last executing test programs: 20.515205817s ago: executing program 3 (id=398): syz_io_uring_setup(0xbdc, &(0x7f0000000300)={0x0, 0xec25, 0x400, 0x1, 0x40000337}, 0x0, 0x0, 0x0) rmdir(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0x3) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x4e, 0x0, &(0x7f00000002c0)="642309c8a7e26e482fe691d75abf5bc509456d5d47af18808e457a99efb622bfdf4d9d372fdb07df8c54b3782fa0478619b736018a458994744cf72bc0a1778ed8ddb5070fd97ec8f9bcf24f9fd5"}) 20.199750946s ago: executing program 3 (id=400): mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000dc0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000e00)=0x40) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) listen(r3, 0x0) (async) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000002240)=""/4115, 0x1013}], 0x1, 0x149, 0xfffffffc) (async, rerun: 64) r5 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x2, 0x4}, 0x5206e4b73005041a) (async) socket$pptp(0x18, 0x1, 0x2) (async) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0xfffff3f1, @mcast2, 0x1}, 0x1c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="a2010000100001000000000000000000fe8800000000000000000000c914623aae2727d1bf966e00000101ac1e00010000000000510000000000004000040000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00170000000000faffffff000000000000000028bd7000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000"], 0x1a0}}, 0x800) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) (async) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x2, {{0x40, 0x1, 0x7}, 0x8}}, 0x18) 20.02645414s ago: executing program 3 (id=401): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, &(0x7f0000000200)=0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffffffffffe9a, 0x734, 0x0, 0xfffffffffffffecb) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000240)) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) (async) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async) socket(0x28, 0x5, 0x0) (async) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) (async) listen(r1, 0x0) (async) accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, &(0x7f0000000200)=0x1c) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, 0x0) (async) socket(0x28, 0x5, 0x0) (async) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) shutdown(r0, 0x1) (async) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffffffffffe9a, 0x734, 0x0, 0xfffffffffffffecb) (async) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000240)) (async) 19.67827128s ago: executing program 3 (id=402): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x840) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000180)='(/,\x00', 0x108040, &(0x7f00000001c0)={@_ha_fsid={[0x8, 0x8]}, {0xff, 0x3, 0x4000000, 0x1}}, 0x6, &(0x7f0000000200), &(0x7f0000000240)=0x3}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x120, r3, 0x2, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000800}, 0x10004) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r4, 0x300, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040014}, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x9c, r5, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:removable_device_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:dhcpc_var_run_t:s0\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x810) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCGPTPEER(r6, 0x5441, 0x15) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000a80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000840)={0x1d8, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x9d, 0xa9, @random="4c83a73929d19e23748aeae12899e658b72ecb759d9757011ba4b5a2a2b979c1407e092361cd77b534fcb619c6a038a6c1659342a833b12514193c15f43ed8ee9a6da6325a61413c49905521a0790d7c2efd70e29f42e804451005bbf484e5509759fd79882741d7010f810331abb4f0cdf1c092b441ae1461c4f80d7fa08a21f02efa1a03ced95a774ba178925fcaf6cf5854f7191d3584ed"}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf2, 0xa8, @random="6cf0a31f68a16223e318f8824f47d5957951680d5479616a3ff71d24d3f5375eaf27729ad0ee7810e82b5f9083f89d8ada9de506a136d07a473324705ef00fd4096e91412c07d50aaa3c4e6eec435530e3318ed2a6bc7772163cb00efd973e657a0595c28396561aa445cc251c08933c80195c98c2cade41a62bbcd8f373165a24f8174146021188b1d182feca08990404b64319f5050ef35809c6b349a3abd0ba27b5b81572e9497b3be1d00681786543a4b77b355ebe6be284662f2e56765c686c602c3ec4d264ff7f110ece65c274ea5d75edb36a1976aa39e3920a9b9b80201c7a106b0787181d2beffec824"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x5}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xf5e}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4}, 0x4001) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b80)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000bc0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c00)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x50, r7, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000010}, 0x4800) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x58, r4, 0x300, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x2e}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x70}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x1}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x7}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x58}, 0x1, 0x0, 0x0, 0x88}, 0x40) clock_gettime(0x0, &(0x7f0000000e80)={0x0, 0x0}) write$input_event(r2, &(0x7f0000000ec0)={{r12, r13/1000+60000}, 0x15, 0x1, 0x2}, 0x18) syz_genetlink_get_family_id$nfc(&(0x7f0000000f00), r0) r14 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r14, 0x11a, 0x2, &(0x7f0000000f40)=@gcm_128={{0x303}, "5157e7407b5fee2d", "c1c03887427a87bf1279f6e93e1d122e", "bdd19904", "4da489833f583cf9"}, 0x28) r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000000fc0), r2) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x1c, r15, 0x302, 0x70bd27, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20000000) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f00000010c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001140)={'wlan0\x00'}) 19.351767899s ago: executing program 3 (id=403): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="050000007f0000000000000001000000", @ANYRES64=0x0, @ANYRESHEX=r1], 0x48}}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f00000006c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) wait4(0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000080)={[{0x92, 0x40, 0x2a, 0x0, 0x74, 0x2, 0xf8, 0x6, 0xe, 0x7f, 0x6, 0xb7, 0x1}, {0x48bd, 0x2, 0x3, 0xa6, 0x9, 0x7f, 0x5, 0xff, 0x40, 0x4, 0xa, 0x42, 0x10}, {0x7, 0x101, 0x4, 0x2, 0x3, 0x4, 0x3, 0xfd, 0x5c, 0x6, 0xf, 0x1, 0x3}], 0x8}) fcntl$setown(r0, 0x8, 0x0) 15.877249894s ago: executing program 3 (id=417): sched_setscheduler(0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) close(r0) 15.827513376s ago: executing program 32 (id=417): sched_setscheduler(0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) close(r0) 4.712338721s ago: executing program 1 (id=475): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) setuid(0xee01) ioperm(0x3, 0x9, 0x80) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) unshare(0x6020400) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x2, 0x801) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000180)={0xfffffffffffffffd, 0x0, 0x0, r3, 0x15}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000f80)={0x4, 0x0, [{0xfec00000, 0x0, 0x0}, {0xa000, 0x0, 0x0}, {0x3000, 0x0, 0x0}, {0x70000, 0x0, 0x0}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000240)={0x2, 0x0, [{0x7, 0x2, 0x0, 0x1}, {0x0, 0x1000000, 0x2, 0x0, 0x4}]}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x2, 0x9, 0x6, 0x0, 0xee4, 0x2, 0x6, 0x1, 0x3b, 0x8, 0x5, 0xff, 0x0, 0x7, 0x9, 0x5, 0xa, 0x1, 0x2, '\x00', 0x1, 0x5}) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000003000e7ef8b000000a100c7b1ee57", 0x12, 0x2404c810, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r8, 0x0, 0x3, 0x0, &(0x7f0000000080)) 4.635705983s ago: executing program 1 (id=476): r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f9d0a0101"], 0x57) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000001800)="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", 0x1000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) ptrace(0x4207, r5) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000008c0)={0xe8d, 0x6, 0x4, 0xffffffff, 0x7}) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x881) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x40, r6, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x10001, 0x76}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4.635346083s ago: executing program 0 (id=477): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x204000, 0x0) fcntl$getflags(r2, 0x403) r3 = epoll_create(0x7b) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000180)={r2, &(0x7f0000000000)='\x00', 0x20280, &(0x7f00000000c0)={@_ha_fsid={[0x1f0b97c2, 0x4]}, {0x0, 0x7, 0xb4b1, 0x9}}, 0x9, &(0x7f0000000100), &(0x7f0000000140)=0x6}) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000010000)={r3, r1, 0x8320}) capset(&(0x7f0000000040)={0x20080522, r0}, &(0x7f0000000080)) epoll_create1(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0xe3) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x203, @loopback, 0x7}, 0x1c) 4.634606623s ago: executing program 0 (id=478): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "ae9da6a8"}]}}, 0x0}, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) 4.613401473s ago: executing program 1 (id=479): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000000c0)={0x7, 0x0, 0x98, &(0x7f0000000100)={0x800000, 0x8000, 0x1}}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x1000000000000, 0x2, 0x0, &(0x7f0000ffa000/0x4000)=nil) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'veth0_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}) (async) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001cafd04600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES32], 0xfdef) 4.464828428s ago: executing program 1 (id=480): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002500)=ANY=[@ANYBLOB="e00300001800290200000000000000000a000000ca031780"], 0x3e0}}, 0x20010000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000040), 0x1) syz_usb_connect$cdc_ecm(0x1, 0xffffffffffffff62, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003020000082505a1a440000102030109024300012c4cae071c00fd020600000524060000052400fdff0d240f0101010000000000000504243207042413090905820200"/85], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 3.039825757s ago: executing program 0 (id=481): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)={0x24, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x0, 0x0, 0x0}, @typed={0xd, 0x7, 0x0, 0x0, @str='\xd0@:-}-+)\x00'}]}, 0x24}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x98, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "925d104a9e"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "82b9e97de8f1de23221c76e72a"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1864faa671"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "925136591cbffd54f5925dbc88"}]}, 0x98}, 0x1, 0x0, 0x0, 0x20040052}, 0x800) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'vxcan1\x00', 0x800}) 3.039592957s ago: executing program 0 (id=482): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0x5, 0x4) (async) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)={0x14, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xfffffffffffffffc}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x4}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x931e}]}, 0x38}, 0x1, 0x0, 0x0, 0xc1}, 0x8000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0xfffc, @broadcast}, 0x10) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12011001000000080620180100000000000109022400010000100009040000ff0300010009f52ef7363d20a9f4843a210100fc01222800090581032004038100"], 0x0) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) write$bt_hci(r5, 0x0, 0xfffffffffffffebf) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r6 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000300)=@v2={0x2, @aes128, 0x3, '\x00', @d}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) syz_usb_control_io(r4, &(0x7f0000000200)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="4031290000002921486b34ce9e7541715283537000"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.031667457s ago: executing program 0 (id=483): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000200)={0xffffffff, 0x801, 0x3, 0x7, 0x59, "ea7102000000f900edffff0900000000000005", 0x3ffffff, 0x6}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f010000003856da70ff0005008005090581030002000000090401"], 0x0) (async) syz_usb_connect(0x1, 0x41d, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x9, 0x91, 0x19, 0xff, 0x1901, 0x193, 0xa99a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40b, 0x1, 0x1c, 0x3, 0x20, 0x9f, "", [{{0x9, 0x4, 0x21, 0x7, 0xf, 0x2a, 0xe4, 0xea, 0x1, [@generic={0xff, 0x6, "43f34bd8f6017b8dca15c2a7b6a717cc1d1c76f4dce34fd0a3fffea2c009c24f91f2d8916cf358dbbfb691d0b96f663ff38f0b31ebcf9b59ea55fe6fc2ab7422c1b75fcd3f579793d066813c0409fe6661f48f5f99b3e7b3632380e5fefd2223e5cbf90d0cdcc5b9d6843c9143d3e4ffc0199e31531adeae3dd63f5e43e1f0cea30a7733a177894e2cca2bf04c4c0630aa1923a8db5e5fbc6e2a12398be90f83bd4976a627e78e31e94d5937d8a1a9a747d4fe209b38910fc35d9bce6c89ae00350f8ae29c9f33cb3eeec55ffa5fb1576df5430568fbc3accc8074dadc89848c97475b398a8160c6aa89e5b3547b919c3f500c2e0e3bd43364d01bfab1"}, @uac_control={{0xa, 0x24, 0x1, 0x5, 0xa}}], [{{0x9, 0x5, 0x1, 0x3, 0x200, 0x1, 0x39, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2f, 0x7}]}}, {{0x9, 0x5, 0x80, 0x1, 0x10, 0x3, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x81}]}}, {{0x9, 0x5, 0x9, 0x1, 0x40, 0x5, 0x2, 0x6, [@generic={0xd2, 0xe, "aa2c2951d8b6b692d5f348af0da2a04d44ce2bebb32e903b363df1415dfebf862db8659477ce520f066146abfb2676cd189994fd1f2f2415ac2d600f5607fadf863027ad29acfcaf8f4dd51be061cefbb15f930d18fa6de5e2d4f7e5acdba39e96011bf824546137c58f89ab45db3fb804bf656c3b202c023c8d669d86089f825da2e47ba6c5d1b72a2d527daef25c08a88f495df8454e3d5c9a16c3651b85f3dfeb33d69de59e23dd2a9f9de453d866434245a7f4297bc70c6119e8ae3ae844ea0de2e9773d2e31ce3bfc79047f7bf5"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x400, 0xc0, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0xa}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x7f, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x88, 0x3800}, @generic={0xbe, 0x8, "85f1414b5bff168d3e8aab5a3fa4afeb80029e854c9be46f3000c2119d28f0a5c7ab351bcc2fc09682feb4be7e6729c8887dafe2e24813916d76b3f7bee1402c04e9b87ac6600a483af0af197c5fe6b7a8c459e7dbe1ee7027d80489c515e5a53758281aa34d9ae789f62011bf2f61ebd0d98d022eb3fc28d20ca3ce628e64d5864c33f5a54c6906029fcd95ff312afa3c457b400f51a55d48aceff8ab0aafa83b64984e56d4db4fc1b7304b3782ac6f371a176b057a1d9293a41378"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x9, 0x20, 0xd8}}, {{0x9, 0x5, 0xc, 0x8, 0x20, 0x81, 0x7, 0xc8}}, {{0x9, 0x5, 0xc, 0x1, 0x420, 0x7f, 0xa, 0xaa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x4}]}}, {{0x9, 0x5, 0x7, 0x6, 0x40, 0x48, 0x6, 0x8}}, {{0x9, 0x5, 0x0, 0x0, 0x440, 0x6, 0xed, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x4, 0x4, 0x6}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0xe, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x10}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xf8, 0x10}]}}, {{0x9, 0x5, 0xb, 0x4, 0x8, 0xd4, 0x2, 0x3, [@generic={0x1c, 0x5, "62d8fa5148f22b9a2fadd862de1aa633d499861c03e6749b15b2"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x8, 0x0, 0xad, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x2}, @generic={0x16, 0x3, "94fc6f648c042ee2cab010b598639047e83b2af0"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x20, 0x5, 0xb, 0x2, [@generic={0x5a, 0xf, "004268518cae11eff1727cb958d2a5b288089aca20d8be827e9c8118a37cbed5187895d820634320f3052ca5cb87613bfb10705bb3858997c843e13df3e3f5598b4f4ab6dcc6cdda4f8989c2756915f64456a09e21d0e7d5"}]}}]}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x200, 0xb, 0x1, 0x1, 0x8, 0x7}, 0x5, &(0x7f0000000800)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x1414}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x425}}]}) (async) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000240)) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x0, 0x34, 0x1, '\x00', 0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) (async) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file5\x00', 0x0, 0x4, &(0x7f0000000080)) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0x9) 2.870860102s ago: executing program 0 (id=484): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) socket(0x23, 0xa, 0xd) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x102, 0x0) capset(0x0, &(0x7f0000000280)) fchown(r2, 0xee01, 0x0) read$FUSE(r1, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x81}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r4, r5, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) umount2(&(0x7f00000021c0)='./file0/file0\x00', 0x3) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "98fe"}, @global=@item_4={0x3, 0x1, 0x0, "4cb3c2b3"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "49eaaa7c"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 2.807771663s ago: executing program 4 (id=485): syz_usb_connect$cdc_ecm(0x1, 0x55, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x1, 0x1, 0x1, 0xc73ebdfa468265f4, 0x7, "", [{{0x9, 0x4, 0x0, 0x80, 0xfd, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfffd}, {0xd, 0x24, 0xf, 0x1, 0x101, 0x0, 0x0, 0x5}, [@mdlm_detail={0x4, 0x24, 0x13, 0x7}, @mdlm_detail={0x4, 0x24, 0x13, 0x9}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6, 0x0, 0x10}}}}}]}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect$uac3(0x6, 0x111, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x534d, 0x2109, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xff, 0x3, 0x1, 0x5, 0x60, 0x10, {0x8, 0xb, 0x1, 0x1, 0x1, 0x23, 0x30, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0x4f, 0x5}, [@extension_unit={0x9, 0x24, 0xa, 0x6, 0x1, [0x1]}, @mixer_unit={0x8, 0x24, 0x5, 0x4, 0x78, '}uN'}, @multiply_unit={0xb, 0x24, 0xd, 0x6, 0x30, 0xfffffffc, 0x4}, @extension_unit={0x1d, 0x24, 0xa, 0x3, 0x6, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0]}, @source_unit={0xc, 0x24, 0xb, 0x9, 0x2, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x800, 0xfffb, 0x0, 0xb3}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xc, 0x2, 0x3, 0x1, '!', "d66c"}, @as_header={0x17, 0x24, 0x1, 0x0, 0x5, 0x9ddb, 0x5, 0x3, 0x0, 0x0, 0xd0}, @as_header={0x17, 0x24, 0x1, 0x8, 0x5, 0x916, 0x1002, 0x1, 0x95, 0x80, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x4, 0x2, 0x1, {0xa, 0x25, 0x25, 0x1ff, 0x5, 0xd1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x40, 0x2, 0x5f, 0x1, "e6"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x9, 0x81, 0x1, {0xa, 0x25, 0x25, 0x9, 0x4, 0x50}}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x9, 0x1, 0xd5, 0x8, 0x5}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x410}}, {0x100, &(0x7f00000002c0)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1c09}}]}) syz_usb_connect$cdc_ncm(0x0, 0x1a6, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x194, 0x2, 0x1, 0x2, 0xa0, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x800, 0x100, 0x3}, {0x6, 0x24, 0x1a, 0x4, 0x4}, [@obex={0x5, 0x24, 0x15, 0x233}, @mbim_extended={0x8, 0x24, 0x1c, 0x101, 0xb, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x0, 0x9}, @mdlm_detail={0x61, 