last executing test programs: 48.327258572s ago: executing program 0 (id=199): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000500)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="379500000000000003e77200000008000300", @ANYRES32=r5], 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r6, &(0x7f0000000180), 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r7, &(0x7f0000000240)='2\n', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r8, &(0x7f00000002c0)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r9, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') 48.262894499s ago: executing program 0 (id=200): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='2\n', 0x2) 48.262757839s ago: executing program 0 (id=201): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000240)={0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 48.215144023s ago: executing program 0 (id=202): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000d0100000a0001007770616e3071000006000a000100000006000800ffff0001050007000b000000050017000f000000050018000f000000050019000100000005001a000000000005001b"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) syz_usb_connect(0x3, 0x51, &(0x7f0000000f40)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880e020000000009050300000000000009050cfeffff01060209050f000000000000090507"], &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000004c0)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x200000}]}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000500)={0x1, 0x0, [{0x1b, 0x0, 0xfee00d00}]}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000540)={"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"}) ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, &(0x7f0000000940)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) setns(0xc9, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r6, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="8fdf2cbd7000030000000b"], 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) recvmmsg(r6, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}, 0xfffffff8}], 0x1, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000bae000/0x400000)=nil) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x404c800) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000000)={0x54, 0x2, 0x9, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFCTH_TUPLE={0x20, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @broadcast}}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x4040841) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000d40)={0xec, r11, 0x7, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5b6947ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '802.15.4 MAC\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd4b1}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x8800}, 0x4000080) r12 = syz_kvm_add_vcpu$x86(r9, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r12, 0xae80, 0x0) 47.510774495s ago: executing program 0 (id=204): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1fc) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) flock(r0, 0xb) flock(0xffffffffffffffff, 0x2) r1 = open(&(0x7f00000002c0)='.\x00', 0x100000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000780)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r2, 0x0) socket(0x23, 0x4, 0x3) openat$uinput(0xffffffffffffff9c, &(0x7f00000007c0), 0x802, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c884}, 0x44800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800200, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x18) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r4, 0x0, 0x20000023896) ioctl$KVM_CAP_EXIT_HYPERCALL(r0, 0x4068aea3, &(0x7f0000000880)={0x79, 0x0, 0xc}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000340)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000100)=""/72, 0x1000, 0x1000, 0x0, 0x3}, 0x20) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000840), 0xc6200, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r7, 0xd6) 47.196849977s ago: executing program 0 (id=205): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000500)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="379500000000000003e77200000008000300", @ANYRES32=r5], 0x1c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r6, &(0x7f0000000180), 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r7, &(0x7f0000000240)='2\n', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r8, &(0x7f00000002c0)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r9, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) 32.123222594s ago: executing program 32 (id=205): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000500)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="379500000000000003e77200000008000300", @ANYRES32=r5], 0x1c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r6, &(0x7f0000000180), 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r7, &(0x7f0000000240)='2\n', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r8, &(0x7f00000002c0)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r9, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) 9.17909328s ago: executing program 4 (id=597): mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000500)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="379500000000000003e77200000008000300", @ANYRES32=r5], 0x1c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r6, &(0x7f0000000180), 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r7, &(0x7f0000000240)='2\n', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r8, &(0x7f00000002c0)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r9, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') 9.163494601s ago: executing program 4 (id=598): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000240)={0x0, &(0x7f0000000580)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x2b, {0x0, "0f69c04883c80c0f7831d9d066b8a0000f00d8"}}, @nested_vmlaunch={0x12f, 0x18}], 0x73}) ioctl$KVM_RUN(r3, 0xae80, 0xe8030000) 9.046710443s ago: executing program 4 (id=599): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x112}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000340)={@ipv4={'\x00', '\xff\xff', @local}, @local, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x800000, 0xa, 0x0, 0x0, 0x7ffffffe, 0x140192}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x4, &(0x7f0000000100)=[{0x20, 0x0, 0x0, 0x5}, {0x6, 0x0, 0xfe, 0x400}, {0x101, 0xc, 0x4, 0x800}, {0x8, 0xb1, 0x7c, 0x8001}]}) (async) r2 = socket(0x1e, 0x1, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x40880) (async) connect$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}}}, 0x10) (async) write$binfmt_misc(r2, 0x0, 0x0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x4044084) r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f00000001c0)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000000240)={0x2c, &(0x7f0000000280)={0x40, 0xf, 0x2, "e805"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000300)={0x40, 0x1, 0x2, "7fcb"}, 0x0, 0x0}) (async) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)) 5.997762853s ago: executing program 4 (id=628): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000500)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="379500000000000003e77200000008000300", @ANYRES32=r5], 0x1c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r6, &(0x7f0000000180), 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r7, &(0x7f0000000240)='2\n', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r8, &(0x7f00000002c0)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r9, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') 5.979856364s ago: executing program 4 (id=629): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1c, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @main=@item_012={0x2, 0x0, 0xa, "7bf5"}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x2, 0x0, 0x8, "008c"}, @global=@item_012={0x1, 0x1, 0x0, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @local=@item_4={0x3, 0x2, 0x7, "c344b330"}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x59, &(0x7f0000000100)="b687fbe916") 4.663240397s ago: executing program 3 (id=637): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000500)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="379500000000000003e77200000008000300", @ANYRES32=r5], 0x1c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r6, &(0x7f0000000180), 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r7, &(0x7f0000000240)='2\n', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r8, &(0x7f00000002c0)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r9, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') 4.633205051s ago: executing program 3 (id=638): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000340)) r3 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001010080320904000002080650000705810200020007050202"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00170000000025b9"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f00000000c0)={0x84, &(0x7f00000005c0)=ANY=[@ANYBLOB="000000000000003bcc28d0fb6c75b900"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r5 = gettid() r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)={0x20, 0x11, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xa, 0x0, 0x0, 0x0, @str='/D00#\x00'}]}]}, 0x20}], 0x1}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r8, &(0x7f0000000500), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_raw(r8, &(0x7f0000000580)={0x1d, r9}, 0x10) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f00000003c0)=0xce, 0x4) connect$inet(r7, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r7, 0x1, 0x7, 0x0, 0x0) sendmsg$inet(r7, &(0x7f0000000440)={0x0, 0x14, &(0x7f0000000480)=[{&(0x7f00000004c0)=' ', 0x100120}], 0x1}, 0x20c49b) rt_tgsigqueueinfo(r5, r5, 0x14, &(0x7f0000000280)={0x12, 0x0, 0x80000000}) r10 = syz_kvm_add_vcpu$x86(r4, &(0x7f00000001c0)={0x0, &(0x7f0000000240)=[@rdmsr={0x66, 0x18, {0xc0010140}}], 0x18}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 2.941379922s ago: executing program 4 (id=654): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x8080, 0x40) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, 0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r1 = syz_clone(0x1000, &(0x7f00000001c0)="b99f712667b539ec5bca8a3a06aff69e7247f861ea551237b95058be7ed72bdb8329305afc2f0601e91c586f6bedd1f3651b96118a24087815a591f6a6bc052dff94398566598f1a017998f1bbdb20711fc8c030d73b9ad6466da9548be507c1145eb04add4207099dbcd951ca4a94b836626adc2a8fda4aa6bc231d67234e64034af180a31f5aad9dde80c5731a9df9dbfa5d6f0ef403984421cd8be1034595a3c15bf4e84f521d32f60b104af19e9ef511404dafcc25edef7a38759b28ab708c10c7dd36d7e68683d0248ad37ca28ded22f680", 0xd4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="72756a795808835f6435ff6244e3de541191cb55e152eb29b03b2b3d9a23b83d5283c78c85e0bed91068290399b87a4b3567bd5b5713ddd901eaffdd7f7e9fac7b55973bb7575cfbd506c58384b24ac1faaaa7c121ec63e5a5e5565cf0e6b4dca1f53d4552b49e421fbd982b99cc893de4684c221cce825074d7dea28cc7c2e94d33d4569aedcaf9ff626ef5783fa616c4eb287c9c6cbac76a76fd8a5ef0c5e917020aa9a0ae8a4faacbaa24a7b8a98d536e1b411f835a3e8d77d7bab47bc034189a1cd3104e333a8cf0250a7fad56e9dff2c628bddf36c92112a50ad0c150009767a709bfdcb6e02e1486addee77c") rt_tgsigqueueinfo(0x0, r1, 0x17, &(0x7f0000000440)={0x28, 0x10000, 0x89}) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000100)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x9, 0x2}]}, 0x10) listen(r2, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100000841"], 0x0) 1.940565353s ago: executing program 2 (id=666): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000500)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="379500000000000003e77200000008000300", @ANYRES32=r5], 0x1c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r6, &(0x7f0000000180), 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r7, &(0x7f0000000240)='2\n', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r8, &(0x7f00000002c0)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r9, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') 1.939851013s ago: executing program 2 (id=667): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ff5000/0x2000)=nil) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="8fdf2cbd7000030000000b"], 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0xfffffff8}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ff5000/0x2000)=nil) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) (async) setns(0xc9, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="8fdf2cbd7000030000000b"], 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) (async) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0xfffffff8}], 0x1, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async) 1.742651224s ago: executing program 2 (id=668): r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@ax25={{0x3, @null}, [@bcast, @default, @default, @null, @default, @bcast, @null, @null]}, &(0x7f00000000c0)=0x80) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x10000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setuid(0xee01) clock_adjtime(0x0, &(0x7f0000000500)={0x10001, 0x4, 0xb0000000000, 0x3, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x81, 0xffffffffffffffff, 0x8000000000000001, 0x5a6c101, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x1ff, 0x4}) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x0, &(0x7f00000008c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file1\x00', 0x40, 0x83) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000940)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) getsockopt$inet_opts(r7, 0x0, 0x4, 0x0, &(0x7f0000000980)) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TIOCGSERIAL(r8, 0x541e, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/80}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="74060000", @ANYRES16=r5, @ANYBLOB="10002abd7000ffdbdf252100000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x674}, 0x1, 0x0, 0x0, 0x40814}, 0x40004) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000480), 0x802, 0x0) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x3) write$uinput_user_dev(r9, &(0x7f0000000c40)={'syz0\x00', {0x0, 0x0, 0x0, 0x3dde}, 0x0, [0x0, 0x0, 0x200, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0xb, 0x0, 0xfffffffc, 0x9, 0x5, 0x1, 0x0, 0x0, 0x2, 0x2000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4a47, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x7, 0x2, 0x80, 0xf73d, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x8, 0xb16, 0x20, 0x200000, 0x0, 0x2, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x2, 0x5, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x8, 0x0, 0xfffffffe, 0x7a, 0xffffffff, 0xfffffffe, 0x0, 0xff, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x800, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0xd, 0xffffffff], [0xd, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x2, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x8001, 0x4, 0x0, 0x0, 0x2, 0x0, 0x2, 0x4, 0x0, 0x0, 0x3, 0x400008, 0xdd, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x5, 0x2, 0x0, 0x8000000, 0x0, 0x0, 0xffffffff, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x5], [0xfffffffd, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x8, 0x0, 0xc045, 0x10, 0x16, 0x0, 0x4, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x3, 0x4, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x80, 0x3, 0x80000, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r9, 0x5501) write$uinput_user_dev(r9, &(0x7f00000010c0)={'syz1\x00', {0xfffd, 0x400d}, 0x4d, [0x400, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x7, 0x7f, 0x1, 0x0, 0x0, 0xa, 0x0, 0x1, 0xffffffff, 0x10000000, 0x0, 0x7ff, 0xfffffe00, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2152e519, 0x0, 0x4, 0x0, 0xe, 0x3, 0x0, 0x0, 0x4, 0x1, 0x0, 0x4000000, 0x0, 0x8, 0xffff, 0x0, 0xfffffffc, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffc3c3, 0x0, 0x0, 0x9, 0x0, 0x4], [0x0, 0x3, 0x3, 0x0, 0x0, 0x6, 0x9, 0xfffffffb, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0xfffffff8, 0xfffffffe, 0x0, 0x5, 0x0, 0x20000, 0x0, 0x4, 0xd, 0x0, 0xfffffffd, 0x8000003, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2842, 0xfffffffe, 0x7f, 0xffffffff, 0x0, 0x80, 0x0, 0x0, 0xfffffffd, 0xfd5], [0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0xffffffe, 0x0, 0x0, 0xf9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x43, 0x7fffffc, 0x0, 0x0, 0x7fff, 0x0, 0x80003, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xfffffffd, 0xfffffffd, 0x40, 0x0, 0xffffffff, 0x0, 0x7fb, 0x0, 0x6, 0x2, 0x0, 0x0, 0x8, 0xffff, 0xed], [0x81, 0x0, 0x5d30, 0x4, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1000000, 0xfffffffc, 0x0, 0x1, 0x0, 0x0, 0xfc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x2, 0xf1, 0x0, 0x4, 0x0, 0x0, 0xe58b, 0xe, 0x0, 0x3, 0x0, 0x1, 0x1ff]}, 0x45c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000000)=0x20, 0x4) 1.742255604s ago: executing program 2 (id=669): openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000780), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000007b80)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b7ed4f7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a7890814529440000004e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8046d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f0000009b80)={&(0x7f0000009c40)={0x50, 0x0, 0x4, {0x7, 0x29, 0x100001, 0x24ff871999e0dde7, 0x1, 0x1, 0xd, 0x8, 0x0, 0x0, 0x8, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000009cc0)="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", 0x2000, &(0x7f000000bcc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000bd80)={0x78, 0x0, 0x1, {0x8, 0x3d, 0x0, {0x6, 0x100000000000004, 0x0, 0x6, 0xd, 0xfffffffffffffffa, 0x9ec, 0x35741061, 0x10004, 0xa593e9c1ca988eda, 0x200, 0x0, 0x0, 