last executing test programs: 1m6.935136873s ago: executing program 0 (id=134): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x7fffffffffffffff, 0x82800) clock_getres(0xd0df4d6948b78e6c, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x2a, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x3a3a, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0x0) pivot_root(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='.\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x1000000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) read$FUSE(r3, &(0x7f0000000240)={0x2020}, 0x2020) ioctl$EVIOCGABS20(r0, 0x80184520, 0x0) 1m6.934535453s ago: executing program 0 (id=135): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="c50f390a0ef2a249a242e12275baca2c", 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000040)=""/56, &(0x7f0000000080)=0x38) getsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f00000000c0)=""/156, &(0x7f0000000180)=0x9c) getsockname$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, &(0x7f0000000200)=0x10) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000280)=""/183, &(0x7f0000000340)=0xb7) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff}, 0x80) getresuid(&(0x7f0000000440)=0x0, &(0x7f0000000480), &(0x7f00000004c0)) r5 = getuid() mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0xa1880, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@loose}, {@access_client}, {@noxattr}, {@afid={'afid', 0x3d, 0x9f7}}, {@version_u}, {@access_any}, {@posixacl}, {@version_u}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/selinux/status\x00'}}, {@appraise_type}, {@euid_lt={'euid<', r4}}, {@subj_role={'subj_role', 0x3d, '(&^)%'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/selinux/status\x00'}}, {@uid_eq={'uid', 0x3d, r5}}]}}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000640)={{0x2, 0x4e22, @local}, {0x1, @random="cd5a1e6ad3fa"}, 0x4, {0x2, 0x4e24, @local}, 'pim6reg\x00'}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000700)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e20, @local}, 0x220, 0x0, 0x0, 0x0, 0xe8, &(0x7f00000006c0)='ip_vti0\x00', 0x5, 0xfffffffffffffff8, 0xd4}) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000780), 0x400000, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, 0x1, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000940), r2) sendmsg$IPVS_CMD_GET_CONFIG(r7, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xe4, r8, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x44}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffcb91}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xff55}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x29e}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40}, 0x11) dup(r2) ioctl$XFS_IOC_FSBULKSTAT(0xffffffffffffffff, 0xc0205865, &(0x7f0000000c40)={&(0x7f0000000b00)=0x5, 0x7, &(0x7f0000000b40)=[{}], &(0x7f0000000c00)}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r6, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x40, r9, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x5, 0x39}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048890}, 0x4044001) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000e00)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000e40)={0x2, 'macvlan1\x00', {0xb2}, 0x8}) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f0000000e80)={0x3, 0xffffffff}) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000ec0)='&\x00', 0x0, r3) close_range(r0, r0, 0x2) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000f40)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000f00)=0x5}) 1m6.905055394s ago: executing program 0 (id=136): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x8, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x1, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$ublk_chdev(&(0x7f0000000040), 0x0, 0x10000) r2 = dup(r1) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000000)={0x2, 0x100, 0xb1, 0xff3, 0x6, 0x5}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0xa, 0x64, {0x64, 0x30, "f4a9a98332153ce5268b51ead279e7a69bd0c572e3f13535eb8c8569d0dce76316cc69dbf2230a6a5cc878aa6b94e38989e089d90f129c33f38157560c5655ff1535835824a66f18a76a4c4ed7485842c98cf2f5e858c803d2152f102ed7added226"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x8, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x1, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_open_dev$ublk_chdev(&(0x7f0000000040), 0x0, 0x10000) (async) dup(r1) (async) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000000)={0x2, 0x100, 0xb1, 0xff3, 0x6, 0x5}) (async) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0xa, 0x64, {0x64, 0x30, "f4a9a98332153ce5268b51ead279e7a69bd0c572e3f13535eb8c8569d0dce76316cc69dbf2230a6a5cc878aa6b94e38989e089d90f129c33f38157560c5655ff1535835824a66f18a76a4c4ed7485842c98cf2f5e858c803d2152f102ed7added226"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) 1m3.871777938s ago: executing program 0 (id=152): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000040)=0x203714e722813fa8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2982, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x1, 0x4, 0x0, 0x7, 0x0, 0xfffffffffffffffb}, {0x7ff, 0x3, 0x7, 0x10000000000, 0x3, 0x61f7}], ['\x00', '\x00']}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendfile(r1, r1, &(0x7f00000005c0)=0x1ae5, 0x15a000000) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', 0x1}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="0a0086dd0180c2000002ffffffffffff86dd61a14cee01f806ff0000000000000000000000000000000100"], 0x232) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='.\x00', &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x38ff817, 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0x0) socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(r1, 0x5459, 0x0) 1m3.37680254s ago: executing program 0 (id=161): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x8b42, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x8000}, 0x8880) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000000)=0x24000000, 0x4) r3 = fsopen(&(0x7f0000000440)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x50a41bd22fc33948) fchdir(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000480)={0x1fe, 0x1, 0x7000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000180), 0x10) setns(r4, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000140)="390000001300034700bb5be1c3e4feff060000000100000045000000250000001900010000000000000000000000003200f112215f00000000", 0x39}], 0x1) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f0000000300)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) modify_ldt$write2(0x11, &(0x7f0000000340)={0xfc, 0xffffffffffffffff, 0x0, 0x1}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x141a82, 0x0) sendfile(r0, r4, 0x0, 0x5) bind$can_raw(r1, &(0x7f00000000c0)={0x1d, r5}, 0x10) mprotect(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xa) fcntl$F_SET_FILE_RW_HINT(r7, 0x40e, &(0x7f0000000400)=0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x40002, 0x4) write(r8, &(0x7f00000002c0)='0', 0x1) 1m3.259150623s ago: executing program 0 (id=163): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) r0 = creat(&(0x7f0000000340)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x6e, 0x7, 0x2, 0x3, 0x3, 0x48, 0x38, 0xfffffffc, 0xe, 0x0, 0x20, 0x1, 0x5}, [{0x3, 0x7, 0x6, 0x7f, 0x49, 0x200004, 0xc, 0x400}]}, 0x58) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x2000, 0x10) faccessat(r3, &(0x7f0000000300)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x2) landlock_restrict_self(r2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r6, &(0x7f0000000240)='pkcs7_test\x00', &(0x7f0000000280)={'syz', 0x0}, r6) connect$unix(r5, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/module/hid_steam/parameters/lizard_mode\x00', 0x2, 0x0) write(r7, &(0x7f00000007c0)='0', 0x1) 1m3.258810783s ago: executing program 32 (id=163): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) r0 = creat(&(0x7f0000000340)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x6e, 0x7, 0x2, 0x3, 0x3, 0x48, 0x38, 0xfffffffc, 0xe, 0x0, 0x20, 0x1, 0x5}, [{0x3, 0x7, 0x6, 0x7f, 0x49, 0x200004, 0xc, 0x400}]}, 0x58) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x2000, 0x10) faccessat(r3, &(0x7f0000000300)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x2) landlock_restrict_self(r2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r6, &(0x7f0000000240)='pkcs7_test\x00', &(0x7f0000000280)={'syz', 0x0}, r6) connect$unix(r5, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/module/hid_steam/parameters/lizard_mode\x00', 0x2, 0x0) write(r7, &(0x7f00000007c0)='0', 0x1) 53.006519193s ago: executing program 3 (id=252): setns(0xc9, 0x0) r0 = socket(0x1f, 0x5, 0x3) getpeername$unix(r0, 0x0, &(0x7f0000000100)) 52.997452564s ago: executing program 3 (id=253): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002c40), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000002d00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000002c00)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {0x1, 0x1}, [], {0x4, 0x5}, [], {0x10, 0x6}, {0x20, 0x1}}, 0x24, 0x3) mkdirat(r2, &(0x7f0000000040)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1a2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae03, 0x95) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1) ioctl(r4, 0x6, &(0x7f0000002d80)="f3687fe16611af49c75cbe5ff1bd419512d99d81e85beec60024e61883daa20b65c7f61104e4a05cbf27f030c12d408789") mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x20400, 0x20) fdatasync(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000002940), 0xffffffffffffffff) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000002980)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f00000029c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002a00)=0x14) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002ac0)={0x1c, r8, 0x301, 0x70bd2c, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r10}]}, 0x1c}}, 0x20040000) sendmsg$inet(r2, &(0x7f0000002bc0)={&(0x7f00000002c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000002880)=[{&(0x7f0000000300)="a8d5990d8447f966ba35daee1599317d35c71835ba6100e11636f5c9986c66a2fa65188b9d9b07b9caa4181a8e386de0de26ff90423c74e95661a9f7a4c2f7b411efa9af6448283172f8c759cf8069511690c93bb8a3cca061c374253a8ad9840fb02f8aca022df5d8726b48073dba2f9a005f01c9f7605ba01bfdc76b6669eccbf5ef486b107d4c6b1137d289dc5431141c70fccbf41230849270e5be0043c5e090ccd4f48e028ec8f17a54a506094ae0aec18c912dd5b9117c373fe2ba678bfefba3c4ede1d3eb196f6a4038d956a0ce41320162f89ac81f", 0xd9}, {&(0x7f0000000400)="0add655aa6c1b75a188db2503353a37927025793b88770492ca4239f4a99f19471539f736e14319a64b2c7fecaed5608a21e1b7f645ff7d96bd6b2c3c151a1c602ec642302955a887384781e78bf7215bb1f49ec6bbfb1abbe8ae0192276e9cb9c2242eed33fd13780928f71e0b65b2354e39c9aeac745a843a76c2bcb67d3d7c7c59a18180ffdf10ef7a20c67c2b083a9c8c4d1c83ccc5ecdb39d03904f531cb78dcea1fbf380360d02df53582b373c26705bddf6e300680c7a760fba5b", 0xbe}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)="961b8f5224ea400b241e9314e83a967ca3bea4a727cd67d3ca288e1a3d8ea96deb23838193224df1e0d0154752e39cd9d787a1790cc043ced3cf7fa114f3a691f1d1332075eb413f740cb1cd56b55ff5b4f000a1f6bfd5aa7bee922eaafd7e9c8ef47d1b64aa0d9f5b929618ed7143029a74201d146217861280ac757bdffaebf1e1abd45f475fde", 0x88}, {&(0x7f0000002580)="e990ee0de9ceab71a2f877c6a7d07040270252f6c33b61744080faf4cab29158c329ff40cfc57c4ac4e127709c11d1a0d625c5edbd4aa099a2efc4565505a527650037b3664db9e19724b9642a3558d9ceef7ae1c2e859725c499fe03b3f68152f5a31709deaffd3c9641f00af5015b25f8784c34cedcb8a3d6f02a6ec112d0e711d3127b2005a92f4fd68cdcc6b3e3cf309fade5a30ac86f3", 0x99}, {&(0x7f0000002640)="ea6c194aa96c9da05b49b21a5c8808995aae0d6f799c0f4fee115b1bf02f118f28e310fda8ee17bf6e2de5d34e972675efccc6cbe5826aa9bdc760534cac32b0e5acad377eb0137276bb579c28a423d8afed86171fc463c6de5555dce92e86722f1d17c46346ed840e1cec79508e621de10304b5222def6bce1c215ca05e6d01521b57ac47842c5f0335ca4d3be70420783f91a2d9173a57aef9c008e0294f059f0325af7cfb5176f877a5e878af428d15e3a626827749d376def08023534f1a9d8f0e8ac1ba92ffef89322f7139a236fa681b1f778ea4e12597", 0xda}, {&(0x7f0000002740)="64647e7c5a01b1deb68c7f5514f4bbb5d3b4ca6487358c1a532fd233e141aaa8c06312f93ddb5f3f47f8a09a84dea229ac9e1252ba873bdb06c1253ecb85160771b098aeb20ef6a2d05bfb", 0x4b}, {&(0x7f00000027c0)="75756aa724501e25e09186009f568abd38f739d8319a0e5fdbb41f19e64d7b6b077a1914057a0e3bc7740d5a805d993fd92f4bf214b88002cd6a03613d9d65f6cee8aa715446ff9cb8d957ed7e75e0500dee3bcfa191edb4d20bd78ce41fbe1cc3525f33187c40ad86574402c9edf7b2e6b2e5f4a37c0bd5a9904b5a", 0x7c}, {&(0x7f0000002840)="1ade1c4240d51820b09a2b5bf53d67da237a47bf0e2006547c90b7718433a1214f9279", 0x23}], 0xa, &(0x7f0000002b00)=[@ip_retopts={{0x50, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0x4a, 0x0, 0x9, [0x400, 0x1, 0x4, 0xb]}, @generic={0x86, 0x2}, @lsrr={0x83, 0x17, 0xa1, [@private=0xa010101, @loopback, @rand_addr=0x64010101, @local, @broadcast]}, @end, @timestamp_prespec={0x44, 0x4, 0x9a, 0x3, 0xe}, @timestamp={0x44, 0xc, 0x6d, 0x0, 0x0, [0x1ff, 0x1ff]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @multicast1, @private=0xa010102}}}], 0xa0}, 0x20000800) 52.939261446s ago: executing program 3 (id=254): getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=""/62, &(0x7f0000000040)=0x3e) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000402f1734000000000000010902240001000000110904000301030000000921080005012261030905810320566a0a46"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0xfffffffffffffe2c, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x371, {0xfffffffffffffef6, 0x21, 0xfffd}}}, &(0x7f0000000540)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 51.322518395s ago: executing program 3 (id=261): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) rt_sigprocmask(0x2, &(0x7f0000000b40)={[0x800]}, 0x0, 0x8) 49.733336673s ago: executing program 3 (id=270): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000040)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000180)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x0, r3}, 0x10) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x12, r1, 0x180000000) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x42080, 0x0, 0x0, 0x0, 0x0, 0x0) 49.635133906s ago: executing program 3 (id=271): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0xffffffffe8110f4c, 0xc, 0xfffd, 0xf, 0x401, 0x0, 0x0, 0x8, 0x1}}, 0x50) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test', 0x42, 0x0) write$UHID_DESTROY(r0, &(0x7f00000001c0), 0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r1 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xc8) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000140)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 34.608097334s ago: executing program 33 (id=271): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0xffffffffe8110f4c, 0xc, 0xfffd, 0xf, 0x401, 0x0, 0x0, 0x8, 0x1}}, 0x50) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test', 0x42, 0x0) write$UHID_DESTROY(r0, &(0x7f00000001c0), 0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r1 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xc8) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000140)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22.331229904s ago: executing program 4 (id=450): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001000010000000000000000000a00000a20000000000a010400000000000000000a00000a0900010073797a30000000002c000000030a030000000000000000000a00000a0900010073797a300000000069fd030073797a30000000004c000000060a010400000000000000000a00000a0900010073797a30000000000900020073797a3000000000200004801c0001800a00010071756575650000000c0002800600014000000000140000001100010000000000000000000a00000a"], 0xc0}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000002afc0be8c5e898e9f8529554efbcf64005490000000800010001000000090002000000"], 0x28}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004002, &(0x7f0000000240)={0xa, 0x2, 0x0, @rand_addr, 0x6}, 0x1c) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000000303010000000000000000000a0000000c0002000000230100000001"], 0x54}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mremap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000000c000/0x2000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) exit(0x6) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) 21.536431114s ago: executing program 4 (id=464): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000105e06dc0000000000000109022400010000a002030002000921000040012218000905810320003315870000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a19d7508950109308102c0c0e22baa"], 0x0}, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2c0080, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'bond0\x00', 0x2000}) (async) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000c80)={0x0, 0x30, 0x2, ':9'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000240)={0x68, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000280), 0x9, 0x300) 18.472992089s ago: executing program 4 (id=481): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x3f) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = fsopen(&(0x7f00000008c0)='incremental-fs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x0, 0x0) write(r1, &(0x7f00000002c0)='27', 0x2) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r1, 0x0) add_key(&(0x7f0000000300)='asymmetric\x00', 0x0, &(0x7f0000000340)="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", 0x559, 0xfffffffffffffffd) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0xe, 0x2, 0xd, 0x4, 0x7, 0x800}) 18.461245109s ago: executing program 4 (id=482): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r0, r0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0xdd) mount(&(0x7f0000000140)=@filename='./dev/sda1\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x73, &(0x7f0000000540)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902610002010484080000000001020d000005240600010524020006000606"], 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe00000090582"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./binfmt\x00', &(0x7f0000000740)='binfmt_misc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./binfmt/status\x00', 0x1, 0x0) write(r2, &(0x7f00000007c0)='1', 0x1) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_usb_control_io(r1, 0x0, &(0x7f00000005c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) chdir(&(0x7f0000000200)='./mnt\x00') r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x2) write$char_usb(r3, &(0x7f0000000000)="9d706924f3a105a6fcb8f99347200abb97c6c1ac775daa9e150516234419aaa42d22", 0x22) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./binfmt/status\x00', &(0x7f0000000400)='debugfs\x00', 0x2000003, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./debug/lru_gen\x00', 0x2, 0x0) write(r4, &(0x7f0000000480)='- 1 0 0 1 1\n', 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000880)={0x8, 0x8080000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000008c0)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1f7) mount(0x0, &(0x7f0000000940)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000a00)='3', 0x4e) 17.141957521s ago: executing program 5 (id=486): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./trace\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./trace/events/sched/sched_switch/trigger\x00', 0x302, 0x0) write(r0, &(0x7f0000000500)='hist:keys=common_times', 0x16) 17.139948171s ago: executing program 5 (id=487): memfd_create(&(0x7f0000000280)='/dev/sda1\x00', 0x1) (async) clock_nanosleep(0x9, 0x1, &(0x7f0000000440), 