0x24, 0x13, 0x0, "78c1266b4944036d0457ab5db17a31ca0c138f8dddf61fe2e3f4434ec48f29c1c485103c3dc0bbbc7993d799d324ce4cfa8b60febad0b1ef493b71ee5b0b0d392c076d62cfd0ecc95f575b12478aa76f038855ab290cd3e4c262a5ac4c"}, @mdlm_detail={0xbb, 0x24, 0x13, 0x5, "53ab9db8abc017e2038935b3dba11d5fdf9de412bce7e9f7adee80667173995a0a3bf5364a1145cba344ab2aa15d8126ea97d60013c80a8e08e2ccc044ce6f1b9c4883bc2e9c2958cf2cacfac9db92fe131c52aa93c7321ad75f49d4fe6a3e61b13a7b84e07c07de40acf4b1643059ac78634224ba5af03b99e61fa88c338b9d40fb92d8ef83d23573048d16b17b7341ff3a6c3d99f45c48e7dcfaa8a5eb06a111667e5b86277239038c009d8f0522067e1679640ebee0"}, @dmm={0x7, 0x24, 0x14, 0x1, 0xdf5}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x7, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xb8, 0x4, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x8, 0x1}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x200, 0x7, 0xa, 0x7, 0x40, 0xdb}, 0x19, &(0x7f0000000740)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "16a4bf37b6df0f08c13b5167631aaabd"}]}, 0x2, [{0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x43e}}]}) 1.868136539s ago: executing program 2 (id=489): syz_io_uring_setup(0x1f0d, &(0x7f0000000300)={0x0, 0xec25, 0x400, 0x1, 0x1aa}, 0x0, 0x0, 0x0) rmdir(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r1 = dup(r0) read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2020) r2 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_int(r2, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) write$binfmt_elf32(r1, &(0x7f00000004c0)=ANY=[], 0x258) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0x3) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000002c0)="642309c8a7e26e482fe691d75abf5bc509456d5d47af18808e457a99efb622bfdf4d9d372fdb07df8c54b3782fa0478619b736018a458994744cf72bc0a1778ed8ddb5070fd97ec8f9bcf24f9fd52d56"}) 1.805390051s ago: executing program 2 (id=490): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0xc0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)={0x38, 0x13, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x4, 0x4f}, @nested={0x4, 0x71}, @nested={0x20, 0xbc, 0x0, 0x1, [@nested={0x4, 0xc3}, @nested={0x18, 0x2e, 0x0, 0x1, [@typed={0x14, 0x10b, 0x0, 0x0, @ipv6=@local}]}]}]}, 0x38}], 0x1, 0x0, 0x0, 0x8800}, 0x8880) lsetxattr$security_evm(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)=@ng={0x4, 0x7, "9a718bdb1ef7"}, 0x8, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x5336c0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000a40)="2e9b3d0007e03dd651930100c575963f8864", 0x12}], 0x1) r5 = getuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) getgroups(0x4, &(0x7f0000000200)=[0x0, 0xee00, 0xffffffffffffffff, 0x0]) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file2\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x1, 0x1}, [{0x2, 0x1}, {0x2, 0x3, r5}, {0x2, 0x70e92f4b7140e17d, r6}], {0x4, 0x3}, [{}, {0x8, 0x5, r7}, {0x8, 0x6, r8}], {}, {0x20, 0x3}}, 0x54, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1.751381802s ago: executing program 2 (id=491): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f00000001c0)="66b9800000c00f326635000800000f30b800008ee8f2f0095bf4fd0f20c06635040000000f22c0640f7812f2f20f32b808008ee8b819028ee8ba4100b008ee", 0x3f}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.623796596s ago: executing program 2 (id=492): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff0600000005000000450000002500000019000d000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff0600000005000000450000002500000019000d000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) read(r0, &(0x7f0000000000)=""/157, 0x9d) pwritev(r0, &(0x7f00000022c0)=[{&(0x7f0000000200)="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", 0xfffffe40}], 0x1, 0x1, 0x9) 1.46226446s ago: executing program 4 (id=493): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x50, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffa000/0x3000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) madvise(&(0x7f000047d000/0x4000)=nil, 0x4000, 0x9) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d7, 0x5}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="38000000000000000000000007000000860a00000003070419099404"], 0x38}, 0x800) 1.426694181s ago: executing program 1 (id=494): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x14, 0x1e, 0x21, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8011}, 0x4000000) 1.343809863s ago: executing program 1 (id=495): r0 = syz_usb_connect$uac3(0x5, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async) syz_usb_control_io$uac3(r0, &(0x7f0000000300)={0x14, &(0x7f0000000580)=ANY=[], &(0x7f00000001c0)={0x0, 0x3, 0x8b, @string={0x8b, 0x3, "0f7cd8e8ebd7e1ac949a4dbf3c7d7f9ff8dd6ae8f9b62f8a08bbe62b408eff4679a869639214de8f895685f2f0a1bd977c1ff75b029269c6cc6a0dc829236be02099d12efdecbefa1247110304fe412cb45f7629a7a10f1baab4d4e057b8a650df8367d2d7910776551a73e74eb4364d3e38909e5e45f5738a11e4b77507cf6b7e9a2bb5fd358cbc23"}}}, 0x0) (async) syz_usb_connect$cdc_ncm(0x4, 0x72, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x5, 0xc0, 0xa, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "fca66a30"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x8, 0x101, 0x2}, {0x6, 0x24, 0x1a, 0x1000, 0xd704bc66a9bcd489}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0x7, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0x81, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1, 0x9, 0x2}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x250, 0x32, 0x0, 0x8, 0x1958faeba388bdbc, 0xb3}, 0x86, &(0x7f0000000340)={0x5, 0xf, 0x86, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x11, 0x1, 0x1, 0x8, 0x72}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "8dfb7823eaa0048b24a1f765587ea19b"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x9, 0x16}, @ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x0, 0xf000, 0x9, [0xf, 0x30, 0x0]}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x2, 0x0, 0x2, [0x30, 0xff3f30, 0x3f00, 0x7f4030]}, @generic={0x27, 0x10, 0x1, "0674d73fa0dbc7400cfdf5b33d6fd4b971da0f617cb6b95182b7fcbf58e1cb1414c0e093"}]}, 0x5, [{0x85, &(0x7f0000000400)=@string={0x85, 0x3, "5dd89e847ffa134970b2f7e5fdd55930fa69fb291be0bbbc51f5a78533def8aa50fa1f45bf91d95bf9de06100f865f27288b34b0bb60fa417b713903ea990790a8ef84d9cc8ffe477ea4b56a7d84e843e580eb1ae1811d23827fa389ce1f4a0ba811cdebabbac3e8d672608f0e83f13f171cacd069adce37449664b62ddddd768380ac"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1c2b}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4}}]}) 1.324130994s ago: executing program 2 (id=496): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async, rerun: 32) r0 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32) getsockopt(r0, 0x28, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x6, 0x1010, r0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0xb1, 0x5, 0x73, 0xff6fffff}, {0x6, 0x8, 0x6}]}, 0x10) utimes(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x800, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000001}, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r4, 0x1, 0xf, 0x0, &(0x7f00000042c0)) (async) sendmsg$netlink(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="1800000085b6010029bd7000fedbdf250800e400ffffffff"], 0x18}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000140)=ANY=[@ANYBLOB="12010102000000406307812040000102030109026e0003017f6006080b00022411100a00090000000904010000010230000904010101010230000937e11986c04e3ac51f68555208cf320501096008"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x7fffffffffffffff}) syz_usb_ep_read(r5, 0x6, 0x34, &(0x7f0000000080)=""/52) 1.290146325s ago: executing program 4 (id=497): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x0, 0x8010, r1, 0x353db000) listen(r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r2, 0x2) r3 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r3, &(0x7f0000012400)={0x2020}, 0x2020) setrlimit(0x8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) 1.231686106s ago: executing program 4 (id=498): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {0x0, 0x800b}}}, 0x1c}}, 0x4044890) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x8}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4008054) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) add_key$keyring(&(0x7f0000000180), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x148, r6, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe038}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x494c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x90}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x68ed}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x84800}, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r7, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x34}}, 0x8080) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r8, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r8, 0x80000003) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x158, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x10c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0xe0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xb8, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x4}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x158}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1.230906957s ago: executing program 4 (id=499): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x801, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000080)={0x10000000004103}) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f00000000c0)=""/24, 0x18, 0x40000063, 0x0, 0xffffffffffffff7f) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="c8050000100019", 0x7}], 0x1) r2 = socket$inet6(0x10, 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r3 = socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x1, 0x30, 0xe9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x26, 0x30, 0xe8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x9, 0x3, 0x4, {0xa, 0x25, 0x25, 0x0, 0x7, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xf8, 0xe, 0x4, {0xa, 0x25, 0x25, 0x2c5816, 0x4, 0x3a85}}}}}}}}]}}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000980)=@string={0x2}}, {0x21, &(0x7f0000000a40)=@string={0x21, 0x3, "c429a84ee4733cf4c35f28c9f420cc05cbe3725ea48ae656783500fb41534b"}}]}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000000)='./bus\x00', 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'veth1_vlan\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) syz_usb_connect$uac3(0x2, 0xfc, &(0x7f0000000440)={{0x12, 0x1, 0x26313c8de3322f2e, 0x0, 0x0, 0x0, 0x40, 0x582, 0x114, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xea, 0x3, 0x1, 0x2, 0xa0, 0xa, {0x8, 0xb, 0x3, 0x0, 0x1, 0x23, 0x30, 0x20}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x42, 0x3}, [@input_terminal={0x14, 0x24, 0x2, 0x6, 0x403, 0x6, 0xd, 0x2, 0x8, 0x9, 0x2, 0x8001}, @selector_unit={0xc, 0x24, 0xc, 0x0, 0x7, "e3caaddc5d4e46"}, @source_unit={0xc, 0x24, 0xb, 0xff, 0x1, 0x938e, 0x8, 0xcea}, @selector_unit={0xc, 0x24, 0xc, 0xed, 0x7, "0cf7281986fa0d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xa, 0x1, 0xc, {0xa, 0x25, 0x25, 0x35b55742, 0x2, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xe, 0x37, 0xff}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x95}, @as_header={0x17, 0x24, 0x1, 0x1d, 0x5, 0x8, 0x1001, 0x5, 0xa, 0x200, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x400, 0x5, 0x1, 0x83}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x3, 0x1, 0x2, 0xdd, "2fd8de4637"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x80}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x3, 0x1, {0xa, 0x25, 0x25, 0x3ff, 0x1c}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0xfffffffffffffffc, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x820}}, {0x3f, &(0x7f0000000000)=@string={0x3f, 0x3, "2e460c24a57856e9277b8691c38fdeeec2a221da20ff9a6aab4c1aef4ffd01812eb2d4d94f6c978f5db37432c5f08dd0a8d4ba19149282492c820df886"}}, {0x40, &(0x7f0000000300)=@string={0x40, 0x3, "aa575fbf179dc91c9236c7926f644f60bbc0222b5a35650904edbb21b741fbb0f11c05736299c560e7dbd22287ab2772fb9ed53dd4abe9243f3d4fede430"}}, {0x5, &(0x7f0000000340)=@string={0x5, 0x3, "c9f798"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x40d}}]}) 755.64284ms ago: executing program 2 (id=500): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xdb}, {0x0, 0x200000000000}, {0x2}, 0x0, 0x0, 0xa}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x9}, @XFRMA_SET_MARK={0x8}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x148}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='htcp', 0x4) getsockopt$inet6_int(r1, 0x29, 0x49, 0x0, &(0x7f00000000c0)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r2, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r3, 0x401, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYRESDEC=r0], 0x54}}, 0x0) syz_usb_connect(0x2, 0x44, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x1c, 0x6, 0x3f, 0x40, 0x5050, 0x800, 0xb34f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x1, 0x77, 0x9, 0x10, 0x3, "", [{{0x9, 0x4, 0x35, 0xe7, 0x2, 0x44, 0xfd, 0xe5, 0x94, [], [{{0x9, 0x5, 0x7, 0x9a86c4092ba25b7f, 0x200, 0x33, 0x0, 0x3}}, {{0x9, 0x5, 0x8, 0x2, 0x238, 0x5, 0xfc, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xfa, 0xc763}]}}]}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3, [{0xa8, &(0x7f0000000440)=ANY=[]}, {0xac, &(0x7f0000000500)=@string={0xac, 0x3, "1bc562d8c81c8b725cb73744ad0413890a31890afe5c35b0ee9b9df8d16a3a41a3abf0147bdc253db67ffd2d20df01ab13b56f6c4798a69da720f738a18e0f1a0acfb42ab2a23da007cdeff1aceca29250af3b390299165e642705caab4de8f9e8534a5a18c4250a4489a8e6758fc11b1876d98b19f406007d6d5bf7e879c27d2c81595b9b7114250177fda8bae19e7b979e1c36df066885cf79aa13865492e6dce9b418d8b69a1b00f1"}}, {0xf2, &(0x7f00000001c0)=@string={0xf2, 0x3, "6ccc73303c40f177ec9e9dfa5a5bbcbe57e156081ffef034684b8f6c674177e09c07d81c567c37f34650cde692054a206fbc141e9fbffa7995c432d3208f3e25c6c9749fb670076d571b33140081b751bc62a9624a7cb6600eee4c23589e83fff6d0e7b9fbb6e13a18a387b1cf24b4830543792d99f0665d836d33e9b521251a03006171f60347c65d9404f52740f6d6b54b28be9443fc7e6dc34a25c5b3540411dd22421b3446bf105b77f91c4ed12edccc575387989dc81dfc3e9ebd540374d998d3722352f886a7c74ffa99672e1e9c47b614a3b63a82cc6354a0d81ba571709c21973c11b2a1033e7eea971f36e4"}}]}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xdb}, {0x0, 0x200000000000}, {0x2}, 0x0, 0x0, 0xa}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x9}, @XFRMA_SET_MARK={0x8}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x148}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='htcp', 0x4) (async) getsockopt$inet6_int(r1, 0x29, 0x49, 0x0, &(0x7f00000000c0)) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) preadv2(r2, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) (async) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async) lseek(r3, 0x401, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYRESDEC=r0], 0x54}}, 0x0) (async) syz_usb_connect(0x2, 0x44, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x1c, 0x6, 0x3f, 0x40, 0x5050, 0x800, 0xb34f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x1, 0x77, 0x9, 0x10, 0x3, "", [{{0x9, 0x4, 0x35, 0xe7, 0x2, 0x44, 0xfd, 0xe5, 0x94, [], [{{0x9, 0x5, 0x7, 0x9a86c4092ba25b7f, 0x200, 0x33, 0x0, 0x3}}, {{0x9, 0x5, 0x8, 0x2, 0x238, 0x5, 0xfc, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xfa, 0xc763}]}}]}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3, [{0xa8, &(0x7f0000000440)=ANY=[]}, {0xac, &(0x7f0000000500)=@string={0xac, 0x3, "1bc562d8c81c8b725cb73744ad0413890a31890afe5c35b0ee9b9df8d16a3a41a3abf0147bdc253db67ffd2d20df01ab13b56f6c4798a69da720f738a18e0f1a0acfb42ab2a23da007cdeff1aceca29250af3b390299165e642705caab4de8f9e8534a5a18c4250a4489a8e6758fc11b1876d98b19f406007d6d5bf7e879c27d2c81595b9b7114250177fda8bae19e7b979e1c36df066885cf79aa13865492e6dce9b418d8b69a1b00f1"}}, {0xf2, &(0x7f00000001c0)=@string={0xf2, 0x3, "6ccc73303c40f177ec9e9dfa5a5bbcbe57e156081ffef034684b8f6c674177e09c07d81c567c37f34650cde692054a206fbc141e9fbffa7995c432d3208f3e25c6c9749fb670076d571b33140081b751bc62a9624a7cb6600eee4c23589e83fff6d0e7b9fbb6e13a18a387b1cf24b4830543792d99f0665d836d33e9b521251a03006171f60347c65d9404f52740f6d6b54b28be9443fc7e6dc34a25c5b3540411dd22421b3446bf105b77f91c4ed12edccc575387989dc81dfc3e9ebd540374d998d3722352f886a7c74ffa99672e1e9c47b614a3b63a82cc6354a0d81ba571709c21973c11b2a1033e7eea971f36e4"}}]}) (async) 0s ago: executing program 4 (id=501): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) getpeername(r0, 0x0, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)={{0x0, 0x3, 0x5, 0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, 0x0) getdents64(r1, &(0x7f0000000000)=""/90, 0x5a) exit(0x29dbc548) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) getdents64(r1, &(0x7f00000001c0)=""/122, 0x7a) kernel console output (not intermixed with test programs): ptor read/64, error -71 [ 45.933965][ T867] 9pnet_fd: Insufficient options for proto=fd [ 45.954776][ T311] usb 2-1: device descriptor read/64, error -71 [ 46.194742][ T311] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 46.324783][ T311] usb 2-1: device descriptor read/64, error -71 [ 46.344733][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.344752][ T379] Bluetooth: hci0: command 0x1003 tx timeout [ 46.509435][ T897] fuse: Bad value for 'fd' [ 46.564729][ T311] usb 2-1: device descriptor read/64, error -71 [ 46.674867][ T311] usb usb2-port1: attempt power cycle [ 46.734762][ T399] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 46.896349][ T399] usb 1-1: unable to get BOS descriptor or descriptor too short [ 46.904484][ T399] usb 1-1: not running at top speed; connect to a high speed hub [ 46.913011][ T399] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.923159][ T399] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 46.934287][ T399] usb 1-1: string descriptor 0 read error: -22 [ 46.940559][ T399] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 46.949665][ T399] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.960050][ T399] usb 1-1: 0:2 : does not exist [ 47.014805][ T311] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 47.035932][ T311] usb 2-1: device descriptor read/8, error -71 [ 47.069607][ T911] netlink: 20 bytes leftover after parsing attributes in process `syz.3.195'. [ 47.078607][ T310] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 47.095297][ T911] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.115210][ T911] bridge_slave_0 (unregistering): left allmulticast mode [ 47.122328][ T911] bridge_slave_0 (unregistering): left promiscuous mode [ 47.134725][ T911] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.147541][ T912] netlink: 20 bytes leftover after parsing attributes in process `syz.3.195'. [ 47.166031][ T311] usb 2-1: device descriptor read/8, error -71 [ 47.246799][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.257907][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.267798][ T310] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 47.277593][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.286827][ T310] usb 3-1: config 0 descriptor?? [ 47.374613][ T399] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 47.391114][ T399] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 47.401121][ T399] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 47.412519][ T399] usb 1-1: USB disconnect, device number 12 [ 47.418575][ T311] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 47.428995][ T450] udevd[450]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.445759][ T311] usb 2-1: device descriptor read/8, error -71 [ 47.575784][ T311] usb 2-1: device descriptor read/8, error -71 [ 47.684890][ T311] usb usb2-port1: unable to enumerate USB device [ 47.699356][ T310] hid-steam 0003:28DE:1142.0009: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 47.764760][ T310] hid-steam 0003:28DE:1142.0009: Steam wireless receiver connected [ 47.775116][ T310] hid-steam 0003:28DE:1142.000A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 47.884782][ T399] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 47.900816][ T904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.911152][ T904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.921080][ T310] usb 3-1: USB disconnect, device number 12 [ 47.932604][ T310] hid-steam 0003:28DE:1142.0009: Steam wireless receiver disconnected [ 48.036013][ T399] usb 1-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 48.047375][ T399] usb 1-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.057477][ T399] usb 1-1: config 2 interface 0 has no altsetting 0 [ 48.064120][ T399] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 48.073287][ T399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.401933][ T956] syz.1.210 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 48.492005][ T399] elo 0003:04E7:0009.000B: hidraw0: USB HID vff.ff Device [HID 04e7:0009] on usb-dummy_hcd.0-1/input0 [ 48.558978][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 48.558996][ T36] audit: type=1400 audit(1777644131.630:29427): avc: denied { read } for pid=971 comm="syz.3.217" path="socket:[8279]" dev="sockfs" ino=8279 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.656674][ T36] audit: type=1400 audit(1777644131.730:29428): avc: denied { mount } for pid=974 comm="syz.1.218" name="/" dev="ramfs" ino=7932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 48.681734][ T974] cgroup: fork rejected by pids controller in /syz1 [ 48.749971][ T399] usb 1-1: USB disconnect, device number 13 [ 48.849986][ T36] audit: type=1400 audit(1777644131.920:29429): avc: denied { read } for pid=1111 comm="syz.1.220" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 48.874379][ T36] audit: type=1400 audit(1777644131.920:29430): avc: denied { open } for pid=1111 comm="syz.1.220" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 48.899426][ T36] audit: type=1400 audit(1777644131.920:29431): avc: denied { ioctl } for pid=1111 comm="syz.1.220" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 49.050153][ T36] audit: type=1400 audit(1777644132.120:29432): avc: denied { create } for pid=1128 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 49.088700][ T36] audit: type=1400 audit(1777644132.160:29433): avc: denied { write } for pid=1133 comm="syz.1.