0x10, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000003b00)="e1c8b131b14aa736394325bbc4ca7d984748e8a47cfc756dd14ae81eb7b452641cf963869ff8ab277ab82973028be089fdc652cf3571d53fdae6ba330aaf7c37032c4250c0bc9808df2f53d8f969ee137389fbe2887f9afbae5292d6a60797c1555509ff21a8cbd71ed08426285a28b42ab772185c6ec40695b204fb7cb95091613da064d62a3e76d97f7f2cafdae286b558dac9e248150ee7bea22ce0cb0e076d93eaa459b18c033f063bebe73997a90bf1b0b3fb66f7316c24ed95dc2aebfa7e337098ec2461af5bfec8e8dd245ba41f6eb4ec7d3326938c9d8bb28840bb222a5f32450291234ec80c5f1cdc3f10193b43d0c9bd75219650e43ebea3696ecd9bbb7f1a6b0f6b3b913c49d27b62a8077777f3318f4d9c19150f6638992ffa58be4681af9e6d142551bc67e359b2acede658a805f0e988fe180d5ac53968aee8f9d2c3caa6abec57fe4dcad2a9490c11adeaf0d1d41c6c449370229f7b647d7d722994f6ef23de19fd8881aa9673555641646a5b7183c626a4ce3ff3d4c86a281e8c06853b8819e7b74c94025661b728b315696e221a53af9ed12c3f42dcd15c69c88685d18324836bf7d9606685beaf2f0cdfb816946950356d3f2a39d5c4ff5ccae8c65ead344b66bded8fc10e4f982590f939b47bde8e5364e570ff4ec3ec1adb3eb1dfefd6a6316a1f319adbfd5c97492ef6a3b4ebc3aab34cb3ff3adec97b3ad042c1548011ee0150364f7e5dda0a993e8fcac90885ca7f2d6371bd0f950bf864ca826046dca1a982a69f71753b00d43865205d17bbc17702f3039d13c87d7beb2c1ecae1edfe94e091b5116808f40654654b60123afb4fd5f47c8099eed95f1ca21c7b53a588b82be769f8fdc5c55dec65e4afc7701ce6a7385ee9d7724fa4eb0a531dab40dfce42417fb45167ef705b3bf711c8f4ce727f9eb1d398bb54f665292bbb2333dff1a925a830ef45e565aa0e046b7ed2d6fecd8068fe471405390b0161e26c8821b99468846189eeb7cfe2443523b4cafe6ab86a4911a0b1d5c6f533c036ffa01a8c4d954be1d47845f4a520f9f5febd64d496fffda9e36af081ed88a82fb82bc9e59f34ec96e3eabb2cedcba8b985ed35dc962c603a78dc0d7b322bb32b79638492680a87cc622e04c0e4e1fea9f4d3792d5c0ae75b949f9b32193af744abe0c82093de3313b74f0c4e44a8a17f6132d23c5284fa24df04c37420c074b79ba3774521505724871066cd91abf0b99569b4eef0c4176351bc0b470a6c7e078ae36bcbc900eb0bd7bdcaf8aadcf4dc1bc34e39947ba92d9d4a3ab23a02e6e368c742984429e7bde546a545c739469700b6a30191248a26ae626e7a5b9a32e2857c5b57a864f3bd5488796f947c852709115660ad6830ef8aa77bbe541ecd4f0a6c16926c0fcb013a54c63e3417eab8a28f883a12d3711c3e3e41cb7976a41e7869b53e34fd84bb581277d03a031c1180ed990910d809b0963fb4a3f34c79dd04ecaa236c573bb0d39d6c07b4e6a691baccc76a0367584ab97c094272c4d1d54f253e985ef6e6e5b72be8c928bcefe308569314d4931811dd328adc9006fc229150332273a10257feea9d0203eb897c3c6523a4a8920e66ba9308ca98140b3795361236958f368c9f519043ad2bc996c24b5a6dbfcd9effd35439b52408a7d5c919582fcb498c123591518f188662f91e6416178cc0a981acbea6c2e8e4b4993d886ecee9fa1d87eb73be3d8b4effc392e9630390074ecb2fa42d6479e7993067e8df98a12c1d81577918d6f94b2f9543d8de96311de364bc8e4a2c6860d20deb81813160bb04616224a3ebda7ee223f14f6783be9cfccccf5d4b82d19be6889aa2a72d719539939f4d0e97e8286f2da70356638eb569dc62a86361d718d99849c89f58ffff492dc3fe71af636cb9df92b4f9d5985b9fca50a8add651d1eca80fd13c3348c029fbfb985e78a839c0820fc62cc94fd3dc7a340c65cf2db71602e0c1f78baf2f5f7094bf54edab96bdff0a0e636f417deaca2b3a84aa7ea47075768b6cee4cf2e0554ee0a37e5ec68808079c56aab3c56d6b16f905724f8d3efe9c95a93868e4e53191128c376dd89d4902f1775e93005e6e44f7bbc8a90a558aa7fdb42c037b132589fa9dd8406dc3b5f4b62273144b5abacc912c53d8e02f985c867122bf19dbc8ab62d41265aef8d2c48e831256eae2b2c3d19eff860c60679f4da610e8b25a505448cce0ff56c2ef99f0025496a184c33a1a0b63b6b5777a99be96c27259b6a33028e79879c2d07c27d103b22b716a876b04caeb25088a323848f22ed21d16f8ddc778e7da6ee36d96a8db4c0b5271c03bb03b51c42116c56fbaea98218b84af18a0131ab6d449d1cda82bfbf2077a18ed9e02c6b17c6b0d2549a7c2662862a2f61404ad666e8878cc0a9f40816404bd87d9b834855be91a583bbfc94bb51d6c55b4fb095dd8097b64c03952ca764aa0c59adc254c790f328015280ceeca8cfdc0d43a68f473a118d5026b73f9a17ae67ac3afc2e1e7438dcf4ce5edbda15e904c1e2044da3bd94dfd739dfee3699a87875124bcf61948355b325d6c0d7372ce26810e2a4d85cff35102503718367e89f582ad46c799872ad77989a480b323db3d53f105afe64bbb537754c7e056be72327a544ff94cd0bcfda903646e2fd2cdab0ff0a469072b7b81a0cbb1cbcfe9e65529494a82c0f67d0f3dd54ce145e5110d4a48247a344ebdc8c51d784e8b67e6587c02ea33906c929a6f002a493c353e175e4e66326a4bfec11e1e401d06f3b24aa3ea557e5317974a083de801ab5fff56e651646d46def9e085050e9d27305178bb8428c074dbea3c5b4ce8822ae7df5f198787bc0a791a41e4846a89d994b838447eb90d64e918a342f0b766daf6c9c61d420e886aef4b2a26f698b22b0c758952906fd2183976e2a7ab06e2c99a2c991389919594634a27d291f16c6be1b6c5e14ab734a20f77f0052f54b32b5c0783925aedb48b4e7be0faed9eefdb6ef06c6aa6cae5de7fa841c49a14e1bb1e69d4078dbafef11f944b81bc594e50e2969e4a0f76b0ca6fcbc927b1b364251f3e2f220949a045b0906e11926cee6509202c19adffdaf1afe87b5f8890d2052f970f3f157bac040c94639d222c9bb4c3a143e24a736ebc9d8447c5c361c0ad3f2555493a726b9bb092381686830b4db3ca1d269921d749f28bd53afd0945aa9267563ff0fc43d47e92ec7c8acd3cf1e52895ddb5224383721c6a987ea28352c86972844886e9ef424ed0976229845cee48db949d361cf9767c2d6a5fc67539d50ba5c6e3604fdf80bbf969a28aff4a3f2bd5bbe5795c7929f52e12d6cb33543bd5f7191ec7c6e7aa3f4e6bba0e8caf8105bf2c7c1bdfc27e7d7b42a5bbf9c384d446267ac7a9edcaccc11e0818ac745cfc80bdc0cd195fc9eae2af15c1dd68d0e2276f880af8b6131f124046731d1f5ce525ac025fcf2668e690776112648f0ec87cc00a3d6601905c6e816fb03386b37b99381e25126618c0471b53f9c30d0e85badecfea1571368e208479e5f9b6b24ad541d412d1436bb201082fc5f47608ca699bdf1a9392a07b253b5a32ccc811a45027d9bc8229c4f1859ec72eb8926f383f2c27be602b841d7c6aef65f3e8bf0e476b65cd8bf88d6a7f210f1dadad1c6223c5d0f983057ba0630cca784efdf6df84c008c8e4ba685a50b1a2e609b957a414ed5e286914e004ecf7d9f40d41dda5c5424344be5f9ad54cc3f40d9ffc81993f350e24c7e5a54717a8dcb9448b591837914e4dcb9a5936ae77e3e96364a9ff0bf7aec6fd6d12f546ea33a71bca1c5c30a35082f796a6ee8d02adb01ae8053b65ceeec7fae4072404fa4c68a01e8dffe7110b8bfac050e03f041fb9bfa9377eea640246d6c6ca3ddf854b76030cae53364b4ce17c81609c9840b09393f890a4f9bdbc339b611570e199176fda70220cd7fdff7d3cbf2e543ec67e3c7c4036ce41d56e8d097387f8ef56178ab97d56d1f9ec6c4c14aa66f789171a819d0a6f4319941f2febb292af41c8139bf3e8aa26a8ce583750c2f578e3378b2c5887021ef72224f16ecf4c54d6da7fdfd7eee1ed81ca10a2abdc304a9d6b9a5d46d5ab50290dc92d3300ad6a6dafed79698d445c2ddd6c2b1d3d61d2b1776e52f21a96fede1bf19e2cd95653a05102e333a28f7fbaf1710a40266340071cb666fc57a014754e6a1669a2d6f45948103a5f9beec467e1eacd8a78618366aab5452c24f2d42662d8b478c48d11ff471ccc2d1ca5b83cab321ba5a0b0adedf54628ded4eed6c2be5544978fa172dddeb4ceb2f0deb651fc1d8c5a0348a6e842ac7bfee9389fcce13b667fcc1c9cd5ad77b2c330bcd0075ffa81f32233ce144350db98c70311afc8d782be4a39867b02fd133750544484eea7f073566493b7718e0811fbb314c288e8ebcaf03d1bb33e6a58f46a2c5246d0dfa61b33c0d2f39e0837714727201aa88971cd30f9acb48cd18e4506e3f2bb8edb5525c16b2d8b7dcd9b2785f06722fed7f03099ddc5df7bf0bd50e9f91abee7e3d6589533a60542370c9c8b46a46d191adb1f202b5037e111c3a8dafc6557b9932875037822b74e55af36e0352efa7605b1b22fc0792b4363f9d0853c2a6575af304fd2fb3c89e2317f30d71bb1b0ea713089b795f698209d62f3fb301f7913404ddb3d7e2f748a8fcfb6b72b43843fc3187061284da035ab4c998ce820b0d86c3626d0ad5ba1f567375cfbafa63509a5d148be5f13535fb953e7461a395cfca953041ee7d1c62c95900cc7f54e024022425288c7462ccee0687834088a11c20525abf845982b386d28b45ee919a22bb0280b28c1b5c718200c87f59d1c342782c4cf0d6f98b549fd87dabec608b770acf59f18c083d2ac98367b3628b22611c1fd6aa849455207f03de3d852a6a4ea098084210ffa7e78c86f7ebbc5b74f6ac8bcd23e5898532b267320e6c629236de5d2a5c8be3d7a3d630b67a123ee140172f19a95561367841b455713dc09a5259b8d8bc66522c056d6a321f5b157edf79d134e879ab99310a66ee329a9f0b131d77785c4ef6ba47b93256f0c4d90d2e58ef7557bd8708c610f82898de5fbb3e2aca3bec1945302b4eb5167254b71f96b4c089a879827d61cddf8b24141e3a590c4b07bfa4880ea7d464a20cd7c469b2eb088d84adf51b1d4d56b4d2885f1c7941b2a58e53f1855fb40cd2236520b4d7040f378e6c189b9d8c8e9e309b3e855baa385c1e344bfedf9cdec2ecb321d6d4b281e83a82abc37e66f201f660019f041c50068c39cb371a54dc11c89f3856777dda789bc9356229f9370f8ef89f6b1fb1e548d60845e7c46e6b54e760c889450f9629f40f0442de26062e357d2bcccd9e1eee157e53f0d824302292d6b723c4b2bddc49763f06864c3e3bfe785d1823d2f7e25112f74b6f9675f010c9fad68d4e926cc34fad0a1d276092b20be7c514b10d25b4f4c5eadb6c78432b9ddb7f6ef6b8fd43ef26c6fb465d6c397af0206f0036ca5fc7b9357f696f038ff1d7e62d4054f404ab0ffac2d02850e383ede6ee8cfe63425e46c3ad184aed8834e559e2336109190413ac8fb314973f37e106b60c4a0adccce08a4f235c493370ed1d02681cf1b51ef0cb43bfc0e0e711dbae5b377f7ffec205ec5c1f831264411f95e6c23f87b4f5cc8ebdecd021f06a396b1179fe9d04b715a6f43ab1a65950bbd1e33bfee62fcf839a87acdc174147ec4f84146997b60c4c2f1c5cd8ed64c962a9c3847febf26db7bd40f5c46ccafffd392e16931d341ac83b4643b4bfa01bc7daa839fdd6c8846c836c31b4ea68eef8b71750e04deddab4e0fd37ec33cab67b163b3e2c8fc1e970ec382dd917df7553960b2c2465886cc74ef9cf9a30351f43fb60ea3fd647a1ae2f0ceb03a4c8a142fb5557b3f5371925bc910c3fde025610c9570cd4a530d3bbd7f02374bc6f4d226e344efb44d986fbe65777bb7685f2845f3a42481eae706d41bb46294d7fcca63d1da8afb861cdb8ab7b9e9953b5041df3ed1329a2d4559ab36d98e79967cddba68b1c32cacef387111f006f10b18cf92d42a33372d8f24197e6178c1b980d1a6bce6337566fc8da631eb0f215fca41a61cfba860e638429924f93a938e3f0f33dd0edd95bfdcafcf013b873aee566c922ab580fda1cc31367965605a9f876240dc27ca8692bafe5250cb1415b146cedfd09f576f67c1347d0adcac5fb11e024df1703525cb254c038000ce086f418fb82ac91786361583e14671da2921296323b46c070b5d6687b98f58a3996019bf0f005728f1487e9251d81a5bd4cf3b74ae6a422694cf85c7197475f2a3da9b32c49253f8548a11301ec16b677f240e5ba3d94b9bbb7223e723537e8968e417477a637e088c8094551a6926a1b87c7075254b79a3b74805c9a801d5fdc48a280c1ff530adf47520e3b7817c50ca92b9e49d9a791d69fcc0c732ea4e88f991d4d2c1b371212f84756daa61169e87185fb76205e1bda1910c7d539283665d8b098f6bfbc9edaa97dfe25365b2532724bfa2dded99f82c1707623df497991f4902845b7984a1974807cf7d16490d5aae2da693a1c164704affcd3e75d86b83ac47489f85386ff54ca6a12013dd479bb86e15229a89faebc8e299384682bcd42adea70da7544a7393a32fbd7caba749284fa431840f5c06cff4cca12456dd987f37edd8624d0b22b367948b9b52076f9a2fd49277559950db578620bbbb0f6bd1184e12b17c4900358c05d7f203b8d5f2f947fdd0debd5bfe12f01e2a2c2382dede7c0b9619c4f6c584c249ab3820c3b85c4eef63e4e4fb8de5de482ffd34b929bafed842bffa08510295e3e64de35ff65b38a49b3d6ca84c600024644aacdad7593ef634387ceae6ebb8b32d20fdfdd968c4f71cbff5999ad050f3436ca45e3ff352770821d026bc3b20e09e6c5952a01aa84041acfa0894d5ad0168256a6d25f0d3c38e4a214ba88d98f237b06cf9c2bb7a26ad62cd2ed1fc75a25b9a1836f124003fd71a919cb7fa18139da6dd5c5c8c1e833571dbdd2e92f5808991c0588ff72e75d0dc7ec3c80371d77ed0b68fb68284de499772d648ff6a158c6a5b76b129e7fe5c8fdbcf665f39cc9195e43194343c037fb887a666bc469530959d18eeb2084854f8d006d99063c8398600f3be528ce74ebcae937c8d9d37be9edbfa5fea21e1425b396f0cbe039fb4967c59c8855dd723dd7a6c2b3826e86270b5c8773ed69b22a3c9ec3da17a694a0503294a4d7f8a6fd7efc5f0b093b9882ae48725e687b92491ecf0268acde6846e0b2f2666eb2773db5cb163dc7e7d01800f1807ac83ccdd52d8a44cebb35826e02a769e0df703512675f09a0d650db34fdb55aec13cf69402edd9d047a8a31a370dab37c6265ee0e79807d70923e4fe0f0cc996ec6e85368acf36354cc9c29541e7b0e95463d6ff220917b88dbf7ce91f7df2d30613e5c64c8192567ba4b200977f4f4e6a0f0f3b42e457c92c1b4a967ac340d7dfc56893e38d57b0fe9ffaa632871f171e802aab2bee3459df61fa1118398ac60d762a337d9836dcac14c792debe5bc4024e7216980e546ddeaff9311019ec1a45a8c1bf3ba779e0fec8ff2dc0a4956e88e107c75916a433ceb549b3f93ff2a9ee9de474d5eb9e0dc4425198c7b7d0a44c61f016fcd4abea2edbcf7b68555812865c475f1776991d0b28de7e26e45ac5e284dc0ad386102137d29e10d90e4b739ce760c7494335e634a8365ea69247f90d0130480b0a0eaaf604e4c4fbd679058967410720294502df9df992ff78323403115f58f9191a5880f5565b8879971ce3161e5126d06ce5e65ebbf28c7b170b09f837e506239c24f2339ecb1335262caac69c2ebf775633a65bad4016035400306fbc9708b36ad573c7a36b7db158d6a6d402ae897486a73027616426a4a4e53cbfa01232d92812ac1273015f70543ff59682af1917c7dc13446b3fc740ae8933345aca07909f4ae6d85963f6fa2a9661463493aea7d252c74b43e7eab8ddcea44d8705561846d77cd10054387c4d4dfe15e64dee20b226575a13f664cac50edbfe9b1efa3a1a630a49ca58e771ea5dee2cd15c95435e00e6278232ca62382ffac1cde881710de952ee27be3017257e302525c134fb309977dd8852cf2afddff0b1da1c63d28c21805d9f79a11880deb7cfefb1309e65050bd91b3786fe18a413e66845c7166a794bf4110acee12ad847ff8c39d3dff4e4cc964dd6d8bf6cec5309a684c6c74e60568b59bd4ce099406fa8a646673fe9b79e365de5522e9aac397dd325b8a02c1366ac1181e21978aaf82286ec94c530a3b75e120b80aebebe4e05d2c59471e1f4f75edbe50208188e4e9bc73e585f409ee9e17e8bea151149168cf16082e201b2b4c15c5c20747eeb44ce81059e8cf4f3ec4464df139340509b712b7f5c428d90d5508b240f50e40ab69cbdd6c5741a182b0a768afd7cdf723ff5f42a7239772cb630da7c71bc0b27ccde36a3d3207ed12ba386ee7600bb72df213c2296e0e55f744758f1a8283d843c3810f293fdf0984a5edbc55dfbdd626394dac23841bf9cd7aaeaf545d171b48c74aeb288fcfd9f228152b89d15db38d977489744e28aebe8b15a48ad52c4f6539411c7ad0cc92efd4f1d59367e149c52ce0e9f6081976aacf492e55eea4a7dc357cffaf524851371219f9dfcf92482a230088d0f30e923d6552a2640a7db6984ea33923ceaa4874fa49ef1e9560848fe0a32d0f2c234b4658d4cfc3c43ecb81d193a7bd4098931da16268301c459bbaae4e0b3dfc69fa1056045c35067d336e71d204596231ea1d5418f5365bed9183f1167c56664be00f1846d6c84281341b87489a3d2458b3e77f917c5354e8aaf7454e48cbc1af7fba32cf8bf6ac44dba88c66f2b4348063db9883dbdbb6d361882d7560b2cad60fbe114b7c2364759cb8f35f16f059641a6c45adcb4577d016c76595c302395e6508d494083cfc3930c5dff397d92757b01c871042a72aa32b5a72eb07599392e498c9dc9bf71b65dcc6c41803f3dc586a243c82b18e3768f5e642c9c9610609ed007832c6d7f27d26b822e6adc6c0415b6b9232c03e5ad932e732a6efa598b4afb12a962ead1829678fea551990fdb79d3ebc2729f2ad7f02536f13ef21c011cf0deec97089c796e52de31d074790f6956ff186bc6720e26213bb9e2b4b6771816ffb027925b7d4d27b30650bf24a703a8e26f10578296712acdaad40c85d3f84000d455383ab43acf7ef55a8219b10de33f070c0c52ab14e92bb345cb6dd1d8dc8d45ac4d0da078edb53fae1c7f46c68c05579fb53f15ba99c1836064a87dc2f7d69ed64d7163a4ce4bacfd3050a26711f41438b6848b36732d9a21cf5e78d4f0482162ac52b02e6fedb820447289d178a8686226bb4f18c1614603b880fd625d4d2dbe71ea552b1bd212de25930effc0525a3bc9835b5face3cac5aebef6effd67146cd955aaa3e7c285f1940722ba484b30029869e61fe9470c44b21ba64526c87da8d08a7555b37d06eb3417a2148e127d899402c1fb1082e6bee0a5623240ac2a3fac6d4e78aa0c6f4b1f9f5bff67ba9ea110e864c64c32e6d74281595c68352f6c4d9b6f4f8f440725a9150f05d256265757fc9470e4b35ea93948b852134485cb5c7425e1fb064cf8dcef8c72ae1d1d98110be6b8b7ff1c0415803d47b71172c423dd5356720e4b2632a934bb3af1ed640c9cfc1319232f39b94b489e0a3dedd3a27ad245be399cc5651764b58d7986de1e1989c8b04744c34cf1d384b28c602a986e141aa7f652b6094ec2a326b729e216eeecc1a1752f4202ba795e8d0a93de0a8d1767bdac1c4757233af8b76e6b3edf84885f4a1573fa8b55356c46e514ef744ec7b38b2ac74c8178a14988eff4968b4719d3b9e01a9dfc94b5731c113feb09bbd52d7e3fecc22be5ba18ec64d82d2559017cecd57a6aa5abe95612101d8873927fdcc4f18480e61dfb2c472ba7cf96258b94868082fa41aa3100e3beed2ff3d06be64e1684d32248b20e512caf4b3d6b9a471db5e901af5407a2725e44aff38f580e6cbe4fdb29bd84e6292721ca47ba4f7d241de257ac06a275bb0e46259fc0d6cb910f7db1526a582cde1249f9254e8fbb71717f683336f04143d326d3ebbe92767df0f5604293b8608a0a2b156aae29aedc2b57b75e8611ba79c58e77547993ba0d4e726093a4218b53a1424a6395c38a9457ceeba5d0f82b40d9d018918fb2f74d0236b76d1527ad14ae483babc3668814d22e80cc7fdafe96b6ad6580e07334a6ccbe3f300a9476c5774c096e641a821048049b8121d4b88001d0b283cffce83f71c79671c76532a14313b5f259b26824d135379b8d6221f4c4d378590c7a3f128c6cb712e3bec01261488132b5cc7c6934d46579857bf2ba7c6c5bb98be345538d0109a00a536f5d100054985755a5415295915d8219ec1b58936f65b60adec12c428c6dbc0b75cbe2669d223330bb7ff0b9b6fa0bbc6c7063dda66e4b2f8ac2bd6a5b57c0a99f5f616b37ded277497599f50be180db6f71fccf4ff3bd059bbc27528a6193424cab672a9a13508daddd3c882cabdb422cc94074e5c435b981c4311d33030a8686a4c7b7ef311a58633e91c682a9419ad93a74d9e1aac0de0e7f678937ce8f2201b6c099c3546ca214aad60fc1faaa6921805855579685ccd72e2d905cbfbb1a8c27ec40b0360b2e47fdb26b52eba733ab17b6338703b90c3e93eb1db7af3cd7eb11e85a5fc072df331f2d29684bc756dbd1514c523d07e24abb55f7ff4a349e685793aa91b5ba08cf1acdf7a6b48960667f7a9973e717341a96c6d37caf59ae6018c3272a94f04b905f442683369ebcef33b9125a6e8e1a7fd104c4dbffac1a0e991faf1b1109924d3facbe19b05f621bfda3115fc737e1e307c5751ec86567059792c6160a423b29b99f7ffe900308fe5bf28cc95bea1c0fbc5beedb960407213e12399a3353f14df343995069f44cca59ca9aa3aec491d55434f2081661a124e46689448fd36eba3ad61ee8bee0499bc74437ed3de727af631c36a2661c35bcc2c3a2b9ed5910602efc18362db7e65b66f704d140e8037c493369d9671254485a60f2de4b6a422110c16bea36893b6ea2be4edb3f34a68600de6d5a73df3e1c521e5abbb75789f293c0f178211fec1e6a28452e60b2a24741e164696e19bb02a993308ccd998058ecccfd6e0a117ba325ec3c81370e2f5e1dcbfb3967f55fcf507c3b450f3b0a84b3a56a3d617b9fd58a057b68a7f44ee6da40bd5e2303cec02cfef8a9b71ddc23369d56d3a1e152835e2b012bcd1520fc55fb2becbb9c78d4e1c190affd8ca59c0f7511e8e6527077841bb9a8e563deb40a5d9ff0101293ab2cc5027976250d066f493fd389f1d11220b3b57c02956f2ae28c607f7b012cf402f1df4b3ecb9505eceb48e17da948fefd00", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000dec0)={0x20, 0x0, 0x4004, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, &(0x7f0000000100)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x120}}}, &(0x7f00000001c0)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000200)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f3}, &(0x7f00000003c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x4, 0x1, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x10, 0x3, 0xbab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x0, 0x40040005, 0x334, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.68305247s ago: executing program 2 (id=670): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000240)={0x0, &(0x7f0000000580)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x2b, {0x0, "0f69c04883c80c0f7831d9d066b8a0000f00d8"}}, @nested_vmlaunch={0x12f, 0x18}], 0x73}) ioctl$KVM_RUN(r3, 0xae80, 0x400000000000000) 1.612785697s ago: executing program 2 (id=671): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') (async) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@empty, @remote}, 0xc) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000240)={'lo\x00'}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f"], 0x14) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) (async) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f00000003c0)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000780)=ANY=[@ANYBLOB="10eb3669f9d5560728f2cd1d8e710c4e1cad1418b5bd4da8fc7525ad60fdb80fd30a994c47d79c70cd7b87e4619c32ede10ebc02c506ac1f91e04e5a836f41a4d1304f29d405debc1a97fc5938eb5568cb987ac995dc8bb83e5be30fec1c4c30e3fbd9dcb8ed5bf3bbf9b5b6bc062bc980578940e7e7c0be98e5ae852944dec3ee39f41d006d661c2d7e4cb52db177fd286a181add7fe246ffd8669b2b2c9bbdf6e73620e33c6942463a0a39aa44ab"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000540)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, 0x0) (async) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) (async) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000880)={0x24, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a2502834492796d830007379202750d56ca55f870d500"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000580)={0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000640)={0x20, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000640)={0x20, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) (async) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000000680)={0x2c, &(0x7f00000006c0)={0x0, 0xe, 0x4, "2ae84be4"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) (async) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000700)={0x34, &(0x7f0000000740)=ANY=[@ANYBLOB="400f13"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000700)={0x34, &(0x7f0000000740)=ANY=[@ANYBLOB="400f13"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) 1.524895706s ago: executing program 3 (id=672): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000500)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="379500000000000003e77200000008000300", @ANYRES32=r5], 0x1c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r6, &(0x7f0000000180), 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r7, &(0x7f0000000240)='2\n', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r8, &(0x7f00000002c0)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r9, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') 1.524312806s ago: executing program 3 (id=673): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder1\x00', 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mount$binderfs(0x0, &(0x7f0000001940)='./binderfs\x00', 0x0, 0x2804867, &(0x7f0000001980)=ANY=[@ANYBLOB="73746174733d19ca4de011c46744"]) getsockopt$sock_buf(r0, 0x1, 0x1c, 0xfffffffffffffffe, &(0x7f0000000200)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8) (async, rerun: 64) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000480)={&(0x7f00000003c0)=""/177, 0x2208000, 0x1000, 0xfffffffa, 0x2}, 0x20) (async, rerun: 64) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(r2, &(0x7f00000019c0)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001a00)='./sys\x00', &(0x7f0000001a40)='sysfs\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000001a80)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write(r4, &(0x7f0000001ac0)='1', 0x1) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r5, 0xc138fd03, &(0x7f0000000500)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830") (async) ioctl(r5, 0xc138fd09, &(0x7f0000000540)="0400000000000000000000009001320038010000013232080000000000000000000000000000000000000000000000006d7061746830") (async, rerun: 32) r6 = socket(0x10, 0x3, 0x0) (rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) (async) sendmsg$nl_generic(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000001600010a10000040000000000207"], 0x1c}}, 0x0) (async) fcntl$dupfd(r5, 0x0, r3) r7 = openat$kvm(0x0, &(0x7f00000004c0), 0xd074f77c0076f5f9, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x36) r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000beb000/0x400000)=nil) r10 = syz_kvm_add_vcpu$x86(r9, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18, 0x6}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @guest32=0x4822, 0x1, 0x2ffffe, 0x2}}, @nested_vmlaunch={0x12f, 0x18, 0x4}], 0x80}) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000ef89e300", @ANYRES16=r11, @ANYBLOB="000128bd7000fcdbdf250200000008006200040000001400020073797a5f74756e00000000000000000008002600781400000400d100"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (async, rerun: 64) ioctl$KVM_RUN(r10, 0xae80, 0x0) (rerun: 64) io_setup(0x8, &(0x7f0000000580)) (async, rerun: 64) io_submit(0x0, 0x0, 0x0) (rerun: 64) 1.355974673s ago: executing program 3 (id=677): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x350, 0x10000) ptrace$pokeuser(0x6, r0, 0x358, 0x48) r1 = open(&(0x7f0000000000)='./bus\x00', 0x4c27e, 0x10) fallocate(r1, 0x0, 0x1000000, 0x1000f4) sendfile(r1, r1, 0x0, 0x40000000800) openat$sysfs(0xffffffffffffff9c, 0x0, 0x900, 0x11) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @aes256, 0x10, @auto="cdf5c81a39f47c10"}) r2 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socket$inet6(0xa, 0x4, 0x4) syz_usb_control_io$uac3(r2, 