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f32d635004000000f300f01d7ba41006d", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000e28000/0x4000)=nil, 0x4000, 0x2000004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x17c, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="d09178d2da3477ec73a38ffffcd82caf103bc848f7ff22290bd6c0375f437b167f431ad24706d7263978db87dbaa159b0fdec8e129e835688cf370555aa8c6dffe261622b114299d6f"]}, @nested={0x116, 0x6, 0x0, 0x1, [@typed={0x102, 0x0, 0x0, 0x0, @binary="7ec7ba67da011673ff1ab09e525585242784f25a94b9c1a68abdaf9f8add1014a67b4d693c1288f571c5170a818b005fdb130300000000000000d1f304d996dc626d41898d87422f8bbb41206c39321b9286ebdbb773955fe26f7c912cd9171c6d320a539fa594287d65bcb8b52f24e49a1ba39633cd52f1c1bf2930116650533617839f03127338b37b0d07242de37293ea57a40f2a4cd4cc5063766dac6d2766fe27e39a567d5997ae2ac9132fb043e493299254b8bb64c6c24bbbd025319996e97994723530e334584477d2eb82c28b60bf2ff5b963ee93a2d8b0c02aeb1ab1e8f02d332611e22b66a6e906836600"/254}, @generic="d83bea4ae74b4d194feb3f8d8b6d"]}]}, 0x17c}}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/N'], 0x6a) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x80000, 0x12400) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f0000000140)={0x8, 0x81}) mmap(&(0x7f0000016000/0x2000)=nil, 0x2000, 0x2000006, 0x10, r0, 0xc62b2000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x10000000000005, 0x40, 0x40, 0x0, 0x1, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x1, 0x0, 0x2, 0x9, 0x10000000001], 0x80a0000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_connect(0x5, 0x51, &(0x7f00000005c0)=ANY=[@ANYBLOB="120110fc675bda08f8060100fd990102030109023f0002ff0c40d50904a436011f81ed06090504000e00b102f7020109042703020e01000d09050e02ff0307fb02072b44080400ff09058008f3bc07c6f8"], 0x0) 4.17403537s ago: executing program 3 (id=1462): socket(0x1e, 0x4, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="06012abd7015fbdbdf51471e5c1d85ec27abe26843ecabb401de54d3ad4d807d7bcc790e67dc83dd4604180fb2933a46cd8287e650794e948fe9542a014c89e7fe5dc8e3fedaaff13db77a0406e2facd"], 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x80) syz_genetlink_get_family_id$nfc(&(0x7f0000002a80), r5) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002b80), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r6, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x200040c0) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffffffffffed0}], 0x1, 0x11, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0xfe27) ioctl$KVM_RUN(r9, 0xae80, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r10 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000080)=0xa) 3.034047815s ago: executing program 0 (id=1471): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup(r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r1 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000001000)=ANY=[@ANYBLOB="120000020000402505a1a440000000010109023b000101000080090400001202060000052406000005240007000d240f0100000000090582020002000007d7000905030208000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000040)={0xa000, 0x1000, 0x1}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 3.016929875s ago: executing program 4 (id=1473): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x1a, "b0bf2ebb48c849ac0000000003000018bfff40"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x12) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2004000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x6b}}) 2.990227685s ago: executing program 4 (id=1474): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0100001000130400000000ffdbdf25fe8000000000000000000000000000aa20010000000000000000000000000000fffd00004e2400030200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000014000000000000000000000000000000002032000000000000000000000000000000000001010000000000000000070000000000000000000000000000000400000000000000070000000000000004000000000000000800000000020000010000000000000001000000010000000800000000000000cc000000000000000800000000000000f80000000000000000000000fdffffff063500000200000100000000000000004c001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040"], 0x13c}, 0x1, 0x0, 0x0, 0x4008000}, 0x844) 2.930233197s ago: executing program 4 (id=1475): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd2000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="0f01c9450f017965c40215034d6e3e36400f01c8f3410fc7b100000100262ef30f1efbb96a020000b872000000ba000000000f30c744240002000000c744240206600000c7442406000000000f011424c4617ae66106670f08", 0x59}], 0x1, 0x61, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.927773567s ago: executing program 3 (id=1477): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x7f, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/237, &(0x7f0000000780)=""/88, &(0x7f0000000800)=""/90, 0x6000}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)='7', 0x1, 0x4000800, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r5, &(0x7f0000000640)={0x0, 0x1463, 0x100, 0x2, 0xb2}, &(0x7f0000001180)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x20, 0x401, 0x317}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0xbdf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x2, 0x271}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4bc6, 0x400, 0x2, 0x40021a}}], 0x4, &(0x7f0000001540)={0x2e, 0x35, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r4, '\x00', {0x5, 0x64, 0x0, 0x0}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001c00)={0x1, 0x0, [{0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0xb15}) syz_usb_connect(0x5, 0x36, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0x5) 2.923763017s ago: executing program 1 (id=1478): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0xfffffffffffffffc}, {0x8008000000000001, 0x400000000000000, 0x200000000000000, 0x1}}, [@policy_type={0xa}]}, 0xc4}}, 0x2c000010) 2.909584257s ago: executing program 1 (id=1479): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = gettid() sigaltstack(&(0x7f0000000000)={0x0, 0x180000001, 0xffffffffffffff73}, 0x0) tkill(r2, 0x21) r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e00048e0018030109021b0001000000000904080001030000000905", @ANYRES16], 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x2) mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1) mremap(&(0x7f0000880000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0xd) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x5) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000400)=0x7) syz_usb_disconnect(r3) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x13ec, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) r7 = syz_usb_connect$midi(0x4, 0xc9, &(0x7f0000000bc0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x50, 0x763, 0x2003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x1, 0x1, 0x8e, 0x40, 0xf, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x30, 0x6, [@ms_header={0x7, 0x24, 0x1, 0x7f, 0x7}, @midi_out_jack={0x9, 0x24, 0x3, 0x3, 0x4, 0x1, [{0x7f}], 0x6}, @midi_out_jack={0xf, 0x24, 0x3, 0x2, 0xc1, 0x4, [{0x5, 0x5}, {0xb, 0xe}, {0x0, 0xb}, {0x4, 0xcf}], 0x2}], [{{0x9, 0x5, 0x4, 0xc, 0x400, 0x2, 0xac, 0x6, {0x12, 0x25, 0x1, 0xe, "09582d6617acf556b835df8cd792"}}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x8, 0x4, 0x6, {0xd, 0x25, 0x1, 0x9, "4f9ef9cd40772bd62b"}}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x5, 0x0, 0x5, {0x11, 0x25, 0x1, 0xd, "7a0f6a8b55e2a09cb046b0690f"}}}, {{0x9, 0x5, 0xa, 0x4, 0x3ff, 0x80, 0x9a, 0xa, {0x6, 0x25, 0x1, 0x2, "c956"}}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x4, 0x6, 0x51, {0x14, 0x25, 0x1, 0x10, "ae7e40eb0000000002000000b35601cd"}}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x5, 0x8, {0x6, 0x25, 0x1, 0x2, "0f1b"}}}]}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0xd1, 0x7, 0x4, 0x20, 0x5}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x4, [{0x78, &(0x7f0000000280)=@string={0x78, 0x3, "64c6fd37baa8b701b840a43482224e514f28049894e23120e29ef10d1de6f65943ee2af96b67d2c422941ac434c157b03c4376bdced2ae027dfd1dbb486b620819580bb5ef837c2638d9eda3ed159164a21d280745c830059f3ea5fecd6950aea195c07651c3fef4a4934152f9f95f210b7716702094"}}, {0x4c, &(0x7f0000000300)=@string={0x4c, 0x3, "020adc4a2db265d47803639a63824f8a188aad203199cd00172fcb1697332a182aa990c4b89f5b09069beb6daa0d5ee8c09e61aeb544933e21ac72cf381c22355b0eccd05f009440b608"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x445}}, {0x6f, &(0x7f00000003c0)=@string={0x6f, 0x3, "981c617893e9ddf3a9e293ed0bcf86cb8bb8ab14e5922c14e4affe703698cc7cc76468d0554f0270d8f73e52c613c5744f4f6b57ba7ff65c8eee6bf297730c81e5a4b801ed136ee5dbb443cfe4782d5a111b1cc804ecec3e0e87a20415e562ba6a4c4278deb288b45c2768cdb6"}}]}) syz_usb_control_io(r7, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x40, 0xe, 0xa8, {0xa8, 0x9, "99374cab07ec65d0e6712534187cc7a781db6109e87cbcfa65d48d9d91ee513d67487ac8ab844f542f6849326b1452afc95fd561d74eda49f2a7fa21010e2b294f08134d1979656857b597c119fbb3198633673ff50d189dc0db6c1fb809ce9b1496318700b9970f0699aff9d49d2277bba2b1d4f19543c00b8fee57ed7e2c67d374852a73d75dac147e9722dc41cdd7c79639761d39e979bfcecee7b3cdffc67b3cecaae9b1"}}, &(0x7f0000000b80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x425}}, &(0x7f00000005c0)={0x0, 0xf, 0x13, {0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x30, 0x0, 0x9, 0x9, 0x3}, @ptm_cap={0x3}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0x10, 0xbf, "e7c6885b", "e5ddb89e"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x1, 0x3, 0x3, 0x2, 0xab, 0x9}}}, &(0x7f0000000ac0)={0x84, &(0x7f00000006c0)={0x20, 0x18, 0x33, "d2aaba517c33b083026d0e519bb5a5eec594507d2248673559908fd688ec4acf2eaefebdf6d16019a5c9851b005a3fee6f4222"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x82}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000007c0)={0x20, 0x0, 0x8, {0x142, 0x20, [0xff7]}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000880)={0x40, 0xb, 0x2, "b1ec"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000900)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000940)={0x40, 0x17, 0x6, @random="cf014defbc6e"}, &(0x7f0000000980)={0x40, 0x19, 0x2, "fb39"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0x8003}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0xd}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0xf}}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x1000, 0x4000}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000300)=ANY=[], 0x1b0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000000)={0x0, 0x6, [{r1, 0x0, 0x2000, 0x4000}, {r1, 0x0, 0x1000000000000, 0x4000}, {r1, 0x0, 0x10000, 0xfffff000}, {r1, 0x0, 0x10000, 0xfffffffffffff000}, {r1, 0x0, 0x10000, 0xfffff000}, {r1, 0x0, 0x0, 0xfffffffffffff000}]}) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, 0x0, 0x0) 2.489906036s ago: executing program 4 (id=1480): syz_usb_connect(0x4, 0x0, 0x0, 0x0) syz_usb_connect$midi(0x2, 0xd5, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x582, 0x9a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc3, 0x1, 0x1, 0x9b, 0x80, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x30, 0x56, [@ms_header={0x7, 0x24, 0x1, 0x3, 0x7}, @midi_out_jack={0x9, 0x24, 0x3, 0x3, 0xa, 0x1, [{0x3}], 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0x3}, @ms_header={0x7, 0x24, 0x1, 0x6, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0xfc, 0xe}, @ms_header={0x7, 0x24, 0x1, 0xb3, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x6565, 0x7}, @midi_out_jack={0xb, 0x24, 0x3, 0x1, 0x8, 0x2, [{0x5, 0xb}, {0x20, 0x7}], 0x3}, @ms_header={0x7, 0x24, 0x1, 0x800, 0x7}], [{{0x9, 0x5, 0x3, 0x10, 0x400, 0x2a, 0x3, 0x7f, {0x7, 0x25, 0x1, 0x3, "df401e"}}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0xfe, 0x4, 0x6, {0x11, 0x25, 0x1, 0xd, "6a1fc06f8a53338527f8b62f92"}}}, {{0x9, 0x5, 0x1, 0x18, 0x10, 0x5, 0x0, 0x1, {0x6, 0x25, 0x1, 0x2, "ec95"}}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x6, 0x5, 0x3, {0x12, 0x25, 0x1, 0xe, "1af6a791ba62e239a585ed3342f3"}}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x2, 0xfa, 0x8, {0x11, 0x25, 0x1, 0xd, "d3cb47b31c37bf4bcd6c9209f8"}}}]}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x340, 0x9, 0x1, 0x8, 0x8, 0x5b}, 0x2a, &(0x7f0000000740)={0x5, 0xf, 0x2a, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x8, 0x9, 0x6}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x9, 0xf, 0x100, [0xc000, 0x0, 0xf0]}, @ptm_cap={0x3}]}, 0x4, [{0xc5, &(0x7f00000001c0)=@string={0xc5, 0x3, "dbeba2f5e29aab1caa159a8ac9d78a7470721717b7be548010c6cbb75fa36339f918766f3a70a6f311cafeaf839eb385e76f177201b47bcc51610b8160e6f4dcfa3d2cb1fd05704cbd423e55d42fabb921e50ee419d92085d7d228db1089d511fc3f73d25b74df5a705b485f16e90f3e03744e69e6789d62b9ee52d7e45af93ed60d0648a2eb393ffe54e9dd5c123ec5f6bf7b05f59c1b5d763b3ac4754124c3e0325a499bf10cb28ab8816ae0b56d7dba18e98c569c6014f1ec568df07896b56fc4d8"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4}}, {0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="1d03409921fb21e134b0f70ab8add8c640f68ef1d07e479a0e322e508216f6ccbedd93aaf0ec8bd8dd"]}, {0x73, &(0x7f00000003c0)=@string={0x73, 0x3, "ef8ce095c0889c7da847cdccb3f9884c7505edf535b2af7e806408569271ec580e1b346c3e240e1d861b2e7a44f1e61fcbb08ec50e18a7677d12e9ae760a1c9927f9e9872a2c279f0bce7ef333979dbaa96a5f2b5d8858e38a36c1f609e92faa7ebfd54f52ac35f23ed4ef070709d72157"}}]}) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x219, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x8, "", [{{0x9, 0x4, 0x0, 0xfc, 0xdf, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x481, 0x3f, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0xc1}}}}}]}}]}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x190, 0x1, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_EXPECT_NAT={0x174, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, @CTA_EXPECT_FLAGS={0x8}]}, 0x190}, 0x1, 0x0, 0x0, 0x20000005}, 0x40010) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) unshare(0x6020400) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100f0ff00004300028005000100060000000c00030100008000000000000c0002"], 0xc0}}, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0x2020) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000140)={r4, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000f, 0x11, r5, 0x0) syz_clone3(&(0x7f0000000200)={0x40000000, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x1}, 0x58) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB=' \b+'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.961109048s ago: executing program 3 (id=1481): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x80000) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000180)=""/184) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r1, r7, &(0x7f0000000480)={0x0, 0x18e2, 0x10000, 0x0, 0x1d2, 0x0, r2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa90e, 0x200, 0x1, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x2, 0x200019b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf9e9, 0x40000, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x3, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r6, '\x00', {0x1, 0xd55, 0x0, 0x0}}, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0x0) syz_usb_connect(0x6, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x42b}}]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000040), 0x3) r9 = fcntl$dupfd(r8, 0x0, r8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303}, "922cb9494200", "7d05dacec51d55ff3c13567ddffb04317d0256f6506fca0a5f49cc3c88081372", '\x00', "ffffff7f00"}, 0x38) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000000)=""/85) 1.168358384s ago: executing program 4 (id=1482): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x1a, "b0bf2ebb48c849ac0000000003000018bfff40"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x12) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2004000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x6b}}) 1.050251497s ago: executing program 4 (id=1483): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000bd00000000001000330002030000003fff00000000000200000000000000000000570d45f3dd65602100000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0xefff) 1.028830778s ago: executing program 33 (id=1483): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000bd00000000001000330002030000003fff00000000000200000000000000000000570d45f3dd65602100000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0xefff) 586.688757ms ago: executing program 5 (id=1484): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r5, &(0x7f0000000000)=""/78, 0x4e) getdents(r5, &(0x7f0000000200)=""/251, 0xfb) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}], 0x20}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x21) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) 507.746169ms ago: executing program 3 (id=1485): socket(0x1e, 0x4, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="06012abd7015fbdbdf51471e5c1d85ec27abe26843ecabb401de54d3ad4d807d7bcc790e67dc83dd4604180fb2933a46cd8287e650794e948fe9542a014c89e7fe5dc8e3fedaaff13db77a0406e2facd"], 