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.344780][ T311] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 49.423959][ T1148] netlink: 'syz.2.232': attribute type 46 has an invalid length. [ 49.432868][ T36] audit: type=1400 audit(1777644132.510:29434): avc: denied { ioctl } for pid=1151 comm="syz.0.234" path="cgroup:[4026532307]" dev="nsfs" ino=4026532307 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.504725][ T311] usb 2-1: Using ep0 maxpacket: 16 [ 49.512366][ T311] usb 2-1: unable to get BOS descriptor or descriptor too short [ 49.521023][ T311] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.531342][ T311] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 228, changing to 7 [ 49.542439][ T311] usb 2-1: config 1 interface 2 has no altsetting 0 [ 49.561169][ T311] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice= 0.40 [ 49.578742][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.586861][ T311] usb 2-1: Product: syz [ 49.591197][ T311] usb 2-1: Manufacturer: syz [ 49.601335][ T311] usb 2-1: SerialNumber: syz [ 49.725236][ T398] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 49.876187][ T398] usb 1-1: unable to get BOS descriptor or descriptor too short [ 49.884853][ T398] usb 1-1: config 4 has an invalid interface number: 218 but max is 0 [ 49.893082][ T398] usb 1-1: config 4 has no interface number 0 [ 49.899290][ T398] usb 1-1: config 4 interface 218 has no altsetting 0 [ 49.907566][ T398] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=88.0a [ 49.916701][ T398] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.924790][ T398] usb 1-1: Product: syz [ 49.928968][ T398] usb 1-1: Manufacturer: syz [ 49.933575][ T398] usb 1-1: SerialNumber: syz [ 50.142270][ T398] sr9700 1-1:4.218: probe with driver sr9700 failed with error -22 [ 50.151923][ T398] usb 1-1: USB disconnect, device number 14 [ 50.198538][ T1175] netlink: 92 bytes leftover after parsing attributes in process `syz.2.242'. [ 50.208080][ T36] audit: type=1400 audit(1777644133.290:29435): avc: denied { ioctl } for pid=1174 comm="syz.2.242" path="socket:[8443]" dev="sockfs" ino=8443 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.234111][ T36] audit: type=1326 audit(1777644133.300:29436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1174 comm="syz.2.242" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1b439cdd9 code=0x0 [ 50.331188][ T311] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 50.338459][ T311] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 50.345969][ T311] usb 2-1: selecting invalid altsetting 0 [ 50.358179][ T311] usb 2-1: USB disconnect, device number 14 [ 50.372326][ T450] udevd[450]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 50.994766][ T399] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 51.145400][ T399] usb 1-1: Using ep0 maxpacket: 16 [ 51.152784][ T399] usb 1-1: unable to get BOS descriptor or descriptor too short [ 51.161475][ T399] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 51.174367][ T399] usb 1-1: can't read configurations, error -71 [ 51.190006][ T1202] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=1202 comm=syz.3.251 [ 51.256001][ T1216] usb usb9: usbfs: process 1216 (syz.1.254) did not claim interface 0 before use [ 51.504718][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 51.689970][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 51.701257][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 95, changing to 7 [ 51.726117][ T9] usb 2-1: New USB device found, idVendor=0499, idProduct=1042, bcdDevice= 0.40 [ 51.735396][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.743438][ T9] usb 2-1: Product: syz [ 51.759559][ T9] usb 2-1: Manufacturer: syz [ 51.764222][ T9] usb 2-1: SerialNumber: syz [ 52.005465][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 52.016478][ T9] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 52.030092][ T9] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 52.040501][ T9] usb 2-1: USB disconnect, device number 15 [ 52.058451][ T450] udevd[450]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.214791][ T399] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 52.382157][ T399] usb 1-1: unable to get BOS descriptor or descriptor too short [ 52.390508][ T399] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 52.398877][ T399] usb 1-1: can't read configurations, error -71 [ 52.405472][ T399] usb usb1-port1: attempt power cycle [ 53.444702][ T399] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 53.464918][ T398] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 53.475557][ T399] usb 1-1: device descriptor read/8, error -71 [ 53.605932][ T399] usb 1-1: device descriptor read/8, error -71 [ 53.617752][ T398] usb 3-1: unable to get BOS descriptor or descriptor too short [ 53.626087][ T398] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 53.633688][ T398] usb 3-1: can't read configurations, error -71 [ 53.714720][ T311] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 53.844761][ T399] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 53.866033][ T399] usb 1-1: device descriptor read/8, error -71 [ 53.866037][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.866070][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.893238][ T311] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 53.906156][ T311] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 53.915255][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.923950][ T311] usb 2-1: config 0 descriptor?? [ 53.995897][ T399] usb 1-1: device descriptor read/8, error -71 [ 54.104862][ T399] usb usb1-port1: unable to enumerate USB device [ 54.143208][ T1289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.152610][ T1289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.176894][ T1294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.185676][ T1294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.331474][ T311] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 54.340774][ T311] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 54.464715][ T398] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 54.615912][ T398] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 54.627038][ T398] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 54.639601][ T398] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 54.648771][ T398] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.656837][ T398] usb 3-1: Product: syz [ 54.661070][ T398] usb 3-1: Manufacturer: syz [ 54.666396][ T398] usb 3-1: SerialNumber: syz [ 54.671797][ T398] usb 3-1: config 0 descriptor?? [ 54.677840][ T1293] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 54.686943][ T398] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 54.693449][ T398] usb 3-1: No valid video chain found. [ 54.745387][ T1286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.754218][ T1298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.754548][ T1286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.767437][ T1298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.392647][ T9] usb 3-1: USB disconnect, device number 14 [ 55.434224][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 55.434243][ T36] audit: type=1400 audit(1777644138.500:29445): avc: denied { block_suspend } for pid=1301 comm="syz.2.289" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 55.864756][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 56.016344][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 56.024958][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 56.037585][ T9] usb 3-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 56.046798][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.054839][ T9] usb 3-1: Product: syz [ 56.059061][ T9] usb 3-1: Manufacturer: syz [ 56.063677][ T9] usb 3-1: SerialNumber: syz [ 56.296433][ T9] usb 3-1: USB disconnect, device number 15 [ 56.644690][ T399] usb 2-1: reset high-speed USB device number 16 using dummy_hcd [ 56.795133][ T399] usb 2-1: device firmware changed [ 56.815918][ T398] usb 2-1: USB disconnect, device number 16 [ 56.974694][ T398] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 57.147598][ T398] usb 2-1: unable to get BOS descriptor or descriptor too short [ 57.157159][ T398] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 57.165166][ T398] usb 2-1: can't read configurations, error -71 [ 57.264717][ T310] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 57.314770][ T495] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 57.414767][ T310] usb 3-1: Using ep0 maxpacket: 8 [ 57.420993][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.431978][ T310] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 57.444931][ T310] usb 3-1: New USB device found, idVendor=f06a, idProduct=4fff, bcdDevice= 0.00 [ 57.454040][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.462875][ T310] usb 3-1: config 0 descriptor?? [ 57.470402][ T495] usb 1-1: unable to get BOS descriptor or descriptor too short [ 57.478592][ T495] usb 1-1: not running at top speed; connect to a high speed hub [ 57.487196][ T495] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 57.499781][ T495] usb 1-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 57.509019][ T495] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.517159][ T495] usb 1-1: Product: syz [ 57.521369][ T495] usb 1-1: Manufacturer: syz [ 57.526207][ T495] usb 1-1: SerialNumber: syz [ 57.793751][ T495] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 57.802347][ T495] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 57.810400][ T495] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 57.818879][ T495] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 57.827859][ T495] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 57.838052][ T495] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 57.846582][ T495] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 57.854548][ T495] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 57.863037][ T495] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 57.875742][ T495] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 57.885710][ T310] hid-generic 0003:F06A:4FFF.000D: ignoring exceeding usage max [ 57.894453][ T495] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 57.894962][ T36] audit: type=1400 audit(1777644140.960:29446): avc: denied { open } for pid=1331 comm="syz.1.301" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9641 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 57.910323][ T310] hid-generic 0003:F06A:4FFF.000D: unknown main item tag 0x0 [ 57.935003][ T495] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 57.942981][ T495] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 57.951563][ T495] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 57.960038][ T310] hid-generic 0003:F06A:4FFF.000D: unknown main item tag 0x0 [ 57.967805][ T310] hid-generic 0003:F06A:4FFF.000D: unknown main item tag 0x0 [ 57.975370][ T310] hid-generic 0003:F06A:4FFF.000D: unknown main item tag 0x0 [ 57.982867][ T310] hid-generic 0003:F06A:4FFF.000D: unknown main item tag 0x0 [ 57.990984][ T310] hid-generic 0003:F06A:4FFF.000D: unknown main item tag 0x0 [ 57.999120][ T310] hid-generic 0003:F06A:4FFF.000D: unknown main item tag 0x0 [ 58.006983][ T310] hid-generic 0003:F06A:4FFF.000D: unknown main item tag 0x0 [ 58.014807][ T310] hid-generic 0003:F06A:4FFF.000D: unknown main item tag 0x0 [ 58.022985][ T495] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 58.032937][ T495] usb 1-1: USB disconnect, device number 19 [ 58.039144][ T310] hid-generic 0003:F06A:4FFF.000D: unknown main item tag 0x0 [ 58.047080][ T310] hid-generic 0003:F06A:4FFF.000D: unknown main item tag 0x0 [ 58.054581][ T310] hid-generic 0003:F06A:4FFF.000D: unknown main item tag 0x0 [ 58.062244][ T310] hid-generic 0003:F06A:4FFF.000D: unknown main item tag 0x0 [ 58.065353][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.070807][ T310] hid-generic 0003:F06A:4FFF.000D: unknown main item tag 0x0 [ 58.094306][ T310] hid-generic 0003:F06A:4FFF.000D: unknown main item tag 0x0 [ 58.102452][ T310] hid-generic 0003:F06A:4FFF.000D: unknown main item tag 0x0 [ 58.110339][ T310] hid-generic 0003:F06A:4FFF.000D: unknown main item tag 0x0 [ 58.117823][ T310] hid-generic 0003:F06A:4FFF.000D: unknown main item tag 0x0 [ 58.125506][ T310] hid-generic 0003:F06A:4FFF.000D: unknown main item tag 0x0 [ 58.132945][ T310] hid-generic 0003:F06A:4FFF.000D: unknown main item tag 0x0 [ 58.140503][ T310] hid-generic 0003:F06A:4FFF.000D: unknown main item tag 0x0 [ 58.148069][ T310] hid-generic 0003:F06A:4FFF.000D: unknown main item tag 0x0 [ 58.155507][ T310] hid-generic 0003:F06A:4FFF.000D: unknown main item tag 0x0 [ 58.162940][ T310] hid-generic 0003:F06A:4FFF.000D: unknown main item tag 0x0 [ 58.170441][ T310] hid-generic 0003:F06A:4FFF.000D: unknown main item tag 0x0 [ 58.177943][ T310] hid-generic 0003:F06A:4FFF.000D: unknown main item tag 0x0 [ 58.185441][ T310] hid-generic 0003:F06A:4FFF.000D: unknown main item tag 0x0 [ 58.192954][ T310] hid-generic 0003:F06A:4FFF.000D: unknown main item tag 0x0 [ 58.200487][ T310] hid-generic 0003:F06A:4FFF.000D: unknown main item tag 0x0 [ 58.207950][ T310] hid-generic 0003:F06A:4FFF.000D: unknown main item tag 0x0 [ 58.215788][ T310] hid-generic 0003:F06A:4FFF.000D: unknown main item tag 0x0 [ 58.223580][ T310] hid-generic 0003:F06A:4FFF.000D: unknown main item tag 0x0 [ 58.231282][ T310] hid-generic 0003:F06A:4FFF.000D: unknown main item tag 0x0 [ 58.239822][ T310] hid-generic 0003:F06A:4FFF.000D: hidraw0: USB HID v0.04 Device [HID f06a:4fff] on usb-dummy_hcd.2-1/input0 [ 58.253722][ T310] usb 3-1: USB disconnect, device number 16 [ 58.269231][ T1343] fido_id[1343]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 58.343970][ T1345] fuse: Bad value for 'fd' [ 58.924750][ T495] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 59.089754][ T495] usb 2-1: unable to get BOS descriptor or descriptor too short [ 59.098351][ T495] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 59.106768][ T495] usb 2-1: can't read configurations, error -71 [ 59.292864][ T1363] bridge0: port 1(erspan0) entered blocking state [ 59.299536][ T1363] bridge0: port 1(erspan0) entered disabled state [ 59.306282][ T1363] erspan0: entered allmulticast mode [ 59.312111][ T1363] erspan0: entered promiscuous mode [ 59.317570][ T1363] bridge0: port 1(erspan0) entered blocking state [ 59.324044][ T1363] bridge0: port 1(erspan0) entered forwarding state [ 59.331743][ T1363] erspan0: left allmulticast mode [ 59.336876][ T1363] erspan0: left promiscuous mode [ 59.341932][ T1363] bridge0: port 1(erspan0) entered disabled state [ 59.510773][ T36] audit: type=1400 audit(1777644142.580:29447): avc: denied { listen } for pid=1375 comm="syz.2.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 59.694792][ T66] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 59.804748][ T399] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 59.883159][ T66] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 59.914706][ T66] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 59.925787][ T66] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 59.937215][ T66] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 59.946341][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.955753][ T1371] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 59.985828][ T399] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 59.993920][ T399] usb 3-1: config 0 has no interface number 0 [ 60.000370][ T399] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 60.011869][ T399] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.022118][ T399] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.035389][ T399] usb 3-1: config 0 interface 1 has no altsetting 0 [ 60.042089][ T399] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 60.051556][ T399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.060948][ T399] usb 3-1: config 0 descriptor?? [ 60.471757][ T1380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.493696][ T1380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.708289][ T36] audit: type=1400 audit(1777644143.780:29448): avc: denied { getopt } for pid=1379 comm="syz.2.