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000400)=@md0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async) pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x88800) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c00cbf60346387aee7d027b48882ccd016ce0bb68cf5dd6522f8dd8303c6c83fcb22e24e5608d62f16089de2636aa8ef6d86ae3c63a0894e75ed799751321806a8a9959bf85b6921c38c6e3980e1e6a0e7ed9000076ab10feb43b4b5700"/107]) write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="150000006bffff"], 0x15) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000000)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x21, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4040894}, 0x4) mkdir(&(0x7f0000000180)='./file0\x00', 0x111) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$cgroup(0x0, &(0x7f0000006a00)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000006a40), 0xc00, &(0x7f0000006a80)={[{@clone_children}]}) (async) read$FUSE(r4, &(0x7f0000000600)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000002640)="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", 0x2000, &(0x7f0000004640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004700)={0x90, 0x0, 0x9, {0x0, 0x200000009, 0x8, 0x3, 0x8, 0xc, {0x1, 0x8010001, 0x4d2, 0x40d, 0x6, 0xfffffffffffffffe, 0xfce, 0x2, 0x5, 0x6000, 0x6ff, r6, r7, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f00000047c0)={0x50, 0x0, r5, {0x7, 0x26, 0x5, 0xffffffff80010000, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000004840)="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", 0x2000, &(0x7f0000006840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006900)={0xa0, 0x0, 0x7, {{0x6, 0x4, 0xaa1, 0x3, 0xfffffff8, 0xf, {0x1000000002, 0x8000000000000001, 0x3, 0x40000003, 0xfffffffffffffff3, 0x5, 0xfffffffb, 0x8, 0xfd55, 0xa000, 0x5, r6, 0x0, 0x5, 0xfffffdff}}, {0x0, 0x6}}}, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000069c0)='./file0/file0\x00', 0x64961, 0xb3836f6d7a15f2d) r8 = socket(0x10, 0x3, 0x0) sendmsg(r8, &(0x7f0000000120)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="3800000055000102000000000000000007000000010000002000010001007e0800000100"/56, 0x38}], 0x1}, 0x0) 17.079742523s ago: executing program 5 (id=490): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x3f) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = fsopen(&(0x7f00000008c0)='incremental-fs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x0, 0x0) write(r1, &(0x7f00000002c0)='27', 0x2) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r1, 0x0) add_key(&(0x7f0000000300)='asymmetric\x00', 0x0, &(0x7f0000000340)="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", 0x559, 0xfffffffffffffffd) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0xe, 0x2, 0xd, 0x4, 0x7, 0x800}) 17.079213823s ago: executing program 5 (id=491): openat$kvm(0x0, &(0x7f00000000c0), 0x28001, 0x0) r0 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000300)={0x0, 0x0, 0x7fffffffffffffff, 0x6}) (async, rerun: 32) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 32) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@wrmsr={0x65, 0x20, {0x40000083}}], 0x20}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x10001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}}, 0x0) (async, rerun: 32) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x0, 0x0, 0x31237648}]}) (async, rerun: 32) r6 = ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00) ioctl$UFFDIO_MOVE(r6, 0xc028aa05, &(0x7f0000000340)={&(0x7f0000ea5000/0x3000)=nil, &(0x7f0000f13000/0x4000)=nil, 0x3000, 0x1}) (async) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f0000000180)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16.987179975s ago: executing program 4 (id=492): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000840)=0x207, 0x4) getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'gre0\x00'}) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405a04105201010102030109022000010100803209040000020806f50007058102000200070502020002"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000040)=0x5, 0x4) syz_usb_ep_read(r1, 0x2, 0x28, &(0x7f0000000100)=""/8) 16.462586308s ago: executing program 5 (id=493): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x2a3c188f39285d79, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0xc0010140, 0x0, 0x1}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write(r4, &(0x7f0000000000)='7', 0x1) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) getdents64(r0, 0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/75, 0x4b) 16.432645078s ago: executing program 5 (id=494): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x28642, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x0, 0x110, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@any_dev={0x102, 0x9f, 0x0, 0x0, 0x1000, 0x0, r3}}}, &(0x7f0000000300)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, 0x0) write$eventfd(r7, &(0x7f0000000180)=0xd, 0x8) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r7, 0x0, 0x20004040) dup(r6) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./mnt\x00', 0x1ff) mount(&(0x7f00000007c0)=@filename='./dev/sda1\x00', &(0x7f0000000800)='./mnt\x00', &(0x7f0000000840)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000880)='./file0\x00') 15.369848094s ago: executing program 4 (id=500): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x128}, 0x8800) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000400)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000440)={0x0, 0x400042cc, 0x10, 0x1, 0x80}, &(0x7f00000004c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) sendfile(r6, r6, 0x0, 0x2000009) 15.298345966s ago: executing program 34 (id=500): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x128}, 0x8800) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000400)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000440)={0x0, 0x400042cc, 0x10, 0x1, 0x80}, &(0x7f00000004c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) sendfile(r6, r6, 0x0, 0x2000009) 8.652018949s ago: executing program 2 (id=515): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) rt_sigprocmask(0x2, &(0x7f0000000b40)={[0x800]}, 0x0, 0x8) 4.578737938s ago: executing program 2 (id=521): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x81) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r1, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x60}, 0x1, 0x0, 0x0, 0x890}, 0x4000920) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r5, 0x4, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4001) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe0, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x5c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x200}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffff8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xe0}}, 0x20008084) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000640), r0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x203000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x40, r6, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000800)={0x4, &(0x7f00000007c0)=[{0x0, 0x9, 0x0, 0x7}, {0xff, 0x1, 0x0, 0x100}, {0x1, 0x9, 0x78, 0xfdcf}, {0x90, 0x6, 0xa, 0x3}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000840)) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xf0, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0xc4, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x74, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8001}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555c}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ef0abf2564d9e21db253441c77118700f194a73433ccb2d6bba958e56017e56e"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "48fa87d3d76f6a61139d5a3eb52ad6ee"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r7, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x20, r6, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x0) r9 = syz_io_uring_complete(0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r9, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x20, r10, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x87a7, 0x7b}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1000}, 0x24000080) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2308000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x38, r6, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xd}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x10}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r11, 0x0, 0x0, &(0x7f0000000dc0), 0x4) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000e40), r7) sendmsg$NLBL_MGMT_C_LISTALL(r7, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0x8c, r12, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0xd}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan4\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0xfbe682a8bf8a8a66}, 0x1) sendto(r9, &(0x7f0000000fc0)="c67a022f8a1476dfe5e163bb1e7caa67c9ec5f6089f8dc036535d89c5f7ee7cad19fe1e1be161e74a816996a6aae7f977a6ce97b7318ee5782859abfbd0b712ee647763adbcfab15088110c6273f", 0x4e, 0x850, 0x0, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r13, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r9, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x44050) 4.578261168s ago: executing program 2 (id=522): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f00000002c0)) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000b00)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000d80)=""/4098, 0x1002}, {&(0x7f0000001dc0)=""/105, 0x69}, {&(0x7f0000001e40)=""/34, 0x22}, {&(0x7f0000001e80)=""/88, 0x58}, {&(0x7f0000001f00)=""/64, 0x40}, {&(0x7f0000001f40)=""/4097, 0x1001}], 0x6}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x10120, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x105042, 0x1ff) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000003c0)={0xe8d, 0x6, 0x4, 0xffffffff, 0x7}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x7deb) r3 = openat$kvm(0xffffff9c, &(0x7f00000005c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000600)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000640)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) syz_usb_control_io$uac1(r6, &(0x7f0000000780)={0x14, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="00033e0000003e03"]}, 0x0) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) fchdir(r7) r8 = syz_open_procfs(0x0, &(0x7f0000000ac0)='net/sockstat\x00') mount(&(0x7f0000000b00), &(0x7f0000000b40)='./cgroup\x00', 0x0, 0x1001, 0x0) mount(&(0x7f0000000b80), &(0x7f0000000bc0)='./cgroup\x00', 0x0, 0x1001, 0x0) r9 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x0, 0x201, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r13, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x14}}, 0x804) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) r16 = dup(r15) syz_ublk_setup_queues(r16, r14, &(0x7f0000000180)={0x0, 0xfb87, 0x800, 0x1, 0x32c, 0x0, r8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf63, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x3, 0x0, 0x0, r16}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800000, 0x2000, 0x1, 0x9a}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r16, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0xfef9, 0x0, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x0, 0x3, 0xf3b, 0x0, 0x13fffffc}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 2.818977081s ago: executing program 2 (id=525): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x3f) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = fsopen(&(0x7f00000008c0)='incremental-fs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x0, 0x0) write(r1, &(0x7f00000002c0)='27', 0x2) r2 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder_logs/failed_transaction_log\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000040)={0xe, 0x2, 0xd, 0x4, 0x7, 0x800}) 2.760130673s ago: executing program 2 (id=527): r0 = socket$netlink(0x10, 0x3, 0x4) socket$inet(0x2, 0x4, 0x2) writev(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fsopen(&(0x7f0000000000)='nfs4\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000200000040030410600005010203010902200001010080320904000002ffffff000705", @ANYRESDEC], 0x0) write(r3, &(0x7f00000001c0)='1', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000080)='TIPCv2\x00', &(0x7f0000000100)='./file0\x00', r3) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100280000000000000004"], 0x34}}, 0x4040) open$dir(&(0x7f0000000200)='./proc/sys/net/ipv4/ip_forward\x00', 0x2400, 0x40) 2.675095125s ago: executing program 1 (id=528): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./trace\x00', 0x1ff) r0 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/fail_page_alloc/times\x00', 0x1, 0x0) write$fault_inject(r0, 0x0, 0x41) mount(0x0, &(0x7f00000002c0)='./trace\x00', &(0x7f0000000480)='cpuset\x00', 0x200001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) fstat(r0, &(0x7f0000000200)) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/core/rps_default_mask\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='1,0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./trace/events/sched/sched_switch/trigger\x00', 0x302, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x60040, 0x0) close_range(r1, r3, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="002222000000930000a220b31ce93ee9870c0000002a0008b3"], 0x0}, 0x0) write(r2, &(0x7f0000000500)='hist:keys=common_timest', 0x17) 1.109225873s ago: executing program 2 (id=529): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) rt_sigprocmask(0x2, &(0x7f0000000b40)={[0x800]}, 0x0, 0x8) 1.094276394s ago: executing program 35 (id=494): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x28642, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x0, 0x110, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@any_dev={0x102, 0x9f, 0x0, 0x0, 0x1000, 0x0, r3}}}, &(0x7f0000000300)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, 0x0) write$eventfd(r7, &(0x7f0000000180)=0xd, 0x8) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r7, 0x0, 0x20004040) dup(r6) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./mnt\x00', 0x1ff) mount(&(0x7f00000007c0)=@filename='./dev/sda1\x00', &(0x7f0000000800)='./mnt\x00', &(0x7f0000000840)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000880)='./file0\x00') 1.062009774s ago: executing program 1 (id=531): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10003, 0x7, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001ea000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0, 0xfffffffffffffeee}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 969.347337ms ago: executing program 6 (id=501): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace\x00', 0x0) r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xa, 0x11, r0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000e80)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000ec0)={{&(0x7f0000c3a000/0x2000)=nil, 0x2000}, 0x2}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000f40), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000a52000/0x18000)=nil, &(0x7f0000000fc0)=[@textreal={0x8, &(0x7f0000001040)="67f2e00d64360fae819753f116df428d59be428d59bea3c7d70f38f17388ae65644f011dc5c5f80c66b866878a8566efbafc0ced0fc72ff30fc7b30000", 0x3d}], 0x1, 0x58, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000f00)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x5, 0x9, 0x5, 0xfffffffc, 0x81, "b0a0aa379817387d13ec512269eff4f40c54c0", 0x7, 0x401}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x0, 0x0) r9 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000300)={0xac, 0x0, &(0x7f0000001140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0xfffffffffffffe1e, 0x18, &(0x7f00000011c0)={@fd={0x66642a85, 0x0, r5, 0x0, 0x3}, @flat=@binder={0x73622a85, 0xa, 0x0, 0x1}, @fd={0x66642a85, 0x0, r2, 0x0, 0x3}}, &(0x7f0000001100)={0x0, 0x20, 0x38}}}, @free_buffer={0x40086303, r9}, @request_death={0x400c630e, 0x8000000, 0x1}, @increfs_done={0x40106308, 0x3, 0x2}, @acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x87f, 0x0, &(0x7f0000000600)=""/2175}) mount(0x0, &(0x7f0000000100)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./trace\x00', 0x80, 0x132) 910.656478ms ago: executing program 1 (id=532): setuid(0xee01) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x1, 0x400}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) syz_clone(0x41842000, 0x0, 0x0, 0x0, 0x0, 0x0) 910.368288ms ago: executing program 7 (id=530): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x60440, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) r1 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0101010000000000000006241a00000008241c08000101000905810300023600000904010000020d00000904f80102020d"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) syz_open_procfs$pagemap(r4, &(0x7f0000000280)) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) socket(0x1e, 0x4, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x8, 0x2, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r2, 0x107, 0x18, &(0x7f0000000040)=0xc, 0x4) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 872.111199ms ago: executing program 1 (id=533): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x42480, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1ff, 0x5, 0x2ffc, 0x1000, &(0x7f0000003000/0x1000)=nil}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000080)=ANY=[@ANYBLOB="3d8879"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000006c0)=[@text64={0x40, 0x0}], 0x1, 0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000700)=[@textreal={0x8, 0x0}], 0x1, 0x9, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)="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", 0x896}], 0x1}, 0x4000000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 776.139551ms ago: executing program 7 (id=530): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x60440, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) r1 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0101010000000000000006241a00000008241c08000101000905810300023600000904010000020d00000904f80102020d"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) syz_open_procfs$pagemap(r4, &(0x7f0000000280)) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) socket(0x1e, 0x4, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x8, 0x2, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r2, 0x107, 0x18, &(0x7f0000000040)=0xc, 0x4) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 705.390453ms ago: executing program 6 (id=501): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace\x00', 0x0) r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xa, 0x11, r0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000e80)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000ec0)={{&(0x7f0000c3a000/0x2000)=nil, 0x2000}, 0x2}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000f40), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000a52000/0x18000)=nil, &(0x7f0000000fc0)=[@textreal={0x8, &(0x7f0000001040)="67f2e00d64360fae819753f116df428d59be428d59bea3c7d70f38f17388ae65644f011dc5c5f80c66b866878a8566efbafc0ced0fc72ff30fc7b30000", 0x3d}], 0x1, 0x58, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000f00)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x5, 0x9, 0x5, 0xfffffffc, 0x81, "b0a0aa379817387d13ec512269eff4f40c54c0", 0x7, 0x401}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x0, 0x0) r9 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000300)={0xac, 0x0, &(0x7f0000001140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0xfffffffffffffe1e, 0x18, &(0x7f00000011c0)={@fd={0x66642a85, 0x0, r5, 0x0, 0x3}, @flat=@binder={0x73622a85, 0xa, 0x0, 0x1}, @fd={0x66642a85, 0x0, r2, 0x0, 