0x0, 0x0) 282.132542ms ago: executing program 1 (id=681): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000240)={0x0, &(0x7f0000000580)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x2b, {0x0, "0f69c04883c80c0f7831d9d066b8a0000f00d8"}}, @nested_vmlaunch={0x12f, 0x18}], 0x73}) ioctl$KVM_RUN(r3, 0xae80, 0x407030003000000) 179.847512ms ago: executing program 1 (id=682): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000500)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="379500000000000003e77200000008000300", @ANYRES32=r5], 0x1c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r6, &(0x7f0000000180), 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r7, &(0x7f0000000240)='2\n', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r8, &(0x7f00000002c0)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r9, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') 179.552392ms ago: executing program 1 (id=683): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x68680, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_clone3(&(0x7f0000000380)={0x42040400, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x3d}, &(0x7f0000000200)=""/253, 0xfd, &(0x7f0000000300)=""/52, &(0x7f0000000340)=[0xffffffffffffffff], 0x1}, 0x58) r4 = pidfd_getfd(r3, r1, 0x0) ioctl$FICLONE(r1, 0x40049409, r4) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x52f4f5e883585527, 0x0, {[0x3, 0x60b, 0x2, 0x83a, 0xdd86, 0x80d9, 0x0, 0x80]}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000004cc0)=[@text64={0x40, &(0x7f0000000100)="c481d573f200c40101f5a20b0000000f20d835080000000f22d80f015c8a08b8010000000f01d9b8010000000f01c1c4e2c3f7720065d9e164660f38821dc10000003e0fc732", 0x46}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 42.723126ms ago: executing program 1 (id=684): unshare(0x60000600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x8b, 0x6, 0xffff, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x2000, 0x8000, 0x36b1, 0x4}}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000080)={'vcan0\x00', {0x2, 0x0, @loopback}}) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 26.618898ms ago: executing program 1 (id=685): mkdir(&(0x7f0000000040)='./bus\x00', 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', @random="0000230c1100"}) mount$incfs(&(0x7f0000000080)='\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0xc002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.current\x00', 0x275a, 0x0) r1 = fsopen(&(0x7f0000000000)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='auto_da_alloc', 0x0) 5.33595ms ago: executing program 3 (id=686): unshare(0xc000000) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x12, 0x0, &(0x7f0000000180)=0x3e) (async, rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async, rerun: 64) r4 = socket$inet6(0xa, 0x802, 0x80) (rerun: 64) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000540)=ANY=[], 0x40) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) getsockopt$inet6_opts(r4, 0x29, 0x3b, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}]}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000300)=[@enter_looper], 0x100, 0x0, &(0x7f0000000340)}) (rerun: 32) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x1, 0xa1, 0x0, 0x0, 0xf9, 0x0, 0x0}}]}) (async) openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder_logs/transactions\x00', 0x0, 0x0) (async, rerun: 64) read(r2, &(0x7f0000001540)=""/4098, 0xfffffffffffffe8b) (async, rerun: 64) syz_extract_tcp_res(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x3) (async) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000200)={0x2b, 0x3}) 0s ago: executing program 1 (id=687): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000500)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="379500000000000003e77200000008000300", @ANYRES32=r5], 0x1c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r6, &(0x7f0000000180), 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r7, &(0x7f0000000240)='2\n', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r8, &(0x7f00000002c0)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r9, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') kernel console output (not intermixed with test programs): 30.677179][ T31] usb 4-1: device descriptor read/64, error -71 [ 130.792056][ T31] usb usb4-port1: attempt power cycle [ 131.141896][ T31] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 131.162949][ T31] usb 4-1: device descriptor read/8, error -71 [ 131.293086][ T31] usb 4-1: device descriptor read/8, error -71 [ 131.470976][ T309] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 131.485240][ T309] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 131.495071][ T309] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 131.506345][ T309] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 131.516340][ T309] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 131.542043][ T31] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 131.550395][ T309] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 131.560401][ T309] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 131.572029][ T309] usb 2-1: USB disconnect, device number 7 [ 131.579630][ T31] usb 4-1: device descriptor read/8, error -71 [ 131.587456][ T36] audit: type=1400 audit(1794192007.250:229): avc: denied { mount } for pid=1039 comm="syz.1.289" name="/" dev="ramfs" ino=9437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 131.625357][ T36] audit: type=1400 audit(1794192007.280:230): avc: denied { mounton } for pid=1039 comm="syz.1.289" path="/file0" dev="ramfs" ino=9438 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 131.664383][ T36] audit: type=1400 audit(1794192007.330:231): avc: denied { ioctl } for pid=1043 comm="syz.1.291" path="socket:[9033]" dev="sockfs" ino=9033 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 131.712938][ T31] usb 4-1: device descriptor read/8, error -71 [ 131.721891][ T36] audit: type=1400 audit(1794192007.330:232): avc: denied { connect } for pid=1043 comm="syz.1.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 131.761892][ T36] audit: type=1400 audit(1794192007.330:233): avc: denied { read write } for pid=1043 comm="syz.1.291" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 131.801892][ T36] audit: type=1400 audit(1794192007.330:234): avc: denied { open } for pid=1043 comm="syz.1.291" path="/dev/input/event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 131.832025][ T31] usb usb4-port1: unable to enumerate USB device [ 132.033430][ T36] audit: type=1400 audit(1794192007.700:235): avc: denied { write } for pid=1059 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 132.125033][ T1067] kvm: MWAIT instruction emulated as NOP! [ 132.501912][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 132.661935][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 132.668284][ T31] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 132.677176][ T31] usb 2-1: config 179 has no interface number 0 [ 132.683818][ T31] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 132.695126][ T31] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 132.706614][ T31] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 132.717974][ T31] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 132.728197][ T31] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 132.741780][ T31] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 132.751068][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.760661][ T1070] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 132.769227][ T31] xpad 2-1:179.65: probe with driver xpad failed with error -5 [ 132.980421][ T1070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.989550][ T1070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.052288][ T381] usb 2-1: USB disconnect, device number 8 [ 133.111921][ T9] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 133.272315][ T9] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 133.281519][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.289765][ T9] usb 3-1: Product: syz [ 133.294140][ T9] usb 3-1: Manufacturer: syz [ 133.298779][ T9] usb 3-1: SerialNumber: syz [ 133.717890][ T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 134.070139][ T36] audit: type=1400 audit(1794192009.730:236): avc: denied { read write } for pid=1089 comm="syz.2.310" name="lp0" dev="devtmpfs" ino=517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 134.931904][ T381] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 135.081935][ T381] usb 2-1: device descriptor read/64, error -71 [ 135.321929][ T381] usb 2-1: device descriptor read/64, error -71 [ 135.571907][ T381] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 135.741910][ T381] usb 2-1: device descriptor read/64, error -71 [ 135.884917][ T316] usb 3-1: USB disconnect, device number 7 [ 135.891802][ T316] usblp0: removed [ 135.981968][ T381] usb 2-1: device descriptor read/64, error -71 [ 136.102001][ T381] usb usb2-port1: attempt power cycle [ 136.295897][ T1147] overlayfs: failed to resolve './file0': -2 [ 136.329679][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 136.329697][ T36] audit: type=1400 audit(1794192011.990:238): avc: denied { setopt } for pid=1142 comm="syz.2.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 136.461918][ T381] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 136.492965][ T381] usb 2-1: device descriptor read/8, error -71 [ 136.623334][ T381] usb 2-1: device descriptor read/8, error -71 [ 136.704448][ T36] audit: type=1400 audit(1794192012.370:239): avc: denied { read write } for pid=1154 comm="syz.3.332" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 136.750512][ T36] audit: type=1400 audit(1794192012.370:240): avc: denied { open } for pid=1154 comm="syz.3.332" path="/92/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 136.861979][ T381] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 136.882975][ T381] usb 2-1: device descriptor read/8, error -71 [ 137.032746][ T381] usb 2-1: device descriptor read/8, error -71 [ 137.042698][ T36] audit: type=1400 audit(1794192012.710:241): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 137.142031][ T381] usb usb2-port1: unable to enumerate USB device [ 138.062755][ T36] audit: type=1400 audit(1794192013.730:242): avc: denied { create } for pid=1182 comm="syz.3.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 138.105171][ T36] audit: type=1400 audit(1794192013.760:243): avc: denied { connect } for pid=1182 comm="syz.3.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 138.431918][ T316] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 138.583105][ T316] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 138.593116][ T316] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 138.603712][ T316] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 138.632622][ T316] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.641760][ T316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 138.658455][ T316] usb 3-1: Product: syz [ 138.662942][ T316] usb 3-1: Manufacturer: syz [ 138.669565][ T316] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 138.696170][ T1189] Zero length message leads to an empty skb [ 138.882975][ T316] usb 3-1: USB disconnect, device number 8 [ 139.533102][ T1214] Invalid logical block size (3) [ 139.591552][ T36] audit: type=1400 audit(1794192015.250:244): avc: denied { read append } for pid=1213 comm="syz.2.354" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 139.639064][ T36] audit: type=1400 audit(1794192015.250:245): avc: denied { open } for pid=1213 comm="syz.2.354" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 140.221792][ T1231] FAULT_INJECTION: forcing a failure. [ 140.221792][ T1231] name failslab, interval 1, probability 0, space 0, times 0 [ 140.236873][ T1231] CPU: 0 UID: 0 PID: 1231 Comm: syz.2.360 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 140.236907][ T1231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 140.236921][ T1231] Call Trace: [ 140.236929][ T1231] [ 140.236937][ T1231] __dump_stack+0x21/0x30 [ 140.236964][ T1231] dump_stack_lvl+0x140/0x1c0 [ 140.236986][ T1231] ? __cfi_dump_stack_lvl+0x10/0x10 [ 140.237006][ T1231] ? avc_has_perm+0x155/0x240 [ 140.237031][ T1231] ? __cfi_avc_has_perm+0x10/0x10 [ 140.237054][ T1231] ? hook_file_open+0x1f2/0x8d0 [ 140.237085][ T1231] dump_stack+0x19/0x20 [ 140.237105][ T1231] should_fail_ex+0x3c2/0x510 [ 140.237126][ T1231] should_failslab+0xac/0x100 [ 140.237151][ T1231] __kmalloc_cache_noprof+0x41/0x470 [ 140.237185][ T1231] ? vhost_task_create+0x12c/0x3f0 [ 140.237212][ T1231] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 140.237244][ T1231] vhost_task_create+0x12c/0x3f0 [ 140.237271][ T1231] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 140.237302][ T1231] ? __cfi_vhost_task_create+0x10/0x10 [ 140.237331][ T1231] ? __cfi_vhost_task_fn+0x10/0x10 [ 140.237356][ T1231] ? __kasan_check_write+0x18/0x20 [ 140.237386][ T1231] ? mutex_lock+0x97/0x1d0 [ 140.237414][ T1231] ? __cfi_mutex_lock+0x10/0x10 [ 140.237442][ T1231] ? kernel_text_address+0xa9/0xe0 [ 140.237482][ T1231] kvm_mmu_post_init_vm+0x161/0x300 [ 140.237505][ T1231] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 140.237538][ T1231] ? _parse_integer_limit+0x195/0x1e0 [ 140.237572][ T1231] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 140.237615][ T1231] ? kstrtoull+0x13b/0x1e0 [ 140.237646][ T1231] ? kstrtouint+0x78/0xf0 [ 140.237678][ T1231] ? ioctl_has_perm+0x1bc/0x500 [ 140.237711][ T1231] ? __asan_memcpy+0x5a/0x80 [ 140.237744][ T1231] ? ioctl_has_perm+0x408/0x500 [ 140.237777][ T1231] ? has_cap_mac_admin+0xd0/0xd0 [ 140.237811][ T1231] ? __kasan_check_write+0x18/0x20 [ 140.237844][ T1231] ? mutex_lock_killable+0x97/0x1d0 [ 140.237873][ T1231] ? __cfi_mutex_lock_killable+0x10/0x10 [ 140.237902][ T1231] ? proc_fail_nth_write+0x184/0x220 [ 140.237933][ T1231] kvm_vcpu_ioctl+0xa43/0x1000 [ 140.237960][ T1231] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 140.237984][ T1231] ? hook_file_ioctl+0x1ef/0x590 [ 140.238013][ T1231] ? __cfi_vfs_write+0x10/0x10 [ 140.238049][ T1231] ? __cfi_hook_file_ioctl+0x10/0x10 [ 140.238077][ T1231] ? __kasan_check_write+0x18/0x20 [ 140.238110][ T1231] ? mutex_unlock+0x90/0x240 [ 140.238138][ T1231] ? __cfi_mutex_unlock+0x10/0x10 [ 140.238169][ T1231] ? __fget_files+0x2bc/0x330 [ 140.238193][ T1231] ? bpf_lsm_file_ioctl+0xd/0x20 [ 140.238216][ T1231] ? security_file_ioctl+0x3e/0x110 [ 140.238249][ T1231] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 140.238274][ T1231] __se_sys_ioctl+0x123/0x1b0 [ 140.238300][ T1231] __x64_sys_ioctl+0x7f/0xa0 [ 140.238324][ T1231] x64_sys_call+0x1878/0x2ee0 [ 140.238348][ T1231] do_syscall_64+0x57/0xf0 [ 140.238371][ T1231] ? clear_bhb_loop+0x50/0xa0 [ 140.238403][ T1231] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 140.238433][ T1231] RIP: 0033:0x7fecceb9fb19 [ 140.238451][ T1231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.238469][ T1231] RSP: 002b:00007feccfa42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.238494][ T1231] RAX: ffffffffffffffda RBX: 00007feccee25fa0 RCX: 00007fecceb9fb19 [ 140.238510][ T1231] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 140.238523][ T1231] RBP: 00007feccfa42090 R08: 0000000000000000 R09: 0000000000000000 [ 140.238537][ T1231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.238550][ T1231] R13: 00007feccee26038 R14: 00007feccee25fa0 R15: 00007fff1bd624b8 [ 140.238569][ T1231] [ 140.643479][ T1236] FAULT_INJECTION: forcing a failure. [ 140.643479][ T1236] name fail_futex, interval 1, probability 0, space 0, times 1 [ 140.672659][ T1236] CPU: 0 UID: 0 PID: 1236 Comm: syz.3.362 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 140.672696][ T1236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 140.672708][ T1236] Call Trace: [ 140.672715][ T1236] [ 140.672722][ T1236] __dump_stack+0x21/0x30 [ 140.672746][ T1236] dump_stack_lvl+0x140/0x1c0 [ 140.672763][ T1236] ? __cfi_dump_stack_lvl+0x10/0x10 [ 140.672783][ T1236] dump_stack+0x19/0x20 [ 140.672800][ T1236] should_fail_ex+0x3c2/0x510 [ 140.672818][ T1236] should_fail+0xf/0x20 [ 140.672834][ T1236] get_futex_key+0x178/0x940 [ 140.672853][ T1236] ? __cfi___futex_wait+0x10/0x10 [ 140.672877][ T1236] ? __cfi_get_futex_key+0x10/0x10 [ 140.672895][ T1236] ? __cfi_futex_wake_mark+0x10/0x10 [ 140.672920][ T1236] futex_wake+0x150/0x950 [ 140.672943][ T1236] ? futex_wait+0x2b8/0x7c0 [ 140.672966][ T1236] ? __cfi_futex_wake+0x10/0x10 [ 140.672992][ T1236] ? vfs_write+0xbd2/0xfd0 [ 140.673021][ T1236] do_futex+0x37d/0x510 [ 140.673041][ T1236] ? __cfi_do_futex+0x10/0x10 [ 140.673070][ T1236] __se_sys_futex+0x13c/0x320 [ 140.673091][ T1236] ? fput+0x1a4/0x230 [ 140.673112][ T1236] ? __x64_sys_futex+0x110/0x110 [ 140.673135][ T1236] __x64_sys_futex+0xe9/0x110 [ 140.673156][ T1236] x64_sys_call+0x227f/0x2ee0 [ 140.673176][ T1236] do_syscall_64+0x57/0xf0 [ 140.673195][ T1236] ? clear_bhb_loop+0x50/0xa0 [ 140.673221][ T1236] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 140.673245][ T1236] RIP: 0033:0x7fa78219fb19 [ 140.673261][ T1236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.673276][ T1236] RSP: 002b:00007fa782fd80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 140.673296][ T1236] RAX: ffffffffffffffda RBX: 00007fa782425fa8 RCX: 00007fa78219fb19 [ 140.673312][ T1236] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa782425fac [ 140.673325][ T1236] RBP: 00007fa782425fa0 R08: 4000000000000000 R09: 0000000000000000 [ 140.673337][ T1236] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 140.673350][ T1236] R13: 00007fa782426038 R14: 00007ffc1c2d5f30 R15: 00007ffc1c2d6018 [ 140.673366][ T1236] [ 140.677883][ T36] audit: type=1400 audit(1794192016.340:246): avc: denied { mounton } for pid=1232 comm="syz.1.361" path="/sys" dev="proc" ino=4026531856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_t tclass=dir permissive=1 [ 141.020552][ T1242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.364'. [ 141.054795][ T12] bridge_slave_1: left allmulticast mode [ 141.060569][ T12] bridge_slave_1: left promiscuous mode [ 141.066449][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.073772][ T309] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 141.092377][ T12] bridge_slave_0: left allmulticast mode [ 141.102144][ T12] bridge_slave_0: left promiscuous mode [ 141.107993][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.148905][ T36] audit: type=1400 audit(1794192016.810:247): avc: denied { mounton } for pid=1244 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 141.208576][ T1244] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.215786][ T1244] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.223107][ T1244] bridge_slave_0: entered allmulticast mode [ 141.229399][ T1244] bridge_slave_0: entered promiscuous mode [ 141.234306][ T309] usb 2-1: unable to get BOS descriptor or descriptor too short [ 141.237780][ T12] tipc: Disabling bearer [ 141.243766][ T309] usb 2-1: not running at top speed; connect to a high speed hub [ 141.248851][ T12] tipc: Disabling bearer [ 141.261363][ T12] tipc: Disabling bearer [ 141.267163][ T12] tipc: Left network mode [ 141.267516][ T309] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 4 [ 141.271775][ T1244] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.286171][ T309] usb 2-1: New USB device found, idVendor=0582, idProduct=0010, bcdDevice= 0.40 [ 141.289751][ T1244] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.299912][ T316] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 141.306587][ T1244] bridge_slave_1: entered allmulticast mode [ 141.314422][ T309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.321085][ T1244] bridge_slave_1: entered promiscuous mode [ 141.328346][ T309] usb 2-1: Product: syz [ 141.338115][ T309] usb 2-1: Manufacturer: syz [ 141.342895][ T309] usb 2-1: SerialNumber: syz [ 141.366159][ T12] veth1_macvtap: left promiscuous mode [ 141.371739][ T12] veth0_vlan: left promiscuous mode [ 141.470336][ T1244] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.477479][ T1244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.484825][ T1244] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.491925][ T1244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.501949][ T316] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 141.514984][ T316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.523829][ T316] usb 4-1: Product: syz [ 141.528102][ T316] usb 4-1: Manufacturer: syz [ 141.532810][ T316] usb 4-1: SerialNumber: syz [ 141.547807][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.555672][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.578356][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.585484][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.593402][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.600498][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.624333][ T309] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 141.631183][ T1244] veth0_vlan: entered promiscuous mode [ 141.638346][ T309] usb 2-1: cannot setup if 2: error -71 [ 141.644142][ T309] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 141.656494][ T309] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 141.657493][ T1244] veth1_macvtap: entered promiscuous mode [ 141.664552][ T309] usb 2-1: cannot setup if 2: error -71 [ 141.674969][ T309] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 141.686768][ T309] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 141.694295][ T309] usb 2-1: cannot setup if 2: error -71 [ 141.706431][ T309] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 141.718183][ T309] usb 2-1: USB disconnect, device number 13 [ 141.718953][ T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card2/controlC2/../uevent} for writing: No such file or directory [ 141.740570][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 141.740586][ T36] audit: type=1400 audit(1794192017.400:249): avc: denied { mounton } for pid=1244 comm="syz-executor" path="/root/syzkaller.4u8flP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 141.774257][ T36] audit: type=1400 audit(1794192017.400:250): avc: denied { unmount } for pid=1244 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 141.947352][ T36] audit: type=1400 audit(1794192017.610:251): avc: denied { create } for pid=1266 comm="syz.4.