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.776194][ T399] usbhid 3-1:0.1: can't add hid device: -71 [ 60.783498][ T399] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 60.792601][ T399] usb 3-1: USB disconnect, device number 17 [ 61.594737][ T310] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 61.644738][ T495] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 61.745951][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.756954][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.766777][ T310] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 61.775953][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.785446][ T310] usb 3-1: config 0 descriptor?? [ 61.798504][ T495] usb 2-1: unable to get BOS descriptor or descriptor too short [ 61.807958][ T495] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 61.815624][ T495] usb 2-1: can't read configurations, error -71 [ 61.992435][ T310] usbhid 3-1:0.0: can't add hid device: -71 [ 61.998500][ T310] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 62.007401][ T310] usb 3-1: USB disconnect, device number 18 [ 62.350458][ T36] audit: type=1400 audit(1777644145.420:29449): avc: denied { remount } for pid=1418 comm="syz.3.333" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.434687][ T310] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 62.595977][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.607302][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.618490][ T310] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 62.627850][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.637686][ T310] usb 3-1: config 0 descriptor?? [ 63.044990][ T310] usbhid 3-1:0.0: can't add hid device: -71 [ 63.051440][ T310] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 63.060312][ T310] usb 3-1: USB disconnect, device number 19 [ 63.404689][ T399] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 63.558958][ T399] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 63.570879][ T399] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 63.584244][ T399] usb 2-1: New USB device found, idVendor=2006, idProduct=2bc2, bcdDevice= 0.00 [ 63.593608][ T399] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.604200][ T399] usb 2-1: config 0 descriptor?? [ 63.619874][ T1426] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 63.835217][ T36] audit: type=1400 audit(1777644146.910:29450): avc: denied { ioctl } for pid=1438 comm="syz.2.339" path="socket:[10116]" dev="sockfs" ino=10116 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 63.860681][ T36] audit: type=1326 audit(1777644146.910:29451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1438 comm="syz.2.339" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1b439cdd9 code=0x0 [ 64.063096][ T66] aiptek 1-1:17.0: Aiptek tried all speeds, no sane response [ 64.070773][ T66] aiptek 1-1:17.0: probe with driver aiptek failed with error -22 [ 64.080949][ T66] usb 1-1: USB disconnect, device number 20 [ 64.434744][ T66] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 64.586104][ T66] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 253, changing to 7 [ 64.597208][ T66] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 142, changing to 7 [ 64.610037][ T66] usb 1-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 64.619170][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.627203][ T66] usb 1-1: Product: syz [ 64.631395][ T66] usb 1-1: Manufacturer: syz [ 64.636049][ T66] usb 1-1: SerialNumber: syz [ 64.679247][ T36] audit: type=1400 audit(1777644147.750:29452): avc: denied { setopt } for pid=1451 comm="syz.2.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.701308][ T1452] netlink: 'syz.2.344': attribute type 13 has an invalid length. [ 64.741684][ T1458] input: syz0 as /devices/virtual/input/input6 [ 64.748718][ T36] audit: type=1400 audit(1777644147.820:29453): avc: denied { read } for pid=96 comm="acpid" name="event3" dev="devtmpfs" ino=563 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.779205][ T36] audit: type=1400 audit(1777644147.820:29454): avc: denied { open } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=563 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.802839][ T36] audit: type=1400 audit(1777644147.820:29455): avc: denied { ioctl } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=563 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.845583][ T66] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 64.856929][ T66] usb 1-1: USB disconnect, device number 21 [ 65.064771][ T399] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 65.216032][ T399] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 65.227167][ T399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 65.238213][ T399] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 65.251250][ T399] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 65.260356][ T399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.269177][ T399] usb 3-1: config 0 descriptor?? [ 65.479323][ T36] audit: type=1400 audit(1777644148.550:29456): avc: denied { bind } for pid=1457 comm="syz.2.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 65.498875][ T36] audit: type=1400 audit(1777644148.550:29457): avc: denied { listen } for pid=1457 comm="syz.2.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 65.530017][ T1457] cgroup: fork rejected by pids controller in /syz2 [ 65.574820][ T399] usbhid 3-1:0.0: can't add hid device: -71 [ 65.582286][ T399] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 65.592716][ T399] usb 3-1: USB disconnect, device number 20 [ 65.826543][ T12] bridge_slave_1: left allmulticast mode [ 65.832261][ T12] bridge_slave_1: left promiscuous mode [ 65.838238][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.846178][ T12] bridge_slave_0: left allmulticast mode [ 65.851888][ T12] bridge_slave_0: left promiscuous mode [ 65.857886][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.941084][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 65.941105][ T36] audit: type=1400 audit(1777644149.010:29461): avc: denied { mounton } for pid=1576 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 66.041891][ T1576] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.049049][ T1576] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.056282][ T1576] bridge_slave_0: entered allmulticast mode [ 66.062727][ T1576] bridge_slave_0: entered promiscuous mode [ 66.069759][ T1576] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.076910][ T1576] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.084008][ T1576] bridge_slave_1: entered allmulticast mode [ 66.090477][ T1576] bridge_slave_1: entered promiscuous mode [ 66.096685][ T12] tipc: Left network mode [ 66.106977][ T12] veth1_macvtap: left promiscuous mode [ 66.114731][ T495] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 66.170008][ T9] usb 2-1: USB disconnect, device number 23 [ 66.229305][ T1576] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.236446][ T1576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.243737][ T1576] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.250844][ T1576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.275854][ T495] usb 1-1: unable to get BOS descriptor or descriptor too short [ 66.284333][ T495] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 66.292610][ T327] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.300712][ T495] usb 1-1: can't read configurations, error -71 [ 66.300852][ T327] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.317184][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.324335][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.333442][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.340555][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.368100][ T1576] veth0_vlan: entered promiscuous mode [ 66.381158][ T1576] veth1_macvtap: entered promiscuous mode [ 66.405544][ T36] audit: type=1400 audit(1777644149.480:29462): avc: denied { mounton } for pid=1576 comm="syz-executor" path="/root/syzkaller.aT0Uo6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 66.517534][ T1592] 9pnet_fd: Insufficient options for proto=fd [ 66.553333][ T36] audit: type=1400 audit(1777644149.620:29463): avc: denied { read write } for pid=1595 comm="syz.2.358" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 66.577041][ T36] audit: type=1400 audit(1777644149.620:29464): avc: denied { open } for pid=1595 comm="syz.2.358" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 66.601161][ T36] audit: type=1400 audit(1777644149.650:29465): avc: denied { map } for pid=1595 comm="syz.2.358" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 66.631903][ T36] audit: type=1400 audit(1777644149.650:29466): avc: denied { execute } for pid=1595 comm="syz.2.358" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 66.664436][ T36] audit: type=1400 audit(1777644149.650:29467): avc: denied { create } for pid=1595 comm="syz.2.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 66.844854][ T36] audit: type=1400 audit(1777644149.910:29468): avc: denied { bind } for pid=1599 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.914132][ T1604] netlink: 'syz.0.360': attribute type 29 has an invalid length. [ 66.930776][ T1604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.360'. [ 67.060342][ T1607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.361'. [ 67.079941][ T1607] bridge_slave_1: left allmulticast mode [ 67.099582][ T1607] bridge_slave_1: left promiscuous mode [ 67.116739][ T1607] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.137670][ T1607] bridge_slave_0: left allmulticast mode [ 67.143404][ T1607] bridge_slave_0: left promiscuous mode [ 67.162440][ T1607] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.246451][ T1611] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 67.253324][ T36] audit: type=1400 audit(1777644150.320:29469): avc: denied { mounton } for pid=1609 comm="syz.1.362" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 67.364304][ T1615] netlink: 20 bytes leftover after parsing attributes in process `syz.0.363'. [ 67.384339][ T1615] netlink: 20 bytes leftover after parsing attributes in process `syz.0.363'. [ 67.674740][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 67.674740][ T495] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 67.748990][ T1625] veth0_vlan: entered allmulticast mode [ 67.755221][ T1625] veth0_vlan: left allmulticast mode [ 67.771344][ T36] audit: type=1400 audit(1777644150.840:29470): avc: denied { write } for pid=1626 comm="syz.3.369" path="socket:[10750]" dev="sockfs" ino=10750 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.824742][ T495] usb 2-1: Using ep0 maxpacket: 32 [ 67.831253][ T495] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.843086][ T495] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.848431][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 67.855419][ T495] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 67.861759][ T1633] netlink: 'syz.3.372': attribute type 14 has an invalid length. [ 67.874754][ T495] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 67.879494][ T9] usb 1-1: config 151 has an invalid interface number: 203 but max is 2 [ 67.883872][ T495] usb 2-1: Product: syz [ 67.896403][ T495] usb 2-1: Manufacturer: syz [ 67.901782][ T9] usb 1-1: config 151 contains an unexpected descriptor of type 0x1, skipping [ 67.907739][ T495] hub 2-1:4.0: USB hub found [ 67.917965][ T9] usb 1-1: config 151 has an invalid interface number: 43 but max is 2 [ 67.926567][ T9] usb 1-1: config 151 has an invalid interface number: 81 but max is 2 [ 67.934929][ T9] usb 1-1: config 151 has an invalid interface number: 8 but max is 2 [ 67.944729][ T9] usb 1-1: config 151 has 4 interfaces, different from the descriptor's value: 3 [ 67.953941][ T9] usb 1-1: config 151 has no interface number 0 [ 67.960273][ T9] usb 1-1: config 151 has no interface number 1 [ 67.966605][ T9] usb 1-1: config 151 has no interface number 2 [ 67.972908][ T9] usb 1-1: config 151 has no interface number 3 [ 67.984761][ T9] usb 1-1: config 151 interface 203 altsetting 128 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 68.014844][ T9] usb 1-1: config 151 interface 203 altsetting 128 has a duplicate endpoint with address 0x9, skipping [ 68.027780][ T9] usb 1-1: config 151 interface 203 altsetting 128 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 68.040015][ T9] usb 1-1: config 151 interface 203 altsetting 128 endpoint 0x5 has an invalid bInterval 146, changing to 7 [ 68.052216][ T9] usb 1-1: config 151 interface 203 altsetting 128 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 68.063936][ T9] usb 1-1: config 151 interface 203 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 68.090271][ T9] usb 1-1: config 151 interface 203 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 68.102072][ T9] usb 1-1: config 151 interface 203 altsetting 128 has a duplicate endpoint with address 0x5, skipping [ 68.111924][ T1621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.123415][ T1621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.134060][ T9] usb 1-1: config 151 interface 203 altsetting 128 has 10 endpoint descriptors, different from the interface descriptor's value: 16 [ 68.157795][ T495] hub 2-1:4.0: 7 ports detected [ 68.162778][ T9] usb 1-1: config 151 interface 43 altsetting 56 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 68.163155][ T495] hub 2-1:4.0: insufficient power available to use all downstream ports [ 68.185729][ T9] usb 1-1: config 151 interface 43 altsetting 56 bulk endpoint 0x3 has invalid maxpacket 64 [ 68.195916][ T9] usb 1-1: config 151 interface 43 altsetting 56 has a duplicate endpoint with address 0xC, skipping [ 68.206875][ T9] usb 1-1: config 151 interface 43 altsetting 56 has a duplicate endpoint with address 0xC, skipping [ 68.218160][ T9] usb 1-1: config 151 interface 43 altsetting 56 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 68.231628][ T9] usb 1-1: config 151 interface 81 altsetting 101 has a duplicate endpoint with address 0x4, skipping [ 68.243287][ T9] usb 1-1: config 151 interface 81 altsetting 101 has an endpoint descriptor with address 0x7E, changing to 0xE [ 68.255236][ T9] usb 1-1: config 151 interface 81 altsetting 101 has a duplicate endpoint with address 0xE, skipping [ 68.267219][ T9] usb 1-1: config 151 interface 8 altsetting 8 endpoint 0xA has invalid maxpacket 1967, setting to 64 [ 68.278281][ T9] usb 1-1: config 151 interface 8 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 68.290766][ T9] usb 1-1: config 151 interface 8 altsetting 8 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 68.301869][ T9] usb 1-1: config 151 interface 8 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 68.312689][ T9] usb 1-1: config 151 interface 8 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 68.323706][ T9] usb 1-1: config 151 interface 8 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 68.334854][ T9] usb 1-1: config 151 interface 8 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 68.347520][ T9] usb 1-1: config 151 interface 8 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 68.354929][ T398] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 68.360456][ T9] usb 1-1: config 151 interface 203 has no altsetting 0 [ 68.373760][ T9] usb 1-1: config 151 interface 43 has no altsetting 0 [ 68.388324][ T9] usb 1-1: config 151 interface 81 has no altsetting 0 [ 68.395572][ T9] usb 1-1: config 151 interface 8 has no altsetting 0 [ 68.405863][ T9] usb 1-1: New USB device found, idVendor=0789, idProduct=016b, bcdDevice=32.96 [ 68.414994][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.423024][ T9] usb 1-1: Product: 徏磪㾎᫘쓜婿鼸⏈䃲癕녣齿ⱄ䘹 [ 68.432368][ T9] usb 1-1: Manufacturer: ဌ [ 68.437174][ T9] usb 1-1: SerialNumber: 堬ꋗ裌舊㷙坳텢張餹꣭堹⛴磑鿯嬙⑃㞪ﺔ臟 [ 68.489473][ T1658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.381'. [ 68.498994][ T1658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1658 comm=syz.3.381 [ 68.514711][ T398] usb 3-1: Using ep0 maxpacket: 16 [ 68.521278][ T398] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 68.530434][ T398] usb 3-1: config 0 has no interface number 0 [ 68.536794][ T398] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 68.547127][ T398] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 68.559542][ T398] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 68.569380][ T495] hub 2-1:4.0: set hub depth failed [ 68.576093][ T398] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.584227][ T398] usb 3-1: Product: syz [ 68.589432][ T398] usb 3-1: Manufacturer: syz [ 68.594431][ T398] usb 3-1: SerialNumber: syz [ 68.601429][ T495] usb 2-1: USB disconnect, device number 24 [ 68.615371][ T398] usb 3-1: config 0 descriptor?? [ 68.622194][ T1639] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 68.629468][ T1639] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 68.662482][ T9] usb 1-1: USB disconnect, device number 24 [ 68.839178][ T1639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.848243][ T1639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.856806][ T1639] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 68.864074][ T1639] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 69.277525][ T1684] netlink: 'syz.0.391': attribute type 13 has an invalid length. [ 69.285851][ T1684] erspan0: refused to change device tx_queue_len [ 69.444756][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 69.524731][ T399] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 69.574733][ T9] usb 2-1: device descriptor read/64, error -71 [ 69.683363][ T399] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 69.694768][ T399] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 69.713212][ T399] usb 1-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 69.723220][ T399] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.731314][ T399] usb 1-1: Product: syz [ 69.735580][ T399] usb 1-1: Manufacturer: syz [ 69.740538][ T399] usb 1-1: SerialNumber: syz [ 69.834739][ T9] usb 2-1: device descriptor read/64, error -71 [ 69.872156][ T1690] cgroup: fork rejected by pids controller in /syz3 [ 70.066102][ T399] usb 1-1: Can't get UAC3 power state for id 10 [ 70.094725][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 70.142910][ T399] usb 1-1: BAAD MICROPHONE c_chmask mismatch [ 70.275528][ T399] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 70.344737][ T9] usb 2-1: device descriptor read/64, error -71 [ 70.432183][ T399] usb 1-1: USB disconnect, device number 25 [ 70.516517][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 70.644949][ T9] usb 2-1: device descriptor read/64, error -71 [ 70.797471][ T9] usb usb2-port1: attempt power cycle [ 70.964690][ T399] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 71.103550][ T398] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 71.120718][ T398] asix 3-1:0.34: probe with driver asix failed with error -71 [ 71.133593][ T398] usb 3-1: USB disconnect, device number 21 [ 71.164704][ T399] usb 1-1: device descriptor read/64, error -71 [ 71.181075][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 71.269779][ T9] usb 2-1: device descriptor read/8, error -71 [ 71.474707][ T399] usb 1-1: device descriptor read/64, error -71 [ 71.483877][ T9] usb 2-1: device descriptor read/8, error -71 [ 71.494699][ T398] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 71.694696][ T398] usb 3-1: Using ep0 maxpacket: 16 [ 71.745089][ T398] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 71.774744][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 71.782448][ T399] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 71.783950][ T398] usb 3-1: config 0 has no interface number 0 [ 71.827219][ T398] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 71.865383][ T9] usb 2-1: device descriptor read/8, error -71 [ 71.880154][ T398] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 71.933566][ T399] usb 1-1: device descriptor read/64, error -71 [ 71.964272][ T398] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 72.016249][ T398] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.021356][ T9] usb 2-1: device descriptor read/8, error -71 [ 72.142668][ T398] usb 3-1: Product: syz [ 72.172941][ T398] usb 3-1: Manufacturer: syz [ 72.214789][ T399] usb 1-1: device descriptor read/64, error -71 [ 72.229342][ T398] usb 3-1: SerialNumber: syz [ 72.234462][ T9] usb usb2-port1: unable to enumerate USB device [ 72.358239][ T398] usb 3-1: config 0 descriptor?? [ 72.363568][ T1771] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 72.417930][ T1771] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 72.444798][ T399] usb usb1-port1: attempt power cycle [ 72.767447][ T1771] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 72.824725][ T1771] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 72.864697][ T399] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 72.895741][ T399] usb 1-1: device descriptor read/8, error -71 [ 73.003019][ T1701] syz.3.393 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 73.056863][ T399] usb 1-1: device descriptor read/8, error -71 [ 73.123467][ T1701] CPU: 0 UID: 0 PID: 1701 Comm: syz.3.393 Not tainted syzkaller #0 d565f8e62ca0f8d2896f396c8c30e8edd87d2a0f [ 73.123512][ T1701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 73.123529][ T1701] Call Trace: [ 73.123537][ T1701] [ 73.123546][ T1701] __dump_stack+0x21/0x30 [ 73.123593][ T1701] dump_stack_lvl+0x140/0x1c0 [ 73.123633][ T1701] ? __cfi_dump_stack_lvl+0x10/0x10 [ 73.123665][ T1701] ? ___ratelimit+0x40e/0x5b0 [ 73.123699][ T1701] dump_stack+0x19/0x20 [ 73.123729][ T1701] dump_header+0xd6/0x490 [ 73.123757][ T1701] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 73.123787][ T1701] oom_kill_process+0x35d/0x640 [ 73.123811][ T1701] out_of_memory+0x624/0xa30 [ 73.123835][ T1701] ? __cfi_out_of_memory+0x10/0x10 [ 73.123857][ T1701] ? mutex_lock_killable+0x97/0x1d0 [ 73.123892][ T1701] ? __cfi_mutex_lock_killable+0x10/0x10 [ 73.123930][ T1701] mem_cgroup_out_of_memory+0x2c8/0x390 [ 73.123966][ T1701] ? css_next_descendant_pre+0x202/0x230 [ 73.123994][ T1701] ? drain_obj_stock+0xed0/0xed0 [ 73.124031][ T1701] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 73.124067][ T1701] try_charge_memcg+0x91c/0xe10 [ 73.124098][ T1701] ? __cfi_try_charge_memcg+0x10/0x10 [ 73.124128][ T1701] ? __alloc_pages_noprof+0x35f/0x7e0 [ 73.124158][ T1701] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 73.124188][ T1701] __mem_cgroup_charge+0xfc/0x420 [ 73.124219][ T1701] ? folio_add_lru+0x116/0x400 [ 73.124245][ T1701] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 73.124279][ T1701] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 73.124308][ T1701] ? put_swap_device+0x130/0x130 [ 73.124332][ T1701] ? shmem_huge_global_enabled+0x2da/0x360 [ 73.124370][ T1701] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 73.124408][ T1701] ? __kasan_check_write+0x18/0x20 [ 73.124442][ T1701] ? _raw_spin_lock+0x92/0x120 [ 73.124471][ T1701] shmem_get_folio_gfp+0x607/0x1390 [ 73.124510][ T1701] ? shmem_get_folio+0xc0/0xc0 [ 73.124544][ T1701] ? follow_page_pte+0x90f/0xbc0 [ 73.124573][ T1701] ? inode_to_bdi+0x6d/0x100 [ 73.124602][ T1701] shmem_write_begin+0xf4/0x270 [ 73.124636][ T1701] generic_perform_write+0x328/0x970 [ 73.124666][ T1701] ? __cfi_generic_perform_write+0x10/0x10 [ 73.124694][ T1701] ? down_write+0xee/0x2b0 [ 73.124715][ T1701] ? file_update_time+0xa3/0x210 [ 73.124745][ T1701] shmem_file_write_iter+0x105/0x130 [ 73.124773][ T1701] __kernel_write_iter+0x42f/0x8a0 [ 73.124808][ T1701] ? __cfi___kernel_write_iter+0x10/0x10 [ 73.124841][ T1701] ? get_dump_page+0x165/0x220 [ 73.124866][ T1701] ? __asan_memset+0x39/0x50 [ 73.124909][ T1701] ? iov_iter_bvec+0xc0/0x180 [ 73.124931][ T1701] dump_user_range+0xb8b/0xe60 [ 73.124966][ T1701] ? __cfi_dump_user_range+0x10/0x10 [ 73.124999][ T1701] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 73.125033][ T1701] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 73.125065][ T1701] ? elf_core_dump+0x24c0/0x3960 [ 73.125090][ T1701] elf_core_dump+0x2e7e/0x3960 [ 73.125117][ T1701] ? __cfi_elf_core_dump+0x10/0x10 [ 73.125148][ T1701] ? dump_interrupted+0xf0/0xf0 [ 73.125179][ T1701] ? filp_open+0x199/0x1f0 [ 73.125223][ T1701] ? 0xffffffffff600000 [ 73.125269][ T1701] do_coredump+0x208d/0x2fe0 [ 73.125305][ T1701] ? __cfi_do_coredump+0x10/0x10 [ 73.125337][ T1701] ? asm_exc_page_fault+0x2b/0x30 [ 73.125373][ T1701] ? __kasan_slab_free+0x6a/0x80 [ 73.125397][ T1701] ? kmem_cache_free+0x1bd/0x4f0 [ 73.125432][ T1701] ? get_signal+0xa74/0x14e0 [ 73.125462][ T1701] get_signal+0x11f8/0x14e0 [ 73.125494][ T1701] arch_do_signal_or_restart+0xbc/0x760 [ 73.125530][ T1701] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 73.125569][ T1701] ? __kasan_check_write+0x18/0x20 [ 73.125602][ T1701] irqentry_exit_to_user_mode+0x4d/0xb0 [ 73.125631][ T1701] irqentry_exit+0x16/0x60 [ 73.125652][ T1701] exc_page_fault+0x65/0xc0 [ 73.125686][ T1701] asm_exc_page_fault+0x2b/0x30 [ 73.125714][ T1701] RIP: 0033:0x7f705ff9cdd9 [ 73.125739][ T1701] Code: Unable to access opcode bytes at 0x7f705ff9cdaf. [ 73.125752][ T1701] RSP: 002b:000000000000ffd0 EFLAGS: 00010206 [ 73.125773][ T1701] RAX: 0000000000000000 RBX: 00007f7060216090 RCX: 00007f705ff9cdd9 [ 73.125791][ T1701] RDX: 0000000000000000 RSI: 000000000000ffd0 RDI: 0000000000002000 [ 73.125806][ T1701] RBP: 00007f7060032d69 R08: 0000000000000000 R09: 0000000000000000 [ 73.125822][ T1701] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 73.125837][ T1701] R13: 00007f7060216128 R14: 00007f7060216090 R15: 00007ffc32491808 [ 73.125858][ T1701] [ 73.621634][ T1701] memory: usage 307200kB, limit 307200kB, failcnt 22822 [ 73.628737][ T1701] memory+swap: usage 426408kB, limit 9007199254740988kB, failcnt 0 [ 73.637080][ T1701] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 73.644065][ T1701] Memory cgroup stats for /syz3: [ 73.644264][ T1701] cache 314294272 [ 73.653424][ T1701] rss 176128 [ 73.656977][ T1701] rss_huge 0 [ 73.660442][ T1701] shmem 314130432 [ 73.664274][ T1701] mapped_file 126976 [ 73.668612][ T1701] dirty 0 [ 73.671697][ T1701] writeback 0 [ 73.675331][ T1701] workingset_refault_anon 5 [ 73.679897][ T1701] workingset_refault_file 2104 [ 73.684727][ T1701] swap 122068992 [ 73.688391][ T1701] swapcached 102400 [ 73.692226][ T1701] pgpgin 147892 [ 73.695765][ T1701] pgpgout 71092 [ 73.699249][ T1701] pgfault 30490 [ 73.702736][ T1701] pgmajfault 105 [ 73.706547][ T1701] inactive_anon 306200576 [ 73.710934][ T1701] active_anon 8208384 [ 73.715033][ T1701] inactive_file 20480 [ 73.719195][ T1701] active_file 4096 [ 73.722954][ T1701] unevictable 0 [ 73.726471][ T1701] hierarchical_memory_limit 314572800 [ 73.731866][ T1701] hierarchical_memsw_limit 9223372036854771712 [ 73.738078][ T1701] total_cache 314294272 [ 73.742264][ T1701] total_rss 176128 [ 73.746047][ T1701] total_rss_huge 0 [ 73.749796][ T1701] total_shmem 314130432 [ 73.753978][ T1701] total_mapped_file 126976 [ 73.758509][ T1701] total_dirty 0 [ 73.762005][ T1701] total_writeback 0 [ 73.765878][ T1701] total_workingset_refault_anon 5 [ 73.770933][ T1701] total_workingset_refault_file 2104 [ 73.776291][ T1701] total_swap 122068992 [ 73.780393][ T1701] total_swapcached 102400 [ 73.784776][ T1701] total_pgpgin 147892 [ 73.788828][ T1701] total_pgpgout 71092 [ 73.792842][ T1701] total_pgfault 30490 [ 73.796934][ T1701] total_pgmajfault 105 [ 73.801042][ T1701] total_inactive_anon 306200576 [ 73.805950][ T1701] total_active_anon 8208384 [ 73.810516][ T1701] total_inactive_file 20480 [ 73.815099][ T1701] total_active_file 4096 [ 73.819370][ T1701] total_unevictable 0 [ 73.823500][ T1701] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.403,pid=1785,uid=0 [ 73.838361][ T1701] Memory cgroup out of memory: Killed process 1785 (syz.3.403) total-vm:94084kB, anon-rss:1352kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:0 [ 73.958486][ T1800] 9pnet_virtio: no channels available for device 127.0.0.1 [ 74.024129][ T1706] syz.3.393 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 74.094252][ T1706] CPU: 1 UID: 0 PID: 1706 Comm: syz.3.393 Not tainted syzkaller #0 d565f8e62ca0f8d2896f396c8c30e8edd87d2a0f [ 74.094303][ T1706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 74.094319][ T1706] Call Trace: [ 74.094327][ T1706] [ 74.094336][ T1706] __dump_stack+0x21/0x30 [ 74.094372][ T1706] dump_stack_lvl+0x140/0x1c0 [ 74.094401][ T1706] ? __cfi_dump_stack_lvl+0x10/0x10 [ 74.094431][ T1706] ? ___ratelimit+0x40e/0x5b0 [ 74.094464][ T1706] dump_stack+0x19/0x20 [ 74.094492][ T1706] dump_header+0xd6/0x490 [ 74.094519][ T1706] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 74.094546][ T1706] oom_kill_process+0x35d/0x640 [ 74.094570][ T1706] out_of_memory+0x624/0xa30 [ 74.094592][ T1706] ? __cfi_out_of_memory+0x10/0x10 [ 74.094614][ T1706] ? mutex_lock_killable+0x115/0x1d0 [ 74.094647][ T1706] ? __cfi_mutex_lock_killable+0x10/0x10 [ 74.094683][ T1706] mem_cgroup_out_of_memory+0x2c8/0x390 [ 74.094716][ T1706] ? css_next_descendant_pre+0x202/0x230 [ 74.094743][ T1706] ? drain_obj_stock+0xed0/0xed0 [ 74.094778][ T1706] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 74.094812][ T1706] try_charge_memcg+0x91c/0xe10 [ 74.094853][ T1706] ? finish_fault+0xe63/0x1140 [ 74.094872][ T1706] ? __cfi_try_charge_memcg+0x10/0x10 [ 74.094900][ T1706] ? __alloc_pages_noprof+0x35f/0x7e0 [ 74.094929][ T1706] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 74.094959][ T1706] __mem_cgroup_charge+0xfc/0x420 [ 74.094990][ T1706] ? do_pte_missing+0x3859/0x4410 [ 74.095012][ T1706] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 74.095045][ T1706] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 74.095072][ T1706] ? put_swap_device+0x130/0x130 [ 74.095094][ T1706] ? shmem_huge_global_enabled+0x2da/0x360 [ 74.095130][ T1706] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 74.095163][ T1706] ? __kasan_check_write+0x18/0x20 [ 74.095194][ T1706] ? _raw_spin_lock+0x92/0x120 [ 74.095242][ T1706] shmem_get_folio_gfp+0x607/0x1390 [ 74.095289][ T1706] ? shmem_get_folio+0xc0/0xc0 [ 74.095326][ T1706] ? __kasan_check_write+0x18/0x20 [ 74.095360][ T1706] ? inode_to_bdi+0x6d/0x100 [ 74.095391][ T1706] shmem_write_begin+0xf4/0x270 [ 74.095415][ T1706] generic_perform_write+0x328/0x970 [ 74.095441][ T1706] ? inode_update_timestamps+0x4f0/0x700 [ 74.095469][ T1706] ? __cfi_generic_perform_write+0x10/0x10 [ 74.095495][ T1706] ? down_write+0xee/0x2b0 [ 74.095513][ T1706] ? mnt_get_write_access_file+0x1af/0x3b0 [ 74.095540][ T1706] ? mnt_put_write_access_file+0xc2/0x100 [ 74.095566][ T1706] ? file_update_time+0x1de/0x210 [ 74.095593][ T1706] shmem_file_write_iter+0x105/0x130 [ 74.095620][ T1706] __kernel_write_iter+0x42f/0x8a0 [ 74.095654][ T1706] ? __cfi___kernel_write_iter+0x10/0x10 [ 74.095686][ T1706] ? get_dump_page+0x165/0x220 [ 74.095712][ T1706] ? __asan_memset+0x39/0x50 [ 74.095743][ T1706] ? iov_iter_bvec+0xc0/0x180 [ 74.095765][ T1706] dump_user_range+0xb8b/0xe60 [ 74.095801][ T1706] ? __cfi_dump_user_range+0x10/0x10 [ 74.095834][ T1706] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 74.095868][ T1706] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 74.095900][ T1706] ? elf_core_dump+0x24c0/0x3960 [ 74.095925][ T1706] elf_core_dump+0x2e7e/0x3960 [ 74.095952][ T1706] ? __cfi_elf_core_dump+0x10/0x10 [ 74.095984][ T1706] ? dump_interrupted+0xf0/0xf0 [ 74.096015][ T1706] ? filp_open+0x199/0x1f0 [ 74.096040][ T1706] ? 0xffffffffff600000 [ 74.096060][ T1706] do_coredump+0x208d/0x2fe0 [ 74.096094][ T1706] ? __cfi_do_coredump+0x10/0x10 [ 74.096124][ T1706] ? asm_exc_page_fault+0x2b/0x30 [ 74.096175][ T1706] ? __kasan_slab_free+0x6a/0x80 [ 74.096197][ T1706] ? kmem_cache_free+0x1bd/0x4f0 [ 74.096226][ T1706] ? get_signal+0xa74/0x14e0 [ 74.096252][ T1706] get_signal+0x11f8/0x14e0 [ 74.096288][ T1706] arch_do_signal_or_restart+0xbc/0x760 [ 74.096321][ T1706] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 74.096355][ T1706] ? handle_softirqs+0x54d/0x630 [ 74.096387][ T1706] irqentry_exit_to_user_mode+0x4d/0xb0 [ 74.096407][ T1706] irqentry_exit+0x16/0x60 [ 74.096425][ T1706] exc_page_fault+0x65/0xc0 [ 74.096455][ T1706] asm_exc_page_fault+0x2b/0x30 [ 74.096481][ T1706] RIP: 0033:0x7f705ff9cdd9 [ 74.096504][ T1706] Code: Unable to access opcode bytes at 0x7f705ff9cdaf. [ 74.096515][ T1706] RSP: 002b:000000000000ffd0 EFLAGS: 00010206 [ 74.096542][ T1706] RAX: 0000000000000000 RBX: 00007f7060216090 RCX: 00007f705ff9cdd9 [ 74.096559][ T1706] RDX: 0000000000000000 RSI: 000000000000ffd0 RDI: 0000000000002000 [ 74.096574][ T1706] RBP: 00007f7060032d69 R08: 0000000000000000 R09: 0000000000000000 [ 74.096589][ T1706] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 74.096603][ T1706] R13: 00007f7060216128 R14: 00007f7060216090 R15: 00007ffc32491808 [ 74.096624][ T1706] [ 74.566900][ T1706] memory: usage 307200kB, limit 307200kB, failcnt 25496 [ 74.573896][ T1706] memory+swap: usage 426408kB, limit 9007199254740988kB, failcnt 0 [ 74.581935][ T1706] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 74.588857][ T1706] Memory cgroup stats for /syz3: [ 74.589018][ T1706] cache 314433536 [ 74.597758][ T1706] rss 36864 [ 74.600895][ T1706] rss_huge 0 [ 74.604113][ T1706] shmem 314376192 [ 74.607902][ T1706] mapped_file 0 [ 74.611401][ T1706] dirty 0 [ 74.614363][ T1706] writeback 0 [ 74.624727][ T1706] workingset_refault_anon 5 [ 74.629287][ T1706] workingset_refault_file 2599 [ 74.634075][ T1706] swap 122068992 [ 74.653759][ T1706] swapcached 102400 [ 74.660291][ T1706] pgpgin 148448 [ 74.663792][ T1706] pgpgout 71648 [ 74.668505][ T1706] pgfault 30539 [ 74.672413][ T1706] pgmajfault 152 [ 74.676269][ T1706] inactive_anon 85557248 [ 74.680616][ T1706] active_anon 228958208 [ 74.685091][ T1706] inactive_file 0 [ 74.688755][ T1706] active_file 57344 [ 74.692653][ T1706] unevictable 0 [ 74.696560][ T1706] hierarchical_memory_limit 314572800 [ 74.709139][ T1706] hierarchical_memsw_limit 9223372036854771712 [ 74.725555][ T1706] total_cache 314433536 [ 74.729937][ T1706] total_rss 36864 [ 74.730319][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 74.730355][ T36] audit: type=1400 audit(1777644157.800:29476): avc: denied { write } for pid=1811 comm="syz.0.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 74.733791][ T1706] total_rss_huge 0 [ 74.763574][ T1706] total_shmem 314376192 [ 74.767819][ T1706] total_mapped_file 0 [ 74.771921][ T1706] total_dirty 0 [ 74.775599][ T1706] total_writeback 0 [ 74.779434][ T1706] total_workingset_refault_anon 5 [ 74.784598][ T1706] total_workingset_refault_file 2599 [ 74.790421][ T1706] total_swap 122068992 [ 74.801638][ T36] audit: type=1400 audit(1777644157.870:29477): avc: denied { read } for pid=1813 comm="syz.0.411" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 74.801663][ T1706] total_swapcached 102400 [ 74.802114][ T36] audit: type=1400 audit(1777644157.870:29478): avc: denied { open } for pid=1813 comm="syz.0.411" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 74.826862][ T1706] total_pgpgin 148448 [ 74.858840][ T1706] total_pgpgout 71648 [ 74.862893][ T1706] total_pgfault 30539 [ 74.866007][ T36] audit: type=1400 audit(1777644157.930:29479): avc: denied { ioctl } for pid=1813 comm="syz.0.411" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 74.870195][ T1814] netlink: 100 bytes leftover after parsing attributes in process `syz.0.411'. [ 74.902310][ T1706] total_pgmajfault 152 [ 74.906662][ T1706] total_inactive_anon 85557248 [ 74.911488][ T1706] total_active_anon 228958208 [ 74.916506][ T1706] total_inactive_file 0 [ 74.920785][ T1706] total_active_file 57344 [ 74.925495][ T1706] total_unevictable 0 [ 74.929551][ T1706] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor,pid=294,uid=0 [ 74.945298][ T1706] Memory cgroup out of memory: Killed process 294 (syz-executor) total-vm:90112kB, anon-rss:1220kB, file-rss:21656kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:0 [ 75.274288][ T398] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 75.333914][ T398] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 75.460334][ T398] asix 3-1:0.34: probe with driver asix failed with error -71 [ 75.543183][ T398] usb 3-1: USB disconnect, device number 22 [ 75.557082][ T12] bridge_slave_1: left allmulticast mode [ 75.562958][ T12] bridge_slave_1: left promiscuous mode [ 75.584769][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.734612][ T12] veth1_macvtap: left promiscuous mode [ 75.740257][ T12] veth0_vlan: left promiscuous mode [ 75.804696][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 75.837165][ T36] audit: type=1400 audit(1777644158.910:29480): avc: denied { write } for pid=1832 comm="syz.2.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 75.857375][ T45] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 75.867885][ T36] audit: type=1400 audit(1777644158.940:29481): avc: denied { setopt } for pid=1832 comm="syz.2.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 75.940048][ T1834] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.947452][ T1834] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.954682][ T1834] bridge_slave_0: entered allmulticast mode [ 75.961518][ T1834] bridge_slave_0: entered promiscuous mode [ 75.967429][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 75.973683][ T1834] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.981130][ T1834] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.988436][ T1834] bridge_slave_1: entered allmulticast mode [ 75.994797][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.006886][ T1834] bridge_slave_1: entered promiscuous mode [ 76.013681][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.036113][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 76.054701][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 76.064732][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.072794][ T9] usb 2-1: Product: syz [ 76.075930][ T45] usb 1-1: string descriptor 0 read error: -22 [ 76.085791][ T45] usb 1-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 76.104853][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.117882][ T9] usb 2-1: Manufacturer: syz [ 76.122552][ T9] usb 2-1: SerialNumber: syz [ 76.149616][ T1834] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.156906][ T1834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.164241][ T1834] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.171352][ T1834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.197618][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.205325][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.215951][ T327] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.223078][ T327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.233125][ T327] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.240213][ T327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.271403][ T1834] veth0_vlan: entered promiscuous mode [ 76.285706][ T1834] veth1_macvtap: entered promiscuous mode [ 76.330993][ T1847] syzkaller1: entered promiscuous mode [ 76.336891][ T1847] syzkaller1: entered allmulticast mode [ 76.349047][ T9] usb 2-1: 0:2 : does not exist [ 76.363152][ T45] usb 1-1: USB disconnect, device number 30 [ 76.375439][ T399] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 76.390901][ T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 76.403314][ T9] usb 2-1: USB disconnect, device number 29 [ 76.422677][ T450] udevd[450]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 76.544824][ T399] usb 3-1: Using ep0 maxpacket: 32 [ 76.551179][ T399] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 76.559358][ T399] usb 3-1: config 2 has no interface number 0 [ 76.565553][ T399] usb 3-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 76.575830][ T399] usb 3-1: config 2 interface 88 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 76.585975][ T399] usb 3-1: config 2 interface 88 has no altsetting 0 [ 76.593987][ T399] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 76.603119][ T399] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.611232][ T399] usb 3-1: Product: syz [ 76.615506][ T399] usb 3-1: Manufacturer: syz [ 76.620125][ T399] usb 3-1: SerialNumber: syz [ 76.626931][ T1845] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 76.634849][ T399] asix 3-1:2.88: probe with driver asix failed with error -22 [ 76.704764][ T66] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.840667][ T1845] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 76.849927][ T36] audit: type=1400 audit(1777644159.930:29482): avc: denied { read } for pid=1844 comm="syz.2.423" dev="sockfs" ino=11902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.854858][ T66] usb 5-1: Using ep0 maxpacket: 32 [ 76.907231][ T66] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.932849][ T66] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.952882][ T66] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 76.974543][ T66] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.998815][ T66] usb 5-1: config 0 descriptor?? [ 77.009199][ T66] hub 5-1:0.0: USB hub found [ 77.164771][ T399] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 77.214714][ T66] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 77.284699][ T495] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 77.335545][ T399] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 77.348732][ T399] usb 1-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 77.357858][ T399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.369461][ T399] usb 1-1: config 0 descriptor?? [ 77.415625][ T36] audit: type=1400 audit(1777644160.490:29483): avc: denied { getopt } for pid=1865 comm="syz.2.