last executing test programs: 7.559287188s ago: executing program 1 (id=327): fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000000)) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000040)) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x800, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000300)=[0xffffffffffffffff, 0x0]) write$FUSE_ENTRY(r1, &(0x7f0000000340)={0x90, 0xfffffffffffffff5, 0x0, {0x4, 0x0, 0x3, 0x8, 0x200, 0xca, {0x6, 0x6, 0x5, 0x800, 0x23d, 0x5180, 0x3, 0xd, 0x7, 0x8000, 0x0, r2, r3, 0x5, 0x4}}}, 0x90) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000440)=0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000400)=@rnullb={'/dev/syzrnull', 0x0}, r4, &(0x7f0000000480)='./file0\x00') setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000004c0)='ip_vti0\x00', 0x10) r5 = syz_open_dev$hiddev(&(0x7f0000000500), 0xd, 0x2000) ioctl$HIDIOCGFIELDINFO(r5, 0xc038480a, &(0x7f0000000540)={0x1, 0x100, 0x7, 0x5, 0x2, 0x1, 0x1, 0x0, 0x9, 0x9, 0x6, 0x10, 0x4, 0x7}) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000580)={0x3, 0x9, 0x9, 0xfffffffd, 0x8001}) rename(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00') r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x2, 0x11, 0x2}, 0x18) mkdirat(r6, &(0x7f00000006c0)='./file0\x00', 0x81) close(r1) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000700)={'bond0\x00', 0x0}) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000740)=[{{0x1, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x8) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000780), 0x206400, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r10, 0xc02054a5, &(0x7f00000007c0)={0x8, r9, 'id1\x00'}) write$selinux_load(r0, &(0x7f0000000840)={0xf97cff8c, 0x8, 'SE Linux', "548d235d015b2ff1839fa12c79014a4941b6cdf3fd52a773b3a2c1c64d55aa6bddca9e9c19d7196cb35628ddfa83d0d088b9978d286bfb41fb668679184d4e6215c143cfac6e4771a2ed3f24fb8c3a63484c14f05deb99e0fa5fd1a052656e02ccfeaa7d4965b690f50e9a95530b032001630b3f8b2b68d908efcf9c82676d8c7daece80c27838fc387e04d1f0b343691865dd2cea58f55f1fa037eadab041ec47c12f01d0a4bb88b5652392"}, 0xbc) ioctl$KVM_CAP_SYNC_REGS(r10, 0x4068aea3, &(0x7f0000000900)) ioctl$TIOCNOTTY(r10, 0x5422) ioctl$HIDIOCSREPORT(r10, 0x400c4808, &(0x7f0000000980)={0x1, 0x1, 0x3d09}) prctl$PR_SET_FPEXC(0xc, 0x20000) sendmsg$BATADV_CMD_TP_METER(r11, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xede}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) 7.396961301s ago: executing program 1 (id=331): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000200)=[{0x20, 0x0, 0x1, 0xfffff008}, {0x6}]}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0xf4) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x80800, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffff3) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000280)='%\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff000000070581024000000705020240000007058303"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyUSB0\x00', 0x60440, 0xcc) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x12df00, 0x0) 4.319970276s ago: executing program 1 (id=356): mkdir(&(0x7f0000000400)='./file0\x00', 0x17e) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000440)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000500)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000580)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f00000005c0)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000680)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}, {&(0x7f0000001340)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f0000001440)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000001540)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000002880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2280000}, 0xc, &(0x7f0000002840)={&(0x7f0000002700)={0x128, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}]}, 0x128}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) recvmsg$unix(r1, &(0x7f0000001680)={0x0, 0x2, &(0x7f00000016c0)=[{&(0x7f0000001700)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x80, &(0x7f0000000280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) setresgid(0x0, 0x0, 0xee01) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000028c0)='./file1\x00', &(0x7f0000002900)={0x480001, 0x18c, 0x8}, 0x18) r4 = openat(r3, &(0x7f0000002940)='\x00', 0x4000, 0x40) umount2(&(0x7f0000000380)='./bus\x00', 0x5) openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000002a00)=0x7, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002980)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002a00)=ANY=[], 0x128}, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002a40)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002ac0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000002b00)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000002b40)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000002bc0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}]}) 4.128526871s ago: executing program 1 (id=358): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f00000003c0)={0x20080522}, &(0x7f0000000400)) r4 = socket(0x10, 0x3, 0x0) connect$netlink(r4, &(0x7f0000000440)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x10) r5 = landlock_create_ruleset(&(0x7f0000000340)={0x2001}, 0x18, 0x0) landlock_restrict_self(r5, 0x15) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x200) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x7, @local}, 0x1c) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x218, 0x108, 0x218, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) bind$inet6(r7, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r9 = accept$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) bind$packet(r9, &(0x7f0000000000)={0x11, 0x11, r8, 0x1, 0xfc, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000580)="02043c0001000000010e0200c52cf7c20675e005b02f0800eb2b2ff0dadb897c6b112002faffffff3066090cb600c5471d130aaf14c85443b705ca7952ad90e59066321a54e7df30", 0x48, 0x40001, 0x0, 0x0) 3.174921864s ago: executing program 1 (id=364): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$unix(r0, &(0x7f0000000040)="7aa74e18d521d7ebe947d0014c87560cd6d795da2fcbe141ab5e", 0x1a, 0x800, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendto$unix(0xffffffffffffffff, &(0x7f0000000100)="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", 0x1000, 0x4011, &(0x7f0000001100)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$inet6(r0, &(0x7f0000001a80)=[{{&(0x7f0000001180)={0xa, 0x4e23, 0x0, @mcast2, 0xfffffffe}, 0x1c, &(0x7f00000017c0)=[{&(0x7f00000011c0)="afa5af8e37ef1583b983882a16189f784ffb5cc6545c9ad810694e9646324d67a1547ae28b7ab69e1c3d87011db25a835d6b9d2f0e3cf139bfb68c5fad265219e9b0a3e596d597040226592940c9e2b15b6c01a76b228e5ec994928573d7bfa8bfeff686f12478d019d063f7e10c8bb4534f0e8ffbcb0a55fd7c0171b6ca772655d6", 0x82}, {&(0x7f0000001280)="b41eba8e67e9fa56902d74c163e5840787049e4687f14a0b39b9efc15e6b0471bf778a936d7e1c2745705ac550eb0e2986e6ed34967eb9c3d6e0fb63b95ee34d61d9f1316e94", 0x46}, {&(0x7f0000001300)="6b5919ff1f835118ab8f428dcca22fffa8c05c0426c198f11c06f3d315ef0a3fff4b76bbafe50b1b0e2082ed23789258a271b87e03ceab71d3250f9b28959b970a5a8a7df4bcb9554897b6dd893bfb2b0bf9d6409baa2227089dbb12670d52d6c3a46de410b7639ae58e37ad6de72679fc187d66b9173b61ad88874c6d676ec6d313353bb6dffc94c58e91f111857e236ed3dcd420e2227f16c1babf67ce3c6ea11cbae188ebd598", 0xa8}, {&(0x7f00000013c0)="e8620fc139800a9a3df4034d15a16c1fc76879bee4d748fc8b8ccd22592dd13e60f2d4944c3929a6165d4107468475dd03a2a2162ed5e9125ae76282117a0f0cf1af3b5dd21e5ec8799b7bb7b36ccdc6fd0b88c6ad1dc0abbbb141d8b05a12d6e2750bb1be495c2fd0b1a5037f4464aa05f66e4eca1531a942589216d3770d16c25991562c419038c109611716221c0a318bccb5e8a5c234ef89cde7c378dd38a94fd14d061e6866da35ecf72671ff7ec00105bd26aa178ab976d54012c55926c91fed9967ebf2744245a115df5e3ce825a1b7b412fd9c094a480fdbf491d692c5baff264d4883b9e4caeecf12177e11191b279d1e9bbecf389b75", 0xfb}, {&(0x7f00000014c0)="272a0956ad0189d5427035c413668c36fa6882ea80c11cbdde75386c03403f4e6123ac2715a011fec1f8a07122a3ba5d2ff7988a339d77fe9595a8bdc86395a54e0a6f891579d6d694d808e0d987fae293e070e99147e9", 0x57}, {&(0x7f0000001540)="d7089647c108694ac76ec1523dd4729798ecf8f6f66ae979c0dccb9cdf330bc01555b92c071e8beb9b5002a807bad78f1446ca528d5d0a7b94de81d6c78606e123d033e7fd0357b288eb4ea295e3087c93d3d62ec1b5a94ccd086379b9603768865e8605a2b5b48d4a63300465e7061bb07b0fc75d19b82c3cb9292d99b361ae232751bc2400e02a0b9e330f5783b61b0d18f380af19a071bb5b569631a7d200ada1834317a9cd5b9b551753a8", 