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x80) syz_genetlink_get_family_id$nfc(&(0x7f0000002a80), r5) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002b80), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r6, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x200040c0) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffffffffffed0}], 0x1, 0x11, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0xfe27) ioctl$KVM_RUN(r9, 0xae80, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) r10 = syz_open_pts(r0, 0x200) r11 = dup3(r10, r0, 0x0) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000080)=0xa) 306.362313ms ago: executing program 5 (id=1486): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0100001000130400000000ffdbdf25fe8000000000000000000000000000aa20010000000000000000000000000000fffd00004e2400030200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000014000000000000000000000000000000002032000000000000000000000000000000000002010000000000000000070000000000000000000000000000000400000000000000070000000000000004000000000000000800000000020000010000000000000001000000010000000800000000000000cc000000000000000800000000000000f80000000000000000000000fdffffff063500000200000100000000000000004c001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040"], 0x13c}, 0x1, 0x0, 0x0, 0x4008000}, 0x844) 305.931203ms ago: executing program 5 (id=1487): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000480)="580000001500add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b0009000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee000000000000000002000000000a81f2a8", 0x58}], 0x1) (async) syz_usb_connect$uac2(0x2, 0x82, &(0x7f0000001a80)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x13e5, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x7, 0x0, 0xe, {0x8, 0xb, 0x1, 0x2, 0x1, 0xf, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x1, 0x10}, [@feature_unit={0x7, 0x24, 0x6, 0x6, 0x4, [0x6]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3b7, 0x8, 0x6, 0x0, {0x8, 0x25, 0x1, 0x1, 0x28, 0x4, 0x3ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x6, 0x8, {0x8, 0x25, 0x1, 0x3, 0xc, 0x2, 0x1}}}}}}}}]}}, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0}) 281.392194ms ago: executing program 1 (id=1488): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000780)={[0xd45, 0x1000009, 0xfffffffffffffffb, 0x10000000, 0x10000, 0x3, 0x4003004c2, 0xe, 0x9, 0xfffffffffffffffe, 0x1, 0x0, 0x3, 0x0, 0x9, 0x8d], 0x100000, 0x4880}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(&(0x7f00000000c0)) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000140)={r4, 0x0, 0x0, 0x4000}) syz_clone(0x20500, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000c40)={0x1, 0x340, 0x140, &(0x7f0000000840)=[0xbb, 0x3, 0x2, 0x7, 0x8, 0x22c, 0x400, 0x4, 0x3, 0x5, 0x8000000000000000, 0x1, 0x6, 0x5, 0x9, 0x0, 0x7fff, 0xae45, 0x2, 0x7, 0x9, 0x3ff, 0x800, 0x7fffffffffffffff, 0xf7, 0x0, 0x92b, 0x7ff, 0xfc, 0xf, 0x3, 0x6, 0x6, 0xb, 0x5, 0x1, 0xb, 0x101, 0xfffffffffffffff1, 0x3, 0x3, 0x7fffffff, 0x9, 0x1ff, 0x4, 0x1, 0xfffffffffffffffc, 0x8, 0x7f, 0x58a6, 0x1, 0x9, 0x0, 0x2d, 0x1, 0x9, 0x8, 0x9, 0x4, 0x8, 0x9, 0x4, 0xffffffff, 0x55b, 0x8000000000000001, 0x8001, 0x4, 0x2, 0x471, 0x5, 0x1, 0x9, 0x7, 0x7, 0x5, 0xff, 0x7ff, 0x4, 0x5, 0x9, 0x2, 0x9, 0x1, 0x8, 0x0, 0x100, 0x7fffffff, 0x272, 0xfffffffeffffffff, 0x1, 0x100000001, 0x3, 0x6, 0x681f979f, 0x0, 0x9, 0xfff, 0x8, 0xce22, 0x7, 0x0, 0x1, 0x8, 0xfe6, 0xd, 0x7, 0x7, 0x3, 0xffffffff80000001, 0x2, 0x40, 0x0, 0x6, 0x8001, 0x7fff, 0x4, 0xc0000000000, 0x0, 0x5, 0x6, 0x40, 0x1, 0x10, 0x3ff, 0x2, 0xffffffffffffffff, 0x3]}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000003, 0x4000010, 0xffffffffffffffff, 0xcc695000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000001c0)=[{&(0x7f0000000180)='wi', 0x2}, {&(0x7f0000000100)="e3bcc333f5", 0x5}], 0x2, 0x1) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000200)) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r7, &(0x7f0000000280)='./file0\x00', 0x200) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 217.691145ms ago: executing program 1 (id=1489): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'bridge_slave_1\x00', &(0x7f0000000080)=@ethtool_cmd={0x24, 0x0, 0x3, 0x6, 0xff, 0x0, 0x0, 0xff, 0x0, 0xfa, 0x20000000, 0x7883, 0x0, 0x1, 0x1, 0x6162b9dd, [0x47cb, 0x80000001]}}) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) (async) prlimit64(r0, 0xe, &(0x7f0000000000)={0xb9ee, 0x6}, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) 150.181577ms ago: executing program 1 (id=1490): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r2, 0x0, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stack\x00') (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$setsig(r5, 0xa, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000440)="b8e30b8ed00f01c8baf80c66b8e0ee718766efbafc0c66b80300000066ef7292f081a3faa1189426660f3acf110fba6100b000ee440f20c066350b000000440f22c0baf80c66b820be278466efbafc0c66ed66b9e202000066b8b40dad0266ba0d5c69230f30", 0x66}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_SET_TSC_KHZ_cpu(r4, 0xaea2, 0x80) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x4000000000000009, 0xfffffffffffffffd, 0xfffffffffffffff6, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000004000000, 0xc595, 0x1, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x1], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 38.963589ms ago: executing program 1 (id=1491): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x9a, 0x60, 0xa, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x40a, 0x8, 0xfe}, {0x6, 0x24, 0x1a, 0x9, 0x20}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x5f, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xff, 0xf3, 0xc3}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x81, 0x0, 0x9}}}}}}}]}}, 0xfffffffffffffffd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0x70ff}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x10) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0xac, 0x0, 0x10, {0x0, 0x200000100, 0x20000000, 0x80000000000004, 0x8, 0x0, {0x1, 0x1003d, 0x0, 0x13dc, 0x2, 0x2, 0x10000, 0x2, 0x5, 0xa000, 0xfffffffc, r6, 0x0, 0x9ff, 0x57}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x26, 0x6caff549, 0xfffffffff323ca46, 0x0, 0xfffc, 0x1, 0x80, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000080)='./file0/file0\x00', 0x1) syz_fuse_handle_req(r4, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)="97a797c5", 0xa797}], 0x1}}], 0x1, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000004c0)={{r1, &(0x7f0000000040)='&**,&{\x00', 0x100, &(0x7f0000000080)={@align=0x3, {0x29, 0x700, 0x1737, 0x800}}, 0x2, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x2}, {[0x0, 0x1, 0x9, 0x10000]}, 0x1, 0xd0, &(0x7f00000003c0)=""/208}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000200)=""/60, 0x3c}, {&(0x7f0000001680)=""/4104, 0x1008}], 0x2}, 0x9}], 0x1, 0x40030002, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 0s ago: executing program 0 (id=1492): syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000051aae040030478fa79ab010203010902120001040020000904"], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x26, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0xc, "", [{{0x9, 0x4, 0x0, 0xf, 0xfe, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x10, 0xfb, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xb5, 0x81, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x27ed4f847164e2a, 0x23, 0x29, {0x29, 0x23, "83efb930f0187ff0478fa22a61a54607b71ea9e43d359c479c37f525cde38bf7914077366b487a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x20) preadv2(r2, &(0x7f00000018c0)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1, 0x40, 0x3, 0x20) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000080)) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000051aae040030478fa79ab010203010902120001040020000904"], 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x26, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0xc, "", [{{0x9, 0x4, 0x0, 0xf, 0xfe, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x10, 0xfb, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xb5, 0x81, 0xfc}}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x27ed4f847164e2a, 0x23, 0x29, {0x29, 0x23, "83efb930f0187ff0478fa22a61a54607b71ea9e43d359c479c37f525cde38bf7914077366b487a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x20) (async) preadv2(r2, &(0x7f00000018c0)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1, 0x40, 0x3, 0x20) (async) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000080)) (async) kernel console output (not intermixed with test programs): tmpfs" ino=196 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 82.983173][ T36] audit: type=1400 audit(1783292033.660:312): avc: denied { create } for pid=2446 comm="syz.0.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 83.380953][ T2459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.389785][ T2459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.424388][ T393] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 83.574374][ T393] usb 2-1: Using ep0 maxpacket: 32 [ 83.580776][ T393] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 83.589560][ T393] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 83.598563][ T393] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 83.607892][ T393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 83.618116][ T393] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 83.628148][ T393] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 83.642253][ T393] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 83.651645][ T393] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.661461][ T393] usb 2-1: config 0 descriptor?? [ 83.876102][ T393] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 31 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 84.039864][ T2474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.048693][ T2474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.077549][ T36] audit: type=1400 audit(1783292034.760:313): avc: denied { read write } for pid=2456 comm="syz.1.777" name="lp0" dev="devtmpfs" ino=583 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 84.079875][ C0] usblp0: nonzero read bulk status received: -71 [ 84.101522][ T36] audit: type=1400 audit(1783292034.760:314): avc: denied { open } for pid=2456 comm="syz.1.777" path="/dev/usb/lp0" dev="devtmpfs" ino=583 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 84.108874][ T412] usb 2-1: USB disconnect, device number 31 [ 84.176072][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 84.182103][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 84.206938][ T9] usb 4-1: USB disconnect, device number 34 [ 84.317890][ T36] audit: type=1400 audit(1783292035.000:315): avc: denied { bind } for pid=2478 comm="syz.3.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.395021][ T2456] usblp0: removed [ 84.574162][ T2488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.582911][ T2488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.616612][ T1041] usb 3-1: 0:2 : does not exist [ 84.623741][ T1041] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 84.634371][ T9] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 84.774436][ T9] usb 4-1: device descriptor read/64, error -71 [ 85.014803][ T9] usb 4-1: device descriptor read/64, error -71 [ 85.254428][ T9] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 85.264383][ T1041] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 85.384393][ T9] usb 4-1: device descriptor read/64, error -71 [ 85.414385][ T1041] usb 2-1: Using ep0 maxpacket: 8 [ 85.420692][ T1041] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 15 [ 85.433717][ T1041] usb 2-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 85.442828][ T1041] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.451706][ T1041] usb 2-1: config 0 descriptor?? [ 85.624386][ T9] usb 4-1: device descriptor read/64, error -71 [ 85.734530][ T9] usb usb4-port1: attempt power cycle [ 85.893773][ T2506] tipc: Started in network mode [ 85.898749][ T2506] tipc: Node identity 2007ff, cluster identity 4711 [ 85.905419][ T2506] tipc: Node number set to 2099199 [ 85.913921][ T633] tipc: Subscription rejected, illegal request [ 85.921947][ T2506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.930628][ T2506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.949339][ T1041] usbhid 2-1:0.0: can't add hid device: -71 [ 85.960988][ T1041] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 85.976153][ T1041] usb 2-1: USB disconnect, device number 32 [ 86.006176][ T2530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.015013][ T2530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.074385][ T9] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 86.105358][ T9] usb 4-1: device descriptor read/8, error -71 [ 86.191794][ T2530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.200737][ T2530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.235392][ T9] usb 4-1: device descriptor read/8, error -71 [ 86.474428][ T9] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 86.495505][ T9] usb 4-1: device descriptor read/8, error -71 [ 86.625409][ T9] usb 4-1: device descriptor read/8, error -71 [ 86.734494][ T9] usb usb4-port1: unable to enumerate USB device [ 87.101629][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 87.101649][ T36] audit: type=1400 audit(1783292037.780:318): avc: denied { append } for pid=2560 comm="syz.1.812" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 87.207330][ T36] audit: type=1400 audit(1783292037.890:319): avc: denied { accept } for pid=2566 comm="syz.0.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.345845][ T2572] netlink: 'syz.3.816': attribute type 4 has an invalid length. [ 87.444407][ T1041] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 87.599616][ T1041] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 87.609477][ T1041] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 87.627497][ T1041] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.642509][ T1041] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 87.651636][ T1041] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 87.659830][ T1041] usb 2-1: Product: syz [ 87.664046][ T1041] usb 2-1: Manufacturer: syz [ 87.668719][ T1041] usb 2-1: SerialNumber: syz [ 87.696009][ T36] audit: type=1400 audit(1783292038.380:320): avc: denied { accept } for pid=2581 comm="syz.3.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.877291][ T1041] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 87.977266][ T36] audit: type=1400 audit(1783292038.660:321): avc: denied { create } for pid=2592 comm="syz.0.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 88.004938][ T9] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 88.078118][ T36] audit: type=1400 audit(1783292038.760:322): avc: denied { ioctl } for pid=2560 comm="syz.1.812" path="/dev/usb/lp0" dev="devtmpfs" ino=596 ioctlcmd=0x604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 88.130573][ T2594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.139201][ T2594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.155617][ T9] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 88.166894][ T9] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 88.178196][ T9] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.191071][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 88.197755][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 88.206870][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.215695][ T9] usb 4-1: config 0 descriptor?? [ 88.221100][ T2587] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 88.551157][ T2602] netlink: 'syz.0.827': attribute type 4 has an invalid length. [ 88.630638][ T9] kovaplus 0003:1E7D:2D50.0009: ignoring exceeding usage max [ 88.639993][ T9] kovaplus 0003:1E7D:2D50.0009: ignoring exceeding usage max [ 88.647751][ T9] kovaplus 0003:1E7D:2D50.0009: usage index exceeded [ 88.655278][ T9] kovaplus 0003:1E7D:2D50.0009: item 0 4 2 2 parsing failed [ 88.664185][ T9] kovaplus 0003:1E7D:2D50.0009: parse failed [ 88.670619][ T9] kovaplus 0003:1E7D:2D50.0009: probe with driver kovaplus failed with error -22 [ 88.831991][ T9] usb 4-1: USB disconnect, device number 39 [ 89.022146][ T36] audit: type=1400 audit(1783292039.700:323): avc: denied { listen } for pid=2609 comm="syz.2.