0x3}}, &(0x7f0000001100)={0x0, 0x20, 0x38}}}, @free_buffer={0x40086303, r9}, @request_death={0x400c630e, 0x8000000, 0x1}, @increfs_done={0x40106308, 0x3, 0x2}, @acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x87f, 0x0, &(0x7f0000000600)=""/2175}) mount(0x0, &(0x7f0000000100)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./trace\x00', 0x80, 0x132) 583.119806ms ago: executing program 1 (id=534): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x1, 0x7fd, 0xd, 0x8009}, 'syz0\x00', 0x40}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffd, 0x2e44) dup3(r2, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 582.975656ms ago: executing program 7 (id=530): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x60440, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) r1 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0101010000000000000006241a00000008241c08000101000905810300023600000904010000020d00000904f80102020d"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) syz_open_procfs$pagemap(r4, &(0x7f0000000280)) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) socket(0x1e, 0x4, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x8, 0x2, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r2, 0x107, 0x18, &(0x7f0000000040)=0xc, 0x4) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 486.011598ms ago: executing program 6 (id=501): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace\x00', 0x0) r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xa, 0x11, r0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000e80)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000ec0)={{&(0x7f0000c3a000/0x2000)=nil, 0x2000}, 0x2}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000f40), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000a52000/0x18000)=nil, &(0x7f0000000fc0)=[@textreal={0x8, &(0x7f0000001040)="67f2e00d64360fae819753f116df428d59be428d59bea3c7d70f38f17388ae65644f011dc5c5f80c66b866878a8566efbafc0ced0fc72ff30fc7b30000", 0x3d}], 0x1, 0x58, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000f00)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x5, 0x9, 0x5, 0xfffffffc, 0x81, "b0a0aa379817387d13ec512269eff4f40c54c0", 0x7, 0x401}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x0, 0x0) r9 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000300)={0xac, 0x0, &(0x7f0000001140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0xfffffffffffffe1e, 0x18, &(0x7f00000011c0)={@fd={0x66642a85, 0x0, r5, 0x0, 0x3}, @flat=@binder={0x73622a85, 0xa, 0x0, 0x1}, @fd={0x66642a85, 0x0, r2, 0x0, 0x3}}, &(0x7f0000001100)={0x0, 0x20, 0x38}}}, @free_buffer={0x40086303, r9}, @request_death={0x400c630e, 0x8000000, 0x1}, @increfs_done={0x40106308, 0x3, 0x2}, @acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x87f, 0x0, &(0x7f0000000600)=""/2175}) mount(0x0, &(0x7f0000000100)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./trace\x00', 0x80, 0x132) 391.416961ms ago: executing program 7 (id=530): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x60440, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) r1 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0101010000000000000006241a00000008241c08000101000905810300023600000904010000020d00000904f80102020d"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) syz_open_procfs$pagemap(r4, &(0x7f0000000280)) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) socket(0x1e, 0x4, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x8, 0x2, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r2, 0x107, 0x18, &(0x7f0000000040)=0xc, 0x4) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 311.338173ms ago: executing program 6 (id=501): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace\x00', 0x0) r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xa, 0x11, r0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000e80)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000ec0)={{&(0x7f0000c3a000/0x2000)=nil, 0x2000}, 0x2}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000f40), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000a52000/0x18000)=nil, &(0x7f0000000fc0)=[@textreal={0x8, &(0x7f0000001040)="67f2e00d64360fae819753f116df428d59be428d59bea3c7d70f38f17388ae65644f011dc5c5f80c66b866878a8566efbafc0ced0fc72ff30fc7b30000", 0x3d}], 0x1, 0x58, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000f00)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x5, 0x9, 0x5, 0xfffffffc, 0x81, "b0a0aa379817387d13ec512269eff4f40c54c0", 0x7, 0x401}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x0, 0x0) r9 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000300)={0xac, 0x0, &(0x7f0000001140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0xfffffffffffffe1e, 0x18, &(0x7f00000011c0)={@fd={0x66642a85, 0x0, r5, 0x0, 0x3}, @flat=@binder={0x73622a85, 0xa, 0x0, 0x1}, @fd={0x66642a85, 0x0, r2, 0x0, 0x3}}, &(0x7f0000001100)={0x0, 0x20, 0x38}}}, @free_buffer={0x40086303, r9}, @request_death={0x400c630e, 0x8000000, 0x1}, @increfs_done={0x40106308, 0x3, 0x2}, @acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x87f, 0x0, &(0x7f0000000600)=""/2175}) mount(0x0, &(0x7f0000000100)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./trace\x00', 0x80, 0x132) 234.204684ms ago: executing program 1 (id=535): unshare(0x64000600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4050) recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x100}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x100}, 0x0) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x1602}) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x1602}) write$tun(r5, 0x0, 0x32) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @typed={0x8, 0x11e, 0x0, 0x0, @fd}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) (async) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @typed={0x8, 0x11e, 0x0, 0x0, @fd}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 222.101155ms ago: executing program 7 (id=530): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x60440, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) r1 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0101010000000000000006241a00000008241c08000101000905810300023600000904010000020d00000904f80102020d"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) syz_open_procfs$pagemap(r4, &(0x7f0000000280)) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) socket(0x1e, 0x4, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x8, 0x2, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r2, 0x107, 0x18, &(0x7f0000000040)=0xc, 0x4) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 145.649637ms ago: executing program 6 (id=501): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace\x00', 0x0) r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xa, 0x11, r0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000e80)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000ec0)={{&(0x7f0000c3a000/0x2000)=nil, 0x2000}, 0x2}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000f40), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000a52000/0x18000)=nil, &(0x7f0000000fc0)=[@textreal={0x8, &(0x7f0000001040)="67f2e00d64360fae819753f116df428d59be428d59bea3c7d70f38f17388ae65644f011dc5c5f80c66b866878a8566efbafc0ced0fc72ff30fc7b30000", 0x3d}], 0x1, 0x58, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000f00)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x5, 0x9, 0x5, 0xfffffffc, 0x81, "b0a0aa379817387d13ec512269eff4f40c54c0", 0x7, 0x401}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x0, 0x0) r9 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000300)={0xac, 0x0, &(0x7f0000001140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0xfffffffffffffe1e, 0x18, &(0x7f00000011c0)={@fd={0x66642a85, 0x0, r5, 0x0, 0x3}, @flat=@binder={0x73622a85, 0xa, 0x0, 0x1}, @fd={0x66642a85, 0x0, r2, 0x0, 0x3}}, &(0x7f0000001100)={0x0, 0x20, 0x38}}}, @free_buffer={0x40086303, r9}, @request_death={0x400c630e, 0x8000000, 0x1}, @increfs_done={0x40106308, 0x3, 0x2}, @acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x87f, 0x0, &(0x7f0000000600)=""/2175}) mount(0x0, &(0x7f0000000100)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./trace\x00', 0x80, 0x132) 71.555568ms ago: executing program 7 (id=530): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x60440, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) r1 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0101010000000000000006241a00000008241c08000101000905810300023600000904010000020d00000904f80102020d"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) syz_open_procfs$pagemap(r4, &(0x7f0000000280)) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) socket(0x1e, 0x4, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x8, 0x2, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r2, 0x107, 0x18, &(0x7f0000000040)=0xc, 0x4) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 0s ago: executing program 6 (id=501): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace\x00', 0x0) r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xa, 0x11, r0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000e80)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000ec0)={{&(0x7f0000c3a000/0x2000)=nil, 0x2000}, 0x2}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000f40), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000a52000/0x18000)=nil, &(0x7f0000000fc0)=[@textreal={0x8, &(0x7f0000001040)="67f2e00d64360fae819753f116df428d59be428d59bea3c7d70f38f17388ae65644f011dc5c5f80c66b866878a8566efbafc0ced0fc72ff30fc7b30000", 0x3d}], 0x1, 0x58, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000f00)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x5, 0x9, 0x5, 0xfffffffc, 0x81, "b0a0aa379817387d13ec512269eff4f40c54c0", 0x7, 0x401}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x0, 0x0) r9 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000300)={0xac, 0x0, &(0x7f0000001140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0xfffffffffffffe1e, 0x18, &(0x7f00000011c0)={@fd={0x66642a85, 0x0, r5, 0x0, 0x3}, @flat=@binder={0x73622a85, 0xa, 0x0, 0x1}, @fd={0x66642a85, 0x0, r2, 0x0, 0x3}}, &(0x7f0000001100)={0x0, 0x20, 0x38}}}, @free_buffer={0x40086303, r9}, @request_death={0x400c630e, 0x8000000, 0x1}, @increfs_done={0x40106308, 0x3, 0x2}, @acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x87f, 0x0, &(0x7f0000000600)=""/2175}) mount(0x0, &(0x7f0000000100)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./trace\x00', 0x80, 0x132) kernel console output (not intermixed with test programs): Gadget: couldn't find an available UDC or it's busy [ 74.244230][ T1006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.252593][ T1006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.261378][ T1006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.288738][ T347] usb usb4-port1: unable to enumerate USB device [ 74.367751][ T1015] SELinux: policydb magic number 0xa00 does not match expected magic number 0xf97cff8c [ 74.378173][ T1015] sel_write_load: 55 callbacks suppressed [ 74.378191][ T1015] SELinux: failed to load policy [ 74.458444][ T313] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 74.608440][ T313] usb 5-1: Using ep0 maxpacket: 16 [ 74.614849][ T313] usb 5-1: config 0 interface 0 altsetting 246 endpoint 0x81 has an invalid bInterval 0, changing to 1 [ 74.626171][ T313] usb 5-1: config 0 interface 0 altsetting 246 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.636332][ T313] usb 5-1: config 0 interface 0 altsetting 246 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.649667][ T313] usb 5-1: config 0 interface 0 has no altsetting 0 [ 74.656369][ T313] usb 5-1: New USB device found, idVendor=1532, idProduct=0116, bcdDevice= 0.00 [ 74.665684][ T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.674554][ T313] usb 5-1: config 0 descriptor?? [ 74.708438][ T347] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 74.754576][ T1024] kernel profiling enabled (shift: 23) [ 74.770327][ T1024] netlink: 'syz.1.214': attribute type 17 has an invalid length. [ 74.778218][ T1024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.214'. [ 74.787687][ T1024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.214'. [ 74.838459][ T347] usb 4-1: device descriptor read/64, error -71 [ 74.870870][ T1024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1024 comm=syz.1.214 [ 74.883650][ T1024] SELinux: failed to load policy [ 74.886547][ T313] usbhid 5-1:0.0: can't add hid device: -71 [ 74.894550][ T313] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 74.903411][ T313] usb 5-1: USB disconnect, device number 3 [ 75.088697][ T347] usb 4-1: device descriptor read/64, error -71 [ 75.338428][ T347] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 75.454325][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 75.454343][ T36] audit: type=1400 audit(1792045295.739:30798): avc: denied { getopt } for pid=1060 comm="syz.4.220" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.488835][ T347] usb 4-1: device descriptor read/64, error -71 [ 75.740880][ T347] usb 4-1: device descriptor read/64, error -71 [ 75.866775][ T347] usb usb4-port1: attempt power cycle [ 76.218433][ T347] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 76.239471][ T347] usb 4-1: device descriptor read/8, error -71 [ 76.369504][ T347] usb 4-1: device descriptor read/8, error -71 [ 76.378431][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 76.508446][ T10] usb 3-1: device descriptor read/64, error -71 [ 76.608445][ T347] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 76.639475][ T347] usb 4-1: device descriptor read/8, error -71 [ 76.748432][ T10] usb 3-1: device descriptor read/64, error -71 [ 76.769472][ T347] usb 4-1: device descriptor read/8, error -71 [ 76.878536][ T347] usb usb4-port1: unable to enumerate USB device [ 76.998429][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 77.138459][ T10] usb 3-1: device descriptor read/64, error -71 [ 77.292311][ T36] audit: type=1400 audit(1792045297.579:30799): avc: denied { create } for pid=1096 comm="syz.4.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 77.332908][ T36] audit: type=1400 audit(1792045297.619:30800): avc: denied { cmd } for pid=1098 comm="iou-wrk-1099" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 77.374254][ T36] audit: type=1400 audit(1792045297.659:30801): avc: denied { write } for pid=1105 comm="syz.1.235" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 77.393549][ T10] usb 3-1: device descriptor read/64, error -71 [ 77.420995][ T1110] FAULT_INJECTION: forcing a failure. [ 77.420995][ T1110] name fail_futex, interval 1, probability 0, space 0, times 0 [ 77.434008][ T1110] CPU: 1 UID: 0 PID: 1110 Comm: syz.3.236 Not tainted syzkaller #0 4acfbc369189e5cacd88ca5a92b3a107a9d116ed [ 77.434037][ T1110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.434050][ T1110] Call Trace: [ 77.434056][ T1110] [ 77.434063][ T1110] __dump_stack+0x21/0x30 [ 77.434093][ T1110] dump_stack_lvl+0x140/0x1c0 [ 77.434119][ T1110] ? __cfi_dump_stack_lvl+0x10/0x10 [ 77.434144][ T1110] ? unwind_get_return_address+0x51/0x90 [ 77.434170][ T1110] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 77.434197][ T1110] dump_stack+0x19/0x20 [ 77.434222][ T1110] should_fail_ex+0x3c2/0x510 [ 77.434240][ T1110] should_fail+0xf/0x20 [ 77.434256][ T1110] get_futex_key+0x5c4/0x940 [ 77.434274][ T1110] ? __cfi_get_futex_key+0x10/0x10 [ 77.434291][ T1110] ? kasan_save_track+0x4f/0x80 [ 77.434318][ T1110] futex_wake+0x150/0x950 [ 77.434340][ T1110] ? __cfi_futex_wake+0x10/0x10 [ 77.434362][ T1110] ? perf_lock_task_context+0x398/0x450 [ 77.434389][ T1110] ? __perf_event_period+0x490/0x490 [ 77.434413][ T1110] ? mutex_unlock+0x90/0x240 [ 77.434437][ T1110] do_futex+0x37d/0x510 [ 77.434455][ T1110] ? __kasan_check_read+0x15/0x20 [ 77.434479][ T1110] ? __cfi_do_futex+0x10/0x10 [ 77.434495][ T1110] ? __kasan_check_write+0x18/0x20 [ 77.434517][ T1110] mm_release+0x15f/0x300 [ 77.434540][ T1110] ? exit_mm_release+0x50/0x50 [ 77.434562][ T1110] ? futex_exit_release+0x11d/0x1f0 [ 77.434582][ T1110] exit_mm_release+0x29/0x50 [ 77.434603][ T1110] do_exit+0x832/0x2850 [ 77.434634][ T1110] ? futex_wake+0x666/0x950 [ 77.434655][ T1110] ? __cfi_do_exit+0x10/0x10 [ 77.434674][ T1110] ? futex_wait+0x2b8/0x7c0 [ 77.434693][ T1110] ? __cfi_futex_wait+0x10/0x10 [ 77.434711][ T1110] ? __kasan_check_write+0x18/0x20 [ 77.434732][ T1110] ? _raw_spin_lock_irq+0x93/0x120 [ 77.434748][ T1110] do_group_exit+0x21f/0x2f0 [ 77.434770][ T1110] ? __kasan_check_write+0x18/0x20 [ 77.434791][ T1110] ? recalc_sigpending+0x16c/0x1d0 [ 77.434811][ T1110] get_signal+0x134c/0x1490 [ 77.434835][ T1110] arch_do_signal_or_restart+0xbc/0x700 [ 77.434854][ T1110] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 77.434874][ T1110] ? __kasan_check_write+0x18/0x20 [ 77.434895][ T1110] syscall_exit_to_user_mode+0x57/0xb0 [ 77.434918][ T1110] do_syscall_64+0x63/0xf0 [ 77.434934][ T1110] ? clear_bhb_loop+0x50/0xa0 [ 77.434957][ T1110] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.434979][ T1110] RIP: 0033:0x7f093b39e559 [ 77.434996][ T1110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.435013][ T1110] RSP: 002b:00007f093c1c50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 77.435034][ T1110] RAX: fffffffffffffe00 RBX: 00007f093b625fa8 RCX: 00007f093b39e559 [ 77.435049][ T1110] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f093b625fa8 [ 77.435062][ T1110] RBP: 00007f093b625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 77.435074][ T1110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.435087][ T1110] R13: 00007f093b626038 R14: 00007ffd82b63f60 R15: 00007ffd82b64048 [ 77.435104][ T1110] [ 77.515617][ T10] usb usb3-port1: attempt power cycle [ 77.658631][ T347] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 77.909740][ T347] usb 5-1: unable to get BOS descriptor or descriptor too short [ 77.917778][ T347] usb 5-1: not running at top speed; connect to a high speed hub [ 77.926209][ T347] usb 5-1: config 0 has too many interfaces: 239, using maximum allowed: 32 [ 77.934941][ T347] usb 5-1: config 0 has an invalid interface number: 253 but max is 238 [ 77.943295][ T347] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 239 [ 77.952350][ T347] usb 5-1: config 0 has no interface number 0 [ 77.958447][ T347] usb 5-1: config 0 interface 253 has no altsetting 0 [ 77.966602][ T347] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a02, bcdDevice=5b.e6 [ 77.976497][ T347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.984557][ T347] usb 5-1: Product: syz [ 77.988735][ T347] usb 5-1: Manufacturer: syz [ 77.993308][ T347] usb 5-1: SerialNumber: syz [ 77.998585][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 77.999840][ T347] usb 5-1: config 0 descriptor?? [ 78.006202][ T312] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 78.039476][ T10] usb 3-1: device descriptor read/8, error -71 [ 78.169548][ T10] usb 3-1: device descriptor read/8, error -71 [ 78.175840][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.186754][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.196519][ T312] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 78.205579][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.214373][ T312] usb 4-1: config 0 descriptor?? [ 78.225864][ T347] usb 5-1: USB disconnect, device number 4 [ 78.311531][ T1121] __vm_enough_memory: pid: 1121, comm: syz.1.241, bytes: 11728126939136 not enough memory for the allocation [ 78.328440][ T1122] __vm_enough_memory: pid: 1122, comm: syz.1.241, bytes: 11728126939136 not enough memory for the allocation [ 78.407143][ T36] audit: type=1400 audit(1792045298.689:30802): avc: denied { name_bind } for pid=1133 comm="syz.1.245" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 