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.471718][ T495] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 77.483908][ T495] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 77.497569][ T495] usb 2-1: config 0 interface 0 has no altsetting 0 [ 77.504394][ T495] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 77.527870][ T495] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.548811][ T495] usb 2-1: config 0 descriptor?? [ 77.559244][ T1870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.568650][ T1870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.654584][ T45] usb 3-1: USB disconnect, device number 23 [ 77.957226][ T1863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.965890][ T1863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.975171][ T1863] netlink: 'syz.1.428': attribute type 46 has an invalid length. [ 77.987307][ T495] greenasia 0003:0E8F:0012.000E: unknown main item tag 0x6 [ 77.994963][ T495] greenasia 0003:0E8F:0012.000E: unknown global tag 0xd [ 78.002033][ T495] greenasia 0003:0E8F:0012.000E: item 0 2 1 13 parsing failed [ 78.009866][ T495] greenasia 0003:0E8F:0012.000E: parse failed [ 78.016294][ T495] greenasia 0003:0E8F:0012.000E: probe with driver greenasia failed with error -22 [ 78.067585][ T399] usbhid 1-1:0.0: can't add hid device: -71 [ 78.073577][ T399] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 78.084217][ T66] usbhid 5-1:0.0: can't add hid device: -71 [ 78.090416][ T66] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 78.098935][ T399] usb 1-1: USB disconnect, device number 31 [ 78.125186][ T66] usb 5-1: USB disconnect, device number 2 [ 78.175201][ T1876] 9pnet: Could not find request transport: rdma [ 78.181643][ T1875] 9pnet: Could not find request transport: rdma [ 78.190510][ T371] usb 2-1: USB disconnect, device number 30 [ 78.654602][ T1884] fuse: Bad value for 'user_id' [ 78.659554][ T1884] fuse: Bad value for 'user_id' [ 78.674700][ T495] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 78.824686][ T495] usb 1-1: Using ep0 maxpacket: 16 [ 78.831146][ T495] usb 1-1: config 0 has an invalid descriptor of length 79, skipping remainder of the config [ 78.841539][ T495] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 78.852434][ T495] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 78.865577][ T495] usb 1-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 78.874910][ T495] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.883685][ T495] usb 1-1: config 0 descriptor?? [ 78.934721][ T371] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 79.034702][ T398] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 79.086047][ T371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 47, changing to 9 [ 79.098356][ T371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.105265][ T495] usb 1-1: string descriptor 0 read error: -71 [ 79.111747][ T371] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 79.119055][ T495] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 79.131733][ T371] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 79.139089][ T495] usb 1-1: USB disconnect, device number 32 [ 79.150551][ T371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.161476][ T371] usb 2-1: config 0 descriptor?? [ 79.196024][ T398] usb 3-1: config 1 has an invalid descriptor of length 53, skipping remainder of the config [ 79.206445][ T398] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 79.216965][ T398] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 79.226355][ T398] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.234456][ T398] usb 3-1: Product: syz [ 79.238716][ T398] usb 3-1: Manufacturer: syz [ 79.243474][ T398] usb 3-1: SerialNumber: syz [ 79.454694][ T398] usb 3-1: 0:2 : does not exist [ 79.459780][ T398] usb 3-1: unit 9 not found! [ 79.466924][ T398] usb 3-1: 4:0: cannot get min/max values for control 1 (id 4) [ 79.477415][ T398] usb 3-1: 4:0: cannot get min/max values for control 2 (id 4) [ 79.491256][ T398] usb 3-1: 4:0: cannot get min/max values for control 3 (id 4) [ 79.502300][ T398] usb 3-1: 4:0: cannot get min/max values for control 4 (id 4) [ 79.512990][ T398] usb 3-1: 4:0: cannot get min/max values for control 5 (id 4) [ 79.523702][ T398] usb 3-1: 4:0: cannot get min/max values for control 6 (id 4) [ 79.534667][ T398] usb 3-1: 4:0: cannot get min/max values for control 7 (id 4) [ 79.544949][ T398] usb 3-1: 4:0: cannot get min/max values for control 8 (id 4) [ 79.555247][ T398] usb 3-1: 4:0: cannot get min/max values for control 9 (id 4) [ 79.565573][ T398] usb 3-1: 4:0: cannot get min/max values for control 10 (id 4) [ 79.578751][ T398] usb 3-1: USB disconnect, device number 24 [ 79.579446][ T371] steelseries 0003:1038:1410.000F: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 79.607600][ T450] udevd[450]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 79.674501][ T1900] overlay: filesystem on ./file1 not supported as upperdir [ 79.716893][ T1905] FAULT_INJECTION: forcing a failure. [ 79.716893][ T1905] name failslab, interval 1, probability 0, space 0, times 1 [ 79.729784][ T1905] CPU: 0 UID: 0 PID: 1905 Comm: syz.4.445 Not tainted syzkaller #0 d565f8e62ca0f8d2896f396c8c30e8edd87d2a0f [ 79.729811][ T1905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 79.729822][ T1905] Call Trace: [ 79.729828][ T1905] [ 79.729835][ T1905] __dump_stack+0x21/0x30 [ 79.729862][ T1905] dump_stack_lvl+0x140/0x1c0 [ 79.729882][ T1905] ? __cfi_dump_stack_lvl+0x10/0x10 [ 79.729904][ T1905] dump_stack+0x19/0x20 [ 79.729923][ T1905] should_fail_ex+0x3d7/0x530 [ 79.729945][ T1905] should_failslab+0xac/0x100 [ 79.729962][ T1905] __kmalloc_node_track_caller_noprof+0x68/0x4f0 [ 79.729993][ T1905] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x4c5/0x1d80 [ 79.730031][ T1905] ? _RNvMs3_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_11ThreadError7try_new+0x119/0x7d0 [ 79.730065][ T1905] krealloc_noprof+0x8d/0x130 [ 79.730089][ T1905] _RNvMs3_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_11ThreadError7try_new+0x119/0x7d0 [ 79.730117][ T1905] ? __cfi__RNvMs3_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_11ThreadError7try_new+0x10/0x10 [ 79.730148][ T1905] ? kasan_save_alloc_info+0x40/0x50 [ 79.730169][ T1905] ? __kasan_kmalloc+0x96/0xb0 [ 79.730184][ T1905] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 79.730208][ T1905] ? __kasan_check_write+0x18/0x20 [ 79.730230][ T1905] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x4c5/0x1d80 [ 79.730261][ T1905] _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x590/0x1d80 [ 79.730293][ T1905] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10 [ 79.730339][ T1905] _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x3e3/0x5c20 [ 79.730364][ T1905] ? __kasan_check_write+0x18/0x20 [ 79.730386][ T1905] ? resched_curr+0x119/0x440 [ 79.730409][ T1905] ? __cfi_resched_curr+0x10/0x10 [ 79.730430][ T1905] ? __cgroup_account_cputime+0xa5/0xd0 [ 79.730447][ T1905] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 79.730471][ T1905] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 79.730492][ T1905] ? __cfi_min_vruntime_cb_rotate+0x10/0x10 [ 79.730517][ T1905] ? __enqueue_entity+0x58a/0x630 [ 79.730546][ T1905] ? is_bpf_text_address+0x17b/0x1a0 [ 79.730571][ T1905] ? is_bpf_text_address+0x17b/0x1a0 [ 79.730592][ T1905] ? kernel_text_address+0xa9/0xe0 [ 79.730611][ T1905] ? __kernel_text_address+0x11/0x40 [ 79.730630][ T1905] ? unwind_get_return_address+0x51/0x90 [ 79.730648][ T1905] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 79.730665][ T1905] ? arch_stack_walk+0x10a/0x170 [ 79.730693][ T1905] ? is_bpf_text_address+0x17b/0x1a0 [ 79.730714][ T1905] ? kernel_text_address+0xa9/0xe0 [ 79.730734][ T1905] ? __kernel_text_address+0x11/0x40 [ 79.730754][ T1905] ? unwind_get_return_address+0x51/0x90 [ 79.730772][ T1905] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 79.730788][ T1905] ? arch_stack_walk+0x10a/0x170 [ 79.730812][ T1905] ? stack_depot_save_flags+0x38/0x800 [ 79.730835][ T1905] ? stack_trace_save+0xaa/0x100 [ 79.730851][ T1905] ? kasan_save_track+0x4f/0x80 [ 79.730864][ T1905] ? kasan_save_track+0x3e/0x80 [ 79.730878][ T1905] ? kasan_save_alloc_info+0x40/0x50 [ 79.730897][ T1905] ? __kasan_slab_alloc+0x73/0x90 [ 79.730912][ T1905] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 79.730934][ T1905] ? security_inode_alloc+0x51/0x230 [ 79.730948][ T1905] ? inode_init_always_gfp+0x756/0x9e0 [ 79.730963][ T1905] ? alloc_inode+0xc5/0x270 [ 79.730978][ T1905] ? new_inode+0x25/0x1e0 [ 79.730999][ T1905] ? proc_pid_make_inode+0x25/0x140 [ 79.731013][ T1905] ? proc_pident_instantiate+0x6d/0x2c0 [ 79.731028][ T1905] ? proc_pident_lookup+0x1c7/0x270 [ 79.731042][ T1905] ? proc_tid_base_lookup+0x2f/0x40 [ 79.731062][ T1905] ? path_openat+0x1315/0x34f0 [ 79.731078][ T1905] ? do_filp_open+0x1f5/0x440 [ 79.731094][ T1905] ? do_sys_openat2+0x134/0x1d0 [ 79.731112][ T1905] ? __x64_sys_openat+0x13a/0x170 [ 79.731130][ T1905] ? x64_sys_call+0xe69/0x2ee0 [ 79.731152][ T1905] ? do_syscall_64+0x57/0xf0 [ 79.731170][ T1905] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.731191][ T1905] ? avc_has_perm_noaudit+0x26c/0x360 [ 79.731216][ T1905] ? __asan_memcpy+0x5a/0x80 [ 79.731237][ T1905] ? avc_has_perm_noaudit+0x28a/0x360 [ 79.731262][ T1905] ? avc_has_perm+0x155/0x240 [ 79.731285][ T1905] ? __cfi_avc_has_perm+0x10/0x10 [ 79.731308][ T1905] ? kasan_save_alloc_info+0x40/0x50 [ 79.731330][ T1905] ? selinux_file_open+0x46c/0x630 [ 79.731351][ T1905] ? __cfi_selinux_file_open+0x10/0x10 [ 79.731374][ T1905] ? avc_has_extended_perms+0x80b/0xe70 [ 79.731398][ T1905] ? __asan_memcpy+0x5a/0x80 [ 79.731419][ T1905] ? avc_has_extended_perms+0x969/0xe70 [ 79.731444][ T1905] ? __asan_set_shadow_00+0x12/0x20 [ 79.731463][ T1905] ? do_vfs_ioctl+0x182d/0x2010 [ 79.731478][ T1905] ? arch_stack_walk+0x10a/0x170 [ 79.731500][ T1905] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 79.731518][ T1905] ? _parse_integer+0x2e/0x40 [ 79.731539][ T1905] ? ioctl_has_perm+0x39a/0x500 [ 79.731560][ T1905] ? has_cap_mac_admin+0xd0/0xd0 [ 79.731581][ T1905] ? proc_fail_nth_write+0x184/0x220 [ 79.731599][ T1905] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 79.731619][ T1905] ? selinux_file_ioctl+0x732/0x1480 [ 79.731639][ T1905] ? vfs_write+0x9a4/0xf90 [ 79.731660][ T1905] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 79.731680][ T1905] ? __cfi_vfs_write+0x10/0x10 [ 79.731702][ T1905] ? __kasan_check_write+0x18/0x20 [ 79.731723][ T1905] ? mutex_unlock+0x90/0x240 [ 79.731746][ T1905] ? __cfi_mutex_unlock+0x10/0x10 [ 79.731767][ T1905] ? __fget_files+0x2c5/0x340 [ 79.731782][ T1905] ? __fget_files+0x2c5/0x340 [ 79.731797][ T1905] ? bpf_lsm_file_ioctl+0xd/0x20 [ 79.731813][ T1905] ? security_file_ioctl+0x3e/0x110 [ 79.731833][ T1905] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 79.731856][ T1905] __se_sys_ioctl+0x132/0x1b0 [ 79.731871][ T1905] __x64_sys_ioctl+0x7f/0xa0 [ 79.731886][ T1905] x64_sys_call+0x1878/0x2ee0 [ 79.731907][ T1905] do_syscall_64+0x57/0xf0 [ 79.731924][ T1905] ? clear_bhb_loop+0x50/0xa0 [ 79.731944][ T1905] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.731963][ T1905] RIP: 0033:0x7fd886b9cdd9 [ 79.731977][ T1905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.731995][ T1905] RSP: 002b:00007fd887b28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.732013][ T1905] RAX: ffffffffffffffda RBX: 00007fd886e15fa0 RCX: 00007fd886b9cdd9 [ 79.732025][ T1905] RDX: 00002000000012c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 79.732035][ T1905] RBP: 00007fd887b28090 R08: 0000000000000000 R09: 0000000000000000 [ 79.732045][ T1905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.732055][ T1905] R13: 00007fd886e16038 R14: 00007fd886e15fa0 R15: 00007ffdea9c4928 [ 79.732068][ T1905] [ 79.781914][ T495] usb 2-1: USB disconnect, device number 31 [ 79.891272][ T36] audit: type=1400 audit(1777644162.950:29484): avc: denied { mount } for pid=1906 comm="syz.4.446" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 80.436231][ T66] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 80.449878][ T36] audit: type=1400 audit(1777644163.220:29485): avc: denied { map } for pid=1910 comm="syz.2.448" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 80.483293][ T36] audit: type=1400 audit(1777644163.550:29486): avc: denied { unmount } for pid=1834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 80.594703][ T66] usb 1-1: Using ep0 maxpacket: 32 [ 80.601108][ T66] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.612328][ T66] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.623510][ T66] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 80.632942][ T66] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 80.641574][ T66] usb 1-1: Product: syz [ 80.646029][ T66] usb 1-1: Manufacturer: syz [ 80.656326][ T66] hub 1-1:4.0: USB hub found [ 80.667284][ T1922] netlink: 1 bytes leftover after parsing attributes in process `syz.1.450'. [ 80.676499][ T36] audit: type=1400 audit(1777644163.740:29487): avc: denied { write } for pid=1916 comm="syz.1.450" path="socket:[13373]" dev="sockfs" ino=13373 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.764955][ T495] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 80.862197][ T66] hub 1-1:4.0: 2 ports detected [ 80.914706][ T495] usb 3-1: Invalid ep0 maxpacket: 9 [ 81.052523][ T495] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 81.077524][ T36] audit: type=1400 audit(1777644164.150:29488): avc: denied { associate } for pid=1926 comm="syz.4.452" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 81.204742][ T495] usb 3-1: Invalid ep0 maxpacket: 9 [ 81.210195][ T495] usb usb3-port1: attempt power cycle [ 81.263635][ T66] hub 1-1:4.0: set hub depth failed [ 81.273228][ T66] usb 1-1: USB disconnect, device number 33 [ 81.317571][ T1933] FAULT_INJECTION: forcing a failure. [ 81.317571][ T1933] name failslab, interval 1, probability 0, space 0, times 0 [ 81.330422][ T1933] CPU: 1 UID: 0 PID: 1933 Comm: syz.1.454 Not tainted syzkaller #0 d565f8e62ca0f8d2896f396c8c30e8edd87d2a0f [ 81.330459][ T1933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 81.330473][ T1933] Call Trace: [ 81.330481][ T1933] [ 81.330490][ T1933] __dump_stack+0x21/0x30 [ 81.330523][ T1933] dump_stack_lvl+0x140/0x1c0 [ 81.330548][ T1933] ? __cfi_dump_stack_lvl+0x10/0x10 [ 81.330575][ T1933] dump_stack+0x19/0x20 [ 81.330599][ T1933] should_fail_ex+0x3d7/0x530 [ 81.330627][ T1933] should_failslab+0xac/0x100 [ 81.330647][ T1933] __kmalloc_node_track_caller_noprof+0x68/0x4f0 [ 81.330677][ T1933] ? __kasan_check_write+0x18/0x20 [ 81.330705][ T1933] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x84c/0x1d80 [ 81.330747][ T1933] krealloc_noprof+0x8d/0x130 [ 81.330777][ T1933] _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x84c/0x1d80 [ 81.330816][ T1933] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10 [ 81.330860][ T1933] ? unwind_next_frame+0x3c1/0x750 [ 81.330892][ T1933] ? __x64_sys_openat+0x13a/0x170 [ 81.330916][ T1933] ? __x64_sys_openat+0x13a/0x170 [ 81.330938][ T1933] ? __kernel_text_address+0x11/0x40 [ 81.330963][ T1933] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 81.330985][ T1933] ? arch_stack_walk+0x129/0x170 [ 81.331015][ T1933] ? __x64_sys_openat+0x13a/0x170 [ 81.331038][ T1933] ? stack_depot_save_flags+0x38/0x800 [ 81.331067][ T1933] ? stack_depot_save+0x12/0x20 [ 81.331093][ T1933] ? save_stack+0x149/0x240 [ 81.331114][ T1933] ? __reset_page_owner+0x450/0x450 [ 81.331134][ T1933] ? post_alloc_hook+0x37d/0x3b0 [ 81.331156][ T1933] ? prep_new_page+0x2d/0x190 [ 81.331176][ T1933] ? get_page_from_freelist+0x496e/0x4a20 [ 81.331200][ T1933] ? __alloc_pages_noprof+0x35f/0x7e0 [ 81.331223][ T1933] ? alloc_slab_page+0x6b/0x1e0 [ 81.331243][ T1933] _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x3e3/0x5c20 [ 81.331275][ T1933] ? __kasan_check_write+0x18/0x20 [ 81.331301][ T1933] ? __set_page_owner+0x3fe/0x600 [ 81.331321][ T1933] ? __kasan_check_read+0x15/0x20 [ 81.331348][ T1933] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 81.331377][ T1933] ? __cfi___zone_watermark_ok+0x10/0x10 [ 81.331401][ T1933] ? kasan_unpoison+0x4a/0x70 [ 81.331428][ T1933] ? post_alloc_hook+0x37d/0x3b0 [ 81.331450][ T1933] ? __kasan_check_write+0x18/0x20 [ 81.331477][ T1933] ? prep_compound_page+0x272/0x5c0 [ 81.331498][ T1933] ? prep_new_page+0x7c/0x190 [ 81.331520][ T1933] ? get_page_from_freelist+0x496e/0x4a20 [ 81.331549][ T1933] ? is_bpf_text_address+0x17b/0x1a0 [ 81.331586][ T1933] ? is_bpf_text_address+0x17b/0x1a0 [ 81.331612][ T1933] ? kernel_text_address+0xa9/0xe0 [ 81.331637][ T1933] ? __kernel_text_address+0x11/0x40 [ 81.331661][ T1933] ? unwind_get_return_address+0x51/0x90 [ 81.331683][ T1933] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 81.331705][ T1933] ? arch_stack_walk+0x10a/0x170 [ 81.331738][ T1933] ? is_bpf_text_address+0x17b/0x1a0 [ 81.331765][ T1933] ? kernel_text_address+0xa9/0xe0 [ 81.331789][ T1933] ? __kernel_text_address+0x11/0x40 [ 81.331813][ T1933] ? unwind_get_return_address+0x51/0x90 [ 81.331835][ T1933] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 81.331856][ T1933] ? arch_stack_walk+0x10a/0x170 [ 81.331893][ T1933] ? stack_depot_save_flags+0x38/0x800 [ 81.331921][ T1933] ? stack_trace_save+0xaa/0x100 [ 81.331941][ T1933] ? kasan_save_track+0x4f/0x80 [ 81.331958][ T1933] ? kasan_save_track+0x3e/0x80 [ 81.331975][ T1933] ? kasan_save_alloc_info+0x40/0x50 [ 81.332000][ T1933] ? __kasan_slab_alloc+0x73/0x90 [ 81.332019][ T1933] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 81.332046][ T1933] ? security_inode_alloc+0x51/0x230 [ 81.332065][ T1933] ? inode_init_always_gfp+0x756/0x9e0 [ 81.332085][ T1933] ? alloc_inode+0xc5/0x270 [ 81.332104][ T1933] ? new_inode+0x25/0x1e0 [ 81.332122][ T1933] ? proc_pid_make_inode+0x25/0x140 [ 81.332140][ T1933] ? proc_pident_instantiate+0x6d/0x2c0 [ 81.332160][ T1933] ? proc_pident_lookup+0x1c7/0x270 [ 81.332179][ T1933] ? proc_tid_base_lookup+0x2f/0x40 [ 81.332202][ T1933] ? path_openat+0x1315/0x34f0 [ 81.332224][ T1933] ? do_filp_open+0x1f5/0x440 [ 81.332243][ T1933] ? do_sys_openat2+0x134/0x1d0 [ 81.332266][ T1933] ? __x64_sys_openat+0x13a/0x170 [ 81.332289][ T1933] ? x64_sys_call+0xe69/0x2ee0 [ 81.332316][ T1933] ? do_syscall_64+0x57/0xf0 [ 81.332340][ T1933] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 81.332379][ T1933] ? avc_has_perm_noaudit+0x26c/0x360 [ 81.332408][ T1933] ? __asan_memcpy+0x5a/0x80 [ 81.332434][ T1933] ? avc_has_perm_noaudit+0x28a/0x360 [ 81.332464][ T1933] ? avc_has_perm+0x155/0x240 [ 81.332492][ T1933] ? __cfi_avc_has_perm+0x10/0x10 [ 81.332519][ T1933] ? kasan_save_alloc_info+0x40/0x50 [ 81.332546][ T1933] ? selinux_file_open+0x46c/0x630 [ 81.332571][ T1933] ? __cfi_selinux_file_open+0x10/0x10 [ 81.332599][ T1933] ? avc_has_extended_perms+0x80b/0xe70 [ 81.332629][ T1933] ? __asan_memcpy+0x5a/0x80 [ 81.332655][ T1933] ? avc_has_extended_perms+0x969/0xe70 [ 81.332685][ T1933] ? __asan_set_shadow_00+0x12/0x20 [ 81.332708][ T1933] ? do_vfs_ioctl+0x182d/0x2010 [ 81.332726][ T1933] ? arch_stack_walk+0x10a/0x170 [ 81.332754][ T1933] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 81.332775][ T1933] ? _parse_integer+0x2e/0x40 [ 81.332801][ T1933] ? ioctl_has_perm+0x39a/0x500 [ 81.332826][ T1933] ? has_cap_mac_admin+0xd0/0xd0 [ 81.332852][ T1933] ? proc_fail_nth_write+0x184/0x220 [ 81.332879][ T1933] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 81.332903][ T1933] ? selinux_file_ioctl+0x732/0x1480 [ 81.332927][ T1933] ? vfs_write+0x9a4/0xf90 [ 81.332952][ T1933] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 81.332978][ T1933] ? __cfi_vfs_write+0x10/0x10 [ 81.333004][ T1933] ? __kasan_check_write+0x18/0x20 [ 81.333030][ T1933] ? mutex_unlock+0x90/0x240 [ 81.333055][ T1933] ? __cfi_mutex_unlock+0x10/0x10 [ 81.333099][ T1933] ? __fget_files+0x2c5/0x340 [ 81.333119][ T1933] ? __fget_files+0x2c5/0x340 [ 81.333137][ T1933] ? bpf_lsm_file_ioctl+0xd/0x20 [ 81.333159][ T1933] ? security_file_ioctl+0x3e/0x110 [ 81.333183][ T1933] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 81.333212][ T1933] __se_sys_ioctl+0x132/0x1b0 [ 81.333232][ T1933] __x64_sys_ioctl+0x7f/0xa0 [ 81.333251][ T1933] x64_sys_call+0x1878/0x2ee0 [ 81.333278][ T1933] do_syscall_64+0x57/0xf0 [ 81.333300][ T1933] ? clear_bhb_loop+0x50/0xa0 [ 81.333325][ T1933] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 81.333348][ T1933] RIP: 0033:0x7fef27b9cdd9 [ 81.333366][ T1933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.333384][ T1933] RSP: 002b:00007fef28ab8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.333405][ T1933] RAX: ffffffffffffffda RBX: 00007fef27e15fa0 RCX: 00007fef27b9cdd9 [ 81.333420][ T1933] RDX: 00002000000012c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 81.333434][ T1933] RBP: 00007fef28ab8090 R08: 0000000000000000 R09: 0000000000000000 [ 81.333447][ T1933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.333459][ T1933] R13: 00007fef27e16038 R14: 00007fef27e15fa0 R15: 00007ffe38668638 [ 81.333477][ T1933] [ 81.394857][ T371] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 81.574801][ T495] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 81.715575][ T371] usb 5-1: device descriptor read/64, error -71 [ 81.735801][ T495] usb 3-1: Invalid ep0 maxpacket: 9 [ 82.014020][ T371] usb 5-1: device descriptor read/64, error -71 [ 82.035621][ T36] audit: type=1400 audit(1777644165.100:29489): avc: denied { append } for pid=1939 comm="syz.0.456" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 82.115430][ T36] audit: type=1326 audit(1777644165.110:29490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1939 comm="syz.0.456" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6e479cdd9 code=0x0 [ 82.174757][ T495] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 82.215103][ T495] usb 3-1: Invalid ep0 maxpacket: 9 [ 82.220734][ T495] usb usb3-port1: unable to enumerate USB device [ 82.296541][ T371] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 82.384784][ T66] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 82.434804][ T371] usb 5-1: device descriptor read/64, error -71 [ 82.546548][ T66] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 82.554280][ T66] usb 1-1: can't read configurations, error -61 [ 82.654721][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 82.674766][ T371] usb 5-1: device descriptor read/64, error -71 [ 82.684766][ T66] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 82.784926][ T371] usb usb5-port1: attempt power cycle [ 82.805870][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.816875][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.826974][ T9] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 82.836171][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.845242][ T9] usb 2-1: config 0 descriptor?? [ 82.856237][ T66] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 82.863930][ T66] usb 1-1: can't read configurations, error -61 [ 82.870698][ T66] usb usb1-port1: attempt power cycle [ 83.052809][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 83.059524][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 83.068492][ T9] usb 2-1: USB disconnect, device number 32 [ 83.124719][ T371] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 83.145979][ T371] usb 5-1: device descriptor read/8, error -71 [ 83.214728][ T66] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 83.236592][ T66] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 83.244257][ T66] usb 1-1: can't read configurations, error -61 [ 83.276040][ T371] usb 5-1: device descriptor read/8, error -71 [ 83.374725][ T66] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 83.396814][ T66] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 83.404457][ T66] usb 1-1: can't read configurations, error -61 [ 83.410918][ T66] usb usb1-port1: unable to enumerate USB device [ 83.484732][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 83.514730][ T371] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 83.535723][ T371] usb 5-1: device descriptor read/8, error -71 [ 83.635944][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.646954][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.656789][ T9] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 83.665907][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.674620][ T9] usb 2-1: config 0 descriptor?? [ 83.681763][ T371] usb 5-1: device descriptor read/8, error -71 [ 83.754766][ T495] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 83.794794][ T371] usb usb5-port1: unable to enumerate USB device [ 83.881847][ T36] audit: type=1400 audit(1777644166.950:29491): avc: denied { create } for pid=1942 comm="syz.1.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 83.904904][ T495] usb 3-1: Using ep0 maxpacket: 16 [ 83.908354][ T9] steelseries 0003:1038:12B6.0010: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 83.918839][ T495] usb 3-1: unable to get BOS descriptor or descriptor too short [ 83.930653][ T495] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 83.939141][ T495] usb 3-1: can't read configurations, error -61 [ 84.074728][ T495] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 84.103596][ T9] steelseries 0003:1038:12B6.0010: hid_hw_raw_request() failed with -71 [ 84.114887][ T9] usb 2-1: USB disconnect, device number 33 [ 84.220484][ T1951] syz.4.459 (1951): attempted to duplicate a private mapping with mremap. This is not supported. [ 84.231342][ T495] usb 3-1: Using ep0 maxpacket: 16 [ 84.239832][ T495] usb 3-1: unable to get BOS descriptor or descriptor too short [ 84.248819][ T495] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 84.256473][ T495] usb 3-1: can't read configurations, error -61 [ 84.263052][ T495] usb usb3-port1: attempt power cycle [ 84.604772][ T495] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 84.624713][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 84.625208][ T495] usb 3-1: Using ep0 maxpacket: 16 [ 84.638867][ T495] usb 3-1: unable to get BOS descriptor or descriptor too short [ 84.647650][ T495] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 84.655328][ T495] usb 3-1: can't read configurations, error -61 [ 84.775864][ T9] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 84.785840][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 84.794877][ T495] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 84.802532][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.812542][ T9] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 84.825077][ T495] usb 3-1: Using ep0 maxpacket: 16 [ 84.831736][ T495] usb 3-1: unable to get BOS descriptor or descriptor too short [ 84.840649][ T495] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 84.848320][ T495] usb 3-1: can't read configurations, error -61 [ 84.854769][ T45] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 84.862437][ T495] usb usb3-port1: unable to enumerate USB device [ 85.014725][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 85.021106][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.033652][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.047524][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 85.060472][ T45] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 85.071375][ T495] usb 5-1: USB disconnect, device number 7 [ 85.080856][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.083508][ T1960] FAULT_INJECTION: forcing a failure. [ 85.083508][ T1960] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 85.102543][ T1960] CPU: 0 UID: 0 PID: 1960 Comm: syz.0.463 Not tainted syzkaller #0 d565f8e62ca0f8d2896f396c8c30e8edd87d2a0f [ 85.102573][ T1960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 85.102604][ T1960] Call Trace: [ 85.102610][ T1960] [ 85.102618][ T1960] __dump_stack+0x21/0x30 [ 85.102650][ T1960] dump_stack_lvl+0x140/0x1c0 [ 85.102675][ T1960] ? __cfi_dump_stack_lvl+0x10/0x10 [ 85.102702][ T1960] dump_stack+0x19/0x20 [ 85.102726][ T1960] should_fail_ex+0x3d7/0x530 [ 85.102754][ T1960] should_fail+0xf/0x20 [ 85.102777][ T1960] should_fail_usercopy+0x1e/0x30 [ 85.102805][ T1960] _copy_from_user+0x20/0xa0 [ 85.102823][ T1960] _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0xa67/0x5c20 [ 85.102858][ T1960] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 85.102897][ T1960] ? is_bpf_text_address+0x17b/0x1a0 [ 85.102928][ T1960] ? is_bpf_text_address+0x17b/0x1a0 [ 85.102955][ T1960] ? kernel_text_address+0xa9/0xe0 [ 85.102979][ T1960] ? __kernel_text_address+0x11/0x40 [ 85.103003][ T1960] ? unwind_get_return_address+0x51/0x90 [ 85.103027][ T1960] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 85.103048][ T1960] ? arch_stack_walk+0x10a/0x170 [ 85.103083][ T1960] ? is_bpf_text_address+0x17b/0x1a0 [ 85.103109][ T1960] ? kernel_text_address+0xa9/0xe0 [ 85.103133][ T1960] ? __kernel_text_address+0x11/0x40 [ 85.103158][ T1960] ? unwind_get_return_address+0x51/0x90 [ 85.103194][ T1960] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 85.103214][ T1960] ? arch_stack_walk+0x10a/0x170 [ 85.103243][ T1960] ? stack_depot_save_flags+0x38/0x800 [ 85.103290][ T1960] ? stack_trace_save+0xaa/0x100 [ 85.103310][ T1960] ? kasan_save_track+0x4f/0x80 [ 85.103328][ T1960] ? kasan_save_track+0x3e/0x80 [ 85.103346][ T1960] ? kasan_save_alloc_info+0x40/0x50 [ 85.103371][ T1960] ? __kasan_slab_alloc+0x73/0x90 [ 85.103389][ T1960] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 85.103417][ T1960] ? security_inode_alloc+0x51/0x230 [ 85.103436][ T1960] ? inode_init_always_gfp+0x756/0x9e0 [ 85.103465][ T1960] ? alloc_inode+0xc5/0x270 [ 85.103485][ T1960] ? new_inode+0x25/0x1e0 [ 85.103504][ T1960] ? proc_pid_make_inode+0x25/0x140 [ 85.103533][ T1960] ? proc_pident_instantiate+0x6d/0x2c0 [ 85.103553][ T1960] ? proc_pident_lookup+0x1c7/0x270 [ 85.103570][ T1960] ? proc_tid_base_lookup+0x2f/0x40 [ 85.103593][ T1960] ? path_openat+0x1315/0x34f0 [ 85.103613][ T1960] ? do_filp_open+0x1f5/0x440 [ 85.103633][ T1960] ? do_sys_openat2+0x134/0x1d0 [ 85.103655][ T1960] ? __x64_sys_openat+0x13a/0x170 [ 85.103677][ T1960] ? x64_sys_call+0xe69/0x2ee0 [ 85.103704][ T1960] ? do_syscall_64+0x57/0xf0 [ 85.103726][ T1960] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 85.103751][ T1960] ? avc_has_perm_noaudit+0x26c/0x360 [ 85.103781][ T1960] ? __asan_memcpy+0x5a/0x80 [ 85.103807][ T1960] ? avc_has_perm_noaudit+0x28a/0x360 [ 85.103855][ T1960] ? avc_has_perm+0x155/0x240 [ 85.103884][ T1960] ? __cfi_avc_has_perm+0x10/0x10 [ 85.103913][ T1960] ? kasan_save_alloc_info+0x40/0x50 [ 85.103952][ T1960] ? selinux_file_open+0x46c/0x630 [ 85.103976][ T1960] ? __cfi_selinux_file_open+0x10/0x10 [ 85.104004][ T1960] ? avc_has_extended_perms+0x80b/0xe70 [ 85.104033][ T1960] ? __asan_memcpy+0x5a/0x80 [ 85.104058][ T1960] ? avc_has_extended_perms+0x969/0xe70 [ 85.104089][ T1960] ? __asan_set_shadow_00+0x12/0x20 [ 85.104111][ T1960] ? do_vfs_ioctl+0x182d/0x2010 [ 85.104130][ T1960] ? arch_stack_walk+0x10a/0x170 [ 85.104157][ T1960] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 85.104178][ T1960] ? _parse_integer+0x2e/0x40 [ 85.104204][ T1960] ? ioctl_has_perm+0x39a/0x500 [ 85.104232][ T1960] ? has_cap_mac_admin+0xd0/0xd0 [ 85.104256][ T1960] ? proc_fail_nth_write+0x184/0x220 [ 85.104279][ T1960] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 85.104303][ T1960] ? selinux_file_ioctl+0x732/0x1480 [ 85.104327][ T1960] ? vfs_write+0x9a4/0xf90 [ 85.104353][ T1960] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 85.104378][ T1960] ? __cfi_vfs_write+0x10/0x10 [ 85.104403][ T1960] ? __kasan_check_write+0x18/0x20 [ 85.104429][ T1960] ? mutex_unlock+0x90/0x240 [ 85.104459][ T1960] ? __cfi_mutex_unlock+0x10/0x10 [ 85.104485][ T1960] ? __fget_files+0x2c5/0x340 [ 85.104523][ T1960] ? __fget_files+0x2c5/0x340 [ 85.104541][ T1960] ? bpf_lsm_file_ioctl+0xd/0x20 [ 85.104562][ T1960] ? security_file_ioctl+0x3e/0x110 [ 85.104586][ T1960] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 85.104615][ T1960] __se_sys_ioctl+0x132/0x1b0 [ 85.104634][ T1960] __x64_sys_ioctl+0x7f/0xa0 [ 85.104659][ T1960] x64_sys_call+0x1878/0x2ee0 [ 85.104690][ T1960] do_syscall_64+0x57/0xf0 [ 85.104713][ T1960] ? clear_bhb_loop+0x50/0xa0 [ 85.104739][ T1960] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 85.104764][ T1960] RIP: 0033:0x7fb6e479cdd9 [ 85.104780][ T1960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.104797][ T1960] RSP: 002b:00007fb6e56f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.104818][ T1960] RAX: ffffffffffffffda RBX: 00007fb6e4a15fa0 RCX: 00007fb6e479cdd9 [ 85.104834][ T1960] RDX: 00002000000012c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 85.104846][ T1960] RBP: 00007fb6e56f2090 R08: 0000000000000000 R09: 0000000000000000 [ 85.104859][ T1960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.104872][ T1960] R13: 00007fb6e4a16038 R14: 00007fb6e4a15fa0 R15: 00007ffd118a14f8 [ 85.104889][ T1960] [ 85.184873][ T45] usb 2-1: config 0 descriptor?? [ 85.564774][ T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 85.804706][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 85.811139][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.821342][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.831756][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 85.840887][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.848958][ T9] usb 1-1: Product: syz [ 85.853144][ T9] usb 1-1: Manufacturer: syz [ 85.857803][ T9] usb 1-1: SerialNumber: syz [ 86.004706][ T495] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 86.068110][ T9] usb 1-1: 0:2 : does not exist [ 86.076954][ T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 86.091396][ T9] usb 1-1: USB disconnect, device number 38 [ 86.104011][ T450] udevd[450]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 86.164684][ T495] usb 5-1: Using ep0 maxpacket: 32 [ 86.171833][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 86.177996][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 86.185987][ T495] usb 5-1: config 8 has an invalid interface number: 74 but max is 0 [ 86.194080][ T495] usb 5-1: config 8 has no interface number 0 [ 86.201916][ T45] usb 2-1: USB disconnect, device number 34 [ 86.209363][ T495] usb 5-1: config 8 interface 74 has no altsetting 0 [ 86.217654][ T495] usb 5-1: New USB device found, idVendor=19d2, idProduct=1015, bcdDevice=ec.1a [ 86.226772][ T495] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.234850][ T495] usb 5-1: Product: syz [ 86.239059][ T495] usb 5-1: Manufacturer: syz [ 86.243656][ T495] usb 5-1: SerialNumber: syz [ 86.583297][ T1980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=1980 comm=syz.0.470 [ 86.587296][ T36] audit: type=1400 audit(1777644169.650:29492): avc: denied { create } for pid=1978 comm="syz.0.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 86.620187][ T36] audit: type=1400 audit(1777644169.690:29493): avc: denied { name_bind } for pid=1978 comm="syz.0.470" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 86.765429][ T36] audit: type=1400 audit(1777644169.840:29494): avc: denied { watch watch_reads } for pid=1991 comm="syz.0.473" path="/79/file0" dev="tmpfs" ino=448 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 86.797764][ T45] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 86.931903][ T2002] netlink: 'syz.1.476': attribute type 4 has an invalid length. [ 86.956146][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 86.965293][ T45] usb 3-1: config 1 has an invalid descriptor of length 233, skipping remainder of the config [ 86.975823][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.986640][ T45] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 86.993965][ T36] audit: type=1400 audit(1777644170.060:29495): avc: denied { ioctl } for pid=2005 comm="syz.1.479" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 86.997509][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.028552][ T45] usb 3-1: Product: syz [ 87.032824][ T45] usb 3-1: Manufacturer: syz [ 87.032882][ T2006] veth0_vlan: entered allmulticast mode [ 87.037503][ T45] usb 3-1: SerialNumber: syz [ 87.052499][ T45] usb 3-1: selecting invalid altsetting 1 [ 87.058632][ T45] usb 3-1: unit 6 not found! [ 87.120976][ T2009] netlink: 964 bytes leftover after parsing attributes in process `syz.1.480'. [ 87.174686][ T398] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 87.324760][ T398] usb 1-1: Using ep0 maxpacket: 32 [ 87.331030][ T398] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.342022][ T398] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.351855][ T398] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 87.360958][ T398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.369049][ T310] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 87.377533][ T398] usb 1-1: config 0 descriptor?? [ 87.452439][ T45] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 87.462940][ T45] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 87.519340][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 87.527233][ T310] usb 2-1: unable to get BOS descriptor or descriptor too short [ 87.543926][ T310] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 87.552049][ T310] usb 2-1: can't read configurations, error -22 [ 87.684696][ T310] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 87.788185][ T398] koneplus 0003:1E7D:2D51.