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 141.966750][ T36] audit: type=1400 audit(1794192017.610:252): avc: denied { write } for pid=1266 comm="syz.4.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 142.004623][ T1270] FAULT_INJECTION: forcing a failure. [ 142.004623][ T1270] name failslab, interval 1, probability 0, space 0, times 0 [ 142.017558][ T1270] CPU: 0 UID: 0 PID: 1270 Comm: syz.4.373 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 142.017592][ T1270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 142.017605][ T1270] Call Trace: [ 142.017612][ T1270] [ 142.017621][ T1270] __dump_stack+0x21/0x30 [ 142.017644][ T1270] dump_stack_lvl+0x140/0x1c0 [ 142.017664][ T1270] ? __cfi_dump_stack_lvl+0x10/0x10 [ 142.017686][ T1270] dump_stack+0x19/0x20 [ 142.017705][ T1270] should_fail_ex+0x3c2/0x510 [ 142.017725][ T1270] should_failslab+0xac/0x100 [ 142.017748][ T1270] kmem_cache_alloc_node_noprof+0x45/0x420 [ 142.017783][ T1270] ? dup_task_struct+0xc1/0xd80 [ 142.017811][ T1270] ? kasan_save_alloc_info+0x3a/0x50 [ 142.017840][ T1270] ? __kasan_kmalloc+0x96/0xb0 [ 142.017862][ T1270] ? __kmalloc_cache_noprof+0x23c/0x470 [ 142.017895][ T1270] dup_task_struct+0xc1/0xd80 [ 142.017922][ T1270] ? __kasan_check_write+0x18/0x20 [ 142.017963][ T1270] ? _raw_spin_lock_irq+0x93/0x120 [ 142.017985][ T1270] ? copy_process+0x33a0/0x33a0 [ 142.018014][ T1270] ? __kasan_check_write+0x18/0x20 [ 142.018044][ T1270] copy_process+0x579/0x33a0 [ 142.018078][ T1270] ? kasan_save_alloc_info+0x3a/0x50 [ 142.018107][ T1270] ? __cfi_copy_process+0x10/0x10 [ 142.018137][ T1270] ? __kmalloc_cache_noprof+0x23c/0x470 [ 142.018170][ T1270] ? __kasan_check_write+0x18/0x20 [ 142.018199][ T1270] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 142.018227][ T1270] vhost_task_create+0x1f7/0x3f0 [ 142.018254][ T1270] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 142.018284][ T1270] ? __cfi_vhost_task_create+0x10/0x10 [ 142.018312][ T1270] ? __cfi_vhost_task_fn+0x10/0x10 [ 142.018339][ T1270] ? __kasan_check_write+0x18/0x20 [ 142.018370][ T1270] ? mutex_lock+0x97/0x1d0 [ 142.018397][ T1270] ? __cfi_mutex_lock+0x10/0x10 [ 142.018423][ T1270] ? kernel_text_address+0xa9/0xe0 [ 142.018458][ T1270] kvm_mmu_post_init_vm+0x161/0x300 [ 142.018480][ T1270] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 142.018514][ T1270] ? _parse_integer_limit+0x195/0x1e0 [ 142.018544][ T1270] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 142.018576][ T1270] ? kstrtoull+0x13b/0x1e0 [ 142.018607][ T1270] ? kstrtouint+0x78/0xf0 [ 142.018636][ T1270] ? ioctl_has_perm+0x1bc/0x500 [ 142.018669][ T1270] ? __asan_memcpy+0x5a/0x80 [ 142.018698][ T1270] ? ioctl_has_perm+0x408/0x500 [ 142.018730][ T1270] ? has_cap_mac_admin+0xd0/0xd0 [ 142.018761][ T1270] ? __kasan_check_write+0x18/0x20 [ 142.018788][ T1270] ? mutex_lock_killable+0x97/0x1d0 [ 142.018815][ T1270] ? __cfi_mutex_lock_killable+0x10/0x10 [ 142.018845][ T1270] ? proc_fail_nth_write+0x184/0x220 [ 142.018875][ T1270] kvm_vcpu_ioctl+0xa43/0x1000 [ 142.018901][ T1270] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 142.018926][ T1270] ? hook_file_ioctl+0x1ef/0x590 [ 142.018966][ T1270] ? __cfi_vfs_write+0x10/0x10 [ 142.018999][ T1270] ? __cfi_hook_file_ioctl+0x10/0x10 [ 142.019029][ T1270] ? __kasan_check_write+0x18/0x20 [ 142.019060][ T1270] ? mutex_unlock+0x90/0x240 [ 142.019089][ T1270] ? __cfi_mutex_unlock+0x10/0x10 [ 142.019119][ T1270] ? __fget_files+0x2bc/0x330 [ 142.019144][ T1270] ? bpf_lsm_file_ioctl+0xd/0x20 [ 142.019167][ T1270] ? security_file_ioctl+0x3e/0x110 [ 142.019197][ T1270] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 142.019222][ T1270] __se_sys_ioctl+0x123/0x1b0 [ 142.019246][ T1270] __x64_sys_ioctl+0x7f/0xa0 [ 142.019269][ T1270] x64_sys_call+0x1878/0x2ee0 [ 142.019294][ T1270] do_syscall_64+0x57/0xf0 [ 142.019317][ T1270] ? clear_bhb_loop+0x50/0xa0 [ 142.019347][ T1270] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 142.019375][ T1270] RIP: 0033:0x7f4c4f79fb19 [ 142.019393][ T1270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.019409][ T1270] RSP: 002b:00007f4c505fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.019430][ T1270] RAX: ffffffffffffffda RBX: 00007f4c4fa25fa0 RCX: 00007f4c4f79fb19 [ 142.019447][ T1270] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 142.019458][ T1270] RBP: 00007f4c505fa090 R08: 0000000000000000 R09: 0000000000000000 [ 142.019470][ T1270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.019483][ T1270] R13: 00007f4c4fa26038 R14: 00007f4c4fa25fa0 R15: 00007ffe0f1b3408 [ 142.019501][ T1270] [ 142.531924][ T309] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 142.683447][ T309] usb 2-1: unable to get BOS descriptor or descriptor too short [ 142.691363][ T309] usb 2-1: no configurations [ 142.696206][ T309] usb 2-1: can't read configurations, error -22 [ 142.779486][ T36] audit: type=1400 audit(1794192018.440:253): avc: denied { read } for pid=1290 comm="syz.2.381" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 142.810184][ T36] audit: type=1400 audit(1794192018.440:254): avc: denied { open } for pid=1290 comm="syz.2.381" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 142.834229][ T36] audit: type=1400 audit(1794192018.470:255): avc: denied { map } for pid=1290 comm="syz.2.381" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.852008][ T309] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 143.034808][ T309] usb 2-1: unable to get BOS descriptor or descriptor too short [ 143.042613][ T309] usb 2-1: no configurations [ 143.047217][ T309] usb 2-1: can't read configurations, error -22 [ 143.054296][ T309] usb usb2-port1: attempt power cycle [ 143.187558][ T36] audit: type=1400 audit(1794192018.850:256): avc: denied { setopt } for pid=1303 comm="syz.4.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 143.391973][ T309] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 143.414263][ T309] usb 2-1: unable to get BOS descriptor or descriptor too short [ 143.422253][ T309] usb 2-1: no configurations [ 143.426863][ T309] usb 2-1: can't read configurations, error -22 [ 143.561952][ T309] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 143.583881][ T309] usb 2-1: unable to get BOS descriptor or descriptor too short [ 143.591661][ T309] usb 2-1: no configurations [ 143.596344][ T309] usb 2-1: can't read configurations, error -22 [ 143.602855][ T309] usb usb2-port1: unable to enumerate USB device [ 143.852926][ T1304] overlayfs: statfs failed on './file0' [ 143.883125][ T1335] FAULT_INJECTION: forcing a failure. [ 143.883125][ T1335] name failslab, interval 1, probability 0, space 0, times 0 [ 143.895890][ T1335] CPU: 0 UID: 0 PID: 1335 Comm: syz.4.392 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 143.895923][ T1335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 143.895942][ T1335] Call Trace: [ 143.895948][ T1335] [ 143.895955][ T1335] __dump_stack+0x21/0x30 [ 143.895974][ T1335] dump_stack_lvl+0x140/0x1c0 [ 143.895989][ T1335] ? __cfi_dump_stack_lvl+0x10/0x10 [ 143.896004][ T1335] ? __kasan_check_write+0x18/0x20 [ 143.896028][ T1335] ? copy_mm+0x307/0x1da0 [ 143.896050][ T1335] dump_stack+0x19/0x20 [ 143.896063][ T1335] should_fail_ex+0x3c2/0x510 [ 143.896079][ T1335] should_failslab+0xac/0x100 [ 143.896096][ T1335] kmem_cache_alloc_noprof+0x42/0x410 [ 143.896120][ T1335] ? alloc_pid+0xa5/0xb80 [ 143.896140][ T1335] ? __asan_memcpy+0x5a/0x80 [ 143.896163][ T1335] alloc_pid+0xa5/0xb80 [ 143.896184][ T1335] copy_process+0x1494/0x33a0 [ 143.896209][ T1335] ? __cfi_copy_process+0x10/0x10 [ 143.896231][ T1335] ? __kmalloc_cache_noprof+0x23c/0x470 [ 143.896255][ T1335] ? __kasan_check_write+0x18/0x20 [ 143.896278][ T1335] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 143.896299][ T1335] vhost_task_create+0x1f7/0x3f0 [ 143.896319][ T1335] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 143.896340][ T1335] ? __cfi_vhost_task_create+0x10/0x10 [ 143.896360][ T1335] ? __cfi_vhost_task_fn+0x10/0x10 [ 143.896385][ T1335] ? __kasan_check_write+0x18/0x20 [ 143.896407][ T1335] ? mutex_lock+0x97/0x1d0 [ 143.896428][ T1335] ? __cfi_mutex_lock+0x10/0x10 [ 143.896447][ T1335] ? kernel_text_address+0xa9/0xe0 [ 143.896472][ T1335] kvm_mmu_post_init_vm+0x161/0x300 [ 143.896488][ T1335] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 143.896513][ T1335] ? _parse_integer_limit+0x195/0x1e0 [ 143.896537][ T1335] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 143.896562][ T1335] ? kstrtoull+0x13b/0x1e0 [ 143.896584][ T1335] ? kstrtouint+0x78/0xf0 [ 143.896606][ T1335] ? ioctl_has_perm+0x1bc/0x500 [ 143.896630][ T1335] ? __asan_memcpy+0x5a/0x80 [ 143.896653][ T1335] ? ioctl_has_perm+0x408/0x500 [ 143.896677][ T1335] ? has_cap_mac_admin+0xd0/0xd0 [ 143.896701][ T1335] ? __kasan_check_write+0x18/0x20 [ 143.896723][ T1335] ? mutex_lock_killable+0x97/0x1d0 [ 143.896745][ T1335] ? __cfi_mutex_lock_killable+0x10/0x10 [ 143.896766][ T1335] ? proc_fail_nth_write+0x184/0x220 [ 143.896788][ T1335] kvm_vcpu_ioctl+0xa43/0x1000 [ 143.896807][ T1335] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 143.896824][ T1335] ? hook_file_ioctl+0x1ef/0x590 [ 143.896846][ T1335] ? __cfi_vfs_write+0x10/0x10 [ 143.896874][ T1335] ? __cfi_hook_file_ioctl+0x10/0x10 [ 143.896895][ T1335] ? __kasan_check_write+0x18/0x20 [ 143.896918][ T1335] ? mutex_unlock+0x90/0x240 [ 143.896937][ T1335] ? __cfi_mutex_unlock+0x10/0x10 [ 143.896959][ T1335] ? __fget_files+0x2bc/0x330 [ 143.896976][ T1335] ? bpf_lsm_file_ioctl+0xd/0x20 [ 143.896994][ T1335] ? security_file_ioctl+0x3e/0x110 [ 143.897017][ T1335] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 143.897035][ T1335] __se_sys_ioctl+0x123/0x1b0 [ 143.897052][ T1335] __x64_sys_ioctl+0x7f/0xa0 [ 143.897068][ T1335] x64_sys_call+0x1878/0x2ee0 [ 143.897085][ T1335] do_syscall_64+0x57/0xf0 [ 143.897101][ T1335] ? clear_bhb_loop+0x50/0xa0 [ 143.897123][ T1335] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 143.897144][ T1335] RIP: 0033:0x7f4c4f79fb19 [ 143.897158][ T1335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.897170][ T1335] RSP: 002b:00007f4c505fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.897187][ T1335] RAX: ffffffffffffffda RBX: 00007f4c4fa25fa0 RCX: 00007f4c4f79fb19 [ 143.897199][ T1335] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 143.897209][ T1335] RBP: 00007f4c505fa090 R08: 0000000000000000 R09: 0000000000000000 [ 143.897219][ T1335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.897229][ T1335] R13: 00007f4c4fa26038 R14: 00007f4c4fa25fa0 R15: 00007ffe0f1b3408 [ 143.897242][ T1335] [ 144.108843][ T1336] netlink: 56 bytes leftover after parsing attributes in process `syz.3.364'. [ 144.711905][ T382] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 144.863465][ T382] usb 5-1: unable to get BOS descriptor or descriptor too short [ 144.872107][ T382] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.882289][ T382] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.892907][ T382] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 144.902028][ T382] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.910083][ T382] usb 5-1: Product: syz [ 144.914350][ T382] usb 5-1: Manufacturer: syz [ 144.918973][ T382] usb 5-1: SerialNumber: syz [ 144.926890][ T382] usb 5-1: selecting invalid altsetting 1 [ 144.932897][ T382] usb 5-1: unit 6 not found! [ 145.127430][ T382] usb 5-1: 2:0: cannot get min/max values for control 1 (id 2) [ 145.151942][ T382] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 145.168524][ T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card2/controlC2/../uevent} for writing: No such file or directory [ 145.287105][ T1373] FAULT_INJECTION: forcing a failure. [ 145.287105][ T1373] name failslab, interval 1, probability 0, space 0, times 0 [ 145.299801][ T1373] CPU: 0 UID: 0 PID: 1373 Comm: syz.1.403 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 145.299827][ T1373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 145.299838][ T1373] Call Trace: [ 145.299844][ T1373] [ 145.299851][ T1373] __dump_stack+0x21/0x30 [ 145.299870][ T1373] dump_stack_lvl+0x140/0x1c0 [ 145.299884][ T1373] ? __cfi_dump_stack_lvl+0x10/0x10 [ 145.299899][ T1373] ? is_bpf_text_address+0x17b/0x1a0 [ 145.299920][ T1373] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 145.299938][ T1373] dump_stack+0x19/0x20 [ 145.299952][ T1373] should_fail_ex+0x3c2/0x510 [ 145.299993][ T1373] should_failslab+0xac/0x100 [ 145.300017][ T1373] __kmalloc_node_noprof+0x69/0x500 [ 145.300052][ T1373] ? __kvmalloc_node_noprof+0x128/0x300 [ 145.300080][ T1373] ? __kasan_check_write+0x18/0x20 [ 145.300104][ T1373] __kvmalloc_node_noprof+0x128/0x300 [ 145.300126][ T1373] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 145.300147][ T1373] ? xas_start+0x317/0x3e0 [ 145.300165][ T1373] ? __kasan_check_write+0x18/0x20 [ 145.300187][ T1373] ? enqueue_timer+0x1c5/0x4b0 [ 145.300205][ T1373] __kvm_mmu_topup_memory_cache+0x58e/0x7e0 [ 145.300222][ T1373] ? mutex_unlock+0x90/0x240 [ 145.300245][ T1373] kvm_mmu_topup_memory_cache+0x24/0x30 [ 145.300262][ T1373] kvm_mmu_load+0xa1/0x2900 [ 145.300285][ T1373] ? kvm_hv_setup_tsc_page+0x5f6/0xa80 [ 145.300301][ T1373] ? vmx_flush_tlb_guest+0x1d3/0x3b0 [ 145.300323][ T1373] ? kvm_apic_has_interrupt+0x77a/0x790 [ 145.300348][ T1373] ? kvm_vcpu_flush_tlb_guest+0xfe/0x220 [ 145.300367][ T1373] vcpu_run+0x4d56/0x7810 [ 145.300391][ T1373] ? kvm_sched_clock_read+0x15/0x30 [ 145.300423][ T1373] ? signal_pending+0xc0/0xc0 [ 145.300446][ T1373] ? __kasan_check_write+0x18/0x20 [ 145.300468][ T1373] ? xfd_validate_state+0x68/0x140 [ 145.300483][ T1373] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 145.300504][ T1373] ? __kasan_check_write+0x18/0x20 [ 145.300527][ T1373] ? fpregs_mark_activate+0x68/0x160 [ 145.300548][ T1373] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 145.300569][ T1373] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 145.300591][ T1373] kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0 [ 145.300616][ T1373] ? _parse_integer_limit+0x195/0x1e0 [ 145.300641][ T1373] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 145.300666][ T1373] ? kstrtoull+0x13b/0x1e0 [ 145.300688][ T1373] ? kstrtouint+0x78/0xf0 [ 145.300710][ T1373] ? ioctl_has_perm+0x1bc/0x500 [ 145.300735][ T1373] ? __asan_memcpy+0x5a/0x80 [ 145.300764][ T1373] ? ioctl_has_perm+0x408/0x500 [ 145.300788][ T1373] ? has_cap_mac_admin+0xd0/0xd0 [ 145.300812][ T1373] ? __kasan_check_write+0x18/0x20 [ 145.300835][ T1373] ? mutex_lock_killable+0x97/0x1d0 [ 145.300856][ T1373] ? __cfi_mutex_lock_killable+0x10/0x10 [ 145.300877][ T1373] ? proc_fail_nth_write+0x184/0x220 [ 145.300901][ T1373] kvm_vcpu_ioctl+0xa43/0x1000 [ 145.300920][ T1373] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 145.300937][ T1373] ? hook_file_ioctl+0x1ef/0x590 [ 145.300959][ T1373] ? __cfi_vfs_write+0x10/0x10 [ 145.300983][ T1373] ? __cfi_hook_file_ioctl+0x10/0x10 [ 145.301004][ T1373] ? __kasan_check_write+0x18/0x20 [ 145.301026][ T1373] ? mutex_unlock+0x90/0x240 [ 145.301047][ T1373] ? __cfi_mutex_unlock+0x10/0x10 [ 145.301088][ T1373] ? __fget_files+0x2bc/0x330 [ 145.301112][ T1373] ? bpf_lsm_file_ioctl+0xd/0x20 [ 145.301137][ T1373] ? security_file_ioctl+0x3e/0x110 [ 145.301171][ T1373] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 145.301188][ T1373] __se_sys_ioctl+0x123/0x1b0 [ 145.301206][ T1373] __x64_sys_ioctl+0x7f/0xa0 [ 145.301222][ T1373] x64_sys_call+0x1878/0x2ee0 [ 145.301240][ T1373] do_syscall_64+0x57/0xf0 [ 145.301258][ T1373] ? clear_bhb_loop+0x50/0xa0 [ 145.301281][ T1373] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 145.301303][ T1373] RIP: 0033:0x7f8ce0b9fb19 [ 145.301317][ T1373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.301331][ T1373] RSP: 002b:00007f8ce1b42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.301349][ T1373] RAX: ffffffffffffffda RBX: 00007f8ce0e25fa0 RCX: 00007f8ce0b9fb19 [ 145.301361][ T1373] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 145.301372][ T1373] RBP: 00007f8ce1b42090 R08: 0000000000000000 R09: 0000000000000000 [ 145.301382][ T1373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.301392][ T1373] R13: 00007f8ce0e26038 R14: 00007f8ce0e25fa0 R15: 00007ffcdf935838 [ 145.301406][ T1373] [ 145.744678][ T10] usb 4-1: USB disconnect, device number 14 [ 145.825366][ T381] usb 5-1: USB disconnect, device number 2 [ 145.983821][ T36] audit: type=1400 audit(1794192021.640:257): avc: denied { connect } for pid=1394 comm="syz.1.