78.408653][ T1135] fuse: Unknown parameter '' [ 78.434209][ T1134] bpf: Bad value for 'gid' [ 78.441990][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 78.489570][ T10] usb 3-1: device descriptor read/8, error -71 [ 78.619449][ T10] usb 3-1: device descriptor read/8, error -71 [ 78.659860][ T312] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 78.667279][ T312] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 78.698431][ T312] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 78.705858][ T312] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 78.713470][ T312] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 78.727766][ T312] playstation 0003:054C:0DF2.0008: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 78.739655][ T10] usb usb3-port1: unable to enumerate USB device [ 78.818438][ T347] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 78.859570][ T312] playstation 0003:054C:0DF2.0008: Failed to retrieve feature with reportID 9: -71 [ 78.869018][ T312] playstation 0003:054C:0DF2.0008: Failed to retrieve DualSense pairing info: -71 [ 78.878225][ T312] playstation 0003:054C:0DF2.0008: Failed to get MAC address from DualSense [ 78.886952][ T312] playstation 0003:054C:0DF2.0008: Failed to create dualsense. [ 78.897683][ T312] playstation 0003:054C:0DF2.0008: probe with driver playstation failed with error -71 [ 78.909038][ T312] usb 4-1: USB disconnect, device number 16 [ 78.969665][ T347] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 78.980846][ T347] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 42492, setting to 1024 [ 78.993712][ T347] usb 2-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 79.002776][ T347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.012040][ T347] usb 2-1: Product: syz [ 79.016232][ T347] usb 2-1: Manufacturer: syz [ 79.020860][ T347] usb 2-1: SerialNumber: syz [ 79.026381][ T1139] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 79.034444][ T347] ums-onetouch 2-1:1.0: USB Mass Storage device detected [ 79.043115][ T347] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 79.052239][ T36] audit: type=1400 audit(1792045299.339:30803): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=548 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.052886][ T347] scsi host1: usb-storage 2-1:1.0 [ 79.075626][ T36] audit: type=1400 audit(1792045299.339:30804): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=548 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.103289][ T36] audit: type=1400 audit(1792045299.339:30805): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=548 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.167714][ T1155] netlink: 'syz.2.250': attribute type 28 has an invalid length. [ 79.178460][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 79.243987][ T1139] FAULT_INJECTION: forcing a failure. [ 79.243987][ T1139] name failslab, interval 1, probability 0, space 0, times 0 [ 79.257079][ T1139] CPU: 0 UID: 0 PID: 1139 Comm: syz.1.246 Not tainted syzkaller #0 4acfbc369189e5cacd88ca5a92b3a107a9d116ed [ 79.257102][ T1139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.257115][ T1139] Call Trace: [ 79.257121][ T1139] [ 79.257129][ T1139] __dump_stack+0x21/0x30 [ 79.257164][ T1139] dump_stack_lvl+0x140/0x1c0 [ 79.257192][ T1139] ? __cfi_dump_stack_lvl+0x10/0x10 [ 79.257211][ T1139] dump_stack+0x19/0x20 [ 79.257224][ T1139] should_fail_ex+0x3c2/0x510 [ 79.257241][ T1139] should_failslab+0xac/0x100 [ 79.257252][ T1139] kmem_cache_alloc_node_noprof+0x45/0x420 [ 79.257275][ T1139] ? __alloc_skb+0x10c/0x360 [ 79.257294][ T1139] ? add_uevent_var+0x288/0x470 [ 79.257313][ T1139] ? dev_uevent+0x400/0x5c0 [ 79.257332][ T1139] __alloc_skb+0x10c/0x360 [ 79.257349][ T1139] ? __kasan_check_write+0x18/0x20 [ 79.257366][ T1139] alloc_uevent_skb+0x85/0x240 [ 79.257377][ T1139] kobject_uevent_net_broadcast+0x356/0x5e0 [ 79.257388][ T1139] kobject_uevent_env+0x551/0x7e0 [ 79.257399][ T1139] kobject_uevent+0x21/0x40 [ 79.257410][ T1139] device_release_driver_internal+0x75b/0x830 [ 79.257433][ T1139] device_release_driver+0x1d/0x30 [ 79.257455][ T1139] usb_driver_release_interface+0x147/0x1c0 [ 79.257480][ T1139] proc_ioctl+0x2cf/0x730 [ 79.257498][ T1139] proc_ioctl_default+0xc5/0x120 [ 79.257523][ T1139] ? proc_releaseinterface+0x4f0/0x4f0 [ 79.257538][ T1139] ? __cfi_do_futex+0x10/0x10 [ 79.257549][ T1139] usbdev_ioctl+0x1395/0x2120 [ 79.257562][ T1139] ? __cfi_usbdev_ioctl+0x10/0x10 [ 79.257575][ T1139] ? __fget_files+0x2bc/0x330 [ 79.257586][ T1139] ? bpf_lsm_file_ioctl+0xd/0x20 [ 79.257606][ T1139] ? security_file_ioctl+0x3e/0x110 [ 79.257630][ T1139] ? __cfi_usbdev_ioctl+0x10/0x10 [ 79.257654][ T1139] __se_sys_ioctl+0x126/0x1b0 [ 79.257673][ T1139] __x64_sys_ioctl+0x7f/0xa0 [ 79.257683][ T1139] x64_sys_call+0x1878/0x2ee0 [ 79.257694][ T1139] do_syscall_64+0x57/0xf0 [ 79.257703][ T1139] ? clear_bhb_loop+0x50/0xa0 [ 79.257715][ T1139] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.257726][ T1139] RIP: 0033:0x7f6df679e559 [ 79.257737][ T1139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.257753][ T1139] RSP: 002b:00007f6df7587028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.257775][ T1139] RAX: ffffffffffffffda RBX: 00007f6df6a25fa0 RCX: 00007f6df679e559 [ 79.257790][ T1139] RDX: 00002000000003c0 RSI: 00000000c0105512 RDI: 0000000000000007 [ 79.257804][ T1139] RBP: 00007f6df68358b0 R08: 0000000000000000 R09: 0000000000000000 [ 79.257817][ T1139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.257829][ T1139] R13: 00007f6df6a26038 R14: 00007f6df6a25fa0 R15: 00007ffc0e2608f8 [ 79.257840][ T1139] [ 79.533155][ T1139] hub 6-0:1.0: USB hub found [ 79.537883][ T1139] hub 6-0:1.0: 1 port detected [ 79.545289][ T347] usb 2-1: USB disconnect, device number 13 [ 79.550983][ T10] usb 5-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 79.551270][ C1] input input5: can't resubmit intr, dummy_hcd.1-1/input0, retval -19 [ 79.560291][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.577467][ T10] usb 5-1: Product: syz [ 79.581971][ T10] usb 5-1: Manufacturer: syz [ 79.586570][ T10] usb 5-1: SerialNumber: syz [ 79.594087][ T10] ums-karma 5-1:1.0: USB Mass Storage device detected [ 79.601691][ T10] ums-karma 5-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 79.601691][ T10] Please send a copy of this message to and [ 79.898435][ T45] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 80.050386][ T45] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 106, changing to 10 [ 80.061772][ T45] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 17952, setting to 1024 [ 80.073522][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 80.080967][ T45] usb 4-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 80.093534][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.107662][ T45] usb 4-1: config 0 descriptor?? [ 80.117676][ T36] audit: type=1400 audit(1792045300.409:30806): avc: denied { read } for pid=1167 comm="syz.1.255" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.144313][ T1173] mmap: syz.2.256 (1173) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 80.147263][ T1166] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 80.158976][ T1177] tipc: Started in network mode [ 80.168244][ T1177] tipc: Node identity 4, cluster identity 4711 [ 80.174689][ T36] audit: type=1400 audit(1792045300.409:30807): avc: denied { open } for pid=1167 comm="syz.1.255" path="/65/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.178125][ T1177] tipc: Node number set to 4 [ 80.259764][ T10] ums-karma 5-1:1.0: probe with driver ums-karma failed with error -5 [ 80.270044][ T10] usb 5-1: USB disconnect, device number 5 [ 80.548425][ T347] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 80.608930][ T45] hid (null): unknown global tag 0xfd [ 80.621134][ T45] waltop 0003:172F:0034.0009: unexpected long global item [ 80.628561][ T45] waltop 0003:172F:0034.0009: probe with driver waltop failed with error -22 [ 80.708416][ T347] usb 2-1: Using ep0 maxpacket: 32 [ 80.714963][ T347] usb 2-1: unable to get BOS descriptor or descriptor too short [ 80.723555][ T347] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 80.732189][ T347] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 80.742760][ T347] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 80.752057][ T347] usb 2-1: config 128 has no interface number 0 [ 80.752514][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 80.752528][ T36] audit: type=1400 audit(1792045301.039:30812): avc: denied { read } for pid=1184 comm="syz.4.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.758334][ T347] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 80.793756][ T347] usb 2-1: config 128 interface 127 has no altsetting 0 [ 80.802049][ T347] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 80.812723][ T45] usb 4-1: USB disconnect, device number 17 [ 80.820730][ T347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.829272][ T347] usb 2-1: Product: syz [ 80.833443][ T347] usb 2-1: Manufacturer: syz [ 80.838012][ T347] usb 2-1: SerialNumber: syz [ 81.053957][ T347] usb 2-1: USB disconnect, device number 14 [ 81.066287][ T950] udevd[950]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 81.558425][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 81.739464][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.750464][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.760547][ T10] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 81.769606][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.788992][ T10] usb 4-1: config 0 descriptor?? [ 81.908427][ T347] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 82.059573][ T347] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 82.070943][ T347] usb 5-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.083883][ T347] usb 5-1: config 0 interface 0 has no altsetting 0 [ 82.090528][ T347] usb 5-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 82.099589][ T347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.108342][ T347] usb 5-1: config 0 descriptor?? [ 82.197290][ T10] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 82.204863][ T10] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 82.212301][ T10] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 82.219795][ T10] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 82.227185][ T10] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 82.235395][ T10] playstation 0003:054C:0DF2.000A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 82.396406][ T10] playstation 0003:054C:0DF2.000A: Failed to retrieve feature with reportID 9: -71 [ 82.406738][ T10] playstation 0003:054C:0DF2.000A: Failed to retrieve DualSense pairing info: -71 [ 82.416154][ T10] playstation 0003:054C:0DF2.000A: Failed to get MAC address from DualSense [ 82.424973][ T10] playstation 0003:054C:0DF2.000A: Failed to create dualsense. [ 82.433129][ T10] playstation 0003:054C:0DF2.000A: probe with driver playstation failed with error -71 [ 82.444154][ T10] usb 4-1: USB disconnect, device number 18 [ 82.508430][ T311] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 82.517242][ T1202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.526590][ T347] magicmouse 0003:05AC:0324.000B: ignoring exceeding usage max [ 82.528744][ T1202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.541927][ T347] input: HID 05ac:0324 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:0324.000B/input/input6 [ 82.557444][ T347] magicmouse 0003:05AC:0324.000B: input,hidraw0: USB HID v0.10 Joystick [HID 05ac:0324] on usb-dummy_hcd.4-1/input0 [ 82.661324][ T311] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 82.678603][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.698455][ T311] usb 2-1: Product: syz [ 82.708424][ T311] usb 2-1: Manufacturer: syz [ 82.713062][ T311] usb 2-1: SerialNumber: syz [ 82.720709][ T347] usb 5-1: USB disconnect, device number 6 [ 82.727534][ T311] ums-karma 2-1:1.0: USB Mass Storage device detected [ 82.735606][ T311] ums-karma 2-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 82.735606][ T311] Please send a copy of this message to and [ 82.916159][ T36] audit: type=1400 audit(1792045303.199:30813): avc: denied { ioctl } for pid=1224 comm="syz.3.270" path="socket:[12351]" dev="sockfs" ino=12351 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.941552][ T36] audit: type=1400 audit(1792045303.199:30814): avc: denied { map } for pid=1224 comm="syz.3.270" path="socket:[12350]" dev="sockfs" ino=12350 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.078447][ T66] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 83.091549][ T1226] x86/PAT: syz.3.270:1226 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 83.208456][ T66] usb 3-1: device descriptor read/64, error -71 [ 83.303488][ T1232] netlink: 'syz.4.274': attribute type 11 has an invalid length. [ 83.372101][ T311] ums-karma 2-1:1.0: probe with driver ums-karma failed with error -5 [ 83.384055][ T311] usb 2-1: USB disconnect, device number 15 [ 83.442998][ T36] audit: type=1400 audit(1792045303.729:30815): avc: denied { create } for pid=1237 comm="syz.4.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 83.463208][ T66] usb 3-1: device descriptor read/64, error -71 [ 83.718441][ T66] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 83.758451][ T45] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 83.848436][ T66] usb 3-1: device descriptor read/64, error -71 [ 83.909593][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.921679][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.931774][ T45] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 83.950549][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.978644][ T45] usb 5-1: config 0 descriptor?? [ 84.098472][ T66] usb 3-1: device descriptor read/64, error -71 [ 84.209661][ T66] usb usb3-port1: attempt power cycle [ 84.238430][ T347] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 84.388419][ T347] usb 2-1: Using ep0 maxpacket: 32 [ 84.394817][ T347] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.408112][ T347] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 84.419520][ T45] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 84.426930][ T45] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 84.435780][ T347] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 84.449038][ T45] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 84.456439][ T45] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 84.464267][ T45] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 84.473980][ T347] usb 2-1: New USB device found, idVendor=03eb, idProduct=2118, bcdDevice= 0.00 [ 84.483760][ T347] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=32 [ 84.492243][ T45] playstation 0003:054C:0DF2.000C: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 84.504164][ T347] usb 2-1: SerialNumber: syz [ 84.510317][ T347] usb 2-1: config 0 descriptor?? [ 84.521415][ T347] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 84.558477][ T66] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 84.579512][ T66] usb 3-1: device descriptor read/8, error -71 [ 84.607536][ T45] playstation 0003:054C:0DF2.000C: Failed to retrieve feature with reportID 9: -71 [ 84.618442][ T45] playstation 0003:054C:0DF2.000C: Failed to retrieve DualSense pairing info: -71 [ 84.627963][ T45] playstation 0003:054C:0DF2.000C: Failed to get MAC address from DualSense [ 84.638277][ T45] playstation 0003:054C:0DF2.000C: Failed to create dualsense. [ 84.660645][ T45] playstation 0003:054C:0DF2.000C: probe with driver playstation failed with error -71 [ 84.676109][ T45] usb 5-1: USB disconnect, device number 7 [ 84.709537][ T66] usb 3-1: device descriptor read/8, error -71 [ 84.717433][ T1249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.728989][ T1249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.948450][ T66] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 84.971110][ T66] usb 3-1: device descriptor read/8, error -71 [ 85.099567][ T66] usb 3-1: device descriptor read/8, error -71 [ 85.170415][ T36] audit: type=1400 audit(1792045305.459:30816): avc: denied { mount } for pid=1253 comm="syz.4.282" name="/" dev="configfs" ino=2552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 85.208576][ T66] usb usb3-port1: unable to enumerate USB device [ 85.229001][ T36] audit: type=1400 audit(1792045305.459:30817): avc: denied { search } for pid=1253 comm="syz.4.282" name="/" dev="configfs" ino=2552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 85.252841][ T36] audit: type=1400 audit(1792045305.459:30818): avc: denied { write } for pid=1253 comm="syz.4.282" name="usb_gadget" dev="configfs" ino=2553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 85.277832][ T36] audit: type=1400 audit(1792045305.459:30819): avc: denied { add_name } for pid=1253 comm="syz.4.282" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 85.299639][ T36] audit: type=1400 audit(1792045305.459:30820): avc: denied { create } for pid=1253 comm="syz.4.282" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 85.320171][ T36] audit: type=1400 audit(1792045305.459:30821): avc: denied { create } for pid=1253 comm="syz.4.282" name="c.1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 85.341337][ T1256] binder: Unknown parameter 'd‹r´' [ 85.878430][ T45] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 86.031087][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.042172][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.052034][ T66] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 86.060027][ T45] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 86.069455][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.088237][ T45] usb 5-1: config 0 descriptor?? [ 86.221114][ T66] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 86.232060][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.240429][ T66] usb 3-1: Product: syz [ 86.244786][ T66] usb 3-1: Manufacturer: syz [ 86.249718][ T66] usb 3-1: SerialNumber: syz [ 86.258886][ T66] ums-karma 3-1:1.0: USB Mass Storage device detected [ 86.266689][ T66] ums-karma 3-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 86.266689][ T66] Please send a copy of this message to and [ 86.300856][ T45] hid-led 0003:27B8:01ED.000D: unknown main item tag 0x0 [ 86.323270][ T45] hid-led 0003:27B8:01ED.000D: unknown main item tag 0x0 [ 86.330827][ T45] hid-led 0003:27B8:01ED.000D: unknown main item tag 0x0 [ 86.337984][ T45] hid-led 0003:27B8:01ED.000D: unknown main item tag 0x0 [ 86.345473][ T45] hid-led 0003:27B8:01ED.000D: unknown main item tag 0x0 [ 86.501381][ T45] hid-led 0003:27B8:01ED.000D: probe with driver hid-led failed with error -71 [ 86.518232][ T45] usb 5-1: USB disconnect, device number 8 [ 86.901644][ T66] ums-karma 3-1:1.0: probe with driver ums-karma failed with error -5 [ 86.912797][ T66] usb 3-1: USB disconnect, device number 18 [ 87.015049][ T45] usb 2-1: USB disconnect, device number 16 [ 87.050161][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 87.050176][ T36] audit: type=1400 audit(1792045307.339:30829): avc: denied { getopt } for pid=1291 comm="syz.4.