last executing test programs: 15.877405274s ago: executing program 0 (id=27): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002340)={0xffffffffffffffff, &(0x7f0000002380)="7a1fbe9e57d90e6cd6a2e96c295a29c22b0e69e04c65eb8bf93f2f64ee0cdab276e4154c7a684e896e92045629d98680f6d7d0d571a1080049037caf195b9ed2e971568bd01465f3c33961c91549f25f1387e587fbf6d68b2da726ad313fedacb0ffad785068f81446ac78e9784c8553494afcaf71ce27e8a56e67a2eee9b728cbf90c191d03b8f316bad32e83291881321332b90b0f9900aed37b2879b0faae7e0a28e1e01f45a8b9e59f8783be1c56971cba0985af16bc71cd944367d43d60d6b854297575bcff01d3baa5b6e770efeadb", 0x0}, 0x20) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000700)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) syz_usb_control_io$uac3(r2, &(0x7f0000000100)={0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="ee0d06000000060a"], 0x0}, 0x0) syz_usb_control_io$uac3(r2, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000100)={0xffffffff, 0x8080000, 0x8410, 0x1, 0x1}) 12.153348053s ago: executing program 4 (id=47): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_open_dev$hiddev(0x0, 0x80000000, 0x200200) syz_usb_disconnect(0xffffffffffffffff) 12.106136965s ago: executing program 0 (id=48): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xff, 0x81, 0xa3, 0x8, 0xa47, 0x9601, 0x195, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xff, 0xfa, 0x80, 0x6, "", [{{0x9, 0x4, 0x1a, 0x8, 0x0, 0x66, 0x8a, 0x83, 0xdc}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) r3 = syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000206b1d01014000010203010902"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r3) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r5, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000240)={0x40, 0xe, 0x2, {0x2, 0x8}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}]}) syz_usb_control_io$uac3(r5, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x640000) syz_usb_disconnect(r6) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGBITSW(r6, 0x40095505, 0x0) syz_usb_connect(0x3, 0x2f3, &(0x7f0000000040)=ANY=[], 0x0) 9.055200052s ago: executing program 4 (id=55): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000e00)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 8.941147286s ago: executing program 2 (id=56): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$uac3(0x5, 0xb9, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x4242, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x3, 0x1, 0x48, 0x80, 0x5, {0x8, 0xb, 0x1, 0x1, 0x1, 0x24, 0x30, 0x80}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0xa, 0xab}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x9, 0x4, 0xe3, 0xf, "97b5c782d871"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x1, 0x4, 0x9}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x5}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x2, 0xc, 0x1, "", "fa66"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xc, 0x4, 0x9, 0x5, "b3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xf, 0x40, 0x40, {0xa, 0x25, 0x25, 0x6, 0x81, 0xd6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x2, 0x0, 0xf, 0xff}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7, 0x9, 0x4, {0xa, 0x25, 0x25, 0x0, 0x3, 0x10}}}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 8.847201509s ago: executing program 3 (id=57): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x23f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) io_setup(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={0x450303, 0x8, 0x11}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000000}) epoll_create(0x5) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r4, &(0x7f0000004180)={0x2020}, 0x2020) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1200000008000000040000000300000000000000", @ANYRES32, @ANYBLOB="000000f3ffffedffffffff000000000013000000dbb1c99fa9abde0b2be4764d80b889ea27a4c79b1f9379fef9d30966395db71828689db030ca81cf03e6741cedac", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r6, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r5, &(0x7f0000000480), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000010c0)={{r5}, &(0x7f0000001040), &(0x7f0000001080)=r6}, 0x20) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000400)='%ps \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x17, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_val={0x18, 0x8, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @exit, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x101, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000300)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xe, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000480)=[r3, r8], &(0x7f0000000580)=[{0x0, 0x1, 0xa, 0x8}, {0x1, 0x2, 0x1, 0x7}, {0x0, 0x2, 0x5, 0x6}], 0x10, 0x7}, 0x94) mount$9p_rdma(&(0x7f0000000680), &(0x7f0000001100)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000002100), 0x8800, &(0x7f0000002140)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@rq={'rq', 0x3d, 0x8}}, {@timeout}, {@sq={'sq', 0x3d, 0x9}}, {@rq={'rq', 0x3d, 0x1}}, {@timeout={'timeout', 0x3d, 0x8}}, {@rq={'rq', 0x3d, 0x7}}], [{@subj_type={'subj_type', 0x3d, ']-'}}, {@obj_type}]}}) 8.279013147s ago: executing program 0 (id=58): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x8000) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00\x00'], 0x0, 0x0, 0x0}, 0x0) syz_usb_disconnect(r1) 7.84145663s ago: executing program 3 (id=59): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) 7.715698985s ago: executing program 3 (id=60): r0 = syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x200841a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000024c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket(0x3, 0x3, 0x200) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r1, @ANYRESHEX=r0, @ANYRES8=r0], 0x1c}}, 0x20048080) symlink(&(0x7f0000000280)='.\x02\x00', &(0x7f0000000300)='.\x02\x00') socket$pppl2tp(0x18, 0x1, 0x1) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1a, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x62020600) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x8) mount$fuseblk(0x0, 0x0, &(0x7f0000000140), 0x3818000, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x02\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000440)=ANY=[@ANYBLOB], 0x18, 0x3) 7.471452353s ago: executing program 1 (id=61): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.592236131s ago: executing program 3 (id=62): syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000040532b24004000010203010902690003012b4006080b0201010320080904000000010120000924010080090900090904010000010220000904010101010220000905010910003200090825010230000100090402000001022000090402010101022000090545092000"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 6.072659967s ago: executing program 4 (id=63): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b000100001000090433"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 4.634856903s ago: executing program 3 (id=64): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000018c0)={0x44, &(0x7f0000001640)={0x20, 0x14, 0x74, "aa8671eaa6821dc3673c49b310cd1d8e5afee3298112f2d7a5d913b3d50f1699cd00f7529ad18c53a072dd2fbf3ebf2271292408c27068b22a443b35f535b71f968061a9f8e856ec2973b5d21e0d0d60d8cbc5fa10a91588d191641f1fb4324236c83a90693157ab43cb79b284e13e2b5e374f0f"}, &(0x7f0000001700)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001740)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001780)={0x20, 0x81, 0x1, "98"}, &(0x7f00000017c0)={0x20, 0x82, 0x2, "c5ab"}, &(0x7f0000001800)={0x20, 0x83, 0x1, "ba"}, 0x0, &(0x7f0000001880)={0x20, 0x85, 0x3, "0b9c9a"}}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x234, &(0x7f0000000ac0)=ANY=[]) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) syz_usb_disconnect(r0) 4.146021148s ago: executing program 1 (id=65): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpgrp(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='gid_map\x00') writev(r0, &(0x7f0000002780)=[{&(0x7f0000000300)="d9", 0x1}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80402, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101c02, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000000010104000000080000000000000000180001"], 0x4c}}, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x242502, 0x12) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x50, r6, 0x800, 0x70bd25, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0xffffffff}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8884}, 0x4000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) readahead(r7, 0x5, 0x7) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f00000001c0)={0x21}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0xa4, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x2f, &(0x7f0000000200)=""/189, &(0x7f00000002c0)=0xbd) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000440)=0x8) syz_kvm_setup_cpu$x86(r2, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) 4.014957643s ago: executing program 1 (id=66): socket$inet6(0xa, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000012c0)=""/12) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1016c0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x2, 0x338, 0x98, 0x98, 0xfeffffff, 0x98, 0x0, 0x2a0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x8}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @loopback, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@rand_addr=' \x01\x00', @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x75, 0x2, 0x2, 0x4002804c4, 0x9, 0x8000000000000000, 0x5, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x1, 0x8d], 0xeeee8000, 0x284a93}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.954985055s ago: executing program 1 (id=67): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc0) pipe2$9p(0x0, 0x800) r0 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_loose}]}}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003, 0x1000000}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000001}, 0x4000) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f00000000c0)=0x7) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="2400fb032d00ffdbdff160000d00000000000000", @ANYRES32], 0x24}], 0x1, 0x0, 0x0, 0x240088c0}, 0xc000) ioctl$HIDIOCGUSAGE(r2, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x80, 0x7fffffff, 0x14001, 0x44}) 3.878769217s ago: executing program 2 (id=68): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/if_inet6\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0xc002a2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, 0x18}) socket$can_raw(0x1d, 0x3, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r4, r6, 0x16, 0x0, @void}, 0x10) setsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, &(0x7f00000004c0)=0x1, 0x9) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0x4, 0x5, 0xfffffff1, 0x40000001, 0x5, 0x6}, {0xa, 0x5, 0x0, 0x9, 0x721, 0x1, 0x8}]}) r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r9}, 0xc) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0xeeee8000, 0x1}) ioctl$KVM_RUN(r11, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r12, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) setsockopt$sock_attach_bpf(r13, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r13, &(0x7f0000005280), 0x4000000000001cd, 0x1008c811) 3.809889179s ago: executing program 2 (id=69): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = epoll_create1(0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = dup3(r2, r4, 0x0) r6 = fcntl$dupfd(r5, 0x0, r1) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000100)={0xa0002000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r10 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) write$selinux_load(r10, &(0x7f0000000000)=ANY=[], 0x190ec) 3.710165922s ago: executing program 0 (id=70): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfffff9e3, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.689022423s ago: executing program 0 (id=71): syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000001b80)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$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") r0 = creat(&(0x7f0000000e40)='./file1\x00', 0xba) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) unshare(0x22020600) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000002240)={[0xe6]}, 0x8, 0x800) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)) copy_file_range(r2, 