0xad}, {&(0x7f0000001600)="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", 0xfe}, {&(0x7f0000001700)="9a98a9b517288e5ca0123dfdbfa22b754023d062a181dc5980b0106fb7a2856c2202060b880293498d1f23f75a3e848c3e2c9cf6c3", 0x35}, {&(0x7f0000001740)="903ae324f7dd17c79d4f7fcee75a083c30ba27f1ca1913052cca9c9fa1816964203f4e595e63c639745a42a8608e6066c341c787a5695a1ba51a96fa4a51d459c7e13ea4ea7f706e4709caaf53bf41d49f33e8166c9f82dfe6baf1a500886c18a3b83d0711c9d512", 0x68}], 0x9, &(0x7f0000001880)=[@hoplimit={{0x14, 0x29, 0x34, 0x400}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x87, 0x10, 0x0, 0x12, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private0, @private2, @ipv4={'\x00', '\xff\xff', @multicast1}, @dev={0xfe, 0x80, '\x00', 0x40}, @mcast2, @empty, @remote]}}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x2b, 0x2, '\x00', [@ra={0x5, 0x2, 0x3}, @jumbo={0xc2, 0x4, 0xffffff81}, @pad1, @enc_lim={0x4, 0x1, 0xff}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x87, 0x4, 0x0, 0x8, 0x0, [@dev={0xfe, 0x80, '\x00', 0x30}, @mcast1]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x11, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x28, 0x29, 0x39, {0x2c, 0x2, 0x0, 0xc, 0x0, [@private0]}}}, @rthdr={{0x58, 0x29, 0x39, {0x87, 0x8, 0x0, 0x2, 0x0, [@empty, @local, @ipv4={'\x00', '\xff\xff', @local}, @mcast2]}}}], 0x1c8}}], 0x1, 0x14) r1 = accept4$packet(r0, 0x0, &(0x7f0000001ac0), 0x800) recvmsg(r1, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001b00)=""/196, 0xc4}, {&(0x7f0000001c00)=""/93, 0x5d}, {&(0x7f0000001c80)=""/226, 0xe2}, {&(0x7f0000001d80)}], 0x4, &(0x7f0000001e00)=""/232, 0xe8}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0xb2, &(0x7f0000001f40)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0, 0x2, 0x1, 0x3, 0x30, 0x2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "19fc"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1, 0x8}, {0x6, 0x24, 0x1a, 0x66, 0x28}, [@mdlm={0x15, 0x24, 0x12, 0x7}, @acm={0x4, 0x24, 0x2, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x4, 0xf, 0x56, 0x1, 0xffff, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x6}, @country_functional={0x12, 0x24, 0x7, 0x4, 0x9, [0xc, 0x3, 0x3, 0xe50c, 0x4, 0x7]}, @country_functional={0x6, 0x24, 0x7, 0xf7, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x49, 0x40, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0x4, 0xf7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2, 0xf9, 0x4}}}}}}}]}}, &(0x7f0000002200)={0xa, &(0x7f0000002000)={0xa, 0x6, 0x310, 0x40, 0x0, 0xb, 0x8, 0x4b}, 0x2d, &(0x7f0000002040)={0x5, 0xf, 0x2d, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x65, "b1d0dbb6ab790b708d7d24f2aebff073"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x4, 0x8d, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x0, 0x74, 0x9}]}, 0x3, [{0x4f, &(0x7f0000002080)=@string={0x4f, 0x3, "937fbde809b82991f35aa3fd6b626e971125aacd95305ea55a4027331ba903d7ca0a2fb0eac68b540024c51b2c3be8b586fd3435c3cb9b7e48803625b6427ae1e623e6d0b0e6dd6f1ae06edcce"}}, {0x4, &(0x7f0000002100)=@lang_id={0x4, 0x3, 0x40f}}, {0x83, &(0x7f0000002140)=@string={0x83, 0x3, "9701cd641f9b8f5ebe44cca7fbaea685689c6204057d7b434bd4d0fb9f4ce9537fb0deee7fbfefa91eb7781322c0cb6880ccddc8bb409a54cf6e1c02f62624d38a11abd437330990a15e25027a580b9dc6b8f23b6e4e54f6ae8f98be8f09eaf47e196a375a4bc5de58789e23fdb07f05759efbdfbc5389d4311747535e5a613bd8"}}]}) sendmsg$tipc(r0, &(0x7f0000002840)={&(0x7f0000002240)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x1, 0x2}}, 0x10, &(0x7f0000002740)=[{&(0x7f0000002280)="d2d47736a88d1450d4e37184b6ca7de189076a63db7832c67e0b45ad6b9cae2593eacaf197c3f39e88da1e4062727c24be27f01dadb1cd14234ef1bfb4f9f86bd44dc96e29108797ded4c1cc8f5fee90da4132bdd6a345801948556167e3f0a0b5e8ad81304f1b1f78f771053a7896f86372f2f8f04525d7933cf87497ff9e25da13941634789ccc0ee4721f9dd4adc941aa7fca8beffac82a1ed0b256f4f38f15e6f5d95727f08af6721ff70afa55d1900ef342d624640a6c69eb5472365f43", 0xc0}, {&(0x7f0000002340)="95ecd6c0beec8c852287ccf772b9393d48091a437d73e27f7a15", 0x1a}, {&(0x7f0000002380)="8849626fd4137a04c5b5744d6a20070e823a9ade7f8b1f5a6d54f43b3689728c7d591fa2b73d2f2f96a2d9e74d285e7b1907c29352814f4fd5ffb01b3febcb4e3308a2fd289cf7508dcb3c4a4e3b09dddcc7d5b6b88cc9", 0x57}, {&(0x7f0000002400)="028be7fe0acc1511170af5947101cf51fe801cf2a92ec5b2dbf5c5d09e5a74ce", 0x20}, {&(0x7f0000002440)="45f26d4dc34aeae767979f2417b3b7cffef4164a827ddddfd5a95b46ab131a081142a028135cb9844445499daf68335d4d869b590fd65fb1b2c01d02339bb4997ebad0b0125b66a7fa09db", 0x4b}, {&(0x7f00000024c0)="60129856c115f9dd8c8d6ebef2585b91ba8668b99a9d3809a1e95c8d016c716f69d0b6813314ae0b667f3f56719ddb0c451231ebafebcc5cfe14719a0f5b3b9dbf146a307c748a3f8894a79d8bb099eda856fbc1663485b5f2e91c51d84ca9c243902c3801243ce8288dacbb499acefc24ad2b81d6193c05731257f7ee4ab4bc04a5131de3958667fc5f63756435260892da66aca51e22bc3892e91d8c700b93cf4531ca9310021ddb2eb49d96b6c5f067ed23b37b033de88482da20723de652e5bcc8267c74b8272563192e16ab69c41e547e248800147415a1d373323665eb758c853501c71831096a5158", 0xec}, {&(0x7f00000025c0)="6e1d2d55b85ae9237dff70394a9ff1c4ff2b14880e9511e2cf3209ec7b23238c68534402390baac37a0edba88e37eac960cb331d611d0c8f31f9e70e34213d64e606686fdb5b46a8c440df1b0c64560ffaa919bffa2c5a6b97e7ed0f39c52d2bedf4b407f94662696497af853294fecf90f7a3accc527427c78c174e26be4137fe347aef70eb6d3fd2d5ff4e6ba8d5", 0x8f}, {&(0x7f0000002680)="f1a59e3a0f56850e8d55d56ad0c92ed265b26aa52cf7f63c0fd9683a1aaa7473b2e1752fdfb9003bc4b2438ae06547c959b7be48ec2fa5d5195ee3343890ac3d8f4b9fcc83c5d03a05d129f572ee0192d18816598517b54fc25a69bbe1e8b3135a5e5c0050d5cb2ca26aa8575239f1d37397514b12df22269edb5328ba960f8a10d6837d", 0x84}], 0x8, &(0x7f00000027c0)="d00f93bf6d21b64b7007f55c585cccb799a18c9f3ad64438523818838d28a15ae38404d4e2fde469dd75bd89306848b53e2d58d1d0a6984353ee0b356b1c0876f2a038", 0x43, 0x4000}, 0x10) syz_usb_connect(0x6, 0x67, &(0x7f0000002880)={{0x12, 0x1, 0x0, 0xb6, 0x76, 0xc1, 0xff, 0x19d2, 0xffa3, 0x1298, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x55, 0x1, 0x1, 0x0, 0x110, 0x6, "", [{{0x9, 0x4, 0x19, 0x1, 0x2, 0xff, 0xff, 0xff, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0xa}}, @uac_control={{0xa, 0x24, 0x1, 0x6, 0x20}, [@extension_unit={0xd, 0x24, 0x8, 0x1, 0x6, 0xf, "a9d7f691b9e2"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x307, 0x2, 0x6, 0x6}]}], [{{0x9, 0x5, 0x4, 0xc, 0x8, 0x2, 0x34, 0x9e, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x9}]}}, {{0x9, 0x5, 0x0, 0x4, 0x8, 0x3, 0x6, 0x35}}]}}]}}]}}, &(0x7f0000002bc0)={0xa, &(0x7f0000002900)={0xa, 0x6, 0x201, 0x0, 0x0, 0x7, 0x40, 0x1}, 0x3c, &(0x7f0000002940)={0x5, 0xf, 0x3c, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x20, 0x6, 0xeb3, 0xf000, 0x1, [0xc0, 0xffff27, 0xff0000, 0xc000, 0x3f00, 0x3f3f]}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x9, 0x0, 0x9}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x7, 0xff0f, 0x3}]}, 0x6, [{0x4b, &(0x7f0000002980)=@string={0x4b, 0x3, "d94a575d2d70f037e3342348d210594ad67faaaf63edc3871691f204d4afbf70ab9a9ae88d484e90d54d8b2f4e6c46e6f5bfa752d7fb2af00981cacf448a3a849920bd1350f7137711"}}, {0x4, &(0x7f0000002a00)=@lang_id={0x4, 0x3, 0x182a}}, {0x4, &(0x7f0000002a40)=@lang_id={0x4, 0x3, 0x380a}}, {0x9f, &(0x7f0000002a80)=@string={0x9f, 0x3, "d49c1c8956b9712cec8844fcad4b89e38ddf1294c2fe59c5827cb8fd53e4416cc0091b49a49d731631559e68885f39b93733f24caabb4272b6de17ee973390590bf849fac38536d5ac25a52f5308dc11b452535a4765c5dd3538942abaabe992ef4914441dd23e86099f87a231f3727c6052bda4513b9b2c0a6a8813047d6701c120e9ea169fc7a9bfae41f5ff5f03f56f825390529d652916ef9c980c"}}, {0x18, &(0x7f0000002b40)=@string={0x18, 0x3, "89efc30525610ed0543446e19c21cca1b89aec78e00e"}}, {0x4, &(0x7f0000002b80)=@lang_id={0x4, 0x3, 0x41e}}]}) r2 = gettid() sched_setaffinity(r2, 0x8, &(0x7f0000002c40)=0x800) close_range(0xffffffffffffffff, r0, 0x2) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000002c80)) r3 = syz_pidfd_open(r2, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000002cc0)={'filter\x00', 0x0, [0x7fffffff, 0x3]}, &(0x7f0000002d40)=0x44) r4 = syz_usb_connect$cdc_ncm(0x2, 0x9a, &(0x7f0000002d80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x2, 0x1, 0x0, 0x40, 0xc8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "aca2"}, {0x5, 0x24, 0x0, 0x237e}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1b, 0x3, 0x2}, {0x6, 0x24, 0x1a, 0xb, 0xd}, [@mdlm={0x15, 0x24, 0x12, 0x40}, @mdlm={0x15, 