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 146.061109][ T1399] FAULT_INJECTION: forcing a failure. [ 146.061109][ T1399] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 146.062153][ T382] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 146.074832][ T1399] CPU: 1 UID: 0 PID: 1399 Comm: syz.1.414 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 146.074921][ T1399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 146.074954][ T1399] Call Trace: [ 146.074983][ T1399] [ 146.075005][ T1399] __dump_stack+0x21/0x30 [ 146.075087][ T1399] dump_stack_lvl+0x140/0x1c0 [ 146.075139][ T1399] ? __cfi_dump_stack_lvl+0x10/0x10 [ 146.075193][ T1399] ? __alloc_pages_noprof+0x35a/0x7e0 [ 146.075276][ T1399] dump_stack+0x19/0x20 [ 146.075328][ T1399] should_fail_ex+0x3c2/0x510 [ 146.075387][ T1399] should_fail_alloc_page+0xec/0x110 [ 146.075451][ T1399] __alloc_pages_noprof+0x1c0/0x7e0 [ 146.075528][ T1399] ? kernel_text_address+0xa9/0xe0 [ 146.075620][ T1399] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 146.075694][ T1399] ? unwind_get_return_address+0x51/0x90 [ 146.075777][ T1399] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 146.075840][ T1399] get_free_pages_noprof+0x14/0x40 [ 146.075935][ T1399] kasan_populate_vmalloc_pte+0x4c/0x170 [ 146.076050][ T1399] __apply_to_page_range+0x7c2/0xd00 [ 146.076114][ T1399] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 146.076204][ T1399] ? __x64_sys_ioctl+0x7f/0xa0 [ 146.076266][ T1399] ? apply_to_page_range+0x60/0x60 [ 146.076320][ T1399] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 146.076409][ T1399] apply_to_page_range+0x3f/0x60 [ 146.076461][ T1399] kasan_populate_vmalloc+0x64/0x80 [ 146.076548][ T1399] alloc_vmap_area+0x1e8e/0x26f0 [ 146.076629][ T1399] ? kasan_save_alloc_info+0x3a/0x50 [ 146.076702][ T1399] ? vm_map_ram+0xdd0/0xdd0 [ 146.076773][ T1399] ? __kmalloc_cache_node_noprof+0x225/0x430 [ 146.076864][ T1399] ? __get_vm_area_node+0x150/0x390 [ 146.076939][ T1399] __get_vm_area_node+0x1f8/0x390 [ 146.077013][ T1399] __vmalloc_node_range_noprof+0x340/0x1300 [ 146.077102][ T1399] ? copy_process+0x579/0x33a0 [ 146.077193][ T1399] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 146.077281][ T1399] ? kasan_save_alloc_info+0x3a/0x50 [ 146.077383][ T1399] ? __kasan_slab_alloc+0x73/0x90 [ 146.077451][ T1399] ? arch_dup_task_struct+0x5b/0xe0 [ 146.077506][ T1399] ? __asan_memcpy+0x5a/0x80 [ 146.077591][ T1399] dup_task_struct+0x5d6/0xd80 [ 146.077670][ T1399] ? copy_process+0x579/0x33a0 [ 146.077745][ T1399] ? _raw_spin_lock_irq+0x93/0x120 [ 146.077807][ T1399] ? copy_process+0x33a0/0x33a0 [ 146.077888][ T1399] ? __kasan_check_write+0x18/0x20 [ 146.077969][ T1399] copy_process+0x579/0x33a0 [ 146.078064][ T1399] ? kasan_save_alloc_info+0x3a/0x50 [ 146.078145][ T1399] ? __cfi_copy_process+0x10/0x10 [ 146.078219][ T1399] ? __kmalloc_cache_noprof+0x23c/0x470 [ 146.078308][ T1399] ? __kasan_check_write+0x18/0x20 [ 146.078382][ T1399] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 146.078463][ T1399] vhost_task_create+0x1f7/0x3f0 [ 146.078563][ T1399] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 146.078646][ T1399] ? __cfi_vhost_task_create+0x10/0x10 [ 146.078754][ T1399] ? __cfi_vhost_task_fn+0x10/0x10 [ 146.078831][ T1399] ? __kasan_check_write+0x18/0x20 [ 146.078905][ T1399] ? mutex_lock+0x97/0x1d0 [ 146.078969][ T1399] ? __cfi_mutex_lock+0x10/0x10 [ 146.079059][ T1399] ? kernel_text_address+0xa9/0xe0 [ 146.079194][ T1399] kvm_mmu_post_init_vm+0x161/0x300 [ 146.079250][ T1399] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 146.079333][ T1399] ? _parse_integer_limit+0x195/0x1e0 [ 146.079411][ T1399] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 146.079488][ T1399] ? kstrtoull+0x13b/0x1e0 [ 146.079557][ T1399] ? kstrtouint+0x78/0xf0 [ 146.079626][ T1399] ? ioctl_has_perm+0x1bc/0x500 [ 146.079708][ T1399] ? __asan_memcpy+0x5a/0x80 [ 146.079790][ T1399] ? ioctl_has_perm+0x408/0x500 [ 146.079872][ T1399] ? has_cap_mac_admin+0xd0/0xd0 [ 146.079956][ T1399] ? __kasan_check_write+0x18/0x20 [ 146.080047][ T1399] ? mutex_lock_killable+0x97/0x1d0 [ 146.080152][ T1399] ? __cfi_mutex_lock_killable+0x10/0x10 [ 146.080232][ T1399] ? proc_fail_nth_write+0x184/0x220 [ 146.080301][ T1399] kvm_vcpu_ioctl+0xa43/0x1000 [ 146.080372][ T1399] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 146.080427][ T1399] ? hook_file_ioctl+0x1ef/0x590 [ 146.080507][ T1399] ? __cfi_vfs_write+0x10/0x10 [ 146.080582][ T1399] ? __cfi_hook_file_ioctl+0x10/0x10 [ 146.080655][ T1399] ? __kasan_check_write+0x18/0x20 [ 146.080736][ T1399] ? mutex_unlock+0x90/0x240 [ 146.080810][ T1399] ? __cfi_mutex_unlock+0x10/0x10 [ 146.080877][ T1399] ? __fget_files+0x2bc/0x330 [ 146.080940][ T1399] ? bpf_lsm_file_ioctl+0xd/0x20 [ 146.081002][ T1399] ? security_file_ioctl+0x3e/0x110 [ 146.081093][ T1399] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 146.081155][ T1399] __se_sys_ioctl+0x123/0x1b0 [ 146.081223][ T1399] __x64_sys_ioctl+0x7f/0xa0 [ 146.081277][ T1399] x64_sys_call+0x1878/0x2ee0 [ 146.081339][ T1399] do_syscall_64+0x57/0xf0 [ 146.081399][ T1399] ? clear_bhb_loop+0x50/0xa0 [ 146.081487][ T1399] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 146.081563][ T1399] RIP: 0033:0x7f8ce0b9fb19 [ 146.081615][ T1399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.081660][ T1399] RSP: 002b:00007f8ce1b42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.081728][ T1399] RAX: ffffffffffffffda RBX: 00007f8ce0e25fa0 RCX: 00007f8ce0b9fb19 [ 146.081771][ T1399] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 146.081810][ T1399] RBP: 00007f8ce1b42090 R08: 0000000000000000 R09: 0000000000000000 [ 146.081859][ T1399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.081872][ T1399] R13: 00007f8ce0e26038 R14: 00007f8ce0e25fa0 R15: 00007ffcdf935838 [ 146.081889][ T1399] [ 146.082792][ T1399] syz.1.414: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 146.263799][ T382] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.270701][ T1399] ,cpuset= [ 146.276264][ T382] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.280284][ T1399] syz1 [ 146.294311][ T382] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 146.304847][ T1399] ,mems_allowed=0 [ 146.310222][ T382] usb 3-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 146.314906][ T1399] [ 146.314919][ T1399] CPU: 1 UID: 0 PID: 1399 Comm: syz.1.414 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 146.314977][ T1399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 146.315031][ T1399] Call Trace: [ 146.315059][ T1399] [ 146.315093][ T1399] __dump_stack+0x21/0x30 [ 146.315180][ T1399] dump_stack_lvl+0x140/0x1c0 [ 146.315242][ T1399] ? __cfi_dump_stack_lvl+0x10/0x10 [ 146.315302][ T1399] dump_stack+0x19/0x20 [ 146.315353][ T1399] warn_alloc+0x1e7/0x2c0 [ 146.315426][ T1399] ? kasan_save_track+0x3e/0x80 [ 146.315487][ T1399] ? __cfi_warn_alloc+0x10/0x10 [ 146.315550][ T1399] ? __get_vm_area_node+0x211/0x390 [ 146.315627][ T1399] ? __get_vm_area_node+0x211/0x390 [ 146.315708][ T1399] __vmalloc_node_range_noprof+0x365/0x1300 [ 146.315801][ T1399] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 146.315876][ T1399] ? kasan_save_alloc_info+0x3a/0x50 [ 146.315957][ T1399] ? __kasan_slab_alloc+0x73/0x90 [ 146.316018][ T1399] ? arch_dup_task_struct+0x5b/0xe0 [ 146.316099][ T1399] ? __asan_memcpy+0x5a/0x80 [ 146.316183][ T1399] dup_task_struct+0x5d6/0xd80 [ 146.316265][ T1399] ? copy_process+0x579/0x33a0 [ 146.316341][ T1399] ? _raw_spin_lock_irq+0x93/0x120 [ 146.316411][ T1399] ? copy_process+0x33a0/0x33a0 [ 146.316520][ T1399] ? __kasan_check_write+0x18/0x20 [ 146.316598][ T1399] copy_process+0x579/0x33a0 [ 146.316693][ T1399] ? kasan_save_alloc_info+0x3a/0x50 [ 146.316776][ T1399] ? __cfi_copy_process+0x10/0x10 [ 146.316857][ T1399] ? __kmalloc_cache_noprof+0x23c/0x470 [ 146.316942][ T1399] ? __kasan_check_write+0x18/0x20 [ 146.317023][ T1399] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 146.317107][ T1399] vhost_task_create+0x1f7/0x3f0 [ 146.317179][ T1399] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 146.317260][ T1399] ? __cfi_vhost_task_create+0x10/0x10 [ 146.317340][ T1399] ? __cfi_vhost_task_fn+0x10/0x10 [ 146.317403][ T1399] ? __kasan_check_write+0x18/0x20 [ 146.317485][ T1399] ? mutex_lock+0x97/0x1d0 [ 146.317561][ T1399] ? __cfi_mutex_lock+0x10/0x10 [ 146.317621][ T1399] ? kernel_text_address+0xa9/0xe0 [ 146.317714][ T1399] kvm_mmu_post_init_vm+0x161/0x300 [ 146.317776][ T1399] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 146.317887][ T1399] ? _parse_integer_limit+0x195/0x1e0 [ 146.317986][ T1399] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 146.318088][ T1399] ? kstrtoull+0x13b/0x1e0 [ 146.318162][ T1399] ? kstrtouint+0x78/0xf0 [ 146.318238][ T1399] ? ioctl_has_perm+0x1bc/0x500 [ 146.318321][ T1399] ? __asan_memcpy+0x5a/0x80 [ 146.318404][ T1399] ? ioctl_has_perm+0x408/0x500 [ 146.318489][ T1399] ? has_cap_mac_admin+0xd0/0xd0 [ 146.318573][ T1399] ? __kasan_check_write+0x18/0x20 [ 146.318650][ T1399] ? mutex_lock_killable+0x97/0x1d0 [ 146.318725][ T1399] ? __cfi_mutex_lock_killable+0x10/0x10 [ 146.318806][ T1399] ? proc_fail_nth_write+0x184/0x220 [ 146.318881][ T1399] kvm_vcpu_ioctl+0xa43/0x1000 [ 146.318947][ T1399] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 146.319010][ T1399] ? hook_file_ioctl+0x1ef/0x590 [ 146.319092][ T1399] ? __cfi_vfs_write+0x10/0x10 [ 146.319183][ T1399] ? __cfi_hook_file_ioctl+0x10/0x10 [ 146.319265][ T1399] ? __kasan_check_write+0x18/0x20 [ 146.319340][ T1399] ? mutex_unlock+0x90/0x240 [ 146.319412][ T1399] ? __cfi_mutex_unlock+0x10/0x10 [ 146.319501][ T1399] ? __fget_files+0x2bc/0x330 [ 146.319543][ T1399] ? bpf_lsm_file_ioctl+0xd/0x20 [ 146.319640][ T1399] ? security_file_ioctl+0x3e/0x110 [ 146.319740][ T1399] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 146.319804][ T1399] __se_sys_ioctl+0x123/0x1b0 [ 146.319867][ T1399] __x64_sys_ioctl+0x7f/0xa0 [ 146.319922][ T1399] x64_sys_call+0x1878/0x2ee0 [ 146.319992][ T1399] do_syscall_64+0x57/0xf0 [ 146.320046][ T1399] ? clear_bhb_loop+0x50/0xa0 [ 146.320136][ T1399] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 146.320217][ T1399] RIP: 0033:0x7f8ce0b9fb19 [ 146.320278][ T1399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.320324][ T1399] RSP: 002b:00007f8ce1b42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.320393][ T1399] RAX: ffffffffffffffda RBX: 00007f8ce0e25fa0 RCX: 00007f8ce0b9fb19 [ 146.320435][ T1399] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 146.320476][ T1399] RBP: 00007f8ce1b42090 R08: 0000000000000000 R09: 0000000000000000 [ 146.320516][ T1399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.320551][ T1399] R13: 00007f8ce0e26038 R14: 00007f8ce0e25fa0 R15: 00007ffcdf935838 [ 146.320598][ T1399] [ 146.320638][ T1399] Mem-Info: [ 146.325461][ T382] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.370043][ T1399] active_anon:7260 inactive_anon:0 isolated_anon:0 [ 146.370043][ T1399] active_file:18868 inactive_file:2608 isolated_file:0 [ 146.370043][ T1399] unevictable:0 dirty:43 writeback:0 [ 146.370043][ T1399] slab_reclaimable:4153 slab_unreclaimable:73717 [ 146.370043][ T1399] mapped:24927 shmem:172 pagetables:788 [ 146.370043][ T1399] sec_pagetables:0 bounce:0 [ 146.370043][ T1399] kernel_misc_reclaimable:0 [ 146.370043][ T1399] free:1522107 free_pcp:3100 free_cma:0 [ 146.375669][ T382] usb 3-1: config 0 descriptor?? [ 146.580553][ T1377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.593238][ T1399] Node 0 active_anon:28532kB inactive_anon:0kB active_file:75472kB inactive_file:10432kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99724kB dirty:184kB writeback:0kB shmem:692kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4608kB pagetables:3288kB sec_pagetables:0kB all_unreclaimable? no [ 146.617163][ T1377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.625699][ T1399] DMA32 free:2949972kB boost:0kB min:19052kB low:23812kB high:28572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2954996kB mlocked:0kB bounce:0kB free_pcp:5024kB local_pcp:0kB free_cma:0kB [ 147.275638][ T1399] lowmem_reserve[]: 0 3920 3920 [ 147.280634][ T1399] Normal free:3142884kB boost:0kB min:26000kB low:32500kB high:39000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28376kB inactive_anon:0kB active_file:75472kB inactive_file:10432kB unevictable:0kB writepending:188kB present:5242880kB managed:4014840kB mlocked:0kB bounce:0kB free_pcp:4128kB local_pcp:1668kB free_cma:0kB [ 147.312410][ T1399] lowmem_reserve[]: 0 0 0 [ 147.316816][ T1399] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 5*64kB (M) 4*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 716*4096kB (M) = 2949972kB [ 147.350653][ T1399] Normal: 151*4kB (UM) 152*8kB (ME) 528*16kB (ME) 372*32kB (UME) 417*64kB (UME) 107*128kB (UME) 28*256kB (UME) 31*512kB (UM) 24*1024kB (UM) 10*2048kB (UME) 736*4096kB (M) = 3145308kB [ 147.375033][ T1399] 22153 total pagecache pages [ 147.379786][ T1399] 0 pages in swap cache [ 147.384616][ T1399] Free swap = 124996kB [ 147.389166][ T1399] Total swap = 124996kB [ 147.393529][ T1399] 2097051 pages RAM [ 147.397422][ T1399] 0 pages HighMem/MovableOnly [ 147.402419][ T1399] 354592 pages reserved [ 147.406611][ T1399] 0 pages cma reserved [ 147.414735][ T1399] Memory allocations: [ 147.418796][ T1399] 0 B 0 init/main.c:1477 func:do_initcalls [ 147.426845][ T1399] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 147.435343][ T1399] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 147.443330][ T1399] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 147.451318][ T1399] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 147.459897][ T1399] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 147.469977][ T1399] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 147.485054][ T1399] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 147.493729][ T1399] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 147.503401][ T1399] 0 B 0 init/initramfs.c:101 func:find_link [ 147.581897][ T309] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 147.593527][ T382] usb 3-1: string descriptor 0 read error: -71 [ 147.607993][ T382] usbhid 3-1:0.0: can't add hid device: -71 [ 147.614086][ T382] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 147.626712][ T382] usb 3-1: USB disconnect, device number 9 [ 147.700772][ T36] audit: type=1400 audit(1794192023.360:258): avc: denied { create } for pid=1427 comm="syz.2.424" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 147.723063][ T36] audit: type=1400 audit(1794192023.360:259): avc: denied { write } for pid=1427 comm="syz.2.424" name="file2" dev="tmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 147.733937][ T309] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.746191][ T36] audit: type=1400 audit(1794192023.360:260): avc: denied { open } for pid=1427 comm="syz.2.424" path="/123/file2" dev="tmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 147.756734][ T309] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.786395][ T36] audit: type=1400 audit(1794192023.360:261): avc: denied { ioctl } for pid=1427 comm="syz.2.424" path="/123/file2" dev="tmpfs" ino=821 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 147.791343][ T309] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.813341][ T36] audit: type=1400 audit(1794192023.360:262): avc: denied { read write } for pid=1427 comm="syz.2.424" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 147.850220][ T36] audit: type=1400 audit(1794192023.360:263): avc: denied { open } for pid=1427 comm="syz.2.424" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 147.881949][ T309] usb 4-1: New USB device found, idVendor=056a, idProduct=00d2, bcdDevice= 0.00 [ 147.898994][ T309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.923121][ T309] usb 4-1: config 0 descriptor?? [ 147.949008][ T1439] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(9) [ 147.959278][ T1439] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(9) [ 148.152105][ T382] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 148.301912][ T382] usb 3-1: Using ep0 maxpacket: 16 [ 148.308348][ T382] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.318725][ T382] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.329296][ T382] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 148.338801][ T309] wacom 0003:056A:00D2.0003: Unknown device_type for 'HID 056a:00d2'. Assuming pen. [ 148.341187][ T382] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.356098][ T309] wacom 0003:056A:00D2.0003: hidraw0: USB HID v0.00 Device [HID 056a:00d2] on usb-dummy_hcd.3-1/input0 [ 148.361959][ T382] usb 3-1: Product: syz [ 148.371549][ T382] usb 3-1: Manufacturer: syz [ 148.374417][ T309] input: Wacom Bamboo Craft Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00D2.0003/input/input7 [ 148.388752][ T382] usb 3-1: SerialNumber: syz [ 148.533646][ T1410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.543051][ T1410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.543752][ T1454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.559467][ T1454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.569132][ T1410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.577860][ T1410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.606162][ T382] usb 3-1: 0:2 : does not exist [ 148.611246][ T382] usb 3-1: unit 6 not found! [ 148.619324][ T10] usb 4-1: USB disconnect, device number 15 [ 148.632006][ T382] usb 3-1: USB disconnect, device number 10 [ 148.648883][ T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card2/controlC2/../uevent} for writing: No such file or directory [ 148.798704][ T1462] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 148.801390][ T36] audit: type=1400 audit(1794192024.460:264): avc: denied { create } for pid=1461 comm="syz.4.433" name="memory.events.local" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 148.894590][ T36] audit: type=1400 audit(1794192024.460:265): avc: denied { associate } for pid=1461 comm="syz.4.433" name="memory.events.local" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 148.986684][ T36] audit: type=1400 audit(1794192024.460:266): avc: denied { read append open } for pid=1461 comm="syz.4.433" path="/27/memory.events.local" dev="tmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 149.135732][ T36] audit: type=1400 audit(1794192024.790:267): avc: denied { unlink } for pid=294 comm="syz-executor" name="file2" dev="tmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 149.312002][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 149.464519][ T10] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 149.475922][ T10] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.488836][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 149.495569][ T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 149.504874][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.515171][ T10] usb 2-1: config 0 descriptor?? [ 149.933029][ T10] lenovo 0003:17EF:6062.0004: ignoring exceeding usage max [ 149.952408][ T10] lenovo 0003:17EF:6062.0004: No inputs registered, leaving [ 149.962139][ T10] lenovo 0003:17EF:6062.0004: hidraw0: USB HID v0.10 Joystick [HID 17ef:6062] on usb-dummy_hcd.1-1/input0 [ 150.134332][ T10] usb 2-1: USB disconnect, device number 18 [ 150.281943][ T31] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 150.432710][ T31] usb 5-1: not running at top speed; connect to a high speed hub [ 150.441310][ T31] usb 5-1: config index 0 descriptor too short (expected 165, got 161) [ 150.449900][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.460214][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 150.469395][ T31] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 150.478668][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.697068][ T31] usb 5-1: string descriptor 0 read error: -71 [ 150.711940][ T31] uvcvideo 5-1:1.0: Found Unit with invalid ID 0 [ 150.731944][ T31] usb 5-1: Found UVC 1.00 device (0000:0000) [ 150.738978][ T31] usb 5-1: No valid video chain found. [ 150.753076][ T31] usb 5-1: USB disconnect, device number 4 [ 151.559008][ T1586] can0: slcan on ptm0. [ 151.570865][ T1586] 9pnet: Could not find request transport: fl(rfdno=0x000000000000000a [ 151.646275][ T1585] can0 (unregistered): slcan off ptm0. [ 152.067616][ T1652] SELinux: Context system_u:object_r:logrotate_var_lib_t:s0 is not valid (left unmapped). [ 152.131940][ T382] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 152.181955][ T10] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 152.281925][ T382] usb 5-1: Using ep0 maxpacket: 32 [ 152.288452][ T382] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 152.299729][ T382] usb 5-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.312787][ T382] usb 5-1: config 1 interface 0 has no altsetting 0 [ 152.319749][ T382] usb 5-1: language id specifier not provided by device, defaulting to English [ 152.322224][ T31] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 152.332362][ T382] usb 5-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.40 [ 152.345648][ T382] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.353748][ T382] usb 5-1: Product: syz [ 152.358095][ T382] usb 5-1: Manufacturer: syz [ 152.362774][ T382] usb 5-1: SerialNumber: syz [ 152.367828][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 152.376448][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 152.385187][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 152.397796][ T10] usb 4-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40 [ 152.402009][ T465] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 152.406987][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.422517][ T10] usb 4-1: Product: syz [ 152.426704][ T10] usb 4-1: Manufacturer: syz [ 152.431328][ T10] usb 4-1: SerialNumber: syz [ 152.493685][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 248, changing to 7 [ 