0x0, 0xffffffffffffffff, 0x0, 0x80000000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) setpriority(0x0, 0x0, 0x200002a14b56) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r4, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) eventfd2(0xffff4d6d, 0x80000) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x0, @hyper}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$exfat(0x0, &(0x7f0000000000)='./file1\x00', 0xa178a0, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 3.373751763s ago: executing program 0 (id=72): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$uac3(0x5, 0xcf, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x4242, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd, 0x3, 0x1, 0x48, 0x80, 0x5, {0x8, 0xb, 0x1, 0x1, 0x1, 0x24, 0x30, 0x80}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0xa, 0xab}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x9, 0x4, 0xe3, 0xf, "97b5c782d871"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x1, 0x4, 0x9}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xf, 0x40, 0x40, {0xa, 0x25, 0x25, 0x6, 0x81, 0xd6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x0, 0xf, 0xff, 'Va'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xf96a, 0x4, 0x6, 0x34}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x0, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x40}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0x9, 0x1}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x5, 0x1, 0x3, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7, 0x9, 0x4, {0xa, 0x25, 0x25, 0x0, 0x3, 0x10}}}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 3.006966475s ago: executing program 4 (id=73): r0 = syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000480)=ANY=[@ANYBLOB="12011003000000404406218040000102030109026e00030154c00f080b0001010130040904000000010130000a24010e0a0081000000090401000001023000090401010101023000090542d1ad"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000001600)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$cdc_ecm(0x2, 0x7f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x1, 0x9, 0x80, 0xe2, "", [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x5, {{0xa, 0x24, 0x6, 0x0, 0x0, "07918cdb11"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x47dc, 0x2, 0x2c}, [@dmm={0x7, 0x24, 0x14, 0x2, 0x1ba}, @mdlm={0x15, 0x24, 0x12, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x30, 0x3, 0xde}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0xf7, 0xad, 0xa2}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x9c, 0x70}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7f, 0x3, 0x98}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x6, 0x3, 0x9, 0x40, 0x7f}, 0x10, &(0x7f0000000140)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x6, 0xff, 0x8, 0x3}]}, 0x6, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40f}}, {0xbd, &(0x7f0000000300)=@string={0xbd, 0x3, "cc80bd285bae061c17ed34aa62375d8b8c18974eb45e8d20cdd8d89353f3d5d28c60f82624eb795602f1d5c3137c9726f4814b6c06e6debc2ffe68e0f6f26a5c1322896e55f034e19b4e8ccf4f5fe2c640c0be2ac230ce3788b802ee37d9a5930410676f3ad647567c609930cdcdc165952586ca5c09f264785f01db162b955f9271627e02248b39a516d3592115a4919cfd68a0e9701153e32349d16c035483427eff6101074a793d9305a16b0f12fe77f797bb6df51e2822de53"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2009}}]}) syz_usb_control_io(r1, &(0x7f0000001e80)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0xb, @lang_id={0x4, 0x3, 0x804}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000002d40)={0x2c, 0x0, &(0x7f0000002bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 2.905688198s ago: executing program 2 (id=74): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000d00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0xffff, 0xa222209, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.059445205s ago: executing program 2 (id=75): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000106a04270000000000000109022400010000100109040000010300030009218100fb0122280009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.652975608s ago: executing program 1 (id=76): syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000001b80)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$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") r0 = creat(&(0x7f0000000e40)='./file1\x00', 0xba) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000002240)={[0xe6]}, 0x8, 0x800) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)) copy_file_range(r2, 0x0, 0xffffffffffffffff, 0x0, 0x80000000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r4, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) eventfd2(0xffff4d6d, 0x80000) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x0, @hyper}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$exfat(0x0, &(0x7f0000000000)='./file1\x00', 0xa178a0, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 1.494761173s ago: executing program 1 (id=77): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de284211000000000001090224000100000000090400000103000000092100000001220500"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000", @ANYRES32, @ANYRES64], 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "1c565cfc", {0x3, 0x100, 0x0, 0x2, 0x0, 0x4, 0x7}}) r2 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) write$hidraw(r2, &(0x7f0000000f00)="5bfd", 0x2) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x8000) write$hidraw(r1, 0x0, 0x0) 1.014405368s ago: executing program 3 (id=78): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$uac2(0x1, 0x7b, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x7f, 0x40, 0x8, {0x8, 0xb, 0x2, 0x0, 0x1, 0x6, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x3, 0x9, 0xb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0x2, 0x8, {0x8, 0x25, 0x1, 0x0, 0x30, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x3, 0x4, {0x8, 0x25, 0x1, 0xc2, 0x3f, 0xcc, 0x9}}}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 806.888425ms ago: executing program 4 (id=79): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) futimesat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) openat$vcs(0xffffffffffffff9c, 0x0, 0x9a442, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket(0x10, 0x3, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x82) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='dots,fmask=00000000000000000006675,usefree,uid=', @ANYRESHEX=0xee00, @ANYRESDEC=r1, @ANYRESHEX=0xee00, @ANYRES32=r4], 0x0, 0x20e, &(0x7f0000000500)="$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") r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006a0005062cbd7000fcdbdf25020000000000000008000500", @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) bind$inet6(r5, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x2, @empty, 0x3}, 0x1c, 0x0}}], 0x1, 0x20080058) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r5) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) 0s ago: executing program 4 (id=81): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000500000000000000000069"], 0x29) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.4' (ED25519) to the list of known hosts. [ 18.754931][ T24] audit: type=1400 audit(1781095642.860:64): avc: denied { mounton } for pid=257 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 18.758093][ T257] cgroup: Unknown subsys name 'net' [ 18.764056][ T24] audit: type=1400 audit(1781095642.860:65): avc: denied { mount } for pid=257 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.773955][ T24] audit: type=1400 audit(1781095642.870:66): avc: denied { unmount } for pid=257 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.774332][ T257] cgroup: Unknown subsys name 'devices' [ 18.910341][ T257] cgroup: Unknown subsys name 'hugetlb' [ 18.915950][ T257] cgroup: Unknown subsys name 'rlimit' [ 19.054433][ T24] audit: type=1400 audit(1781095643.160:67): avc: denied { setattr } for pid=257 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.077569][ T24] audit: type=1400 audit(1781095643.160:68): avc: denied { mounton } for pid=257 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 19.098878][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 19.102908][ T24] audit: type=1400 audit(1781095643.160:69): avc: denied { mount } for pid=257 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 19.133909][ T24] audit: type=1400 audit(1781095643.220:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.159295][ T24] audit: type=1400 audit(1781095643.220:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.159631][ T257] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 19.184835][ T24] audit: type=1400 audit(1781095643.250:72): avc: denied { read } for pid=257 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.184850][ T24] audit: type=1400 audit(1781095643.250:73): avc: denied { open } for pid=257 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.015367][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.022715][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.030108][ T279] device bridge_slave_0 entered promiscuous mode [ 20.037534][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.044720][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.052092][ T279] device bridge_slave_1 entered promiscuous mode [ 20.099113][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.106148][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.113508][ T281] device bridge_slave_0 entered promiscuous mode [ 20.120302][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.127331][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.134665][ T281] device bridge_slave_1 entered promiscuous mode [ 20.179353][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.186391][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.193827][ T280] device bridge_slave_0 entered promiscuous mode [ 20.202700][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.209993][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.217337][ T280] device bridge_slave_1 entered promiscuous mode [ 20.272864][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.280017][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.287374][ T282] device bridge_slave_0 entered promiscuous mode [ 20.295334][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.302452][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.309838][ T282] device bridge_slave_1 entered promiscuous mode [ 20.331482][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.338523][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.345931][ T283] device bridge_slave_0 entered promiscuous mode [ 20.354801][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.361866][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.369216][ T283] device bridge_slave_1 entered promiscuous mode [ 20.422798][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.429967][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.437232][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.444271][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.484757][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.491896][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.499157][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.506194][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.517671][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.524722][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.531979][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.539041][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.555971][ T192] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.563360][ T192] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.570937][ T192] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.578042][ T192] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.585508][ T192] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.592665][ T192] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.600355][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.607670][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.629650][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.637902][ T192] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.644947][ T192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.661406][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.669688][ T192] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.676710][ T192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.684265][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.703021][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.710674][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.731638][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.739958][ T192] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.746973][ T192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.754352][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.762804][ T192] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.769846][ T192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.777206][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.785133][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.804593][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.812188][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.820356][ T192] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.827364][ T192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.835484][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.843572][ T192] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.850606][ T192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.857970][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 20.872691][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.888504][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.896086][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.904051][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.912469][ T192] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.919509][ T192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.927982][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.936194][ T192] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.943251][ T192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.956904][ T279] device veth0_vlan entered promiscuous mode [ 20.965555][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 20.973238][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.981889][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.990303][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.997649][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.005382][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.013365][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.021319][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.029422][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.037491][ T192] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.044607][ T192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.052248][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.059817][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.068377][ T280] device veth0_vlan entered promiscuous mode [ 21.079522][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 21.087934][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.096198][ T192] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.103256][ T192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.111600][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.119587][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.128781][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.136961][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.154171][ T283] device veth0_vlan entered promiscuous mode [ 21.161171][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.169686][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.177922][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.186534][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.194913][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.202824][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.210837][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.218793][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.226846][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.234295][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.244544][ T280] device veth1_macvtap entered promiscuous mode [ 21.253784][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.261921][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.270210][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.277712][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.286063][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.297051][ T279] device veth1_macvtap entered promiscuous mode [ 21.309275][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.316879][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.325079][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.341623][ T282] device veth0_vlan entered promiscuous mode [ 21.353472][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.361720][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.370983][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.379592][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.387798][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.396230][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.404533][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.412378][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.420481][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.428513][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.436728][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.445064][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.453365][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.461662][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.470013][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.477427][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.487302][ T283] device veth1_macvtap entered promiscuous mode [ 21.502548][ T281] device veth0_vlan entered promiscuous mode [ 21.510375][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.518123][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.526331][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.526597][ T279] request_module fs-gadgetfs succeeded, but still no fs? [ 21.535337][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.550245][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.558385][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.566205][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.577390][ T279] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 21.581714][ T282] device veth1_macvtap entered promiscuous mode [ 21.604279][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.616434][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.629083][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.637554][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.645999][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.654415][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.663079][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.685347][ T281] device veth1_macvtap entered promiscuous mode [ 21.696119][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.704899][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.714169][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.742381][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.753583][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.762437][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.770720][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.780157][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.788408][ T192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.179199][ T52] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 22.189066][ T5] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 22.209102][ T20] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 22.209806][ T323] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 22.229740][ T330] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 22.449148][ T20] usb 1-1: Using ep0 maxpacket: 8 [ 22.459102][ T323] usb 5-1: Using ep0 maxpacket: 8 [ 22.469373][ T330] usb 3-1: Using ep0 maxpacket: 32 [ 22.549488][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 22.560479][ T5] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 22.569541][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 22.579696][ T323] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 22.587868][ T323] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 22.598402][ T5] usb 4-1: config 0 descriptor?? [ 22.603451][ T323] usb 5-1: config 0 has no interface number 0 [ 22.609526][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 22.609538][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 22.609555][ T330] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 22.609566][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 22.611534][ T330] usb 3-1: config 0 descriptor?? [ 22.620733][ T323] usb 5-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 22.630514][ T20] usb 1-1: unable to get BOS descriptor or descriptor too short [ 22.671731][ T323] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 22.681430][ T330] hub 3-1:0.0: USB hub found [ 22.681616][ T323] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 255 [ 22.696269][ T323] usb 5-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 22.709507][ T52] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 22.718579][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 22.726639][ T52] usb 2-1: Product: syz [ 22.729076][ T20] usb 1-1: config 7 has an invalid interface number: 150 but max is 0 [ 22.730971][ T52] usb 2-1: Manufacturer: syz [ 22.740433][ T20] usb 1-1: config 7 has no interface number 0 [ 22.749720][ T52] usb 2-1: SerialNumber: syz [ 22.751198][ T52] usb 2-1: config 0 descriptor?? [ 22.759419][ T20] usb 1-1: config 7 interface 150 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 8 [ 22.769458][ T20] usb 1-1: config 7 interface 150 has no altsetting 0 [ 22.879122][ T323] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 22.888260][ T323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 22.896385][ T323] usb 5-1: Product: syz [ 22.899472][ T330] hub 3-1:0.0: 1 port detected [ 22.901031][ T323] usb 5-1: Manufacturer: syz [ 22.910024][ T323] usb 5-1: SerialNumber: syz [ 22.915266][ T323] usb 5-1: config 0 descriptor?? [ 22.929222][ T5] usbhid 4-1:0.0: can't add hid device: -71 [ 22.935241][ T5] usbhid: probe of 4-1:0.0 failed with error -71 [ 22.941720][ T324] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 22.941735][ T324] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 22.956437][ T5] usb 4-1: USB disconnect, device number 2 [ 22.961839][ T20] usb 1-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=2c.a5 [ 22.971602][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 22.979736][ T20] usb 1-1: Product: syz [ 22.984023][ T20] usb 1-1: Manufacturer: syz [ 22.988627][ T20] usb 1-1: SerialNumber: syz [ 23.009098][ T329] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 23.119134][ T332] udc-core: couldn't find an available UDC or it's busy [ 23.126163][ T332] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 23.171868][ T324] udc-core: couldn't find an available UDC or it's busy [ 23.178950][ T324] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 23.186666][ T324] udc-core: couldn't find an available UDC or it's busy [ 23.187928][ T332] udc-core: couldn't find an available UDC or it's busy [ 23.196009][ T324] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 23.201988][ T332] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 23.241004][ T323] usb 5-1: USB disconnect, device number 2 [ 23.271059][ T20] usb 1-1: USB disconnect, device number 2 [ 23.417411][ T332] udc-core: couldn't find an available UDC or it's busy [ 23.424547][ T332] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 23.424554][ T5] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 23.449046][ T332] udc-core: couldn't find an available UDC or it's busy [ 23.456022][ T332] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 23.463867][ T332] udc-core: couldn't find an available UDC or it's busy [ 23.470919][ T332] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 23.499098][ T330] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 23.505474][ T330] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 23.609012][ T330] usbhid 3-1:0.0: can't add hid device: -71 [ 23.615017][ T330] usbhid: probe of 3-1:0.0 failed with error -71 [ 23.649324][ T330] usb 3-1: USB disconnect, device number 2 [ 