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.061588][ T1292] tmpfs: Invalid uid '0x00000000ffffffff' [ 87.075993][ T1293] tmpfs: Invalid uid '0x00000000ffffffff' [ 87.099815][ T36] audit: type=1400 audit(1792045307.339:30830): avc: denied { ioctl } for pid=1289 comm="syz.1.290" path="socket:[13545]" dev="sockfs" ino=13545 ioctlcmd=0xf508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.549958][ T45] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 87.618424][ T66] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 87.698443][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 87.705232][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 87.715567][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.725959][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 87.736031][ T45] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 87.747670][ T45] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 87.757163][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.767124][ T45] usb 2-1: Product: syz [ 87.771359][ T66] usb 3-1: Using ep0 maxpacket: 16 [ 87.776957][ T45] usb 2-1: Manufacturer: syz [ 87.782041][ T45] usb 2-1: SerialNumber: syz [ 87.786744][ T66] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.798309][ T66] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.811893][ T66] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 87.825221][ T66] usb 3-1: config 0 interface 0 has no altsetting 0 [ 87.838870][ T66] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 87.858342][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.881225][ T66] usb 3-1: config 0 descriptor?? [ 88.019694][ T45] usb 2-1: MIDIStreaming interface descriptor not found [ 88.036457][ T45] usb 2-1: USB disconnect, device number 17 [ 88.318471][ T347] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 88.481581][ T347] usb 5-1: Using ep0 maxpacket: 32 [ 88.494640][ T66] usb 3-1: USB disconnect, device number 19 [ 88.502604][ T347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.516528][ T347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.526557][ T347] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 88.536136][ T347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.552860][ T347] usb 5-1: config 0 descriptor?? [ 88.562208][ T347] hub 5-1:0.0: USB hub found [ 88.774188][ T347] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 88.839993][ T45] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 88.988418][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 88.994854][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.005302][ T45] usb 2-1: config 0 has no interfaces? [ 89.011089][ T45] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 89.026095][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.042313][ T45] usb 2-1: config 0 descriptor?? [ 89.050439][ T1330] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.059330][ T1330] netlink: 'syz.2.301': attribute type 1 has an invalid length. [ 89.067050][ T1330] netlink: 9 bytes leftover after parsing attributes in process `syz.2.301'. [ 89.076973][ T36] audit: type=1400 audit(1792045309.369:30831): avc: denied { bind } for pid=1329 comm="syz.2.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 89.108636][ T1330] SELinux: policydb magic number 0x17 does not match expected magic number 0xf97cff8c [ 89.119683][ T36] audit: type=1400 audit(1792045309.389:30832): avc: denied { mount } for pid=1329 comm="syz.2.301" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 89.141350][ T1330] SELinux: failed to load policy [ 89.154154][ T347] hid-generic 0003:046D:C31C.000F: item fetching failed at offset 0/1 [ 89.168246][ T347] hid-generic 0003:046D:C31C.000F: probe with driver hid-generic failed with error -22 [ 89.458524][ T311] usb 5-1: USB disconnect, device number 9 [ 90.193206][ T1343] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 90.201399][ T1343] rust_binder: Read failure Err(EFAULT) in pid:229 [ 90.548423][ T45] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 90.719620][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.730739][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.740928][ T45] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 90.750245][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.766797][ T45] usb 3-1: config 0 descriptor?? [ 90.823601][ T1352] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 90.834738][ T1352] overlay: filesystem on ./file0 not supported as upperdir [ 90.858050][ T1356] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 90.919863][ T1356] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 91.006127][ T36] audit: type=1400 audit(1792045311.289:30833): avc: denied { shutdown } for pid=1361 comm="syz.4.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.189170][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 91.202686][ T36] audit: type=1400 audit(1792045311.489:30834): avc: denied { mounton } for pid=1365 comm="syz.4.314" path="/55/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 91.203534][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 91.235719][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 91.246416][ T45] usb 3-1: USB disconnect, device number 20 [ 91.611151][ T10] usb 2-1: USB disconnect, device number 18 [ 91.733494][ T1392] fuseblk: Bad value for 'user_id' [ 91.740785][ T1392] fuseblk: Bad value for 'user_id' [ 91.779475][ T36] audit: type=1400 audit(1792045312.069:30835): avc: denied { write } for pid=1395 comm="syz.2.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 91.848654][ T36] audit: type=1400 audit(1792045312.139:30836): avc: denied { map } for pid=1400 comm="syz.1.321" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.898230][ T36] audit: type=1400 audit(1792045312.179:30837): avc: denied { call } for pid=1400 comm="syz.1.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 91.941843][ T36] audit: type=1400 audit(1792045312.229:30838): avc: denied { read } for pid=1400 comm="syz.1.321" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 92.028790][ T66] rust_binder: 1400: undelivered TRANSACTION_ERROR: 29190 [ 92.348449][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 92.510767][ T10] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 92.519926][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.527925][ T10] usb 2-1: Product: syz [ 92.532148][ T10] usb 2-1: Manufacturer: syz [ 92.536789][ T10] usb 2-1: SerialNumber: syz [ 92.538691][ T66] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 92.544479][ T10] ums-karma 2-1:1.0: USB Mass Storage device detected [ 92.570691][ T10] ums-karma 2-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 92.570691][ T10] Please send a copy of this message to and [ 92.709524][ T66] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 92.719564][ T66] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 92.731376][ T66] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 92.740565][ T66] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.748597][ T66] usb 5-1: Product: syz [ 92.754633][ T66] usb 5-1: Manufacturer: syz [ 92.759272][ T66] usb 5-1: SerialNumber: syz [ 92.766194][ T66] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 92.774737][ T66] ums-sddr09 5-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 92.774737][ T66] Please send a copy of this message to and [ 92.928630][ T45] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 93.079655][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.090656][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.103991][ T45] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 93.114472][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.123619][ T45] usb 3-1: config 0 descriptor?? [ 93.180014][ T10] ums-karma 2-1:1.0: probe with driver ums-karma failed with error -5 [ 93.201883][ T10] usb 2-1: USB disconnect, device number 19 [ 93.535517][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 93.543315][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 93.556322][ T45] usb 3-1: USB disconnect, device number 21 [ 93.618469][ T66] scsi host2: usb-storage 5-1:1.0 [ 93.631269][ T66] usb 5-1: USB disconnect, device number 10 [ 93.675480][ T1429] FAULT_INJECTION: forcing a failure. [ 93.675480][ T1429] name failslab, interval 1, probability 0, space 0, times 0 [ 93.708513][ T1429] CPU: 1 UID: 0 PID: 1429 Comm: syz.1.327 Not tainted syzkaller #0 4acfbc369189e5cacd88ca5a92b3a107a9d116ed [ 93.708551][ T1429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.708563][ T1429] Call Trace: [ 93.708569][ T1429] [ 93.708577][ T1429] __dump_stack+0x21/0x30 [ 93.708611][ T1429] dump_stack_lvl+0x140/0x1c0 [ 93.708640][ T1429] ? __cfi_dump_stack_lvl+0x10/0x10 [ 93.708668][ T1429] ? kasan_save_track+0x4f/0x80 [ 93.708697][ T1429] ? kasan_save_alloc_info+0x3a/0x50 [ 93.708720][ T1429] dump_stack+0x19/0x20 [ 93.708747][ T1429] should_fail_ex+0x3c2/0x510 [ 93.708767][ T1429] should_failslab+0xac/0x100 [ 93.708786][ T1429] kmem_cache_alloc_noprof+0x42/0x410 [ 93.708811][ T1429] ? mas_wr_store_type+0x13f3/0x1b40 [ 93.708834][ T1429] ? mas_alloc_nodes+0x254/0x9d0 [ 93.708858][ T1429] mas_alloc_nodes+0x254/0x9d0 [ 93.708882][ T1429] mas_preallocate+0x79b/0xc90 [ 93.708905][ T1429] ? __cfi_mas_preallocate+0x10/0x10 [ 93.708928][ T1429] ? __asan_memset+0x39/0x50 [ 93.708973][ T1429] ? vm_area_alloc+0x5f/0x190 [ 93.708998][ T1429] mmap_region+0x1409/0x1d10 [ 93.709026][ T1429] ? __cfi_mmap_region+0x10/0x10 [ 93.709054][ T1429] ? avc_has_perm_noaudit+0x289/0x360 [ 93.709075][ T1429] ? avc_has_perm+0x155/0x240 [ 93.709094][ T1429] ? __kasan_check_read+0x15/0x20 [ 93.709120][ T1429] ? __get_unmapped_area+0x406/0x470 [ 93.709144][ T1429] ? futex_wait+0x2b8/0x7c0 [ 93.709166][ T1429] do_mmap+0xa47/0x1370 [ 93.709190][ T1429] ? __cfi_selinux_mmap_file+0x10/0x10 [ 93.709215][ T1429] ? __cfi_do_mmap+0x10/0x10 [ 93.709238][ T1429] ? __kasan_check_write+0x18/0x20 [ 93.709262][ T1429] ? down_write_killable+0xee/0x2d0 [ 93.709286][ T1429] ? __cfi_down_write_killable+0x10/0x10 [ 93.709310][ T1429] ? do_futex+0x32a/0x510 [ 93.709330][ T1429] vm_mmap_pgoff+0x367/0x4b0 [ 93.709355][ T1429] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 93.709381][ T1429] ? xfd_validate_state+0x68/0x140 [ 93.709409][ T1429] ksys_mmap_pgoff+0xfa/0x1e0 [ 93.709432][ T1429] ? __kasan_check_write+0x18/0x20 [ 93.709456][ T1429] __x64_sys_mmap+0x121/0x140 [ 93.709476][ T1429] x64_sys_call+0x13bf/0x2ee0 [ 93.709495][ T1429] do_syscall_64+0x57/0xf0 [ 93.709513][ T1429] ? clear_bhb_loop+0x50/0xa0 [ 93.709536][ T1429] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 93.709558][ T1429] RIP: 0033:0x7f6df679e559 [ 93.709576][ T1429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.709592][ T1429] RSP: 002b:00007f6df7587028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 93.709614][ T1429] RAX: ffffffffffffffda RBX: 00007f6df6a25fa0 RCX: 00007f6df679e559 [ 93.709629][ T1429] RDX: 0000000002000007 RSI: 0000000000c00000 RDI: 0000000000000000 [ 93.709641][ T1429] RBP: 00007f6df68358b0 R08: ffffffffffffffff R09: 0000000000000000 [ 93.709655][ T1429] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 93.709668][ T1429] R13: 00007f6df6a26038 R14: 00007f6df6a25fa0 R15: 00007ffc0e2608f8 [ 93.709686][ T1429] [ 94.025181][ T1433] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 94.268465][ T45] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 94.425382][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 94.433606][ T45] usb 2-1: not running at top speed; connect to a high speed hub [ 94.442514][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.458450][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 94.468992][ T45] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 94.483457][ T45] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 94.492810][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 94.501005][ T45] usb 2-1: Product: syz [ 94.505385][ T45] usb 2-1: Manufacturer: syz [ 94.527076][ T45] usb 2-1: Found UVC 1.00 device syz (8086:0ad2) [ 94.608416][ T311] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 94.739094][ T45] usb 2-1: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 94.758384][ T45] usb 2-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 94.768411][ T311] usb 5-1: Using ep0 maxpacket: 16 [ 94.774639][ T311] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.781594][ T45] usb 2-1: Failed to query (GET_INFO) UVC control 7 on unit 1: -71 (exp. 1). [ 94.798402][ T311] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.806606][ T45] usb 2-1: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 94.808671][ T311] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 94.825156][ T45] usb 2-1: Failed to query (GET_INFO) UVC control 10 on unit 1: -71 (exp. 1). [ 94.825518][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.844475][ T45] usb 2-1: Failed to query (GET_INFO) UVC control 11 on unit 1: -71 (exp. 1). [ 94.845819][ T311] usb 5-1: Product: syz [ 94.860707][ T45] usb 2-1: Failed to query (GET_INFO) UVC control 13 on unit 1: -71 (exp. 1). [ 94.862260][ T311] usb 5-1: Manufacturer: syz [ 94.875023][ T311] usb 5-1: SerialNumber: syz [ 94.898413][ T45] usb 2-1: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1). [ 94.907576][ T45] usb 2-1: Failed to query (GET_INFO) UVC control 15 on unit 1: -71 (exp. 1). [ 94.917300][ T45] usb 2-1: Failed to query (GET_INFO) UVC control 8 on unit 1: -71 (exp. 1). [ 94.926578][ T45] usb 2-1: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 94.943151][ T45] usb 2-1: Failed to query (GET_INFO) UVC control 20 on unit 1: -71 (exp. 1). [ 94.956752][ T45] usb 2-1: No streaming interface found for terminal 2. [ 94.972519][ T45] usb 2-1: USB disconnect, device number 20 [ 95.091288][ T1445] FAULT_INJECTION: forcing a failure. [ 95.091288][ T1445] name failslab, interval 1, probability 0, space 0, times 0 [ 95.104043][ T1445] CPU: 0 UID: 0 PID: 1445 Comm: syz.4.332 Not tainted syzkaller #0 4acfbc369189e5cacd88ca5a92b3a107a9d116ed [ 95.104079][ T1445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.104097][ T1445] Call Trace: [ 95.104104][ T1445] [ 95.104113][ T1445] __dump_stack+0x21/0x30 [ 95.104149][ T1445] dump_stack_lvl+0x140/0x1c0 [ 95.104177][ T1445] ? __cfi_dump_stack_lvl+0x10/0x10 [ 95.104205][ T1445] ? futex_wake+0x627/0x950 [ 95.104230][ T1445] dump_stack+0x19/0x20 [ 95.104256][ T1445] should_fail_ex+0x3c2/0x510 [ 95.104276][ T1445] should_failslab+0xac/0x100 [ 95.104296][ T1445] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 95.104321][ T1445] ? alloc_inode+0xa9/0x270 [ 95.104341][ T1445] alloc_inode+0xa9/0x270 [ 95.104360][ T1445] new_inode_pseudo+0x19/0x40 [ 95.104388][ T1445] create_pipe_files+0x53/0x6c0 [ 95.104416][ T1445] __do_pipe_flags+0x50/0x2f0 [ 95.104441][ T1445] do_pipe2+0xab/0x190 [ 95.104466][ T1445] ? xfd_validate_state+0x68/0x140 [ 95.104493][ T1445] ? pipe_fcntl+0x520/0x520 [ 95.104520][ T1445] __x64_sys_pipe+0x3e/0x50 [ 95.104544][ T1445] x64_sys_call+0xd3/0x2ee0 [ 95.104563][ T1445] do_syscall_64+0x57/0xf0 [ 95.104581][ T1445] ? clear_bhb_loop+0x50/0xa0 [ 95.104604][ T1445] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 95.104626][ T1445] RIP: 0033:0x7f979039e559 [ 95.104644][ T1445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.104660][ T1445] RSP: 002b:00007f9791320028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 95.104682][ T1445] RAX: ffffffffffffffda RBX: 00007f9790625fa0 RCX: 00007f979039e559 [ 95.104696][ T1445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.104708][ T1445] RBP: 00007f97904358b0 R08: 0000000000000000 R09: 0000000000000000 [ 95.104721][ T1445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.104734][ T1445] R13: 00007f9790626038 R14: 00007f9790625fa0 R15: 00007ffcb0ab98b8 [ 95.104750][ T1445] [ 95.345834][ T36] audit: type=1400 audit(1792045315.629:30839): avc: denied { ioctl } for pid=1464 comm="syz.1.338" path="socket:[14259]" dev="sockfs" ino=14259 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.372213][ T312] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 95.382582][ T1465] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 95.394490][ T311] usb 5-1: 0:2 : does not exist [ 95.396239][ T1465] SELinux: failed to load policy [ 95.402637][ T311] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 95.408120][ T36] audit: type=1400 audit(1792045315.689:30840): avc: denied { bind } for pid=1464 comm="syz.1.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.447826][ T36] audit: type=1400 audit(1792045315.689:30841): avc: denied { name_bind } for pid=1464 comm="syz.1.338" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 95.468992][ T36] audit: type=1400 audit(1792045315.689:30842): avc: denied { node_bind } for pid=1464 comm="syz.1.338" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 95.492685][ T36] audit: type=1400 audit(1792045315.689:30843): avc: denied { read } for pid=1464 comm="syz.1.338" path="socket:[14268]" dev="sockfs" ino=14268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.520738][ T311] usb 5-1: USB disconnect, device number 11 [ 95.530789][ T312] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 95.539935][ T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.547948][ T312] usb 3-1: Product: syz [ 95.552473][ T312] usb 3-1: Manufacturer: syz [ 95.557087][ T312] usb 3-1: SerialNumber: syz [ 95.569388][ T312] ums-karma 3-1:1.0: USB Mass Storage device detected [ 95.588858][ T312] ums-karma 3-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 95.588858][ T312] Please send a copy of this message to and [ 95.678437][ T45] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 95.829570][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.840618][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.850718][ T45] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 95.861453][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.870394][ T45] usb 2-1: config 0 descriptor?? [ 95.945250][ T1473] ./dev/sda1: Can't lookup blockdev [ 95.968653][ T36] audit: type=1400 audit(1792045316.259:30844): avc: denied { nlmsg_read } for pid=1474 comm="syz.4.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 96.242929][ T312] ums-karma 3-1:1.0: probe with driver ums-karma failed with error -5 [ 96.264289][ T312] usb 3-1: USB disconnect, device number 22 [ 96.284112][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 96.292229][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 96.302989][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 96.310800][ T36] audit: type=1400 audit(1792045316.589:30845): avc: denied { watch watch_reads } for pid=1488 comm="syz.4.345" path="/66/file0" dev="tmpfs" ino=389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 96.340677][ T45] usb 2-1: USB disconnect, device number 21 [ 96.471482][ T36] audit: type=1400 audit(1792045316.759:30846): avc: denied { write } for pid=1496 comm="syz.4.348" path="socket:[16391]" dev="sockfs" ino=16391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.529648][ T1502] ./dev/sda1: Can't lookup blockdev [ 96.780086][ T36] audit: type=1400 audit(1792045317.069:30847): avc: denied { setcheckreqprot } for pid=1506 comm="syz.2.352" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 96.830248][ T36] audit: type=1400 audit(1792045317.119:30848): avc: denied { bind } for pid=1511 comm="syz.1.