0x24, 0x12, 0xf}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0x7, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x44, 0x3, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x7, 0x79, 0x5}}}}}}}]}}, &(0x7f0000002fc0)={0xa, &(0x7f0000002e40)={0xa, 0x6, 0x201, 0x6, 0x4, 0x3, 0xff, 0xda}, 0x32, &(0x7f0000002e80)={0x5, 0xf, 0x32, 0x1, [@generic={0x2d, 0x10, 0x4, "9ebef4c422bdac0047e412b5c629c4f0d07a517891c400d548c129f822146dfe7312c514d0cecd11c366"}]}, 0x4, [{0x4, &(0x7f0000002ec0)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000002f00)=@lang_id={0x4, 0x3, 0x424}}, {0x16, &(0x7f0000002f40)=@string={0x16, 0x3, "f8b9b3e8a933dbb3953e85d50dc68dbf9fccf10f"}}, {0x4, &(0x7f0000002f80)=@lang_id={0x4, 0x3, 0x406}}]}) syz_usb_disconnect(r4) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000003040)=0x5, 0x4) sendmsg$nl_generic(r0, &(0x7f00000033c0)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003380)={&(0x7f00000030c0)={0x290, 0x39, 0x208, 0x70bd25, 0x25dfdbfe, {0x1c}, [@typed={0x14, 0x58, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="42ab8f2742e555abb9b10794a40fcf33c1e517b1106c31f6896d8f0d55f0e8682632de5a097746e93b387c520b3c43c0bfbcc08564fa31f91d05a00a2f8822d23605c1dfad6a74187c57a3cc06b86d8768f2983d44d6f60fb9341ec4449d1a602f8d4f3b36b11ecec321763e3a9ca54c55248796baef60f9e664935294425daa3550ad0ef383cec449fa21081a5c060a4905cb2e9fdee58a55edfbc8f98b873abac2122c1865e0b2e4e2f9d1246c43df87816c8ac7d7f8bd29c175cbb11a50b196f861447e108fe6e0", @nested={0x19a, 0xe, 0x0, 0x1, [@generic="e3d00d1a5e84f8d6fab8a00a659f41f16657aac6d5e77afed1eed88a13a9879fbd8b91006128b6ead5b9310a2286f498c706af05cfc30e85feb13ae1c1c4f9bfd866b26549c7655480cb41e53edc1a87f197e4840fffc6dd23355a4176a31d60122802496e2b282325db1a71b55e1ec6edd8c74c31760ff67b569adbefe1e75378b4d2e984e4f148132675d5361942e5855048c4d71dcb606ab8c3ee3b9428442d8f9abae5ec15c4e5624f6244be4b933ec34960758e854b20323280cef33276ca7212ac860860f2dab947807a05a3ac7e098b2ebef3acef8d1c49343a", @nested={0x4, 0x146}, @generic="3043b4d0429683e9ec65bb9cd33be082e91dc3595e8c17b4bf6c0a267fbea44e1387e5761dd390cb7941f6121a375bcfc66698253f0ee375f741bd9ac109369bd4eba5a0783b34fd0c0ff5a34487079649d7908be1ce5d7805b32c5ab261eabcb70929f4ff7e237bd629302947cf7f83e20a2fd9505bf07a191f5d5d4acb4fde4517a26032bd351da2d5b2b9f94e028dd6b24c93906f166990b139a75522eb741fdc867f092939ce5f8b9a8c799658e35937ba4ecb"]}]}, 0x290}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) r5 = gettid() r6 = syz_open_procfs(r5, &(0x7f0000003400)='setgroups\x00') ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000003440)=0x7f) openat$cgroup_ro(r6, &(0x7f0000003480)='cpuacct.usage_all\x00', 0x0, 0x0) r7 = add_key$user(&(0x7f00000034c0), &(0x7f0000003500)={'syz', 0x0}, &(0x7f0000003540)="c18a3dddd600ad53c51af397e7ee0185683c67fc86e3e3d3c94eee677e3d2c1e6e7168520fe57808662c2f9a1bab595c8cb0a5bcb17555ce2ff1da13c2e20a8129aa515774c328dc24b76be5767a7a5c6c122a3f132cba35d06a6ff6a25748dfd0f2d060deec5ee65d2e9ce63d5b54602e44d1e24f309535", 0x78, 0xfffffffffffffffc) keyctl$read(0xb, r7, &(0x7f00000035c0)=""/178, 0xb2) r8 = add_key(&(0x7f0000003680)='big_key\x00', &(0x7f00000036c0)={'syz', 0x0}, &(0x7f0000003700)="48c61e04fe69a4cf083497f839402c5876c66e5f74482c53d42655e0a1803fe290eb34a85300e0fa629ac89813d5d6bce9363b56d0f8444e56ac94978d3e7a015abebee7021b8664fc1b9ad86c3dcb318855bceedd750b140b6d1ef54a6ce34b94b3270f73f672e88c211e77c9b5f7c838ca38f0622e3d22a95196b80de9cf6b6c70ba9240dbded9fa36514644b3cfa5c0d04458614e9a0f9ab0befb12a0e732c42292ff11c61e0a53622bd362305c23c53da413c2dbe1682f0b164583d0cf32360467cc918102b59ba6bd2f2cafa8ad29ff9276d2a4a650788b740c392e7ee7149e58690dddec413551e239d74b1761", 0xf0, 0xfffffffffffffffd) r9 = add_key$keyring(&(0x7f0000003800), &(0x7f0000003840)={'syz', 0x1}, 0x0, 0x0, 0x0) r10 = add_key$keyring(&(0x7f0000003880), &(0x7f00000038c0)={'syz', 0x3}, 0x0, 0x0, r7) keyctl$KEYCTL_MOVE(0x1e, r8, r9, r10, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000003cc0)={&(0x7f0000003940), 0x6e, &(0x7f0000003c40)=[{&(0x7f00000039c0)=""/152, 0x98}, {&(0x7f0000003a80)=""/196, 0xc4}, {&(0x7f0000003b80)=""/156, 0x9c}], 0x3, &(0x7f0000003c80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x100) 2.288203005s ago: executing program 2 (id=374): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) clock_nanosleep(0x9, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x5c, r4, 0x1, 0x703d2f, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000c004}, 0x4000040) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000440)={'wg2\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000480)={'wg1\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x84, r4, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x200}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xb38}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) (async) clock_gettime(0xfffffffffffffffe, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f0000000900)={0x0, 0x42cc, 0x10, 0x1, 0x7f, 0x0, r10}, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r10}}], 0x1, 0x0, 0x0) 1.931570354s ago: executing program 3 (id=376): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, 0x0) close(r1) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000040)) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, &(0x7f00000043c0)=0xfffffffc, 0x4) 1.856370586s ago: executing program 3 (id=377): io_setup(0x5, &(0x7f0000000180)=0x0) io_submit(r0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/memory.force_empty\x00', 0x0, 0x8) r2 = openat(r1, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bff000/0x400000)=nil) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000040)) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{0xffe, 0x4, 0x4, 0xd, 0x8, 0x9, 0x7, 0x1, 0x0, 0x7, 0x9, 0xeb}, {0xe000, 0x8000000, 0xa, 0xe, 0x5, 0x7, 0x4, 0x20, 0x3, 0x5, 0x0, 0x2}, {0x6000, 0x8000000, 0xb, 0x0, 0x4, 0x9, 0x81, 0x7, 0x10, 0xfe, 0x2, 0x72}, {0x5000, 0x10000, 0x0, 0xfe, 0x6, 0xaa, 0x21, 0x4, 0x0, 0x4, 0x84, 0x12}, {0xf000, 0x60000, 0xc, 0xff, 0x1, 0xc, 0x6, 0x7, 0x4, 0x6, 0x8, 0x7}, {0xdddd1000, 0x3000, 0x9, 0xb9, 0x9, 0x5, 0x4, 0x4, 0x80, 0x5, 0x4, 0x7f}, {0x40000, 0x0, 0x0, 0x1, 0xc, 0x40, 0x4, 0x64, 0xe4, 0x1, 0x8, 0xe}, {0xffff1000, 0xd000, 0xa, 0x25, 0x5, 0x6, 0x8, 0xc7, 0x9e, 0x0, 0x41, 0x3}, {0xd000, 0x5}, {0x1, 0x7}, 0x40000000, 0x0, 0x6000, 0x40738, 0x8, 0xa801, 0x7000, [0x3, 0x5, 0x4, 0xc]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x7ff, &(0x7f0000000080)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000440)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000480)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) write(r2, &(0x7f00000002c0)='0', 0x1) 1.708604179s ago: executing program 3 (id=379): mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000940)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000980)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000a00)={0x8, 0x0, &(0x7f0000000a40)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000ac0)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000b00)={0x8, 0x0, &(0x7f0000000b40)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000b80)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000c40)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000cc0)=""/236, 0xec, 0x1, 0x14}, @fda={0x66646185, 0xc, 0x1, 0xb4}}, &(0x7f0000000dc0)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 1.496315105s ago: executing program 3 (id=381): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000005c0)=@urb_type_iso={0x0, {0xa}, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xa, 0x18, 0xd50c, 0xfffffffc, 0x0, [{0x6, 0x981f, 0x3}, {0x6, 0x6, 0x1}, {0x6, 0xfffffffe, 0xdbd0910}, {0x3, 0x67, 0x3}, {0x10, 0x4, 0x81}, {0x6000, 0x0, 0x9}, {0x101, 0x2, 0x3}, {0x0, 0xd, 0x8c}, {0x1a3, 0x8000, 0xf}, {0x140, 0x0, 0x5}, {0x3, 0x7, 0x1}, {0x1, 0xfffffff9, 0x7}, {0xd8, 0xa3, 0x9}, {0x1, 0x3, 0x7}, {0x9, 0xe7f, 0x81}, {0x7, 0x3, 0x4}, {0xb, 0xb}, {0x400, 0x6, 0x6}, {0x80, 0x409, 0x1ff}, {0x7, 0x8, 0x8}, {0x0, 0x6, 0x9b}, {0x10, 0x3, 0x4}, {0x0, 0x2, 0x3}, {0xffffffff, 0x58, 0x8001}]}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000240)=@arm64={0x56, 0x8, 0x20, '\x00', 0x1}) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000280)={0xa0000, 0x0, {[0x0, 0x80000000, 0x5, 0xb, 0x7, 0x1, 0xb, 0x9]}}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 1.462529945s ago: executing program 2 (id=382): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000080)) setns(0xc9, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, 0x0) 1.425232426s ago: executing program 2 (id=383): socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x190) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r0, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0xc4) ioctl$BLKBSZGET(r4, 0x80081270, &(0x7f0000000200)) write$P9_RLERROR(r4, &(0x7f0000000200)=ANY=[], 0xa) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x8, 0x47, 0x0, 0xffffffff}]}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/rt_cache\x00') r5 = fsopen(&(0x7f00000003c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x1) fchdir(r6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x101440, 0xcd) landlock_restrict_self(r4, 0x12) write$FUSE_INIT(r0, &(0x7f0000002500)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000002580)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(r0, &(0x7f00000025c0)="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", 0x2000, &(0x7f00000045c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004680)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x13, 0x1, {0x6, 0x638, 0xffffffffffffff78, 0x6, 0x0, 0x79, 0xfffffffe, 0x7, 0x1, 0xc000, 0x4, r2, r3, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @dev, @empty, 0x0, 0x8, 0x6710}}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x41, 0x0) write$binfmt_aout(r7, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r8 = syz_open_pts(r7, 0x200) dup3(r8, r7, 0x0) r9 = socket$inet6(0xa, 0x80002, 0x0) fsetxattr(r9, &(0x7f0000000240)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x2) 1.389857067s ago: executing program 2 (id=384): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0xfffe, 0x9, 0x8000, 0xfffa, 0x4}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESHEX=r3], 0x15) syz_usb_connect$midi(0x3, 0x31, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x9e8, 0x62, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x7, 0x90, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0xd, [], [{{0x9, 0x5, 0x8, 0x3, 0xc3eda9a571b1b081, 0xfa, 0x6, 0x9, {0x4}}}]}}}}}]}}, 0x0) 807.173541ms ago: executing program 3 (id=385): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00') (async) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00') capset(&(0x7f0000000240)={0x20080522}, &(0x7f0000000280)={0x200000, 0x200000, 0x7}) (async) capset(&(0x7f0000000240)={0x20080522}, &(0x7f0000000280)={0x200000, 0x200000, 0x7}) landlock_create_ruleset(&(0x7f0000000400)={0x8082, 0x6, 0x3, 0x80, 0x1, 0x1}, 0x30, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000440)=0x4, 0x4) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000440)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x14, &(0x7f00000004c0)=[{&(0x7f0000000500)=ANY=[@ANYRES64=r0], 0x20}], 0x1}, 0x24000080) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000740)={0x2, 0x4e20, @remote}, 0x10) setsockopt$sock_int(r4, 0x1, 0x35, &(0x7f0000000780)=0x1, 0x4) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x30, r5, 0x1, 0x70bd25, 0xfffffffd, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000851}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x30, r5, 0x1, 0x70bd25, 0xfffffffd, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000851}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f00000007c0)={0x68, r5, 0x100, 0x70bd25, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x8, @media='ib\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x260000d0) write(r2, &(0x7f0000000140)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='1', 0x1) 688.336624ms ago: executing program 3 (id=386): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d7, 0x0) sendmmsg$unix(r1, &(0x7f00000000c0), 0x318, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f00000002c0)={0x0, &(0x7f0000000300)=[@cpuid={0x64, 0x18, {0x1f}}], 0x18}) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000600)={0x1, 0x0, [{0x40000001, 0x2, 0x3, 0x9c, 0x7, 0x2, 0x80000000}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 406.501271ms ago: executing program 0 (id=387): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8, 0x0, 0xfffffffd}, 0x24) write(r0, &(0x7f0000000040)="240000001a007f0214f9f4070009040803000000000000000002000008000f40fe00000e", 0x24) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x20042, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x1, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 358.545402ms ago: executing program 0 (id=388): r0 = socket(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, 0x0, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c1000000000244e", 0x55}, {&(0x7f0000000400)="8df8ec", 0x3}], 0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x1005, 0xfffffffffffffffe) r4 = syz_open_procfs(r3, &(0x7f0000000140)='clear_refs\x00') writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)='4', 0xfffffffffffffd96}], 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000340)={0x1, 'vxcan1\x00', {}, 0x5835}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xffffffff7ffffffd]}, 0x0, 0x8) r6 = gettid() r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000440)={0xa, 0xe22}, 0x1c) connect$inet6(r7, &(0x7f0000000480)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000004c0)=[{&(0x7f0000000500)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108f004000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000580)=[{&(0x7f00000005c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r10 = syz_open_procfs(0x0, &(0x7f0000000240)='mounts\x00') ftruncate(r10, 0x7fffffffffffffff) timer_create(0x3, &(0x7f0000000280)={0x0, 0x14, 0x4, @tid=r6}, &(0x7f00000002c0)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) tkill(r6, 0x12) ptrace$setregs(0xd, r5, 0x8000000000000002, &(0x7f00000000c0)="e5d0ba6d19d0bc6f52c881d9652410313b8525e6bfae76e026135a8b2653bf2e49eb95726e7f") 286.648434ms ago: executing program 0 (id=389): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="04000000000000000300000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x0) 286.087014ms ago: executing program 0 (id=390): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="02031b00300014000600631772ab00442fff00000000000000000000ffffac141411ff020000000300000000000000000001042088be11"], 0xfdef) 181.441727ms ago: executing program 0 (id=391): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, 0x0) 180.831976ms ago: executing program 0 (id=392): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x20) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x1, &(0x7f0000000040)={0x0}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x121) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) 104.395598ms ago: executing program 1 (id=393): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10002, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000040)) syz_usb_connect$uac2(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100300000040532b310040000102030109026e0003010d0067080b0002010020ff09040000000101200009240100800c0e000005240b04000904010000010220000904010101010220000905010920000308fb082501010305f9ff090402000001022000090400010101022000090582"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xce, &(0x7f00000002c0)=@string={0xce, 0x3, "5f86a8757ad46722fa6423ff410cc2ade58329c9ddb5ca306dccee05d50191b5d3a7b2d24442d259a006000000000000000748bbde7a82754546dc43c202273817160cec24b0f43d85cd5d434f1c5cf91e6f962b41e85ce2f9ccab7b5d1f3a68eac7ad56084f90687fe9d8e5228bf694811bbddc6c6afff229af0d4f7a4fb7a102675902d2b095d1e727a8bb222a59eaa57a0bd9c4c27902170d1487ad771ce3754190eee9753c26086a8c0bb0bc400fdea0771ea55665aeb7bcedc147de7965ffd66da3b9597248f2bef5ad"}}]}) 68.996009ms ago: executing program 2 (id=394): r0 = syz_clone(0xa20c8000, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/168, 0xa8}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, &(0x7f0000000140), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) setns(0xc9, 0x8000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) capset(&(0x7f0000000880)={0x20071026}, &(0x7f00000008c0)={0x200000, 0x200000, 0x0, 0x0, 0xfffffffa, 0x4}) setrlimit(0x6, &(0x7f0000000580)={0xffffffffffffffff, 0x800000b04}) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000940)=0x1, 0x4) sendto$inet(r1, &(0x7f00000009c0)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x2, 0x2, 0x6, {0xa, 0x4e22, 0x80000001, @private1={0xfc, 0x1, '\x00', 0x8}, 0x10}}}, 0x32) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000140)=0xfeab) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/mapper/control\x00', 0x2, 0x44) ioctl(r5, 0xc138fd03, &(0x7f0000000480)="04000000000000000000000038010000000000000200000000000000fffffe000000000000000fffff000000000000002e2e") sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="38010000100001000000000000000000fc010000000000000000000000000001fc0100000000000000000000000000014e2000004e2000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x4880) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r5, 0xc00c6211, &(0x7f00000004c0)) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x600, 0x0) open(&(0x7f0000000500)='.