23.799091][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.810101][ T5] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 23.819170][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.827969][ T5] usb 4-1: config 0 descriptor?? [ 24.001665][ T336] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 24.019021][ T328] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 24.269066][ T323] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 24.369007][ T336] usb 5-1: config 0 has no interfaces? [ 24.374557][ T336] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 24.379195][ T328] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 24.383785][ T336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.405182][ T336] usb 5-1: config 0 descriptor?? [ 24.469157][ T328] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 24.478219][ T328] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 24.486306][ T328] usb 1-1: SerialNumber: syz [ 24.629017][ T323] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 24.639407][ T323] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 24.648432][ T323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.654581][ T341] udc-core: couldn't find an available UDC or it's busy [ 24.663409][ T341] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 24.671213][ T341] udc-core: couldn't find an available UDC or it's busy [ 24.678158][ T341] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 24.686057][ T333] usb 5-1: USB disconnect, device number 3 [ 24.692640][ T323] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 24.759016][ T5] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 24.766645][ T5] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input4 [ 25.080734][ T323] usb 2-1: USB disconnect, device number 2 [ 25.190548][ T328] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 25.209925][ T24] kauditd_printk_skb: 36 callbacks suppressed [ 25.209935][ T24] audit: type=1400 audit(1781095649.320:110): avc: denied { read } for pid=133 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 25.248999][ T333] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 25.478986][ T323] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 25.489129][ T333] usb 5-1: Using ep0 maxpacket: 8 [ 25.591033][ T343] udc-core: couldn't find an available UDC or it's busy [ 25.598010][ T343] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 25.605773][ T343] udc-core: couldn't find an available UDC or it's busy [ 25.614322][ T343] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 25.719053][ T323] usb 2-1: Using ep0 maxpacket: 16 [ 25.750888][ T287] usb 4-1: USB disconnect, device number 3 [ 25.769126][ T333] usb 5-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 25.778330][ T333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.786390][ T333] usb 5-1: Product: syz [ 25.790813][ T333] usb 5-1: Manufacturer: syz [ 25.795415][ T333] usb 5-1: SerialNumber: syz [ 25.801139][ T333] usb 5-1: config 0 descriptor?? [ 25.822427][ T343] udc-core: couldn't find an available UDC or it's busy [ 25.829581][ T343] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 25.839109][ T323] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 25.850932][ T323] usb 2-1: config 0 interface 0 has no altsetting 0 [ 26.009063][ T323] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 26.018270][ T323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.026313][ T323] usb 2-1: Product: syz [ 26.030520][ T323] usb 2-1: Manufacturer: syz [ 26.035121][ T323] usb 2-1: SerialNumber: syz [ 26.040052][ T343] udc-core: couldn't find an available UDC or it's busy [ 26.041092][ T323] usb 2-1: config 0 descriptor?? [ 26.050337][ T343] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 26.168998][ T287] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 26.282108][ T333] usb 1-1: USB disconnect, device number 3 [ 27.237958][ T5] usb 3-1: USB disconnect, device number 3 [ 27.256867][ T369] ------------[ cut here ]------------ [ 27.323286][ T333] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 27.340832][ T369] WARNING: CPU: 0 PID: 369 at mm/page_alloc.c:5368 __alloc_pages_nodemask+0x345/0x620 [ 27.350681][ T20] usb 5-1: USB disconnect, device number 4 [ 27.360981][ T323] usb 2-1: USB disconnect, device number 3 [ 27.374020][ T24] audit: type=1400 audit(1781095651.480:111): avc: denied { create } for pid=376 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 27.426079][ T369] Modules linked in: [ 27.443757][ T369] CPU: 0 PID: 369 Comm: syz.2.17 Not tainted syzkaller #0 [ 27.455533][ T369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 27.475470][ T369] RIP: 0010:__alloc_pages_nodemask+0x345/0x620 [ 27.484183][ T369] Code: 48 3b 8c 24 e0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 41 f7 c6 00 20 00 00 0f 85 d8 fd ff ff <0f> 0b 31 c0 eb 95 31 c0 e9 a6 fd ff ff 4c 89 ff e8 76 74 f5 ff 49 [ 27.504259][ T369] RSP: 0018:ffffc90000d578e0 EFLAGS: 00010246 [ 27.510777][ T369] RAX: ffffc90000d57970 RBX: 0000000000000000 RCX: 0000000000000000 [ 27.518764][ T369] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffc90000d57988 [ 27.526786][ T369] RBP: ffffc90000d57a10 R08: ffffc90000d57987 R09: ffffc90000d57970 [ 27.535206][ T369] R10: dffffc0000000000 R11: fffff520001aaf31 R12: 1ffff920001aaf24 [ 27.543243][ T369] R13: dffffc0000000000 R14: 0000000000040d40 R15: 000000000000000b [ 27.551635][ T369] FS: 00007f0a505036c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 27.560604][ T369] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.567199][ T369] CR2: 000055a3c354c300 CR3: 000000010dc1c000 CR4: 00000000003506a0 [ 27.575212][ T369] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.583214][ T369] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.591683][ T369] Call Trace: [ 27.595019][ T369] ? legacy_get_tree+0xed/0x190 [ 27.599925][ T369] ? vfs_get_tree+0x89/0x260 [ 27.604533][ T369] ? do_new_mount+0x25a/0xa20 [ 27.609235][ T369] ? path_mount+0x585/0xc90 [ 27.613750][ T369] ? __se_sys_mount+0x320/0x390 [ 27.618618][ T369] ? __x64_sys_mount+0xbf/0xd0 [ 27.623436][ T369] ? do_syscall_64+0x31/0x40 [ 27.628039][ T369] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.634980][ T369] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 27.640981][ T369] kmalloc_order+0x4c/0x160 [ 27.645716][ T369] kmalloc_order_trace+0x16/0x80 [ 27.651486][ T377] F2FS-fs (loop0): invalid crc value [ 27.655808][ T369] __kmalloc+0x1eb/0x330 [ 27.665006][ T369] incfs_realloc_mount_info+0x99/0x440 [ 27.670667][ T369] incfs_alloc_mount_info+0x476/0x540 [ 27.676054][ T369] incfs_mount_fs+0x3c6/0x8d0 [ 27.680793][ T369] ? incfs_unlink+0x80/0x80 [ 27.685322][ T369] ? selinux_sb_eat_lsm_opts+0xa72/0xbf0 [ 27.690998][ T369] legacy_get_tree+0xed/0x190 [ 27.695689][ T369] ? incfs_unlink+0x80/0x80 [ 27.700255][ T369] vfs_get_tree+0x89/0x260 [ 27.704686][ T369] do_new_mount+0x25a/0xa20 [ 27.706461][ T377] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 27.709250][ T369] path_mount+0x585/0xc90 [ 27.724751][ T369] __se_sys_mount+0x320/0x390 [ 27.729472][ T369] ? __x64_sys_mount+0xd0/0xd0 [ 27.734250][ T369] __x64_sys_mount+0xbf/0xd0 [ 27.738856][ T369] do_syscall_64+0x31/0x40 [ 27.743343][ T369] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.749344][ T369] RIP: 0033:0x7f0a51aa8e59 [ 27.753769][ T369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.773408][ T369] RSP: 002b:00007f0a50503028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 27.781878][ T369] RAX: ffffffffffffffda RBX: 00007f0a51d21fa0 RCX: 00007f0a51aa8e59 [ 27.789931][ T369] RDX: 00002000000000c0 RSI: 0000200000000140 RDI: 0000200000000040 [ 27.790103][ T287] usb 4-1: Using ep0 maxpacket: 8 [ 27.798597][ T369] RBP: 00007f0a51b3ed6f R08: 00002000000007c0 R09: 0000000000000000 [ 27.814049][ T369] R10: 0000000000200c04 R11: 0000000000000246 R12: 0000000000000000 [ 27.822195][ T369] R13: 00007f0a51d22038 R14: 00007f0a51d21fa0 R15: 00007ffe4081a568 [ 27.829108][ T5] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 27.830277][ T369] ---[ end trace ba03edbfebcae5de ]--- [ 27.837770][ T323] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 27.843124][ T369] incfs: Error allocating mount info. -12 [ 27.856347][ T369] incfs: mount failed -12 [ 27.864196][ T377] F2FS-fs (loop0): Start checkpoint disabled! [ 27.870905][ T377] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 27.878509][ T24] audit: type=1400 audit(1781095651.980:112): avc: denied { mount } for pid=376 comm="syz.0.19" name="/" dev="loop0" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.961848][ T20] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 28.009175][ T287] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 28.017438][ T287] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 28.027279][ T287] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 28.037121][ T287] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 28.047098][ T287] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 28.060283][ T287] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 28.069375][ T287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.079403][ T24] audit: type=1400 audit(1781095652.190:113): avc: denied { write } for pid=376 comm="syz.0.19" name="/" dev="loop0" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 28.102608][ T24] audit: type=1400 audit(1781095652.210:114): avc: denied { add_name } for pid=376 comm="syz.0.19" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 28.126485][ T24] audit: type=1400 audit(1781095652.210:115): avc: denied { create } for pid=376 comm="syz.0.19" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 28.148979][ T323] usb 2-1: Using ep0 maxpacket: 16 [ 28.154159][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 28.238947][ T20] usb 5-1: Using ep0 maxpacket: 32 [ 28.299069][ T323] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 28.310029][ T323] usb 2-1: config 0 interface 0 has no altsetting 0 [ 28.339006][ T5] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 28.346795][ T5] usb 3-1: can't read configurations, error -61 [ 28.359041][ T20] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 28.367476][ T20] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 28.376100][ T20] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 28.385119][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 28.394891][ T20] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 28.404639][ T20] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 28.417666][ T20] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 28.426777][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.435572][ T20] usb 5-1: config 0 descriptor?? [ 28.479409][ T323] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 28.488463][ T323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.506711][ T323] usb 2-1: Product: syz [ 28.511093][ T5] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 28.529133][ T323] usb 2-1: Manufacturer: syz [ 28.534381][ T323] usb 2-1: config 0 descriptor?? [ 28.569054][ T323] usb 2-1: can't set config #0, error -71 [ 28.579720][ T323] usb 2-1: USB disconnect, device number 4 [ 28.681205][ T24] audit: type=1400 audit(1781095652.770:116): avc: denied { create } for pid=421 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.790972][ T20] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 28.967023][ T24] audit: type=1400 audit(1781095653.070:117): avc: denied { read write } for pid=366 comm="syz.3.16" name="lp0" dev="devtmpfs" ino=552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 29.015916][ T336] usb 5-1: USB disconnect, device number 5 [ 29.028957][ C1] usblp0: nonzero read bulk status received: -71 [ 29.036217][ T425] usblp0: error -71 reading from printer [ 29.043228][ T425] udc-core: couldn't find an available UDC or it's busy [ 29.083790][ T425] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 29.110055][ T425] udc-core: couldn't find an available UDC or it's busy [ 29.141913][ T24] audit: type=1400 audit(1781095653.100:118): avc: denied { open } for pid=366 comm="syz.3.16" path="/dev/usb/lp0" dev="devtmpfs" ino=552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 29.168330][ T425] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 29.208810][ T425] udc-core: couldn't find an available UDC or it's busy [ 29.243527][ T425] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 29.283802][ T425] udc-core: couldn't find an available UDC or it's busy [ 29.290981][ T24] audit: type=1400 