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 97.873733][ T1525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.357'. [ 97.929619][ T1529] ./dev/sda1: Can't lookup blockdev [ 97.968325][ T1531] device-mapper: ioctl: Invalid ioctl structure: name snap0, dev fc01 [ 98.365409][ T310] bridge_slave_1: left allmulticast mode [ 98.371144][ T310] bridge_slave_1: left promiscuous mode [ 98.376796][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.384888][ T310] bridge_slave_0: left allmulticast mode [ 98.390646][ T310] bridge_slave_0: left promiscuous mode [ 98.396240][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.441595][ T1542] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.448713][ T1542] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.455773][ T1542] bridge_slave_0: entered allmulticast mode [ 98.462216][ T1542] bridge_slave_0: entered promiscuous mode [ 98.468667][ T1542] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.475712][ T1542] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.482845][ T1542] bridge_slave_1: entered allmulticast mode [ 98.489044][ T1542] bridge_slave_1: entered promiscuous mode [ 98.512994][ T310] veth1_macvtap: left promiscuous mode [ 98.518579][ T310] veth0_vlan: left promiscuous mode [ 98.568421][ T45] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 98.568664][ T1542] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.583047][ T1542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.590409][ T1542] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.597429][ T1542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.620705][ T778] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.628074][ T778] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.637757][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.644816][ T1050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.653774][ T778] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.660844][ T778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.692585][ T1542] veth0_vlan: entered promiscuous mode [ 98.705907][ T1542] veth1_macvtap: entered promiscuous mode [ 98.720140][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.731187][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.741522][ T45] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 98.750769][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.760480][ T45] usb 5-1: config 0 descriptor?? [ 98.802745][ T1560] ./dev/sda1: Can't lookup blockdev [ 99.078552][ T66] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 99.170664][ T45] usbhid 5-1:0.0: can't add hid device: -71 [ 99.176677][ T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 99.185315][ T45] usb 5-1: USB disconnect, device number 12 [ 99.229572][ T66] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 99.239330][ T66] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 99.250611][ T66] usb 6-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 99.259673][ T66] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.267666][ T66] usb 6-1: Product: syz [ 99.271953][ T66] usb 6-1: Manufacturer: syz [ 99.276551][ T66] usb 6-1: SerialNumber: syz [ 99.283869][ T66] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 99.291433][ T66] ums-sddr09 6-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 99.291433][ T66] Please send a copy of this message to and [ 99.712965][ T1583] ./dev/sda1: Can't lookup blockdev [ 99.909387][ T66] ums-sddr09 6-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 99.921691][ T66] usb 6-1: USB disconnect, device number 2 [ 99.928406][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 99.969168][ T1594] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 99.981405][ T1594] binder: Bad value for 'max' [ 100.088464][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 100.099096][ T10] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.128427][ T10] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.138309][ T10] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 100.158403][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 100.165085][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 100.188661][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.200660][ T10] usb 5-1: config 0 descriptor?? [ 100.258405][ T311] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 100.425475][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.436504][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.446410][ T311] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 100.456879][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.468654][ T311] usb 3-1: config 0 descriptor?? [ 100.611430][ T10] hid (null): unknown global tag 0x72 [ 100.616850][ T10] hid (null): unknown global tag 0xc [ 100.768895][ T66] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 100.808768][ T10] usb 5-1: USB disconnect, device number 13 [ 100.878913][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 100.886360][ T311] usbhid 3-1:0.0: can't add hid device: -71 [ 100.892328][ T311] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 100.898425][ T31] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 100.902018][ T311] usb 3-1: USB disconnect, device number 23 [ 100.920576][ T66] usb 6-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 100.929700][ T66] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.937686][ T66] usb 6-1: Product: syz [ 100.941936][ T66] usb 6-1: Manufacturer: syz [ 100.946521][ T66] usb 6-1: SerialNumber: syz [ 100.952774][ T66] ums-karma 6-1:1.0: USB Mass Storage device detected [ 100.960816][ T66] ums-karma 6-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 100.960816][ T66] Please send a copy of this message to and [ 101.059433][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.069612][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.079369][ T31] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 101.089151][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.104026][ T31] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 101.113113][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.121134][ T31] usb 2-1: Product: syz [ 101.125301][ T31] usb 2-1: Manufacturer: syz [ 101.129900][ T31] usb 2-1: SerialNumber: syz [ 101.136609][ T31] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 101.147898][ T31] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 101.158970][ T31] usbserial_generic 2-1:1.0: generic converter detected [ 101.166820][ T31] usb 2-1: generic converter now attached to ttyUSB0 [ 101.342037][ T31] usb 2-1: USB disconnect, device number 22 [ 101.349189][ T31] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 101.358092][ T31] usbserial_generic 2-1:1.0: device disconnected [ 101.468190][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 101.468206][ T36] audit: type=1400 audit(1792045321.749:30861): avc: denied { write } for pid=1628 comm="syz.2.393" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 101.478742][ T1629] [ 101.497178][ T1630] [ 101.569784][ T36] audit: type=1400 audit(1792045321.859:30862): avc: denied { read write } for pid=1631 comm="syz.2.394" name="file0" dev="tmpfs" ino=581 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 101.595967][ T36] audit: type=1400 audit(1792045321.859:30863): avc: denied { open } for pid=1631 comm="syz.2.394" path="/103/file0" dev="tmpfs" ino=581 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 101.608925][ T66] ums-karma 6-1:1.0: probe with driver ums-karma failed with error -5 [ 101.629421][ T66] usb 6-1: USB disconnect, device number 3 [ 101.927144][ T1642] ./dev/sda1: Can't lookup blockdev [ 101.932454][ T311] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 102.088410][ T311] usb 3-1: Using ep0 maxpacket: 16 [ 102.093598][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 102.102264][ T311] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.112403][ T311] usb 3-1: config 0 has no interfaces? [ 102.119222][ T311] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 102.128262][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.136282][ T311] usb 3-1: Product: syz [ 102.140461][ T311] usb 3-1: Manufacturer: syz [ 102.145038][ T311] usb 3-1: SerialNumber: syz [ 102.150281][ T311] usb 3-1: config 0 descriptor?? [ 102.178441][ T31] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 102.258421][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 102.264659][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 102.275529][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 102.286718][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 102.299756][ T10] usb 5-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 102.308857][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.317373][ T10] usb 5-1: config 0 descriptor?? [ 102.328445][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 102.334657][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.345635][ T31] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 0.04 [ 102.354715][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 102.358124][ T1638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.362726][ T31] usb 2-1: SerialNumber: syz [ 102.372252][ T1638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.377612][ T31] usb 2-1: config 0 descriptor?? [ 102.389222][ T31] hub 2-1:0.0: bad descriptor, ignoring hub [ 102.395164][ T31] hub 2-1:0.0: probe with driver hub failed with error -5 [ 102.402645][ T31] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 102.410464][ T31] usb 2-1: Detected SIO [ 102.415132][ T31] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 102.698568][ T31] usb 2-1: USB disconnect, device number 23 [ 102.705156][ T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 102.715560][ T31] ftdi_sio 2-1:0.0: device disconnected [ 102.726476][ T10] elecom 0003:056E:00FC.0011: hidraw0: USB HID v21.0a Device [HID 056e:00fc] on usb-dummy_hcd.4-1/input0 [ 102.926099][ T36] audit: type=1400 audit(1792045323.209:30864): avc: denied { mounton } for pid=1639 comm="syz.4.396" path="/80/trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 102.941427][ T1656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.957236][ T1656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.130875][ T1664] rust_binder: 1659:1664 inc_ref_done called when no active inc_refs [ 103.189859][ T1660] rust_binder: Error in use_page_slow: ESRCH [ 103.195960][ T1660] rust_binder: use_range failure ESRCH [ 103.201557][ T1660] rust_binder: 1659:1660 transaction call to 1659:0 failed ESRCH, code 0 size 0-0 line process.rs:1122 [ 103.478260][ T36] audit: type=1400 audit(1792045323.759:30865): avc: denied { accept } for pid=1673 comm="syz.5.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.501584][ T36] audit: type=1400 audit(1792045323.789:30866): avc: denied { append } for pid=1675 comm="syz.5.404" name="uprobe_events" dev="tracefs" ino=1043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 103.525937][ T36] audit: type=1400 audit(1792045323.809:30867): avc: denied { setopt } for pid=1675 comm="syz.5.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 103.547573][ T36] audit: type=1400 audit(1792045323.829:30868): avc: denied { ioctl } for pid=1675 comm="syz.5.404" path="/14/tracing/uprobe_events" dev="tracefs" ino=1043 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 103.573262][ T36] audit: type=1400 audit(1792045323.829:30869): avc: denied { read } for pid=1675 comm="syz.5.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 103.933217][ T31] rust_binder: 1659: undelivered TRANSACTION_ERROR: 29201 [ 104.308464][ T31] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 104.460792][ T31] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 104.469910][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.477904][ T31] usb 2-1: Product: syz [ 104.482072][ T31] usb 2-1: Manufacturer: syz [ 104.486660][ T31] usb 2-1: SerialNumber: syz [ 104.638395][ T10] usb 3-1: USB disconnect, device number 24 [ 104.911286][ T31] rtl8150 2-1:1.0: couldn't reset the device [ 104.917468][ T31] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 104.926838][ T31] usb 2-1: USB disconnect, device number 24 [ 104.930136][ T311] usb 5-1: USB disconnect, device number 14 [ 104.964419][ T1692] ./dev/sda1: Can't lookup blockdev [ 104.978511][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 105.060307][ T36] audit: type=1326 audit(1792045325.349:30870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1695 comm="syz.4.411" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f979039e559 code=0x0 [ 105.138419][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 105.146462][ T10] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 105.156579][ T10] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 16 [ 105.166629][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 105.174957][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.184262][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.192274][ T10] usb 3-1: Product: syz [ 105.196553][ T10] usb 3-1: Manufacturer: 楇൱䇥쪙虉삎躥㬞鳱仸밐ꨜ蝪㣜ᢟ硹밪︔㒈窵啫䓆ᓸ爓뿺U唙꜑Ⱥ꼿중 [ 105.210649][ T10] usb 3-1: SerialNumber: syz [ 105.216835][ T1688] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 105.224065][ T1688] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 105.355045][ T1699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=1699 comm=syz.5.412 [ 105.368020][ T1699] netlink: 16 bytes leftover after parsing attributes in process `syz.5.412'. [ 105.434054][ T1688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.443398][ T1688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.838409][ T311] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 106.000927][ T311] usb 6-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 106.010095][ T311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.018082][ T311] usb 6-1: Product: syz [ 106.022323][ T311] usb 6-1: Manufacturer: syz [ 106.027004][ T311] usb 6-1: SerialNumber: syz [ 106.033206][ T311] ums-karma 6-1:1.0: USB Mass Storage device detected [ 106.040858][ T311] ums-karma 6-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 106.040858][ T311] Please send a copy of this message to and [ 106.128401][ T312] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 106.278441][ T312] usb 2-1: Using ep0 maxpacket: 32 [ 106.284644][ T312] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.294975][ T312] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.306013][ T312] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.315856][ T312] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 106.329124][ T312] usb 2-1: config 0 interface 0 has no altsetting 0 [ 106.335761][ T312] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 106.344870][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.353430][ T312] usb 2-1: config 0 descriptor?? [ 106.668449][ T31] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 106.671069][ T311] ums-karma 6-1:1.0: probe with driver ums-karma failed with error -5 [ 106.685930][ T311] usb 6-1: USB disconnect, device number 4 [ 106.763740][ T312] usbhid 2-1:0.0: can't add hid device: -71 [ 106.771026][ T312] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 106.782297][ T312] usb 2-1: USB disconnect, device number 25 [ 106.820844][ T31] usb 5-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 106.829979][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.838029][ T31] usb 5-1: Product: syz [ 106.842301][ T31] usb 5-1: Manufacturer: syz [ 106.846957][ T31] usb 5-1: SerialNumber: syz [ 106.853436][ T31] ums-karma 5-1:1.0: USB Mass Storage device detected [ 106.861040][ T31] ums-karma 5-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 106.861040][ T31] Please send a copy of this message to and [ 107.150771][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 107.150788][ T36] audit: type=1400 audit(1792045327.439:30873): avc: denied { create } for pid=1738 comm="syz.5.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 107.206015][ T36] audit: type=1400 audit(1792045327.489:30874): avc: denied { write } for pid=1743 comm="syz.5.424" path="socket:[16345]" dev="sockfs" ino=16345 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 107.278866][ T31] ums-karma 5-1:1.0: probe with driver ums-karma failed with error -5 [ 107.289289][ T31] usb 5-1: USB disconnect, device number 15 [ 107.455264][ T1759] futex_wake_op: syz.5.431 tries to shift op by -1; fix this program [ 107.571934][ T36] audit: type=1400 audit(1792045327.859:30875): avc: denied { map } for pid=1764 comm="syz.5.433" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 107.629935][ T1767] loop7: detected capacity change from 0 to 8 [ 107.765050][ T10] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 107.783322][ T10] usb 3-1: USB disconnect, device number 25 [ 107.820705][ T1775] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 107.916708][ T36] audit: type=1400 audit(1792045328.199:30876): avc: denied { watch watch_reads } for pid=1777 comm="syz.1.437" path="/112/file0" dev="tmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.002507][ T1790] kvm: emulating exchange as write [ 108.138411][ T311] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 108.288455][ T311] usb 5-1: Using ep0 maxpacket: 32 [ 108.294776][ T311] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 108.305618][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.316554][ T311] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 108.330065][ T311] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 108.339182][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.347701][ T311] usb 5-1: config 0 descriptor?? [ 108.358435][ T31] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 108.509477][ T31] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 108.519277][ T31] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 108.530501][ T31] usb 6-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 108.539574][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.547563][ T31] usb 6-1: Product: syz [ 108.551781][ T31] usb 6-1: Manufacturer: syz [ 108.556474][ T31] usb 6-1: SerialNumber: syz [ 108.563046][ T31] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 108.578894][ T31] ums-sddr09 6-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 108.578894][ T31] Please send a copy of this message to and [ 108.763768][ T66] logitech-hidpp-device 0003:046D:C082.0012: item fetching failed at offset 0/2 [ 108.773818][ T66] logitech-hidpp-device 0003:046D:C082.0012: hidpp_probe:parse failed [ 108.782214][ T66] logitech-hidpp-device 0003:046D:C082.0012: probe with driver logitech-hidpp-device failed with error -22 [ 108.964085][ T1794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.973253][ T1794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.982271][ T311] usbhid 5-1:0.0: can't add hid device: -71 [ 108.988645][ T1794] netlink: 'syz.5.441': attribute type 27 has an invalid length. [ 108.988644][ T311] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 109.008522][ T311] usb 5-1: USB disconnect, device number 16 [ 109.249522][ T31] ums-sddr09 6-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 109.259259][ T31] usb 6-1: USB disconnect, device number 5 [ 109.285124][ T1802] rust_binder: 1801:1802 got transaction with invalid offset [ 109.292583][ T1802] rust_binder: 1801:1802 transaction call to 1801:0 failed EINVAL, code 0 size 120-3976 line thread.rs:1226 [ 109.304378][ T1803] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.311045][ T1808] drivers/android/binder/page_range.rs:334: 22 callbacks suppressed [ 109.318779][ T1809] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.320362][ T1806] rust_binder: 1801:1806 got transaction with invalid offset [ 109.332966][ T1806] rust_binder: 1801:1806 transaction call to 1801:0 failed EINVAL, code 0 size 120-3976 line thread.rs:1226 [ 109.345713][ T390] rust_binder: 1801: undelivered TRANSACTION_ERROR: 29201 [ 109.358283][ T390] rust_binder: 1801: undelivered TRANSACTION_ERROR: 29201 [ 109.487882][ T36] audit: type=1400 audit(1792045329.769:30877): avc: denied { read write } for pid=1813 comm="syz.4.445" name="cpu_dma_latency" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 109.512507][ T36] audit: type=1400 audit(1792045329.789:30878): avc: denied { open } for pid=1813 comm="syz.4.445" path="/88/dev/cpu_dma_latency" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 109.588460][ T66] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 109.743963][ T66] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 109.753071][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.761086][ T66] usb 2-1: Product: syz [ 109.765267][ T66] usb 2-1: Manufacturer: syz [ 109.769871][ T66] usb 2-1: SerialNumber: syz [ 109.775826][ T66] ums-karma 2-1:1.0: USB Mass Storage device detected [ 109.783415][ T66] ums-karma 2-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 109.783415][ T66] Please send a copy of this message to and [ 109.978405][ T390] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 110.128469][ T390] usb 6-1: Using ep0 maxpacket: 32 [ 110.136057][ T390] usb 6-1: config 6 has an invalid descriptor of length 215, skipping remainder of the config [ 110.146370][ T390] usb 6-1: config 6 has 0 interfaces, different from the descriptor's value: 2 [ 110.156753][ T390] usb 6-1: New USB device found, idVendor=05ac, idProduct=1402, bcdDevice=e9.d2 [ 110.165863][ T390] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.173884][ T390] usb 6-1: Product: syz [ 110.178069][ T390] usb 6-1: Manufacturer: syz [ 110.183164][ T390] usb 6-1: SerialNumber: syz [ 110.219685][ T66] ums-karma 2-1:1.0: probe with driver ums-karma failed with error -5 [ 110.229293][ T66] usb 2-1: USB disconnect, device number 26 [ 110.267035][ T1836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.450'. [ 110.276761][ T1836] netlink: 52 bytes leftover after parsing attributes in process `syz.4.450'. [ 110.391731][ T390] usb 6-1: USB disconnect, device number 6 [ 110.816606][ T1848] netlink: 64 bytes leftover after parsing attributes in process `syz.1.454'. [ 110.852681][ T1855] kvm: kvm [1854]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 110.901584][ T36] audit: type=1400 audit(1792045331.189:30879): avc: denied { create } for pid=1857 comm="syz.5.