last executing test programs: 1m24.224545335s ago: executing program 2 (id=117): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz1\x00', {0x0, 0xcf0d}, 0x0, [0x80000000, 0x3, 0x3fc, 0x8, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0x4f5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x4020, 0x0, 0x20, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xe20, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x4, 0x0, 0x1], [0x3, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0xfffffffc, 0xedc0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x4, 0xed, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x4771, 0x0, 0x0, 0x5], [0x0, 0x7f, 0x8001, 0x5, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x2000000, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x84dc, 0x80000000, 0x0, 0xf, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x1000000, 0x0, 0x0, 0x10001], [0x2, 0x0, 0x6, 0x40000, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x100004, 0x800, 0x800000, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0xfd2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000100000000000a000000060001001b"], 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r2) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="dfff2abd7000fbdbdf2501"], 0x5c}, 0x1, 0x0, 0x0, 0x4004002}, 0x44000) 1m24.222966126s ago: executing program 2 (id=118): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002b00)={0x7, 0x0, [{0x25000, 0xc2, &(0x7f0000001600)=""/194}, {0x2, 0xee, &(0x7f00000017c0)=""/238}, {0xf615431af492a5b6, 0x8e, &(0x7f0000001700)=""/142}, {0x6000, 0x6b, &(0x7f00000018c0)=""/107}, {0x4, 0xb8, &(0x7f0000001940)=""/184}, {0x70000, 0x10, &(0x7f0000001a00)=""/16}, {0x9000, 0x1000, &(0x7f0000002d40)=""/4096}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001580)) 1m24.210186626s ago: executing program 2 (id=119): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setuid(0xee00) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="3526699076c7593954d3b5b87dce8d83dbfd58f9de740e7c548ded7a96e58b76435c9a02bab58f20076b08ca6988e8c627e2d935713fcc9080ba9c857d2e8249fa55f2815f4645a201622db118006b7c7da0058823afba003250d9576f3273bdd02248c055404f0e1692e2540ba504affff24c10b9be7ba61e8bcc7ebe8a93d9b7237ef8c8", @ANYRES32=r0, @ANYRES64=r0], 0x23c}, 0x1, 0x0, 0x0, 0x4000855}, 0x140408c0) 1m24.149297407s ago: executing program 2 (id=120): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f00000002c0)=0xe8) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x100008, &(0x7f0000000480)={[{@index_off}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}], [{@flag='nolazytime'}, {@obj_role={'obj_role', 0x3d, 'nfs_export=on'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'nfs_export=on'}}, {@euid_lt={'euid<', r1}}, {@uid_eq={'uid', 0x3d, r0}}, {@fowner_lt={'fowner<', r1}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x39, 0x33, 0x62, 0x58, 0x61, 0x33], 0x2d, [0x32, 0x61, 0x0, 0x32], 0x2d, [0x61, 0x37, 0x30, 0x61], 0x2d, [0x61, 0x38, 0x0, 0x66], 0x2d, [0x39, 0x5f, 0x50, 0x36, 0x36, 0x0, 0x1, 0x38]}}}, {@uid_gt={'uid>', r0}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x12, "e315bcfcffffffff996efba40423eb4a5446b3"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) fsync(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth1_vlan\x00', &(0x7f0000000240)=@ethtool_cmd={0xe, 0x2, 0x40, 0x5, 0x1, 0xa4, 0x4, 0x3, 0x0, 0x7, 0x5, 0x3, 0x4, 0x7, 0x8, 0x5, [0x5, 0xd0]}}) r5 = socket$packet(0x11, 0x3, 0x300) mknodat$null(r3, &(0x7f00000000c0)='./file1\x00', 0x100, 0x103) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x80000) ptrace(0x10, r6) ptrace$setsig(0x4203, r6, 0x3, &(0x7f0000000280)={0x1f, 0x3, 0x5}) getsockopt$packet_int(r5, 0x107, 0x12, 0x0, &(0x7f0000000000)=0x64) 1m23.345105779s ago: executing program 2 (id=122): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000071c0)={0x2020}, 0x2020) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) dup3(r1, r0, 0x80000) lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0xee00) 1m23.25918164s ago: executing program 2 (id=124): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000040300f11010000000000010902070001000000"], 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(0xfffffffffffff000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) 1m23.002510284s ago: executing program 32 (id=124): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000040300f11010000000000010902070001000000"], 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(0xfffffffffffff000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) 35.529123184s ago: executing program 3 (id=493): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) r3 = fcntl$getown(0xffffffffffffffff, 0x9) write$FUSE_LK(r1, &(0x7f0000002700)={0x28, 0xfffffffffffffffe, r2, {{0x8, 0xfffffffffffffff8, 0x0, r3}}}, 0x28) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000540)=0x3, 0x4) write$uinput_user_dev(r6, 0x0, 0x0) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000140)={0xb7, 0x3, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x7ffd, 0x0, 0x0, 0x7f, 0x11, 0x4, 0x44, 0x28}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 35.452253185s ago: executing program 3 (id=494): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x1, 0x0) fsopen(&(0x7f0000002000)='virtiofs\x00', 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190ec) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000100)={0x40, 0x15, 0x6, '\x00\x00\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f0000000140)=ANY=[]) 34.880456174s ago: executing program 3 (id=503): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000), 0x6) r2 = syz_ublk_setup_io_uring(0x13fe, &(0x7f0000000040)={0x0, 0xfffffffe, 0x1000, 0x4, 0xfffffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0x7d2, 0x0, 0x0, 0x1000, 0xfffffbff, 0x0, 0x0, 0x2}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r2, r7, &(0x7f0000000200)={0x0, 0x1460, 0x8, 0xffffffff, 0x2ca}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x200f0b2, 0x4000, 0x0, 0x298, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ef, 0x8, 0x9, 0x2000008, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x800, 0x2, 0x2af}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x100, 0x2, 0x21b, 0x0, r2}}], 0x4, &(0x7f0000000ac0)={0x2e, 0x29, 0x15, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r6, '\x00', {0x803, 0x48b, 0x0, 0x0}}, 0x0) (fail_nth: 3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000980)={'syz0\x00', {0x0, 0xcf0d}, 0x0, [0x80000000, 0x3, 0x3fc, 0x8, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0x4f5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x4020, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xe20, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x4, 0x0, 0x1], [0x3, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x4, 0xed, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x8001, 0x5, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x2000000, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x84dc, 0x80000000, 0x0, 0xf, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x1000000, 0x0, 0x0, 0x10001], [0x2, 0x0, 0x6, 0x40000, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x100004, 0x800, 0x800000, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0xfd2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) pwritev2(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000180)="c8", 0x1}], 0x1, 0x2e, 0x4, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1f) socket(0x1, 0x803, 0x0) sigaltstack(0x0, 0x0) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000701, 0x0, &(0x7f0000000480)) socket$netlink(0x10, 0x3, 0x0) 34.584153689s ago: executing program 3 (id=504): pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xe7c) getpid() sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x24004844) setns(0xffffffffffffffff, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 34.529194449s ago: executing program 3 (id=505): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xd) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket$tipc(0x1e, 0x5, 0x0) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000002280)="ed", 0x1}], 0x1}, 0x0) (async) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000002280)="ed", 0x1}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/89, 0x59}], 0x1, &(0x7f0000001f80)=""/52, 0x34}, 0xc0000}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)=""/75, 0x4b}], 0x1}, 0xfffffffd}], 0x2, 0x40010112, 0x0) (async) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/89, 0x59}], 0x1, &(0x7f0000001f80)=""/52, 0x34}, 0xc0000}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)=""/75, 0x4b}], 0x1}, 0xfffffffd}], 0x2, 0x40010112, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa6426000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002980)=ANY=[@ANYBLOB="021205091d00000025bd7000fcdbdf25020013000900000027bd70000635000002000100000004d5811cd9000000004002000100000004d23e00d7040000000002000b0006000000050000000000000008001900000000000a004e230000073f00000000000000000000000000000000337904720a004e22000080000000000000000000000000000000000107000000070019000000000002004e20e000000200000000000000000a004e2300100006fe8000000000000000000000000000bb0100180000000000030005003c20000002004e21ffffffff000000000000000037533fce614264b48eb28ed08fe000050100140004000000"], 0xe8}}, 0x20010000) (async) sendmsg$key(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002980)=ANY=[@ANYBLOB="021205091d00000025bd7000fcdbdf25020013000900000027bd70000635000002000100000004d5811cd9000000004002000100000004d23e00d7040000000002000b0006000000050000000000000008001900000000000a004e230000073f00000000000000000000000000000000337904720a004e22000080000000000000000000000000000000000107000000070019000000000002004e20e000000200000000000000000a004e2300100006fe8000000000000000000000000000bb0100180000000000030005003c20000002004e21ffffffff000000000000000037533fce614264b48eb28ed08fe000050100140004000000"], 0xe8}}, 0x20010000) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@rand_addr=0x64010101, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0x1}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@rand_addr=0x64010101, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0x1}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000002940)={'veth1_to_team\x00'}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r7, &(0x7f0000002900)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0x28, r8, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xeb2c, 0x21}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40c0}, 0x20044800) (async) sendmsg$NL80211_CMD_GET_KEY(r7, &(0x7f0000002900)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0x28, r8, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xeb2c, 0x21}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40c0}, 0x20044800) socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@migrate={0xa0, 0x21, 0x1, 0x70bd27, 0x0, {{@in=@rand_addr=0x64010102, @in6=@mcast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x73}}, [@migrate={0x50, 0x11, [{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40480c0}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000100)=0x6, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f00000011c0)="1dc0", 0x2, 0x201, 0x0, 0x0) recvfrom(r4, 0x0, 0x70, 0x61, 0x0, 0x0) (async) recvfrom(r4, 0x0, 0x70, 0x61, 0x0, 0x0) mmap(&(0x7f00002ee000/0x4000)=nil, 0x4000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) 34.371058932s ago: executing program 3 (id=506): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x22, &(0x7f0000000200)=0x9eb9, 0x4) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) close(0xffffffffffffffff) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket(0xa, 0x2, 0x11) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000004500)=[{&(0x7f00000013c0)=""/4098, 0x1002}, {&(0x7f0000000080)=""/101, 0x65}, {&(0x7f0000000100)=""/50, 0x32}, {&(0x7f0000000340)=""/95, 0x5f}, {0x0}, {&(0x7f00000003c0)=""/4084, 0xff4}], 0x6}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x40010200, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x30, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth1_to_hsr\x00', &(0x7f0000000240)=@ethtool_link_settings={0x4c, 0x4, 0x1, 0x6, 0x2, 0x6, 0x4a, 0x28, 0xab, 0x97, [0xc, 0x5, 0x0, 0x10000, 0x3, 0x6, 0x10, 0xe]}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000280)=@ethtool_cmd={0x2f, 0x103, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x7, 0x2, 0x7fffffff, 0xfffb, 0x0, 0x5, 0x9, [0xe, 0xfb]}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = dup2(r0, r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) read$FUSE(r6, &(0x7f0000002480)={0x2020}, 0x2020) 34.333858362s ago: executing program 33 (id=506): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x22, &(0x7f0000000200)=0x9eb9, 0x4) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) close(0xffffffffffffffff) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket(0xa, 0x2, 0x11) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000004500)=[{&(0x7f00000013c0)=""/4098, 0x1002}, {&(0x7f0000000080)=""/101, 0x65}, {&(0x7f0000000100)=""/50, 0x32}, {&(0x7f0000000340)=""/95, 0x5f}, {0x0}, {&(0x7f00000003c0)=""/4084, 0xff4}], 0x6}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x40010200, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x30, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth1_to_hsr\x00', &(0x7f0000000240)=@ethtool_link_settings={0x4c, 0x4, 0x1, 0x6, 0x2, 0x6, 0x4a, 0x28, 0xab, 0x97, [0xc, 0x5, 0x0, 0x10000, 0x3, 0x6, 0x10, 0xe]}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000280)=@ethtool_cmd={0x2f, 0x103, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x7, 0x2, 0x7fffffff, 0xfffb, 0x0, 0x5, 0x9, [0xe, 0xfb]}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = dup2(r0, r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) read$FUSE(r6, &(0x7f0000002480)={0x2020}, 0x2020) 7.83240722s ago: executing program 0 (id=689): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) copy_file_range(r1, 0x0, r1, &(0x7f0000000180)=0x2, 0x4, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) socket$inet6_icmp(0xa, 0x2, 0x3a) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 7.831967249s ago: executing program 0 (id=690): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='oom_score_adj\x00') r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg(r3, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000a40)=';', 0x1}], 0x1}}], 0x1, 0x2400c890) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x80808}, {{0x0, 0xfffffffffffffe5e, &(0x7f0000000b00), 0x2c, 0x0, 0x64}, 0x1ff}], 0x2, 0x20022, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@flushpolicy={0x2c, 0x1d, 0x8, 0x70bd29, 0x25dfdbfc, "", [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x4baf}, @srcaddr={0x14, 0xd, @in6=@remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) recvfrom$unix(r4, &(0x7f00000004c0)=""/249, 0xf9, 0x0, 0x0, 0x0) exit(0x2) read$FUSE(r1, 0x0, 0x0) pipe2$9p(&(0x7f0000000400), 0x80000) syz_usb_connect$midi(0x2, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB="12011003000000403512028240000102030109022e00010118980409040000020103000609018e0b20000fd702052501012709058c0320006df78005250101"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1555560f}) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009"], 0x0) syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4.984033783s ago: executing program 5 (id=706): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000), 0x4) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a124300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160005000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) stat(0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x100000000, 0x2004cb, 0xffffffffffffffe9, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0x81, 0x2000000000003ff, 0x2, 0x0, 0x9], 0x54000, 0x200306}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.863481335s ago: executing program 5 (id=707): socket$igmp6(0xa, 0x3, 0x87) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0xfe}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) read$hidraw(r2, &(0x7f0000001080)=""/67, 0x43) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000200)={'#! ', '', [{0x20, '-:%'}]}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r4, 0x7, 0x4) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) timer_create(0x1, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000001500)={@my=0x1}) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x42102) syz_usb_disconnect(r5) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r5, 0x550c, &(0x7f00000000c0)=0x18) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0x6e, &(0x7f0000001540)=""/110}]}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) dup(r2) 4.740721757s ago: executing program 0 (id=708): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x3938700}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f00000001c0), 0x10) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x2000c8, &(0x7f0000000140)={[{@redirect_dir_nofollow}, {@metacopy_on}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close_range(r3, r5, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1100, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, &(0x7f00000012c0)=[{&(0x7f0000000080)=""/152, 0x98}], 0x1, &(0x7f0000000140)=[{&(0x7f0000000380)=""/209}], 0xfffff3e, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 4.53879721s ago: executing program 0 (id=709): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000002c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x3, 0x53, &(0x7f0000000880)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x1, 0x9, 0x0, 0xd5, "", [{{0x9, 0x4, 0x0, 0xc2, 0x3, 0x2, 0x6, 0x0, 0x2, {{0xb, 0x24, 0x6, 0x0, 0x0, "d520636e757e"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x8, 0x2, 0xf7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0xfe, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0x9, 0x2}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x81, 0x5, 0x6, 0xff, 0xff}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2869}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1001}}]}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, 0x16, 0xa01, 0x0, 0x25dfdbfb, {0xa}, [@nested={0x18, 0xca, 0x0, 0x1, [@nested={0x14, 0x6, 0x0, 0x1, [@typed={0xd, 0xe4, 0x0, 0x0, @binary="b1fc2d971a289f852a"}]}]}]}, 0x2c}}, 0x40) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xdc, &(0x7f0000000c00)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000340)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000bc0)={0x2c, &(0x7f0000000980)={0x40, 0xe, 0x4a, {0x4a, 0x31, "38cca280ea093dfb3bbb5f350c7218798aca8f4809db99340e3f8e5205cd4aaeefe77f30ca9bd0aec178b4b62ee0a88c14459cd38ed0cac02e81bd7f8e9bfca07edbcfcfb077bdcf"}}, &(0x7f0000000a00)={0x0, 0x3, 0x9b, @string={0x9b, 0x3, "0d9a16b8886f835990bc201af21cd32dbe87a2f1b29e287cda19f3a7d212ca096cb0570bd6bba149847a7fc9f066cfbc0ff03f0470ee528ea515e296eb053b2b8de5a95c189b013c5371fac9df6486f550bde2d6e07b4779d65b4293dab992e26895630bf3073f02cc0272718ab8eb4f1263573dfd0b721479b28e273ada19aeda6671c9f05ef3dc972698e46aa4c182ed5c975163da19ca78"}}, &(0x7f0000000ac0)={0x0, 