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.220089][ T2621] netlink: 'syz.0.836': attribute type 4 has an invalid length. [ 89.984410][ T393] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 90.111069][ T9] usb 2-1: USB disconnect, device number 33 [ 90.120292][ T9] usblp0: removed [ 90.134357][ T393] usb 4-1: Using ep0 maxpacket: 8 [ 90.140810][ T393] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.155731][ T393] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.165688][ T2650] netlink: 'syz.1.846': attribute type 4 has an invalid length. [ 90.169325][ T393] usb 4-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 90.185929][ T393] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.204396][ T393] usb 4-1: config 0 descriptor?? [ 90.557074][ T2674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.591320][ T2674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.611832][ T393] chicony 0003:04F2:0418.000A: ignoring exceeding usage max [ 90.626199][ T393] chicony 0003:04F2:0418.000A: unknown main item tag 0x0 [ 90.644391][ T393] chicony 0003:04F2:0418.000A: unknown main item tag 0x0 [ 90.661689][ T393] chicony 0003:04F2:0418.000A: unknown main item tag 0x0 [ 90.668883][ T393] chicony 0003:04F2:0418.000A: unknown main item tag 0x0 [ 90.686632][ T393] chicony 0003:04F2:0418.000A: unknown main item tag 0x0 [ 90.693799][ T393] chicony 0003:04F2:0418.000A: unknown main item tag 0x0 [ 90.702633][ T393] chicony 0003:04F2:0418.000A: unknown main item tag 0x0 [ 90.710017][ T393] chicony 0003:04F2:0418.000A: unknown main item tag 0x0 [ 90.717191][ T393] chicony 0003:04F2:0418.000A: unknown main item tag 0x0 [ 90.724288][ T393] chicony 0003:04F2:0418.000A: unknown main item tag 0x0 [ 90.731469][ T393] chicony 0003:04F2:0418.000A: unknown main item tag 0x0 [ 90.738773][ T393] chicony 0003:04F2:0418.000A: unknown main item tag 0x0 [ 90.753802][ T393] chicony 0003:04F2:0418.000A: hidraw0: USB HID v0.81 Device [HID 04f2:0418] on usb-dummy_hcd.3-1/input0 [ 90.814887][ T393] usb 4-1: USB disconnect, device number 40 [ 90.824363][ T1041] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 90.864436][ T2689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30296 sclass=netlink_route_socket pid=2689 comm=syz.0.860 [ 90.988650][ T1041] usb 2-1: Using ep0 maxpacket: 32 [ 90.998122][ T1041] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.008961][ T2697] overlayfs: failed to resolve './file2': -2 [ 91.014586][ T1041] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 91.041246][ T1041] usb 2-1: New USB device found, idVendor=0005, idProduct=0000, bcdDevice= 0.00 [ 91.050485][ T1041] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 91.058600][ T1041] usb 2-1: SerialNumber: syz [ 91.069274][ T1041] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 91.088455][ T1041] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 91.106366][ T369] udevd[369]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 91.270676][ T1041] usb 2-1: USB disconnect, device number 34 [ 91.284374][ T36] audit: type=1400 audit(1783292041.950:324): avc: denied { ioctl } for pid=2710 comm="syz.0.870" path="socket:[19833]" dev="sockfs" ino=19833 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 92.031111][ T2745] rust_binder: 421: no such ref 0 [ 92.036376][ T1041] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 92.205679][ T1041] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 53, changing to 7 [ 92.216807][ T1041] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1568, setting to 1024 [ 92.229796][ T1041] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 92.239183][ T1041] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.247391][ T1041] usb 2-1: Product: syz [ 92.251705][ T1041] usb 2-1: Manufacturer: syz [ 92.256786][ T1041] usb 2-1: SerialNumber: syz [ 92.287141][ T2748] overlay: Unknown parameter 'P_0؍syzkaller1' [ 92.474028][ T1041] usb 2-1: Can't get UAC3 power state for id 10 [ 92.483903][ T1041] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 92.499271][ T1041] usb 2-1: USB disconnect, device number 35 [ 92.640475][ T2760] netlink: 'syz.2.887': attribute type 4 has an invalid length. [ 93.046076][ T36] audit: type=1400 audit(1783292043.730:325): avc: denied { accept } for pid=2773 comm="syz.2.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 93.122752][ T2781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.133187][ T2781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.141464][ T2772] FAULT_INJECTION: forcing a failure. [ 93.141464][ T2772] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 93.154660][ T2772] CPU: 1 UID: 0 PID: 2772 Comm: syz.1.892 Not tainted syzkaller #0 3a44bb4c5afb37201027c4f56c4312533634f50d [ 93.154692][ T2772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 93.154704][ T2772] Call Trace: [ 93.154711][ T2772] [ 93.154720][ T2772] __dump_stack+0x21/0x30 [ 93.154756][ T2772] dump_stack_lvl+0x140/0x1c0 [ 93.154787][ T2772] ? __cfi_dump_stack_lvl+0x10/0x10 [ 93.154814][ T2772] ? check_stack_object+0x138/0x150 [ 93.154836][ T2772] dump_stack+0x19/0x20 [ 93.154861][ T2772] should_fail_ex+0x3c2/0x510 [ 93.154885][ T2772] should_fail+0xf/0x20 [ 93.154905][ T2772] should_fail_usercopy+0x1e/0x30 [ 93.154930][ T2772] _copy_to_user+0x24/0xa0 [ 93.154967][ T2772] simple_read_from_buffer+0xed/0x160 [ 93.154994][ T2772] proc_fail_nth_read+0x1aa/0x220 [ 93.155023][ T2772] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 93.155051][ T2772] ? bpf_lsm_file_permission+0xd/0x20 [ 93.155076][ T2772] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 93.155103][ T2772] vfs_read+0x28b/0xc70 [ 93.155126][ T2772] ? __cfi_vfs_read+0x10/0x10 [ 93.155146][ T2772] ? __kasan_check_write+0x18/0x20 [ 93.155168][ T2772] ? mutex_lock+0x97/0x1d0 [ 93.155195][ T2772] ? __cfi_mutex_lock+0x10/0x10 [ 93.155226][ T2772] ksys_read+0x145/0x260 [ 93.155247][ T2772] ? __cfi_ksys_read+0x10/0x10 [ 93.155268][ T2772] ? __kasan_check_read+0x15/0x20 [ 93.155288][ T2772] __x64_sys_read+0x7f/0x90 [ 93.155307][ T2772] x64_sys_call+0x2638/0x2ee0 [ 93.155326][ T2772] do_syscall_64+0x57/0xf0 [ 93.155346][ T2772] ? clear_bhb_loop+0x50/0xa0 [ 93.155373][ T2772] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 93.155397][ T2772] RIP: 0033:0x7f4d6e95e68e [ 93.155415][ T2772] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 93.155433][ T2772] RSP: 002b:00007f4d6f8bdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 93.155454][ T2772] RAX: ffffffffffffffda RBX: 00007f4d6f8be6c0 RCX: 00007f4d6e95e68e [ 93.155469][ T2772] RDX: 000000000000000f RSI: 00007f4d6f8be0a0 RDI: 0000000000000005 [ 93.155483][ T2772] RBP: 00007f4d6f8be090 R08: 0000000000000000 R09: 0000000000000000 [ 93.155496][ T2772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.155508][ T2772] R13: 00007f4d6ec26038 R14: 00007f4d6ec25fa0 R15: 00007fff849c08f8 [ 93.155527][ T2772] [ 93.456823][ T36] audit: type=1400 audit(1783292044.140:326): avc: denied { create } for pid=2784 comm="syz.1.898" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 93.557167][ T2786] SELinux: Context system_u:object_r:mnt_t:s0 is not valid (left unmapped). [ 93.612289][ T36] audit: type=1400 audit(1783292044.290:327): avc: denied { relabelto } for pid=2784 comm="syz.1.898" name="file0" dev="tmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:mnt_t:s0" [ 93.663421][ T36] audit: type=1400 audit(1783292044.290:328): avc: denied { associate } for pid=2784 comm="syz.1.898" name="file0" dev="tmpfs" ino=931 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:mnt_t:s0" [ 93.690133][ T36] audit: type=1400 audit(1783292044.320:329): avc: denied { bind } for pid=2789 comm="syz.3.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.712719][ T36] audit: type=1400 audit(1783292044.320:330): avc: denied { name_bind } for pid=2789 comm="syz.3.900" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 93.737948][ T36] audit: type=1400 audit(1783292044.320:331): avc: denied { node_bind } for pid=2789 comm="syz.3.900" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 93.775479][ T36] audit: type=1400 audit(1783292044.440:332): avc: denied { unlink } for pid=295 comm="syz-executor" name="file0" dev="tmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 93.886331][ T36] audit: type=1400 audit(1783292044.560:333): avc: denied { block_suspend } for pid=2793 comm="syz.1.901" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 93.941473][ T36] audit: type=1326 audit(1783292044.620:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2806 comm="syz.2.906" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377b39de59 code=0x50000 [ 94.914367][ T1041] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 95.078477][ T1041] usb 2-1: Using ep0 maxpacket: 8 [ 95.097111][ T1041] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.128587][ T1041] usb 2-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 95.159822][ T1041] usb 2-1: config 0 interface 0 has no altsetting 0 [ 95.179750][ T1041] usb 2-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 95.199215][ T1041] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.225804][ T1041] usb 2-1: config 0 descriptor?? [ 95.386126][ T2838] netlink: 44 bytes leftover after parsing attributes in process `syz.3.916'. [ 95.400035][ T2838] netlink: 43 bytes leftover after parsing attributes in process `syz.3.916'. [ 95.414461][ T2838] netlink: 'syz.3.916': attribute type 6 has an invalid length. [ 95.427761][ T2838] netlink: 'syz.3.916': attribute type 5 has an invalid length. [ 95.445185][ T2838] netlink: 43 bytes leftover after parsing attributes in process `syz.3.916'. [ 95.448264][ T2823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.465331][ T2823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.879339][ T2846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.893575][ T2846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.909104][ T2823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.922275][ T2823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.944588][ T1041] usbhid 2-1:0.0: can't add hid device: -71 [ 95.963574][ T1041] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 95.989404][ T1041] usb 2-1: USB disconnect, device number 36 [ 96.061607][ T2860] netlink: 'syz.3.927': attribute type 4 has an invalid length. [ 96.424392][ T1041] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 96.472828][ T2873] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 96.480890][ T2873] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 96.489073][ T2873] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 96.497918][ T2874] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 96.537741][ T2877] can0: slcan on ptm0. [ 96.572959][ T2877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.932'. [ 96.604405][ T1041] usb 2-1: Using ep0 maxpacket: 16 [ 96.611160][ T1041] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 96.626718][ T1041] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.644141][ T1041] usb 2-1: config 0 descriptor?? [ 96.660893][ T1041] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 96.704756][ T2875] can0 (unregistered): slcan off ptm0. [ 96.788059][ T2889] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 96.861077][ T1041] usb 2-1: Detected FT232A [ 96.875198][ T1041] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 97.027824][ T2918] netlink: 'syz.2.938': attribute type 4 has an invalid length. [ 97.034583][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 97.355882][ T9] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 97.364517][ T9] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 97.373672][ T9] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 97.385844][ T9] usb 4-1: config 220 has no interface number 2 [ 97.392235][ T9] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 97.406941][ T9] usb 4-1: config 220 interface 0 has no altsetting 0 [ 97.413851][ T9] usb 4-1: config 220 interface 76 has no altsetting 0 [ 97.420929][ T9] usb 4-1: config 220 interface 1 has no altsetting 0 [ 97.430012][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 97.439438][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.447778][ T9] usb 4-1: Product: syz [ 97.452355][ T9] usb 4-1: Manufacturer: syz [ 97.457349][ T9] usb 4-1: SerialNumber: syz [ 97.563569][ T2939] netlink: 'syz.2.947': attribute type 4 has an invalid length. [ 97.674429][ T9] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 97.693365][ T9] usb 4-1: No valid video chain found. [ 97.705351][ T9] usb 4-1: selecting invalid altsetting 0 [ 97.727339][ T9] usb 4-1: USB disconnect, device number 41 [ 97.858899][ T2942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.867507][ T2942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.495681][ T2961] kvm: kvm [2960]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 98.652190][ T2966] netlink: 'syz.2.957': attribute type 4 has an invalid length. [ 98.874592][ T2975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2975 comm=syz.0.960 [ 98.921604][ T36] kauditd_printk_skb: 18648 callbacks suppressed [ 98.921625][ T36] audit: type=1400 audit(1783292049.600:18983): avc: denied { mount } for pid=2977 comm="syz.0.962" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 98.955673][ T2980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.964311][ T2980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.980088][ T2980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.991253][ T2980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.000714][ T2980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.011350][ T2980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.032710][ T9] usb 2-1: USB disconnect, device number 37 [ 99.040063][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 99.049714][ T9] ftdi_sio 2-1:0.0: device disconnected [ 99.424432][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 99.485998][ T3003] netlink: 'syz.0.971': attribute type 4 has an invalid length. [ 99.574896][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 99.581293][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.592364][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.605725][ T36] audit: type=1400 audit(1783292050.290:18984): avc: denied { bind } for pid=3012 comm="syz.0.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 99.608876][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 99.641866][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.656743][ T9] usb 2-1: config 0 descriptor?? [ 99.672232][ T9] hub 2-1:0.0: USB hub found [ 99.718940][ T3026] netlink: 'syz.0.981': attribute type 4 has an invalid length. [ 99.721208][ T3028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.735970][ T3028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.872390][ T9] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 99.893021][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 99.903366][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 99.937221][ T9] usb 2-1: USB disconnect, device number 38 [ 100.490300][ T3046] overlay: Bad value for 'index' [ 100.587351][ T3059] netlink: 'syz.1.991': attribute type 4 has an invalid length. [ 101.054416][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 101.204390][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 101.210859][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 176, changing to 7 [ 101.223528][ T9] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 101.232714][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.240770][ T9] usb 2-1: Product: syz [ 101.245026][ T9] usb 2-1: Manufacturer: syz [ 101.249635][ T9] usb 2-1: SerialNumber: syz [ 101.465259][ T9] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 101.477024][ T9] usb 2-1: unit 6: unexpected type 0x03 [ 101.484052][ T9] usb 2-1: unit 12 not found! [ 101.489472][ T9] usb 2-1: unit 4 not found! [ 101.494114][ T9] usb 2-1: unit 8 not found! [ 101.502854][ T9] usb 2-1: unit 1 not found! [ 101.507536][ T9] usb 2-1: unit 9 not found! [ 101.531191][ T9] usb 2-1: USB disconnect, device number 39 [ 101.556558][ T369] udevd[369]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 102.009297][ T36] audit: type=1400 audit(1783292052.690:18985): avc: denied { execute } for pid=3085 comm="syz.3.998" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 102.131898][ T3093] netlink: 'syz.1.1000': attribute type 4 has an invalid length. [ 102.171006][ T36] audit: type=1400 audit(1783292052.850:18986): avc: denied { listen } for pid=3094 comm="syz.0.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.197554][ T3099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.249528][ T3099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.482074][ T393] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 102.592055][ T3130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1012'. [ 102.614416][ T393] usb 4-1: device descriptor read/64, error -71 [ 102.632951][ T3134] netlink: 'syz.0.1014': attribute type 4 has an invalid length. [ 102.641131][ T3134] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1014'. [ 102.688953][ T3140] netlink: 'syz.0.1017': attribute type 4 has an invalid length. [ 102.741985][ T3142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.750823][ T3142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.760404][ T3142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.769021][ T3142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.854390][ T393] usb 4-1: device descriptor read/64, error -71 [ 102.904047][ T3159] fuse: Unknown parameter '3%siFI\\/V}g|Sa˴`r+]'e+$W*'g";JyKM/Ϳq'JZh*"VW&xFqxk^?