152.506389][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 152.515564][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.523624][ T31] usb 2-1: Product: 얃ⳍ㱲ḣ䛃붻嚠ꞵ⸵뫨枀薅㱑❅诱ﻲꩆ軼硻踮﹕䲈趇ᰯ⨌䠈贈呯ີ錕꒸䧘낆濉梢翹↿昒ෑᖎ粗谁抠ﵔ쨞㸐岰빓๷飪셞⯎䁳蒕러氨ꄕ㺭譚ꁳ疗醷ㄇ䒁覴嵸멡䞯뗸替ᬜ䦗퍟삽헟ﱓ釷ꊉ좙 [ 152.552532][ T31] usb 2-1: Manufacturer: ӿ [ 152.557087][ T31] usb 2-1: SerialNumber: 쀦型䤔ᱬǯ厽囦슡꽢禲⡝琣㍾ﳬ颕爽ഹ᠛゙▇嵰⳦リૻ劇銰墝濢큓镄⌕㠈뛍ា嫱㫻홃☥䊵㥹狞롛਄㿴枷≲㾄呯蘍ﶷ젳迊讠⌳쐮ῡ闫㟀圩㌒᪋䋈㊳킹㞷맽夓↻䩁퉼沃묥⦧춓ޏ┉뚼㪿鈎特儈ℜ熄흗竲㓦⦾ [ 152.590677][ T382] usbhid 5-1:1.0: can't add hid device: -71 [ 152.596867][ T382] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 152.604058][ T465] usb 3-1: unable to get BOS descriptor or descriptor too short [ 152.612801][ T465] usb 3-1: not running at top speed; connect to a high speed hub [ 152.613005][ T382] usb 5-1: USB disconnect, device number 5 [ 152.621609][ T465] usb 3-1: config 4 has an invalid interface number: 106 but max is 0 [ 152.635081][ T465] usb 3-1: config 4 has no interface number 0 [ 152.641334][ T465] usb 3-1: config 4 interface 106 has no altsetting 0 [ 152.650544][ T465] usb 3-1: string descriptor 0 read error: -22 [ 152.656871][ T1647] netlink: 20 bytes leftover after parsing attributes in process `syz.3.490'. [ 152.665884][ T465] usb 3-1: New USB device found, idVendor=0408, idProduct=4033, bcdDevice=96.91 [ 152.673358][ T1647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.675013][ T465] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.688625][ T1647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.697821][ T465] usb 3-1: Found UVC 0.00 device (0408:4033) [ 152.706202][ T465] usb 3-1: Forcing UVC version to 1.0a [ 152.711729][ T465] usb 3-1: No valid video chain found. [ 152.770340][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 152.782707][ T10] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 152.794078][ T10] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 152.802063][ T31] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 152.807495][ T10] usb 4-1: USB disconnect, device number 16 [ 152.818553][ T31] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 152.830598][ T31] usb 2-1: USB disconnect, device number 19 [ 152.844040][ T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card2/controlC2/../uevent} for writing: No such file or directory [ 152.925922][ T1657] kvm: pic: non byte write [ 152.931586][ T465] usb 3-1: USB disconnect, device number 11 [ 153.159981][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 153.160000][ T36] audit: type=1400 audit(1794192028.820:301): avc: denied { mount } for pid=1667 comm="syz.4.498" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 153.500753][ T36] audit: type=1400 audit(1794192029.160:302): avc: denied { mounton } for pid=1682 comm="syz.2.503" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 153.501470][ T1683] syz.2.503: attempt to access beyond end of device [ 153.501470][ T1683] loop2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 153.537916][ T1683] EXT4-fs (loop2): unable to read superblock [ 153.997931][ T36] audit: type=1400 audit(1794192029.660:303): avc: denied { unmount } for pid=1244 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 154.017798][ T10] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 154.082338][ T36] audit: type=1400 audit(1794192029.750:304): avc: denied { ioctl } for pid=1699 comm="syz.4.508" path="pid:[4026532388]" dev="nsfs" ino=4026532388 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 154.107104][ T36] audit: type=1400 audit(1794192029.750:305): avc: denied { getattr } for pid=1699 comm="syz.4.508" name="/" dev="nsfs" ino=4026532388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 154.129391][ T36] audit: type=1400 audit(1794192029.770:306): avc: denied { append } for pid=1699 comm="syz.4.508" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 154.203493][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 154.211705][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 154.221950][ T10] usb 3-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 154.231288][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.239560][ T10] usb 3-1: Product: syz [ 154.243813][ T10] usb 3-1: Manufacturer: syz [ 154.248491][ T10] usb 3-1: SerialNumber: syz [ 154.418446][ T36] audit: type=1400 audit(1794192030.080:307): avc: denied { read } for pid=1708 comm="syz.1.511" name="/" dev="configfs" ino=2578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 154.439680][ T1709] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=1709 comm=syz.1.511 [ 154.440928][ T36] audit: type=1400 audit(1794192030.080:308): avc: denied { open } for pid=1708 comm="syz.1.511" path="/" dev="configfs" ino=2578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 154.475595][ T36] audit: type=1400 audit(1794192030.080:309): avc: denied { write } for pid=1710 comm="syz.1.511" name="/" dev="configfs" ino=2578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 154.497917][ T36] audit: type=1400 audit(1794192030.080:310): avc: denied { add_name } for pid=1710 comm="syz.1.511" name="core" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 154.529072][ T1712] FAULT_INJECTION: forcing a failure. [ 154.529072][ T1712] name failslab, interval 1, probability 0, space 0, times 0 [ 154.541788][ T1712] CPU: 1 UID: 0 PID: 1712 Comm: syz.1.512 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 154.541825][ T1712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 154.541845][ T1712] Call Trace: [ 154.541853][ T1712] [ 154.541862][ T1712] __dump_stack+0x21/0x30 [ 154.541889][ T1712] dump_stack_lvl+0x140/0x1c0 [ 154.541911][ T1712] ? __cfi_dump_stack_lvl+0x10/0x10 [ 154.541935][ T1712] dump_stack+0x19/0x20 [ 154.541953][ T1712] should_fail_ex+0x3c2/0x510 [ 154.541973][ T1712] ? __register_sysctl_table+0x7c/0x1440 [ 154.542004][ T1712] should_failslab+0xac/0x100 [ 154.542029][ T1712] __kmalloc_noprof+0x69/0x510 [ 154.542062][ T1712] ? __register_sysctl_table+0x7c/0x1440 [ 154.542090][ T1712] ? inet_netconf_notify_devconf+0x1c6/0x240 [ 154.542127][ T1712] __register_sysctl_table+0x7c/0x1440 [ 154.542158][ T1712] register_net_sysctl_sz+0x245/0x260 [ 154.542191][ T1712] devinet_init_net+0x33d/0x740 [ 154.542212][ T1712] ops_init+0x302/0x5d0 [ 154.542233][ T1712] ? __kasan_check_write+0x18/0x20 [ 154.542266][ T1712] ? rwsem_read_trylock+0x275/0x5a0 [ 154.542296][ T1712] setup_net+0x227/0x9b0 [ 154.542329][ T1712] ? copy_net_ns+0xa20/0xa20 [ 154.542372][ T1712] ? down_read_killable+0x7f/0x100 [ 154.542404][ T1712] ? __cfi_down_read_killable+0x10/0x10 [ 154.542441][ T1712] copy_net_ns+0x4fc/0xa20 [ 154.542474][ T1712] create_new_namespaces+0x390/0x6f0 [ 154.542500][ T1712] unshare_nsproxy_namespaces+0x124/0x180 [ 154.542523][ T1712] ksys_unshare+0x4f9/0x920 [ 154.542543][ T1712] ? __cfi_ksys_unshare+0x10/0x10 [ 154.542569][ T1712] ? __kasan_check_write+0x18/0x20 [ 154.542624][ T1712] __x64_sys_unshare+0x3c/0x50 [ 154.542645][ T1712] x64_sys_call+0x2998/0x2ee0 [ 154.542670][ T1712] do_syscall_64+0x57/0xf0 [ 154.542696][ T1712] ? clear_bhb_loop+0x50/0xa0 [ 154.542721][ T1712] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 154.542762][ T1712] RIP: 0033:0x7f8ce0b9fb19 [ 154.542781][ T1712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.542800][ T1712] RSP: 002b:00007f8ce1b42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 154.542824][ T1712] RAX: ffffffffffffffda RBX: 00007f8ce0e25fa0 RCX: 00007f8ce0b9fb19 [ 154.542842][ T1712] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 154.542857][ T1712] RBP: 00007f8ce0c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 154.542870][ T1712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.542886][ T1712] R13: 00007f8ce0e26038 R14: 00007f8ce0e25fa0 R15: 00007ffcdf935838 [ 154.542907][ T1712] [ 155.121957][ T382] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 155.141921][ T64] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 155.281921][ T382] usb 5-1: Using ep0 maxpacket: 8 [ 155.288311][ T382] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.298868][ T382] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 155.308138][ T64] usb 2-1: Using ep0 maxpacket: 16 [ 155.313372][ T382] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 155.324380][ T64] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.334565][ T64] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.343576][ T382] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 155.352759][ T382] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.360832][ T382] usb 5-1: Product: syz [ 155.365138][ T382] usb 5-1: Manufacturer: syz [ 155.369808][ T382] usb 5-1: SerialNumber: syz [ 155.375306][ T64] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.384482][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.392947][ T64] usb 2-1: Product: syz [ 155.397210][ T64] usb 2-1: Manufacturer: syz [ 155.402025][ T64] usb 2-1: SerialNumber: syz [ 155.610767][ T64] usb 2-1: 0:2 : does not exist [ 155.617824][ T64] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 155.629762][ T64] usb 2-1: USB disconnect, device number 20 [ 155.847782][ T1735] FAULT_INJECTION: forcing a failure. [ 155.847782][ T1735] name failslab, interval 1, probability 0, space 0, times 0 [ 155.860641][ T1735] CPU: 1 UID: 0 PID: 1735 Comm: syz.3.519 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 155.860678][ T1735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 155.860694][ T1735] Call Trace: [ 155.860702][ T1735] [ 155.860711][ T1735] __dump_stack+0x21/0x30 [ 155.860741][ T1735] dump_stack_lvl+0x140/0x1c0 [ 155.860778][ T1735] ? __cfi_dump_stack_lvl+0x10/0x10 [ 155.860803][ T1735] dump_stack+0x19/0x20 [ 155.860823][ T1735] should_fail_ex+0x3c2/0x510 [ 155.860847][ T1735] should_failslab+0xac/0x100 [ 155.860870][ T1735] kmem_cache_alloc_noprof+0x42/0x410 [ 155.860896][ T1735] ? alloc_empty_file+0xbf/0x270 [ 155.860933][ T1735] ? _raw_spin_unlock+0x45/0x60 [ 155.860959][ T1735] alloc_empty_file+0xbf/0x270 [ 155.860983][ T1735] ? _raw_spin_unlock+0x45/0x60 [ 155.861010][ T1735] alloc_file_pseudo+0x142/0x1f0 [ 155.861030][ T1735] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 155.861050][ T1735] ? shmem_get_inode+0x81c/0xc10 [ 155.861087][ T1735] ? __kasan_check_write+0x18/0x20 [ 155.861118][ T1735] ? clear_nlink+0x8e/0xf0 [ 155.861155][ T1735] __shmem_file_setup+0x242/0x2c0 [ 155.861172][ T1735] shmem_zero_setup+0x90/0x130 [ 155.861188][ T1735] mmap_region+0x1659/0x1d10 [ 155.861231][ T1735] ? __cfi_mmap_region+0x10/0x10 [ 155.861266][ T1735] ? __cfi_arch_get_unmapped_area_topdown+0x10/0x10 [ 155.861302][ T1735] ? __cfi_try_to_wake_up+0x10/0x10 [ 155.861327][ T1735] ? __kasan_check_read+0x15/0x20 [ 155.861353][ T1735] ? __get_unmapped_area+0x406/0x470 [ 155.861401][ T1735] do_mmap+0xa47/0x1370 [ 155.861432][ T1735] ? __cfi_selinux_mmap_file+0x10/0x10 [ 155.861467][ T1735] ? __cfi_do_mmap+0x10/0x10 [ 155.861498][ T1735] ? __kasan_check_write+0x18/0x20 [ 155.861531][ T1735] ? down_write_killable+0xee/0x2d0 [ 155.861563][ T1735] ? __cfi_down_write_killable+0x10/0x10 [ 155.861599][ T1735] ? do_futex+0x37d/0x510 [ 155.861618][ T1735] vm_mmap_pgoff+0x367/0x4b0 [ 155.861658][ T1735] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 155.861692][ T1735] ? xfd_validate_state+0x68/0x140 [ 155.861714][ T1735] ksys_mmap_pgoff+0xfa/0x1e0 [ 155.861748][ T1735] ? __kasan_check_write+0x18/0x20 [ 155.861774][ T1735] __x64_sys_mmap+0x121/0x140 [ 155.861791][ T1735] x64_sys_call+0x13bf/0x2ee0 [ 155.861830][ T1735] do_syscall_64+0x57/0xf0 [ 155.861857][ T1735] ? clear_bhb_loop+0x50/0xa0 [ 155.861890][ T1735] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 155.861920][ T1735] RIP: 0033:0x7fa78219fb19 [ 155.861958][ T1735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.861978][ T1735] RSP: 002b:00007fa782fd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 155.862003][ T1735] RAX: ffffffffffffffda RBX: 00007fa782425fa0 RCX: 00007fa78219fb19 [ 155.862020][ T1735] RDX: 000000000300000b RSI: 0000000007effffe RDI: 000000110c230000 [ 155.862035][ T1735] RBP: 00007fa782237b70 R08: 0000000000000005 R09: 0000000000000000 [ 155.862054][ T1735] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 155.862065][ T1735] R13: 00007fa782426038 R14: 00007fa782425fa0 R15: 00007ffc1c2d6018 [ 155.862080][ T1735] [ 156.156361][ T382] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 156.156469][ T382] usb 5-1: clock source 0 is not valid, cannot use [ 156.387420][ T382] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 156.404551][ T382] usb 5-1: USB disconnect, device number 6 [ 156.412131][ T465] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 156.439841][ T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card2/controlC2/../uevent} for writing: No such file or directory [ 156.561925][ T465] usb 4-1: device descriptor read/64, error -71 [ 156.628782][ T10] usb 3-1: MIDIStreaming interface descriptor not found [ 156.640886][ T10] usb 3-1: USB disconnect, device number 12 [ 156.653839][ T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card2/controlC2/../uevent} for writing: No such file or directory [ 156.801981][ T465] usb 4-1: device descriptor read/64, error -71 [ 156.831978][ T64] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 156.981908][ T64] usb 2-1: Using ep0 maxpacket: 32 [ 156.988288][ T64] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 250, changing to 11 [ 156.999441][ T64] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 41089, setting to 1024 [ 157.012067][ T64] usb 2-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 157.021142][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.029213][ T64] usb 2-1: Product: syz [ 157.033417][ T64] usb 2-1: Manufacturer: syz [ 157.038029][ T64] usb 2-1: SerialNumber: syz [ 157.052125][ T465] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 157.181961][ T309] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 157.189573][ T465] usb 4-1: device descriptor read/64, error -71 [ 157.249447][ T64] usb 2-1: USB disconnect, device number 21 [ 157.259767][ T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card2/controlC2/../uevent} for writing: No such file or directory [ 157.353034][ T309] usb 5-1: config 1 has an invalid interface number: 188 but max is 0 [ 157.361293][ T309] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.371459][ T309] usb 5-1: config 1 has no interface number 0 [ 157.377697][ T309] usb 5-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 157.391102][ T309] usb 5-1: config 1 interface 188 has no altsetting 0 [ 157.399500][ T309] usb 5-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b [ 157.408871][ T309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.417322][ T309] usb 5-1: Product: syz [ 157.421556][ T309] usb 5-1: Manufacturer: syz [ 157.426236][ T309] usb 5-1: SerialNumber: syz [ 157.441929][ T465] usb 4-1: device descriptor read/64, error -71 [ 157.552079][ T465] usb usb4-port1: attempt power cycle [ 157.635191][ T309] usb 5-1: unknown interface protocol 0xc1, assuming v1 [ 157.642433][ T309] usb 5-1: 188:0 : does not exist [ 157.650031][ T309] usb 5-1: USB disconnect, device number 7 [ 157.661686][ T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.188/sound/card2/controlC2/../uevent} for writing: No such file or directory [ 157.891938][ T465] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 157.913083][ T465] usb 4-1: device descriptor read/8, error -71 [ 157.975122][ T1782] syz.1.533 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 157.985023][ T1782] CPU: 0 UID: 0 PID: 1782 Comm: syz.1.533 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 157.985058][ T1782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 157.985072][ T1782] Call Trace: [ 157.985096][ T1782] [ 157.985102][ T1782] __dump_stack+0x21/0x30 [ 157.985122][ T1782] dump_stack_lvl+0x140/0x1c0 [ 157.985138][ T1782] ? __cfi_dump_stack_lvl+0x10/0x10 [ 157.985153][ T1782] ? ___ratelimit+0x41c/0x5c0 [ 157.985174][ T1782] ? __kasan_check_write+0x18/0x20 [ 157.985198][ T1782] dump_stack+0x19/0x20 [ 157.985212][ T1782] dump_header+0xd9/0x460 [ 157.985238][ T1782] oom_kill_process+0x35d/0x640 [ 157.985255][ T1782] out_of_memory+0x5d1/0xa20 [ 157.985270][ T1782] ? __cfi_out_of_memory+0x10/0x10 [ 157.985285][ T1782] ? mutex_lock_killable+0x97/0x1d0 [ 157.985307][ T1782] ? __cfi_mutex_lock_killable+0x10/0x10 [ 157.985330][ T1782] mem_cgroup_out_of_memory+0x2c5/0x390 [ 157.985356][ T1782] ? css_next_descendant_pre+0x1ec/0x210 [ 157.985372][ T1782] ? __kasan_check_write+0x18/0x20 [ 157.985395][ T1782] ? drain_obj_stock+0xec0/0xec0 [ 157.985421][ T1782] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 157.985453][ T1782] try_charge_memcg+0x925/0xe10 [ 157.985473][ T1782] ? static_key_count+0x45/0x70 [ 157.985491][ T1782] ? lruvec_init+0x271/0x280 [ 157.985505][ T1782] ? __cfi_try_charge_memcg+0x10/0x10 [ 157.985526][ T1782] ? __alloc_pages_noprof+0x35a/0x7e0 [ 157.985547][ T1782] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 157.985569][ T1782] __mem_cgroup_charge+0xfc/0x420 [ 157.985591][ T1782] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 157.985614][ T1782] ? folio_add_lru+0x116/0x400 [ 157.985630][ T1782] ? __cfi_folio_add_lru+0x10/0x10 [ 157.985648][ T1782] folio_prealloc+0x67/0x220 [ 157.985667][ T1782] do_pte_missing+0x16af/0x4440 [ 157.985687][ T1782] ? pte_marker_clear+0x1b0/0x1b0 [ 157.985705][ T1782] ? cgroup_rstat_updated+0x144/0x800 [ 157.985731][ T1782] ? __kasan_check_write+0x18/0x20 [ 157.985758][ T1782] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 157.985781][ T1782] handle_mm_fault+0x1189/0x1ba0 [ 157.985800][ T1782] ? __cfi_handle_mm_fault+0x10/0x10 [ 157.985816][ T1782] ? lock_vma_under_rcu+0x4cf/0x590 [ 157.985834][ T1782] ? __sched_text_start+0x10/0x10 [ 157.985854][ T1782] do_user_addr_fault+0x951/0x1230 [ 157.985872][ T1782] ? __kasan_check_read+0x15/0x20 [ 157.985896][ T1782] exc_page_fault+0x58/0xc0 [ 157.985918][ T1782] asm_exc_page_fault+0x2b/0x30 [ 157.985939][ T1782] RIP: 0033:0x7f8ce0b6eb15 [ 157.985955][ T1782] Code: 80 00 00 00 00 c5 fe 6f 0e c5 fe 6f 56 20 c5 fe 6f 5e 40 c5 fe 6f 66 60 48 83 ee 80 c5 fd 7f 0f c5 fd 7f 57 20 c5 fd 7f 5f 40 fd 7f 67 60 48 83 ef 80 48 39 fa 77 cd c5 fe 7f 6a 60 c5 fe 7f [ 157.985970][ T1782] RSP: 002b:00007ffcdf935998 EFLAGS: 00010203 [ 157.985985][ T1782] RAX: 0000200000005200 RBX: 0000000000000004 RCX: 0000200000005200 [ 157.985997][ T1782] RDX: 0000200000007180 RSI: 0000001b2de220c1 RDI: 0000200000006fa0 [ 157.986008][ T1782] RBP: fffffffffffffffe R08: 0000000000000000 R09: 0000000000000001 [ 157.986019][ T1782] R10: 0000000000002000 R11: 0000000000000002 R12: 00007ffcdf935ac0 [ 157.986030][ T1782] R13: 00007f8ce0e25fac R14: 0000000000026894 R15: 00007f8ce0e25fa0 [ 157.986044][ T1782] [ 157.986084][ T1782] memory: usage 8kB, limit 8kB, failcnt 21 [ 158.043624][ T465] usb 4-1: device descriptor read/8, error -71 [ 158.051216][ T1782] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 158.311999][ T465] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 158.318540][ T1782] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 158.330519][ T1782] Memory cgroup stats for /syz1/test: [ 158.330654][ T1782] cache 0 [ 158.339368][ T1782] rss 0 [ 158.343145][ T1782] rss_huge 0 [ 158.346399][ T1782] shmem 0 [ 158.349459][ T1782] mapped_file 0 [ 158.352999][ T1782] dirty 0 [ 158.355974][ T1782] writeback 0 [ 158.358887][ T465] usb 4-1: device descriptor read/8, error -71 [ 158.359289][ T1782] workingset_refault_anon 0 [ 158.370175][ T1782] workingset_refault_file 0 [ 158.374895][ T1782] swap 0 [ 158.377787][ T1782] swapcached 0 [ 158.381202][ T1782] pgpgin 0 [ 158.384530][ T1782] pgpgout 0 [ 158.387676][ T1782] pgfault 0 [ 158.390808][ T1782] pgmajfault 0 [ 158.394501][ T1782] inactive_anon 0 [ 158.398168][ T1782] active_anon 0 [ 158.401674][ T1782] inactive_file 0 [ 158.405705][ T1782] active_file 0 [ 158.409207][ T1782] unevictable 0 [ 158.412954][ T1782] hierarchical_memory_limit 8192 [ 158.417933][ T1782] hierarchical_memsw_limit 9223372036854771712 [ 158.424391][ T1782] total_cache 0 [ 158.427888][ T1782] total_rss 0 [ 158.431209][ T1782] total_rss_huge 0 [ 158.435315][ T1782] total_shmem 0 [ 158.438823][ T1782] total_mapped_file 0 [ 158.443096][ T1782] total_dirty 0 [ 158.446595][ T1782] total_writeback 0 [ 158.450437][ T1782] total_workingset_refault_anon 