0xf, 0x59, {0x5, 0xf, 0x59, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x5, 0x0, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "e736928c69fc8cb0a6408853040d1370"}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x81, 0xf00f, 0xb, [0xc0, 0x140]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x8, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "b706fc626de66d32be8485f5ee7b4f52"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xa, 0x9, 0x4}]}}, &(0x7f0000000b40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x8, 0x1, 0x6, "2a030cef", "849d5921"}}, &(0x7f0000000b80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x1, 0xb7, 0x0, 0x9, 0x0, 0x8}}}, &(0x7f0000001140)={0x84, &(0x7f0000000c40)={0x20, 0xd, 0x3f, "2e219ec547be816b4b34c8449a3a5b258136d28e588cf3449154e461700446e64703dbac2905a62dd35ad437cf58ae8ce936a0da8895a00865b3bd426ec248"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000d40)={0x20, 0x0, 0x4}, &(0x7f0000000d80)={0x20, 0x0, 0x8, {0x20, 0x20, [0xfff0]}}, &(0x7f0000000dc0)={0x40, 0x7, 0x2}, &(0x7f0000000e00)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000e40)={0x40, 0xb, 0x2, "1ea4"}, &(0x7f0000000e80)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000ec0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000f00)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000f40)={0x40, 0x19, 0x2, "b090"}, &(0x7f0000000f80)={0x40, 0x1a, 0x2, 0x7f}, &(0x7f0000000fc0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000010c0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xf}}) syz_usb_connect$uac1(0x6, 0xdc, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x582, 0x27, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xca, 0x3, 0x1, 0x5, 0xa0, 0xff, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x30}, [@extension_unit={0x8, 0x24, 0x8, 0x3, 0xfffc, 0x0, 'B'}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x403, 0x6, 0x6, 0x1b, 0x9, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x402, 0x2, 0x6, 0x4}, @feature_unit={0x9, 0x24, 0x6, 0x6, 0x6, 0x1, [0x3], 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x1, 0x7, 0x5, '|7'}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x2f, 0x2, 0xaf, 0x6}, @as_header={0x7, 0x24, 0x1, 0x3, 0x0, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x5, 0x2, {0x7, 0x25, 0x1, 0xc, 0x7, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x3, 0x1, 0x7, 0x4, "83f85af476d109ca43"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x1, 0x100, 0x80, "524b9ffa740c"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x10, 0xfffd, 0x4, 0xf}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x2, 0x64, 0x89, {0x7, 0x25, 0x1, 0x0, 0x0, 0xff}}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x250, 0xd, 0x7, 0x0, 0x8, 0x3}, 0x35, &(0x7f0000000000)={0x5, 0xf, 0x35, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x9, 0x8}, @generic={0x7, 0x10, 0x9, "a51ec841"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "18d2f31bcea306b2da8c4b7d5c889ce9"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0x4, 0xb, 0x1ff, 0x6}]}, 0x5, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x861}}, {0x99, &(0x7f0000000640)=@string={0x99, 0x3, "e73ebd159da27070c64e61602911a80f2ffadf536bd8eaf226d7dab9637259f60874d9bc07853205443cfb720aeb8077c0c25384d5259d2c86507ff8ef792613e5407fd3aeb61e3fedc87e591f20fe5a4f893d4271ffd1ede5953523be6d274dea6d04374d2298b90667fbe83ee510d65d76952a4731778d826c8267563ea5ed8fa43792812ddc451a5ed26ba9533a0aed2db7e7b4311b"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x42c}}]}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000900)={0x44, &(0x7f00000004c0)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x56e, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, "", [{{0x9, 0x4, 0x0, 0xd2, 0x1, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x225, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x8, 0xc2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000480)={0x2c, &(0x7f00000000c0)={0x0, 0x30, 0x28, {0x28, 0xe, "c706291d6cbcb6ee151807c9013e0fbdc09670e197f77a7f2c48bcb200083f406fd7efdccf8b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001380)={0x24, &(0x7f0000001200)={0x20, 0x8, 0x9d, {0x9d, 0x21, "18a4649c1a3b5782a124f62806719cee7986f61c8af18486e1e025ccb082b97650403489a34bf024f8785666337f90fe528e9c3bcca2b4279b14bbd0154d07bed3b4814f4b5b3573e4c45677a54e495631f7326cbf601d4642824d4d5d4c51a2052475494ed15d0e3812beacbe789326a9abadf771680e05da11e4340cff7ab133e7cda1d0689d7e3f3f52d279e5f5604be35e3eb2b8ee3b38566e"}}, &(0x7f00000012c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3401}}, &(0x7f0000001300)={0x0, 0x22, 0x6, {[@main=@item_012={0x0, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0x9, "26482abd"}]}}, &(0x7f0000001340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x6f, 0x1, {0x22, 0x680}}}}, &(0x7f0000001580)={0x2c, &(0x7f00000013c0)={0x0, 0x31, 0xa3, "a09bd513353d373326dc58f16c93a6376abb65639781458c5cdc1d82b00186f98be97aa81f90d9b41cfabcb5a86e5f73065ed417f3b9e57a8ba551f0d676f467d32ddda94f2a7a42d52f6b7427353387367a7de00e0a30078b28edd1fbe6e71a7d5c8f1487278218507cc2ba85b820fdd8771230fb71c56c4f59aab6fa3332cd717404ed4c21c1190d574a23c874e5cff38c026101aba1dbc17dbdd59865bb48d1b792"}, &(0x7f0000001480)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000014c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001500)={0x20, 0x1, 0x35, "e6094183e8c8057ac5ae0cbf4410b58be7781ae75ef6e095a6e47e891ce99443997a076cecf375a0069debb0390252fccc3bb950d6"}, &(0x7f0000001540)={0x20, 0x3, 0x1, 0x10}}) 3.785472582s ago: executing program 1 (id=712): syz_usb_connect$uac2(0x2, 0x9f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000201e04203040000102030109028d00030104007f080b0101010a20020904000000010120000924810400061500b20c24037137db90faf5ad678009040100000102200009040101010102300008240203e60204fc102401148f00040000000505200000440905010910"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x1, 0xb, 0xa8, 0xffffff80}, {0x5, 0xff, 0xd, 0x10}, {0x3000, 0x6, 0x2}]}) 3.170445901s ago: executing program 5 (id=714): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x4283cafe) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0xc000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000300)=0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f0000000700)={0x0, 0xfffffff, @ioapic={0x60000, 0xef42, 0x3, 0xcbe1, 0x0, [{0x2, 0x8, 0x8, '\x00', 0xfb}, {0x10, 0x1, 0x3, '\x00', 0x9}, {0x8, 0x7f, 0x9, '\x00', 0x3}, {0xf9, 0x7, 0x1, '\x00', 0xe}, {0xcf, 0x4, 0xa, '\x00', 0xd}, {0xd, 0x7, 0xb, '\x00', 0x1}, {0x5, 0x8, 0x1, '\x00', 0x3}, {0x6, 0x1, 0xc, '\x00', 0x3}, {0x3, 0xd4, 0xff, '\x00', 0x6}, {0x6, 0x8, 0x3, '\x00', 0x2}, {0xb, 0x2f, 0x6, '\x00', 0xf9}, {0x4, 0x61, 0x6, '\x00', 0x5}, {0x5, 0x6, 0xc, '\x00', 0x6}, {0x7, 0x9, 0xd9}, {0x40, 0x9, 0x4a, '\x00', 0x8}, {0x6, 0x9, 0x21, '\x00', 0x2}, {0x80, 0x98, 0x7, '\x00', 0x9}, {0x4, 0x3, 0x7, '\x00', 0x6}, {0x2c, 0x0, 0x81, '\x00', 0x3}, {0x3, 0x4, 0xc, '\x00', 0x4d}, {0x7, 0xf9, 0x6, '\x00', 0xf8}, {0xaa, 0xfe, 0x3, '\x00', 0x40}, {0xd, 0x9, 0x9, '\x00', 0xa0}, {0x6, 0x4, 0x2, '\x00', 0x2}]}}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x3, 0x3f, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0}) 2.632463619s ago: executing program 1 (id=724): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc010}, 0x20000840) sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="622888a8", 0x5e0, 0x8c0, &(0x7f0000000140)={0x11, 0x8100, r3, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14) recvmmsg(r0, &(0x7f0000004dc0)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x2, 0x0) 2.57709664s ago: executing program 1 (id=725): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r2) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002fc0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fed9df2501000000000000000241000000030013"], 0x2c}, 0x1, 0x0, 0x0, 0x48054}, 0x8090) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r5, 0xaea2, 0x81) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000940)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.460707492s ago: executing program 1 (id=726): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84022, &(0x7f0000000240)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6d]}}, {@size={'size', 0x3d, [0x36]}}]}) 2.420357093s ago: executing program 1 (id=727): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x4c000000, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfcff}], 0x0, 0x0, 0x0}) 2.344890024s ago: executing program 1 (id=728): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) read(r0, &(0x7f0000000040)=""/166, 0xa6) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x2000c080}, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0xa, &(0x7f0000000000)={0xd, 0x8, 0x8}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r5 = inotify_init() cachestat(r5, &(0x7f0000000300)={0x420300000000, 0xfff}, 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f00000005c0)={'nat\x00', 0x2, [{}, {}]}, 0x48) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r6, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000000200)={0x2, 0x0, 0x0, 0xb7d375beb1f4ba0d, 0xfffffffc}) fcntl$lock(r6, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f0000000140)={0x58000, 0x10a000, 0x8}) getrandom(&(0x7f0000000000)=""/307, 0x133, 0x3) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) 2.285835614s ago: executing program 4 (id=729): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x100, 0x1}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}, @fda={0x66646185, 0x7, 0x1, 0x1c}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2.175680527s ago: executing program 4 (id=730): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000), 0x6) r2 = syz_ublk_setup_io_uring(0x13fe, &(0x7f0000000040)={0x0, 0xfffffffe, 0x1000, 0x4, 0xfffffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0x7d2, 0x0, 0x0, 0x1000, 0xfffffbff, 0x0, 0x0, 0x2}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r2, r7, &(0x7f0000000200)={0x0, 0x1460, 0x8, 0xffffffff, 0x2ca}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x200f0b2, 0x4000, 0x0, 0x298, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ef, 0x8, 0x9, 0x2000008, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x800, 0x2, 0x2af}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x100, 0x2, 0x21b, 0x0, r2}}], 0x4, &(0x7f0000000ac0)={0x2e, 0x29, 0x15, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r6, '\x00', {0x803, 0x48b, 0x0, 0x0}}, 0x0) (fail_nth: 4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000980)={'syz0\x00', {0x0, 0xcf0d}, 0x0, [0x80000000, 0x3, 0x3fc, 0x8, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0x4f5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x4020, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xe20, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x4, 0x0, 0x1], [0x3, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x4, 0xed, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x8001, 0x5, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x2000000, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x84dc, 0x80000000, 0x0, 0xf, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x1000000, 0x0, 0x0, 0x10001], [0x2, 0x0, 0x6, 0x40000, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x100004, 0x800, 0x800000, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0xfd2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) pwritev2(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000180)="c8", 0x1}], 0x1, 0x2e, 0x4, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1f) socket(0x1, 0x803, 0x0) sigaltstack(0x0, 0x0) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000701, 0x0, &(0x7f0000000480)) socket$netlink(0x10, 0x3, 0x0) 1.95560174s ago: executing program 4 (id=731): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000), 0x4) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a124300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160005000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) stat(0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x100000000, 0x2004cb, 0xffffffffffffffe9, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0x81, 0x2000000000003ff, 0x2, 0x0, 0x9], 0x54000, 0x200306}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.783721612s ago: executing program 4 (id=732): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth1\x00', &(0x7f0000000640)=@ethtool_eeprom={0x43, 0x8, 0x4, 0x65, "8fcd62ded99ba85da3f83141aa356b15d7f9f708b09e9cf95a7eadd10ce33e9eca2a3bccd512a151f21bfa26992d075cabc6fbc718949c224127dd5e4a20b658c5186a960796320ab91f087c80ef7aea4bedc7713fa03f835a53b500b5af39290ca1bc4731"}}) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r2) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', r3, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x80, 0x0, 0xe, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r4, 0x0, 0x0, 0x0, 0x4, 0x8, @empty, @empty, 0x0, 0x1, 0xfffffffe, 0x1}}) setresuid(0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(r5, r5, 0x0) stat(&(0x7f0000002640)='./file0\x00', &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000002700)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000002800)=0xe8) stat(&(0x7f0000002840)='./file0\x00', &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000002900), &(0x7f0000002940), &(0x7f0000002980)=0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="4c5825168981529c9c89642c00"]) read$FUSE(r10, &(0x7f000000c400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r10, &(0x7f0000000080)={0x50, 0x0, r11, {0x7, 0x29, 0x8, 0xe6a225d, 0x0, 0x3, 0x0, 0xb, 0x0, 0x0, 0x10, 0x30d9e6d0}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008c2c16800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000130000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r10, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x150, 0x0, 0x6, [{{0x4, 0x3, 0x800028000, 0x3, 0x0, 0xcb, {0x0, 0x9, 0x4, 0xb, 0x6, 0x282, 0x2, 0x81, 0x6, 0x8000, 0xde, 0x0, 0x0, 0x8001, 0x80000000}}, {0x4, 0x6, 0x1, 0x32540194, '\x00'}}, {{0x4, 0x3, 0x7ff, 0x7fffffffffffffff, 0xfff, 0x7ff, {0x3, 0x9, 0x3, 0x6, 0x5, 0xfffffffffffffffe, 0x2, 0x6, 0x7, 0x8000, 0x0, r12, r13, 0x4, 0x3}}, {0x4, 0x6, 0x1, 0x300, '\x00'}}]}, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000500)='system.posix_acl_default\x00', &(0x7f00000029c0)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x4}, {0x2, 0x6}, {0x2, 0x2}, {0x2, 0x7, r5}, {0x2, 0x2, r6}, {0x2, 0x3, r7}], {0x4, 0x1}, [{0x8, 0x3, r8}, {0x8, 0x2, r9}, {0x8, 0x1, r13}], {0x10, 0x2}, {0x20, 0x4}}, 0x74, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x3) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000140)) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r2, 0x2, 0x4, 0x2}) r15 = geteuid() sendmsg$nl_xfrm(r14, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@getpolicy={0x74, 0x15, 0x200, 0x70bd27, 0x25dfdbfc, {{@in=@empty, @in6=@private2, 0x4e20, 0xa, 0x4e23, 0x2, 0xa, 0x20, 0x20, 0x5c, r4, r15}, 0x6e6bb0, 0x1}, [@replay_esn_val={0x24, 0x17, {0x2, 0x70bd25, 0x70bd2a, 0x70bd2c, 0x70bd28, 0x7, [0x200, 0x1]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8050}, 0x20000000) 1.766078442s ago: executing program 4 (id=733): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0x9, 0x7) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000100)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000140)) readahead(r2, 0x7, 0x5) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) write$cgroup_pid(r4, &(0x7f0000000240)=r5, 0x12) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r7, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x22}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x5b}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x4000800) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000000440)) sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0xf, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40840}, 0x24008890) getsockname$unix(r4, &(0x7f0000000580), &(0x7f0000000600)=0x6e) r10 = syz_open_dev$hiddev(&(0x7f0000000640), 0xffffffffffffffcb, 0x20002) ioctl$XFS_IOC_FSCOUNTS(r10, 0x80205871, &(0x7f0000000680)) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f00000006c0)={0x1, 'wlan0\x00', {}, 0x8}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xd4, 0x1, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x38b}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x5dd}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf6}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x2}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f00000008c0)={0xffffffffffffffff, r3, 'id0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000940)={'vcan0\x00', 0x0}) connect$can_bcm(r11, &(0x7f0000000980)={0x1d, r12}, 0x10) openat$rnullb(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) ioctl$IOC_PR_CLEAR(r11, 0x401070cd, &(0x7f0000000a00)={0xc154}) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) 1.718682153s ago: executing program 4 (id=734): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) syz_usb_connect$uac1(0x1, 0x72, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2$9p(&(0x7f0000000000), 0x4800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) fsync(r4) dup2(r4, r0) 1.525090917s ago: executing program 0 (id=735): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000680)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 1.524578257s ago: executing program 0 (id=736): socket$nl_route(0x10, 0x3, 0x0) unshare(0x44050400) (async) unshare(0x44050400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='blkio.reset_stats\x00', 0x2, 0x0) (async) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='blkio.reset_stats\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) (async) openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0x8000000000000000, 0x12) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x605, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000200), 0x2, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000200), 0x2, 0x0) write$vga_arbiter(r5, 0x0, 0xc) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYRESOCT=r5], 0x0) 71.295969ms ago: executing program 5 (id=737): sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x3c, 0x4, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7f}]}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'macvlan0\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x800) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004041}, 0x20000808) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x1}}}, 0xb8}}, 0x28004010) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) 65.359119ms ago: executing program 5 (id=738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, 0x3, 0x1, 0x101, 0x900, 0x0, {0x0, 0x0, 0x1}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008800) 0s ago: executing program 5 (id=739): mount$incfs(&(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x200010, &(0x7f0000000040)=ANY=[]) (fail_nth: 25) kernel console output (not intermixed with test programs): face 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.985999][ T31] usb 2-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.999097][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 78.007085][ T31] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 78.016881][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.025726][ T31] usb 2-1: config 0 descriptor?? [ 78.142428][ T1599] usb usb8: usbfs: process 1599 (syz.0.448) did not claim interface 0 before use [ 78.163641][ T1599] usb usb8: selecting invalid altsetting 3 [ 78.191019][ T9] usb 5-1: USB disconnect, device number 16 [ 78.213728][ T9] usblp1: removed [ 78.220092][ T1602] rust_binder: 1601:1602 transaction to 0 failed: EINVAL [ 78.264700][ T1604] input: syz0 as /devices/virtual/input/input12 [ 78.325195][ T1596] x_tables: duplicate underflow at hook 2 [ 78.437146][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 78.443234][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 78.455191][ T31] usb 2-1: USB disconnect, device number 22 [ 78.479558][ T1614] hub 9-0:1.0: USB hub found [ 78.484407][ T1614] hub 9-0:1.0: 1 port detected [ 78.524493][ T1618] rust_binder: 319: no such ref 0 [ 78.529677][ T1618] rust_binder: Write failure EINVAL in pid:319 [ 78.530266][ T1618] rust_binder: 1617:1618 transaction to 0 failed: ENOENT [ 78.536531][ T10] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 78.571167][ T1622] FAULT_INJECTION: forcing a failure. [ 78.571167][ T1622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.584443][ T1622] CPU: 1 UID: 0 PID: 1622 Comm: syz.3.457 Not tainted syzkaller #0 8ee30d9df144bc892052d3af75bf7ae355cbcd4b [ 78.584471][ T1622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 78.584484][ T1622] Call Trace: [ 78.584490][ T1622] [ 78.584498][ T1622] __dump_stack+0x21/0x30 [ 78.584529][ T1622] dump_stack_lvl+0x140/0x1c0 [ 78.584567][ T1622] ? __cfi_dump_stack_lvl+0x10/0x10 [ 78.584594][ T1622] dump_stack+0x19/0x20 [ 78.584628][ T1622] should_fail_ex+0x3c2/0x510 [ 78.584646][ T1622] should_fail+0xf/0x20 [ 78.584661][ T1622] should_fail_usercopy+0x1e/0x30 [ 78.584680][ T1622] _copy_from_iter+0x1a6/0x1520 [ 78.584720][ T1622] ? __kasan_slab_alloc+0x73/0x90 [ 78.584741][ T1622] ? kmem_cache_alloc_node_noprof+0x1ed/0x420 [ 78.584759][ T1622] ? __virt_addr_valid+0x2a1/0x370 [ 78.584778][ T1622] ? __cfi__copy_from_iter+0x10/0x10 [ 78.584798][ T1622] ? __check_object_size+0x54c/0x870 [ 78.584816][ T1622] ? __cfi___check_object_size+0x10/0x10 [ 78.584832][ T1622] ? __alloc_skb+0x1b7/0x360 [ 78.584852][ T1622] ? skb_put+0x10e/0x200 [ 78.584873][ T1622] pfkey_sendmsg+0x1f8/0x1190 [ 78.584893][ T1622] ? __cfi_pfkey_sendmsg+0x10/0x10 [ 78.584911][ T1622] ? selinux_socket_sendmsg+0x281/0x380 [ 78.584932][ T1622] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 78.584952][ T1622] ? is_bpf_text_address+0x17b/0x1a0 [ 78.584976][ T1622] ? kernel_text_address+0xa9/0xe0 [ 78.584998][ T1622] ? unwind_get_return_address+0x51/0x90 [ 78.585019][ T1622] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 78.585039][ T1622] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 78.585075][ T1622] ? security_socket_sendmsg+0x3d/0x100 [ 78.585098][ T1622] ____sys_sendmsg+0x99e/0xa00 [ 78.585124][ T1622] ? __import_iovec+0x5b9/0x7d0 [ 78.585148][ T1622] ? __sys_sendmsg_sock+0x50/0x50 [ 78.585174][ T1622] ? import_iovec+0x80/0xb0 [ 78.585197][ T1622] ___sys_sendmsg+0x2a6/0x370 [ 78.585225][ T1622] ? __sys_sendmsg+0x2a0/0x2a0 [ 78.585250][ T1622] ? proc_fail_nth_write+0x184/0x220 [ 78.585275][ T1622] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 78.585303][ T1622] ? __fget_files+0x2bc/0x330 [ 78.585324][ T1622] __x64_sys_sendmsg+0x206/0x2e0 [ 78.585340][ T1622] ? fput+0x1a4/0x230 [ 78.585361][ T1622] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 78.585376][ T1622] ? ksys_write+0x1f3/0x260 [ 78.585395][ T1622] ? __kasan_check_read+0x15/0x20 [ 78.585412][ T1622] x64_sys_call+0x2a4c/0x2ee0 [ 78.585428][ T1622] do_syscall_64+0x57/0xf0 [ 78.585446][ T1622] ? clear_bhb_loop+0x50/0xa0 [ 78.585466][ T1622] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 78.585487][ T1622] RIP: 0033:0x7fa57759ce59 [ 78.585502][ T1622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.585516][ T1622] RSP: 002b:00007fa578514028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.585535][ T1622] RAX: ffffffffffffffda RBX: 00007fa577815fa0 RCX: 00007fa57759ce59 [ 78.585548][ T1622] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 78.585559][ T1622] RBP: 00007fa578514090 R08: 0000000000000000 R09: 0000000000000000 [ 78.585569][ T1622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.585580][ T1622] R13: 00007fa577816038 R14: 00007fa577815fa0 R15: 00007ffc9ce1e548 [ 78.585595][ T1622] [ 78.824928][ T10] usb 1-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 78.905118][ T1625] SELinux: Context system_u:object_r:systemd_notify_exec_t:s0 is not valid (left unmapped). [ 78.914809][ T36] audit: type=1400 audit(1799092229.414:334): avc: denied { append } for pid=1624 comm="syz.3.458" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 78.961349][ T36] audit: type=1400 audit(1799092229.474:335): avc: denied { sqpoll } for pid=1624 comm="syz.3.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 78.981002][ T10] usb 1-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.991016][ T10] usb 1-1: config 2 interface 0 has no altsetting 0 [ 78.997680][ T10] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 79.006968][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.055710][ T1628] rust_binder: Failure in copy_transaction_data: EINVAL [ 79.055738][ T1628] rust_binder: 1626:1628 transaction to 1626 failed: EINVAL [ 79.075202][ T318] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 79.170776][ T1636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.179336][ T1636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.244818][ T318] usb 5-1: unable to get BOS descriptor or descriptor too short [ 79.252931][ T318] usb 5-1: not running at top speed; connect to a high speed hub [ 79.262307][ T318] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 79.271064][ T318] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.286042][ T318] usb 5-1: string descriptor 0 read error: -22 [ 79.292253][ T318] usb 5-1: New USB device found, idVendor=1235, idProduct=8202, bcdDevice= 0.40 [ 79.301387][ T318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.311600][ T318] usb 5-1: MIDIStreaming interface descriptor not found [ 79.353368][ T63] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 79.419896][ T10] elo 0003:04E7:0009.0010: unknown main item tag 0x0 [ 79.426881][ T10] elo 0003:04E7:0009.0010: unknown main item tag 0x0 [ 79.433828][ T10] elo 0003:04E7:0009.0010: item fetching failed at offset 2/5 [ 79.441521][ T10] elo 0003:04E7:0009.0010: parse failed [ 79.447232][ T10] elo 0003:04E7:0009.0010: probe with driver elo failed with error -22 [ 79.512619][ T1623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.521181][ T1623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.530599][ T63] usb 2-1: not running at top speed; connect to a high speed hub [ 79.539205][ T63] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 4 [ 79.551945][ T63] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 79.561136][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.569194][ T63] usb 2-1: Product: syz [ 79.573462][ T63] usb 2-1: Manufacturer: 䣘ੂム轄吱Ⓕ墻ꌡ姡瘆⽉㕯䈔叭韯ꢠ᭿镪๨盋輼ⶪ笮庁 [ 79.584136][ T63] usb 2-1: SerialNumber: syz [ 79.585566][ T1623] 9pnet_fd: Insufficient options for proto=fd [ 79.706666][ T1639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.715313][ T1639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.724754][ T1639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.733611][ T1639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.234884][ T318] usb 1-1: USB disconnect, device number 25 [ 80.259286][ T1641] rust_binder: 336: no such ref 0 [ 80.264398][ T1641] rust_binder: Write failure EINVAL in pid:336 [ 80.265106][ T1641] rust_binder: 1640:1641 transaction to 0 failed: ENOENT [ 80.287420][ T10] kernel read not supported for file 338/task/339/smaps (pid: 10 comm: kworker/0:1) [ 80.382913][ T63] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 80.390975][ T63] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 80.400351][ T63] usb 2-1: USB disconnect, device number 23 [ 80.411723][ T415] udevd[415]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 80.462481][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 80.462499][ T36] audit: type=1400 audit(1799092231.024:342): avc: denied { append } for pid=1650 comm="syz.1.469" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:systemd_notify_exec_t:s0" [ 80.555897][ T36] audit: type=1326 audit(1799092231.124:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1653 comm="syz.1.470" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5d99ce59 code=0x7ffc0000 [ 80.586743][ T36] audit: type=1326 audit(1799092231.124:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1653 comm="syz.1.470" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e5d99ce59 code=0x7ffc0000 [ 80.616770][ T36] audit: type=1326 audit(1799092231.124:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1653 comm="syz.1.470" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5d99ce59 code=0x7ffc0000 [ 80.642217][ T36] audit: type=1326 audit(1799092231.124:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1653 comm="syz.1.470" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5d99ce59 code=0x7ffc0000 [ 80.667407][ T36] audit: type=1326 audit(1799092231.124:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1653 comm="syz.1.470" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5e5d99ce59 code=0x7ffc0000 [ 80.693350][ T36] audit: type=1326 audit(1799092231.124:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1653 comm="syz.1.470" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5d99ce59 code=0x7ffc0000 [ 80.719034][ T36] audit: type=1326 audit(1799092231.124:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1653 comm="syz.1.470" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e5d99ce59 code=0x7ffc0000 [ 80.744700][ T36] audit: type=1326 audit(1799092231.124:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1653 comm="syz.1.470" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5d99ce59 code=0x7ffc0000 [ 80.771085][ T36] audit: type=1326 audit(1799092231.124:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1653 comm="syz.1.470" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5e5d99ce59 code=0x7ffc0000 [ 80.975889][ T1672] SELinux: ebitmap: map size 1936093033 does not match my size 64 (high bit was 0) [ 80.988226][ T1672] SELinux: failed to load policy [ 80.995032][ T1672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.004891][ T1672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.043468][ T63] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 81.193505][ T63] usb 1-1: Using ep0 maxpacket: 8 [ 81.199976][ T63] usb 1-1: unable to get BOS descriptor or descriptor too short [ 81.208416][ T63] usb 1-1: config 127 has an invalid interface number: 159 but max is 1 [ 81.216807][ T63] usb 1-1: config 127 has an invalid interface number: 92 but max is 1 [ 81.225133][ T63] usb 1-1: config 127 has an invalid interface association descriptor of length 2, skipping [ 81.235240][ T63] usb 1-1: config 127 has no interface number 0 [ 81.241489][ T63] usb 1-1: config 127 has no interface number 1 [ 81.247771][ T63] usb 1-1: config 127 interface 159 altsetting 5 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 81.259647][ T63] usb 1-1: config 127 interface 159 altsetting 5 endpoint 0x8 has an invalid bInterval 185, changing to 7 [ 81.270971][ T63] usb 1-1: config 127 interface 159 has no altsetting 0 [ 81.277971][ T63] usb 1-1: config 127 interface 92 has no altsetting 0 [ 81.286309][ T63] usb 1-1: New USB device found, idVendor=0ace, idProduct=1602, bcdDevice=e2.70 [ 81.295427][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.303492][ T63] usb 1-1: Product: syz [ 81.307665][ T63] usb 1-1: Manufacturer: syz [ 81.312256][ T63] usb 1-1: SerialNumber: syz [ 81.363330][ T45] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 81.513528][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 81.521455][ T45] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 81.530950][ T63] cdc_acm 1-1:127.92: invalid descriptor buffer length [ 81.543244][ T45] usb 2-1: config 0 has no interface number 0 [ 81.549644][ T45] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 81.555234][ T63] usb 1-1: USB disconnect, device number 26 [ 81.565653][ T45] usb 2-1: config 0 interface 196 has no altsetting 0 [ 81.592157][ T45] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 81.602518][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.610698][ T45] usb 2-1: Product: syz [ 81.616254][ T45] usb 2-1: Manufacturer: syz [ 81.620888][ T45] usb 2-1: SerialNumber: syz [ 81.626347][ T45] usb 2-1: config 0 descriptor?? [ 81.631590][ T1678] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 81.643973][ T318] usb 5-1: USB disconnect, device number 17 [ 81.654881][ T1681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.664591][ T1681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.677424][ T1684] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 81.688779][ T1681] x_tables: arp_tables: IDLETIMER target: not valid for this family [ 81.718279][ T1688] 9pnet_fd: Insufficient options for proto=fd [ 82.050707][ T1694] FAULT_INJECTION: forcing a failure. [ 82.050707][ T1694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.063883][ T1694] CPU: 1 UID: 0 PID: 1694 Comm: syz.0.484 Not tainted syzkaller #0 8ee30d9df144bc892052d3af75bf7ae355cbcd4b [ 82.063914][ T1694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 82.063928][ T1694] Call Trace: [ 82.063941][ T1694] [ 82.063947][ T1694] __dump_stack+0x21/0x30 [ 82.063976][ T1694] dump_stack_lvl+0x140/0x1c0 [ 82.063998][ T1694] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.064021][ T1694] ? check_stack_object+0x138/0x150 [ 82.064038][ T1694] dump_stack+0x19/0x20 [ 82.064058][ T1694] should_fail_ex+0x3c2/0x510 [ 82.064076][ T1694] should_fail+0xf/0x20 [ 82.064092][ T1694] should_fail_usercopy+0x1e/0x30 [ 82.064110][ T1694] _copy_to_user+0x24/0xa0 [ 82.064131][ T1694] simple_read_from_buffer+0xed/0x160 [ 82.064153][ T1694] proc_fail_nth_read+0x1aa/0x220 [ 82.064177][ T1694] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 82.064200][ T1694] ? bpf_lsm_file_permission+0xd/0x20 [ 82.064226][ T1694] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 82.064249][ T1694] vfs_read+0x28b/0xc70 [ 82.064264][ T1694] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 82.064294][ T1694] ? __cfi_vfs_read+0x10/0x10 [ 82.064309][ T1694] ? __kasan_check_write+0x18/0x20 [ 82.064324][ T1694] ? mutex_lock+0x97/0x1d0 [ 82.064346][ T1694] ? __cfi_mutex_lock+0x10/0x10 [ 82.064367][ T1694] ksys_read+0x145/0x260 [ 82.064382][ T1694] ? __cfi_ksys_read+0x10/0x10 [ 82.064398][ T1694] ? __kasan_check_read+0x15/0x20 [ 82.064413][ T1694] __x64_sys_read+0x7f/0x90 [ 82.064428][ T1694] x64_sys_call+0x2638/0x2ee0 [ 82.064442][ T1694] do_syscall_64+0x57/0xf0 [ 82.064457][ T1694] ? clear_bhb_loop+0x50/0xa0 [ 82.064476][ T1694] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.064494][ T1694] RIP: 0033:0x7f0223d5d68e [ 82.064508][ T1694] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 82.064521][ T1694] RSP: 002b:00007f02227f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 82.064538][ T1694] RAX: ffffffffffffffda RBX: 00007f02227f76c0 RCX: 00007f0223d5d68e [ 82.064550][ T1694] RDX: 000000000000000f RSI: 00007f02227f70a0 RDI: 0000000000000004 [ 82.064560][ T1694] RBP: 00007f02227f7090 R08: 0000000000000000 R09: 0000000000000000 [ 82.064570][ T1694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.064580][ T1694] R13: 00007f0224016038 R14: 00007f0224015fa0 R15: 00007ffd1a179b68 [ 82.064594][ T1694] [ 82.313500][ T318] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 82.464352][ T318] usb 5-1: config 0 has an invalid interface number: 128 but max is -1 [ 82.472791][ T318] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 82.481730][ T318] usb 5-1: config 0 has no interface number 0 [ 82.487860][ T318] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=86.34 [ 82.496917][ T318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.506117][ T318] usb 5-1: config 0 descriptor?? [ 82.598667][ T1704] SELinux: ebitmap: map size 1936093033 does not match my size 64 (high bit was 0) [ 82.609712][ T1704] SELinux: failed to load policy [ 82.720101][ T1692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.728733][ T1692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.737447][ T318] usb 5-1: USB disconnect, device number 18 [ 82.823556][ T45] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: -110 [ 82.832757][ T45] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 82.853498][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 82.961956][ C0] ipheth 2-1:0.196: ipheth_rcvbulk_callback: urb status: -75 [ 83.003303][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 83.009514][ T10] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 83.017723][ T10] usb 1-1: config 0 has no interface number 0 [ 83.023836][ T10] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 83.033862][ T10] usb 1-1: config 0 interface 196 has no altsetting 0 [ 83.042108][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 83.051259][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.059348][ T10] usb 1-1: Product: syz [ 83.063553][ T10] usb 1-1: Manufacturer: syz [ 83.068160][ T10] usb 1-1: SerialNumber: syz [ 83.073819][ T10] usb 1-1: config 0 descriptor?? [ 83.079092][ T1704] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 83.169126][ T63] usb 2-1: USB disconnect, device number 24 [ 83.202971][ T63] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 83.703320][ T45] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 83.854478][ T45] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 83.866171][ T45] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 83.877274][ T45] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 83.887274][ T45] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 83.896360][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.943301][ T318] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 84.104433][ T318] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.108155][ T1739] tmpfs: Too few inodes for current use [ 84.114889][ T318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 84.131517][ T318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.141481][ T318] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 84.150710][ T318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.159990][ T318] usb 2-1: config 0 descriptor?? [ 84.193489][ T10] ipheth 1-1:0.196: ipheth_enable_ncm: usb_control_msg: -110 [ 84.203107][ T10] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 84.368214][ T1743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.376908][ T1743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.389032][ T318] usbhid 2-1:0.0: can't