&-OS]]UW^0;/*<6h(šHU2(QtDnSѾ}Oe0x0000000000000003' [ 103.054375][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 103.094375][ T393] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 103.204379][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 103.210789][ T9] usb 2-1: config 32 has an invalid interface number: 64 but max is 0 [ 103.219135][ T9] usb 2-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 103.229600][ T393] usb 4-1: device descriptor read/64, error -71 [ 103.236130][ T9] usb 2-1: config 32 has no interface number 0 [ 103.242443][ T9] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 103.251614][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.263063][ T9] usb 2-1: Found UVC 0.00 device (0bd3:0569) [ 103.271409][ T9] usb 2-1: No valid video chain found. [ 103.298065][ T3171] netlink: 'syz.0.1027': attribute type 4 has an invalid length. [ 103.371871][ T3176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.380580][ T3176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.462862][ T11] usb 2-1: USB disconnect, device number 40 [ 103.494442][ T393] usb 4-1: device descriptor read/64, error -71 [ 103.604499][ T393] usb usb4-port1: attempt power cycle [ 103.923762][ T3186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.932364][ T3186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.944406][ T393] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 103.965534][ T393] usb 4-1: device descriptor read/8, error -71 [ 104.095478][ T393] usb 4-1: device descriptor read/8, error -71 [ 104.103331][ T3191] netlink: 'syz.1.1036': attribute type 4 has an invalid length. [ 104.334422][ T393] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 104.349421][ T3199] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=3199 comm=syz.1.1038 [ 104.363115][ T393] usb 4-1: device descriptor read/8, error -71 [ 104.380646][ T3203] incfs: mount failed -22 [ 104.385314][ T3203] incfs: mount failed -22 [ 104.407280][ T36] audit: type=1400 audit(1783292055.090:18987): avc: denied { append } for pid=3206 comm="syz.1.1040" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 104.431717][ T3207] loop7: detected capacity change from 0 to 7 [ 104.438228][ C0] blk_print_req_error: 1 callbacks suppressed [ 104.438246][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.453536][ C0] buffer_io_error: 1 callbacks suppressed [ 104.453556][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.467675][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.476891][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.485067][ T3207] loop7: unable to read partition table [ 104.491091][ T3207] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 104.505027][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.514250][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.522961][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.523665][ T393] usb 4-1: device descriptor read/8, error -71 [ 104.532163][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.532320][ T369] loop7: unable to read partition table [ 104.561697][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.570936][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.581620][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.590947][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.599299][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.608550][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.617010][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.626219][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.634657][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.643874][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.663659][ T3220] netlink: 'syz.2.1045': attribute type 4 has an invalid length. [ 104.664785][ T393] usb usb4-port1: unable to enumerate USB device [ 105.143685][ T3243] rust_binder: Write failure EINVAL in pid:514 [ 105.157598][ T3245] netlink: 'syz.1.1056': attribute type 4 has an invalid length. [ 105.274275][ T3252] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 105.274377][ T3252] rust_binder: 3249:3252 transaction to 3249 failed: BR_DEAD_REPLY [ 105.282404][ T36] audit: type=1400 audit(1783292055.950:18988): avc: denied { call } for pid=3249 comm="syz.3.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 105.292581][ T3252] 9pnet_fd: Insufficient options for proto=fd [ 105.457317][ T3259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.467023][ T3259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.784417][ T361] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 105.935749][ T361] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.945979][ T361] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 105.954913][ T361] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 105.967878][ T361] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 105.977091][ T361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.993374][ T361] hub 2-1:1.0: bad descriptor, ignoring hub [ 106.004693][ T361] hub 2-1:1.0: probe with driver hub failed with error -5 [ 106.027314][ T3268] netlink: 'syz.2.1065': attribute type 61 has an invalid length. [ 106.063748][ T3272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.073274][ T3272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.083061][ T3272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.092314][ T3272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.117530][ T36] audit: type=1400 audit(1783292056.800:18989): avc: denied { read } for pid=3278 comm="syz.2.1069" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 106.150688][ T36] audit: type=1400 audit(1783292056.830:18990): avc: denied { open } for pid=3278 comm="syz.2.1069" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 106.181923][ T3284] netlink: 'syz.3.1071': attribute type 4 has an invalid length. [ 106.192405][ T36] audit: type=1400 audit(1783292056.870:18991): avc: denied { accept } for pid=3282 comm="syz.2.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.398919][ T3306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.415268][ T3306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.794433][ T393] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 106.945467][ T393] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 106.953557][ T393] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.963825][ T393] usb 4-1: config 0 has no interface number 0 [ 106.969958][ T393] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.980889][ T393] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.990691][ T393] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.003555][ T393] usb 4-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 107.012666][ T393] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.021838][ T393] usb 4-1: config 0 descriptor?? [ 107.129702][ T3319] loop7: detected capacity change from 0 to 7 [ 107.136297][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.145539][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 107.153581][ T3319] loop7: unable to read partition table [ 107.159475][ T3319] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 107.176280][ T3319] loop7: unable to read partition table [ 107.206395][ T3321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.215033][ T3321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.592420][ T36] audit: type=1400 audit(1783292058.270:18992): avc: denied { sqpoll } for pid=3322 comm="syz.0.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 107.646586][ T393] usbhid 4-1:0.1: can't add hid device: -71 [ 107.652614][ T393] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 107.667907][ T393] usb 4-1: USB disconnect, device number 46 [ 107.743394][ T36] audit: type=1400 audit(1783292058.420:18993): avc: denied { map } for pid=3331 comm="syz.0.1090" path="pipe:[23754]" dev="pipefs" ino=23754 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 107.791707][ T3336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.801258][ T3336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.323043][ T3345] overlayfs: failed to resolve './file2': -2 [ 108.704466][ T1041] usb 2-1: USB disconnect, device number 41 [ 108.789942][ T3371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.826769][ T3371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.906170][ T3374] Dead loop on virtual device ip6_vti0, fix it urgently! [ 108.914407][ T3375] futex_wake_op: syz.2.1105 tries to shift op by -1; fix this program [ 109.234379][ T11] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 109.394950][ T9] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 109.405268][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 109.422783][ T11] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 109.434334][ T11] usb 2-1: config 0 has no interface number 0 [ 109.440468][ T11] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 109.451029][ T11] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 109.462445][ T11] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 109.471682][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.479843][ T11] usb 2-1: Product: syz [ 109.484082][ T11] usb 2-1: Manufacturer: syz [ 109.489014][ T11] usb 2-1: SerialNumber: syz [ 109.494561][ T11] usb 2-1: config 0 descriptor?? [ 109.500172][ T3379] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 109.509135][ T3379] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 109.575455][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.604351][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 109.623435][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 109.638140][ T9] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 109.647431][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.658685][ T9] hub 4-1:1.0: bad descriptor, ignoring hub [ 109.667480][ T9] hub 4-1:1.0: probe with driver hub failed with error -5 [ 109.718007][ T3379] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 109.725451][ T3379] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 109.933345][ T11] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 110.344448][ T11] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 110.374481][ T11] asix 2-1:0.34: probe with driver asix failed with error -32 [ 110.736598][ T3392] netlink: 37 bytes leftover after parsing attributes in process `syz.0.1113'. [ 111.776037][ T36] audit: type=1400 audit(1783292062.460:18994): avc: denied { create } for pid=3396 comm="syz.0.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 111.828977][ T3403] netlink: 'syz.0.1118': attribute type 2 has an invalid length. [ 111.836878][ T36] audit: type=1400 audit(1783292062.520:18995): avc: denied { setopt } for pid=3404 comm="syz.2.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 111.844672][ T3403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'. [ 111.857381][ T36] audit: type=1400 audit(1783292062.520:18996): avc: denied { ioctl } for pid=3404 comm="syz.2.1119" path="socket:[23958]" dev="sockfs" ino=23958 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 111.921375][ T3412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1122'. [ 111.930673][ T3412] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1122'. [ 112.007383][ T11] usb 2-1: USB disconnect, device number 42 [ 112.069469][ T3426] 9pnet_fd: Insufficient options for proto=fd [ 112.093239][ T36] audit: type=1400 audit(1783292062.770:18997): avc: denied { map } for pid=3428 comm="syz.0.1130" path="socket:[24060]" dev="sockfs" ino=24060 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 112.274489][ T9] usb 4-1: USB disconnect, device number 47 [ 112.410944][ T3454] erofs: (device loop2): erofs_read_superblock: cannot find valid erofs superblock [ 112.434512][ T3460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.444640][ T3461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.445775][ T3460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.454804][ T3461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.461213][ T11] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 112.487447][ T3463] overlayfs: disabling nfs_export due to verity=require [ 112.494514][ T3463] overlayfs: missing 'lowerdir' [ 112.624395][ T11] usb 2-1: Using ep0 maxpacket: 32 [ 112.630769][ T11] usb 2-1: config 2 has an invalid interface number: 218 but max is 0 [ 112.639106][ T11] usb 2-1: config 2 has no interface number 0 [ 112.645282][ T11] usb 2-1: config 2 interface 218 has no altsetting 0 [ 112.653749][ T11] usb 2-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=64.96 [ 112.662914][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.670953][ T11] usb 2-1: Product: syz [ 112.675201][ T11] usb 2-1: Manufacturer: syz [ 112.679824][ T11] usb 2-1: SerialNumber: syz [ 112.744399][ T9] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 112.887030][ T11] ums-freecom 2-1:2.218: USB Mass Storage device detected [ 112.896415][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.907096][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 112.917766][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.931020][ T9] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 112.940485][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.958177][ T9] hub 4-1:1.0: bad descriptor, ignoring hub [ 112.966354][ T9] hub 4-1:1.0: probe with driver hub failed with error -5 [ 112.974931][ T11] usb 2-1: USB disconnect, device number 43 [ 112.989685][ T3469] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=3469 comm=syz.0.1142 [ 113.005951][ T3469] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3469 comm=syz.0.1142 [ 113.099132][ T36] audit: type=1400 audit(1783292063.780:18998): avc: denied { create } for pid=3482 comm="syz.2.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 113.168393][ T3487] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=700413336 (1400826672 ns) > initial count (207118496 ns). Using initial count to start timer. [ 113.247011][ T3502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.255562][ T3503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.256787][ T3502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.266236][ T3503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.837799][ T36] audit: type=1400 audit(1783292064.520:18999): avc: denied { bind } for pid=3513 comm="syz.2.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 113.839688][ T3515] batadv_slave_1: entered promiscuous mode [ 113.869848][ T3515] batadv_slave_1: left promiscuous mode [ 113.884184][ T3519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.892921][ T3519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.934392][ T3529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.942953][ T3530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.943466][ T3529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.951981][ T3530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.967629][ T36] audit: type=1400 audit(1783292064.650:19001): avc: denied { lock } for pid=3528 comm="syz.2.1161" path="socket:[24315]" dev="sockfs" ino=24315 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 113.990980][ T36] audit: type=1400 audit(1783292064.650:19000): avc: denied { lock } for pid=3528 comm="syz.2.1161" path="socket:[24315]" dev="sockfs" ino=24315 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 115.115532][ T3549] tipc: Failed to remove unknown binding: 66,0,0/0:737397975/737397977 [ 115.123979][ T3549] tipc: Failed to remove unknown binding: 66,0,0/0:737397975/737397976 [ 115.132761][ T3549] tipc: Failed to remove unknown binding: 66,0,0/0:737397975/737397977 [ 115.141181][ T3549] tipc: Failed to remove unknown binding: 66,0,0/0:737397975/737397976 [ 115.484406][ T45] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 115.624477][ T11] usb 4-1: USB disconnect, device number 48 [ 115.634378][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 115.640715][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.651850][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.665374][ T45] usb 2-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 115.674527][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.683542][ T45] usb 2-1: config 0 descriptor?? [ 116.291787][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 116.300266][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 116.311411][ T45] usb 2-1: USB disconnect, device number 44 [ 116.575366][ T36] audit: type=1400 audit(1783292067.260:19002): avc: denied { setattr } for pid=3581 comm="syz.3.1178" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 116.894372][ T9] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 116.944648][ T3595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.953277][ T3595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.044363][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 117.044370][ T45] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 117.058365][ T9] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 117.066658][ T9] usb 4-1: config 0 has no interface number 0 [ 117.072829][ T9] usb 4-1: config 0 interface 184 has no altsetting 0 [ 117.081020][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 117.090169][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.098529][ T9] usb 4-1: Product: syz [ 117.102760][ T9] usb 4-1: Manufacturer: syz [ 117.107447][ T9] usb 4-1: SerialNumber: syz [ 117.112912][ T9] usb 4-1: config 0 descriptor?? [ 117.118954][ T9] smsc75xx v1.0.0 [ 117.205526][ T45] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.218574][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 