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 87.846016][ T310] usb 2-1: unable to get BOS descriptor or descriptor too short [ 87.854831][ T310] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 87.862786][ T310] usb 2-1: can't read configurations, error -22 [ 87.869268][ T310] usb usb2-port1: attempt power cycle [ 87.985591][ T398] koneplus 0003:1E7D:2D51.0011: couldn't init struct koneplus_device [ 87.993833][ T398] koneplus 0003:1E7D:2D51.0011: couldn't install mouse [ 88.001649][ T398] koneplus 0003:1E7D:2D51.0011: probe with driver koneplus failed with error -71 [ 88.012402][ T398] usb 1-1: USB disconnect, device number 39 [ 88.214690][ T310] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 88.236639][ T310] usb 2-1: unable to get BOS descriptor or descriptor too short [ 88.245542][ T310] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 88.253490][ T310] usb 2-1: can't read configurations, error -22 [ 88.384709][ T310] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 88.406523][ T310] usb 2-1: unable to get BOS descriptor or descriptor too short [ 88.415418][ T310] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 88.423385][ T310] usb 2-1: can't read configurations, error -22 [ 88.429919][ T310] usb usb2-port1: unable to enumerate USB device [ 88.505023][ T2013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2013 comm=syz.0.481 [ 88.553018][ T36] audit: type=1400 audit(1777644171.620:29496): avc: denied { read } for pid=2019 comm="syz.0.483" name="ttynull" dev="devtmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:var_lib_t:s0" [ 88.579730][ T36] audit: type=1400 audit(1777644171.620:29497): avc: denied { open } for pid=2019 comm="syz.0.483" path="/dev/ttynull" dev="devtmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:var_lib_t:s0" [ 88.607806][ T36] audit: type=1400 audit(1777644171.620:29498): avc: denied { ioctl } for pid=2019 comm="syz.0.483" path="/dev/ttynull" dev="devtmpfs" ino=29 ioctlcmd=0x542d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:var_lib_t:s0" [ 88.720164][ T495] usb 5-1: bad CDC descriptors [ 88.728701][ T495] usb 5-1: USB disconnect, device number 8 [ 89.024706][ T399] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 89.064702][ T495] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 89.174688][ T399] usb 1-1: Using ep0 maxpacket: 16 [ 89.180998][ T399] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.192014][ T399] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 89.204898][ T399] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 89.213983][ T399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.222735][ T399] usb 1-1: config 0 descriptor?? [ 89.237288][ T495] usb 5-1: unable to get BOS descriptor or descriptor too short [ 89.245928][ T495] usb 5-1: too many endpoints for config 1 interface 0 altsetting 128: 253, using maximum allowed: 30 [ 89.257023][ T495] usb 5-1: config 1 interface 0 altsetting 128 endpoint 0x82 is Bulk; changing to Interrupt [ 89.267215][ T495] usb 5-1: config 1 interface 0 altsetting 128 endpoint 0x3 is Bulk; changing to Interrupt [ 89.277489][ T495] usb 5-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 89.290798][ T495] usb 5-1: config 1 interface 0 has no altsetting 0 [ 89.299703][ T495] usb 5-1: string descriptor 0 read error: -22 [ 89.305988][ T495] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.315096][ T495] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.324284][ T2027] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 89.331830][ T2027] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 89.342607][ T495] usb 5-1: bad CDC descriptors [ 89.485647][ T371] usb 3-1: USB disconnect, device number 33 [ 89.502496][ T36] audit: type=1400 audit(1777644172.570:29499): avc: denied { mount } for pid=2028 comm="syz.2.486" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 89.525458][ T36] audit: type=1400 audit(1777644172.600:29500): avc: denied { mounton } for pid=2028 comm="syz.2.486" path="/24/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 89.548417][ T36] audit: type=1400 audit(1777644172.600:29501): avc: denied { read } for pid=2028 comm="syz.2.486" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 89.550735][ T2027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.579614][ T2027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.588818][ T495] usb 5-1: USB disconnect, device number 9 [ 89.631862][ T2025] exFAT-fs (rnullb0): invalid boot record signature [ 89.638608][ T2025] exFAT-fs (rnullb0): failed to read boot sector [ 89.645278][ T2025] exFAT-fs (rnullb0): failed to recognize exfat type [ 89.759141][ T399] microsoft 0003:045E:07DA.0012: ignoring exceeding usage max [ 89.787199][ T2044] netlink: 'syz.2.490': attribute type 46 has an invalid length. [ 89.789884][ T399] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0012/input/input8 [ 89.817126][ T399] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 89.921921][ T2050] netlink: 'syz.2.492': attribute type 13 has an invalid length. [ 89.930422][ T2050] erspan0: refused to change device tx_queue_len [ 89.937461][ T2051] netlink: 'syz.2.492': attribute type 13 has an invalid length. [ 89.945627][ T2051] erspan0: refused to change device tx_queue_len [ 90.327523][ T2068] random: crng reseeded on system resumption [ 90.355481][ T2068] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.499'. [ 90.545430][ T399] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 90.604744][ T9] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 90.694715][ T399] usb 2-1: Using ep0 maxpacket: 16 [ 90.701510][ T399] usb 2-1: unable to get BOS descriptor or descriptor too short [ 90.709974][ T399] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 90.722429][ T399] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 90.731553][ T399] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.739732][ T399] usb 2-1: Product: syz [ 90.743984][ T399] usb 2-1: Manufacturer: syz [ 90.748626][ T399] usb 2-1: SerialNumber: syz [ 90.756045][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 90.764194][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 90.772892][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4 [ 90.784771][ T9] usb 5-1: language id specifier not provided by device, defaulting to English [ 90.795267][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 90.804429][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.812676][ T9] usb 5-1: Product: syz [ 90.817159][ T9] usb 5-1: Manufacturer: ⧄亨珤心줨⃴׌干誤囦㕸ff十 [ 90.831527][ T9] usb 5-1: SerialNumber: syz [ 90.956986][ T399] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 90.965351][ T399] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 91.045010][ T2068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.053677][ T2068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.124700][ T371] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 91.180981][ T399] usb 2-1: USB disconnect, device number 39 [ 91.188690][ T9] usb 5-1: BAAD SPEAKERPHONE c_chmask mismatch [ 91.197787][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 91.209476][ T450] udevd[450]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 91.227671][ T9] usb 5-1: USB disconnect, device number 10 [ 91.242261][ T450] udevd[450]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 91.276130][ T371] usb 3-1: unable to get BOS descriptor or descriptor too short [ 91.284130][ T371] usb 3-1: not running at top speed; connect to a high speed hub [ 91.292647][ T371] usb 3-1: config 119 has an invalid interface number: 53 but max is 0 [ 91.301061][ T371] usb 3-1: config 119 has no interface number 0 [ 91.307593][ T371] usb 3-1: config 119 interface 53 altsetting 231 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 91.318948][ T371] usb 3-1: config 119 interface 53 altsetting 231 endpoint 0x8 has invalid maxpacket 568, setting to 64 [ 91.330144][ T371] usb 3-1: config 119 interface 53 has no altsetting 0 [ 91.339305][ T371] usb 3-1: language id specifier not provided by device, defaulting to English [ 91.349714][ T371] usb 3-1: New USB device found, idVendor=5050, idProduct=0800, bcdDevice=b3.4f [ 91.358874][ T371] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.366980][ T371] usb 3-1: Product: 챬び䀼矱黬瞧孚뺼ࡖ︟㓰䭨沏䅧ޜ᳘籖偆֒⁊뱯Ḕ뾟秺쒕팲輠┾짆齴炶洇᭗ᐳ脀冷押抩籊悶⍌鹘ﾃ탶맧뛻㫡ꌘ놇Ⓩ莴䌅⵹嵦涃↵ᨥ煡϶왇鑝䀧훶䮵븨䎔综썭╊독є䈢㐛뽆嬐亮东⻑쳜南颇좝ﰝ鸾咽球飙狓刣蛸잧祐枙Ḯ䞜ᒶ뚣舺揌ꁔᯘ熥鱰霡ᄼꆲ㸃ᾗ [ 91.401787][ T371] usb 3-1: Manufacturer: 씛᳈犋띜䐷ҭ褓ㄊઉ峾뀵鯮櫑䄺ꮣᓰ㴥羶ⷽꬁ딓汯顇鶦₧㣷躡ᨏ켊⪴ꊲꀽ촇銢꽐㤻餂帖❤쨅䶫裡叨婊쐘ਥ襄轵ᯁ瘘诙浽秨緂脬孙熛└省ꣽ箞麗㘜۟蕨秏Ꭺ咆ᢴ뛘ᮚ [ 91.427262][ T371] usb 3-1: SerialNumber: syz [ 91.434050][ T2071] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 91.441589][ T2071] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 91.575030][ T1834] ------------[ cut here ]------------ [ 91.581008][ T1834] WARNING: CPU: 1 PID: 1834 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 91.589092][ T1834] Modules linked in: [ 91.593024][ T1834] CPU: 1 UID: 0 PID: 1834 Comm: syz-executor Not tainted syzkaller #0 d565f8e62ca0f8d2896f396c8c30e8edd87d2a0f [ 91.604807][ T1834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 91.614924][ T1834] RIP: 0010:drop_nlink+0xce/0x110 [ 91.620000][ T1834] Code: 04 00 00 be 08 00 00 00 e8 af 15 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 72 a1 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 91.639754][ T1834] RSP: 0018:ffffc9000f6c7c60 EFLAGS: 00010293 [ 91.645991][ T1834] RAX: ffffffff81f21b2e RBX: ffff88811ecf8428 RCX: ffff88811494b900 [ 91.654033][ T1834] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 91.662128][ T1834] RBP: ffffc9000f6c7c88 R08: 0000000000000003 R09: 0000000000000004 [ 91.670171][ T1834] R10: dffffc0000000000 R11: fffff52001ed8f7c R12: dffffc0000000000 [ 91.678226][ T1834] R13: 1ffff11023d9f08e R14: ffff88811ecf8470 R15: 0000000000000000 [ 91.686264][ T1834] FS: 0000555588657500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 91.695394][ T1834] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.702071][ T1834] CR2: 000055558867a958 CR3: 0000000114194000 CR4: 00000000003526b0 [ 91.710118][ T1834] Call Trace: [ 91.713444][ T1834] [ 91.716451][ T1834] shmem_rmdir+0x5f/0x90 [ 91.720740][ T1834] vfs_rmdir+0x3e0/0x560 [ 91.725057][ T1834] incfs_kill_sb+0x109/0x230 [ 91.729700][ T1834] deactivate_locked_super+0xd8/0x2a0 [ 91.735154][ T1834] deactivate_super+0xb8/0xe0 [ 91.739869][ T1834] cleanup_mnt+0x406/0x4a0 [ 91.744326][ T1834] __cleanup_mnt+0x1d/0x40 [ 91.744886][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 91.744930][ T36] audit: type=1400 audit(1777644174.720:29519): avc: denied { write } for pid=287 comm="syz-executor" path="pipe:[1627]" dev="pipefs" ino=1627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 91.748843][ T1834] task_work_run+0x1e5/0x260 [ 91.782664][ T1834] ? __cfi_task_work_run+0x10/0x10 [ 91.788327][ T1834] ? __x64_sys_umount+0x12e/0x180 [ 91.793423][ T1834] ? __cfi___x64_sys_umount+0x10/0x10 [ 91.798943][ T1834] ? __kasan_check_read+0x15/0x20 [ 91.801344][ T9] usb 1-1: USB disconnect, device number 40 [ 91.804018][ T1834] resume_user_mode_work+0x35/0x50 [ 91.815220][ T1834] syscall_exit_to_user_mode+0x63/0xb0 [ 91.820731][ T1834] do_syscall_64+0x63/0xf0 [ 91.825220][ T1834] ? clear_bhb_loop+0x50/0xa0 [ 91.829944][ T1834] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 91.835908][ T1834] RIP: 0033:0x7fd886b9e017 [ 91.840358][ T1834] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 91.860130][ T1834] RSP: 002b:00007ffdea9c3b98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 91.868666][ T1834] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd886b9e017 [ 91.876724][ T1834] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdea9c3c50 [ 91.884855][ T1834] RBP: 00007ffdea9c3c50 R08: 00007ffdea9c4c50 R09: 00000000ffffffff [ 91.892870][ T1834] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdea9c4ce0 [ 91.900913][ T1834] R13: 00007fd886c32120 R14: 0000000000016540 R15: 00007ffdea9c4d20 [ 91.908989][ T1834] [ 91.912036][ T1834] ---[ end trace 0000000000000000 ]--- [ 91.951936][ T1834] ================================================================== [ 91.960122][ T1834] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 91.966514][ T1834] Write of size 4 at addr 0000000000000168 by task syz-executor/1834 [ 91.974626][ T1834] [ 91.976987][ T1834] CPU: 1 UID: 0 PID: 1834 Comm: syz-executor Tainted: G W syzkaller #0 d565f8e62ca0f8d2896f396c8c30e8edd87d2a0f [ 91.977027][ T1834] Tainted: [W]=WARN [ 91.977036][ T1834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 91.977050][ T1834] Call Trace: [ 91.977058][ T1834] [ 91.977067][ T1834] __dump_stack+0x21/0x30 [ 91.977102][ T1834] dump_stack_lvl+0x140/0x1c0 [ 91.977132][ T1834] ? __cfi_dump_stack_lvl+0x10/0x10 [ 91.977166][ T1834] print_report+0x3d/0x70 [ 91.977194][ T1834] kasan_report+0x162/0x1a0 [ 91.977219][ T1834] ? ihold+0x24/0x70 [ 91.977241][ T1834] ? _raw_spin_unlock+0x45/0x60 [ 91.977267][ T1834] ? ihold+0x24/0x70 [ 91.977288][ T1834] kasan_check_range+0x25a/0x2b0 [ 91.977315][ T1834] __kasan_check_write+0x18/0x20 [ 91.977346][ T1834] ihold+0x24/0x70 [ 91.977368][ T1834] vfs_rmdir+0x26a/0x560 [ 91.977395][ T1834] incfs_kill_sb+0x109/0x230 [ 91.977429][ T1834] deactivate_locked_super+0xd8/0x2a0 [ 91.977457][ T1834] deactivate_super+0xb8/0xe0 [ 91.977485][ T1834] cleanup_mnt+0x406/0x4a0 [ 91.977508][ T1834] __cleanup_mnt+0x1d/0x40 [ 91.977530][ T1834] task_work_run+0x1e5/0x260 [ 91.977557][ T1834] ? __cfi_task_work_run+0x10/0x10 [ 91.977584][ T1834] ? __x64_sys_umount+0x12e/0x180 [ 91.977614][ T1834] ? __cfi___x64_sys_umount+0x10/0x10 [ 91.977651][ T1834] ? __kasan_check_read+0x15/0x20 [ 91.977683][ T1834] resume_user_mode_work+0x35/0x50 [ 91.977716][ T1834] syscall_exit_to_user_mode+0x63/0xb0 [ 91.977739][ T1834] do_syscall_64+0x63/0xf0 [ 91.977765][ T1834] ? clear_bhb_loop+0x50/0xa0 [ 91.977795][ T1834] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 91.977825][ T1834] RIP: 0033:0x7fd886b9e017 [ 91.977844][ T1834] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 91.977865][ T1834] RSP: 002b:00007ffdea9c3b98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 91.977891][ T1834] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd886b9e017 [ 91.977908][ T1834] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdea9c3c50 [ 91.977923][ T1834] RBP: 00007ffdea9c3c50 R08: 00007ffdea9c4c50 R09: 00000000ffffffff [ 91.977941][ T1834] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdea9c4ce0 [ 91.977957][ T1834] R13: 00007fd886c32120 R14: 0000000000016540 R15: 00007ffdea9c4d20 [ 91.977978][ T1834] [ 91.977986][ T1834] ================================================================== [ 92.225464][ T1834] Disabling lock debugging due to kernel taint [ 92.231692][ T1834] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 92.239524][ T1834] #PF: supervisor write access in kernel mode [ 92.245622][ T1834] #PF: error_code(0x0002) - not-present page [ 92.251640][ T1834] PGD 80000001366a3067 P4D 80000001366a3067 PUD 0 [ 92.258213][ T1834] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 92.264324][ T1834] CPU: 1 UID: 0 PID: 1834 Comm: syz-executor Tainted: G B W syzkaller #0 d565f8e62ca0f8d2896f396c8c30e8edd87d2a0f [ 92.277571][ T1834] Tainted: [B]=BAD_PAGE, [W]=WARN [ 92.282678][ T1834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 92.292785][ T1834] RIP: 0010:ihold+0x2a/0x70 [ 92.297350][ T1834] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 5d 98 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 6c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 6d [ 92.306428][ T371] ftdi_sio 3-1:119.53: FTDI USB Serial Device converter detected [ 92.316999][ T1834] RSP: 0018:ffffc9000f6c7ca0 EFLAGS: 00010246 [ 92.317030][ T1834] RAX: ffff88811494b900 RBX: 0000000000000000 RCX: ffff88811494b900 [ 92.326994][ T36] audit: type=1400 audit(1777644175.360:29520): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 92.330849][ T1834] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 92.368794][ T1834] RBP: ffffc9000f6c7cb0 R08: ffffffff88b9f947 R09: 1ffffffff1173f28 [ 92.376813][ T1834] R10: dffffc0000000000 R11: fffffbfff1173f29 R12: ffff88811ecf8434 [ 92.384829][ T1834] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 92.392830][ T1834] FS: 0000555588657500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 92.396100][ T36] audit: type=1400 audit(1777644175.420:29521): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.401795][ T1834] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.429870][ T1834] CR2: 0000000000000168 CR3: 0000000114194000 CR4: 00000000003526b0 [ 92.437890][ T1834] Call Trace: [ 92.441214][ T1834] [ 92.444179][ T1834] vfs_rmdir+0x26a/0x560 [ 92.448474][ T1834] incfs_kill_sb+0x109/0x230 [ 92.453121][ T1834] deactivate_locked_super+0xd8/0x2a0 [ 92.456338][ T371] ftdi_sio ttyUSB0: unknown device type: 0xb34f [ 92.458532][ T1834] deactivate_super+0xb8/0xe0 [ 92.469525][ T1834] cleanup_mnt+0x406/0x4a0 [ 92.474013][ T1834] __cleanup_mnt+0x1d/0x40 [ 92.478478][ T1834] task_work_run+0x1e5/0x260 [ 92.483114][ T1834] ? __cfi_task_work_run+0x10/0x10 [ 92.488275][ T1834] ? __x64_sys_umount+0x12e/0x180 [ 92.493369][ T1834] ? __cfi___x64_sys_umount+0x10/0x10 [ 92.498797][ T1834] ? __kasan_check_read+0x15/0x20 [ 92.503873][ T1834] resume_user_mode_work+0x35/0x50 [ 92.509034][ T1834] syscall_exit_to_user_mode+0x63/0xb0 [ 92.512158][ T371] usb 3-1: USB disconnect, device number 34 [ 92.514532][ T1834] do_syscall_64+0x63/0xf0 [ 92.524868][ T1834] ? clear_bhb_loop+0x50/0xa0 [ 92.529595][ T1834] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 92.533727][ T36] audit: type=1400 audit(1777644175.420:29522): avc: denied { write } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.535532][ T1834] RIP: 0033:0x7fd886b9e017 [ 92.535555][ T1834] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 92.535575][ T1834] RSP: 002b:00007ffdea9c3b98 EFLAGS: 00000246 [ 92.575742][ T371] ftdi_sio 3-1:119.53: device disconnected [ 92.580973][ T1834] ORIG_RAX: 00000000000000a6 [ 92.597555][ T1834] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd886b9e017 [ 92.605548][ T1834] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdea9c3c50 [ 92.613556][ T1834] RBP: 00007ffdea9c3c50 R08: 00007ffdea9c4c50 R09: 00000000ffffffff [ 92.621544][ T1834] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdea9c4ce0 [ 92.629535][ T1834] R13: 00007fd886c32120 R14: 0000000000016540 R15: 00007ffdea9c4d20 [ 92.637532][ T1834] [ 92.640567][ T1834] Modules linked in: [ 92.644581][ T1834] CR2: 0000000000000168 [ 92.648753][ T1834] ---[ end trace 0000000000000000 ]--- [ 92.654235][ T1834] RIP: 0010:ihold+0x2a/0x70 [ 92.658761][ T1834] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 5d 98 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 6c 0c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 6d [ 92.678396][ T1834] RSP: 0018:ffffc9000f6c7ca0 EFLAGS: 00010246 [ 92.684489][ T1834] RAX: ffff88811494b900 RBX: 0000000000000000 RCX: ffff88811494b900 [ 92.692490][ T1834] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 92.700483][ T1834] RBP: ffffc9000f6c7cb0 R08: ffffffff88b9f947 R09: 1ffffffff1173f28 [ 92.708483][ T1834] R10: dffffc0000000000 R11: fffffbfff1173f29 R12: ffff88811ecf8434 [ 92.716483][ T1834] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 92.724478][ T1834] FS: 0000555588657500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 92.733429][ T1834] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.740033][ T1834] CR2: 0000000000000168 CR3: 0000000114194000 CR4: 00000000003526b0 [ 92.748030][ T1834] Kernel panic - not syncing: Fatal exception [ 92.754680][ T1834] Kernel Offset: disabled [ 92.759018][ T1834] Rebooting in 86400 seconds..