add hid device: -71 [ 84.395537][ T318] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 84.406901][ T318] usb 2-1: USB disconnect, device number 25 [ 84.549456][ T10] usb 1-1: USB disconnect, device number 27 [ 84.581675][ T10] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 84.701960][ T1775] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 84.711771][ T1775] SELinux: failed to load policy [ 84.720018][ T1775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.728958][ T1775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.753995][ T45] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 84.768867][ T45] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input13 [ 84.782627][ T45] usb 5-1: USB disconnect, device number 19 [ 85.153308][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 85.208338][ T1796] netlink: 'syz.4.501': attribute type 16 has an invalid length. [ 85.216212][ T1796] netlink: 'syz.4.501': attribute type 4 has an invalid length. [ 85.224156][ T1796] netlink: 64114 bytes leftover after parsing attributes in process `syz.4.501'. [ 85.240627][ T1796] netlink: 104 bytes leftover after parsing attributes in process `syz.4.501'. [ 85.265504][ T1800] FAULT_INJECTION: forcing a failure. [ 85.265504][ T1800] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 85.278846][ T1800] CPU: 1 UID: 0 PID: 1800 Comm: syz.3.503 Not tainted syzkaller #0 8ee30d9df144bc892052d3af75bf7ae355cbcd4b [ 85.278885][ T1800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 85.278896][ T1800] Call Trace: [ 85.278901][ T1800] [ 85.278907][ T1800] __dump_stack+0x21/0x30 [ 85.278933][ T1800] dump_stack_lvl+0x140/0x1c0 [ 85.278956][ T1800] ? __cfi_dump_stack_lvl+0x10/0x10 [ 85.278978][ T1800] ? stack_trace_save+0xaa/0x100 [ 85.278996][ T1800] ? stack_depot_save_flags+0x38/0x800 [ 85.279015][ T1800] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 85.279034][ T1800] dump_stack+0x19/0x20 [ 85.279055][ T1800] should_fail_ex+0x3c2/0x510 [ 85.279073][ T1800] should_fail_alloc_page+0xec/0x110 [ 85.279099][ T1800] __alloc_pages_noprof+0x1c0/0x7e0 [ 85.279122][ T1800] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 85.279147][ T1800] ? io_alloc_hash_table+0x52/0x160 [ 85.279171][ T1800] ___kmalloc_large_node+0x81/0x220 [ 85.279188][ T1800] ? io_alloc_hash_table+0x52/0x160 [ 85.279211][ T1800] __kmalloc_large_node_noprof+0x1e/0xd0 [ 85.279227][ T1800] ? io_alloc_hash_table+0x52/0x160 [ 85.279251][ T1800] __kmalloc_noprof+0x326/0x510 [ 85.279266][ T1800] ? __kasan_kmalloc+0x96/0xb0 [ 85.279286][ T1800] io_alloc_hash_table+0x52/0x160 [ 85.279310][ T1800] io_ring_ctx_alloc+0xd1/0x1dc0 [ 85.279326][ T1800] ? __cfi_vfs_write+0x10/0x10 [ 85.279342][ T1800] io_uring_create+0x2e0/0x13f0 [ 85.279359][ T1800] ? __kasan_check_write+0x18/0x20 [ 85.279386][ T1800] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 85.279407][ T1800] ? __kasan_check_write+0x18/0x20 [ 85.279422][ T1800] ? __x64_sys_io_uring_setup+0x80/0x80 [ 85.279444][ T1800] ? __kasan_check_read+0x15/0x20 [ 85.279459][ T1800] __x64_sys_io_uring_setup+0x5f/0x80 [ 85.279480][ T1800] x64_sys_call+0x22c0/0x2ee0 [ 85.279493][ T1800] do_syscall_64+0x57/0xf0 [ 85.279509][ T1800] ? clear_bhb_loop+0x50/0xa0 [ 85.279527][ T1800] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 85.279545][ T1800] RIP: 0033:0x7fa57759ce59 [ 85.279558][ T1800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.279571][ T1800] RSP: 002b:00007fa578513ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 85.279590][ T1800] RAX: ffffffffffffffda RBX: 0000200000000848 RCX: 00007fa57759ce59 [ 85.279601][ T1800] RDX: 00002000000008c8 RSI: 0000200000000848 RDI: 000000000000001c [ 85.279612][ T1800] RBP: 0000200000000840 R08: 0000200000000ac0 R09: 0000000000000000 [ 85.279623][ T1800] R10: 00002000000008d0 R11: 0000000000000206 R12: 00002000000008c8 [ 85.279634][ T1800] R13: 00002000000008d0 R14: 00007fa578513fd8 R15: 0000000000000000 [ 85.279647][ T1800] [ 85.574590][ T10] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 85.585120][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.594942][ T10] usb 2-1: config 0 descriptor?? [ 85.600774][ T10] usb 2-1: bad CDC descriptors [ 85.625773][ T1212] bridge_slave_1: left allmulticast mode [ 85.631459][ T1212] bridge_slave_1: left promiscuous mode [ 85.639070][ T1212] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.646786][ T1212] bridge_slave_0: left allmulticast mode [ 85.652517][ T1212] bridge_slave_0: left promiscuous mode [ 85.658342][ T1212] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.663427][ T45] usb 4-1: USB disconnect, device number 6 [ 85.674296][ T406] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 85.806861][ T31] usb 2-1: USB disconnect, device number 26 [ 85.834512][ T406] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.847043][ T406] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.856351][ T406] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.865542][ T406] usb 1-1: Product: syz [ 85.869779][ T406] usb 1-1: Manufacturer: syz [ 85.875112][ T406] usb 1-1: SerialNumber: syz [ 85.886183][ T406] usb 1-1: selecting invalid altsetting 1 [ 85.966013][ T1805] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.973087][ T1805] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.980244][ T1805] bridge_slave_0: entered allmulticast mode [ 85.986793][ T1805] bridge_slave_0: entered promiscuous mode [ 85.993904][ T1805] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.001215][ T1805] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.012637][ T1805] bridge_slave_1: entered allmulticast mode [ 86.019040][ T1805] bridge_slave_1: entered promiscuous mode [ 86.110714][ T1805] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.117992][ T1805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.125315][ T1805] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.132371][ T1805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.144072][ T1817] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 86.153909][ T1817] SELinux: failed to load policy [ 86.168978][ T1212] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.176371][ T1212] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.185973][ T964] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.193041][ T964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.202154][ T964] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.209208][ T964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.237707][ T1805] veth0_vlan: entered promiscuous mode [ 86.251238][ T1805] veth1_macvtap: entered promiscuous mode [ 86.272860][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 86.272877][ T36] audit: type=1400 audit(1799092236.834:374): avc: denied { mounton } for pid=1805 comm="syz-executor" path="/root/syzkaller.4q4EDD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 86.285357][ T406] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 86.309242][ T1801] x_tables: arp_tables: IDLETIMER target: not valid for this family [ 86.316439][ T406] cdc_ncm 1-1:1.0: bind() failure [ 86.346130][ T406] kernel read not supported for file 259/task/260/smaps (pid: 406 comm: kworker/0:3) [ 86.358726][ T406] kernel read not supported for file 2/task/3/smaps (pid: 406 comm: kworker/0:3) [ 86.393374][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 86.511162][ T1828] FAULT_INJECTION: forcing a failure. [ 86.511162][ T1828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.524357][ T1828] CPU: 1 UID: 0 PID: 1828 Comm: syz.1.514 Not tainted syzkaller #0 8ee30d9df144bc892052d3af75bf7ae355cbcd4b [ 86.524389][ T1828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 86.524402][ T1828] Call Trace: [ 86.524410][ T1828] [ 86.524418][ T1828] __dump_stack+0x21/0x30 [ 86.524454][ T1828] dump_stack_lvl+0x140/0x1c0 [ 86.524482][ T1828] ? __cfi_dump_stack_lvl+0x10/0x10 [ 86.524526][ T1828] ? avc_has_perm+0x155/0x240 [ 86.524549][ T1828] ? lock_sock_nested+0x216/0x2a0 [ 86.524572][ T1828] dump_stack+0x19/0x20 [ 86.524603][ T1828] should_fail_ex+0x3c2/0x510 [ 86.524639][ T1828] should_fail+0xf/0x20 [ 86.524660][ T1828] should_fail_usercopy+0x1e/0x30 [ 86.524685][ T1828] _copy_to_user+0x24/0xa0 [ 86.524714][ T1828] l2cap_sock_getsockopt+0xc67/0x1380 [ 86.524739][ T1828] ? __cfi_l2cap_sock_getsockopt+0x10/0x10 [ 86.524767][ T1828] ? __cfi_vfs_write+0x10/0x10 [ 86.524783][ T1828] ? __kasan_check_write+0x18/0x20 [ 86.524798][ T1828] ? __cfi_l2cap_sock_getsockopt+0x10/0x10 [ 86.524814][ T1828] do_sock_getsockopt+0x3a1/0x6c0 [ 86.524838][ T1828] ? __cfi_do_sock_getsockopt+0x10/0x10 [ 86.524861][ T1828] ? __fget_files+0x2bc/0x330 [ 86.524879][ T1828] __x64_sys_getsockopt+0x1d4/0x280 [ 86.524909][ T1828] x64_sys_call+0x10db/0x2ee0 [ 86.524923][ T1828] do_syscall_64+0x57/0xf0 [ 86.524938][ T1828] ? clear_bhb_loop+0x50/0xa0 [ 86.524958][ T1828] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 86.524975][ T1828] RIP: 0033:0x7f5e5d99ce59 [ 86.524989][ T1828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.525002][ T1828] RSP: 002b:00007f5e5e92e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 86.525019][ T1828] RAX: ffffffffffffffda RBX: 00007f5e5dc15fa0 RCX: 00007f5e5d99ce59 [ 86.525031][ T1828] RDX: 0000000000000001 RSI: 0000000000000006 RDI: 0000000000000004 [ 86.525040][ T1828] RBP: 00007f5e5e92e090 R08: 0000200000000140 R09: 0000000000000000 [ 86.525051][ T1828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.525060][ T1828] R13: 00007f5e5dc16038 R14: 00007f5e5dc15fa0 R15: 00007ffeeee97158 [ 86.525074][ T1828] [ 86.593485][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 86.756963][ T10] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 86.765186][ T10] usb 5-1: config 0 has no interface number 0 [ 86.771298][ T10] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 86.781362][ T10] usb 5-1: config 0 interface 196 has no altsetting 0 [ 86.789590][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 86.799605][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.807644][ T10] usb 5-1: Product: syz [ 86.811815][ T10] usb 5-1: Manufacturer: syz [ 86.816461][ T10] usb 5-1: SerialNumber: syz [ 86.821670][ T10] usb 5-1: config 0 descriptor?? [ 86.827316][ T1817] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 86.893316][ T406] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 87.043315][ T406] usb 2-1: Using ep0 maxpacket: 8 [ 87.049605][ T406] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.060808][ T406] usb 2-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 87.073830][ T406] usb 2-1: config 0 interface 0 has no altsetting 0 [ 87.080473][ T406] usb 2-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 87.089539][ T406] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.098196][ T406] usb 2-1: config 0 descriptor?? [ 87.188763][ T1832] netlink: 'syz.5.516': attribute type 28 has an invalid length. [ 87.515418][ T406] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 87.524369][ T406] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 87.531787][ T406] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 87.539458][ T406] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 87.546851][ T406] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 87.554451][ T406] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 87.561846][ T406] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 87.569576][ T406] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 87.576980][ T406] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 87.584516][ T406] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 87.591922][ T406] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 87.599359][ T406] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 87.606798][ T406] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 87.614349][ T406] magicmouse 0003:05AC:0324.0011: unknown main item tag 0x0 [ 87.627439][ T406] magicmouse 0003:05AC:0324.0011: hidraw0: USB HID v0.01 Device [HID 05ac:0324] on usb-dummy_hcd.1-1/input0 [ 87.710490][ T63] usb 2-1: USB disconnect, device number 27 [ 87.943556][ T10] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: -110 [ 87.954258][ T10] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 88.246438][ T45] usb 1-1: USB disconnect, device number 28 [ 88.351934][ T10] usb 5-1: USB disconnect, device number 20 [ 88.388740][ T10] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected [ 88.487706][ T1897] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 88.497411][ T1897] SELinux: failed to load policy [ 88.583342][ T318] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 88.734465][ T318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.745500][ T318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.753387][ T63] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 88.755634][ T318] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.775749][ T318] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.784822][ T318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.793553][ T318] usb 2-1: config 0 descriptor?? [ 88.905547][ T10] kernel read not supported for file 295/task/296/smaps (pid: 10 comm: kworker/0:1) [ 88.923289][ T63] usb 1-1: Using ep0 maxpacket: 32 [ 88.930135][ T63] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 88.938505][ T63] usb 1-1: config 0 has no interface number 0 [ 88.944815][ T63] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 88.958045][ T63] usb 1-1: config 0 interface 196 has no altsetting 0 [ 88.961240][ T36] audit: type=1326 audit(1799092239.524:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1902 comm="syz.4.527" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad4eb9ce59 code=0x0 [ 88.982003][ T63] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 88.998928][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.007270][ T63] usb 1-1: Product: syz [ 89.011369][ T318] plantronics 0003:047F:FFFF.0012: item fetching failed at offset 0/15 [ 89.016846][ T63] usb 1-1: Manufacturer: syz [ 89.028214][ T63] usb 1-1: SerialNumber: syz [ 89.028450][ T318] plantronics 0003:047F:FFFF.0012: parse failed [ 89.038722][ T63] usb 1-1: config 0 descriptor?? [ 89.045105][ T1897] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 89.056767][ T318] plantronics 0003:047F:FFFF.0012: probe with driver plantronics failed with error -22 [ 89.075721][ T318] usb 2-1: USB disconnect, device number 28 [ 89.184230][ T1919] netlink: 120 bytes leftover after parsing attributes in process `syz.5.531'. [ 89.194958][ T36] audit: type=1400 audit(1799092239.764:376): avc: denied { create } for pid=1918 comm="syz.5.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 89.205997][ T1919] netlink: 'syz.5.531': attribute type 25 has an invalid length. [ 89.383323][ T318] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 89.533343][ T318] usb 2-1: Using ep0 maxpacket: 8 [ 89.539638][ T318] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.550722][ T318] usb 2-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 89.563694][ T318] usb 2-1: config 0 interface 0 has no altsetting 0 [ 89.570305][ T318] usb 2-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 89.579392][ T318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.588137][ T318] usb 2-1: config 0 descriptor?? [ 89.806244][ T1924] rust_binder: Write failure EINVAL in pid:300 [ 89.808352][ T1924] rust_binder: 300: no such ref 2 [ 89.823318][ T1924] rust_binder: 300: no such ref 1 [ 89.828426][ T1924] rust_binder: 1923:1924 transaction to 0 failed: EINVAL [ 89.847311][ T1929] input: syz0 as /devices/virtual/input/input14 [ 89.861227][ T1930] FAULT_INJECTION: forcing a failure. [ 89.861227][ T1930] name failslab, interval 1, probability 0, space 0, times 0 [ 89.874188][ T1930] CPU: 1 UID: 0 PID: 1930 Comm: syz.5.534 Not tainted syzkaller #0 8ee30d9df144bc892052d3af75bf7ae355cbcd4b [ 89.874219][ T1930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 89.874234][ T1930] Call Trace: [ 89.874241][ T1930] [ 89.874249][ T1930] __dump_stack+0x21/0x30 [ 89.874288][ T1930] dump_stack_lvl+0x140/0x1c0 [ 89.874318][ T1930] ? __cfi_dump_stack_lvl+0x10/0x10 [ 89.874348][ T1930] ? __kasan_kmalloc+0x96/0xb0 [ 89.874373][ T1930] ? __kmalloc_cache_noprof+0x23c/0x470 [ 89.874398][ T1930] dump_stack+0x19/0x20 [ 89.874427][ T1930] should_fail_ex+0x3c2/0x510 [ 89.874452][ T1930] should_failslab+0xac/0x100 [ 89.874490][ T1930] kmem_cache_alloc_noprof+0x42/0x410 [ 89.874512][ T1930] ? __kernfs_new_node+0xf1/0x740 [ 89.874549][ T1930] __kernfs_new_node+0xf1/0x740 [ 89.874574][ T1930] ? mutex_unlock+0x90/0x240 [ 89.874600][ T1930] ? kernfs_new_node+0x280/0x280 [ 89.874625][ T1930] ? pcpu_alloc_noprof+0xd93/0x1440 [ 89.874659][ T1930] kernfs_new_node+0x154/0x280 [ 89.874688][ T1930] kernfs_create_dir_ns+0x4b/0x130 [ 89.874750][ T1930] cgroup_mkdir+0x396/0x1600 [ 89.874774][ T1930] ? __kasan_check_write+0x18/0x20 [ 89.874797][ T1930] ? __cfi_cgroup_mkdir+0x10/0x10 [ 89.874814][ T1930] kernfs_iop_mkdir+0x1bb/0x2d0 [ 89.874833][ T1930] vfs_mkdir+0x58e/0x810 [ 89.874870][ T1930] open_or_create_special_dir+0xf1/0x200 [ 89.874892][ T1930] incfs_mount_fs+0x433/0x970 [ 89.874911][ T1930] ? __cfi_incfs_mount_fs+0x10/0x10 [ 89.874932][ T1930] ? selinux_capable+0x38/0x50 [ 89.874964][ T1930] legacy_get_tree+0x103/0x1b0 [ 89.874989][ T1930] ? __cfi_incfs_mount_fs+0x10/0x10 [ 89.875010][ T1930] vfs_get_tree+0x9e/0x290 [ 89.875029][ T1930] do_new_mount+0x251/0xb40 [ 89.875058][ T1930] ? security_capable+0x44/0x130 [ 89.875078][ T1930] path_mount+0x66a/0xff0 [ 89.875093][ T1930] ? putname+0x113/0x150 [ 89.875112][ T1930] __se_sys_mount+0x2bf/0x480 [ 89.875130][ T1930] ? ksys_write+0x1f3/0x260 [ 89.875149][ T1930] ? __x64_sys_mount+0xf0/0xf0 [ 89.875167][ T1930] ? handle_softirqs+0x54c/0x620 [ 89.875186][ T1930] __x64_sys_mount+0xc3/0xf0 [ 89.875205][ T1930] x64_sys_call+0x2021/0x2ee0 [ 89.875222][ T1930] do_syscall_64+0x57/0xf0 [ 89.875257][ T1930] ? clear_bhb_loop+0x50/0xa0 [ 89.875281][ T1930] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 89.875305][ T1930] RIP: 0033:0x7fd21079ce59 [ 89.875323][ T1930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.875342][ T1930] RSP: 002b:00007fd211732028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 89.875363][ T1930] RAX: ffffffffffffffda RBX: 00007fd210a15fa0 RCX: 00007fd21079ce59 [ 89.875378][ T1930] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000000 [ 89.875392][ T1930] RBP: 00007fd211732090 R08: 0000200000000040 R09: 0000000000000000 [ 89.875405][ T1930] R10: 0000000000200010 R11: 0000000000000246 R12: 0000000000000002 [ 89.875417][ T1930] R13: 00007fd210a16038 R14: 00007fd210a15fa0 R15: 00007ffdc5aaf648 [ 89.875450][ T1930] [ 89.876734][ T1930] incfs: Can't find or create .index dir in ./cgroup [ 89.933697][ T36] audit: type=1400 audit(1799092240.464:377): avc: denied { bind } for pid=1928 comm="syz.4.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.938743][ T1930] incfs: mount failed -12 [ 89.946616][ T36] audit: type=1400 audit(1799092240.474:378): avc: denied { setopt } for pid=1928 comm="syz.4.