0 [ 158.455824][ T1782] total_workingset_refault_file 0 [ 158.460893][ T1782] total_swap 0 [ 158.464568][ T1782] total_swapcached 0 [ 158.468551][ T1782] total_pgpgin 0 [ 158.472389][ T1782] total_pgpgout 0 [ 158.476067][ T1782] total_pgfault 0 [ 158.479733][ T1782] total_pgmajfault 0 [ 158.483921][ T1782] total_inactive_anon 0 [ 158.488119][ T1782] total_active_anon 0 [ 158.492454][ T1782] total_inactive_file 0 [ 158.496842][ T1782] total_active_file 0 [ 158.500860][ T1782] total_unevictable 0 [ 158.505151][ T1782] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.533,pid=1782,uid=0 [ 158.506239][ T465] usb 4-1: device descriptor read/8, error -71 [ 158.521654][ T1782] Memory cgroup out of memory: Killed process 1782 (syz.1.533) total-vm:94400kB, anon-rss:1256kB, file-rss:22540kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 158.632118][ T465] usb usb4-port1: unable to enumerate USB device [ 158.685305][ T1805] ./dev/sda1: Can't lookup blockdev [ 158.907532][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 158.907550][ T36] audit: type=1400 audit(1794192034.570:313): avc: denied { append } for pid=1821 comm="syz.3.546" name="001" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 158.940350][ T1822] usb 1-1: USB disconnect, device number 2 [ 158.960489][ T1824] netlink: 20 bytes leftover after parsing attributes in process `syz.2.547'. [ 159.271904][ T465] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 159.431954][ T465] usb 4-1: Using ep0 maxpacket: 32 [ 159.442769][ T465] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 159.451005][ T465] usb 4-1: config 0 has no interface number 0 [ 159.467896][ T465] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 159.479864][ T465] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 159.489178][ T465] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.509520][ T465] usb 4-1: Product: syz [ 159.513919][ T465] usb 4-1: Manufacturer: syz [ 159.518549][ T465] usb 4-1: SerialNumber: syz [ 159.536475][ T465] usb 4-1: config 0 descriptor?? [ 159.542234][ T1822] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 159.750789][ T1834] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 159.760693][ T36] audit: type=1400 audit(1794192035.420:314): avc: denied { relabelto } for pid=1833 comm="syz.1.551" name="cgroup" dev="tmpfs" ino=880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 159.761216][ T1822] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 159.788639][ T36] audit: type=1400 audit(1794192035.460:315): avc: denied { associate } for pid=1833 comm="syz.1.551" name="cgroup" dev="tmpfs" ino=880 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_log_t:s0" [ 159.828281][ T36] audit: type=1400 audit(1794192035.490:316): avc: denied { unlink } for pid=295 comm="syz-executor" name="cgroup" dev="tmpfs" ino=880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 159.898887][ T1843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.555'. [ 160.030727][ T36] audit: type=1400 audit(1794192035.690:317): avc: denied { getopt } for pid=1821 comm="syz.3.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 160.039982][ T465] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 160.060341][ T465] asix 4-1:0.188: probe with driver asix failed with error -61 [ 160.171970][ T64] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 160.285205][ T465] usb 4-1: USB disconnect, device number 21 [ 160.315262][ T1865] netlink: 'syz.4.559': attribute type 4 has an invalid length. [ 160.332930][ T64] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.345280][ T64] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.358436][ T64] usb 2-1: config 0 interface 0 has no altsetting 0 [ 160.365554][ T64] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 160.374947][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.385194][ T64] usb 2-1: config 0 descriptor?? [ 160.593991][ T1846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.602691][ T1846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.721933][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 160.876585][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.887762][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.898060][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 160.921792][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.934334][ T1887] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 160.946675][ T10] usb 5-1: config 0 descriptor?? [ 160.993461][ T64] hid-thrustmaster 0003:044F:B65D.0005: item fetching failed at offset 23/24 [ 161.008972][ T64] hid-thrustmaster 0003:044F:B65D.0005: parse failed with error -22 [ 161.021339][ T64] hid-thrustmaster 0003:044F:B65D.0005: probe with driver hid-thrustmaster failed with error -22 [ 161.271944][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 161.443047][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.453404][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 161.462682][ T9] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 1.00 [ 161.472112][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.559854][ T10] savu 0003:1E7D:2D5A.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 161.683460][ T9] usb 4-1: cannot find UAC_HEADER [ 161.692298][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 161.704077][ T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 161.797827][ T36] audit: type=1400 audit(1794192037.460:318): avc: denied { ioctl } for pid=1894 comm="syz.1.567" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x9416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 161.842322][ T9] usb 5-1: USB disconnect, device number 8 [ 161.870187][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 161.878736][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 161.887913][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 161.896466][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 161.904926][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 161.913359][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 161.921657][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 161.930276][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 161.938869][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 161.947319][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 161.955874][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 161.964331][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 161.972766][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 161.981054][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 161.989814][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.000653][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.019149][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.028073][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.036868][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.046697][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.056530][ T1915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1915 comm=syz.2.571 [ 162.065533][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.091029][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.099860][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.100320][ T1918] sda1: Can't mount, would change RO state [ 162.108115][ T36] audit: type=1400 audit(1794192037.770:319): avc: denied { mounton } for pid=1901 comm="syz.1.568" path="/142/dev/sda1" dev="devtmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 162.129854][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.146586][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.155131][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.163585][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.172100][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.180336][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.188600][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.196839][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.205296][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.213525][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.222155][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.230431][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.239034][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.247455][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.255922][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.264353][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.272780][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.281032][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.289571][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.298004][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.306443][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.314853][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.323290][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.331542][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.340044][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.348478][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.364541][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.380014][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.389736][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.398163][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.412075][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.420347][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.428757][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.437282][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.445699][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.454392][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.462975][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.471815][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.485804][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.494085][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.502502][ T1904] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev fc02 [ 162.559451][ T36] audit: type=1400 audit(1794192038.220:320): avc: denied { search } for pid=1930 comm="syz.4.578" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 162.583434][ T1932] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 162.591808][ T1931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.599488][ T36] audit: type=1400 audit(1794192038.220:321): avc: denied { append } for pid=1930 comm="syz.4.578" name="uprobe_events" dev="tracefs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 162.603471][ T1931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.625351][ T36] audit: type=1400 audit(1794192038.250:322): avc: denied { getattr } for pid=1930 comm="syz.4.578" path="/65/tracing/uprobe_events" dev="tracefs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 162.689207][ T1937] overlay: ./bus is not a directory [ 162.841890][ T1026] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 162.993291][ T1026] usb 5-1: unable to get BOS descriptor or descriptor too short [ 163.001877][ T1026] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.012075][ T1026] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.026415][ T1026] usb 5-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 163.035611][ T1026] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 163.043669][ T1026] usb 5-1: Product: syz [ 163.047833][ T1026] usb 5-1: Manufacturer: syz [ 163.056347][ T1026] usb 5-1: Found UVC 1.00 device syz (8086:0ad2) [ 163.062861][ T1026] usb 5-1: No streaming interface found for terminal 2. [ 163.201963][ T465] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 163.229560][ T1961] netlink: 16 bytes leftover after parsing attributes in process `syz.1.586'. [ 163.257030][ T1026] usb 5-1: USB disconnect, device number 9 [ 163.322865][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 163.331925][ T465] usb 3-1: device descriptor read/64, error -71 [ 163.338509][ T9] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 163.581935][ T465] usb 3-1: device descriptor read/64, error -71 [ 163.753221][ T1994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.762190][ T1994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.787220][ T1026] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 163.801774][ T1026] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 163.822377][ T465] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 163.923301][ T1026] usb 4-1: USB disconnect, device number 22 [ 163.971971][ T465] usb 3-1: device descriptor read/64, error -71 [ 163.995303][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 163.995321][ T36] audit: type=1400 audit(1794192039.660:328): avc: denied { write } for pid=2004 comm="syz.4.599" path="socket:[18126]" dev="sockfs" ino=18126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 164.212094][ T465] usb 3-1: device descriptor read/64, error -71 [ 164.231965][ T31] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 164.322111][ T465] usb usb3-port1: attempt power cycle [ 164.351888][ T1026] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 164.381906][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 164.388299][ T31] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 164.396803][ T31] usb 5-1: config 0 has no interface number 0 [ 164.403476][ T31] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 164.413611][ T31] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 164.425867][ T31] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 164.435371][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.443710][ T31] usb 5-1: Product: syz [ 164.448114][ T31] usb 5-1: Manufacturer: syz [ 164.453087][ T31] usb 5-1: SerialNumber: syz [ 164.458555][ T2022] fuse: Bad value for 'fd' [ 164.462229][ T31] usb 5-1: config 0 descriptor?? [ 164.463197][ T36] audit: type=1400 audit(1794192040.120:329): avc: denied { mounton } for pid=2021 comm="syz.1.604" path="/156/file0" dev="tmpfs" ino=991 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 164.470233][ T2005] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 164.498191][ T36] audit: type=1400 audit(1794192040.130:330): avc: denied { execute } for pid=2021 comm="syz.1.604" name="file0" dev="tmpfs" ino=991 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 164.500031][ T2005] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 164.533655][ T1026] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 768 [ 164.546337][ T1026] usb 4-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 164.555733][ T1026] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.567527][ T1026] usb 4-1: Product: syz [ 164.571795][ T1026] usb 4-1: Manufacturer: syz [ 164.576667][ T1026] usb 4-1: SerialNumber: syz [ 164.582941][ T2012] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 164.671925][ T465] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 164.694441][ T465] usb 3-1: device descriptor read/8, error -71 [ 164.732219][ T2005] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 164.739444][ T2005] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 164.747931][ T31] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 164.758586][ T31] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 164.769046][ T31] asix 5-1:0.34: probe with driver asix failed with error -32 [ 164.778810][ T2036] kvm: kvm [2035]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 164.823316][ T465] usb 3-1: device descriptor read/8, error -71 [ 164.992683][ T1026] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 165.091916][ T465] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 165.112970][ T465] usb 3-1: device descriptor read/8, error -71 [ 165.139546][ T36] audit: type=1400 audit(1794192040.800:331): avc: denied { ioctl } for pid=2047 comm="syz.1.611" path="socket:[19123]" dev="sockfs" ino=19123 ioctlcmd=0x89fb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 165.194780][ T2012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.204698][ T2012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.252959][ T465] usb 3-1: device descriptor read/8, error -71 [ 165.267187][ T2055] fuse: Bad value for 'fd' [ 165.365171][ T465] usb usb3-port1: unable to enumerate USB device [ 165.416261][ T9] usb 4-1: USB disconnect, device number 23 [ 166.034747][ T2082] 9pnet_fd: p9_fd_create_tcp (2082): problem connecting socket to 127.0.0.1 [ 166.077224][ T36] audit: type=1400 audit(1794192041.740:332): avc: denied { listen } for pid=2087 comm="syz.3.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 166.118484][ T36] audit: type=1400 audit(1794192041.770:333): avc: denied { create } for pid=2087 comm="syz.3.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 166.140097][ T36] audit: type=1400 audit(1794192041.770:334): avc: denied { accept } for pid=2087 comm="syz.3.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 166.160217][ T36] audit: type=1400 audit(1794192041.770:335): avc: denied { getopt } for pid=2087 comm="syz.3.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 166.192368][ T36] audit: type=1400 audit(1794192041.860:336): avc: denied { write } for pid=2089 comm="syz.3.623" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 166.230961][ T2093] fuse: Bad value for 'fd' [ 166.401928][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 166.553032][ T9] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 166.562321][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.591907][ T64] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 166.743043][ T64] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 166.755836][ T64] usb 4-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 166.765116][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.773200][ T64] usb 4-1: Product: syz [ 166.777441][ T64] usb 4-1: Manufacturer: syz [ 166.782241][ T64] usb 4-1: SerialNumber: syz [ 166.994815][ T64] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 167.001923][ T64] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 167.012070][ T31] usb 5-1: USB disconnect, device number 10 [ 167.021457][ T64] usb 4-1: USB disconnect, device number 24 [ 167.039860][ T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 167.276726][ T2118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.285345][ T2118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.431939][ T31] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 167.563581][ T36] audit: type=1400 audit(1794192043.230:337): avc: denied { map } for pid=2119 comm="syz.3.632" path="socket:[19330]" dev="sockfs" ino=19330 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 167.593034][ T31] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.603985][ T31] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.616819][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 167.623496][ T31] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 167.632594][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.641492][ T31] usb 5-1: config 0 descriptor?? [ 167.835047][ T2124] kvm: emulating exchange as write [ 167.841927][ T9] usb 3-1: Cannot set autoneg [ 167.846961][ T9] MOSCHIP usb-ethernet driver 3-1:7.