audit(1781095653.100:119): avc: denied { ioctl } for pid=366 comm="syz.3.16" path="/dev/usb/lp0" dev="devtmpfs" ino=552 ioctlcmd=0x5b02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 29.397617][ T425] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 29.488216][ T7] attempt to access beyond end of device [ 29.488216][ T7] loop0: rw=2049, want=45104, limit=40427 [ 29.626632][ T425] udc-core: couldn't find an available UDC or it's busy [ 29.638769][ T425] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 30.006908][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 30.060516][ T439] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 30.069507][ T439] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 30.169169][ T5] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 30.176931][ T5] usb 3-1: can't read configurations, error -61 [ 30.183319][ T5] usb usb3-port1: attempt power cycle [ 30.400088][ T24] kauditd_printk_skb: 10 callbacks suppressed [ 30.400106][ T24] audit: type=1400 audit(1781095654.510:130): avc: denied { read } for pid=445 comm="syz.2.26" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 30.430891][ T24] audit: type=1400 audit(1781095654.540:131): avc: denied { open } for pid=445 comm="syz.2.26" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 30.431601][ T446] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.453834][ T24] audit: type=1400 audit(1781095654.540:132): avc: denied { ioctl } for pid=445 comm="syz.2.26" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 30.563726][ T453] 9pnet: Insufficient options for proto=fd [ 30.731782][ T24] audit: type=1400 audit(1781095654.840:133): avc: denied { create } for pid=458 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.762351][ T287] usb 4-1: USB disconnect, device number 4 [ 30.773360][ T366] usblp0: removed [ 30.793215][ T24] audit: type=1400 audit(1781095654.900:134): avc: denied { create } for pid=462 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 30.825658][ T24] audit: type=1400 audit(1781095654.920:135): avc: denied { block_suspend } for pid=462 comm="syz.3.32" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 30.846917][ T323] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 30.854619][ T333] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 31.248902][ T475] incfs: Error allocating mount info. -12 [ 31.255552][ T475] incfs: mount failed -12 [ 31.330302][ T323] usb 1-1: Using ep0 maxpacket: 16 [ 31.517288][ T333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.529060][ T287] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 31.529447][ T333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.546412][ T333] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 31.562447][ T333] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 31.572658][ T333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.582765][ T323] usb 1-1: unable to get BOS descriptor or descriptor too short [ 31.833547][ T287] usb 5-1: Using ep0 maxpacket: 16 [ 31.989142][ T287] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 31.997029][ T287] usb 5-1: can't read configurations, error -61 [ 32.152049][ T333] usb 2-1: config 0 descriptor?? [ 32.187153][ T287] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 32.200422][ T482] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 32.209463][ T482] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 32.219665][ T323] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.232386][ T323] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 32.508978][ T287] usb 5-1: Using ep0 maxpacket: 16 [ 32.592033][ T323] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 32.601109][ T323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.609137][ T323] usb 1-1: Product: syz [ 32.613326][ T323] usb 1-1: Manufacturer: syz [ 32.617961][ T323] usb 1-1: SerialNumber: syz [ 32.630567][ T333] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 32.639385][ T333] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 32.649560][ T333] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 32.689051][ T287] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 32.696682][ T287] usb 5-1: can't read configurations, error -61 [ 32.703054][ T287] usb usb5-port1: attempt power cycle [ 32.889596][ T323] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 32.898019][ T323] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 32.905752][ T478] usb 2-1: USB disconnect, device number 5 [ 33.090251][ T24] audit: type=1400 audit(1781095657.200:136): avc: denied { create } for pid=449 comm="syz.0.27" dev="anon_inodefs" ino=16051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.118352][ T493] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 33.178619][ T287] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 33.218956][ T24] audit: type=1400 audit(1781095657.320:137): avc: denied { create } for pid=497 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 33.329034][ T287] usb 5-1: Using ep0 maxpacket: 16 [ 33.329051][ T323] usb 1-1: 2:1 : can't get Cluster Descriptor [ 33.419246][ T501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.41'. [ 33.448667][ T24] audit: type=1400 audit(1781095657.510:138): avc: denied { read } for pid=497 comm="syz.2.41" name="usbmon6" dev="devtmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 33.666821][ T323] usb 1-1: USB disconnect, device number 4 [ 33.691561][ T24] audit: type=1400 audit(1781095657.510:139): avc: denied { open } for pid=497 comm="syz.2.41" path="/dev/usbmon6" dev="devtmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 33.729085][ T287] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 33.736728][ T287] usb 5-1: can't read configurations, error -61 [ 33.750562][ T503] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 33.759676][ T503] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.900711][ T287] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 34.039106][ T287] usb 5-1: Using ep0 maxpacket: 16 [ 34.285135][ T287] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 34.307727][ T287] usb 5-1: can't read configurations, error -71 [ 34.310113][ T516] process 'syz.2.45' launched './file0' with NULL argv: empty string added [ 34.320717][ T287] usb usb5-port1: unable to enumerate USB device [ 34.559030][ T323] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 34.619086][ T333] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 34.628998][ T5] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 34.689086][ T287] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 34.710220][ T534] F2FS-fs (loop1): invalid crc value [ 34.716569][ T534] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 34.742252][ T534] F2FS-fs (loop1): Start checkpoint disabled! [ 34.748792][ T534] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 34.798941][ T323] usb 1-1: Using ep0 maxpacket: 32 [ 35.269109][ T287] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 35.278654][ T287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.287480][ T287] usb 5-1: Product: syz [ 35.292273][ T287] usb 5-1: Manufacturer: syz [ 35.296940][ T287] usb 5-1: SerialNumber: syz [ 35.619998][ T333] usb 4-1: Using ep0 maxpacket: 32 [ 35.625633][ T370] attempt to access beyond end of device [ 35.625633][ T370] loop1: rw=2049, want=45104, limit=40427 [ 35.659105][ T323] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 35.669317][ T323] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 35.682421][ T323] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 35.691493][ T323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.709384][ T323] usb 1-1: config 0 descriptor?? [ 35.739054][ T5] usb 3-1: config 127 has an invalid interface number: 127 but max is 0 [ 35.747453][ T5] usb 3-1: config 127 has no interface number 0 [ 35.753797][ T333] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 35.764266][ T323] hub 1-1:0.0: bad descriptor, ignoring hub [ 35.770594][ T323] hub: probe of 1-1:0.0 failed with error -5 [ 35.776780][ T323] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 35.929061][ T5] usb 3-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice=53.27 [ 35.938262][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.946317][ T333] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 35.955622][ T5] usb 3-1: Product: syz [ 35.959814][ T5] usb 3-1: Manufacturer: syz [ 35.964403][ T5] usb 3-1: SerialNumber: syz [ 35.969038][ T333] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 35.977192][ T333] usb 4-1: Product: syz [ 35.981686][ T333] usb 4-1: Manufacturer: syz [ 35.986504][ T333] usb 4-1: SerialNumber: syz [ 35.991688][ T333] usb 4-1: config 0 descriptor?? [ 35.999084][ T287] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 36.009077][ T528] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 36.029293][ T333] hub 4-1:0.0: bad descriptor, ignoring hub [ 36.035208][ T333] hub: probe of 4-1:0.0 failed with error -5 [ 36.249004][ T287] usb 2-1: Using ep0 maxpacket: 32 [ 36.340590][ T544] udc-core: couldn't find an available UDC or it's busy [ 36.347626][ T544] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 36.357056][ T544] udc-core: couldn't find an available UDC or it's busy [ 36.364006][ T544] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 36.371669][ T287] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 36.539059][ T287] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 36.548148][ T287] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 36.556363][ T287] usb 2-1: Product: syz [ 36.560563][ T287] usb 2-1: Manufacturer: syz [ 36.565145][ T287] usb 2-1: SerialNumber: syz [ 36.570261][ T287] usb 2-1: config 0 descriptor?? [ 36.574733][ T544] udc-core: couldn't find an available UDC or it's busy [ 36.582223][ T544] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 36.589776][ T543] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 36.590420][ T544] udc-core: couldn't find an available UDC or it's busy [ 36.603690][ T544] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 36.609843][ T287] hub 2-1:0.0: bad descriptor, ignoring hub [ 36.613220][ T544] udc-core: couldn't find an available UDC or it's busy [ 36.617524][ T287] hub: probe of 2-1:0.0 failed with error -5 [ 36.624269][ T544] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 36.831519][ T528] udc-core: couldn't find an available UDC or it's busy [ 36.838621][ T528] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 36.939097][ T287] usb 2-1: USB disconnect, device number 6 [ 36.959039][ T5] usb 4-1: USB disconnect, device number 5 [ 37.288966][ T287] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 37.300492][ T478] usb 5-1: USB disconnect, device number 10 [ 37.453522][ T5] usb 3-1: USB disconnect, device number 7 [ 37.669088][ T287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 37.698986][ T478] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 37.879200][ T287] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 37.910957][ T287] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 37.954368][ T287] usb 2-1: Product: syz [ 37.958995][ T478] usb 5-1: Using ep0 maxpacket: 32 [ 37.982503][ T287] usb 2-1: Manufacturer: syz [ 38.006867][ T287] usb 2-1: SerialNumber: syz [ 38.036492][ T287] usb 2-1: config 0 descriptor?? [ 38.079228][ T543] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 38.109144][ T478] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 38.131086][ T287] hub 2-1:0.0: bad descriptor, ignoring hub [ 38.145285][ T478] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.161535][ T287] hub: probe of 2-1:0.0 failed with error -5 [ 38.196416][ T478] usb 5-1: config 0 descriptor?? [ 38.452948][ T480] usb 1-1: reset high-speed USB device number 5 using dummy_hcd [ 38.470993][ T478] usb 2-1: USB disconnect, device number 7 [ 38.563573][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 38.563583][ T24] audit: type=1400 audit(1781095662.670:142): avc: denied { read } for pid=557 comm="syz.3.59" dev="nsfs" ino=4026532287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 38.590461][ T24] audit: type=1400 audit(1781095662.670:143): avc: denied { open } for pid=557 comm="syz.3.59" path="net:[4026532287]" dev="nsfs" ino=4026532287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 38.758999][ T5] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 38.819022][ T480] usb 1-1: device firmware changed [ 38.825364][ T480] usb 1-1: USB disconnect, device number 5 [ 38.835226][ T560] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 38.843631][ T560] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 38.854013][ T560] F2FS-fs (loop3): Found nat_bits in checkpoint [ 38.886383][ T560] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 38.893547][ T560] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 38.901232][ T24] audit: type=1400 audit(1781095663.010:144): avc: denied { mount } for pid=559 comm="syz.3.60" name="/" dev="loop3" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.922585][ T24] audit: type=1400 audit(1781095663.030:145): avc: denied { create } for pid=559 comm="syz.3.