117.225431][ T45] usb 2-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00 [ 117.234586][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.243417][ T45] usb 2-1: config 0 descriptor?? [ 117.319913][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 117.330810][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 117.340555][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 117.350912][ T9] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 117.521060][ T9] usb 4-1: USB disconnect, device number 49 [ 117.661402][ T3593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.670086][ T3593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.201183][ T3604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.210587][ T3604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.933911][ T3609] af_packet: tpacket_rcv: packet too big, clamped from 64586 to 4294967272. macoff=96 [ 119.002198][ T3612] 9pnet_fd: Insufficient options for proto=fd [ 119.291745][ T36] audit: type=1400 audit(1783292069.970:19003): avc: denied { map } for pid=3613 comm="syz.1.1188" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 119.315132][ T36] audit: type=1400 audit(1783292069.990:19004): avc: denied { write } for pid=3613 comm="syz.1.1188" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 119.339001][ T36] audit: type=1400 audit(1783292069.990:19005): avc: denied { open } for pid=3613 comm="syz.1.1188" path="/224/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 119.364052][ T36] audit: type=1400 audit(1783292069.990:19006): avc: denied { ioctl } for pid=3613 comm="syz.1.1188" path="/224/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 119.932541][ T3629] fuse: Unknown parameter 'user_iܳM]W d' [ 120.003646][ T3637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.013450][ T3637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.147472][ T3646] 9pnet_fd: Insufficient options for proto=fd [ 120.181276][ T3650] fuse: Bad value for 'group_id' [ 120.186380][ T3650] fuse: Bad value for 'group_id' [ 120.233805][ T3656] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1203'. [ 120.238619][ T3652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.252202][ T3652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.514370][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 120.665855][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 120.674494][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.684800][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.695892][ T9] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 120.705148][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.713188][ T9] usb 4-1: Product: syz [ 120.717476][ T9] usb 4-1: Manufacturer: syz [ 120.722118][ T9] usb 4-1: SerialNumber: syz [ 120.729135][ T9] usb 4-1: selecting invalid altsetting 1 [ 120.735135][ T9] usb 4-1: unit 6 not found! [ 121.454408][ T3671] 9pnet_fd: Insufficient options for proto=fd [ 122.455230][ T45] usbhid 2-1:0.0: can't add hid device: -32 [ 122.461273][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 122.492130][ T3685] 9pnet_fd: Insufficient options for proto=fd [ 122.659500][ T3687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.668496][ T3687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.289997][ T36] audit: type=1326 audit(1783292073.970:19007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3703 comm="syz.2.1220" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f377b39de59 code=0x0 [ 123.333117][ T9] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 123.346157][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 123.355521][ T3715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.364048][ T3715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.372885][ T9] usb 4-1: USB disconnect, device number 50 [ 123.384112][ T369] udevd[369]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 123.664407][ T9] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 123.821108][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.831566][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 123.840908][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 123.853935][ T9] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 123.863047][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.873671][ T9] hub 4-1:1.0: bad descriptor, ignoring hub [ 123.885675][ T9] hub 4-1:1.0: probe with driver hub failed with error -5 [ 123.902159][ T36] audit: type=1400 audit(1783292074.580:19008): avc: denied { name_bind } for pid=3723 comm="syz.2.1227" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 123.923707][ T36] audit: type=1400 audit(1783292074.580:19009): avc: denied { node_bind } for pid=3723 comm="syz.2.1227" saddr=fe80::3d src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 124.020099][ T3730] 9pnet_fd: Insufficient options for proto=fd [ 124.165805][ T36] audit: type=1400 audit(1783292074.850:19010): avc: denied { create } for pid=3732 comm="syz.1.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 124.206039][ T3736] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1231'. [ 124.216256][ T36] audit: type=1400 audit(1783292074.900:19011): avc: denied { write } for pid=3735 comm="syz.1.1231" name="file2" dev="tmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 124.243203][ T36] audit: type=1400 audit(1783292074.900:19012): avc: denied { open } for pid=3735 comm="syz.1.1231" path="/234/file2" dev="tmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 124.278136][ T3736] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1231'. [ 124.301387][ T3738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.310719][ T3738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.320516][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 124.320532][ T36] audit: type=1400 audit(1783292075.010:19014): avc: denied { cmd } for pid=3737 comm="syz.1.1232" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 124.960820][ T3760] IPv4: Oversized IP packet from 127.0.0.1 [ 124.966818][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 124.985977][ T3762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.994926][ T3762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.003447][ T3763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.013489][ T3763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.455339][ T3766] 9pnet_fd: Insufficient options for proto=fd [ 125.546653][ T3774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.555294][ T3774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.571372][ T3774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.580387][ T3774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.819546][ T3777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.828250][ T3777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.045403][ T3784] incfs: Error accessing: ./file0. [ 126.050599][ T3784] incfs: mount failed -20 [ 126.118739][ T3788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.127268][ T3789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.128681][ T3788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.137757][ T3789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.411221][ T3796] 9pnet_fd: Insufficient options for proto=fd [ 126.734945][ T9] usb 4-1: USB disconnect, device number 51 [ 127.024394][ T9] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 127.174367][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 127.180941][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.193989][ T9] usb 4-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 127.203379][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.213651][ T9] usb 4-1: config 0 descriptor?? [ 127.243712][ T3804] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1256'. [ 127.296567][ T3809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.308592][ T3809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.332303][ T3814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.340987][ T3814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.625260][ T3793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=3793 comm=syz.3.1251 [ 127.637841][ T3793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=3793 comm=syz.3.1251 [ 127.651648][ T9] hid (null): global environment stack underflow [ 127.660023][ T9] sony 0003:1430:474C.000B: unknown main item tag 0x4 [ 127.667365][ T9] sony 0003:1430:474C.000B: global environment stack underflow [ 127.675044][ T9] sony 0003:1430:474C.000B: item 0 2 1 11 parsing failed [ 127.682277][ T9] sony 0003:1430:474C.000B: parse failed [ 127.688022][ T9] sony 0003:1430:474C.000B: probe with driver sony failed with error -22 [ 127.853256][ T9] usb 4-1: USB disconnect, device number 52 [ 128.134517][ T36] audit: type=1400 audit(1783292078.820:19015): avc: denied { write } for pid=3818 comm="syz.0.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 128.634404][ T1949] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 128.784390][ T1949] usb 4-1: Using ep0 maxpacket: 32 [ 128.790944][ T1949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.802001][ T1949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.811919][ T1949] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 128.821123][ T1949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.835271][ T1949] usb 4-1: config 0 descriptor?? [ 128.845302][ T1949] hub 4-1:0.0: USB hub found [ 129.046542][ T1949] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 129.206387][ T36] audit: type=1400 audit(1783292079.890:19016): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 129.304218][ T3846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.313735][ T3846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.449216][ T1949] hid-generic 0003:046D:C31C.000C: unknown main item tag 0x0 [ 129.460003][ T1949] hid-generic 0003:046D:C31C.000C: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 129.804488][ T11] usb 4-1: USB disconnect, device number 53 [ 129.858381][ T36] audit: type=1400 audit(1783292080.540:19017): avc: denied { shutdown } for pid=3869 comm="syz.1.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.144384][ T11] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 130.294953][ T11] usb 4-1: Using ep0 maxpacket: 16 [ 130.301255][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.312256][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.322080][ T11] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 130.331225][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.341516][ T11] usb 4-1: config 0 descriptor?? [ 130.849838][ T3908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.858521][ T3908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.059075][ T11] konepure 0003:1E7D:2DB4.000D: unknown main item tag 0x0 [ 131.067028][ T11] konepure 0003:1E7D:2DB4.000D: unknown main item tag 0x0 [ 131.074343][ T11] konepure 0003:1E7D:2DB4.000D: unknown main item tag 0x0 [ 131.081633][ T11] konepure 0003:1E7D:2DB4.000D: unknown main item tag 0x0 [ 131.095461][ T11] konepure 0003:1E7D:2DB4.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.3-1/input0 [ 131.268628][ T11] usb 4-1: USB disconnect, device number 54 [ 131.363507][ T3915] overlayfs: failed to clone upperpath [ 131.618799][ T3919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.627464][ T3919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.034384][ T11] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 132.100145][ T3927] 9p: Unknown Cache mode or invalid value dev/kvm [ 132.185425][ T11] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.195739][ T11] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.206142][ T11] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 132.215318][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.224023][ T11] usb 4-1: Product: syz [ 132.228386][ T11] usb 4-1: Manufacturer: syz [ 132.233012][ T11] usb 4-1: SerialNumber: syz [ 132.279176][ T36] audit: type=1326 audit(1783292082.960:19018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.1.1301" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6e99de59 code=0x7fc00000 [ 132.304889][ T36] audit: type=1326 audit(1783292082.960:19019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.1.1301" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4d6e99de59 code=0x7fc00000 [ 132.330325][ T36] audit: type=1326 audit(1783292082.960:19020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.1.1301" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6e99de59 code=0x7fc00000 [ 132.356249][ T36] audit: type=1326 audit(1783292082.960:19021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.1.1301" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6e99de59 code=0x7fc00000 [ 132.381731][ T36] audit: type=1326 audit(1783292082.960:19022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.1.1301" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6e99de59 code=0x7fc00000 [ 132.407216][ T36] audit: type=1326 audit(1783292082.960:19023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.1.1301" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6e99de59 code=0x7fc00000 [ 132.432785][ T36] audit: type=1326 audit(1783292082.960:19024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.1.1301" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6e99de59 code=0x7fc00000 [ 132.459333][ T36] audit: type=1326 audit(1783292082.960:19025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.1.1301" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6e99de59 code=0x7fc00000 [ 132.485058][ T36] audit: type=1326 audit(1783292082.960:19026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.1.1301" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6e99de59 code=0x7fc00000 [ 132.486932][ T11] usb 4-1: unit 4 not found! [ 132.519725][ T11] usb 4-1: USB disconnect, device number 55 [ 132.532923][ T369] udevd[369]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 132.611238][ T3942] syzkaller1: entered promiscuous mode [ 132.616829][ T3942] syzkaller1: entered allmulticast mode [ 132.666188][ T3949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.675104][ T3949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.993502][ T3958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1310'. [ 133.324362][ T11] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 133.474365][ T11] usb 4-1: Using ep0 maxpacket: 16 [ 133.480908][ T11] usb 4-1: config 0 has an invalid descriptor of length 169, skipping remainder of the config [ 133.491436][ T11] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 133.500900][ T11] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 133.510630][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.520089][ T11] usb 4-1: config 0 descriptor?? [ 134.276082][ T4011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.285817][ T4011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.297608][ T4011] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1330'. [ 134.307222][ T4011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1330'. [ 134.322225][ T4011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1330'. [ 134.714200][ T4031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=83 sclass=netlink_route_socket pid=4031 comm=syz.0.1337 [ 134.809417][ T4035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.818115][ T4035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.258610][ T4041] overlayfs: failed to clone lowerpath [ 135.410259][ T36] kauditd_printk_skb: 67 callbacks suppressed [ 135.410279][ T36] audit: type=1400 audit(1783292086.090:19094): avc: denied { write } for pid=4048 comm="syz.2.1345" name="usbmon1" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 135.511446][ T4055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.520633][ T4055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.659750][ T4067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.668517][ T4067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.797975][ T4069] overlayfs: failed to clone upperpath [ 136.098870][ T11] usb 4-1: USB disconnect, device number 56 [ 136.112917][ T4073] 9pnet_fd: Insufficient options for proto=fd [ 136.114437][ T36] audit: type=1400 audit(1783292086.790:19095): avc: denied { mounton } for pid=4072 comm="syz.3.1353" path="/213/file0" dev="tmpfs" ino=1144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 136.169187][ T4079] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1355'. [ 136.236276][ T4084] Restarting kernel threads ... done. [ 136.238975][ T36] audit: type=1400 audit(1783292086.920:19096): avc: denied { ioctl } for pid=4083 comm="syz.3.1357" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 136.245407][ T4082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.276338][ T4082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.365423][ T36] audit: type=1400 audit(1783292087.050:19097): avc: denied { create } for pid=4085 comm="syz.3.