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 110.938472][ T1862] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 111.168428][ T66] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 111.238425][ T31] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 111.320844][ T66] usb 6-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 111.329947][ T66] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.337992][ T66] usb 6-1: Product: syz [ 111.342195][ T66] usb 6-1: Manufacturer: syz [ 111.346952][ T66] usb 6-1: SerialNumber: syz [ 111.349837][ T390] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 111.356059][ T66] ums-karma 6-1:1.0: USB Mass Storage device detected [ 111.369935][ T66] ums-karma 6-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 111.369935][ T66] Please send a copy of this message to and [ 111.518401][ T390] usb 5-1: Using ep0 maxpacket: 16 [ 111.524680][ T390] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.534999][ T390] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 111.544084][ T390] usb 5-1: New USB device found, idVendor=065e, idProduct=00dc, bcdDevice= 0.00 [ 111.553146][ T390] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.561758][ T390] usb 5-1: config 0 descriptor?? [ 111.769250][ T313] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 111.809530][ T66] ums-karma 6-1:1.0: probe with driver ums-karma failed with error -5 [ 111.821894][ T66] usb 6-1: USB disconnect, device number 7 [ 111.948407][ T313] usb 3-1: Using ep0 maxpacket: 32 [ 111.954906][ T313] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 111.963140][ T313] usb 3-1: config 0 has no interface number 0 [ 111.971165][ T313] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 111.980491][ T313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.988586][ T313] usb 3-1: Product: syz [ 111.992927][ T313] usb 3-1: Manufacturer: syz [ 111.997583][ T313] usb 3-1: SerialNumber: syz [ 112.003333][ T313] usb 3-1: config 0 descriptor?? [ 112.011772][ T313] smsc95xx v2.0.0 [ 112.412523][ T313] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 112.436576][ T313] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 112.738448][ T31] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 112.760634][ T1908] netlink: 'syz.1.475': attribute type 16 has an invalid length. [ 112.768992][ T1908] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.475'. [ 112.780246][ T1908] loop0: detected capacity change from 0 to 3904 [ 112.810715][ T1908] loop0: [ 112.827191][ T1910] FAULT_INJECTION: forcing a failure. [ 112.827191][ T1910] name failslab, interval 1, probability 0, space 0, times 0 [ 112.839911][ T1910] CPU: 1 UID: 0 PID: 1910 Comm: syz.1.476 Not tainted syzkaller #0 4acfbc369189e5cacd88ca5a92b3a107a9d116ed [ 112.839943][ T1910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.839956][ T1910] Call Trace: [ 112.839962][ T1910] [ 112.839973][ T1910] __dump_stack+0x21/0x30 [ 112.840008][ T1910] dump_stack_lvl+0x140/0x1c0 [ 112.840034][ T1910] ? __cfi_dump_stack_lvl+0x10/0x10 [ 112.840063][ T1910] dump_stack+0x19/0x20 [ 112.840087][ T1910] should_fail_ex+0x3c2/0x510 [ 112.840108][ T1910] should_failslab+0xac/0x100 [ 112.840127][ T1910] kmem_cache_alloc_noprof+0x42/0x410 [ 112.840181][ T1910] ? alloc_empty_file+0xbf/0x270 [ 112.840202][ T1910] ? _raw_spin_unlock+0x45/0x60 [ 112.840222][ T1910] alloc_empty_file+0xbf/0x270 [ 112.840241][ T1910] ? _raw_spin_unlock+0x45/0x60 [ 112.840258][ T1910] alloc_file_pseudo+0x142/0x1f0 [ 112.840278][ T1910] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 112.840307][ T1910] sock_alloc_file+0xbe/0x2b0 [ 112.840335][ T1910] __sys_socket+0x14c/0x1c0 [ 112.840356][ T1910] __x64_sys_socket+0x7e/0x90 [ 112.840374][ T1910] x64_sys_call+0x2608/0x2ee0 [ 112.840393][ T1910] do_syscall_64+0x57/0xf0 [ 112.840410][ T1910] ? clear_bhb_loop+0x50/0xa0 [ 112.840434][ T1910] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 112.840456][ T1910] RIP: 0033:0x7f6df679e559 [ 112.840472][ T1910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.840490][ T1910] RSP: 002b:00007f6df7587028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 112.840512][ T1910] RAX: ffffffffffffffda RBX: 00007f6df6a25fa0 RCX: 00007f6df679e559 [ 112.840528][ T1910] RDX: 0000000000000001 RSI: 0000000000000002 RDI: 0000000000000002 [ 112.840540][ T1910] RBP: 00007f6df68358b0 R08: 0000000000000000 R09: 0000000000000000 [ 112.840553][ T1910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.840566][ T1910] R13: 00007f6df6a26038 R14: 00007f6df6a25fa0 R15: 00007ffc0e2608f8 [ 112.840582][ T1910] [ 113.047163][ T31] usb 6-1: device descriptor read/64, error -71 [ 113.049241][ T1882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.063512][ T1882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.298415][ T31] usb 6-1: device descriptor read/64, error -71 [ 113.538401][ T31] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 113.668398][ T31] usb 6-1: device descriptor read/64, error -71 [ 113.908403][ T31] usb 6-1: device descriptor read/64, error -71 [ 114.028487][ T31] usb usb6-port1: attempt power cycle [ 114.159838][ T312] usb 5-1: USB disconnect, device number 17 [ 114.358413][ T347] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 114.369283][ T31] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 114.389336][ T31] usb 6-1: device descriptor read/8, error -71 [ 114.443119][ T313] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 114.455791][ T313] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 114.467564][ T313] usb 3-1: USB disconnect, device number 26 [ 114.488424][ T347] usb 2-1: device descriptor read/64, error -71 [ 114.498424][ T312] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 114.519398][ T31] usb 6-1: device descriptor read/8, error -71 [ 114.626126][ T36] audit: type=1400 audit(1792045334.909:30880): avc: denied { read write } for pid=1931 comm="syz.2.484" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 114.650427][ T36] audit: type=1400 audit(1792045334.909:30881): avc: denied { open } for pid=1931 comm="syz.2.484" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 114.674535][ T36] audit: type=1400 audit(1792045334.909:30882): avc: denied { ioctl } for pid=1931 comm="syz.2.484" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 114.700057][ T312] usb 5-1: Using ep0 maxpacket: 8 [ 114.700855][ T36] audit: type=1400 audit(1792045334.939:30883): avc: denied { getopt } for pid=1931 comm="syz.2.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 114.706210][ T312] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 114.732916][ T312] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 114.738396][ T347] usb 2-1: device descriptor read/64, error -71 [ 114.741345][ T312] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 114.756613][ T312] usb 5-1: config 250 has no interface number 0 [ 114.762927][ T312] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 114.774503][ T312] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 114.784945][ T312] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 114.788393][ T31] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 114.795206][ T312] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 114.816212][ T312] usb 5-1: config 250 interface 228 has no altsetting 0 [ 114.824200][ T312] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 114.829426][ T31] usb 6-1: device descriptor read/8, error -71 [ 114.833267][ T312] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 114.847719][ T312] usb 5-1: Product: syz [ 114.851889][ T312] usb 5-1: SerialNumber: syz [ 114.858253][ T312] hub 5-1:250.228: bad descriptor, ignoring hub [ 114.864980][ T312] hub 5-1:250.228: probe with driver hub failed with error -5 [ 114.969404][ T31] usb 6-1: device descriptor read/8, error -71 [ 114.978519][ T347] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 115.065084][ T36] audit: type=1400 audit(1792045335.349:30884): avc: denied { mount } for pid=1924 comm="syz.4.482" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 115.078489][ T31] usb usb6-port1: unable to enumerate USB device [ 115.089793][ T36] audit: type=1400 audit(1792045335.359:30885): avc: denied { mounton } for pid=1924 comm="syz.4.482" path="/95/mnt/proc" dev="sda1" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.108605][ T347] usb 2-1: device descriptor read/64, error -71 [ 115.178588][ T313] usb 5-1: USB disconnect, device number 18 [ 115.358448][ T347] usb 2-1: device descriptor read/64, error -71 [ 115.469512][ T347] usb usb2-port1: attempt power cycle [ 115.501943][ T36] audit: type=1400 audit(1792045335.789:30886): avc: denied { wake_alarm } for pid=1940 comm="syz.5.487" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 115.523284][ T36] audit: type=1400 audit(1792045335.789:30887): avc: denied { mounton } for pid=1940 comm="syz.5.487" path="/syzcgroup/cpu/syz5/cpuset.cpus" dev="cgroup" ino=581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 115.564525][ T1952] tipc: Enabling of bearer rejected, failed to enable media [ 115.573001][ T1952] tipc: Enabling of bearer rejected, failed to enable media [ 115.575126][ T1925] FAULT_INJECTION: forcing a failure. [ 115.575126][ T1925] name failslab, interval 1, probability 0, space 0, times 0 [ 115.581369][ T1952] tipc: Enabling of bearer rejected, failed to enable media [ 115.593967][ T1925] CPU: 1 UID: 0 PID: 1925 Comm: syz.4.482 Not tainted syzkaller #0 4acfbc369189e5cacd88ca5a92b3a107a9d116ed [ 115.593994][ T1925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.594005][ T1925] Call Trace: [ 115.594011][ T1925] [ 115.594018][ T1925] __dump_stack+0x21/0x30 [ 115.594049][ T1925] dump_stack_lvl+0x140/0x1c0 [ 115.594074][ T1925] ? __cfi_dump_stack_lvl+0x10/0x10 [ 115.594100][ T1925] dump_stack+0x19/0x20 [ 115.594124][ T1925] should_fail_ex+0x3c2/0x510 [ 115.594142][ T1925] should_failslab+0xac/0x100 [ 115.594159][ T1925] kmem_cache_alloc_noprof+0x42/0x410 [ 115.594182][ T1925] ? __kasan_check_write+0x18/0x20 [ 115.594205][ T1925] ? taskstats_exit+0x161/0xb50 [ 115.594224][ T1925] ? acct_update_integrals+0x2e5/0x330 [ 115.594244][ T1925] taskstats_exit+0x161/0xb50 [ 115.594262][ T1925] ? _raw_spin_unlock_irq+0x45/0x70 [ 115.594281][ T1925] do_exit+0x7f7/0x2850 [ 115.594304][ T1925] ? __kasan_check_read+0x15/0x20 [ 115.594326][ T1925] ? futex_wake+0x627/0x950 [ 115.594347][ T1925] ? __cfi_do_exit+0x10/0x10 [ 115.594369][ T1925] ? futex_wait+0x2b8/0x7c0 [ 115.594390][ T1925] ? __cfi_futex_wait+0x10/0x10 [ 115.594410][ T1925] ? __kasan_check_write+0x18/0x20 [ 115.594432][ T1925] ? _raw_spin_lock_irq+0x93/0x120 [ 115.594448][ T1925] do_group_exit+0x21f/0x2f0 [ 115.594471][ T1925] ? __kasan_check_write+0x18/0x20 [ 115.594493][ T1925] ? recalc_sigpending+0x16c/0x1d0 [ 115.594513][ T1925] get_signal+0x134c/0x1490 [ 115.594540][ T1925] arch_do_signal_or_restart+0xbc/0x700 [ 115.594559][ T1925] ? fput+0x1a4/0x230 [ 115.594577][ T1925] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 115.594598][ T1925] syscall_exit_to_user_mode+0x57/0xb0 [ 115.594621][ T1925] do_syscall_64+0x63/0xf0 [ 115.594636][ T1925] ? clear_bhb_loop+0x50/0xa0 [ 115.594657][ T1925] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 115.594678][ T1925] RIP: 0033:0x7f979039e559 [ 115.594693][ T1925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.594708][ T1925] RSP: 002b:00007f97913200e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 115.594727][ T1925] RAX: fffffffffffffe00 RBX: 00007f9790625fa8 RCX: 00007f979039e559 [ 115.594748][ T1925] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9790625fa8 [ 115.594760][ T1925] RBP: 00007f9790625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 115.594772][ T1925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.594783][ T1925] R13: 00007f9790626038 R14: 00007ffcb0ab97d0 R15: 00007ffcb0ab98b8 [ 115.594798][ T1925] [ 115.617260][ T36] audit: type=1400 audit(1792045335.889:30888): avc: denied { unmount } for pid=895 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 115.624029][ T1952] tipc: Enabling of bearer rejected, failed to enable media [ 115.828404][ T347] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 115.829938][ T1952] tipc: Enabling of bearer rejected, failed to enable media [ 115.859345][ T347] usb 2-1: device descriptor read/8, error -71 [ 115.877680][ T1952] tipc: Enabling of bearer rejected, failed to enable media [ 115.916467][ T1952] tipc: Enabling of bearer rejected, failed to enable media [ 115.916853][ T36] audit: type=1400 audit(1792045336.209:30889): avc: denied { rmdir } for pid=895 comm="syz-executor" name="proc" dev="sda1" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.925053][ T1952] tipc: Enabling of bearer rejected, failed to enable media [ 115.957293][ T1952] tipc: Enabling of bearer rejected, failed to enable media [ 115.965633][ T1952] tipc: Enabling of bearer rejected, failed to enable media [ 115.973977][ T1952] tipc: Enabling of bearer rejected, failed to enable media [ 115.982301][ T1952] tipc: Enabling of bearer rejected, failed to enable media [ 115.990791][ T1952] tipc: Enabling of bearer rejected, failed to enable media [ 115.999132][ T1952] tipc: Enabling of bearer rejected, failed to enable media [ 116.007430][ T1952] tipc: Enabling of bearer rejected, failed to enable media [ 116.015776][ T1952] tipc: Enabling of bearer rejected, failed to enable media [ 116.019600][ T347] usb 2-1: device descriptor read/8, error -71 [ 116.024137][ T1952] tipc: Enabling of bearer rejected, failed to enable media [ 116.038678][ T1952] tipc: Enabling of bearer rejected, failed to enable media [ 116.047044][ T1952] tipc: Enabling of bearer rejected, failed to enable media [ 116.055645][ T1952] tipc: Enabling of bearer rejected, failed to enable media [ 116.064241][ T1952] tipc: Enabling of bearer rejected, failed to enable media [ 116.072807][ T1952] tipc: Enabling of bearer rejected, failed to enable media [ 116.081162][ T1952] tipc: Enabling of bearer rejected, failed to enable media [ 116.089499][ T1952] tipc: Enabling of bearer rejected, failed to enable media [ 116.097787][ T1952] tipc: Enabling of bearer rejected, failed to enable media [ 116.106137][ T1952] tipc: Enabling of bearer rejected, failed to enable media [ 116.114469][ T1952] tipc: Enabling of bearer rejected, failed to enable media [ 116.122806][ T1952] tipc: Enabling of bearer rejected, failed to enable media [ 116.131153][ T1952] tipc: Enabling of bearer rejected, failed to enable media [ 116.139550][ T1952] tipc: Enabling of bearer rejected, failed to enable media [ 116.147852][ T1952] tipc: Enabling of bearer rejected, failed to enable media [ 116.156295][ T1952] tipc: Enabling of bearer rejected, failed to enable media [ 116.164648][ T1952] tipc: Enabling of bearer rejected, failed to enable media [ 116.189469][ T1957] FAULT_INJECTION: forcing a failure. [ 116.189469][ T1957] name failslab, interval 1, probability 0, space 0, times 0 [ 116.202216][ T1957] CPU: 0 UID: 0 PID: 1957 Comm: syz.5.493 Not tainted syzkaller #0 4acfbc369189e5cacd88ca5a92b3a107a9d116ed [ 116.202259][ T1957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.202271][ T1957] Call Trace: [ 116.202278][ T1957] [ 116.202286][ T1957] __dump_stack+0x21/0x30 [ 116.202322][ T1957] dump_stack_lvl+0x140/0x1c0 [ 116.202351][ T1957] ? __cfi_dump_stack_lvl+0x10/0x10 [ 116.202382][ T1957] dump_stack+0x19/0x20 [ 116.202411][ T1957] should_fail_ex+0x3c2/0x510 [ 116.202432][ T1957] should_failslab+0xac/0x100 [ 116.202451][ T1957] __kmalloc_cache_noprof+0x41/0x470 [ 116.202476][ T1957] ? __genradix_ptr_alloc+0x190/0x620 [ 116.202497][ T1957] __genradix_ptr_alloc+0x190/0x620 [ 116.202516][ T1957] proc_map_files_readdir+0x50a/0x9d0 [ 116.202538][ T1957] ? __cfi_proc_map_files_readdir+0x10/0x10 [ 116.202560][ T1957] ? rwsem_read_trylock+0x275/0x5a0 [ 116.202581][ T1957] ? __cfi_selinux_file_permission+0x10/0x10 [ 116.202604][ T1957] ? down_read_killable+0x7f/0x100 [ 116.202625][ T1957] ? __cfi_down_read_killable+0x10/0x10 [ 116.202648][ T1957] ? bpf_lsm_file_permission+0xd/0x20 [ 116.202668][ T1957] iterate_dir+0x1fa/0x5c0 [ 116.202687][ T1957] __se_sys_getdents64+0xf6/0x250 [ 116.202707][ T1957] ? fdget_pos+0x299/0x310 [ 116.202724][ T1957] ? __x64_sys_getdents64+0xa0/0xa0 [ 116.202741][ T1957] ? __cfi_filldir64+0x10/0x10 [ 116.202759][ T1957] ? __cfi_ksys_write+0x10/0x10 [ 116.202783][ T1957] ? __kasan_check_write+0x18/0x20 [ 116.202804][ T1957] ? fpregs_restore_userregs+0x11c/0x260 [ 116.202827][ T1957] __x64_sys_getdents64+0x7f/0xa0 [ 116.202844][ T1957] x64_sys_call+0x27d0/0x2ee0 [ 116.202859][ T1957] do_syscall_64+0x57/0xf0 [ 116.202873][ T1957] ? clear_bhb_loop+0x50/0xa0 [ 116.202892][ T1957] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 116.202912][ T1957] RIP: 0033:0x7f3c1bf9e559 [ 116.202928][ T1957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.202945][ T1957] RSP: 002b:00007f3c1cf19028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 116.202967][ T1957] RAX: ffffffffffffffda RBX: 00007f3c1c225fa0 RCX: 00007f3c1bf9e559 [ 116.202983][ T1957] RDX: 000000000000004b RSI: 0000200000000040 RDI: 0000000000000003 [ 116.202995][ T1957] RBP: 00007f3c1c0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 116.203008][ T1957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.203015][ T1957] R13: 00007f3c1c226038 R14: 00007f3c1c225fa0 R15: 00007ffecc317a68 [ 116.203026][ T1957] [ 116.268456][ T347] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 116.489507][ T347] usb 2-1: device descriptor read/8, error -71 [ 116.620145][ T347] usb 2-1: device descriptor read/8, error -71 [ 116.718406][ T66] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 116.728553][ T347] usb usb2-port1: unable to enumerate USB device [ 116.848441][ T66] usb 3-1: device descriptor read/64, error -71 [ 117.098415][ T66] usb 3-1: device descriptor read/64, error -71 [ 117.159848][ T895] EXT4-fs error (device sda1): ext4_lookup:1819: inode #529: comm syz-executor: iget: checksum invalid [ 117.178526][ T895] EXT4-fs error (device sda1): ext4_lookup:1819: inode #529: comm syz-executor: iget: checksum invalid [ 117.255867][ T310] bridge_slave_1: left allmulticast mode [ 117.271209][ T310] bridge_slave_1: left promiscuous mode [ 117.276927][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.285185][ T310] bridge_slave_0: left allmulticast