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 38.942013][ T24] audit: type=1400 audit(1781095663.030:146): avc: denied { create } for pid=559 comm="syz.3.60" name=2E02 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 38.962778][ T24] audit: type=1400 audit(1781095663.050:147): avc: denied { create } for pid=559 comm="syz.3.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.279416][ T24] audit: type=1400 audit(1781095663.340:148): avc: denied { setattr } for pid=559 comm="syz.3.60" name=2E02 dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 39.301371][ T480] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 39.378976][ T478] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 39.638987][ T480] usb 1-1: Using ep0 maxpacket: 32 [ 39.759038][ T480] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.770058][ T478] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 39.780237][ T480] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.790329][ T478] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 39.799495][ T480] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 39.805287][ T24] audit: type=1400 audit(1781095663.910:149): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.808595][ T478] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.817018][ T478] usb 2-1: config 0 descriptor?? [ 39.841127][ T480] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.849113][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.849157][ T5] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 39.869108][ T480] usb 1-1: config 0 descriptor?? [ 39.869571][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.885817][ T5] usb 3-1: config 0 descriptor?? [ 39.911052][ T480] hub 1-1:0.0: USB hub found [ 40.100351][ T287] usb 2-1: USB disconnect, device number 8 [ 40.129003][ T480] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 40.229046][ T5] usbhid 3-1:0.0: can't add hid device: -71 [ 40.235052][ T5] usbhid: probe of 3-1:0.0 failed with error -71 [ 40.242383][ T5] usb 3-1: USB disconnect, device number 8 [ 40.259011][ T333] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 40.322608][ T336] usb 5-1: USB disconnect, device number 11 [ 40.559772][ T480] hid-generic 0003:046D:C31C.0002: unknown main item tag 0x0 [ 40.567981][ T480] hid-generic 0003:046D:C31C.0002: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 40.579616][ T287] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 40.659069][ T333] usb 4-1: unable to get BOS descriptor or descriptor too short [ 40.699011][ T5] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 40.728989][ T336] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 40.739252][ T333] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.749417][ T333] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 40.761553][ T333] usb 4-1: config 1 interface 2 altsetting 1 has an invalid endpoint with address 0x45, skipping [ 40.929255][ T333] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 40.938377][ T333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.946391][ T333] usb 4-1: Product: syz [ 40.950625][ T333] usb 4-1: Manufacturer: syz [ 40.955203][ T333] usb 4-1: SerialNumber: syz [ 40.959787][ T287] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.959827][ T287] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 40.978977][ T287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.987417][ T287] usb 2-1: config 0 descriptor?? [ 41.009117][ T336] usb 5-1: Using ep0 maxpacket: 32 [ 41.069129][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.080263][ T5] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 41.089325][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.097715][ T5] usb 3-1: config 0 descriptor?? [ 41.129182][ T336] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 41.137435][ T336] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.147554][ T336] usb 5-1: config 0 has no interface number 0 [ 41.199153][ T556] usb 1-1: reset high-speed USB device number 6 using dummy_hcd [ 41.309015][ T336] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 41.318195][ T336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.326232][ T336] usb 5-1: Product: syz [ 41.329145][ T333] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 41.330526][ T336] usb 5-1: Manufacturer: syz [ 41.339912][ T333] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 41.343371][ T336] usb 5-1: SerialNumber: syz [ 41.356879][ T333] usb 4-1: USB disconnect, device number 6 [ 41.364871][ T336] usb 5-1: config 0 descriptor?? [ 41.979453][ T25] usb 1-1: USB disconnect, device number 6 [ 41.989068][ T333] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 42.019131][ T550] udc-core: couldn't find an available UDC or it's busy [ 42.026201][ T550] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 42.039147][ T5] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 42.046894][ T5] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7 [ 42.056389][ T24] audit: type=1400 audit(1781095666.160:150): avc: denied { read } for pid=79 comm="acpid" name="event3" dev="devtmpfs" ino=604 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.079065][ T24] audit: type=1400 audit(1781095666.160:151): avc: denied { open } for pid=79 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=604 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.228975][ T333] usb 4-1: Using ep0 maxpacket: 32 [ 42.247601][ T5] usb 2-1: USB disconnect, device number 9 [ 42.267352][ T587] netlink: 32 bytes leftover after parsing attributes in process `syz.1.65'. [ 42.276320][ T587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.65'. [ 42.287635][ T587] netlink: 'syz.1.65': attribute type 1 has an invalid length. [ 42.311390][ T587] kvm [586]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 42.320657][ T587] kvm [586]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 42.349062][ T333] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 42.357265][ T333] usb 4-1: config 0 has no interface number 0 [ 42.363461][ T333] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 42.373593][ T333] usb 4-1: config 0 interface 196 has no altsetting 0 [ 42.449497][ T594] 9pnet: Insufficient options for proto=fd [ 42.469924][ T25] usb 3-1: USB disconnect, device number 9 [ 42.539032][ T333] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 42.548123][ T333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.556153][ T333] usb 4-1: Product: syz [ 42.560395][ T333] usb 4-1: Manufacturer: syz [ 42.565000][ T333] usb 4-1: SerialNumber: syz [ 42.572935][ T333] usb 4-1: config 0 descriptor?? [ 42.589132][ T583] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 42.694496][ T603] capability: warning: `syz.0.70' uses deprecated v2 capabilities in a way that may be insecure [ 42.779769][ T607] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.789438][ T607] SELinux: failed to load policy [ 42.889981][ T606] ====================================================== [ 42.889981][ T606] WARNING: the mand mount option is being deprecated and [ 42.889981][ T606] will be removed in v5.15! [ 42.889981][ T606] ====================================================== [ 42.935140][ T606] exfat: Deprecated parameter 'utf8' [ 42.942092][ T606] exfat: Deprecated parameter 'namecase' [ 42.947959][ T606] exfat: Deprecated parameter 'utf8' [ 42.991366][ T606] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 43.008803][ T606] exFAT-fs (loop0): error, tried to truncate zeroed cluster. [ 43.039050][ T5] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 43.051204][ T333] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 43.319018][ T25] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 43.343859][ T330] usb 5-1: USB disconnect, device number 12 [ 43.399002][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.409991][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.419763][ T5] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 43.449825][ T5] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 43.458843][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.496247][ T5] usb 2-1: config 0 descriptor?? [ 43.679144][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.690272][ T25] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 43.699420][ T330] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 43.707015][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.715505][ T25] usb 1-1: config 0 descriptor?? [ 43.969692][ T5] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 43.977959][ T5] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 43.987054][ T5] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 44.059046][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 44.065082][ T25] usbhid: probe of 1-1:0.0 failed with error -71 [ 44.072159][ T25] usb 1-1: USB disconnect, device number 7 [ 44.099062][ T330] usb 5-1: unable to get BOS descriptor or descriptor too short [ 44.179061][ T330] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.189205][ T330] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 44.198145][ T330] usb 5-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x42, skipping [ 44.239931][ T287] usb 2-1: USB disconnect, device number 10 [ 44.340315][ T24] kauditd_printk_skb: 35 callbacks suppressed [ 44.340324][ T24] audit: type=1400 audit(1781095668.450:187): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 44.366548][ T330] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 44.375831][ T330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.384018][ T330] usb 5-1: Product: syz [ 44.388198][ T330] usb 5-1: Manufacturer: syz [ 44.392961][ T330] usb 5-1: SerialNumber: syz [ 44.528972][ T25] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 44.658976][ T333] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 44.789488][ T635] exfat: Deprecated parameter 'utf8' [ 44.794857][ T635] exfat: Deprecated parameter 'namecase' [ 44.800681][ T635] exfat: Deprecated parameter 'utf8' [ 44.821550][ T635] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 44.835556][ T635] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 44.849210][ T626] udc-core: couldn't find an available UDC or it's busy [ 44.856189][ T626] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 44.879383][ T323] usb 4-1: USB disconnect, device number 7 [ 44.889152][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.900286][ T287] ipheth 4-1:0.196: ipheth_carrier_set: usb_control_msg: -71 [ 44.908952][ T333] usb 3-1: Using ep0 maxpacket: 16 [ 44.920211][ T25] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 44.929312][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.940574][ T25] usb 1-1: config 0 descriptor?? [ 44.949168][ T323] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 45.049092][ T333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.060055][ T333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.069966][ T333] usb 3-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 45.079134][ T333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.087590][ T333] usb 3-1: config 0 descriptor?? [ 45.112698][ T330] usb 5-1: USB disconnect, device number 13 [ 45.208972][ T287] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 45.319713][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.569111][ T287] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 45.579281][ T287] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 45.592397][ T287] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 45.603048][ T287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.619006][ T333] usbhid 3-1:0.0: can't add hid device: -71 [ 45.625128][ T333] usbhid: probe of 3-1:0.0 failed with error -71 [ 45.632391][ T333] usb 3-1: USB disconnect, device number 10 [ 45.666365][ T330] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 