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 136.411252][ T36] audit: type=1400 audit(1783292087.090:19098): avc: denied { create } for pid=4092 comm="syz.0.1360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 136.453046][ T4097] 9pnet_fd: Insufficient options for proto=fd [ 136.458032][ T4099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1363'. [ 136.640754][ T4104] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.647874][ T4104] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.655046][ T4104] bridge_slave_0: entered allmulticast mode [ 136.661406][ T4104] bridge_slave_0: entered promiscuous mode [ 136.667972][ T4104] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.675104][ T4104] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.682310][ T4104] bridge_slave_1: entered allmulticast mode [ 136.688840][ T4104] bridge_slave_1: entered promiscuous mode [ 136.698133][ T773] bridge_slave_1: left allmulticast mode [ 136.703807][ T773] bridge_slave_1: left promiscuous mode [ 136.709540][ T773] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.717270][ T773] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.818389][ T773] veth1_macvtap: left promiscuous mode [ 136.823991][ T773] veth0_vlan: left promiscuous mode [ 136.881017][ T4111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.882285][ T4104] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.896498][ T4104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.898806][ T4111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.903987][ T4104] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.918625][ T4104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.942731][ T655] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.950171][ T655] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.960120][ T657] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.967232][ T657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.976801][ T657] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.983913][ T657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.009566][ T4104] veth0_vlan: entered promiscuous mode [ 137.021641][ T4104] veth1_macvtap: entered promiscuous mode [ 137.042461][ T36] audit: type=1400 audit(1783292087.720:19099): avc: denied { mounton } for pid=4104 comm="syz-executor" path="/root/syzkaller.gf64vF/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 137.140944][ T4118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.149772][ T4118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.324455][ T11] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 137.429707][ T4120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.438457][ T4120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.475555][ T11] usb 1-1: too many endpoints for config 0 interface 0 altsetting 251: 225, using maximum allowed: 30 [ 137.486640][ T11] usb 1-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 225 [ 137.499889][ T11] usb 1-1: config 0 interface 0 has no altsetting 0 [ 137.506653][ T11] usb 1-1: New USB device found, idVendor=046d, idProduct=c30a, bcdDevice= 0.00 [ 137.515969][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.524916][ T11] usb 1-1: config 0 descriptor?? [ 137.745863][ T11] usbhid 1-1:0.0: can't add hid device: -71 [ 137.764459][ T11] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 137.775006][ T11] usb 1-1: USB disconnect, device number 5 [ 137.855611][ T4130] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 137.958385][ T4133] netlink: 'syz.1.1374': attribute type 4 has an invalid length. [ 137.973919][ T4135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1375'. [ 138.006474][ T4137] FAULT_INJECTION: forcing a failure. [ 138.006474][ T4137] name failslab, interval 1, probability 0, space 0, times 0 [ 138.024017][ T4137] CPU: 0 UID: 0 PID: 4137 Comm: syz.1.1376 Not tainted syzkaller #0 3a44bb4c5afb37201027c4f56c4312533634f50d [ 138.024050][ T4137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 138.024063][ T4137] Call Trace: [ 138.024070][ T4137] [ 138.024079][ T4137] __dump_stack+0x21/0x30 [ 138.024114][ T4137] dump_stack_lvl+0x140/0x1c0 [ 138.024142][ T4137] ? __cfi_dump_stack_lvl+0x10/0x10 [ 138.024171][ T4137] ? avc_has_extended_perms+0x94b/0xe60 [ 138.024195][ T4137] dump_stack+0x19/0x20 [ 138.024220][ T4137] should_fail_ex+0x3c2/0x510 [ 138.024242][ T4137] ? bitmap_alloc+0x37/0xc0 [ 138.024262][ T4137] should_failslab+0xac/0x100 [ 138.024290][ T4137] __kmalloc_noprof+0x69/0x510 [ 138.024309][ T4137] ? bitmap_alloc+0x37/0xc0 [ 138.024330][ T4137] bitmap_alloc+0x37/0xc0 [ 138.024349][ T4137] evdev_handle_get_val+0x3f/0xa30 [ 138.024369][ T4137] ? __cfi_mutex_lock_interruptible+0x10/0x10 [ 138.024400][ T4137] evdev_ioctl_handler+0x11c6/0x1ee0 [ 138.024420][ T4137] ? proc_fail_nth_write+0x184/0x220 [ 138.024455][ T4137] ? evdev_fasync+0x70/0x70 [ 138.024473][ T4137] ? selinux_file_ioctl+0x732/0x1480 [ 138.024503][ T4137] ? vfs_write+0xbcf/0xfd0 [ 138.024524][ T4137] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 138.024558][ T4137] ? __cfi_vfs_write+0x10/0x10 [ 138.024580][ T4137] ? __kasan_check_write+0x18/0x20 [ 138.024601][ T4137] ? mutex_unlock+0x90/0x240 [ 138.024631][ T4137] evdev_ioctl+0x2b/0x40 [ 138.024649][ T4137] ? __cfi_evdev_ioctl+0x10/0x10 [ 138.024680][ T4137] __se_sys_ioctl+0x132/0x1b0 [ 138.024705][ T4137] __x64_sys_ioctl+0x7f/0xa0 [ 138.024730][ T4137] x64_sys_call+0x1878/0x2ee0 [ 138.024748][ T4137] do_syscall_64+0x57/0xf0 [ 138.024769][ T4137] ? clear_bhb_loop+0x50/0xa0 [ 138.024796][ T4137] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 138.024821][ T4137] RIP: 0033:0x7f4d6e99de59 [ 138.024840][ T4137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.024859][ T4137] RSP: 002b:00007f4d6f8be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.024881][ T4137] RAX: ffffffffffffffda RBX: 00007f4d6ec25fa0 RCX: 00007f4d6e99de59 [ 138.024897][ T4137] RDX: 0000200000000180 RSI: 000000008040451b RDI: 0000000000000003 [ 138.024911][ T4137] RBP: 00007f4d6f8be090 R08: 0000000000000000 R09: 0000000000000000 [ 138.024923][ T4137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.024945][ T4137] R13: 00007f4d6ec26038 R14: 00007f4d6ec25fa0 R15: 00007fff849c08f8 [ 138.024963][ T4137] [ 138.301381][ T4150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.310191][ T4150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.319932][ T4150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.329182][ T4150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.351195][ T4153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.359766][ T4153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.404415][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 138.534455][ T9] usb 1-1: device descriptor read/64, error -71 [ 138.774388][ T9] usb 1-1: device descriptor read/64, error -71 [ 138.894884][ T4159] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 138.904642][ T4159] overlayfs: failed to set uuid (280/file2, err=-13); falling back to uuid=null. [ 138.942336][ T4162] tmpfs: Bad value for 'nr_inodes' [ 139.018309][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 139.109485][ T4180] FAULT_INJECTION: forcing a failure. [ 139.109485][ T4180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.122816][ T4180] CPU: 0 UID: 0 PID: 4180 Comm: syz.1.1387 Not tainted syzkaller #0 3a44bb4c5afb37201027c4f56c4312533634f50d [ 139.122849][ T4180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 139.122862][ T4180] Call Trace: [ 139.122869][ T4180] [ 139.122878][ T4180] __dump_stack+0x21/0x30 [ 139.122915][ T4180] dump_stack_lvl+0x140/0x1c0 [ 139.122945][ T4180] ? __cfi_dump_stack_lvl+0x10/0x10 [ 139.122981][ T4180] ? check_stack_object+0x81/0x150 [ 139.122998][ T4180] dump_stack+0x19/0x20 [ 139.123026][ T4180] should_fail_ex+0x3c2/0x510 [ 139.123044][ T4180] should_fail+0xf/0x20 [ 139.123059][ T4180] should_fail_usercopy+0x1e/0x30 [ 139.123077][ T4180] _copy_to_user+0x24/0xa0 [ 139.123099][ T4180] evdev_handle_get_val+0x530/0xa30 [ 139.123124][ T4180] evdev_ioctl_handler+0x11c6/0x1ee0 [ 139.123140][ T4180] ? proc_fail_nth_write+0x184/0x220 [ 139.123163][ T4180] ? evdev_fasync+0x70/0x70 [ 139.123177][ T4180] ? selinux_file_ioctl+0x732/0x1480 [ 139.123202][ T4180] ? vfs_write+0xbcf/0xfd0 [ 139.123217][ T4180] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 139.123242][ T4180] ? __cfi_vfs_write+0x10/0x10 [ 139.123258][ T4180] ? __kasan_check_write+0x18/0x20 [ 139.123273][ T4180] ? mutex_unlock+0x90/0x240 [ 139.123311][ T4180] evdev_ioctl+0x2b/0x40 [ 139.123324][ T4180] ? __cfi_evdev_ioctl+0x10/0x10 [ 139.123348][ T4180] __se_sys_ioctl+0x132/0x1b0 [ 139.123367][ T4180] __x64_sys_ioctl+0x7f/0xa0 [ 139.123385][ T4180] x64_sys_call+0x1878/0x2ee0 [ 139.123400][ T4180] do_syscall_64+0x57/0xf0 [ 139.123415][ T4180] ? clear_bhb_loop+0x50/0xa0 [ 139.123435][ T4180] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 139.123454][ T4180] RIP: 0033:0x7f4d6e99de59 [ 139.123468][ T4180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.123483][ T4180] RSP: 002b:00007f4d6f8be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 139.123500][ T4180] RAX: ffffffffffffffda RBX: 00007f4d6ec25fa0 RCX: 00007f4d6e99de59 [ 139.123515][ T4180] RDX: 0000200000000180 RSI: 000000008040451b RDI: 0000000000000003 [ 139.123525][ T4180] RBP: 00007f4d6f8be090 R08: 0000000000000000 R09: 0000000000000000 [ 139.123535][ T4180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.123545][ T4180] R13: 00007f4d6ec26038 R14: 00007f4d6ec25fa0 R15: 00007fff849c08f8 [ 139.123559][ T4180] [ 139.357755][ T9] usb 1-1: device descriptor read/64, error -71 [ 139.451253][ T45] usb 3-1: USB disconnect, device number 33 [ 139.488708][ T36] audit: type=1400 audit(1783292090.170:19100): avc: denied { read } for pid=4194 comm="syz.1.1392" path="socket:[30750]" dev="sockfs" ino=30750 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 139.502086][ T4197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.523502][ T4197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.595294][ T9] usb 1-1: device descriptor read/64, error -71 [ 139.663453][ T4209] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3566108399 (7132216798 ns) > initial count (1141895300 ns). Using initial count to start timer. [ 139.681284][ T4209] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1934411409 (61901165088 ns) > initial count (23120427456 ns). Using initial count to start timer. [ 139.706584][ T9] usb usb1-port1: attempt power cycle [ 139.773707][ T4215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.783193][ T4215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.792801][ T4215] netlink: 'syz.1.1400': attribute type 28 has an invalid length. [ 139.802368][ T4215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.811231][ T4215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.867646][ T4216] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.874829][ T4216] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.881916][ T4216] bridge_slave_0: entered allmulticast mode [ 139.888715][ T4216] bridge_slave_0: entered promiscuous mode [ 139.895242][ T4216] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.902555][ T4216] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.909714][ T4216] bridge_slave_1: entered allmulticast mode [ 139.916107][ T4216] bridge_slave_1: entered promiscuous mode [ 139.964473][ T4216] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.971583][ T4216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.978949][ T4216] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.986015][ T4216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.008557][ T773] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.016171][ T773] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.026215][ T640] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.033293][ T640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.043077][ T773] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.050170][ T773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.064790][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 140.082997][ T4216] veth0_vlan: entered promiscuous mode [ 140.095092][ T4216] veth1_macvtap: entered promiscuous mode [ 140.102726][ T9] usb 1-1: device descriptor read/8, error -71 [ 140.135163][ T4221] FAULT_INJECTION: forcing a failure. [ 140.135163][ T4221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.148463][ T4221] CPU: 1 UID: 0 PID: 4221 Comm: syz.4.1398 Not tainted syzkaller #0 3a44bb4c5afb37201027c4f56c4312533634f50d [ 140.148500][ T4221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 140.148514][ T4221] Call Trace: [ 140.148521][ T4221] [ 140.148530][ T4221] __dump_stack+0x21/0x30 [ 140.148568][ T4221] dump_stack_lvl+0x140/0x1c0 [ 140.148590][ T4221] ? __cfi_dump_stack_lvl+0x10/0x10 [ 140.148613][ T4221] ? check_stack_object+0x138/0x150 [ 140.148631][ T4221] dump_stack+0x19/0x20 [ 140.148652][ T4221] should_fail_ex+0x3c2/0x510 [ 140.148670][ T4221] should_fail+0xf/0x20 [ 140.148686][ T4221] should_fail_usercopy+0x1e/0x30 [ 140.148704][ T4221] _copy_to_user+0x24/0xa0 [ 140.148725][ T4221] simple_read_from_buffer+0xed/0x160 [ 140.148748][ T4221] proc_fail_nth_read+0x1aa/0x220 [ 140.148771][ T4221] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 140.148795][ T4221] ? bpf_lsm_file_permission+0xd/0x20 [ 140.148816][ T4221] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 140.148838][ T4221] vfs_read+0x28b/0xc70 [ 140.148853][ T4221] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 140.148879][ T4221] ? __cfi_vfs_read+0x10/0x10 [ 140.148894][ T4221] ? __kasan_check_write+0x18/0x20 [ 140.148909][ T4221] ? mutex_lock+0x97/0x1d0 [ 140.148936][ T4221] ? __cfi_mutex_lock+0x10/0x10 [ 140.148958][ T4221] ksys_read+0x145/0x260 [ 140.148973][ T4221] ? __cfi_ksys_read+0x10/0x10 [ 140.148990][ T4221] ? __kasan_check_read+0x15/0x20 [ 140.149005][ T4221] __x64_sys_read+0x7f/0x90 [ 140.149021][ T4221] x64_sys_call+0x2638/0x2ee0 [ 140.149036][ T4221] do_syscall_64+0x57/0xf0 [ 140.149052][ T4221] ? clear_bhb_loop+0x50/0xa0 [ 140.149072][ T4221] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 140.149091][ T4221] RIP: 0033:0x7ff72135e68e [ 140.149105][ T4221] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 140.149119][ T4221] RSP: 002b:00007ff722180fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 140.149136][ T4221] RAX: ffffffffffffffda RBX: 00007ff7221816c0 RCX: 00007ff72135e68e [ 140.149149][ T4221] RDX: 000000000000000f RSI: 00007ff7221810a0 RDI: 0000000000000004 [ 140.149159][ T4221] RBP: 00007ff722181090 R08: 0000000000000000 R09: 0000000000000000 [ 140.149169][ T4221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.149179][ T4221] R13: 00007ff721626038 R14: 00007ff721625fa0 R15: 00007ffdaf2e1ac8 [ 140.149193][ T4221] [ 140.286334][ T9] usb 1-1: device descriptor read/8, error -71 [ 140.427260][ T4225] incfs: Error accessing: ./file0. [ 140.432519][ T4225] incfs: mount failed -20 [ 140.434519][ T36] audit: type=1400 audit(1783292091.110:19101): avc: denied { mounton } for pid=4224 comm="syz.1.1402" path="/288/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 140.460571][ T36] audit: type=1400 audit(1783292091.120:19102): avc: denied { read } for pid=4224 comm="syz.1.1402" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 140.482230][ T36] audit: type=1400 audit(1783292091.120:19103): avc: denied { open } for pid=4224 comm="syz.1.1402" path="/288/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 140.584353][ T45] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 140.645093][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 140.675657][ T9] usb 1-1: device descriptor read/8, error -71 [ 140.745145][ T45] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.757680][ T45] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.767182][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.776077][ T45] usb 5-1: Product: syz [ 140.780345][ T45] usb 5-1: Manufacturer: syz [ 140.785461][ T45] usb 5-1: SerialNumber: syz [ 140.815425][ T9] usb 1-1: device descriptor read/8, error -71 [ 140.894373][ T393] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 140.932732][ T9] usb usb1-port1: unable to enumerate USB device [ 140.996949][ T4223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.005618][ T4223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.045342][ T393] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 141.057395][ T36] audit: type=1400 audit(1783292091.740:19104): avc: granted { setsecparam } for pid=4247 comm="syz.0.1411" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 141.060254][ T393] usb 4-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 141.079177][ T4248] 8021q: VLANs not supported on ip_vti0 [ 141.089572][ T393] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 141.101652][ T393] usb 4-1: config 1 has no interface number 1 [ 141.107818][ T393] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 141.120708][ T393] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 141.131500][ T393] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 141.140631][ T393] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.148893][ T393] usb 4-1: Product: syz [ 141.153089][ T393] usb 4-1: Manufacturer: syz [ 141.157801][ T393] usb 4-1: SerialNumber: syz [ 141.369956][ T393] usb 4-1: MIDIStreaming interface descriptor not