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 167.861183][ T9] usb 3-1: USB disconnect, device number 17 [ 167.967170][ T2127] fuse: Bad value for 'fd' [ 168.061470][ T31] hid-picolcd 0003:04D8:F002.0009: item fetching failed at offset 20/24 [ 168.070149][ T31] hid-picolcd 0003:04D8:F002.0009: device report parse failed [ 168.077869][ T31] hid-picolcd 0003:04D8:F002.0009: probe with driver hid-picolcd failed with error -22 [ 168.537381][ T2148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.543969][ T2150] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.554048][ T2148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.560530][ T2148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.569471][ T2150] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.576338][ T2150] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.583996][ T2148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.590496][ T2148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.597058][ T2148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.603558][ T2150] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.691925][ T1026] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 168.774808][ T2162] input: syz0 as /devices/virtual/input/input13 [ 168.784452][ T2162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.793149][ T2162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.843038][ T1026] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 168.852823][ T1026] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 168.864038][ T1026] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 168.873156][ T1026] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.881154][ T1026] usb 4-1: Product: syz [ 168.885373][ T1026] usb 4-1: Manufacturer: syz [ 168.890138][ T1026] usb 4-1: SerialNumber: syz [ 168.897545][ T1026] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 168.905397][ T1026] ums-sddr09 4-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 168.905397][ T1026] Please send a copy of this message to and [ 169.206226][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 169.206245][ T36] audit: type=1400 audit(1794192044.870:340): avc: denied { map } for pid=2165 comm="syz.2.643" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 169.211186][ T2168] rust_binder: 2165:2168 got transaction to invalid handle 3 [ 169.243579][ T2168] rust_binder: 2165:2168 transaction async to 0:0 failed ENOENT, code 0 size 0-0 line process.rs:958 [ 169.254915][ T36] audit: type=1400 audit(1794192044.920:341): avc: denied { call } for pid=2165 comm="syz.2.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 169.314677][ T1026] ums-sddr09 4-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 169.340458][ T2173] usb 5-1: USB disconnect, device number 11 [ 169.351278][ T2173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.359973][ T2173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.858157][ T36] audit: type=1400 audit(1794192045.520:342): avc: denied { bind } for pid=2143 comm="syz.3.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 169.989001][ T31] rust_binder: 2165: undelivered TRANSACTION_ERROR: 29201 [ 170.002379][ T31] rust_binder: 2165: undelivered TRANSACTION_COMPLETE [ 170.098230][ T2199] veth1_to_bond: entered allmulticast mode [ 170.104439][ T2199] veth1_to_bond: entered promiscuous mode [ 170.111200][ T2201] rust_binder: 2198:2201 no such ref 0 [ 170.218779][ T2214] rust_binder: 2198:2214 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 170.249576][ T2214] rust_binder: 2198:2214 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 170.408173][ T36] audit: type=1400 audit(1794192046.070:343): avc: denied { write } for pid=2221 comm="syz.1.658" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 170.414255][ T2222] FAULT_INJECTION: forcing a failure. [ 170.414255][ T2222] name fail_futex, interval 1, probability 0, space 0, times 0 [ 170.443766][ T2222] CPU: 1 UID: 0 PID: 2222 Comm: syz.1.658 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 170.443803][ T2222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 170.443817][ T2222] Call Trace: [ 170.443824][ T2222] [ 170.443832][ T2222] __dump_stack+0x21/0x30 [ 170.443860][ T2222] dump_stack_lvl+0x140/0x1c0 [ 170.443889][ T2222] ? __cfi_dump_stack_lvl+0x10/0x10 [ 170.443911][ T2222] ? unwind_get_return_address+0x51/0x90 [ 170.443944][ T2222] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 170.443968][ T2222] dump_stack+0x19/0x20 [ 170.443988][ T2222] should_fail_ex+0x3c2/0x510 [ 170.444010][ T2222] should_fail+0xf/0x20 [ 170.444030][ T2222] get_futex_key+0x178/0x940 [ 170.444052][ T2222] ? __cfi_get_futex_key+0x10/0x10 [ 170.444074][ T2222] ? kasan_save_track+0x4f/0x80 [ 170.444097][ T2222] futex_wake+0x150/0x950 [ 170.444127][ T2222] ? __cfi_futex_wake+0x10/0x10 [ 170.444154][ T2222] ? perf_lock_task_context+0x398/0x450 [ 170.444176][ T2222] ? __perf_event_period+0x490/0x490 [ 170.444197][ T2222] ? mutex_unlock+0x90/0x240 [ 170.444226][ T2222] do_futex+0x37d/0x510 [ 170.444250][ T2222] ? __kasan_check_read+0x15/0x20 [ 170.444280][ T2222] ? __cfi_do_futex+0x10/0x10 [ 170.444305][ T2222] ? __kasan_check_write+0x18/0x20 [ 170.444337][ T2222] mm_release+0x15f/0x300 [ 170.444368][ T2222] ? exit_mm_release+0x50/0x50 [ 170.444397][ T2222] ? futex_exit_release+0x11d/0x1f0 [ 170.444423][ T2222] exit_mm_release+0x29/0x50 [ 170.444453][ T2222] do_exit+0x832/0x2850 [ 170.444483][ T2222] ? __kasan_check_read+0x15/0x20 [ 170.444515][ T2222] ? futex_wake+0x627/0x950 [ 170.444543][ T2222] ? __cfi_do_exit+0x10/0x10 [ 170.444574][ T2222] ? futex_wait+0x2b8/0x7c0 [ 170.444603][ T2222] ? __cfi_futex_wait+0x10/0x10 [ 170.444631][ T2222] ? __kasan_check_write+0x18/0x20 [ 170.444662][ T2222] ? _raw_spin_lock_irq+0x93/0x120 [ 170.444686][ T2222] do_group_exit+0x21f/0x2f0 [ 170.444717][ T2222] ? __kasan_check_write+0x18/0x20 [ 170.444749][ T2222] ? recalc_sigpending+0x16c/0x1d0 [ 170.444777][ T2222] get_signal+0x134c/0x1490 [ 170.444801][ T2222] arch_do_signal_or_restart+0xbc/0x700 [ 170.444826][ T2222] ? fput+0x1a4/0x230 [ 170.444850][ T2222] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 170.444887][ T2222] syscall_exit_to_user_mode+0x57/0xb0 [ 170.444920][ T2222] do_syscall_64+0x63/0xf0 [ 170.444942][ T2222] ? clear_bhb_loop+0x50/0xa0 [ 170.444973][ T2222] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 170.445003][ T2222] RIP: 0033:0x7f8ce0b9fb19 [ 170.445022][ T2222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.445040][ T2222] RSP: 002b:00007f8ce1b420e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 170.445064][ T2222] RAX: fffffffffffffe00 RBX: 00007f8ce0e25fa8 RCX: 00007f8ce0b9fb19 [ 170.445081][ T2222] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8ce0e25fa8 [ 170.445095][ T2222] RBP: 00007f8ce0e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 170.445109][ T2222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.445121][ T2222] R13: 00007f8ce0e26038 R14: 00007ffcdf935750 R15: 00007ffcdf935838 [ 170.445140][ T2222] [ 170.453221][ T36] audit: type=1400 audit(1794192046.070:344): avc: denied { ioctl } for pid=2221 comm="syz.1.658" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 170.933190][ T2198] veth1_to_bond: left promiscuous mode [ 170.938819][ T2198] veth1_to_bond: left allmulticast mode [ 171.071157][ T2245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.664'. [ 171.072989][ T2241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.087644][ T2245] fuse: Unknown parameter '' [ 171.091280][ T2241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.468516][ T2271] netlink: 'syz.2.671': attribute type 4 has an invalid length. [ 171.478308][ T2271] netlink: 'syz.2.671': attribute type 4 has an invalid length. [ 171.483017][ T9] usb 4-1: USB disconnect, device number 25 [ 171.555213][ T36] audit: type=1400 audit(1794192047.220:345): avc: denied { write } for pid=2275 comm="syz.3.673" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 171.563219][ T2276] binder: Bad value for 'stats' [ 171.583601][ T36] audit: type=1400 audit(1794192047.250:346): avc: denied { create } for pid=2275 comm="syz.3.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 171.616090][ T36] audit: type=1400 audit(1794192047.280:347): avc: denied { setattr } for pid=2280 comm="syz.1.674" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 171.647501][ T36] audit: type=1400 audit(1794192047.310:348): avc: denied { read } for pid=2280 comm="syz.1.674" name="state" dev="binder" ino=1048615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 171.671213][ T36] audit: type=1400 audit(1794192047.310:349): avc: denied { open } for pid=2280 comm="syz.1.674" path="/dev/binderfs/binder_logs/state" dev="binder" ino=1048615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 171.761938][ T1026] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 171.921917][ T1026] usb 3-1: Using ep0 maxpacket: 32 [ 171.933560][ T1026] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 171.942008][ T1026] usb 3-1: config 0 has no interface number 0 [ 171.948146][ T1026] usb 3-1: config 0 interface 184 has no altsetting 0 [ 171.963346][ T1026] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 171.980749][ T1026] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.988868][ T1026] usb 3-1: Product: syz [ 171.993750][ T1026] usb 3-1: Manufacturer: syz [ 171.998409][ T1026] usb 3-1: SerialNumber: syz [ 172.004707][ T1026] usb 3-1: config 0 descriptor?? [ 172.011284][ T1026] smsc75xx v1.0.0 [ 172.041920][ T465] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 172.193178][ T465] usb 4-1: unable to get BOS descriptor or descriptor too short [ 172.202531][ T465] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.213493][ T465] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 172.222808][ T1026] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 172.233809][ T465] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 172.244938][ T1026] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 172.254816][ T465] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 172.268213][ T1026] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 172.278676][ T465] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 172.289866][ T1026] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 172.299704][ T465] usb 4-1: config 1 interface 1 has no altsetting 0 [ 172.308743][ T465] usb 4-1: string descriptor 0 read error: -22 [ 172.315274][ T465] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 172.325706][ T465] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.545410][ T465] usb 4-1: 2:0: failed to get current value for ch 0 (-32) [ 172.555299][ T465] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 172.567342][ T465] usb 4-1: USB disconnect, device number 26 [ 172.780017][ T2302] udevd[2302]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Exec format error [ 173.055698][ T2313] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 173.071490][ T295] ------------[ cut here ]------------ [ 173.077088][ T295] WARNING: CPU: 0 PID: 295 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 173.085174][ T295] Modules linked in: [ 173.089120][ T295] CPU: 0 UID: 0 PID: 295 Comm: syz-executor Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 173.100823][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 173.111374][ T295] RIP: 0010:drop_nlink+0xce/0x110 [ 173.116535][ T295] Code: 04 00 00 be 08 00 00 00 e8 3f 07 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 14 b8 03 cc e8 42 47 94 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 173.136323][ T295] RSP: 0018:ffffc9000b63fc88 EFLAGS: 00010293 [ 173.142562][ T295] RAX: ffffffff81f5228e RBX: ffff888118e49308 RCX: ffff8881246862c0 [ 173.150578][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.158747][ T295] RBP: ffffc9000b63fcb0 R08: 0000000000000003 R09: 0000000000000004 [ 173.167060][ T295] R10: dffffc0000000000 R11: fffff520016c7f80 R12: dffffc0000000000 [ 173.175218][ T295] R13: 1ffff110231c926a R14: ffff888118e49350 R15: 0000000000000000 [ 173.183273][ T295] FS: 000055556e48f500(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 173.192282][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.198906][ T295] CR2: 000055556e4b2958 CR3: 000000012196c000 CR4: 00000000003526b0 [ 173.207056][ T295] Call Trace: [ 173.210366][ T295] [ 173.213364][ T295] shmem_rmdir+0x5f/0x90 [ 173.217662][ T295] vfs_rmdir+0x3db/0x560 [ 173.221989][ T295] incfs_kill_sb+0x102/0x220 [ 173.226634][ T295] deactivate_locked_super+0xd5/0x270 [ 173.232113][ T295] deactivate_super+0xb8/0xe0 [ 173.236896][ T295] cleanup_mnt+0x438/0x4d0 [ 173.241360][ T295] __cleanup_mnt+0x1d/0x40 [ 173.245861][ T295] task_work_run+0x1e8/0x260 [ 173.250507][ T295] ? __cfi_task_work_run+0x10/0x10 [ 173.255698][ T295] ? __x64_sys_umount+0x12e/0x180 [ 173.260820][ T295] ? __cfi___x64_sys_umount+0x10/0x10 [ 173.266300][ T295] ? __kasan_check_read+0x15/0x20 [ 173.271392][ T295] resume_user_mode_work+0x35/0x50 [ 173.276583][ T295] syscall_exit_to_user_mode+0x63/0xb0 [ 173.282130][ T295] do_syscall_64+0x63/0xf0 [ 173.282160][ T295] ? clear_bhb_loop+0x50/0xa0 [ 173.291301][ T295] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 173.297319][ T295] RIP: 0033:0x7f8ce0ba0d57 [ 173.301776][ T295] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 173.321465][ T295] RSP: 002b:00007ffcdf934aa8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 173.330022][ T295] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8ce0ba0d57 [ 173.338249][ T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcdf934b60 [ 173.346373][ T295] RBP: 00007ffcdf934b60 R08: 00007ffcdf935b60 R09: 00000000ffffffff [ 173.346394][ T295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcdf935bf0 [ 173.346408][ T295] R13: 00007f8ce0c36fb3 R14: 000000000002a3f2 R15: 00007ffcdf935c30 [ 173.346428][ T295] [ 173.371516][ T2318] rust_binder: 2315:2318 got reply transaction with no transaction stack [ 173.373504][ T295] ---[ end trace 0000000000000000 ]--- [ 173.374453][ T295] ================================================================== [ 173.395531][ T295] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 173.401818][ T295] Write of size 4 at addr 0000000000000168 by task syz-executor/295 [ 173.409829][ T295] [ 173.409843][ T295] CPU: 0 UID: 0 PID: 295 Comm: syz-executor Tainted: G W syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 173.409909][ T295] Tainted: [W]=WARN [ 173.409939][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 173.409988][ T295] Call Trace: [ 173.410010][ T295] [ 173.410047][ T295] __dump_stack+0x21/0x30 [ 173.410120][ T295] dump_stack_lvl+0x140/0x1c0 [ 173.410174][ T295] ? __cfi_dump_stack_lvl+0x10/0x10 [ 173.410238][ T295] print_report+0x3d/0x70 [ 173.410303][ T295] kasan_report+0x162/0x1a0 [ 173.410368][ T295] ? ihold+0x24/0x70 [ 173.410430][ T295] ? ihold+0x24/0x70 [ 173.410486][ T295] kasan_check_range+0x25a/0x2b0 [ 173.410558][ T295] __kasan_check_write+0x18/0x20 [ 173.410634][ T295] ihold+0x24/0x70 [ 173.410695][ T295] vfs_rmdir+0x25c/0x560 [ 173.410768][ T295] incfs_kill_sb+0x102/0x220 [ 173.410826][ T295] deactivate_locked_super+0xd5/0x270 [ 173.410901][ T295] deactivate_super+0xb8/0xe0 [ 173.410967][ T295] cleanup_mnt+0x438/0x4d0 [ 173.411038][ T295] __cleanup_mnt+0x1d/0x40 [ 173.411094][ T295] task_work_run+0x1e8/0x260 [ 173.411184][ T295] ? __cfi_task_work_run+0x10/0x10 [ 173.411269][ T295] ? __x64_sys_umount+0x12e/0x180 [ 173.411363][ T295] ? __cfi___x64_sys_umount+0x10/0x10 [ 173.411453][ T295] ? __kasan_check_read+0x15/0x20 [ 173.411537][ T295] resume_user_mode_work+0x35/0x50 [ 173.411611][ T295] syscall_exit_to_user_mode+0x63/0xb0 [ 173.411696][ T295] do_syscall_64+0x63/0xf0 [ 173.411759][ T295] ? clear_bhb_loop+0x50/0xa0 [ 173.411829][ T295] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 173.411904][ T295] RIP: 0033:0x7f8ce0ba0d57 [ 173.411956][ T295] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 173.412008][ T295] RSP: 002b:00007ffcdf934aa8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 173.412072][ T295] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8ce0ba0d57 [ 173.412115][ T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcdf934b60 [ 173.412156][ T295] RBP: 00007ffcdf934b60 R08: 00007ffcdf935b60 R09: 00000000ffffffff [ 173.412203][ T295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcdf935bf0 [ 173.412216][ T295] R13: 00007f8ce0c36fb3 R14: 000000000002a3f2 R15: 00007ffcdf935c30 [ 173.412234][ T295] [ 173.412242][ T295] ================================================================== [ 173.461519][ T2318] rust_binder: 2315:2318 transaction reply to 0:0 failed EINVAL, code 1 size 249-0 line thread.rs:1556 [ 173.641998][ T295] Disabling lock debugging due to kernel taint [ 173.653637][ T2316] rust_binder: Failed to register with vma: already registered [ 173.666045][ T295] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 173.686049][ T295] #PF: supervisor write access in kernel mode [ 173.692148][ T295] #PF: error_code(0x0002) - not-present page [ 173.698169][ T295] PGD 800000013156f067 P4D 800000013156f067 PUD 0 [ 173.702963][ T2316] rust_binder: Failed to register with vma: already registered [ 173.704725][ T295] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 173.704752][ T295] CPU: 1 UID: 0 PID: 295 Comm: syz-executor Tainted: G B W syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 173.731498][ T295] Tainted: [B]=BAD_PAGE, [W]=WARN [ 173.732399][ T2316] rust_binder: Failed to register with vma: already registered [ 173.736543][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 173.736560][ T295] RIP: 0010:ihold+0x2a/0x70 [ 173.752272][ T2316] rust_binder: Failed to register with vma: already registered [ 173.754283][ T295] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 2d 3e 94 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 fc fd ed ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 3d [ 173.754305][ T295] RSP: 0018:ffffc9000b63fcc8 EFLAGS: 00010246 [ 173.792549][ T295] RAX: ffff888124686200 RBX: 0000000000000000 RCX: ffff8881246862c0 [ 173.800600][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.808641][ T295] RBP: ffffc9000b63fcd8 R08: ffffffff893d8967 R09: 1ffffffff127b12c [ 173.816683][ T295] R10: dffffc0000000000 R11: fffffbfff127b12d R12: 0000000000000000 [ 173.824701][ T295] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 173.832889][ T295] FS: 000055556e48f500(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000 [ 173.841861][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.848482][ T295] CR2: 0000000000000168 CR3: 000000012196c000 CR4: 00000000003526b0 [ 173.856471][ T295] Call Trace: [ 173.860021][ T295] [ 173.862963][ T295] vfs_rmdir+0x25c/0x560 [ 173.867231][ T295] incfs_kill_sb+0x102/0x220 [ 173.871852][ T295] deactivate_locked_super+0xd5/0x270 [ 173.877382][ T295] deactivate_super+0xb8/0xe0 [ 173.882086][ T295] cleanup_mnt+0x438/0x4d0 [ 173.886534][ T295] __cleanup_mnt+0x1d/0x40 [ 173.891101][ T295] task_work_run+0x1e8/0x260 [ 173.895755][ T295] ? __cfi_task_work_run+0x10/0x10 [ 173.900884][ T295] ? __x64_sys_umount+0x12e/0x180 [ 173.905952][ T295] ? __cfi___x64_sys_umount+0x10/0x10 [ 173.911354][ T295] ? __kasan_check_read+0x15/0x20 [ 173.916431][ T295] resume_user_mode_work+0x35/0x50 [ 173.921570][ T295] syscall_exit_to_user_mode+0x63/0xb0 [ 173.927080][ T295] do_syscall_64+0x63/0xf0 [ 173.931516][ T295] ? clear_bhb_loop+0x50/0xa0 [ 173.936246][ T295] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 173.942202][ T295] RIP: 0033:0x7f8ce0ba0d57 [ 173.946644][ T295] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 173.966347][ T295] RSP: 002b:00007ffcdf934aa8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 173.974780][ T295] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8ce0ba0d57 [ 173.982773][ T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcdf934b60 [ 173.990793][ T295] RBP: 00007ffcdf934b60 R08: 00007ffcdf935b60 R09: 00000000ffffffff [ 173.998803][ T295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcdf935bf0 [ 174.006788][ T295] R13: 00007f8ce0c36fb3 R14: 000000000002a3f2 R15: 00007ffcdf935c30 [ 174.014866][ T295] [ 174.017890][ T295] Modules linked in: [ 174.021819][ T295] CR2: 0000000000000168 [ 174.026012][ T295] ---[ end trace 0000000000000000 ]--- [ 174.031491][ T295] RIP: 0010:ihold+0x2a/0x70 [ 174.036016][ T295] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 2d 3e 94 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 fc fd ed ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 3d [ 174.055645][ T295] RSP: 0018:ffffc9000b63fcc8 EFLAGS: 00010246 [ 174.061929][ T295] RAX: ffff888124686200 RBX: 0000000000000000 RCX: ffff8881246862c0 [ 174.070036][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 174.078033][ T295] RBP: ffffc9000b63fcd8 R08: ffffffff893d8967 R09: 1ffffffff127b12c [ 174.086136][ T295] R10: dffffc0000000000 R11: fffffbfff127b12d R12: 0000000000000000 [ 174.094117][ T295] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 174.102120][ T295] FS: 000055556e48f500(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000 [ 174.111167][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 174.117793][ T295] CR2: 0000000000000168 CR3: 000000012196c000 CR4: 00000000003526b0 [ 174.125790][ T295] Kernel panic - not syncing: Fatal exception [ 174.132630][ T295] Kernel Offset: disabled [ 174.138384][ T295] Rebooting in 86400 seconds..