45.674204][ T287] usb 2-1: config 0 descriptor?? [ 45.719784][ T287] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 45.859160][ T610] udc-core: couldn't find an available UDC or it's busy [ 45.866245][ T610] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 45.879015][ T25] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 45.886718][ T25] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9 [ 46.039136][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.050253][ T330] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 46.059300][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.072793][ T330] usb 4-1: config 0 descriptor?? [ 46.080846][ T24] audit: type=1400 audit(1781095670.190:188): avc: denied { read write } for pid=657 comm="syz.2.80" name="vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.109157][ T24] audit: type=1400 audit(1781095670.190:189): avc: denied { open } for pid=657 comm="syz.2.80" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.410572][ T660] FAT-fs (loop2): Unrecognized mount option "uid=0x000000000000ee00000000000000000000660x000000000000ee00ÿÿÿÿ" or missing value [ 46.434743][ T664] fuse: Unknown parameter 'fd0x0000000000000003' [ 46.441326][ T330] usbhid 4-1:0.0: can't add hid device: -71 [ 46.447752][ T330] usbhid: probe of 4-1:0.0 failed with error -71 [ 46.468954][ C1] ================================================================================ [ 46.478262][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 46.486859][ C1] index 547 is out of range for type 'const int[34]' [ 46.493537][ C1] CPU: 1 PID: 83 Comm: klogd Tainted: G W syzkaller #0 [ 46.501700][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 46.511756][ C1] Call Trace: [ 46.515040][ C1] [ 46.517906][ C1] __dump_stack+0x21/0x24 [ 46.522252][ C1] dump_stack_lvl+0x1a7/0x208 [ 46.526933][ C1] ? show_regs_print_info+0x18/0x18 [ 46.532138][ C1] ? kmem_cache_alloc+0x162/0x2d0 [ 46.537165][ C1] ? unix_dgram_sendmsg+0x601/0x17e0 [ 46.542469][ C1] ? __x64_sys_sendto+0xe5/0x100 [ 46.547439][ C1] ? do_syscall_64+0x31/0x40 [ 46.552031][ C1] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 46.558104][ C1] dump_stack+0x15/0x1c [ 46.562272][ C1] ubsan_epilogue+0xe/0x40 [ 46.566690][ C1] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 46.572415][ C1] aiptek_irq+0x1fdf/0x2860 [ 46.577031][ C1] ? debug_smp_processor_id+0x17/0x20 [ 46.582412][ C1] __usb_hcd_giveback_urb+0x333/0x4f0 [ 46.587807][ C1] usb_hcd_giveback_urb+0x119/0x410 [ 46.593041][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 46.597905][ C1] ? usb_hcd_unlink_urb_from_ep+0x10e/0x120 [ 46.603805][ C1] dummy_timer+0x8be/0x30e0 [ 46.608314][ C1] ? memset+0x35/0x40 [ 46.612308][ C1] ? __kasan_check_read+0x11/0x20 [ 46.617338][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 46.622537][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 46.627740][ C1] call_timer_fn+0x38/0x290 [ 46.632258][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 46.637458][ C1] __run_timers+0x650/0x9e0 [ 46.641974][ C1] ? calc_index+0x200/0x200 [ 46.646486][ C1] run_timer_softirq+0x6a/0xf0 [ 46.651255][ C1] __do_softirq+0x255/0x563 [ 46.655760][ C1] asm_call_irq_on_stack+0xf/0x20 [ 46.660783][ C1] [ 46.663728][ C1] do_softirq_own_stack+0x60/0x80 [ 46.668778][ C1] __irq_exit_rcu+0x128/0x150 [ 46.673483][ C1] irq_exit_rcu+0x9/0x10 [ 46.677739][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 46.683402][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 46.689400][ C1] RIP: 0010:_raw_spin_unlock_irq+0x49/0x70 [ 46.695212][ C1] Code: 12 48 89 fb 48 c7 c7 30 74 4c 86 e8 01 41 1c fd 48 89 df 48 83 3d 86 66 c9 01 00 74 27 e8 73 e0 c8 fc 66 90 fb bf 01 00 00 00 62 d7 c1 fc 65 8b 05 c7 5f 7f 7b 85 c0 74 03 5b 5d c3 e8 c3 5f [ 46.714827][ C1] RSP: 0018:ffffc90000b972c8 EFLAGS: 00000246 [ 46.720906][ C1] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: dffffc0000000000 [ 46.728895][ C1] RDX: 0000000000000001 RSI: ffffffff85409040 RDI: 0000000000000001 [ 46.736887][ C1] RBP: ffffc90000b972d0 R08: ffff88811ceabb47 R09: 1ffff110239d5768 [ 46.744864][ C1] R10: dffffc0000000000 R11: ffffed10239d5769 R12: ffff8881f7155fc0 [ 46.752840][ C1] R13: ffff88811ceabb6c R14: 0000000000000000 R15: ffff88810d618000 [ 46.760838][ C1] ? _raw_spin_unlock_irq+0x41/0x70 [ 46.766042][ C1] finish_task_switch+0x12e/0x5a0 [ 46.771204][ C1] ? switch_mm_irqs_off+0x75f/0x990 [ 46.776410][ C1] ? __switch_to_asm+0x34/0x60 [ 46.781182][ C1] __schedule+0xb5b/0x1320 [ 46.785600][ C1] ? __sched_text_start+0x8/0x8 [ 46.790488][ C1] ? native_set_ldt+0x370/0x370 [ 46.795349][ C1] ? update_rt_rq_load_avg+0x25/0x230 [ 46.800732][ C1] preempt_schedule_irq+0xaa/0x120 [ 46.805846][ C1] ? preempt_schedule_notrace+0x120/0x120 [ 46.811574][ C1] ? finish_task_switch+0x12e/0x5a0 [ 46.816785][ C1] ? switch_mm_irqs_off+0x75f/0x990 [ 46.821992][ C1] irqentry_exit+0x56/0x60 [ 46.826416][ C1] sysvec_reschedule_ipi+0x69/0x70 [ 46.831544][ C1] asm_sysvec_reschedule_ipi+0x12/0x20 [ 46.837016][ C1] RIP: 0010:kasan_check_range+0xb/0x2a0 [ 46.842569][ C1] Code: 9b d2 de 02 31 c0 5d c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc b0 01 48 85 f6 0f 84 c0 01 00 00 <55> 48 89 e5 41 57 41 56 41 55 41 54 53 49 89 f8 49 01 f0 0f 82 1d [ 46.862192][ C1] RSP: 0018:ffffc90000b975a0 EFLAGS: 00000206 [ 46.868282][ C1] RAX: 0000000000000001 RBX: 0000000000000200 RCX: ffffffff819f302e [ 46.876270][ C1] RDX: 0000000000000001 RSI: 0000000000000200 RDI: ffffc90000b975d0 [ 46.884253][ C1] RBP: ffffc90000b975c0 R08: ffffc90000b97888 R09: ffffed1025017878 [ 46.892229][ C1] R10: 0000000000000000 R11: ffffed102199d52a R12: ffff8881280bc4b8 [ 46.900201][ C1] R13: ffffc90000b97888 R14: 0000000000000000 R15: ffffc90000b975d0 [ 46.908195][ C1] ? __kasan_slab_alloc+0xae/0xf0 [ 46.913231][ C1] ? memset+0x23/0x40 [ 46.917211][ C1] __kasan_slab_alloc+0xae/0xf0 [ 46.922061][ C1] ? preempt_schedule_notrace+0x120/0x120 [ 46.927778][ C1] ? irqentry_exit+0x56/0x60 [ 46.932400][ C1] ? sysvec_reschedule_ipi+0x69/0x70 [ 46.937683][ C1] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 46.943323][ C1] ? __stack_depot_save+0x1c0/0x4c0 [ 46.948538][ C1] ? kasan_set_track+0x5b/0x70 [ 46.953310][ C1] ? kasan_set_track+0x4a/0x70 [ 46.958079][ C1] ? kasan_set_free_info+0x23/0x40 [ 46.963201][ C1] ? ____kasan_slab_free+0x125/0x160 [ 46.968496][ C1] ? __kasan_slab_free+0x11/0x20 [ 46.973438][ C1] ? slab_free_freelist_hook+0xc5/0x190 [ 46.978990][ C1] ? kfree+0xc0/0x270 [ 46.982983][ C1] ? syslog_print+0x6a1/0x750 [ 46.987659][ C1] slab_post_alloc_hook+0x5d/0x2f0 [ 46.992772][ C1] ? __alloc_skb+0x9e/0x520 [ 46.997279][ C1] ? __alloc_skb+0x9e/0x520 [ 47.001819][ C1] kmem_cache_alloc+0x162/0x2d0 [ 47.006681][ C1] ? __alloc_skb+0x9e/0x520 [ 47.011205][ C1] __alloc_skb+0x9e/0x520 [ 47.015532][ C1] ? __switch_to+0x508/0x1020 [ 47.020220][ C1] alloc_skb_with_frags+0xa2/0x560 [ 47.025405][ C1] ? plist_check_list+0x255/0x270 [ 47.030547][ C1] sock_alloc_send_pskb+0x87f/0x9a0 [ 47.035753][ C1] ? sock_kzfree_s+0x60/0x60 [ 47.040345][ C1] ? __kasan_check_write+0x14/0x20 [ 47.045462][ C1] ? _raw_spin_lock+0x94/0xf0 [ 47.050141][ C1] ? _raw_spin_trylock_bh+0x150/0x150 [ 47.055517][ C1] unix_dgram_sendmsg+0x601/0x17e0 [ 47.060630][ C1] ? preempt_schedule_notrace+0x120/0x120 [ 47.066351][ C1] ? selinux_socket_accept+0x570/0x570 [ 47.071816][ C1] ? irqentry_exit+0x56/0x60 [ 47.076404][ C1] ? unix_dgram_poll+0x630/0x630 [ 47.081348][ C1] __sys_sendto+0x467/0x620 [ 47.085857][ C1] ? __ia32_sys_getpeername+0x90/0x90 [ 47.091230][ C1] ? fpu__clear_all+0x20/0x20 [ 47.095907][ C1] ? asm_sysvec_reschedule_ipi+0xa/0x20 [ 47.101469][ C1] ? __kasan_check_read+0x11/0x20 [ 47.106600][ C1] __x64_sys_sendto+0xe5/0x100 [ 47.111387][ C1] do_syscall_64+0x31/0x40 [ 47.115813][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 47.121714][ C1] RIP: 0033:0x7f0914cb8407 [ 47.126138][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 47.145741][ C1] RSP: 002b:00007ffc4f142fe0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 47.154169][ C1] RAX: ffffffffffffffda RBX: 00007f0914b68c80 RCX: 00007f0914cb8407 [ 47.162147][ C1] RDX: 0000000000000060 RSI: 00007ffc4f143120 RDI: 0000000000000003 [ 47.170119][ C1] RBP: 00007ffc4f143550 R08: 0000000000000000 R09: 0000000000000000 [ 47.178096][ C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffc4f143568 [ 47.186073][ C1] R13: 00007ffc4f143120 R14: 0000000000000045 R15: 00007ffc4f143120 [ 47.194045][ C1] ================================================================================ [ 47.203332][ C1] ================================================================== [ 47.211396][ C1] BUG: KASAN: global-out-of-bounds in aiptek_irq+0x1ffd/0x2860 [ 47.218969][ C1] Read of size 4 at addr ffffffff855b380c by task klogd/83 [ 47.226167][ C1] [ 47.228508][ C1] CPU: 1 PID: 83 Comm: klogd Tainted: G W syzkaller #0 [ 47.236660][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 47.246858][ C1] Call Trace: [ 47.250143][ C1] [ 47.252999][ C1] __dump_stack+0x21/0x24 [ 47.257331][ C1] dump_stack_lvl+0x1a7/0x208 [ 47.262013][ C1] ? show_regs_print_info+0x18/0x18 [ 47.267212][ C1] ? thaw_kernel_threads+0x220/0x220 [ 47.272499][ C1] ? kmem_cache_alloc+0x162/0x2d0 [ 47.277529][ C1] print_address_description+0x7f/0x2c0 [ 47.283082][ C1] ? aiptek_irq+0x1ffd/0x2860 [ 47.287756][ C1] kasan_report+0xe2/0x130 [ 47.292172][ C1] ? aiptek_irq+0x1ffd/0x2860 [ 47.296849][ C1] __asan_report_load4_noabort+0x14/0x20 [ 47.302510][ C1] aiptek_irq+0x1ffd/0x2860 [ 47.307018][ C1] ? debug_smp_processor_id+0x17/0x20 [ 47.312396][ C1] __usb_hcd_giveback_urb+0x333/0x4f0 [ 47.317765][ C1] usb_hcd_giveback_urb+0x119/0x410 [ 47.322990][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 47.327863][ C1] ? usb_hcd_unlink_urb_from_ep+0x10e/0x120 [ 47.330701][ T24] audit: type=1400 audit(1781095670.560:190): avc: denied { name_bind } for pid=657 comm="syz.2.80" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 47.333793][ C1] dummy_timer+0x8be/0x30e0 [ 47.355147][ T24] audit: type=1400 audit(1781095670.570:191): avc: denied { node_bind } for pid=657 comm="syz.2.80" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 47.359516][ C1] ? memset+0x35/0x40 [ 47.359533][ C1] ? __kasan_check_read+0x11/0x20 [ 47.380790][ T24] audit: type=1326 audit(1781095670.570:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=657 comm="syz.2.80" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a51aa8e59 code=0x7ffc0000 [ 47.384683][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 47.391167][ T24] audit: type=1326 audit(1781095670.570:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=657 comm="syz.2.80" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a51aa8e59 code=0x7ffc0000 [ 47.414130][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 47.414172][ C1] call_timer_fn+0x38/0x290 [ 47.419430][ T24] audit: type=1326 audit(1781095670.570:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=657 comm="syz.2.80" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0a51aa8e59 code=0x7ffc0000 [ 47.443788][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 47.443798][ C1] __run_timers+0x650/0x9e0 [ 47.443835][ C1] ? calc_index+0x200/0x200 [ 47.449100][ T24] audit: type=1326 audit(1781095670.570:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=657 comm="syz.2.80" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a51aa8e59 code=0x7ffc0000 [ 47.453543][ C1] run_timer_softirq+0x6a/0xf0 [ 47.521350][ C1] __do_softirq+0x255/0x563 [ 47.525854][ C1] asm_call_irq_on_stack+0xf/0x20 [ 47.530861][ C1] [ 47.533797][ C1] do_softirq_own_stack+0x60/0x80 [ 47.538821][ C1] __irq_exit_rcu+0x128/0x150 [ 47.543497][ C1] irq_exit_rcu+0x9/0x10 [ 47.547743][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 47.553392][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 47.559371][ C1] RIP: 0010:_raw_spin_unlock_irq+0x49/0x70 [ 47.565168][ C1] Code: 12 48 89 fb 48 c7 c7 30 74 4c 86 e8 01 41 1c fd 48 89 df 48 83 3d 86 66 c9 01 00 74 27 e8 73 e0 c8 fc 66 90 fb bf 01 00 00 00 62 d7 c1 fc 65 8b 05 c7 5f 7f 7b 85 c0 74 03 5b 5d c3 e8 c3 5f [ 47.584762][ C1] RSP: 0018:ffffc90000b972c8 EFLAGS: 00000246 [ 47.590823][ C1] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: dffffc0000000000 [ 47.598792][ C1] RDX: 0000000000000001 RSI: ffffffff85409040 RDI: 0000000000000001 [ 47.606759][ C1] RBP: ffffc90000b972d0 R08: ffff88811ceabb47 R09: 1ffff110239d5768 [ 47.614726][ C1] R10: dffffc0000000000 R11: ffffed10239d5769 R12: ffff8881f7155fc0 [ 47.622691][ C1] R13: ffff88811ceabb6c R14: 0000000000000000 R15: ffff88810d618000 [ 47.630666][ C1] ? _raw_spin_unlock_irq+0x41/0x70 [ 47.635854][ C1] finish_task_switch+0x12e/0x5a0 [ 47.640873][ C1] ? switch_mm_irqs_off+0x75f/0x990 [ 47.646065][ C1] ? __switch_to_asm+0x34/0x60 [ 47.650835][ C1] __schedule+0xb5b/0x1320 [ 47.655246][ C1] ? __sched_text_start+0x8/0x8 [ 47.660090][ C1] ? native_set_ldt+0x370/0x370 [ 47.665017][ C1] ? update_rt_rq_load_avg+0x25/0x230 [ 47.670570][ C1] preempt_schedule_irq+0xaa/0x120 [ 47.675679][ C1] ? preempt_schedule_notrace+0x120/0x120 [ 47.681433][ C1] ? finish_task_switch+0x12e/0x5a0 [ 47.686626][ C1] ? switch_mm_irqs_off+0x75f/0x990 [ 47.691819][ C1] irqentry_exit+0x56/0x60 [ 47.696241][ C1] sysvec_reschedule_ipi+0x69/0x70 [ 47.701349][ C1] asm_sysvec_reschedule_ipi+0x12/0x20 [ 47.706803][ C1] RIP: 0010:kasan_check_range+0xb/0x2a0 [ 47.712343][ C1] Code: 9b d2 de 02 31 c0 5d c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc b0 01 48 85 f6 0f 84 c0 01 00 00 <55> 48 89 e5 41 57 41 56 41 55 41 54 53 49 89 f8 49 01 f0 0f 82 1d [ 47.731941][ C1] RSP: 0018:ffffc90000b975a0 EFLAGS: 00000206 [ 47.738015][ C1] RAX: 0000000000000001 RBX: 0000000000000200 RCX: ffffffff819f302e [ 47.745989][ C1] RDX: 0000000000000001 RSI: 0000000000000200 RDI: ffffc90000b975d0 [ 47.753957][ C1] RBP: ffffc90000b975c0 R08: ffffc90000b97888 R09: ffffed1025017878 [ 47.761927][ C1] R10: 0000000000000000 R11: ffffed102199d52a R12: ffff8881280bc4b8 [ 47.769889][ C1] R13: ffffc90000b97888 R14: 0000000000000000 R15: ffffc90000b975d0 [ 47.777867][ C1] ? __kasan_slab_alloc+0xae/0xf0 [ 47.782891][ C1] ? memset+0x23/0x40 [ 47.786865][ C1] __kasan_slab_alloc+0xae/0xf0 [ 47.791704][ C1] ? preempt_schedule_notrace+0x120/0x120 [ 47.797420][ C1] ? irqentry_exit+0x56/0x60 [ 47.801999][ C1] ? sysvec_reschedule_ipi+0x69/0x70 [ 47.807272][ C1] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 47.812903][ C1] ? __stack_depot_save+0x1c0/0x4c0 [ 47.818098][ C1] ? kasan_set_track+0x5b/0x70 [ 47.822861][ C1] ? kasan_set_track+0x4a/0x70 [ 47.827623][ C1] ? kasan_set_free_info+0x23/0x40 [ 47.832730][ C1] ? ____kasan_slab_free+0x125/0x160 [ 47.838018][ C1] ? __kasan_slab_free+0x11/0x20 [ 47.842953][ C1] ? slab_free_freelist_hook+0xc5/0x190 [ 47.848500][ C1] ? kfree+0xc0/0x270 [ 47.852488][ C1] ? syslog_print+0x6a1/0x750 [ 47.857167][ C1] slab_post_alloc_hook+0x5d/0x2f0 [ 47.862282][ C1] ? __alloc_skb+0x9e/0x520 [ 47.866783][ C1] ? __alloc_skb+0x9e/0x520 [ 47.871280][ C1] kmem_cache_alloc+0x162/0x2d0 [ 47.876125][ C1] ? __alloc_skb+0x9e/0x520 [ 47.880618][ C1] __alloc_skb+0x9e/0x520 [ 47.884947][ C1] ? __switch_to+0x508/0x1020 [ 47.889631][ C1] alloc_skb_with_frags+0xa2/0x560 [ 47.894743][ C1] ? plist_check_list+0x255/0x270 [ 47.899764][ C1] sock_alloc_send_pskb+0x87f/0x9a0 [ 47.904956][ C1] ? sock_kzfree_s+0x60/0x60 [ 47.909540][ C1] ? __kasan_check_write+0x14/0x20 [ 47.914642][ C1] ? _raw_spin_lock+0x94/0xf0 [ 47.919311][ C1] ? _raw_spin_trylock_bh+0x150/0x150 [ 47.924675][ C1] unix_dgram_sendmsg+0x601/0x17e0 [ 47.929781][ C1] ? preempt_schedule_notrace+0x120/0x120 [ 47.935507][ C1] ? selinux_socket_accept+0x570/0x570 [ 47.940975][ C1] ? irqentry_exit+0x56/0x60 [ 47.945563][ C1] ? unix_dgram_poll+0x630/0x630 [ 47.950506][ C1] __sys_sendto+0x467/0x620 [ 47.955005][ C1] ? __ia32_sys_getpeername+0x90/0x90 [ 47.960371][ C1] ? fpu__clear_all+0x20/0x20 [ 47.965046][ C1] ? asm_sysvec_reschedule_ipi+0xa/0x20 [ 47.970586][ C1] ? __kasan_check_read+0x11/0x20 [ 47.975598][ C1] __x64_sys_sendto+0xe5/0x100 [ 47.980354][ C1] do_syscall_64+0x31/0x40 [ 47.984762][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 47.990643][ C1] RIP: 0033:0x7f0914cb8407 [ 47.995052][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 48.014645][ C1] RSP: 002b:00007ffc4f142fe0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 48.023050][ C1] RAX: ffffffffffffffda RBX: 00007f0914b68c80 RCX: 00007f0914cb8407 [ 48.031014][ C1] RDX: 0000000000000060 RSI: 00007ffc4f143120 RDI: 0000000000000003 [ 48.038987][ C1] RBP: 00007ffc4f143550 R08: 0000000000000000 R09: 0000000000000000 [ 48.046978][ C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffc4f143568 [ 48.054955][ C1] R13: 00007ffc4f143120 R14: 0000000000000045 R15: 00007ffc4f143120 [ 48.062928][ C1] [ 48.065247][ C1] The buggy address belongs to the variable: [ 48.071231][ C1] .str.57+0xc/0x20 [ 48.075029][ C1] [ 48.077358][ C1] Memory state around the buggy address: [ 48.082986][ C1] ffffffff855b3700: 04 f9 f9 f9 00 f9 f9 f9 06 f9 f9 f9 07 f9 f9 f9 [ 48.091042][ C1] ffffffff855b3780: 06 f9 f9 f9 00 04 f9 f9 05 f9 f9 f9 00 03 f9 f9 [ 48.099099][ C1] >ffffffff855b3800: 00 03 f9 f9 00 00 00 00 03 f9 f9 f9 f9 f9 f9 f9 [ 48.107157][ C1] ^ [ 48.111480][ C1] ffffffff855b3880: 00 00 00 00 03 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 [ 48.119537][ C1] ffffffff855b3900: 01 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 f9 f9 f9 f9 [ 48.127585][ C1] ================================================================== [ 48.135641][ C1] Disabling lock debugging due to kernel taint [ 48.141788][ C1] ================================================================================ [ 48.151062][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 48.159639][ C1] index 548 is out of range for type 'const int[34]' [ 48.166317][ C1] CPU: 1 PID: 83 Comm: klogd Tainted: G B W syzkaller #0 [ 48.174453][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 48.184495][ C1] Call Trace: [ 48.187774][ C1] [ 48.190646][ C1] __dump_stack+0x21/0x24 [ 48.195078][ C1] dump_stack_lvl+0x1a7/0x208 [ 48.199745][ C1] ? show_regs_print_info+0x18/0x18 [ 48.204946][ C1] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 48.210401][ C1] ? __kasan_check_read+0x11/0x20 [ 48.215423][ C1] dump_stack+0x15/0x1c [ 48.219568][ C1] ubsan_epilogue+0xe/0x40 [ 48.223978][ C1] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 48.229689][ C1] aiptek_irq+0x1ebf/0x2860 [ 48.234187][ C1] ? debug_smp_processor_id+0x17/0x20 [ 48.239564][ C1] __usb_hcd_giveback_urb+0x333/0x4f0 [ 48.244926][ C1] usb_hcd_giveback_urb+0x119/0x410 [ 48.250125][ C1] ? _raw_spin_unlock+0x4d/0x70 [ 48.254969][ C1] ? usb_hcd_unlink_urb_from_ep+0x10e/0x120 [ 48.260849][ C1] dummy_timer+0x8be/0x30e0 [ 48.265345][ C1] ? memset+0x35/0x40 [ 48.269431][ C1] ? __kasan_check_read+0x11/0x20 [ 48.274455][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 48.279642][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 48.284833][ C1] call_timer_fn+0x38/0x290 [ 48.289329][ C1] ? dummy_free_streams+0x5b0/0x5b0 [ 48.294520][ C1] __run_timers+0x650/0x9e0 [ 48.299044][ C1] ? calc_index+0x200/0x200 [ 48.303553][ C1] run_timer_softirq+0x6a/0xf0 [ 48.308319][ C1] __do_softirq+0x255/0x563 [ 48.312825][ C1] asm_call_irq_on_stack+0xf/0x20 [ 48.317870][ C1] [ 48.320830][ C1] do_softirq_own_stack+0x60/0x80 [ 48.325857][ C1] __irq_exit_rcu+0x128/0x150 [ 48.330535][ C1] irq_exit_rcu+0x9/0x10 [ 48.334775][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 48.340395][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 48.346368][ C1] RIP: 0010:_raw_spin_unlock_irq+0x49/0x70 [ 48.352169][ C1] Code: 12 48 89 fb 48 c7 c7 30 74 4c 86 e8 01 41 1c fd 48 89 df 48 83 3d 86 66 c9 01 00 74 27 e8 73 e0 c8 fc 66 90 fb bf 01 00 00 00 62 d7 c1 fc 65 8b 05 c7 5f 7f 7b 85 c0 74 03 5b 5d c3 e8 c3 5f [ 48.371772][ C1] RSP: 0018:ffffc90000b972c8 EFLAGS: 00000246 [ 48.377858][ C1] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: dffffc0000000000 [ 48.385831][ C1] RDX: 0000000000000001 RSI: ffffffff85409040 RDI: 0000000000000001 [ 48.393798][ C1] RBP: ffffc90000b972d0 R08: ffff88811ceabb47 R09: 1ffff110239d5768 [ 48.401766][ C1] R10: dffffc0000000000 R11: ffffed10239d5769 R12: ffff8881f7155fc0 [ 48.409742][ C1] R13: ffff88811ceabb6c R14: 0000000000000000 R15: ffff88810d618000 [ 48.417729][ C1] ? _raw_spin_unlock_irq+0x41/0x70 [ 48.422918][ C1] finish_task_switch+0x12e/0x5a0 [ 48.427938][ C1] ? switch_mm_irqs_off+0x75f/0x990 [ 48.433137][ C1] ? __switch_to_asm+0x34/0x60 [ 48.437911][ C1] __schedule+0xb5b/0x1320 [ 48.442335][ C1] ? __sched_text_start+0x8/0x8 [ 48.447183][ C1] ? native_set_ldt+0x370/0x370 [ 48.452027][ C1] ? update_rt_rq_load_avg+0x25/0x230 [ 48.457396][ C1] preempt_schedule_irq+0xaa/0x120 [ 48.462521][ C1] ? preempt_schedule_notrace+0x120/0x120 [ 48.468246][ C1] ? finish_task_switch+0x12e/0x5a0 [ 48.473444][ C1] ? switch_mm_irqs_off+0x75f/0x990 [ 48.478642][ C1] irqentry_exit+0x56/0x60 [ 48.483057][ C1] sysvec_reschedule_ipi+0x69/0x70 [ 48.488167][ C1] asm_sysvec_reschedule_ipi+0x12/0x20 [ 48.493629][ C1] RIP: 0010:kasan_check_range+0xb/0x2a0 [ 48.499173][ C1] Code: 9b d2 de 02 31 c0 5d c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc b0 01 48 85 f6 0f 84 c0 01 00 00 <55> 48 89 e5 41 57 41 56 41 55 41 54 53 49 89 f8 49 01 f0 0f 82 1d [ 48.518774][ C1] RSP: 0018:ffffc90000b975a0 EFLAGS: 00000206 [ 48.524848][ C1] RAX: 0000000000000001 RBX: 0000000000000200 RCX: ffffffff819f302e [ 48.532820][ C1] RDX: 0000000000000001 RSI: 0000000000000200 RDI: ffffc90000b975d0 [ 48.540800][ C1] RBP: ffffc90000b975c0 R08: ffffc90000b97888 R09: ffffed1025017878 [ 48.548768][ C1] R10: 0000000000000000 R11: ffffed102199d52a R12: ffff8881280bc4b8 [ 48.556745][ C1] R13: ffffc90000b97888 R14: 0000000000000000 R15: ffffc90000b975d0 [ 48.564712][ C1] ? __kasan_slab_alloc+0xae/0xf0 [ 48.569728][ C1] ? memset+0x23/0x40 [ 48.573704][ C1] __kasan_slab_alloc+0xae/0xf0 [ 48.578554][ C1] ? preempt_schedule_notrace+0x120/0x120 [ 48.584286][ C1] ? irqentry_exit+0x56/0x60 [ 48.588879][ C1] ? sysvec_reschedule_ipi+0x69/0x70 [ 48.594174][ C1] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 48.599804][ C1] ? __stack_depot_save+0x1c0/0x4c0 [ 48.605013][ C1] ? kasan_set_track+0x5b/0x70 [ 48.609784][ C1] ? kasan_set_track+0x4a/0x70 [ 48.614540][ C1] ? kasan_set_free_info+0x23/0x40 [ 48.619640][ C1] ? ____kasan_slab_free+0x125/0x160 [ 48.624913][ C1] ? __kasan_slab_free+0x11/0x20 [ 48.629845][ C1] ? slab_free_freelist_hook+0xc5/0x190 [ 48.635380][ C1] ? kfree+0xc0/0x270 [ 48.639376][ C1] ? syslog_print+0x6a1/0x750 [ 48.644044][ C1] slab_post_alloc_hook+0x5d/0x2f0 [ 48.649162][ C1] ? __alloc_skb+0x9e/0x520 [ 48.653658][ C1] ? __alloc_skb+0x9e/0x520 [ 48.658156][ C1] kmem_cache_alloc+0x162/0x2d0 [ 48.663003][ C1] ? __alloc_skb+0x9e/0x520 [ 48.667503][ C1] __alloc_skb+0x9e/0x520 [ 48.671828][ C1] ? __switch_to+0x508/0x1020 [ 48.676500][ C1] alloc_skb_with_frags+0xa2/0x560 [ 48.681610][ C1] ? plist_check_list+0x255/0x270 [ 48.686660][ C1] sock_alloc_send_pskb+0x87f/0x9a0 [ 48.691963][ C1] ? sock_kzfree_s+0x60/0x60 [ 48.696551][ C1] ? __kasan_check_write+0x14/0x20 [ 48.701658][ C1] ? _raw_spin_lock+0x94/0xf0 [ 48.706324][ C1] ? _raw_spin_trylock_bh+0x150/0x150 [ 48.711692][ C1] unix_dgram_sendmsg+0x601/0x17e0 [ 48.716801][ C1] ? preempt_schedule_notrace+0x120/0x120 [ 48.722516][ C1] ? selinux_socket_accept+0x570/0x570 [ 48.727971][ C1] ? irqentry_exit+0x56/0x60 [ 48.732560][ C1] ? unix_dgram_poll+0x630/0x630 [ 48.737487][ C1] __sys_sendto+0x467/0x620 [ 48.741990][ C1] ? __ia32_sys_getpeername+0x90/0x90 [ 48.747369][ C1] ? fpu__clear_all+0x20/0x20 [ 48.752058][ C1] ? asm_sysvec_reschedule_ipi+0xa/0x20 [ 48.757607][ C1] ? __kasan_check_read+0x11/0x20 [ 48.762620][ C1] __x64_sys_sendto+0xe5/0x100 [ 48.767373][ C1] do_syscall_64+0x31/0x40 [ 48.771781][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 48.777662][ C1] RIP: 0033:0x7f0914cb8407 [ 48.782074][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 48.801676][ C1] RSP: 002b:00007ffc4f142fe0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 48.810085][ C1] RAX: ffffffffffffffda RBX: 00007f0914b68c80 RCX: 00007f0914cb8407 [ 48.818050][ C1] RDX: 0000000000000060 RSI: 00007ffc4f143120 RDI: 0000000000000003 [ 48.826028][ C1] RBP: 00007ffc4f143550 R08: 0000000000000000 R09: 0000000000000000 [ 48.833997][ C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffc4f143568 [ 48.841960][ C1] R13: 00007ffc4f143120 R14: 0000000000000045 R15: 00007ffc4f143120 [ 48.849924][ C1] ================================================================================ [ 48.886536][ T330] usb 4-1: USB disconnect, device number 8 [ 48.895101][ T287] usb 1-1: USB disconnect, device number 8 [ 48.901636][ T336] usb 2-1: USB disconnect, device number 11 [ 48.907653][ T24] audit: type=1326 audit(1781095670.570:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=657 comm="syz.2.80" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a51aa8e59 code=0x7ffc0000