found [ 141.383040][ T393] usb 4-1: USB disconnect, device number 57 [ 141.397601][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 141.787151][ T4258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.795812][ T4258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.817586][ T45] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 141.824072][ T45] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 141.832214][ T45] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 141.971372][ T36] audit: type=1400 audit(1783292092.650:19105): avc: denied { append } for pid=4266 comm="syz.3.1419" name="event2" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 142.018041][ T45] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 142.027570][ T45] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 142.047571][ T45] usb 5-1: USB disconnect, device number 2 [ 142.063469][ T45] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 142.204369][ T9] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 142.320775][ T4299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.330557][ T4299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.364334][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 142.378434][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.388644][ T9] usb 4-1: config 0 has no interfaces? [ 142.396459][ T9] usb 4-1: string descriptor 0 read error: -71 [ 142.408258][ T9] usb 4-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.40 [ 142.417458][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.425432][ T361] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 142.437040][ T9] usb 4-1: config 0 descriptor?? [ 142.443267][ T9] usb 4-1: can't set config #0, error -71 [ 142.452511][ T9] usb 4-1: USB disconnect, device number 58 [ 142.574396][ T361] usb 1-1: Using ep0 maxpacket: 16 [ 142.580828][ T361] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.592080][ T361] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.602061][ T361] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 142.611509][ T361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.620734][ T361] usb 1-1: config 0 descriptor?? [ 142.639894][ T4304] syzkaller1: entered promiscuous mode [ 142.645490][ T4304] syzkaller1: entered allmulticast mode [ 142.652496][ T4304] netlink: 'syz.4.1423': attribute type 27 has an invalid length. [ 142.826817][ T4282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.835572][ T4282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.843834][ T4282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.852478][ T4282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.860801][ T4282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.869733][ T4282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.877934][ T4282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.886515][ T4282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.894358][ T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 142.903357][ T4282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.913626][ T4282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.929508][ T361] usbhid 1-1:0.0: can't add hid device: -71 [ 142.938028][ T361] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 142.949286][ T361] usb 1-1: USB disconnect, device number 10 [ 143.057879][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 143.066020][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 143.073847][ T9] usb 5-1: no configurations [ 143.078841][ T9] usb 5-1: can't read configurations, error -22 [ 143.214357][ T9] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 143.375868][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 143.384030][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 143.391893][ T9] usb 5-1: no configurations [ 143.396604][ T9] usb 5-1: can't read configurations, error -22 [ 143.403046][ T9] usb usb5-port1: attempt power cycle [ 143.734368][ T361] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 143.754420][ T9] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 143.776192][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 143.784769][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 143.792594][ T9] usb 5-1: no configurations [ 143.797311][ T9] usb 5-1: can't read configurations, error -22 [ 143.884380][ T361] usb 1-1: Using ep0 maxpacket: 32 [ 143.891012][ T361] usb 1-1: unable to get BOS descriptor or descriptor too short [ 143.899511][ T361] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 143.910650][ T361] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 143.922080][ T361] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 143.931184][ T361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.934476][ T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 143.939275][ T361] usb 1-1: Product: syz [ 143.950972][ T361] usb 1-1: Manufacturer: syz [ 143.955621][ T361] usb 1-1: SerialNumber: syz [ 143.961272][ T4324] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 143.976383][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 143.984533][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 143.992570][ T9] usb 5-1: no configurations [ 143.999720][ T9] usb 5-1: can't read configurations, error -22 [ 144.006397][ T9] usb usb5-port1: unable to enumerate USB device [ 144.266909][ T4324] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1431'. [ 144.277147][ T4324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4324 comm=syz.0.1431 [ 144.304036][ T361] usb 1-1: MIDIStreaming interface descriptor not found [ 144.315051][ T361] usb 1-1: USB disconnect, device number 11 [ 144.330820][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 145.114377][ T361] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 145.264413][ T361] usb 1-1: Using ep0 maxpacket: 16 [ 145.270980][ T361] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 145.279284][ T361] usb 1-1: config 1 has no interface number 0 [ 145.285488][ T361] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 145.295864][ T361] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 145.305922][ T361] usb 1-1: config 1 interface 105 has no altsetting 0 [ 145.314198][ T361] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 145.323334][ T361] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 145.331480][ T361] usb 1-1: Product: syz [ 145.335974][ T361] usb 1-1: Manufacturer: syz [ 145.340612][ T361] usb 1-1: SerialNumber: syz [ 145.346453][ T4337] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 145.353776][ T4337] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 145.384453][ T4339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.393481][ T4339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.483369][ T36] audit: type=1400 audit(1783292096.160:19106): avc: denied { create } for pid=4349 comm="syz.3.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 145.507131][ T36] audit: type=1400 audit(1783292096.160:19107): avc: denied { write } for pid=4349 comm="syz.3.1439" path="socket:[31728]" dev="sockfs" ino=31728 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 145.531954][ T36] audit: type=1400 audit(1783292096.160:19108): avc: denied { read write } for pid=4349 comm="syz.3.1439" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 145.555798][ T36] audit: type=1400 audit(1783292096.160:19109): avc: denied { open } for pid=4349 comm="syz.3.1439" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 145.579952][ T36] audit: type=1400 audit(1783292096.160:19110): avc: denied { ioctl } for pid=4349 comm="syz.3.1439" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 145.713770][ T36] audit: type=1400 audit(1783292096.390:19111): avc: denied { nlmsg_read } for pid=4355 comm="syz.4.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 145.735094][ T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 145.767316][ T4337] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 145.775459][ T4337] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 145.884643][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 145.890932][ T9] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 145.903886][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 145.910599][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 145.919769][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.928792][ T9] usb 4-1: config 0 descriptor?? [ 145.983369][ T361] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 0 [ 145.994439][ T361] aqc111 1-1:1.105: probe with driver aqc111 failed with error -61 [ 146.014385][ T412] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 146.138225][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 146.144267][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 146.153116][ T9] usb 4-1: USB disconnect, device number 59 [ 146.165479][ T412] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 146.176496][ T412] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 146.188925][ T412] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 146.198130][ T412] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.206186][ T412] usb 5-1: Product: syz [ 146.210412][ T412] usb 5-1: Manufacturer: syz [ 146.215059][ T412] usb 5-1: SerialNumber: syz [ 146.423813][ T36] audit: type=1400 audit(1783292097.100:19112): avc: denied { read } for pid=4362 comm="syz.4.1443" path="socket:[31908]" dev="sockfs" ino=31908 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 146.539136][ T4365] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1435'. [ 146.568974][ T4367] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1444'. [ 146.592082][ T4369] SELinux: Context system_u:object_r:syslogd_initrc_exec_t:s0 is not valid (left unmapped). [ 146.592082][ T36] audit: type=1400 audit(1783292097.270:19113): avc: denied { relabelfrom } for pid=4368 comm="syz.1.1445" name="UNIX" dev="sockfs" ino=30518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 146.626449][ T36] audit: type=1400 audit(1783292097.310:19114): avc: denied { relabelto } for pid=4368 comm="syz.1.1445" name="UNIX" dev="sockfs" ino=30518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_dgram_socket permissive=1 trawcon="system_u:object_r:syslogd_initrc_exec_t:s0" [ 146.632859][ T4369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.664057][ T4369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.259221][ T45] usb 1-1: USB disconnect, device number 12 [ 147.624350][ T1949] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 147.775016][ T1949] usb 4-1: Using ep0 maxpacket: 8 [ 147.781907][ T1949] usb 4-1: unable to get BOS descriptor or descriptor too short [ 147.790432][ T1949] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 147.801869][ T1949] usb 4-1: New USB device found, idVendor=17cc, idProduct=0815, bcdDevice= 0.40 [ 147.811146][ T1949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.819263][ T1949] usb 4-1: Product: syz [ 147.823558][ T1949] usb 4-1: Manufacturer: syz [ 147.828259][ T1949] usb 4-1: SerialNumber: syz [ 147.834068][ T4386] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 148.045903][ T1949] usb 4-1: MIDIStreaming interface descriptor not found [ 148.058641][ T1949] usb 4-1: USB disconnect, device number 60 [ 148.070665][ T351] udevd[351]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 148.578489][ T36] audit: type=1400 audit(1783292099.260:19115): avc: denied { map } for pid=4391 comm="syz.3.1453" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 148.658234][ T4396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.666902][ T4396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.786682][ T412] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 148.800473][ T412] usb 5-1: USB disconnect, device number 7 [ 148.819361][ T369] udevd[369]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 148.835392][ T1949] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 148.899741][ T4403] 9pnet_fd: Insufficient options for proto=fd [ 148.984370][ T1949] usb 4-1: Using ep0 maxpacket: 8 [ 148.987022][ T4405] FAULT_INJECTION: forcing a failure. [ 148.987022][ T4405] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 149.002822][ T4405] CPU: 1 UID: 0 PID: 4405 Comm: syz.4.1458 Not tainted syzkaller #0 3a44bb4c5afb37201027c4f56c4312533634f50d [ 149.002857][ T4405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 149.002871][ T4405] Call Trace: [ 149.002879][ T4405] [ 149.002888][ T4405] __dump_stack+0x21/0x30 [ 149.002932][ T4405] dump_stack_lvl+0x140/0x1c0 [ 149.002977][ T4405] ? __cfi_dump_stack_lvl+0x10/0x10 [ 149.003008][ T4405] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 149.003045][ T4405] dump_stack+0x19/0x20 [ 149.003067][ T4405] should_fail_ex+0x3c2/0x510 [ 149.003085][ T4405] should_fail_alloc_page+0xec/0x110 [ 149.003125][ T4405] __alloc_pages_noprof+0x1c0/0x7e0 [ 149.003155][ T4405] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 149.003188][ T4405] ? __kasan_check_write+0x18/0x20 [ 149.003211][ T4405] __pmd_alloc+0xb0/0x9a0 [ 149.003230][ T4405] ? __cfi___pmd_alloc+0x10/0x10 [ 149.003268][ T4405] handle_mm_fault+0xd23/0x1ba0 [ 149.003297][ T4405] ? __cfi_handle_mm_fault+0x10/0x10 [ 149.003321][ T4405] ? find_vma+0xd3/0x120 [ 149.003348][ T4405] ? lock_mm_and_find_vma+0xb8/0x390 [ 149.003367][ T4405] do_user_addr_fault+0x4ee/0x1230 [ 149.003408][ T4405] exc_page_fault+0x58/0xc0 [ 149.003439][ T4405] asm_exc_page_fault+0x2b/0x30 [ 149.003464][ T4405] RIP: 0010:__put_user_4+0x11/0x30 [ 149.003486][ T4405] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 149.003509][ T4405] RSP: 0018:ffffc9000e9b74f8 EFLAGS: 00050202 [ 149.003524][ T4405] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000000040 [ 149.003535][ T4405] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.003545][ T4405] RBP: ffffc9000e9b7670 R08: 0000000000000003 R09: 0000000000000004 [ 149.003571][ T4405] R10: dffffc0000000000 R11: fffff52001d36e70 R12: 0000000000000000 [ 149.003587][ T4405] R13: ffffffff87e1f668 R14: dffffc0000000000 R15: 1ffff92001d36ea4 [ 149.003606][ T4405] ? sk_ioctl+0x3e2/0x6f0 [ 149.003631][ T4405] ? do_sys_openat2+0x134/0x1d0 [ 149.003663][ T4405] ? __x64_sys_openat+0x13a/0x170 [ 149.003685][ T4405] ? __cfi_sk_ioctl+0x10/0x10 [ 149.003718][ T4405] ? avc_has_perm_noaudit+0x26b/0x360 [ 149.003744][ T4405] ? __asan_memcpy+0x5a/0x80 [ 149.003765][ T4405] ? avc_has_perm_noaudit+0x289/0x360 [ 149.003790][ T4405] ieee802154_sock_ioctl+0x170/0x400 [ 149.003821][ T4405] ? __cfi_ieee802154_sock_ioctl+0x10/0x10 [ 149.003845][ T4405] sock_do_ioctl+0x118/0x330 [ 149.003882][ T4405] ? sock_show_fdinfo+0xd0/0xd0 [ 149.003909][ T4405] sock_ioctl+0x568/0x7e0 [ 149.003939][ T4405] ? __cfi_sock_ioctl+0x10/0x10 [ 149.003961][ T4405] ? is_bpf_text_address+0x17b/0x1a0 [ 149.003997][ T4405] ? kernel_text_address+0xa9/0xe0 [ 149.004038][ T4405] ? __kernel_text_address+0x11/0x40 [ 149.004067][ T4405] ? __cfi_sock_ioctl+0x10/0x10 [ 149.004090][ T4405] do_vfs_ioctl+0xf86/0x2010 [ 149.004118][ T4405] ? arch_stack_walk+0x10a/0x170 [ 149.004136][ T4405] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 149.004157][ T4405] ? _parse_integer_limit+0x195/0x1e0 [ 149.004195][ T4405] ? _parse_integer+0x2e/0x40 [ 149.004216][ T4405] ? kstrtoull+0x13b/0x1e0 [ 149.004237][ T4405] ? kstrtouint+0x78/0xf0 [ 149.004260][ T4405] ? avc_has_perm_noaudit+0x26b/0x360 [ 149.004295][ T4405] ? __asan_memcpy+0x5a/0x80 [ 149.004316][ T4405] ? avc_has_perm_noaudit+0x289/0x360 [ 149.004340][ T4405] ? avc_has_perm+0x155/0x240 [ 149.004364][ T4405] ? __cfi_avc_has_perm+0x10/0x10 [ 149.004387][ T4405] ? proc_fail_nth_write+0x184/0x220 [ 149.004423][ T4405] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 149.004448][ T4405] ? selinux_file_ioctl+0xecd/0x1480 [ 149.004492][ T4405] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 149.004526][ T4405] ? __cfi_vfs_write+0x10/0x10 [ 149.004547][ T4405] ? __kasan_check_write+0x18/0x20 [ 149.004569][ T4405] ? mutex_unlock+0x90/0x240 [ 149.004598][ T4405] ? __cfi_mutex_unlock+0x10/0x10 [ 149.004640][ T4405] ? bpf_lsm_file_ioctl+0xd/0x20 [ 149.004669][ T4405] ? security_file_ioctl+0x3e/0x110 [ 149.004701][ T4405] __se_sys_ioctl+0x9f/0x1b0 [ 149.004726][ T4405] __x64_sys_ioctl+0x7f/0xa0 [ 149.004744][ T4405] x64_sys_call+0x1878/0x2ee0 [ 149.004773][ T4405] do_syscall_64+0x57/0xf0 [ 149.004796][ T4405] ? clear_bhb_loop+0x50/0xa0 [ 149.004823][ T4405] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 149.004849][ T4405] RIP: 0033:0x7ff72139de59 [ 149.004867][ T4405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.004880][ T4405] RSP: 002b:00007ff722181028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.004896][ T4405] RAX: ffffffffffffffda RBX: 00007ff721625fa0 RCX: 00007ff72139de59 [ 149.004928][ T4405] RDX: 0000200000000040 RSI: 000000000000541b RDI: 0000000000000004 [ 149.004944][ T4405] RBP: 00007ff722181090 R08: 0000000000000000 R09: 0000000000000000 [ 149.004957][ T4405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.004970][ T4405] R13: 00007ff721626038 R14: 00007ff721625fa0 R15: 00007ffdaf2e1ac8 [ 149.004987][ T4405] [ 149.493880][ T1949] usb 4-1: unable to get BOS descriptor or descriptor too short [ 149.533993][ T1949] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 149.542651][ T1949] usb 4-1: can't read configurations, error -71 [ 149.553482][ T4412] rust_binder: 859: no such ref 2 [ 149.559325][ T4412] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.559493][ T4412] rust_binder: 4411:4412 transaction to 0 failed: ENOENT [ 149.619969][ T4420] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4420 comm=syz.1.1463 [ 149.640731][ T4420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.651922][ T4420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.696721][ T4426] syzkaller1: entered promiscuous mode [ 149.702289][ T4426] syzkaller1: entered allmulticast mode [ 150.136937][ T4446] FAULT_INJECTION: forcing a failure. [ 150.136937][ T4446] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 150.150326][ T4446] CPU: 0 UID: 0 PID: 4446 Comm: syz.4.1469 Not tainted syzkaller #0 3a44bb4c5afb37201027c4f56c4312533634f50d [ 150.150351][ T4446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 150.150361][ T4446] Call Trace: [ 150.150373][ T4446] [ 150.150380][ T4446] __dump_stack+0x21/0x30 [ 150.150406][ T4446] dump_stack_lvl+0x140/0x1c0 [ 150.150428][ T4446] ? __cfi_dump_stack_lvl+0x10/0x10 [ 150.150452][ T4446] ? _raw_spin_trylock+0xb5/0x140 [ 150.150468][ T4446] ? __cfi__raw_spin_trylock+0x10/0x10 [ 150.150484][ T4446] dump_stack+0x19/0x20 [ 150.150506][ T4446] should_fail_ex+0x3c2/0x510 [ 150.150525][ T4446] should_fail_alloc_page+0xec/0x110 [ 150.150545][ T4446] __alloc_pages_noprof+0x1c0/0x7e0 [ 150.150569][ T4446] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 150.150594][ T4446] pte_alloc_one+0x92/0x530 [ 150.150611][ T4446] ? __cfi_pte_alloc_one+0x10/0x10 [ 150.150627][ T4446] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 150.150649][ T4446] ? static_key_count+0x45/0x70 [ 150.150669][ T4446] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 150.150686][ T4446] __pte_alloc+0x79/0x440 [ 150.150701][ T4446] ? __cfi___pte_alloc+0x10/0x10 [ 150.150716][ T4446] ? __alloc_pages_noprof+0x35a/0x7e0 [ 150.150739][ T4446] do_pte_missing+0x2b1a/0x4440 [ 150.150759][ T4446] ? __kasan_check_write+0x18/0x20 [ 150.150774][ T4446] ? _raw_spin_lock+0x92/0x120 [ 150.150789][ T4446] ? __cfi__raw_spin_lock+0x10/0x10 [ 150.150806][ T4446] ? pte_marker_clear+0x1b0/0x1b0 [ 150.150825][ T4446] ? __pmd_alloc+0x5a6/0x9a0 [ 150.150843][ T4446] ? __cfi___pmd_alloc+0x10/0x10 [ 150.150864][ T4446] handle_mm_fault+0x1189/0x1ba0 [ 150.150884][ T4446] ? __cfi_handle_mm_fault+0x10/0x10 [ 150.150903][ T4446] ? find_vma+0xd3/0x120 [ 150.150919][ T4446] ? lock_mm_and_find_vma+0xb8/0x390 [ 150.150938][ T4446] do_user_addr_fault+0x4ee/0x1230 [ 150.150965][ T4446] exc_page_fault+0x58/0xc0 [ 150.150986][ T4446] asm_exc_page_fault+0x2b/0x30 [ 150.151004][ T4446] RIP: 0010:__put_user_4+0x11/0x30 [ 150.151022][ T4446] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 150.151035][ T4446] RSP: 0018:ffffc9000e2ff4f8 EFLAGS: 00050202 [ 150.151050][ T4446] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000000040 [ 150.151061][ T4446] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 150.151070][ T4446] RBP: ffffc9000e2ff670 R08: 0000000000000003 R09: 0000000000000004 [ 150.151081][ T4446] R10: dffffc0000000000 R11: fffff52001c5fe70 R12: 0000000000000000 [ 150.151092][ T4446] R13: ffffffff87e1f668 R14: dffffc0000000000 R15: 1ffff92001c5fea4 [ 150.151107][ T4446] ? sk_ioctl+0x3e2/0x6f0 [ 150.151125][ T4446] ? do_sys_openat2+0x134/0x1d0 [ 150.151148][ T4446] ? __x64_sys_openat+0x13a/0x170 [ 150.151170][ T4446] ? __cfi_sk_ioctl+0x10/0x10 [ 150.151189][ T4446] ? avc_has_perm_noaudit+0x26b/0x360 [ 150.151208][ T4446] ? __asan_memcpy+0x5a/0x80 [ 150.151223][ T4446] ? avc_has_perm_noaudit+0x289/0x360 [ 150.151242][ T4446] ieee802154_sock_ioctl+0x170/0x400 [ 150.151266][ T4446] ? __cfi_ieee802154_sock_ioctl+0x10/0x10 [ 150.151290][ T4446] sock_do_ioctl+0x118/0x330 [ 150.151308][ T4446] ? sock_show_fdinfo+0xd0/0xd0 [ 150.151328][ T4446] sock_ioctl+0x568/0x7e0 [ 150.151349][ T4446] ? __cfi_sock_ioctl+0x10/0x10 [ 150.151371][ T4446] ? is_bpf_text_address+0x17b/0x1a0 [ 150.151395][ T4446] ? kernel_text_address+0xa9/0xe0 [ 150.151417][ T4446] ? __kernel_text_address+0x11/0x40 [ 150.151438][ T4446] ? __cfi_sock_ioctl+0x10/0x10 [ 150.151454][ T4446] do_vfs_ioctl+0xf86/0x2010 [ 150.151473][ T4446] ? arch_stack_walk+0x10a/0x170 [ 150.151488][ T4446] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 150.151508][ T4446] ? _parse_integer_limit+0x195/0x1e0 [ 150.151525][ T4446] ? _parse_integer+0x2e/0x40 [ 150.151539][ T4446] ? kstrtoull+0x13b/0x1e0 [ 150.151555][ T4446] ? kstrtouint+0x78/0xf0 [ 150.151569][ T4446] ? avc_has_perm_noaudit+0x26b/0x360 [ 150.151587][ T4446] ? __asan_memcpy+0x5a/0x80 [ 150.151602][ T4446] ? avc_has_perm_noaudit+0x289/0x360 [ 150.151620][ T4446] ? avc_has_perm+0x155/0x240 [ 150.151637][ T4446] ? __cfi_avc_has_perm+0x10/0x10 [ 150.151654][ T4446] ? proc_fail_nth_write+0x184/0x220 [ 150.151677][ T4446] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 150.151700][ T4446] ? selinux_file_ioctl+0xecd/0x1480 [ 150.151725][ T4446] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 150.151750][ T4446] ? __cfi_vfs_write+0x10/0x10 [ 150.151765][ T4446] ? __kasan_check_write+0x18/0x20 [ 150.151780][ T4446] ? mutex_unlock+0x90/0x240 [ 150.151800][ T4446] ? __cfi_mutex_unlock+0x10/0x10 [ 150.151823][ T4446] ? bpf_lsm_file_ioctl+0xd/0x20 [ 150.151843][ T4446] ? security_file_ioctl+0x3e/0x110 [ 150.151866][ T4446] __se_sys_ioctl+0x9f/0x1b0 [ 150.151886][ T4446] __x64_sys_ioctl+0x7f/0xa0 [ 150.151904][ T4446] x64_sys_call+0x1878/0x2ee0 [ 150.151918][ T4446] do_syscall_64+0x57/0xf0 [ 150.151933][ T4446] ? clear_bhb_loop+0x50/0xa0 [ 150.151952][ T4446] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 150.151970][ T4446] RIP: 0033:0x7ff72139de59 [ 150.151983][ T4446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.151996][ T4446] RSP: 002b:00007ff722181028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.152010][ T4446] RAX: ffffffffffffffda RBX: 00007ff721625fa0 RCX: 00007ff72139de59 [ 150.152022][ T4446] RDX: 0000200000000040 RSI: 000000000000541b RDI: 0000000000000004 [ 150.152032][ T4446] RBP: 00007ff722181090 R08: 0000000000000000 R09: 0000000000000000 [ 150.152042][ T4446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.152051][ T4446] R13: 00007ff721626038 R14: 00007ff721625fa0 R15: 00007ffdaf2e1ac8 [ 150.152065][ T4446] [ 150.754183][ T4454] 9pnet_fd: Insufficient options for proto=fd [ 150.859202][ T4469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.868696][ T4469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.884532][ T655] Bluetooth: hci0: Frame reassembly failed (-84) [ 150.984349][ T361] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 151.082653][ T4469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.093028][ T4469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.114376][ T361] usb 1-1: device descriptor read/64, error -71 [ 151.364411][ T361] usb 1-1: device descriptor read/64, error -71 [ 151.464386][ T45] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 151.604370][ T361] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 151.615944][ T45] usb 5-1: not running at top speed; connect to a high speed hub [ 151.624481][ T45] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 151.635351][ T45] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 151.646299][ T45] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 151.657116][ T45] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 151.669453][ T45] usb 5-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40 [ 151.678680][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.686867][ T45] usb 5-1: Product: 饀ﬡ뀴૷궸웘绐驇㈎倮 [ 151.694190][ T45] usb 5-1: SerialNumber: 賯闠裀綜䞨쳍靈䲈յ눵纯撀嘈熒壬ᬎ水␾ᴎᮆ種ῦ냋얎᠎枧ች껩੶餜蠟蟩Ⱚ鼧츋霳몝檩⭟衝㚊ꨯ뽾俕걒퐾߯इ⇗ [ 151.744370][ T361] usb 1-1: device descriptor read/64, error -71 [ 151.917620][ T4471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.927710][ T4471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.939136][ T4471] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1480'. [ 151.948306][ T4471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1480'. [ 151.957326][ T4471] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1480'. [ 151.966543][ T4471] netlink: 'syz.4.1480': attribute type 2 has an invalid length. [ 151.974354][ T4471] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1480'. [ 151.994332][ T361] usb 1-1: device descriptor read/64, error -71 [ 152.114744][ T361] usb usb1-port1: attempt power cycle [ 152.474348][ T361] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 152.505456][ T361] usb 1-1: device descriptor read/8, error -71 [ 152.583206][ T45] usb 5-1: USB disconnect, device number 8 [ 152.635445][ T361] usb 1-1: device descriptor read/8, error -71 [ 152.646958][ T655] bridge_slave_1: left allmulticast mode [ 152.663152][ T655] bridge_slave_1: left promiscuous mode [ 152.668922][ T655] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.685083][ T655] bridge_slave_0: left allmulticast mode [ 152.690994][ T655] bridge_slave_0: left promiscuous mode [ 152.698637][ T655] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.796449][ T655] veth1_macvtap: left promiscuous mode [ 152.802219][ T655] veth0_vlan: left promiscuous mode [ 152.874366][ T361] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 152.892233][ T4476] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.902215][ T4476] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.905900][ T361] usb 1-1: device descriptor read/8, error -71 [ 152.909935][ T4476] bridge_slave_0: entered allmulticast mode [ 152.922090][ T4476] bridge_slave_0: entered promiscuous mode [ 152.928809][ T4476] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.936062][ T4476] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.943196][ T4476] bridge_slave_1: entered allmulticast mode [ 152.944435][ T549] Bluetooth: hci0: command 0x1003 tx timeout [ 152.950571][ T4476] bridge_slave_1: entered promiscuous mode [ 152.961114][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 153.010880][ T4476] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.017968][ T4476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.025384][ T4476] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.032442][ T4476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.045498][ T361] usb 1-1: device descriptor read/8, error -71 [ 153.059381][ T657] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.067514][ T657] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.077537][ T657] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.084634][ T657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.095434][ T773] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.102519][ T773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.128989][ T4476] veth0_vlan: entered promiscuous mode [ 153.140522][ T4476] veth1_macvtap: entered promiscuous mode [ 153.154849][ T361] usb usb1-port1: unable to enumerate USB device [ 153.576801][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 153.576820][ T36] audit: type=1400 audit(1783292104.260:19118): avc: denied { accept } for pid=4499 comm="syz.1.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 153.727341][ T4506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.736649][ T4506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.744499][ T45] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 153.809197][ T4509] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN PTI [ 153.821819][ T4509] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 153.830270][ T4509] CPU: 0 UID: 0 PID: 4509 Comm: syz.1.1491 Not tainted syzkaller #0 3a44bb4c5afb37201027c4f56c4312533634f50d [ 153.841841][ T4509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 153.851912][ T4509] RIP: 0010:path_openat+0x1568/0x35a0 [ 153.857322][ T4509] Code: ce ac 02 00 49 63 de eb 66 e8 24 04 99 ff 41 be b5 ff ff ff e9 1d f8 ff ff e8 14 04 99 ff 4c 8b 6c 24 60 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 4d 0d 00 00 44 8b 33 be 00 00 70 00 44 [ 153.876951][ T4509] RSP: 0018:ffffc9000e7d79e0 EFLAGS: 00010207 [ 153.883064][ T4509] RAX: 0000000000000003 RBX: 000000000000001c RCX: 0000000000080000 [ 153.891187][ T4509] RDX: ffffc90002e57000 RSI: 00000000000001be RDI: 00000000000001bf [ 153.899182][ T4509] RBP: ffffc9000e7d7bf0 R08: ffff8881f6e50c07 R09: 1ffff1103edca180 [ 153.907175][ T4509] R10: dffffc0000000000 R11: ffffed103edca181 R12: 0000000000000040 [ 153.915192][ T4509] R13: 1ffff11022b4a0c9 R14: 0000000000000000 R15: dffffc0000000000 [ 153.923190][ T4509] FS: 00007f4d6f89d6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 153.932319][ T4509] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 153.939136][ T4509] CR2: 00007f4d6f89cff8 CR3: 0000000115848000 CR4: 00000000003526b0 [ 153.947221][ T4509] Call Trace: [ 153.950518][ T4509] [ 153.953498][ T4509] ? do_filp_open+0x440/0x440 [ 153.958214][ T4509] do_filp_open+0x1f2/0x440 [ 153.962741][ T4509] ? __cfi_do_filp_open+0x10/0x10 [ 153.967796][ T4509] ? alloc_fd+0x4c1/0x570 [ 153.972148][ T4509] do_sys_openat2+0x134/0x1d0 [ 153.976857][ T4509] ? do_sys_open+0x100/0x100 [ 153.981510][ T4509] ? __kasan_check_write+0x18/0x20 [ 153.986653][ T4509] __x64_sys_creat+0x92/0xc0 [ 153.991276][ T4509] x64_sys_call+0x2710/0x2ee0 [ 153.995979][ T4509] do_syscall_64+0x57/0xf0 [ 154.000431][ T4509] ? clear_bhb_loop+0x50/0xa0 [ 154.005145][ T4509] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 154.011073][ T4509] RIP: 0033:0x7f4d6e99de59 [ 154.015528][ T4509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.035168][ T4509] RSP: 002b:00007f4d6f89d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 154.043621][ T4509] RAX: ffffffffffffffda RBX: 00007f4d6ec26090 RCX: 00007f4d6e99de59 [ 154.051612][ T4509] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000080 [ 154.059695][ T4509] RBP: 00007f4d6ea33e6f R08: 0000000000000000 R09: 0000000000000000 [ 154.067701][ T4509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.075701][ T4509] R13: 00007f4d6ec26128 R14: 00007f4d6ec26090 R15: 00007fff849c08f8 [ 154.083703][ T4509] [ 154.086739][ T4509] Modules linked in: [ 154.090939][ T4509] ---[ end trace 0000000000000000 ]--- [ 154.099588][ T4509] RIP: 0010:path_openat+0x1568/0x35a0 [ 154.102270][ T36] audit: type=1400 audit(1783292104.780:19119): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 154.105078][ T4509] Code: ce ac 02 00 49 63 de eb 66 e8 24 04 99 ff 41 be b5 ff ff ff e9 1d f8 ff ff e8 14 04 99 ff 4c 8b 6c 24 60 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 4d 0d 00 00 44 8b 33 be 00 00 70 00 44 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 154.131916][ T36] audit: type=1400 audit(1783292104.780:19120): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.168945][ T36] audit: type=1400 audit(1783292104.780:19121): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.192693][ T45] usb 6-1: unable to get BOS descriptor or descriptor too short [ 154.200835][ T45] usb 6-1: not running at top speed; connect to a high speed hub [ 154.210782][ T45] usb 6-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 154.221982][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.251218][ T36] audit: type=1400 audit(1783292104.780:19122): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.275244][ T45] usb 6-1: Product: syz [ 154.279659][ T45] usb 6-1: Manufacturer: syz [ 154.292683][ T36] audit: type=1400 audit(1783292104.780:19123): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 154.294391][ T4509] RSP: 0018:ffffc9000e7d79e0 EFLAGS: 00010207 [ 154.313659][ T45] usb 6-1: SerialNumber: syz [ 154.332097][ T4509] [ 154.334506][ T4509] RAX: 0000000000000003 RBX: 000000000000001c RCX: 0000000000080000 [ 154.342516][ T4509] RDX: ffffc90002e57000 RSI: 00000000000001be RDI: 00000000000001bf [ 154.350549][ T4509] RBP: ffffc9000e7d7bf0 R08: ffff8881f6e50c07 R09: 1ffff1103edca180 [ 154.358609][ T4509] R10: dffffc0000000000 R11: ffffed103edca181 R12: 0000000000000040 [ 154.376832][ T36] audit: type=1400 audit(1783292104.780:19124): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 154.400047][ T393] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 154.424337][ T4509] R13: 1ffff11022b4a0c9 R14: 0000000000000000 R15: dffffc0000000000 [ 154.432456][ T4509] FS: 00007f4d6f89d6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 154.454461][ T36] audit: type=1400 audit(1783292104.780:19125): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 154.494354][ T4509] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 154.501052][ T4509] CR2: 0000557b7bfffaf8 CR3: 0000000115848000 CR4: 00000000003526b0 [ 154.514359][ T36] audit: type=1400 audit(1783292104.830:19126): avc: denied { write } for pid=287 comm="syz-executor" path="pipe:[2906]" dev="pipefs" ino=2906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 154.542303][ T655] bridge_slave_1: left allmulticast mode [ 154.554828][ T655] bridge_slave_1: left promiscuous mode [ 154.561514][ T4509] Kernel panic - not syncing: Fatal exception [ 154.568219][ T4509] Kernel Offset: disabled [ 154.572558][ T4509] Rebooting in 86400 seconds..