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.017176][ T318] magicmouse 0003:05AC:0324.0013: unknown main item tag 0x0 [ 90.180580][ T63] ipheth 1-1:0.196: ipheth_enable_ncm: usb_control_msg: -110 [ 90.186375][ T318] magicmouse 0003:05AC:0324.0013: unknown main item tag 0x0 [ 90.206447][ T406] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 90.221698][ T318] magicmouse 0003:05AC:0324.0013: unknown main item tag 0x0 [ 90.246904][ T63] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 90.256653][ T318] magicmouse 0003:05AC:0324.0013: unknown main item tag 0x0 [ 90.282760][ T318] magicmouse 0003:05AC:0324.0013: unknown main item tag 0x0 [ 90.290214][ T318] magicmouse 0003:05AC:0324.0013: unknown main item tag 0x0 [ 90.297712][ T318] magicmouse 0003:05AC:0324.0013: unknown main item tag 0x0 [ 90.305165][ T318] magicmouse 0003:05AC:0324.0013: unknown main item tag 0x0 [ 90.324784][ T318] magicmouse 0003:05AC:0324.0013: unknown main item tag 0x0 [ 90.339999][ T318] magicmouse 0003:05AC:0324.0013: unknown main item tag 0x0 [ 90.352797][ T318] magicmouse 0003:05AC:0324.0013: unknown main item tag 0x0 [ 90.360424][ T318] magicmouse 0003:05AC:0324.0013: unknown main item tag 0x0 [ 90.368626][ T36] audit: type=1400 audit(1799092240.934:379): avc: denied { append } for pid=1942 comm="syz.5.541" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.375675][ T318] magicmouse 0003:05AC:0324.0013: unknown main item tag 0x0 [ 90.400846][ T318] magicmouse 0003:05AC:0324.0013: unknown main item tag 0x0 [ 90.411275][ T318] magicmouse 0003:05AC:0324.0013: hidraw0: USB HID v0.01 Device [HID 05ac:0324] on usb-dummy_hcd.1-1/input0 [ 90.414928][ T406] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 90.430394][ T318] usb 2-1: USB disconnect, device number 29 [ 90.449976][ T406] usb 5-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 90.461360][ T406] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.469618][ T406] usb 5-1: Product: syz [ 90.474039][ T406] usb 5-1: Manufacturer: syz [ 90.478680][ T406] usb 5-1: SerialNumber: syz [ 90.489650][ T1947] fido_id[1947]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 90.663342][ T9] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 90.691624][ T406] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 90.724166][ T406] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 90.744493][ T406] usb 5-1: USB disconnect, device number 21 [ 90.754384][ T415] udevd[415]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 90.796349][ T10] usb 1-1: USB disconnect, device number 29 [ 90.814394][ T9] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 90.835335][ T10] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 90.842966][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 90.854241][ T9] usb 6-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 90.863532][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.873626][ T9] usb 6-1: config 0 descriptor?? [ 91.073334][ T318] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 91.221094][ T45] kernel read not supported for file 304/task/305/smaps (pid: 45 comm: kworker/1:1) [ 91.232031][ T318] usb 2-1: unable to get BOS descriptor or descriptor too short [ 91.242307][ T318] usb 2-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 91.251442][ T318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.259514][ T318] usb 2-1: Product: syz [ 91.264067][ T318] usb 2-1: Manufacturer: syz [ 91.271064][ T318] usb 2-1: SerialNumber: syz [ 91.288965][ T9] input: HID 28bd:1903 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28BD:1903.0014/input/input15 [ 91.324893][ T9] uclogic 0003:28BD:1903.0014: input,hidraw0: USB HID v0.81 Mouse [HID 28bd:1903] on usb-dummy_hcd.5-1/input0 [ 91.416074][ T9] kernel read not supported for file 312/task/313/smaps (pid: 9 comm: kworker/0:0) [ 91.488116][ T318] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 91.496358][ T1946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.506323][ T2001] rust_binder: 2000:2001 transaction to 0 failed: ENOENT [ 91.515780][ T1946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.550203][ T2007] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=63 sclass=netlink_xfrm_socket pid=2007 comm=syz.0.556 [ 91.563242][ T318] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 91.578960][ T45] usb 6-1: USB disconnect, device number 2 [ 91.596594][ T318] usb 2-1: USB disconnect, device number 30 [ 91.607044][ T2009] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 91.624971][ T2009] SELinux: failed to load policy [ 91.629932][ T415] udevd[415]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 91.683351][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 91.833897][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 91.840146][ T9] usb 5-1: config 1 has an invalid interface number: 77 but max is 0 [ 91.848300][ T9] usb 5-1: config 1 has no interface number 0 [ 91.854487][ T9] usb 5-1: config 1 interface 77 has no altsetting 0 [ 91.861222][ T9] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=2c.aa [ 91.870314][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.883328][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 92.043298][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 92.056807][ T10] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 92.065204][ T10] usb 1-1: config 0 has no interface number 0 [ 92.071388][ T10] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 92.081882][ T10] usb 1-1: config 0 interface 196 has no altsetting 0 [ 92.084453][ T1998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.094915][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 92.098723][ T1998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.108726][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.121896][ T10] usb 1-1: Product: syz [ 92.126140][ T10] usb 1-1: Manufacturer: syz [ 92.131321][ T10] usb 1-1: SerialNumber: syz [ 92.140899][ T9] usb 5-1: string descriptor 0 read error: -71 [ 92.147316][ T10] usb 1-1: config 0 descriptor?? [ 92.155616][ T9] usb_ehset_test 5-1:1.77: probe with driver usb_ehset_test failed with error -32 [ 92.165211][ T2009] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 92.172447][ T36] audit: type=1400 audit(1799092242.734:380): avc: denied { create } for pid=2023 comm="syz.1.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 92.186172][ T9] usb 5-1: USB disconnect, device number 22 [ 92.625075][ T2036] rust_binder: 2035:2036 transaction to 0 failed: ENOENT [ 92.673704][ T2040] FAULT_INJECTION: forcing a failure. [ 92.673704][ T2040] name failslab, interval 1, probability 0, space 0, times 0 [ 92.693488][ T2040] CPU: 1 UID: 0 PID: 2040 Comm: syz.4.566 Not tainted syzkaller #0 8ee30d9df144bc892052d3af75bf7ae355cbcd4b [ 92.693524][ T2040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 92.693539][ T2040] Call Trace: [ 92.693546][ T2040] [ 92.693554][ T2040] __dump_stack+0x21/0x30 [ 92.693591][ T2040] dump_stack_lvl+0x140/0x1c0 [ 92.693622][ T2040] ? __cfi_dump_stack_lvl+0x10/0x10 [ 92.693653][ T2040] ? __kasan_check_write+0x18/0x20 [ 92.693675][ T2040] ? copy_mm+0x307/0x1da0 [ 92.693703][ T2040] dump_stack+0x19/0x20 [ 92.693733][ T2040] should_fail_ex+0x3c2/0x510 [ 92.693760][ T2040] should_failslab+0xac/0x100 [ 92.693786][ T2040] kmem_cache_alloc_noprof+0x42/0x410 [ 92.693810][ T2040] ? alloc_pid+0xa5/0xb80 [ 92.693834][ T2040] ? __asan_memcpy+0x5a/0x80 [ 92.693856][ T2040] alloc_pid+0xa5/0xb80 [ 92.693881][ T2040] copy_process+0x1467/0x3350 [ 92.693913][ T2040] ? __cfi_copy_process+0x10/0x10 [ 92.693941][ T2040] ? __kmalloc_cache_noprof+0x23c/0x470 [ 92.693965][ T2040] ? __kasan_check_write+0x18/0x20 [ 92.693987][ T2040] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 92.694015][ T2040] vhost_task_create+0x1f7/0x3f0 [ 92.694039][ T2040] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 92.694067][ T2040] ? __cfi_vhost_task_create+0x10/0x10 [ 92.694094][ T2040] ? __cfi_vhost_task_fn+0x10/0x10 [ 92.694118][ T2040] ? __kasan_check_write+0x18/0x20 [ 92.694140][ T2040] ? mutex_lock+0x97/0x1d0 [ 92.694168][ T2040] ? __cfi_mutex_lock+0x10/0x10 [ 92.694203][ T2040] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 92.694230][ T2040] kvm_mmu_post_init_vm+0x161/0x300 [ 92.694264][ T2040] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 92.694295][ T2040] ? _parse_integer_limit+0x195/0x1e0 [ 92.694320][ T2040] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 92.694351][ T2040] ? kstrtoull+0x13b/0x1e0 [ 92.694372][ T2040] ? kstrtouint+0x78/0xf0 [ 92.694395][ T2040] ? ioctl_has_perm+0x1bc/0x500 [ 92.694417][ T2040] ? __asan_memcpy+0x5a/0x80 [ 92.694438][ T2040] ? ioctl_has_perm+0x408/0x500 [ 92.694459][ T2040] ? has_cap_mac_admin+0xd0/0xd0 [ 92.694492][ T2040] ? __kasan_check_write+0x18/0x20 [ 92.694513][ T2040] ? mutex_lock_killable+0x97/0x1d0 [ 92.694554][ T2040] ? __cfi_mutex_lock_killable+0x10/0x10 [ 92.694579][ T2040] ? proc_fail_nth_write+0x184/0x220 [ 92.694610][ T2040] kvm_vcpu_ioctl+0xa43/0x1000 [ 92.694630][ T2040] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 92.694651][ T2040] ? __cfi_vfs_write+0x10/0x10 [ 92.694672][ T2040] ? __kasan_check_write+0x18/0x20 [ 92.694691][ T2040] ? mutex_unlock+0x90/0x240 [ 92.694715][ T2040] ? __cfi_mutex_unlock+0x10/0x10 [ 92.694744][ T2040] ? bpf_lsm_file_ioctl+0xd/0x20 [ 92.694769][ T2040] ? security_file_ioctl+0x3e/0x110 [ 92.694800][ T2040] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 92.694819][ T2040] __se_sys_ioctl+0x132/0x1b0 [ 92.694844][ T2040] __x64_sys_ioctl+0x7f/0xa0 [ 92.694866][ T2040] x64_sys_call+0x1878/0x2ee0 [ 92.694883][ T2040] do_syscall_64+0x57/0xf0 [ 92.694908][ T2040] ? clear_bhb_loop+0x50/0xa0 [ 92.694926][ T2040] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 92.694963][ T2040] RIP: 0033:0x7fad4eb9ce59 [ 92.694980][ T2040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.694996][ T2040] RSP: 002b:00007fad4fb0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.695016][ T2040] RAX: ffffffffffffffda RBX: 00007fad4ee15fa0 RCX: 00007fad4eb9ce59 [ 92.695032][ T2040] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 92.695046][ T2040] RBP: 00007fad4fb0c090 R08: 0000000000000000 R09: 0000000000000000 [ 92.695055][ T2040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.695063][ T2040] R13: 00007fad4ee16038 R14: 00007fad4ee15fa0 R15: 00007ffe47136358 [ 92.695075][ T2040] [ 93.198734][ T2054] overlayfs: conflicting options: userxattr,verity=on [ 93.243384][ T36] audit: type=1400 audit(1799092243.804:381): avc: denied { write } for pid=2056 comm="syz.5.573" name="nf_conntrack" dev="proc" ino=4026532540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 93.278832][ T2062] rust_binder: 2061:2062 transaction to 0 failed: ENOENT [ 93.473321][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 93.533322][ T45] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 93.583471][ T10] ipheth 1-1:0.196: ipheth_enable_ncm: usb_control_msg: -110 [ 93.592714][ T10] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 93.633314][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 93.638432][ T63] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 93.647430][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 93.656709][ T9] usb 6-1: config 1 has an invalid descriptor of length 221, skipping remainder of the config [ 93.667155][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 93.676468][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 93.691227][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.704354][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.705802][ T9] usb 6-1: New USB device strings: Mfr=1, Product=232, SerialNumber=3 [ 93.723331][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.724855][ T9] usb 6-1: Product: syz [ 93.737769][ T9] usb 6-1: Manufacturer: syz [ 93.742430][ T9] usb 6-1: SerialNumber: syz [ 93.746848][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 93.764260][ T45] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 93.773498][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.786535][ T45] usb 2-1: config 0 descriptor?? [ 93.804773][ T63] usb 5-1: unable to get BOS descriptor or descriptor too short [ 93.813491][ T63] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 32, setting to 0 [ 93.824365][ T63] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16, setting to 0 [ 93.837671][ T63] usb 5-1: string descriptor 0 read error: -22 [ 93.844157][ T63] usb 5-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40 [ 93.853496][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.994130][ T2066] overlayfs: failed to clone lowerpath [ 93.994558][ T36] audit: type=1400 audit(1799092244.564:382): avc: denied { mounton } for pid=2065 comm="syz.1.577" path="/116/file0" dev="configfs" ino=2467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 94.023132][ T36] audit: type=1400 audit(1799092244.584:383): avc: denied { read } for pid=2065 comm="syz.1.577" name="/" dev="configfs" ino=2467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 94.027805][ T2066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.046391][ T36] audit: type=1400 audit(1799092244.584:384): avc: denied { open } for pid=2065 comm="syz.1.577" path="/116/file0" dev="configfs" ino=2467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 94.055356][ T2066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.084658][ T2074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.094960][ T2074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.103232][ T318] usb 1-1: USB disconnect, device number 30 [ 94.111206][ T63] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 94.125557][ T9] cdc_ncm 6-1:1.0: invalid descriptor buffer length [ 94.132200][ T9] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 94.145473][ T9] cdc_ncm 6-1:1.0: bind() failure [ 94.150692][ T63] usb 5-1: USB disconnect, device number 23 [ 94.157350][ T318] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 94.165766][ T9] usb 6-1: USB disconnect, device number 3 [ 94.326938][ T45] playstation 0003:054C:09CC.0015: unknown main item tag 0x0 [ 94.340491][ T45] playstation 0003:054C:09CC.0015: unknown main item tag 0x2 [ 94.348630][ T45] playstation 0003:054C:09CC.0015: hidraw0: USB HID vff.fd Device [HID 054c:09cc] on usb-dummy_hcd.1-1/input0 [ 94.526925][ T45] playstation 0003:054C:09CC.0015: Invalid reportID received, expected 18 got 157 [ 94.536253][ T45] playstation 0003:054C:09CC.0015: Failed to retrieve DualShock4 pairing info: -22 [ 94.545696][ T45] playstation 0003:054C:09CC.0015: Failed to get MAC address from DualShock4 [ 94.554685][ T45] playstation 0003:054C:09CC.0015: Failed to create dualshock4. [ 94.562982][ T45] playstation 0003:054C:09CC.0015: probe with driver playstation failed with error -22 [ 94.639857][ T2107] overlayfs: failed to resolve './file0': -2 [ 94.692565][ T2111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2328 sclass=netlink_route_socket pid=2111 comm=syz.4.585 [ 94.721185][ T45] kernel read not supported for file 85/task/86/smaps (pid: 45 comm: kworker/1:1) [ 94.733071][ T9] usb 2-1: USB disconnect, device number 31 [ 94.749423][ T2121] netlink: 'syz.0.590': attribute type 4 has an invalid length. [ 94.763476][ T2121] netlink: 'syz.0.590': attribute type 5 has an invalid length. [ 94.772258][ T36] audit: type=1400 audit(1799092245.334:385): avc: denied { write } for pid=2110 comm="syz.4.585" path="socket:[17482]" dev="sockfs" ino=17482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.793549][ T2121] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.590'. [ 94.827684][ T2121] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 95.033824][ T45] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 95.123320][ T318] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 95.184396][ T45] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 95.192632][ T45] usb 6-1: config 0 has no interface number 0 [ 95.200588][ T45] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 95.209741][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.217779][ T45] usb 6-1: Product: syz [ 95.221934][ T45] usb 6-1: Manufacturer: syz [ 95.226555][ T45] usb 6-1: SerialNumber: syz [ 95.231800][ T45] usb 6-1: config 0 descriptor?? [ 95.246401][ T36] audit: type=1400 audit(1799092245.814:386): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 95.283310][ T318] usb 1-1: Using ep0 maxpacket: 16 [ 95.289687][ T318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.300639][ T318] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 95.313515][ T318] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 95.322575][ T318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.331369][ T318] usb 1-1: config 0 descriptor?? [ 95.513480][ T31] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 95.643629][ T2124] netlink: 36 bytes leftover after parsing attributes in process `syz.5.591'. [ 95.657725][ T45] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 95.672067][ T31] usb 2-1: device descriptor read/64, error -71 [ 95.679751][ T45] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 95.689605][ T45] asix 6-1:0.251: probe with driver asix failed with error -5 [ 95.698499][ T45] usb 6-1: USB disconnect, device number 4 [ 95.720291][ T2143] rust_binder: Write failure EINVAL in pid:352 [ 95.741293][ T2128] FAULT_INJECTION: forcing a failure. [ 95.741293][ T2128] name failslab, interval 1, probability 0, space 0, times 0 [ 95.760443][ T2128] CPU: 1 UID: 0 PID: 2128 Comm: syz.0.592 Not tainted syzkaller #0 8ee30d9df144bc892052d3af75bf7ae355cbcd4b [ 95.760473][ T2128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 95.760486][ T2128] Call Trace: [ 95.760495][ T2128] [ 95.760502][ T2128] __dump_stack+0x21/0x30 [ 95.760535][ T2128] dump_stack_lvl+0x140/0x1c0 [ 95.760563][ T2128] ? __cfi_dump_stack_lvl+0x10/0x10 [ 95.760593][ T2128] dump_stack+0x19/0x20 [ 95.760618][ T2128] should_fail_ex+0x3c2/0x510 [ 95.760640][ T2128] should_failslab+0xac/0x100 [ 95.760664][ T2128] __kmalloc_cache_noprof+0x41/0x470 [ 95.760685][ T2128] ? _raw_spin_lock+0x92/0x120 [ 95.760705][ T2128] ? kobject_uevent_env+0x2a3/0x7e0 [ 95.760726][ T2128] ? __cfi__raw_spin_lock+0x10/0x10 [ 95.760746][ T2128] kobject_uevent_env+0x2a3/0x7e0 [ 95.760770][ T2128] kobject_uevent+0x21/0x40 [ 95.760817][ T2128] gadget_unbind_driver+0x32e/0x3f0 [ 95.760843][ T2128] ? __cfi_gadget_unbind_driver+0x10/0x10 [ 95.760867][ T2128] device_release_driver_internal+0x4ad/0x830 [ 95.760899][ T2128] driver_detach+0x1f5/0x2d0 [ 95.760929][ T2128] bus_remove_driver+0x254/0x2b0 [ 95.760954][ T2128] driver_unregister+0x79/0xb0 [ 95.760973][ T2128] usb_gadget_unregister_driver+0x52/0x80 [ 95.760995][ T2128] raw_release+0xdb/0x280 [ 95.761024][ T2128] ? __cfi_raw_release+0x10/0x10 [ 95.761052][ T2128] __fput+0x208/0xa30 [ 95.761082][ T2128] __fput_sync+0x4a/0x70 [ 95.761109][ T2128] __se_sys_close+0x172/0x1f0 [ 95.761140][ T2128] __x64_sys_close+0x3c/0x60 [ 95.761170][ T2128] x64_sys_call+0x2560/0x2ee0 [ 95.761190][ T2128] do_syscall_64+0x57/0xf0 [ 95.761211][ T2128] ? clear_bhb_loop+0x50/0xa0 [ 95.761236][ T2128] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 95.761262][ T2128] RIP: 0033:0x7f0223d5d68e [ 95.761280][ T2128] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 95.761299][ T2128] RSP: 002b:00007f02227f6f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 