mode [ 117.290973][ T310] bridge_slave_0: left promiscuous mode [ 117.296596][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.348412][ T66] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 117.356557][ T1974] FAULT_INJECTION: forcing a failure. [ 117.356557][ T1974] name failslab, interval 1, probability 0, space 0, times 0 [ 117.388395][ T1974] CPU: 1 UID: 0 PID: 1974 Comm: syz.1.502 Not tainted syzkaller #0 4acfbc369189e5cacd88ca5a92b3a107a9d116ed [ 117.388432][ T1974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.388446][ T1974] Call Trace: [ 117.388453][ T1974] [ 117.388460][ T1974] __dump_stack+0x21/0x30 [ 117.388496][ T1974] dump_stack_lvl+0x140/0x1c0 [ 117.388524][ T1974] ? __cfi_dump_stack_lvl+0x10/0x10 [ 117.388551][ T1974] ? simple_lookup+0xc7/0x100 [ 117.388568][ T1974] dump_stack+0x19/0x20 [ 117.388593][ T1974] should_fail_ex+0x3c2/0x510 [ 117.388611][ T1974] should_failslab+0xac/0x100 [ 117.388629][ T1974] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 117.388653][ T1974] ? alloc_inode+0xa9/0x270 [ 117.388671][ T1974] ? __kasan_check_write+0x18/0x20 [ 117.388694][ T1974] alloc_inode+0xa9/0x270 [ 117.388712][ T1974] new_inode+0x25/0x1e0 [ 117.388729][ T1974] ? start_creating+0x1fb/0x310 [ 117.388753][ T1974] __debugfs_create_file+0x14c/0x4b0 [ 117.388778][ T1974] debugfs_create_file+0x4e/0x70 [ 117.388802][ T1974] kvm_create_vm_debugfs+0x48e/0xb50 [ 117.388821][ T1974] ? kvm_enable_virtualization+0x150/0x150 [ 117.388840][ T1974] ? __kasan_check_write+0x18/0x20 [ 117.388863][ T1974] ? kvm_coalesced_mmio_init+0x4f/0x190 [ 117.388885][ T1974] ? kvm_dev_ioctl+0xb1f/0x14c0 [ 117.388902][ T1974] kvm_dev_ioctl+0xb57/0x14c0 [ 117.388921][ T1974] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 117.388939][ T1974] ? bpf_lsm_file_ioctl+0xd/0x20 [ 117.388956][ T1974] ? security_file_ioctl+0x3e/0x110 [ 117.388979][ T1974] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 117.388996][ T1974] __se_sys_ioctl+0x126/0x1b0 [ 117.389022][ T1974] __x64_sys_ioctl+0x7f/0xa0 [ 117.389041][ T1974] x64_sys_call+0x1878/0x2ee0 [ 117.389061][ T1974] do_syscall_64+0x57/0xf0 [ 117.389079][ T1974] ? clear_bhb_loop+0x50/0xa0 [ 117.389103][ T1974] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 117.389127][ T1974] RIP: 0033:0x7f6df679e559 [ 117.389145][ T1974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.389171][ T1974] RSP: 002b:00007f6df7587028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.389193][ T1974] RAX: ffffffffffffffda RBX: 00007f6df6a25fa0 RCX: 00007f6df679e559 [ 117.389209][ T1974] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 [ 117.389222][ T1974] RBP: 00007f6df68358b0 R08: 0000000000000000 R09: 0000000000000000 [ 117.389235][ T1974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.389247][ T1974] R13: 00007f6df6a26038 R14: 00007f6df6a25fa0 R15: 00007ffc0e2608f8 [ 117.389264][ T1974] [ 117.389314][ T1974] debugfs: out of free dentries, can not create file 'pages_1g' [ 117.647594][ T10] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 117.669441][ T310] veth1_macvtap: left promiscuous mode [ 117.676046][ T310] veth0_vlan: left promiscuous mode [ 117.708447][ T66] usb 3-1: device descriptor read/64, error -71 [ 117.832628][ T10] usb 2-1: config index 0 descriptor too short (expected 1051, got 27) [ 117.841079][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.868429][ T10] usb 2-1: config 0 has no interfaces? [ 117.875388][ T10] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 117.888403][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.906610][ T10] usb 2-1: Product: syz [ 117.916712][ T10] usb 2-1: Manufacturer: syz [ 117.921376][ T10] usb 2-1: SerialNumber: syz [ 117.935627][ T10] usb 2-1: config 0 descriptor?? [ 117.948396][ T66] usb 3-1: device descriptor read/64, error -71 [ 118.058521][ T66] usb usb3-port1: attempt power cycle [ 118.160464][ T1974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.169085][ T1974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.178936][ T313] usb 2-1: USB disconnect, device number 32 [ 118.408408][ T66] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 118.429382][ T66] usb 3-1: device descriptor read/8, error -71 [ 118.559530][ T66] usb 3-1: device descriptor read/8, error -71 [ 118.798437][ T66] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 118.819496][ T66] usb 3-1: device descriptor read/8, error -71 [ 118.949443][ T66] usb 3-1: device descriptor read/8, error -71 [ 119.019359][ T1987] rust_binder: Read failure Err(EAGAIN) in pid:444 [ 119.063863][ T66] usb usb3-port1: unable to enumerate USB device [ 119.878422][ T2012] netlink: 16 bytes leftover after parsing attributes in process `syz.1.507'. [ 120.188414][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 120.258413][ T312] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 120.340972][ T10] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 120.350141][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.358139][ T10] usb 2-1: Product: syz [ 120.362530][ T10] usb 2-1: Manufacturer: syz [ 120.367134][ T10] usb 2-1: SerialNumber: syz [ 120.377815][ T10] ums-karma 2-1:1.0: USB Mass Storage device detected [ 120.389946][ T10] ums-karma 2-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 120.389946][ T10] Please send a copy of this message to and [ 120.429495][ T312] usb 3-1: config 0 interface 0 has no altsetting 0 [ 120.436188][ T312] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 120.446049][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.458335][ T312] usb 3-1: config 0 descriptor?? [ 120.848580][ T10] ums-karma 2-1:1.0: probe with driver ums-karma failed with error -5 [ 120.871824][ T10] usb 2-1: USB disconnect, device number 33 [ 120.885546][ T312] input: HID 06cb:73f4 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:06CB:73F4.0013/input/input8 [ 120.969765][ T312] itetech 0003:06CB:73F4.0013: input,hidraw0: USB HID v0.34 Joystick [HID 06cb:73f4] on usb-dummy_hcd.2-1/input0 [ 121.080626][ T10] usb 3-1: USB disconnect, device number 31 [ 121.719454][ T36] audit: type=1400 audit(1792045342.009:30890): avc: denied { read write } for pid=2025 comm="syz.1.509" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 121.768074][ T36] audit: type=1400 audit(1792045342.009:30891): avc: denied { open } for pid=2025 comm="syz.1.509" path="/143/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 121.814717][ T2030] overlayfs: failed to resolve './file7/file0': -2 [ 121.821522][ T36] audit: type=1400 audit(1792045342.009:30892): avc: denied { create } for pid=2027 comm="syz.2.510" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=bluetooth_socket permissive=1 [ 121.874278][ T36] audit: type=1400 audit(1792045342.009:30893): avc: denied { create } for pid=2027 comm="syz.2.510" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 121.918387][ T36] audit: type=1400 audit(1792045342.009:30894): avc: denied { write } for pid=2027 comm="syz.2.510" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 121.939478][ T36] audit: type=1400 audit(1792045342.019:30895): avc: denied { nlmsg_write } for pid=2027 comm="syz.2.510" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 121.960988][ T36] audit: type=1400 audit(1792045342.019:30896): avc: denied { create } for pid=2027 comm="syz.2.510" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 121.981065][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 121.988919][ T36] audit: type=1400 audit(1792045342.019:30897): avc: denied { bind } for pid=2027 comm="syz.2.510" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 122.009141][ T36] audit: type=1400 audit(1792045342.019:30898): avc: denied { node_bind } for pid=2027 comm="syz.2.510" saddr=fe80:: scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 122.030925][ T36] audit: type=1400 audit(1792045342.019:30899): avc: denied { name_bind } for pid=2027 comm="syz.2.510" src=20002 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 122.158421][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 122.165053][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 122.173634][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.183825][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.194360][ T10] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 122.203456][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.211689][ T10] usb 3-1: Product: syz [ 122.215862][ T10] usb 3-1: Manufacturer: syz [ 122.220787][ T10] usb 3-1: SerialNumber: syz [ 122.231933][ T10] usb 3-1: selecting invalid altsetting 1 [ 122.434203][ T10] usb 3-1: 6:0: failed to get current value for ch 0 (-71) [ 122.446683][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 122.457251][ T1798] udevd[1798]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 122.473646][ T10] usb 3-1: USB disconnect, device number 32 [ 124.038954][ T2048] EXT4-fs warning (device sda1): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 124.248447][ T313] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 124.342821][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 124.388421][ T313] usb 3-1: device descriptor read/64, error -71 [ 124.504167][ T10] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 124.513320][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.521535][ T10] usb 2-1: Product: syz [ 124.525942][ T10] usb 2-1: Manufacturer: syz [ 124.530927][ T10] usb 2-1: SerialNumber: syz [ 124.541431][ T10] ums-karma 2-1:1.0: USB Mass Storage device detected [ 124.550049][ T10] ums-karma 2-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 124.550049][ T10] Please send a copy of this message to and [ 124.628400][ T313] usb 3-1: device descriptor read/64, error -71 [ 124.878414][ T313] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 125.005357][ T10] ums-karma 2-1:1.0: probe with driver ums-karma failed with error -5 [ 125.017761][ T10] usb 2-1: USB disconnect, device number 34 [ 125.018408][ T313] usb 3-1: device descriptor read/64, error -71 [ 125.277303][ T313] usb 3-1: device descriptor read/64, error -71 [ 125.388534][ T313] usb usb3-port1: attempt power cycle [ 125.738465][ T313] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 125.759496][ T313] usb 3-1: device descriptor read/8, error -71 [ 125.889468][ T313] usb 3-1: device descriptor read/8, error -71 [ 126.128444][ T313] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 126.149488][ T313] usb 3-1: device descriptor read/8, error -71 [ 126.279441][ T313] usb 3-1: device descriptor read/8, error -71 [ 126.388542][ T313] usb usb3-port1: unable to enumerate USB device [ 128.038179][ T2065] FAULT_INJECTION: forcing a failure. [ 128.038179][ T2065] name failslab, interval 1, probability 0, space 0, times 0 [ 128.059429][ T2065] CPU: 1 UID: 0 PID: 2065 Comm: syz.1.520 Not tainted syzkaller #0 4acfbc369189e5cacd88ca5a92b3a107a9d116ed [ 128.059462][ T2065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.059475][ T2065] Call Trace: [ 128.059481][ T2065] [ 128.059488][ T2065] __dump_stack+0x21/0x30 [ 128.059521][ T2065] dump_stack_lvl+0x140/0x1c0 [ 128.059545][ T2065] ? __cfi_dump_stack_lvl+0x10/0x10 [ 128.059569][ T2065] dump_stack+0x19/0x20 [ 128.059592][ T2065] should_fail_ex+0x3c2/0x510 [ 128.059610][ T2065] should_failslab+0xac/0x100 [ 128.059628][ T2065] kmem_cache_alloc_noprof+0x42/0x410 [ 128.059650][ T2065] ? security_file_alloc+0x49/0x220 [ 128.059670][ T2065] ? kasan_save_alloc_info+0x3a/0x50 [ 128.059690][ T2065] security_file_alloc+0x49/0x220 [ 128.059710][ T2065] init_file+0x9e/0x210 [ 128.059727][ T2065] alloc_empty_file+0xd9/0x270 [ 128.059746][ T2065] path_openat+0xf4/0x35a0 [ 128.059765][ T2065] ? stack_depot_save_flags+0x38/0x800 [ 128.059785][ T2065] ? kasan_save_track+0x4f/0x80 [ 128.059807][ T2065] ? kasan_save_track+0x3e/0x80 [ 128.059830][ T2065] ? kasan_save_alloc_info+0x3a/0x50 [ 128.059851][ T2065] ? __kasan_slab_alloc+0x73/0x90 [ 128.059868][ T2065] ? getname+0x1b/0x30 [ 128.059891][ T2065] ? do_sys_openat2+0xda/0x1d0 [ 128.059909][ T2065] ? __x64_sys_openat+0x13a/0x170 [ 128.059928][ T2065] ? x64_sys_call+0xe69/0x2ee0 [ 128.059943][ T2065] ? do_syscall_64+0x57/0xf0 [ 128.059961][ T2065] ? do_filp_open+0x440/0x440 [ 128.059981][ T2065] do_filp_open+0x1f2/0x440 [ 128.059999][ T2065] ? __cfi_do_filp_open+0x10/0x10 [ 128.060020][ T2065] ? alloc_fd+0x4c1/0x570 [ 128.060045][ T2065] do_sys_openat2+0x134/0x1d0 [ 128.060074][ T2065] ? fput+0x1a4/0x230 [ 128.060091][ T2065] ? do_sys_open+0x100/0x100 [ 128.060110][ T2065] ? ksys_write+0x1f3/0x260 [ 128.060134][ T2065] ? __cfi_ksys_write+0x10/0x10 [ 128.060160][ T2065] __x64_sys_openat+0x13a/0x170 [ 128.060181][ T2065] x64_sys_call+0xe69/0x2ee0 [ 128.060198][ T2065] do_syscall_64+0x57/0xf0 [ 128.060214][ T2065] ? clear_bhb_loop+0x50/0xa0 [ 128.060235][ T2065] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 128.060255][ T2065] RIP: 0033:0x7f6df679e559 [ 128.060271][ T2065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.060287][ T2065] RSP: 002b:00007f6df7587028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 128.060308][ T2065] RAX: ffffffffffffffda RBX: 00007f6df6a25fa0 RCX: 00007f6df679e559 [ 128.060322][ T2065] RDX: 0000000000000302 RSI: 00002000000004c0 RDI: ffffffffffffff9c [ 128.060335][ T2065] RBP: 00007f6df7587090 R08: 0000000000000000 R09: 0000000000000000 [ 128.060347][ T2065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.060359][ T2065] R13: 00007f6df6a26038 R14: 00007f6df6a25fa0 R15: 00007ffc0e2608f8 [ 128.060375][ T2065] [ 128.318414][ T10] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 128.588408][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.598548][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.628439][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 128.637519][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 128.645590][ T10] usb 3-1: SerialNumber: syz [ 128.660298][ T10] usb 3-1: 0:2 : does not exist [ 129.057559][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 129.057576][ T36] audit: type=1400 audit(1792045349.339:30906): avc: denied { mounton } for pid=2068 comm="syz.2.522" path="/proc/353/cgroup" dev="proc" ino=21943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 129.133317][ T390] usb 3-1: USB disconnect, device number 37 [ 129.851070][ T2087] EXT4-fs warning (device sda1): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 129.878578][ T36] audit: type=1400 audit(1792045350.169:30907): avc: denied { connect } for pid=2089 comm="syz.1.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 129.928580][ T36] audit: type=1400 audit(1792045350.199:30908): avc: denied { write } for pid=2089 comm="syz.1.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 130.148432][ T313] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 130.208405][ T390] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 130.299456][ T313] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 130.309701][ T313] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 130.321268][ T313] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 130.332360][ T313] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.346829][ T313] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 130.356077][ T313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.364266][ T313] usb 3-1: Product: syz [ 130.368695][ T313] usb 3-1: Manufacturer: syz [ 130.373310][ T313] usb 3-1: SerialNumber: syz [ 130.378455][ T390] usb 2-1: Using ep0 maxpacket: 16 [ 130.380101][ T313] ftdi_sio 3-1:1.0: FTDI USB Serial Device converter detected [ 130.391555][ T313] usb 3-1: Detected FT2232C/D [ 130.399400][ T390] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.410356][ T390] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.420173][ T390] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 130.433055][ T390] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 130.442136][ T390] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.450893][ T390] usb 2-1: config 0 descriptor?? [ 130.580495][ T2092] netlink: 32 bytes leftover after parsing attributes in process `syz.2.527'. [ 130.590246][ T313] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 130.597537][ T313] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 130.608696][ T313] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 130.618747][ T313] usb 3-1: USB disconnect, device number 38 [ 130.626455][ T313] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 130.636466][ T313] ftdi_sio 3-1:1.0: device disconnected [ 130.865103][ T390] hid-multitouch 0003:0457:07DA.0014: unknown main item tag 0x0 [ 130.872840][ T390] hid-multitouch 0003:0457:07DA.0014: unknown main item tag 0x0 [ 130.880740][ T390] hid-multitouch 0003:0457:07DA.0014: unknown main item tag 0x0 [ 130.888591][ T390] hid-multitouch 0003:0457:07DA.0014: unknown main item tag 0x0 [ 130.896354][ T390] hid-multitouch 0003:0457:07DA.0014: unknown main item tag 0x0 [ 130.904301][ T390] hid-multitouch 0003:0457:07DA.0014: unknown main item tag 0x0 [ 130.912174][ T390] hid-multitouch 0003:0457:07DA.0014: unknown main item tag 0x0 [ 130.920028][ T390] hid-multitouch 0003:0457:07DA.0014: unknown main item tag 0x0 [ 130.927696][ T390] hid-multitouch 0003:0457:07DA.0014: unknown main item tag 0x0 [ 130.935614][ T390] hid-multitouch 0003:0457:07DA.0014: unknown main item tag 0x0 [ 130.943473][ T390] hid-multitouch 0003:0457:07DA.0014: unknown main item tag 0x0 [ 130.958551][ T390] hid-multitouch 0003:0457:07DA.0014: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0 [ 131.067044][ T313] usb 2-1: USB disconnect, device number 35 [ 131.726369][ T787] bridge_slave_1: left allmulticast mode [ 131.738388][ T787] bridge_slave_1: left promiscuous mode [ 131.744105][ T787] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.770185][ T787] bridge_slave_0: left allmulticast mode [ 131.775929][ T787] bridge_slave_0: left promiscuous mode [ 131.781791][ T787] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.798410][ T313] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 131.806170][ T2111] binder: Binderfs stats mode cannot be changed during a remount [ 131.913518][ T787] veth1_macvtap: left promiscuous mode [ 131.924443][ T787] veth0_vlan: left promiscuous mode [ 131.948431][ T313] usb 3-1: device descriptor read/64, error -71 [ 132.072056][ T2121] input: syz0 as /devices/virtual/input/input9 [ 132.096266][ T36] audit: type=1400 audit(1792045352.379:30909): avc: denied { append } for pid=2120 comm="syz.1.534" name="event3" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.218420][ T313] usb 3-1: device descriptor read/64, error -71 [ 132.458410][ T313] usb 3-1: new high-speed USB device number 40 using dummy_hcd SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=6 req=501 state=3 status=67 (errno 32: Broken pipe) [ 132.588395][ T313] usb 3-1: device descriptor read/64, error -71 [ 132.648370][ T36] audit: type=1400 audit(1792045352.929:30910): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[2945]" dev="pipefs" ino=2945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 132.794801][ T778] bridge_slave_1: left allmulticast mode [ 132.800473][ T778] bridge_slave_1: left promiscuous mode [ 132.806051][ T778] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.920440][ T778] veth1_macvtap: left promiscuous mode [ 132.925949][ T778] veth0_vlan: left promiscuous mode [ 133.159883][ T778] bridge_slave_1: left allmulticast mode [ 133.165622][ T778] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.173012][ T778] bridge_slave_0: left allmulticast mode [ 133.178670][ T778] bridge_slave_0: left promiscuous mode [ 133.184243][ T778] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.269877][ T778] tipc: Left network mode [ 133.275189][ T778] veth1_macvtap: left promiscuous mode [ 133.280723][ T778] veth0_vlan: left promiscuous mode