95.761321][ T2128] RAX: ffffffffffffffda RBX: 00007f02227f76c0 RCX: 00007f0223d5d68e [ 95.761336][ T2128] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 95.761348][ T2128] RBP: 00007f02227f7090 R08: 0000000000000000 R09: 0000000000000000 [ 95.761361][ T2128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.761373][ T2128] R13: 00007f0224016038 R14: 00007f0224015fa0 R15: 00007ffd1a179b68 [ 95.761390][ T2128] [ 95.762012][ T318] usbhid 1-1:0.0: can't add hid device: -71 [ 96.003472][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 96.020132][ T318] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 96.029397][ T318] usb 1-1: USB disconnect, device number 31 [ 96.153327][ T31] usb 2-1: device descriptor read/64, error -71 [ 96.164475][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.175547][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.185345][ T9] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 96.194844][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.203971][ T9] usb 5-1: config 0 descriptor?? [ 96.216438][ T406] kernel read not supported for file 89/task/90/smaps (pid: 406 comm: kworker/0:3) [ 96.393317][ T31] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 96.484976][ T318] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 96.526111][ T31] usb 2-1: device descriptor read/64, error -71 [ 96.643488][ T318] usb 6-1: Using ep0 maxpacket: 8 [ 96.649903][ T318] usb 6-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.661039][ T318] usb 6-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 96.674041][ T318] usb 6-1: config 0 interface 0 has no altsetting 0 [ 96.680666][ T318] usb 6-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 96.689726][ T318] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.698504][ T318] usb 6-1: config 0 descriptor?? [ 96.773322][ T31] usb 2-1: device descriptor read/64, error -71 [ 96.815528][ T9] usb 5-1: language id specifier not provided by device, defaulting to English [ 96.893444][ T31] usb usb2-port1: attempt power cycle [ 96.933326][ T406] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 97.084767][ T406] usb 1-1: unable to get BOS descriptor or descriptor too short [ 97.092840][ T406] usb 1-1: not running at top speed; connect to a high speed hub [ 97.101393][ T406] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 215, changing to 4 [ 97.114441][ T318] magicmouse 0003:05AC:0324.0017: unknown main item tag 0x0 [ 97.114859][ T406] usb 1-1: language id specifier not provided by device, defaulting to English [ 97.127744][ T318] magicmouse 0003:05AC:0324.0017: unknown main item tag 0x0 [ 97.132776][ T406] usb 1-1: New USB device found, idVendor=04b4, idProduct=931d, bcdDevice= 0.40 [ 97.138770][ T318] magicmouse 0003:05AC:0324.0017: unknown main item tag 0x0 [ 97.147700][ T406] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.154881][ T318] magicmouse 0003:05AC:0324.0017: unknown main item tag 0x0 [ 97.162848][ T406] usb 1-1: Product: syz [ 97.170106][ T318] magicmouse 0003:05AC:0324.0017: unknown main item tag 0x0 [ 97.174583][ T406] usb 1-1: Manufacturer: 鴪ꋾ犪䍌甩㪖Ᶎ䑕炗ꃗ㯑ꚕ䄝隇텝⽺䰸㰚힇阚电둰₶헒ⷡ셌孾種⺗⟗轈헴ꄦ큠㷽ꮓኍ㞪噞ഐ㏯쨀行袡ᒏ檧鐞澁ﮱ쏑݇䱮괙ᮋ汖ႋँ錎㜇䊠⑱ຐꨣ衟ꁭ悝粈赤㶯춎敧 [ 97.181944][ T318] magicmouse 0003:05AC:0324.0017: unknown main item tag 0x0 [ 97.205988][ T406] usb 1-1: SerialNumber: syz [ 97.214122][ T318] magicmouse 0003:05AC:0324.0017: unknown main item tag 0x0 [ 97.225686][ T9] uclogic 0003:256C:006D.0016: interface is invalid, ignoring [ 97.227600][ T318] magicmouse 0003:05AC:0324.0017: unknown main item tag 0x0 [ 97.240689][ T318] magicmouse 0003:05AC:0324.0017: unknown main item tag 0x0 [ 97.248137][ T318] magicmouse 0003:05AC:0324.0017: unknown main item tag 0x0 [ 97.255627][ T318] magicmouse 0003:05AC:0324.0017: unknown main item tag 0x0 [ 97.262944][ T318] magicmouse 0003:05AC:0324.0017: unknown main item tag 0x0 [ 97.270280][ T31] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 97.278210][ T318] magicmouse 0003:05AC:0324.0017: unknown main item tag 0x0 [ 97.285558][ T318] magicmouse 0003:05AC:0324.0017: unknown main item tag 0x0 [ 97.293913][ T318] magicmouse 0003:05AC:0324.0017: hidraw0: USB HID v0.01 Device [HID 05ac:0324] on usb-dummy_hcd.5-1/input0 [ 97.305949][ T31] usb 2-1: device descriptor read/8, error -71 [ 97.315815][ T318] usb 6-1: USB disconnect, device number 5 [ 97.332093][ T2164] fido_id[2164]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 97.425697][ T406] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 97.432650][ T406] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 97.434709][ T31] usb 2-1: device descriptor read/8, error -71 [ 97.449345][ T406] usb 1-1: USB disconnect, device number 32 [ 97.460090][ T415] udevd[415]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 97.683455][ T31] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 97.704446][ T31] usb 2-1: device descriptor read/8, error -71 [ 97.834421][ T31] usb 2-1: device descriptor read/8, error -71 [ 97.943951][ T31] usb usb2-port1: unable to enumerate USB device [ 97.960343][ T63] kernel read not supported for file 97/task/98/smaps (pid: 63 comm: kworker/0:2) [ 97.977443][ T2175] random: crng reseeded on system resumption [ 97.983849][ T36] audit: type=1400 audit(1799092248.544:387): avc: denied { write } for pid=2174 comm="syz.0.610" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 98.010053][ T2177] netlink: 'syz.5.611': attribute type 16 has an invalid length. [ 98.023330][ T2177] netlink: 'syz.5.611': attribute type 4 has an invalid length. [ 98.031418][ T2177] netlink: 64114 bytes leftover after parsing attributes in process `syz.5.611'. [ 98.045083][ T36] audit: type=1400 audit(1799092248.614:388): avc: denied { search } for pid=2174 comm="syz.0.610" name="/" dev="configfs" ino=2467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.278886][ T2183] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 98.287293][ T36] audit: type=1400 audit(1799092248.854:389): avc: denied { ioctl } for pid=2182 comm="syz.1.613" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 98.314147][ T63] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 98.463306][ T63] usb 1-1: Using ep0 maxpacket: 8 [ 98.469878][ T63] usb 1-1: unable to get BOS descriptor or descriptor too short [ 98.478306][ T63] usb 1-1: config 1 has an invalid descriptor of length 221, skipping remainder of the config [ 98.488580][ T63] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 98.497649][ T63] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.511892][ T63] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.520988][ T63] usb 1-1: New USB device strings: Mfr=1, Product=232, SerialNumber=3 [ 98.529175][ T63] usb 1-1: Product: syz [ 98.533387][ T63] usb 1-1: Manufacturer: syz [ 98.538001][ T63] usb 1-1: SerialNumber: syz [ 98.673315][ T406] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 98.815453][ T63] cdc_ncm 1-1:1.0: invalid descriptor buffer length [ 98.822143][ T63] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 98.829021][ T406] usb 2-1: Using ep0 maxpacket: 16 [ 98.834248][ T63] cdc_ncm 1-1:1.0: bind() failure [ 98.840378][ T63] usb 1-1: USB disconnect, device number 33 [ 98.847356][ T406] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.853377][ T31] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 98.860383][ T406] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 98.879056][ T406] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 98.888170][ T406] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.896812][ T406] usb 2-1: config 0 descriptor?? [ 99.014815][ T31] usb 6-1: unable to get BOS descriptor or descriptor too short [ 99.023189][ T31] usb 6-1: not running at top speed; connect to a high speed hub [ 99.031732][ T31] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 99.040547][ T31] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.055346][ T31] usb 6-1: string descriptor 0 read error: -22 [ 99.061565][ T31] usb 6-1: New USB device found, idVendor=1235, idProduct=8202, bcdDevice= 0.40 [ 99.070818][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.081507][ T31] usb 6-1: MIDIStreaming interface descriptor not found [ 99.195198][ T63] usb 5-1: USB disconnect, device number 24 [ 99.213920][ T2188] rust_binder: Write failure EINVAL in pid:360 [ 99.214436][ T2188] rust_binder: 2187:2188 transaction to 0 failed: ENOENT [ 99.282302][ T2186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.297905][ T2186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.305747][ T36] audit: type=1400 audit(1799092249.874:390): avc: denied { write } for pid=2182 comm="syz.1.613" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 99.315181][ T406] HID 045e:07da: Invalid code 65791 type 1 [ 99.342423][ T406] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0018/input/input16 [ 99.361833][ T406] microsoft 0003:045E:07DA.0018: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 99.366263][ T2193] input: syz1 as /devices/virtual/input/input17 [ 99.416836][ T2196] netlink: 'syz.0.618': attribute type 4 has an invalid length. [ 99.439252][ T2196] netlink: 'syz.0.618': attribute type 4 has an invalid length. [ 99.501751][ T10] kernel read not supported for file 400/task/401/smaps (pid: 10 comm: kworker/0:1) [ 99.531071][ T2205] netlink: 'syz.0.622': attribute type 16 has an invalid length. [ 99.538905][ T2205] netlink: 'syz.0.622': attribute type 4 has an invalid length. [ 99.546629][ T2205] netlink: 64114 bytes leftover after parsing attributes in process `syz.0.622'. [ 99.563329][ T63] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 99.714465][ T63] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.725370][ T63] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.735013][ T63] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 99.744108][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 99.752115][ T63] usb 5-1: SerialNumber: syz [ 99.918051][ T2183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.926714][ T2183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.935312][ T406] usb 2-1: USB disconnect, device number 36 [ 99.959655][ T63] usb 5-1: 0:2 : does not exist [ 99.964739][ T63] usb 5-1: unit 5 not found! [ 99.971344][ T63] usb 5-1: USB disconnect, device number 25 [ 99.981216][ T415] udevd[415]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 100.106033][ T2209] rust_binder: Write failure EINVAL in pid:406 [ 100.106787][ T2209] rust_binder: 2208:2209 transaction to 0 failed: ENOENT [ 100.138143][ T2213] SELinux: policydb version 0 does not match my version range 15-33 [ 100.153510][ T2213] SELinux: failed to load policy [ 100.393323][ T63] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 100.523298][ T63] usb 1-1: device descriptor read/64, error -71 [ 100.567266][ T31] kernel read not supported for file 327/task/328/smaps (pid: 31 comm: kworker/1:0) [ 100.613196][ T2227] netlink: 'syz.1.632': attribute type 16 has an invalid length. [ 100.621165][ T2227] netlink: 'syz.1.632': attribute type 4 has an invalid length. [ 100.628890][ T2227] netlink: 64114 bytes leftover after parsing attributes in process `syz.1.632'. [ 100.640737][ T2227] netlink: 104 bytes leftover after parsing attributes in process `syz.1.632'. [ 100.666973][ T2229] rust_binder: Write failure EINVAL in pid:367 [ 100.668241][ T2229] rust_binder: 2228:2229 transaction to 0 failed: ENOENT [ 100.701949][ T36] audit: type=1400 audit(1799092251.264:391): avc: denied { block_suspend } for pid=2232 comm="syz.4.635" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 100.717175][ T2233] raw_sendmsg: syz.4.635 forgot to set AF_INET. Fix it! [ 100.763325][ T63] usb 1-1: device descriptor read/64, error -71 [ 100.789608][ T2233] incfs: Options parsing error. -22 [ 100.795121][ T2233] incfs: mount failed -22 [ 100.877666][ T2236] cgroup: fork rejected by pids controller in /syz4 [ 101.003320][ T63] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 101.133315][ T63] usb 1-1: device descriptor read/64, error -71 [ 101.373371][ T63] usb 1-1: device descriptor read/64, error -71 [ 101.463328][ T36] audit: type=1400 audit(1799092252.024:392): avc: denied { write } for pid=2273 comm="syz.4.638" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 101.488072][ T36] audit: type=1400 audit(1799092252.024:393): avc: denied { open } for pid=2273 comm="syz.4.638" path="/140/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 101.497876][ T63] usb usb1-port1: attempt power cycle [ 101.624728][ T31] usb 6-1: USB disconnect, device number 6 [ 101.661461][ T10] kernel read not supported for file 105/task/106/smaps (pid: 10 comm: kworker/0:1) [ 101.703292][ T406] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 101.863310][ T63] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 101.883502][ T406] usb 5-1: Using ep0 maxpacket: 16 [ 101.889813][ T63] usb 1-1: device descriptor read/8, error -71 [ 101.896395][ T406] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 101.905755][ T406] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.923331][ T406] usb 5-1: config 0 has no interface number 0 [ 101.933417][ T406] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 101.942710][ T406] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.954089][ T406] usb 5-1: Product: syz [ 101.961569][ T406] usb 5-1: Manufacturer: syz [ 101.966981][ T406] usb 5-1: SerialNumber: syz [ 101.973557][ T406] usb 5-1: config 0 descriptor?? [ 101.981289][ T406] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 101.987903][ T406] usb 5-1: No valid video chain found. [ 102.035437][ T63] usb 1-1: device descriptor read/8, error -71 [ 102.053192][ T2287] rust_binder: Write failure EINVAL in pid:116 [ 102.061338][ T2287] rust_binder: 2286:2287 transaction to 0 failed: ENOENT [ 102.273339][ T63] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 102.304418][ T63] usb 1-1: device descriptor read/8, error -71 [ 102.323305][ T406] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 102.434472][ T63] usb 1-1: device descriptor read/8, error -71 [ 102.475171][ T406] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 102.484984][ T406] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 102.496275][ T406] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 102.505372][ T406] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.513443][ T406] usb 6-1: Product: syz [ 102.517627][ T406] usb 6-1: Manufacturer: syz [ 102.522239][ T406] usb 6-1: SerialNumber: syz [ 102.528270][ T406] usb 6-1: config 0 descriptor?? [ 102.533683][ T2289] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 102.540948][ T2289] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 102.544461][ T63] usb usb1-port1: unable to enumerate USB device [ 102.758704][ T2289] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 102.765921][ T2289] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 103.162900][ T36] audit: type=1400 audit(1799092253.724:394): avc: denied { ioctl } for pid=2299 comm="syz.0.648" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 103.280015][ T2302] FAULT_INJECTION: forcing a failure. [ 103.280015][ T2302] name failslab, interval 1, probability 0, space 0, times 0 [ 103.293498][ T2302] CPU: 0 UID: 0 PID: 2302 Comm: syz.0.649 Not tainted syzkaller #0 8ee30d9df144bc892052d3af75bf7ae355cbcd4b [ 103.293533][ T2302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 103.293546][ T2302] Call Trace: [ 103.293554][ T2302] [ 103.293562][ T2302] __dump_stack+0x21/0x30 [ 103.293601][ T2302] dump_stack_lvl+0x140/0x1c0 [ 103.293632][ T2302] ? __cfi_dump_stack_lvl+0x10/0x10 [ 103.293661][ T2302] ? selinux_file_permission+0x318/0xb60 [ 103.293697][ T2302] dump_stack+0x19/0x20 [ 103.293726][ T2302] should_fail_ex+0x3c2/0x510 [ 103.293752][ T2302] should_failslab+0xac/0x100 [ 103.293778][ T2302] __kmalloc_cache_noprof+0x41/0x470 [ 103.293801][ T2302] ? io_ring_ctx_alloc+0x61/0x1dc0 [ 103.293825][ T2302] io_ring_ctx_alloc+0x61/0x1dc0 [ 103.293848][ T2302] ? __cfi_vfs_write+0x10/0x10 [ 103.293871][ T2302] io_uring_create+0x2e0/0x13f0 [ 103.293893][ T2302] ? __kasan_check_write+0x18/0x20 [ 103.293915][ T2302] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 103.293945][ T2302] ? __kasan_check_write+0x18/0x20 [ 103.293967][ T2302] ? __x64_sys_io_uring_setup+0x80/0x80 [ 103.294013][ T2302] ? __kasan_check_read+0x15/0x20 [ 103.294035][ T2302] __x64_sys_io_uring_setup+0x5f/0x80 [ 103.294066][ T2302] x64_sys_call+0x22c0/0x2ee0 [ 103.294087][ T2302] do_syscall_64+0x57/0xf0 [ 103.294110][ T2302] ? clear_bhb_loop+0x50/0xa0 [ 103.294136][ T2302] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 103.294162][ T2302] RIP: 0033:0x7f0223d9ce59 [ 103.294181][ T2302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.294200][ T2302] RSP: 002b:00007f02227f6fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 103.294224][ T2302] RAX: ffffffffffffffda RBX: 0000200000000340 RCX: 00007f0223d9ce59 [ 103.294241][ T2302] RDX: 0000200000000400 RSI: 0000200000000340 RDI: 000000000000711c [ 103.294256][ T2302] RBP: 00007f02227f7090 R08: 0000000000000000 R09: 0000000000000101 [ 103.294270][ T2302] R10: 0000200000000480 R11: 0000000000000206 R12: 0000200000000400 [ 103.294284][ T2302] R13: 0000200000000480 R14: 00002000000003c0 R15: 00007ffd1a179b68 [ 103.294303][ T2302] [ 103.516390][ T63] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 103.685243][ T63] usb 2-1: unable to get BOS descriptor or descriptor too short [ 103.693334][ T63] usb 2-1: not running at top speed; connect to a high speed hub [ 103.701912][ T63] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 103.710665][ T63] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.725571][ T63] usb 2-1: string descriptor 0 read error: -22 [ 103.731829][ T63] usb 2-1: New USB device found, idVendor=1235, idProduct=8202, bcdDevice= 0.40 [ 103.740905][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.755002][ T63] usb 2-1: MIDIStreaming interface descriptor not found [ 103.786124][ T406] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 103.796534][ T406] dm9601 6-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet, ce:79:9d:c0:99:83 [ 103.810177][ T406] usb 6-1: USB disconnect, device number 7 [ 103.816583][ T406] dm9601 6-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet [ 103.955527][ T2298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.964110][ T2298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.459435][ T318] usb 5-1: USB disconnect, device number 26 [ 104.505014][ T36] audit: type=1400 audit(1799092255.074:395): avc: denied { unmount } for pid=644 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 104.543448][ T31] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 104.577430][ T2320] netlink: 'syz.0.656': attribute type 16 has an invalid length. [ 104.587053][ T2320] netlink: 'syz.0.656': attribute type 4 has an invalid length. [ 104.594753][ T2320] netlink: 64114 bytes leftover after parsing attributes in process `syz.0.656'. [ 104.607824][ T2320] netlink: 104 bytes leftover after parsing attributes in process `syz.0.656'. [ 104.683325][ T31] usb 6-1: device descriptor read/64, error -71 [ 104.933326][ T31] usb 6-1: device descriptor read/64, error -71 [ 105.173330][ T31] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 105.203333][ T45] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 105.303334][ T31] usb 6-1: device descriptor read/64, error -71 [ 105.354486][ T45] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 105.367049][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.377211][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 105.390183][ T45] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 105.399245][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.407848][ T45] usb 5-1: config 0 descriptor?? [ 105.415967][ T45] usb-storage 5-1:0.0: USB Mass Storage device detected [ 105.424817][ T45] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 105.553327][ T31] usb 6-1: device descriptor read/64, error -71 [ 105.616266][ T406] usb 5-1: USB disconnect, device number 27 [ 105.663417][ T31] usb usb6-port1: attempt power cycle [ 106.003318][ T31] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 106.024458][ T31] usb 6-1: device descriptor read/8, error -71 [ 106.084294][ T45] usb 2-1: USB disconnect, device number 37 [ 106.101698][ T2345] netlink: 'syz.1.665': attribute type 16 has an invalid length. [ 106.109534][ T2345] netlink: 'syz.1.665': attribute type 4 has an invalid length. [ 106.117368][ T2345] netlink: 64114 bytes leftover after parsing attributes in process `syz.1.665'. [ 106.128718][ T2345] netlink: 104 bytes leftover after parsing attributes in process `syz.1.665'. [ 106.145867][ T36] audit: type=1400 audit(1799092256.714:396): avc: denied { getattr } for pid=2346 comm="syz.4.666" path="cgroup:[4026532428]" dev="nsfs" ino=4026532428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 106.174885][ T31] usb 6-1: device descriptor read/8, error -71 [ 106.423337][ T31] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 106.444568][ T31] usb 6-1: device descriptor read/8, error -71 [ 106.493347][ T45] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 106.503461][ T318] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 106.574615][ T31] usb 6-1: device descriptor read/8, error -71 [ 106.643337][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 106.649539][ T45] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 106.657793][ T45] usb 2-1: config 0 has no interface number 0 [ 106.663961][ T45] usb 2-1: config 0 interface 184 has no altsetting 0 [ 106.671567][ T318] usb 5-1: config 0 has no interfaces? [ 106.677116][ T318] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 106.686338][ T31] usb usb6-port1: unable to enumerate USB device [ 106.692808][ T318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.701169][ T45] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 106.710587][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.718910][ T318] usb 5-1: config 0 descriptor?? [ 106.723946][ T45] usb 2-1: Product: syz [ 106.728172][ T45] usb 2-1: Manufacturer: syz [ 106.733380][ T45] usb 2-1: SerialNumber: syz [ 106.738841][ T45] usb 2-1: config 0 descriptor?? [ 106.744748][ T45] smsc75xx v1.0.0 [ 106.945792][ T2355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.954454][ T2355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.963271][ T2355] overlayfs: failed to clone upperpath [ 107.170527][ T45] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 107.181411][ T45] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 107.191114][ T45] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 107.201397][ T45] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 107.317306][ T2360] loop4: detected capacity change from 0 to 7 [ 107.324279][ T2360] buffer_io_error: 7 callbacks suppressed [ 107.324291][ T2360] Buffer I/O error on dev loop4, logical block 0, async page read [ 107.337982][ T2360] Buffer I/O error on dev loop4, logical block 0, async page read [ 107.345838][ T2360] loop4: unable to read partition table [ 107.351596][ T2360] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 107.355863][ T415] Buffer I/O error on dev loop4, logical block 0, async page read [ 107.368037][ T415] Buffer I/O error on dev loop4, logical block 0, async page read [ 107.376131][ T415] Buffer I/O error on dev loop4, logical block 0, async page read [ 107.384302][ T415] Buffer I/O error on dev loop4, logical block 0, async page read [ 107.392306][ T415] Buffer I/O error on dev loop4, logical block 0, async page read [ 107.673460][ T45] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 107.815275][ T2367] netlink: 'syz.0.674': attribute type 4 has an invalid length. [ 107.823037][ T2367] netlink: 'syz.0.674': attribute type 5 has an invalid length. [ 107.830883][ T2367] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.674'. [ 107.840919][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.851977][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.863227][ T45] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 107.865913][ T2367] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 107.872341][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.881524][ T45] usb 6-1: config 0 descriptor?? [ 108.193306][ T406] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 108.344510][ T406] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 108.357024][ T406] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.367134][ T406] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 108.380027][ T406] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 108.389101][ T406] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.398118][ T406] usb 1-1: config 0 descriptor?? [ 108.404048][ T406] usb-storage 1-1:0.0: USB Mass Storage device detected [ 108.411948][ T406] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 108.449057][ T36] audit: type=1400 audit(1799092259.014:397): avc: denied { write } for pid=2354 comm="syz.1.669" name="file0" dev="tmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 108.450989][ T2375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.473634][ T36] audit: type=1400 audit(1799092259.014:398): avc: denied { open } for pid=2354 comm="syz.1.669" path="/130/file0/file0" dev="tmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 108.480456][ T2375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.512326][ T45] usb 6-1: language id specifier not provided by device, defaulting to English [ 108.606472][ T31] usb 1-1: USB disconnect, device number 38 [ 108.912114][ T45] uclogic 0003:256C:006D.0019: interface is invalid, ignoring [ 109.268872][ T31] usb 5-1: USB disconnect, device number 28 [ 109.544381][ T45] usb 2-1: USB disconnect, device number 38 [ 109.579381][ T2387] No source specified [ 109.653352][ T31] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 109.783323][ T31] usb 5-1: device descriptor read/64, error -71 [ 110.023519][ T31] usb 5-1: device descriptor read/64, error -71 [ 110.153342][ T45] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 110.263315][ T31] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 110.304445][ T45] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 110.313545][ T45] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 110.322574][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.331362][ T45] usb 2-1: config 0 descriptor?? [ 110.393302][ T31] usb 5-1: device descriptor read/64, error -71 [ 110.633382][ T31] usb 5-1: device descriptor read/64, error -71 [ 110.743411][ T31] usb usb5-port1: attempt power cycle [ 110.874378][ T406] usb 6-1: USB disconnect, device number 12 [ 111.083306][ T31] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 111.104429][ T31] usb 5-1: device descriptor read/8, error -71 [ 111.183321][ T406] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 111.234417][ T31] usb 5-1: device descriptor read/8, error -71 [ 111.334455][ T406] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 111.346992][ T406] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.357125][ T406] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 111.370034][ T406] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 111.379103][ T406] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.387724][ T406] usb 6-1: config 0 descriptor?? [ 111.393916][ T406] usb-storage 6-1:0.0: USB Mass Storage device detected [ 111.401785][ T406] usb-storage 6-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 111.473304][ T31] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 111.494310][ T31] usb 5-1: device descriptor read/8, error -71 [ 111.596074][ T45] usb 6-1: USB disconnect, device number 13 [ 111.624291][ T31] usb 5-1: device descriptor read/8, error -71 [ 111.733461][ T31] usb usb5-port1: unable to enumerate USB device [ 112.185981][ T2409] netlink: 'syz.5.687': attribute type 16 has an invalid length. [ 112.193834][ T2409] netlink: 'syz.5.687': attribute type 4 has an invalid length. [ 112.201554][ T2409] netlink: 64114 bytes leftover after parsing attributes in process `syz.5.687'. [ 112.212673][ T2409] netlink: 104 bytes leftover after parsing attributes in process `syz.5.687'. [ 112.473320][ T45] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 112.593316][ T337] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 112.624393][ T45] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 112.635378][ T45] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 112.647757][ T45] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 112.656836][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.664953][ T45] usb 6-1: Product: syz [ 112.669155][ T45] usb 6-1: Manufacturer: syz [ 112.674091][ T45] usb 6-1: SerialNumber: syz [ 112.733393][ T31] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 112.754647][ T337] usb 1-1: unable to get BOS descriptor or descriptor too short [ 112.762722][ T337] usb 1-1: not running at top speed; connect to a high speed hub [ 112.771289][ T337] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 112.780085][ T337] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.795029][ T337] usb 1-1: string descriptor 0 read error: -22 [ 112.801225][ T337] usb 1-1: New USB device found, idVendor=1235, idProduct=8202, bcdDevice= 0.40 [ 112.810478][ T337] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.820452][ T337] usb 1-1: MIDIStreaming interface descriptor not found [ 112.885306][ T45] usb 6-1: Can't get UAC3 power state for id 10 [ 112.891677][ T31] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.903432][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 112.914548][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 112.923712][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.944353][ T31] usb 5-1: config 0 descriptor?? [ 112.949780][ T2417] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 112.951105][ T45] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 112.965709][ T31] hub 5-1:0.0: USB hub found [ 112.974832][ T45] usb 6-1: USB disconnect, device number 14 [ 112.983812][ T9] usb 2-1: USB disconnect, device number 39 [ 113.002482][ T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 113.019187][ T406] kernel read not supported for file 371/task/372/smaps (pid: 406 comm: kworker/0:3) [ 113.031224][ T2418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.042917][ T2418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.165541][ T31] hub 5-1:0.0: config failed, hub has too many ports! (err -19) [ 113.398573][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 113.495551][ T36] audit: type=1400 audit(2000000002.590:399): avc: denied { read } for pid=2416 comm="syz.4.691" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 113.520121][ T36] audit: type=1400 audit(2000000002.590:400): avc: denied { open } for pid=2416 comm="syz.4.691" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 113.565525][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.576480][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.586260][ T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 113.591052][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 113.595372][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.611701][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 113.620014][ T9] usb 2-1: config 0 descriptor?? [ 113.643770][ T31] usb 5-1: USB disconnect, device number 33 [ 113.683295][ T337] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 113.834424][ T337] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 113.842724][ T337] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 113.873296][ T337] usb 6-1: config 220 has no interface number 2 [ 113.879630][ T337] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 113.892814][ T337] usb 6-1: config 220 interface 0 has no altsetting 0 [ 113.899626][ T337] usb 6-1: config 220 interface 76 has no altsetting 0 [ 113.906533][ T337] usb 6-1: config 220 interface 1 has no altsetting 0 [ 113.914851][ T337] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 113.933289][ T337] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.941306][ T337] usb 6-1: Product: syz [ 113.963326][ T337] usb 6-1: Manufacturer: syz [ 113.967978][ T337] usb 6-1: SerialNumber: syz [ 114.187191][ T2432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.210359][ T2432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.220023][ T2432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.228703][ T2438] netlink: 'syz.4.697': attribute type 4 has an invalid length. [ 114.236565][ T2432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.246498][ T2432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.255056][ T2438] netlink: 'syz.4.697': attribute type 5 has an invalid length. [ 114.262949][ T2432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.271705][ T2438] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.697'. [ 114.281641][ T2432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.292139][ T2432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.301873][ T2432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.311886][ T2432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.324722][ T337] usb 6-1: selecting invalid altsetting 0 [ 114.343449][ T337] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 114.349907][ T337] usb 6-1: No valid video chain found. [ 114.365681][ T337] usb 6-1: USB disconnect, device number 15 [ 114.397617][ T36] audit: type=1400 audit(2000000003.490:401): avc: denied { getopt } for pid=2424 comm="syz.1.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.492377][ T2444] FAULT_INJECTION: forcing a failure. [ 114.492377][ T2444] name failslab, interval 1, probability 0, space 0, times 0 [ 114.505682][ T2444] CPU: 0 UID: 0 PID: 2444 Comm: syz.4.698 Not tainted syzkaller #0 8ee30d9df144bc892052d3af75bf7ae355cbcd4b [ 114.505716][ T2444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 114.505730][ T2444] Call Trace: [ 114.505738][ T2444] [ 114.505747][ T2444] __dump_stack+0x21/0x30 [ 114.505786][ T2444] dump_stack_lvl+0x140/0x1c0 [ 114.505816][ T2444] ? __cfi_dump_stack_lvl+0x10/0x10 [ 114.505847][ T2444] ? prep_new_page+0x42/0x180 [ 114.505876][ T2444] ? get_page_from_freelist+0x4aea/0x4ba0 [ 114.505909][ T2444] dump_stack+0x19/0x20 [ 114.505939][ T2444] should_fail_ex+0x3c2/0x510 [ 114.505964][ T2444] should_failslab+0xac/0x100 [ 114.505991][ T2444] kmem_cache_alloc_noprof+0x42/0x410 [ 114.506012][ T2444] ? ip_output+0x306/0x330 [ 114.506042][ T2444] ? dst_alloc+0x13c/0x240 [ 114.506065][ T2444] dst_alloc+0x13c/0x240 [ 114.506086][ T2444] ? ip_check_mc_rcu+0x25f/0x360 [ 114.506116][ T2444] ip_route_output_key_hash_rcu+0x151f/0x2070 [ 114.506164][ T2444] ip_route_output_flow+0xff/0x2a0 [ 114.506205][ T2444] ? __cfi_flush_tlb_func+0x10/0x10 [ 114.506232][ T2444] ? __cfi_ip_route_output_flow+0x10/0x10 [ 114.506267][ T2444] ? selinux_sk_getsecid+0x2e/0xd0 [ 114.506319][ T2444] udp_sendmsg+0x12a4/0x2440 [ 114.506359][ T2444] ? avc_has_perm_noaudit+0x26b/0x360 [ 114.506388][ T2444] ? __cfi_ip_generic_getfrag+0x10/0x10 [ 114.506431][ T2444] ? __cfi_udp_sendmsg+0x10/0x10 [ 114.506462][ T2444] ? do_wp_page+0x21c6/0x2e80 [ 114.506514][ T2444] ? selinux_socket_sendmsg+0x281/0x380 [ 114.506579][ T2444] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 114.506608][ T2444] ? inet_send_prepare+0x64/0x4e0 [ 114.506631][ T2444] ? __cfi_udp_sendmsg+0x10/0x10 [ 114.506662][ T2444] inet_sendmsg+0xef/0x120 [ 114.506686][ T2444] ____sys_sendmsg+0x822/0xa00 [ 114.506721][ T2444] ? __import_iovec+0x3fa/0x7d0 [ 114.506752][ T2444] ? __sys_sendmsg_sock+0x50/0x50 [ 114.506791][ T2444] ? import_iovec+0x80/0xb0 [ 114.506823][ T2444] ___sys_sendmsg+0x2a6/0x370 [ 114.506855][ T2444] ? __sys_sendmsg+0x2a0/0x2a0 [ 114.507272][ T2444] ? do_user_addr_fault+0xbf5/0x1230 [ 114.507313][ T2444] __sys_sendmmsg+0x2b4/0x4e0 [ 114.507335][ T2444] ? __cfi___sys_sendmmsg+0x10/0x10 [ 114.507361][ T2444] ? __cfi_ksys_write+0x10/0x10 [ 114.507385][ T2444] __x64_sys_sendmmsg+0xa4/0xc0 [ 114.507406][ T2444] x64_sys_call+0xfec/0x2ee0 [ 114.507428][ T2444] do_syscall_64+0x57/0xf0 [ 114.507450][ T2444] ? clear_bhb_loop+0x50/0xa0 [ 114.507478][ T2444] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 114.507504][ T2444] RIP: 0033:0x7fad4eb9ce59 [ 114.507523][ T2444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.507542][ T2444] RSP: 002b:00007fad4faeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 114.507566][ T2444] RAX: ffffffffffffffda RBX: 00007fad4ee16090 RCX: 00007fad4eb9ce59 [ 114.507583][ T2444] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000004 [ 114.507598][ T2444] RBP: 00007fad4faeb090 R08: 0000000000000000 R09: 0000000000000000 [ 114.507613][ T2444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.507626][ T2444] R13: 00007fad4ee16128 R14: 00007fad4ee16090 R15: 00007ffe47136358 [ 114.507646][ T2444] [ 114.918466][ T2448] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 114.997226][ T337] kernel read not supported for file 461/task/462/smaps (pid: 337 comm: kworker/1:4) [ 115.172285][ T2461] netlink: 'syz.5.706': attribute type 4 has an invalid length. [ 115.181836][ T2461] netlink: 'syz.5.706': attribute type 5 has an invalid length. [ 115.193312][ T2461] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.706'. [ 115.384911][ T31] usb 1-1: USB disconnect, device number 39 [ 115.423289][ T63] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 115.497171][ T2468] mmap: syz.0.708 (2468) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 115.523304][ T337] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 115.584280][ T63] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 115.595332][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.606490][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.616254][ T63] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 115.629918][ T63] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 115.639016][ T63] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 115.647129][ T63] usb 5-1: Manufacturer: syz [ 115.652314][ T63] usb 5-1: config 0 descriptor?? [ 115.694430][ T337] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 115.704152][ T337] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 115.714044][ T337] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.728432][ T337] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 115.737539][ T337] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 115.746007][ T337] usb 6-1: Product: syz [ 115.750182][ T337] usb 6-1: Manufacturer: syz [ 115.754840][ T337] usb 6-1: SerialNumber: syz [ 115.803318][ T31] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 115.954766][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 115.963230][ T337] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 115.974607][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.987181][ T31] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 115.996379][ T31] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 116.007351][ T31] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 116.020650][ T31] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 116.031578][ T31] usb 1-1: config 1 interface 1 has no altsetting 0 [ 116.040392][ T31] usb 1-1: string descriptor 0 read error: -22 [ 116.046676][ T31] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 116.055755][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.065449][ T63] appleir 0003:05AC:8243.001A: unknown main item tag 0x0 [ 116.072986][ T63] appleir 0003:05AC:8243.001A: No inputs registered, leaving [ 116.082539][ T63] appleir 0003:05AC:8243.001A: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 116.103976][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 116.114078][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 116.123126][ T9] usb 2-1: USB disconnect, device number 40 [ 116.259339][ T318] kernel read not supported for file 382/task/383/smaps (pid: 318 comm: kworker/1:3) [ 116.280139][ T36] audit: type=1400 audit(2000000005.370:402): avc: denied { watch } for pid=2460 comm="syz.4.705" path="/164/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=fifo_file permissive=1 [ 116.398516][ T63] usb 5-1: USB disconnect, device number 34 [ 116.455225][ T10] usb 6-1: USB disconnect, device number 16 [ 116.462995][ T10] usblp0: removed [ 116.477696][ T2471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.486315][ T2471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.543442][ T9] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 116.694784][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 116.702937][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 116.711459][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.721928][ T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 116.730940][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 116.743441][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 116.752501][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.760620][ T9] usb 2-1: Product: syz [ 116.764838][ T9] usb 2-1: Manufacturer: syz [ 116.769450][ T9] usb 2-1: SerialNumber: syz [ 116.981474][ T9] usb 2-1: 1:1 : invalid UAC_AS_GENERAL desc [ 116.987783][ T9] usb 2-1: unit 250 not found! [ 116.992604][ T9] usb 2-1: unit 245 not found! [ 117.009675][ T9] usb 2-1: USB disconnect, device number 41 [ 117.022650][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 117.171069][ T36] audit: type=1400 audit(2000000006.269:403): avc: denied { write } for pid=2503 comm="syz.4.718" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 117.213313][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 117.344325][ T2516] netlink: 'syz.4.722': attribute type 4 has an invalid length. [ 117.352224][ T2516] netlink: 'syz.4.722': attribute type 5 has an invalid length. [ 117.360813][ T2516] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.722'. [ 117.370008][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 117.380168][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 117.389152][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 117.396956][ T10] usb 6-1: can't read configurations, error -61 [ 117.460009][ T2518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.468662][ T2518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.533329][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 117.543778][ T2524] kvm: user requested TSC rate below hardware speed [ 117.556375][ T2524] kvm: kvm [2523]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 117.565346][ T2524] kvm: kvm [2523]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 117.581974][ T2524] kvm: vcpu 0: requested 14336 ns lapic timer period limited to 200000 ns [ 117.683300][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 117.690514][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 117.704387][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 117.717573][ T10] usb 6-1: can't read configurations, error -61 [ 117.731189][ T10] usb usb6-port1: attempt power cycle [ 117.966655][ T2539] FAULT_INJECTION: forcing a failure. [ 117.966655][ T2539] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 117.980039][ T2539] CPU: 1 UID: 0 PID: 2539 Comm: syz.4.730 Not tainted syzkaller #0 8ee30d9df144bc892052d3af75bf7ae355cbcd4b [ 117.980070][ T2539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 117.980087][ T2539] Call Trace: [ 117.980092][ T2539] [ 117.980099][ T2539] __dump_stack+0x21/0x30 [ 117.980124][ T2539] dump_stack_lvl+0x140/0x1c0 [ 117.980145][ T2539] ? __cfi_dump_stack_lvl+0x10/0x10 [ 117.980180][ T2539] ? stack_trace_save+0xaa/0x100 [ 117.980204][ T2539] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 117.980235][ T2539] dump_stack+0x19/0x20 [ 117.980264][ T2539] should_fail_ex+0x3c2/0x510 [ 117.980297][ T2539] should_fail_alloc_page+0xec/0x110 [ 117.980316][ T2539] __alloc_pages_noprof+0x1c0/0x7e0 [ 117.980337][ T2539] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 117.980360][ T2539] ? poison_kmalloc_large_redzone+0x97/0xf0 [ 117.980378][ T2539] ? io_alloc_hash_table+0x52/0x160 [ 117.980400][ T2539] ___kmalloc_large_node+0x81/0x220 [ 117.980415][ T2539] ? io_alloc_hash_table+0x52/0x160 [ 117.980436][ T2539] __kmalloc_large_node_noprof+0x1e/0xd0 [ 117.980470][ T2539] ? io_alloc_hash_table+0x52/0x160 [ 117.980492][ T2539] __kmalloc_noprof+0x326/0x510 [ 117.980507][ T2539] ? __kasan_kmalloc+0x96/0xb0 [ 117.980525][ T2539] ? init_hash_table+0x1ae/0x270 [ 117.980547][ T2539] io_alloc_hash_table+0x52/0x160 [ 117.980570][ T2539] io_ring_ctx_alloc+0x10b/0x1dc0 [ 117.980587][ T2539] io_uring_create+0x2e0/0x13f0 [ 117.980603][ T2539] ? __kasan_check_write+0x18/0x20 [ 117.980618][ T2539] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 117.980639][ T2539] ? __kasan_check_write+0x18/0x20 [ 117.980654][ T2539] ? __x64_sys_io_uring_setup+0x80/0x80 [ 117.980677][ T2539] ? __kasan_check_read+0x15/0x20 [ 117.980692][ T2539] __x64_sys_io_uring_setup+0x5f/0x80 [ 117.980713][ T2539] x64_sys_call+0x22c0/0x2ee0 [ 117.980727][ T2539] do_syscall_64+0x57/0xf0 [ 117.980743][ T2539] ? clear_bhb_loop+0x50/0xa0 [ 117.980762][ T2539] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 117.980782][ T2539] RIP: 0033:0x7fad4eb9ce59 [ 117.980796][ T2539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.980810][ T2539] RSP: 002b:00007fad4fb0bee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 117.980827][ T2539] RAX: ffffffffffffffda RBX: 0000200000000848 RCX: 00007fad4eb9ce59 [ 117.980840][ T2539] RDX: 00002000000008c8 RSI: 0000200000000848 RDI: 000000000000001c [ 117.980851][ T2539] RBP: 0000200000000840 R08: 0000200000000ac0 R09: 0000000000000000 [ 117.980862][ T2539] R10: 00002000000008d0 R11: 0000000000000206 R12: 00002000000008c8 [ 117.980873][ T2539] R13: 00002000000008d0 R14: 00007fad4fb0bfd8 R15: 0000000000000000 [ 117.980887][ T2539] [ 118.103523][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 118.173724][ T2541] netlink: 'syz.4.731': attribute type 4 has an invalid length. [ 118.173747][ T2541] netlink: 'syz.4.731': attribute type 5 has an invalid length. [ 118.204376][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 118.207724][ T2541] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.731'. [ 118.224439][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 118.295346][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 118.303027][ T10] usb 6-1: can't read configurations, error -61 [ 118.374926][ T36] audit: type=1400 audit(2000000007.469:404): avc: denied { bind } for pid=2545 comm="syz.4.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 118.394445][ T36] audit: type=1400 audit(2000000007.469:405): avc: denied { name_bind } for pid=2545 comm="syz.4.733" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 118.419772][ T36] audit: type=1400 audit(2000000007.469:406): avc: denied { node_bind } for pid=2545 comm="syz.4.733" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 118.441969][ T36] audit: type=1400 audit(2000000007.469:407): avc: denied { ioctl } for pid=2545 comm="syz.4.733" path="socket:[21101]" dev="sockfs" ino=21101 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 118.466664][ T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 118.493680][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 118.500328][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 118.509013][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 118.516607][ T10] usb 6-1: can't read configurations, error -61 [ 118.522959][ T10] usb usb6-port1: unable to enumerate USB device [ 118.574998][ T31] usb 1-1: USB disconnect, device number 40 [ 118.589062][ T2550] rust_binder: Write failure EINVAL in pid:451 [ 118.589677][ T2550] rust_binder: Failure in copy_transaction_data: EINVAL [ 118.596069][ T2550] rust_binder: 2549:2550 transaction to 2549 failed: EINVAL [ 118.663356][ T337] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 118.803319][ T337] usb 5-1: device descriptor read/64, error -71 [ 119.003321][ T31] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 119.043347][ T337] usb 5-1: device descriptor read/64, error -71 [ 119.133299][ T31] usb 1-1: device descriptor read/64, error -71 [ 119.283319][ T337] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 119.373302][ T31] usb 1-1: device descriptor read/64, error -71 [ 119.413340][ T337] usb 5-1: device descriptor read/64, error -71 [ 119.613296][ T31] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 119.653299][ T337] usb 5-1: device descriptor read/64, error -71 [ 119.743318][ T31] usb 1-1: device descriptor read/64, error -71 [ 119.763409][ T337] usb usb5-port1: attempt power cycle [ 119.983306][ T31] usb 1-1: device descriptor read/64, error -71 [ 120.026230][ T2556] netlink: 'syz.5.737': attribute type 16 has an invalid length. [ 120.034071][ T2556] netlink: 'syz.5.737': attribute type 4 has an invalid length. [ 120.041796][ T2556] netlink: 64114 bytes leftover after parsing attributes in process `syz.5.737'. [ 120.053341][ T2556] netlink: 104 bytes leftover after parsing attributes in process `syz.5.737'. [ 120.093373][ T31] usb usb1-port1: attempt power cycle [ 120.103296][ T337] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 120.134644][ T337] usb 5-1: device descriptor read/8, error -71 [ 120.145896][ T2560] FAULT_INJECTION: forcing a failure. [ 120.145896][ T2560] name failslab, interval 1, probability 0, space 0, times 0 [ 120.158712][ T2560] CPU: 1 UID: 0 PID: 2560 Comm: syz.5.739 Not tainted syzkaller #0 8ee30d9df144bc892052d3af75bf7ae355cbcd4b [ 120.158753][ T2560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 120.158768][ T2560] Call Trace: [ 120.158777][ T2560] [ 120.158787][ T2560] __dump_stack+0x21/0x30 [ 120.158822][ T2560] dump_stack_lvl+0x140/0x1c0 [ 120.158853][ T2560] ? __cfi_dump_stack_lvl+0x10/0x10 [ 120.158883][ T2560] ? cgroup_bpf_inherit+0x472/0x4c0 [ 120.158918][ T2560] dump_stack+0x19/0x20 [ 120.158946][ T2560] should_fail_ex+0x3c2/0x510 [ 120.158972][ T2560] should_failslab+0xac/0x100 [ 120.158999][ T2560] __kmalloc_cache_noprof+0x41/0x470 [ 120.159024][ T2560] ? cgroup_mkdir+0xbe2/0x1600 [ 120.159051][ T2560] cgroup_mkdir+0xbe2/0x1600 [ 120.159081][ T2560] ? __cfi_cgroup_mkdir+0x10/0x10 [ 120.159108][ T2560] kernfs_iop_mkdir+0x1bb/0x2d0 [ 120.159140][ T2560] vfs_mkdir+0x58e/0x810 [ 120.159172][ T2560] open_or_create_special_dir+0xf1/0x200 [ 120.159209][ T2560] incfs_mount_fs+0x433/0x970 [ 120.159232][ T2560] ? __cfi_incfs_mount_fs+0x10/0x10 [ 120.159255][ T2560] ? selinux_capable+0x38/0x50 [ 120.159283][ T2560] legacy_get_tree+0x103/0x1b0 [ 120.159312][ T2560] ? __cfi_incfs_mount_fs+0x10/0x10 [ 120.159334][ T2560] vfs_get_tree+0x9e/0x290 [ 120.159356][ T2560] do_new_mount+0x251/0xb40 [ 120.159378][ T2560] ? security_capable+0x44/0x130 [ 120.159402][ T2560] path_mount+0x66a/0xff0 [ 120.159423][ T2560] ? putname+0x113/0x150 [ 120.159447][ T2560] __se_sys_mount+0x2bf/0x480 [ 120.159470][ T2560] ? ksys_write+0x1f3/0x260 [ 120.159492][ T2560] ? __x64_sys_mount+0xf0/0xf0 [ 120.159526][ T2560] __x64_sys_mount+0xc3/0xf0 [ 120.159548][ T2560] x64_sys_call+0x2021/0x2ee0 [ 120.159567][ T2560] do_syscall_64+0x57/0xf0 [ 120.159593][ T2560] ? clear_bhb_loop+0x50/0xa0 [ 120.159620][ T2560] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 120.159644][ T2560] RIP: 0033:0x7fd21079ce59 [ 120.159664][ T2560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.159679][ T2560] RSP: 002b:00007fd211732028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 120.159696][ T2560] RAX: ffffffffffffffda RBX: 00007fd210a15fa0 RCX: 00007fd21079ce59 [ 120.159707][ T2560] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000000 [ 120.159718][ T2560] RBP: 00007fd211732090 R08: 0000200000000040 R09: 0000000000000000 [ 120.159728][ T2560] R10: 0000000000200010 R11: 0000000000000246 R12: 0000000000000002 [ 120.159738][ T2560] R13: 00007fd210a16038 R14: 00007fd210a15fa0 R15: 00007ffdc5aaf648 [ 120.159751][ T2560] [ 120.159889][ T2560] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] PREEMPT SMP KASAN PTI [ 120.428130][ T2560] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 120.436558][ T2560] CPU: 1 UID: 0 PID: 2560 Comm: syz.5.739 Not tainted syzkaller #0 8ee30d9df144bc892052d3af75bf7ae355cbcd4b [ 120.448022][ T2560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 120.458091][ T2560] RIP: 0010:cgroup_mkdir+0x122a/0x1600 [ 120.463576][ T2560] Code: eb 05 e8 69 4d 08 00 48 89 df e8 11 9e 00 00 48 81 fb 01 f0 ff ff 0f 83 9a fb ff ff 4c 8d b3 08 01 00 00 4d 89 f4 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 f7 e8 97 00 61 00 48 8b bb 08 01 00 00 [ 120.483372][ T2560] RSP: 0018:ffffc90010557988 EFLAGS: 00010206 [ 120.489479][ T2560] RAX: f816fd63bfe3c300 RBX: 0000000000000000 RCX: ffff8881f6f3acc0 [ 120.497451][ T2560] RDX: ffff888125720400 RSI: ffff888108714000 RDI: ffff888100042000 [ 120.505421][ T2560] RBP: ffffc90010557a38 R08: 000000002c794d6d R09: 000000003d406b2d [ 120.513403][ T2560] R10: 0000000000000012 R11: ffffffff81759b00 R12: 0000000000000021 [ 120.521394][ T2560] R13: dffffc0000000000 R14: 0000000000000108 R15: ffff888108714010 [ 120.529381][ T2560] FS: 00007fd2117326c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 120.538307][ T2560] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.544895][ T2560] CR2: 00007fd210a17dac CR3: 000000012ede8000 CR4: 00000000003526b0 [ 120.552883][ T2560] Call Trace: [ 120.556167][ T2560] [ 120.559105][ T2560] ? __cfi_cgroup_mkdir+0x10/0x10 [ 120.564152][ T2560] kernfs_iop_mkdir+0x1bb/0x2d0 [ 120.569041][ T2560] vfs_mkdir+0x58e/0x810 [ 120.573294][ T2560] open_or_create_special_dir+0xf1/0x200 [ 120.578964][ T2560] incfs_mount_fs+0x433/0x970 [ 120.583658][ T2560] ? __cfi_incfs_mount_fs+0x10/0x10 [ 120.588884][ T2560] ? selinux_capable+0x38/0x50 [ 120.593675][ T2560] legacy_get_tree+0x103/0x1b0 [ 120.598475][ T2560] ? __cfi_incfs_mount_fs+0x10/0x10 [ 120.603675][ T2560] vfs_get_tree+0x9e/0x290 [ 120.608096][ T2560] do_new_mount+0x251/0xb40 [ 120.612615][ T2560] ? security_capable+0x44/0x130 [ 120.617571][ T2560] path_mount+0x66a/0xff0 [ 120.621912][ T2560] ? putname+0x113/0x150 [ 120.626183][ T2560] __se_sys_mount+0x2bf/0x480 [ 120.630873][ T2560] ? ksys_write+0x1f3/0x260 [ 120.635382][ T2560] ? __x64_sys_mount+0xf0/0xf0 [ 120.640171][ T2560] __x64_sys_mount+0xc3/0xf0 [ 120.644795][ T2560] x64_sys_call+0x2021/0x2ee0 [ 120.649497][ T2560] do_syscall_64+0x57/0xf0 [ 120.653927][ T2560] ? clear_bhb_loop+0x50/0xa0 [ 120.658648][ T2560] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 120.664548][ T2560] RIP: 0033:0x7fd21079ce59 [ 120.668986][ T2560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.688587][ T2560] RSP: 002b:00007fd211732028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 120.697022][ T2560] RAX: ffffffffffffffda RBX: 00007fd210a15fa0 RCX: 00007fd21079ce59 [ 120.705044][ T2560] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000000 [ 120.713025][ T2560] RBP: 00007fd211732090 R08: 0000200000000040 R09: 0000000000000000 [ 120.720998][ T2560] R10: 0000000000200010 R11: 0000000000000246 R12: 0000000000000002 [ 120.728991][ T2560] R13: 00007fd210a16038 R14: 00007fd210a15fa0 R15: 00007ffdc5aaf648 [ 120.736965][ T2560] [ 120.739980][ T2560] Modules linked in: [ 120.744154][ T2560] ---[ end trace 0000000000000000 ]--- [ 120.749787][ T2560] RIP: 0010:cgroup_mkdir+0x122a/0x1600 [ 120.755517][ T2560] Code: eb 05 e8 69 4d 08 00 48 89 df e8 11 9e 00 00 48 81 fb 01 f0 ff ff 0f 83 9a fb ff ff 4c 8d b3 08 01 00 00 4d 89 f4 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 f7 e8 97 00 61 00 48 8b bb 08 01 00 00 [ 120.771391][ T36] audit: type=1400 audit(2000000009.859:408): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 120.791248][ T2560] RSP: 0018:ffffc90010557988 EFLAGS: 00010206 [ 120.803151][ T2560] RAX: f816fd63bfe3c300 RBX: 0000000000000000 RCX: ffff8881f6f3acc0 [ 120.811270][ T2560] RDX: ffff888125720400 RSI: ffff888108714000 RDI: ffff888100042000 [ 120.813629][ T337] usb 5-1: device descriptor read/8, error -71 [ 120.819473][ T2560] RBP: ffffc90010557a38 R08: 000000002c794d6d R09: 000000003d406b2d [ 120.833859][ T2560] R10: 0000000000000012 R11: ffffffff81759b00 R12: 0000000000000021 [ 120.842000][ T2560] R13: dffffc0000000000 R14: 0000000000000108 R15: ffff888108714010 [ 120.843340][ T36] audit: type=1400 audit(2000000009.859:409): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.850316][ T2560] FS: 00007fd2117326c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 120.871955][ T36] audit: type=1400 audit(2000000009.859:410): avc: denied { write } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.882521][ T2560] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.902065][ T36] audit: type=1400 audit(2000000009.859:411): avc: denied { add_name } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.908867][ T2560] CR2: 00007fd2107ea540 CR3: 000000012ede8000 CR4: 00000000003526b0 [ 120.928733][ T36] audit: type=1400 audit(2000000009.859:412): avc: denied { create } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 120.928783][ T36] audit: type=1400 audit(2000000009.859:413): avc: denied { append open } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 120.937497][ T2560] DR0: ffffffffffffffff DR1: 8000000000000000 DR2: 00000000000003ff [ 120.958608][ T36] audit: type=1400 audit(2000000009.859:414): avc: denied { getattr } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 120.980726][ T2560] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 121.018815][ T2560] Kernel panic - not syncing: Fatal exception [ 121.025469][ T2560] Kernel Offset: disabled [ 121.029800][ T2560] Rebooting in 86400 seconds..