\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008840}, 0x0) 0s ago: executing program 2 (id=395): setns(0xc9, 0x0) r0 = socket(0x2, 0x3, 0xff) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/dev_snmp6\x00') getdents(r1, &(0x7f0000000440)=""/4135, 0x1027) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001500)={0x28, 0x11, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd=r2}, @nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4}]}]}, 0x28}], 0x1}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8917, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e24, @rand_addr=0x64010100}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x194, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0xffff}, {@in=@broadcast, 0x4d4, 0x32}, @in6=@private2, {0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, 0x0, 0x1000, 0xa, 0x4, 0x0, 0x50}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x59, 0x1, {{'xcbc(aes)\x00'}, 0x88, "8478b0098a3a72ec6b13aa7d25e76d65bf"}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40}, 0x40082) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)="ec4969ce12aee5cbcb87448d7b8d39e591f0817d13f230e3603631a855802b483c8db39af979736cb336356a7c1e9d69", 0x30}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e24, @remote}, 0x10, 0x0}}], 0x2, 0x20000800) syz_clone(0xc801300, 0x0, 0x0, 0x0, 0x0, 0x0) setns(0xc9, 0x0) (async) socket(0x2, 0x3, 0xff) (async) syz_open_procfs(0x0, &(0x7f0000000400)='net/dev_snmp6\x00') (async) getdents(r1, &(0x7f0000000440)=""/4135, 0x1027) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001500)={0x28, 0x11, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd=r2}, @nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4}]}]}, 0x28}], 0x1}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8917, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e24, @rand_addr=0x64010100}}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x194, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0xffff}, {@in=@broadcast, 0x4d4, 0x32}, @in6=@private2, {0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, 0x0, 0x1000, 0xa, 0x4, 0x0, 0x50}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x59, 0x1, {{'xcbc(aes)\x00'}, 0x88, "8478b0098a3a72ec6b13aa7d25e76d65bf"}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40}, 0x40082) (async) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)="ec4969ce12aee5cbcb87448d7b8d39e591f0817d13f230e3603631a855802b483c8db39af979736cb336356a7c1e9d69", 0x30}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e24, @remote}, 0x10, 0x0}}], 0x2, 0x20000800) (async) syz_clone(0xc801300, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 0s ago: executing program 2 (id=396): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/78, 0x4e, 0x0, &(0x7f0000000300)=""/200, 0xc8}, &(0x7f0000000440)=0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000002d00), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002d40)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x7fffffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x5005}, 0x4) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x1a97d3f09aeec38c}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) r5 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r6, &(0x7f0000000140)='./file0\x00') unlinkat(r6, &(0x7f0000000180)='./file0/../file0/file0/file0\x00', 0x200) unlinkat(r6, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000480)={@remote, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x500, 0x6, 0x4980183}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/78, 0x4e, 0x0, &(0x7f0000000300)=""/200, 0xc8}, &(0x7f0000000440)=0x40) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000002d00), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002d40)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x7fffffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x5005}, 0x4) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) (async) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x1a97d3f09aeec38c}, 0x0) (async) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) (async) fsopen(&(0x7f0000000100)='bpf\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r5, 0x1, 0x0) (async) symlinkat(&(0x7f0000000000)='.\x00', r6, &(0x7f0000000140)='./file0\x00') (async) unlinkat(r6, &(0x7f0000000180)='./file0/../file0/file0/file0\x00', 0x200) (async) unlinkat(r6, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000480)={@remote, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x500, 0x6, 0x4980183}) (async) kernel console output (not intermixed with test programs): cess permissive=1 [ 14.498022][ T36] audit: type=1400 audit(1792122323.260:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.85' (ED25519) to the list of known hosts. [ 21.968871][ T36] audit: type=1400 audit(1792122330.740:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.972732][ T287] cgroup: Unknown subsys name 'net' [ 21.991548][ T36] audit: type=1400 audit(1792122330.740:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.018926][ T36] audit: type=1400 audit(1792122330.770:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.019512][ T287] cgroup: Unknown subsys name 'devices' [ 22.146247][ T287] cgroup: Unknown subsys name 'hugetlb' [ 22.151894][ T287] cgroup: Unknown subsys name 'rlimit' [ 22.267224][ T36] audit: type=1400 audit(1792122331.040:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.290409][ T36] audit: type=1400 audit(1792122331.040:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.315292][ T36] audit: type=1400 audit(1792122331.040:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.326426][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.347206][ T36] audit: type=1400 audit(1792122331.120:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.372632][ T36] audit: type=1400 audit(1792122331.120:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.372672][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.398728][ T36] audit: type=1400 audit(1792122331.140:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.432482][ T36] audit: type=1400 audit(1792122331.140:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.327648][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.334755][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.341840][ T296] bridge_slave_0: entered allmulticast mode [ 23.348425][ T296] bridge_slave_0: entered promiscuous mode [ 23.356577][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.363637][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.370979][ T296] bridge_slave_1: entered allmulticast mode [ 23.377342][ T296] bridge_slave_1: entered promiscuous mode [ 23.440270][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.447361][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.454469][ T294] bridge_slave_0: entered allmulticast mode [ 23.460770][ T294] bridge_slave_0: entered promiscuous mode [ 23.466995][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.474303][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.481360][ T297] bridge_slave_0: entered allmulticast mode [ 23.487704][ T297] bridge_slave_0: entered promiscuous mode [ 23.493920][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.501033][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.508125][ T295] bridge_slave_0: entered allmulticast mode [ 23.514476][ T295] bridge_slave_0: entered promiscuous mode [ 23.520700][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.527939][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.535062][ T294] bridge_slave_1: entered allmulticast mode [ 23.541277][ T294] bridge_slave_1: entered promiscuous mode [ 23.547502][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.554578][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.561670][ T297] bridge_slave_1: entered allmulticast mode [ 23.568008][ T297] bridge_slave_1: entered promiscuous mode [ 23.574160][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.581211][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.588332][ T295] bridge_slave_1: entered allmulticast mode [ 23.594587][ T295] bridge_slave_1: entered promiscuous mode [ 23.762889][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.769970][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.777292][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.784349][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.793776][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.800853][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.808195][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.815267][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.828105][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.835198][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.842486][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.849573][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.859726][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.866815][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.874139][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.881207][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.935742][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.943102][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.950972][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.958221][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.965877][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.973144][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.005214][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.012264][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.021324][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.028382][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.036568][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.043629][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.056742][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.063811][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.071459][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.078524][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.086346][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.093399][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.139372][ T296] veth0_vlan: entered promiscuous mode [ 24.171943][ T295] veth0_vlan: entered promiscuous mode [ 24.180575][ T297] veth0_vlan: entered promiscuous mode [ 24.191182][ T295] veth1_macvtap: entered promiscuous mode [ 24.202880][ T294] veth0_vlan: entered promiscuous mode [ 24.211417][ T296] veth1_macvtap: entered promiscuous mode [ 24.242842][ T294] veth1_macvtap: entered promiscuous mode [ 24.254876][ T297] veth1_macvtap: entered promiscuous mode [ 24.268135][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.318016][ T313] ======================================================= [ 24.318016][ T313] WARNING: The mand mount option has been deprecated and [ 24.318016][ T313] and is ignored by this kernel. Remove the mand [ 24.318016][ T313] option from the mount to silence this warning. [ 24.318016][ T313] ======================================================= [ 24.361669][ T315] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=315 comm=syz.1.2 [ 24.395208][ T320] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.445890][ T321] tipc: Started in network mode [ 24.455294][ T321] tipc: Node identity 4, cluster identity 4711 [ 24.483962][ T321] tipc: Node number set to 4 [ 24.505533][ T52] tipc: Subscription rejected, illegal request [ 24.723940][ T67] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.764281][ T311] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 24.823948][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.871958][ T355] random: crng reseeded on system resumption [ 24.878607][ T355] FAULT_INJECTION: forcing a failure. [ 24.878607][ T355] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 24.892163][ T355] CPU: 0 UID: 0 PID: 355 Comm: syz.3.13 Not tainted syzkaller #0 0dce1a42a4db61fd93e445decfbc7fc3d71b95b8 [ 24.892205][ T355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 24.892231][ T355] Call Trace: [ 24.892239][ T355] [ 24.892248][ T355] __dump_stack+0x21/0x30 [ 24.892292][ T355] dump_stack_lvl+0x140/0x1c0 [ 24.892329][ T355] ? __cfi_dump_stack_lvl+0x10/0x10 [ 24.892365][ T355] ? misc_open+0x2ec/0x370 [ 24.892399][ T355] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 24.892430][ T355] dump_stack+0x19/0x20 [ 24.892475][ T355] should_fail_ex+0x3c2/0x510 [ 24.892499][ T355] should_fail_alloc_page+0xec/0x110 [ 24.892524][ T355] __alloc_pages_noprof+0x1c0/0x7e0 [ 24.892554][ T355] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 24.892586][ T355] ? kasan_save_alloc_info+0x3a/0x50 [ 24.892617][ T355] ? __kasan_kmalloc+0x96/0xb0 [ 24.892641][ T355] get_zeroed_page_noprof+0x1f/0x50 [ 24.892670][ T355] get_image_page+0x3f/0x3e0 [ 24.892701][ T355] memory_bm_create+0x770/0xff0 [ 24.892730][ T355] ? kasan_save_alloc_info+0x3a/0x50 [ 24.892764][ T355] create_basic_memory_bitmaps+0xa9/0x4b0 [ 24.892795][ T355] snapshot_open+0x1bd/0x2a0 [ 24.892828][ T355] ? __cfi_snapshot_open+0x10/0x10 [ 24.892861][ T355] misc_open+0x2ec/0x370 [ 24.892893][ T355] chrdev_open+0x4eb/0x610 [ 24.892929][ T355] ? __cfi_chrdev_open+0x10/0x10 [ 24.892965][ T355] ? bpf_lsm_file_open+0xd/0x20 [ 24.892991][ T355] ? __cfi_chrdev_open+0x10/0x10 [ 24.893026][ T355] do_dentry_open+0x97c/0x1510 [ 24.893068][ T355] vfs_open+0x86/0x240 [ 24.893093][ T355] ? __cfi_vfs_open+0x10/0x10 [ 24.893119][ T355] ? may_open+0x352/0x430 [ 24.893144][ T355] path_openat+0x2c49/0x35a0 [ 24.893169][ T355] ? schedule+0xc5/0x240 [ 24.893194][ T355] ? kasan_save_alloc_info+0x3a/0x50 [ 24.893223][ T355] ? getname+0x1b/0x30 [ 24.893256][ T355] ? x64_sys_call+0xe69/0x2ee0 [ 24.893281][ T355] ? do_syscall_64+0x57/0xf0 [ 24.893303][ T355] ? do_filp_open+0x440/0x440 [ 24.893331][ T355] do_filp_open+0x1f2/0x440 [ 24.893357][ T355] ? __cfi_do_filp_open+0x10/0x10 [ 24.893386][ T355] ? alloc_fd+0x4c1/0x570 [ 24.893441][ T355] do_sys_openat2+0x134/0x1d0 [ 24.893478][ T355] ? fput+0x1a4/0x230 [ 24.893504][ T355] ? do_sys_open+0x100/0x100 [ 24.893532][ T355] ? __cfi_ksys_write+0x10/0x10 [ 24.893568][ T355] __x64_sys_openat+0x13a/0x170 [ 24.893598][ T355] x64_sys_call+0xe69/0x2ee0 [ 24.893622][ T355] do_syscall_64+0x57/0xf0 [ 24.893643][ T355] ? clear_bhb_loop+0x50/0xa0 [ 24.893674][ T355] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 24.893704][ T355] RIP: 0033:0x7f518779e559 [ 24.893732][ T355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.893752][ T355] RSP: 002b:00007f5188640028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 24.893787][ T355] RAX: ffffffffffffffda RBX: 00007f5187a25fa0 RCX: 00007f518779e559 [ 24.893806][ T355] RDX: 0000000000121001 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 24.893824][ T355] RBP: 00007f51878358b0 R08: 0000000000000000 R09: 0000000000000000 [ 24.893840][ T355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 24.893855][ T355] R13: 00007f5187a26038 R14: 00007f5187a25fa0 R15: 00007fffab4bcec8 [ 24.893877][ T355] [ 24.915637][ T311] usb 2-1: descriptor type invalid, skip [ 24.929159][ T67] usb 3-1: unable to get BOS descriptor or descriptor too short [ 24.947449][ T311] usb 2-1: No LPM exit latency info found, disabling LPM. [ 24.952151][ T67] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.965245][ T311] usb 2-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 24.969392][ T67] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 24.974089][ T311] usb 2-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 24.978630][ T67] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 24.982674][ T355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7108 sclass=netlink_route_socket pid=355 comm=syz.3.13 [ 24.994342][ T67] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 24.997536][ T311] usb 2-1: string descriptor 0 read error: -22 [ 25.001290][ T67] usb 3-1: Product: syz [ 25.007188][ T311] usb 2-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=37.dd [ 25.022194][ T67] usb 3-1: Manufacturer: syz [ 25.031659][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.044540][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.278665][ T311] usb 2-1: USB disconnect, device number 2 [ 25.366358][ T67] usb 3-1: Found UVC 1.00 device syz (8086:0ad2) [ 25.372815][ T67] usb 3-1: No streaming interface found for terminal 2. [ 25.388768][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 25.411308][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.432412][ T10] usb 1-1: Product: syz [ 25.439280][ T10] usb 1-1: Manufacturer: syz [ 25.449105][ T366] capability: warning: `syz.3.15' uses 32-bit capabilities (legacy support in use) [ 25.453963][ T10] usb 1-1: SerialNumber: syz [ 25.475510][ T10] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 25.481450][ T10] cdc_wdm 1-1:1.0: Unknown control protocol [ 25.512794][ T368] overlayfs: failed to resolve './bus': -2 [ 25.585985][ T325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.594529][ T325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.988489][ T372] usb usb5: usbfs: process 372 (syz.1.17) did not claim interface 0 before use [ 26.103901][ T311] usb 3-1: USB disconnect, device number 2 [ 26.142768][ T380] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.177697][ T45] usb 1-1: USB disconnect, device number 2 [ 26.295473][ T398] netlink: 'syz.2.23': attribute type 19 has an invalid length. [ 26.304029][ T398] netlink: 'syz.2.23': attribute type 19 has an invalid length. [ 26.311747][ T398] netlink: 'syz.2.23': attribute type 19 has an invalid length. [ 26.324024][ T398] netlink: 'syz.2.23': attribute type 19 has an invalid length. [ 26.331811][ T398] netlink: 'syz.2.23': attribute type 19 has an invalid length. [ 26.339753][ T398] netlink: 'syz.2.23': attribute type 19 has an invalid length. [ 26.348190][ T398] netlink: 'syz.2.23': attribute type 19 has an invalid length. [ 26.357589][ T398] netlink: 'syz.2.23': attribute type 19 has an invalid length. [ 26.366439][ T398] netlink: 'syz.2.23': attribute type 19 has an invalid length. [ 26.375240][ T398] netlink: 'syz.2.23': attribute type 19 has an invalid length. [ 26.479388][ T411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.487895][ T310] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 26.488396][ T411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.515110][ T414] capability: warning: `syz.2.29' uses deprecated v2 capabilities in a way that may be insecure [ 26.635092][ T310] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 26.645153][ T310] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 26.655009][ T310] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 26.666211][ T310] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 26.675502][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.684865][ T386] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 26.692459][ T386] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 26.702358][ T310] pl2303 2-1:1.0: pl2303 converter detected [ 26.709832][ T310] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 26.723934][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.873948][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 26.894701][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 26.904657][ T310] usb 2-1: USB disconnect, device number 3 [ 26.910571][ T385] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0007]: -71 [ 26.920586][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0027, bcdDevice= 0.40 [ 26.928335][ T385] pl2303 ttyUSB0: pl2303_get_line_request - failed: -19 [ 26.937623][ T385] pl2303 ttyUSB0: pl2303_set_line_request - failed: -19 [ 26.938293][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.945283][ T385] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [000a]: -19 [ 26.954154][ T10] usb 4-1: Product: syz [ 26.961323][ T385] pl2303 ttyUSB0: failed to submit interrupt urb: -19 [ 26.970493][ T10] usb 4-1: Manufacturer: syz [ 26.977433][ T310] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 26.981724][ T10] usb 4-1: SerialNumber: syz [ 26.990289][ T310] pl2303 2-1:1.0: device disconnected [ 26.996450][ T410] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 27.077908][ T36] kauditd_printk_skb: 97 callbacks suppressed [ 27.077925][ T36] audit: type=1400 audit(1792122335.850:171): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 27.117922][ T422] netlink: 96 bytes leftover after parsing attributes in process `syz.2.31'. [ 27.266490][ T432] Zero length message leads to an empty skb [ 27.304461][ T36] audit: type=1400 audit(1792122336.080:172): avc: denied { getopt } for pid=438 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.323945][ T36] audit: type=1400 audit(1792122336.080:173): avc: denied { read } for pid=438 comm="syz.0.36" dev="nsfs" ino=4026532298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.345290][ T36] audit: type=1400 audit(1792122336.080:174): avc: denied { open } for pid=438 comm="syz.0.36" path="net:[4026532298]" dev="nsfs" ino=4026532298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.368270][ T36] audit: type=1400 audit(1792122336.080:175): avc: denied { create } for pid=438 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.388015][ T36] audit: type=1400 audit(1792122336.080:176): avc: denied { ioctl } for pid=438 comm="syz.0.36" path="socket:[5186]" dev="sockfs" ino=5186 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.630849][ T36] audit: type=1400 audit(1792122336.400:177): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 27.650807][ T36] audit: type=1400 audit(1792122336.400:178): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 27.654386][ T67] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.681717][ T445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.38'. [ 27.726268][ T10] usb 4-1: invalid MIDI in EP 0 [ 27.736745][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 27.747944][ T10] usb 4-1: USB disconnect, device number 2 [ 27.757864][ T448] syz.3.39 (448): drop_caches: 0 [ 27.761565][ T357] udevd[357]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.780387][ T36] audit: type=1400 audit(1792122336.530:179): avc: denied { append } for pid=447 comm="syz.3.39" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.806614][ T67] usb 1-1: device descriptor read/64, error -71 [ 27.816125][ T36] audit: type=1400 audit(1792122336.590:180): avc: denied { mount } for pid=449 comm="syz.3.40" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 27.876156][ T452] netlink: 228 bytes leftover after parsing attributes in process `syz.3.41'. [ 27.933959][ T440] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 28.040969][ T518] FAULT_INJECTION: forcing a failure. [ 28.040969][ T518] name failslab, interval 1, probability 0, space 0, times 1 [ 28.053738][ T67] usb 1-1: device descriptor read/64, error -71 [ 28.062622][ T518] CPU: 0 UID: 0 PID: 518 Comm: syz.2.43 Not tainted syzkaller #0 0dce1a42a4db61fd93e445decfbc7fc3d71b95b8 [ 28.062655][ T518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.062670][ T518] Call Trace: [ 28.062677][ T518] [ 28.062686][ T518] __dump_stack+0x21/0x30 [ 28.062725][ T518] dump_stack_lvl+0x140/0x1c0 [ 28.062758][ T518] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.062795][ T518] dump_stack+0x19/0x20 [ 28.062826][ T518] should_fail_ex+0x3c2/0x510 [ 28.062848][ T518] should_failslab+0xac/0x100 [ 28.062871][ T518] __kmalloc_node_noprof+0x69/0x500 [ 28.062902][ T518] ? crypto_create_tfm_node+0xa0/0x4d0 [ 28.062933][ T518] crypto_create_tfm_node+0xa0/0x4d0 [ 28.062963][ T518] ? __kasan_check_write+0x18/0x20 [ 28.062993][ T518] crypto_ahash_init_tfm+0x193/0x4c0 [ 28.063019][ T518] crypto_create_tfm_node+0x19c/0x4d0 [ 28.063048][ T518] ? up_read+0x26/0x1c0 [ 28.063074][ T518] crypto_spawn_tfm2+0x60/0x90 [ 28.063097][ T518] crypto_authenc_init_tfm+0x4b/0x1d0 [ 28.063129][ T518] ? __cfi_crypto_authenc_init_tfm+0x10/0x10 [ 28.063162][ T518] crypto_aead_init_tfm+0x121/0x1a0 [ 28.063190][ T518] crypto_create_tfm_node+0x19c/0x4d0 [ 28.063220][ T518] crypto_alloc_tfm_node+0x166/0x350 [ 28.063251][ T518] crypto_alloc_aead+0x34/0x40 [ 28.063277][ T518] esp_init_state+0x621/0x1280 [ 28.063311][ T518] ? pfkey_add+0x14d6/0x2fc0 [ 28.063333][ T518] ? pfkey_sendmsg+0xce2/0x1190 [ 28.063355][ T518] ? ____sys_sendmsg+0x99e/0xa00 [ 28.063383][ T518] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.063411][ T518] ? __cfi_esp_init_state+0x10/0x10 [ 28.063443][ T518] ? __xfrm_init_state+0x56a/0xf70 [ 28.063464][ T518] ? __asan_memcpy+0x5a/0x80 [ 28.063493][ T518] __xfrm_init_state+0xaf9/0xf70 [ 28.063514][ T518] xfrm_init_state+0x24/0x90 [ 28.063544][ T518] pfkey_add+0x1cc3/0x2fc0 [ 28.063570][ T518] ? __cfi_pfkey_add+0x10/0x10 [ 28.063592][ T518] ? pfkey_broadcast+0x2f2/0x320 [ 28.063612][ T518] ? sk_skb_reason_drop+0xd8/0x310 [ 28.063638][ T518] pfkey_sendmsg+0xce2/0x1190 [ 28.063663][ T518] ? __cfi_pfkey_sendmsg+0x10/0x10 [ 28.063685][ T518] ? selinux_socket_sendmsg+0x281/0x380 [ 28.063714][ T518] ? __futex_queue+0x19f/0x350 [ 28.063738][ T518] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 28.063770][ T518] ? security_socket_sendmsg+0x3d/0x100 [ 28.063797][ T518] ____sys_sendmsg+0x99e/0xa00 [ 28.063826][ T518] ? __import_iovec+0x5b9/0x7d0 [ 28.063858][ T518] ? __sys_sendmsg_sock+0x50/0x50 [ 28.063886][ T518] ? import_iovec+0x80/0xb0 [ 28.063914][ T518] ___sys_sendmsg+0x2a6/0x370 [ 28.063941][ T518] ? __kasan_check_read+0x15/0x20 [ 28.063972][ T518] ? __sys_sendmsg+0x260/0x260 [ 28.064000][ T518] ? __cfi_futex_wait+0x10/0x10 [ 28.064027][ T518] ? copy_siginfo_to_user+0x98/0xb0 [ 28.064055][ T518] ? __fget_files+0x2bc/0x330 [ 28.064078][ T518] __x64_sys_sendmsg+0x1be/0x2a0 [ 28.064106][ T518] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 28.064136][ T518] ? __kasan_check_write+0x18/0x20 [ 28.064166][ T518] ? fpregs_restore_userregs+0x11c/0x260 [ 28.064197][ T518] ? switch_fpu_return+0x12/0x20 [ 28.064226][ T518] x64_sys_call+0x2a4c/0x2ee0 [ 28.064249][ T518] do_syscall_64+0x57/0xf0 [ 28.064270][ T518] ? clear_bhb_loop+0x50/0xa0 [ 28.064305][ T518] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.064332][ T518] RIP: 0033:0x7fb51db9e559 [ 28.064351][ T518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.064369][ T518] RSP: 002b:00007fb51c5e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 28.064393][ T518] RAX: ffffffffffffffda RBX: 00007fb51de25fa0 RCX: 00007fb51db9e559 [ 28.064410][ T518] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 28.064424][ T518] RBP: 00007fb51dc358b0 R08: 0000000000000000 R09: 0000000000000000 [ 28.064439][ T518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.064453][ T518] R13: 00007fb51de26038 R14: 00007fb51de25fa0 R15: 00007ffd07952c78 [ 28.064472][ T518] [ 28.463123][ T440] usb 2-1: device descriptor read/64, error -71 [ 28.637292][ T533] overlay: Unknown parameter './file0/file2' [ 28.704009][ T440] usb 2-1: device descriptor read/64, error -71 [ 28.710383][ T67] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 28.853947][ T67] usb 1-1: device descriptor read/64, error -71 [ 28.953983][ T440] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 29.083933][ T440] usb 2-1: device descriptor read/64, error -71 [ 29.093970][ T67] usb 1-1: device descriptor read/64, error -71 [ 29.123938][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 29.204089][ T67] usb usb1-port1: attempt power cycle [ 29.275373][ T10] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 29.287877][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 29.298017][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 29.313949][ T10] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 29.323019][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.331091][ T440] usb 2-1: device descriptor read/64, error -71 [ 29.338620][ T10] usb 4-1: config 0 descriptor?? [ 29.350476][ T10] usb-storage 4-1:0.0: USB Mass Storage device detected [ 29.359678][ T10] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 29.444492][ T440] usb usb2-port1: attempt power cycle [ 29.546629][ T553] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 29.554011][ T67] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 29.554814][ T553] rust_binder: Read failure Err(EFAULT) in pid:49 [ 29.569101][ T553] rust_binder: 552:553 got transaction to invalid handle 1 [ 29.577018][ T553] rust_binder: 552:553 transaction call to 0:0 failed ENOENT, code 0 size 112-24 line process.rs:952 [ 29.588611][ T10] usb 4-1: USB disconnect, device number 3 [ 29.594552][ T67] usb 1-1: device descriptor read/8, error -71 [ 29.602735][ T45] rust_binder: 552: undelivered TRANSACTION_ERROR: 29201 [ 29.725030][ T67] usb 1-1: device descriptor read/8, error -71 [ 29.793937][ T440] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 29.815447][ T440] usb 2-1: device descriptor read/8, error -71 [ 29.863946][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.955052][ T440] usb 2-1: device descriptor read/8, error -71 [ 29.964076][ T67] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 29.984999][ T67] usb 1-1: device descriptor read/8, error -71 [ 29.993947][ T45] usb 3-1: device descriptor read/64, error -71 [ 30.124687][ T67] usb 1-1: device descriptor read/8, error -71 [ 30.193931][ T440] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 30.225194][ T440] usb 2-1: device descriptor read/8, error -71 [ 30.233962][ T45] usb 3-1: device descriptor read/64, error -71 [ 30.234436][ T67] usb usb1-port1: unable to enumerate USB device [ 30.354953][ T440] usb 2-1: device descriptor read/8, error -71 [ 30.463997][ T440] usb usb2-port1: unable to enumerate USB device [ 30.473969][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.507784][ T583] MTRR 1 not used [ 30.603937][ T45] usb 3-1: device descriptor read/64, error -71 [ 30.696663][ T585] netlink: 108 bytes leftover after parsing attributes in process `syz.1.61'. [ 30.717617][ T585] FAULT_INJECTION: forcing a failure. [ 30.717617][ T585] name fail_futex, interval 1, probability 0, space 0, times 1 [ 30.730484][ T585] CPU: 1 UID: 0 PID: 585 Comm: syz.1.61 Not tainted syzkaller #0 0dce1a42a4db61fd93e445decfbc7fc3d71b95b8 [ 30.730517][ T585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.730527][ T585] Call Trace: [ 30.730532][ T585] [ 30.730539][ T585] __dump_stack+0x21/0x30 [ 30.730568][ T585] dump_stack_lvl+0x140/0x1c0 [ 30.730594][ T585] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.730621][ T585] dump_stack+0x19/0x20 [ 30.730644][ T585] should_fail_ex+0x3c2/0x510 [ 30.730663][ T585] should_fail+0xf/0x20 [ 30.730677][ T585] get_futex_key+0x178/0x940 [ 30.730692][ T585] ? kasan_save_track+0x3e/0x80 [ 30.730717][ T585] ? __cfi_get_futex_key+0x10/0x10 [ 30.730748][ T585] ? do_sys_openat2+0x170/0x1d0 [ 30.730778][ T585] ? x64_sys_call+0xe69/0x2ee0 [ 30.730802][ T585] ? do_syscall_64+0x57/0xf0 [ 30.730817][ T585] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.730838][ T585] futex_wake+0x150/0x950 [ 30.730858][ T585] ? __cfi_futex_wake+0x10/0x10 [ 30.730880][ T585] do_futex+0x37d/0x510 [ 30.730897][ T585] ? __cfi_do_futex+0x10/0x10 [ 30.730915][ T585] __se_sys_futex+0x13c/0x320 [ 30.730931][ T585] ? __x64_sys_capset+0x80/0x80 [ 30.730953][ T585] ? __x64_sys_futex+0x110/0x110 [ 30.730972][ T585] __x64_sys_futex+0xe9/0x110 [ 30.730989][ T585] x64_sys_call+0x227f/0x2ee0 [ 30.731005][ T585] do_syscall_64+0x57/0xf0 [ 30.731019][ T585] ? clear_bhb_loop+0x50/0xa0 [ 30.731039][ T585] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.731058][ T585] RIP: 0033:0x7f002799e559 [ 30.731072][ T585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.731085][ T585] RSP: 002b:00007f00288ad0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 30.731103][ T585] RAX: ffffffffffffffda RBX: 00007f0027c25fa8 RCX: 00007f002799e559 [ 30.731115][ T585] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0027c25fac [ 30.731126][ T585] RBP: 00007f0027c25fa0 R08: 4000000000000000 R09: 0000000000000000 [ 30.731137][ T585] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 30.731147][ T585] R13: 00007f0027c26038 R14: 00007fff58d0cee0 R15: 00007fff58d0cfc8 [ 30.731171][ T585] [ 31.013923][ T45] usb 3-1: device descriptor read/64, error -71 [ 31.124006][ T45] usb usb3-port1: attempt power cycle [ 31.234131][ T440] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 31.243104][ T600] overlayfs: missing 'workdir' [ 31.385030][ T440] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 31.397559][ T440] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.407687][ T440] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 31.420695][ T440] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 31.429795][ T440] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.438756][ T440] usb 1-1: config 0 descriptor?? [ 31.444696][ T440] usb-storage 1-1:0.0: USB Mass Storage device detected [ 31.453277][ T440] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 31.463926][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 31.494936][ T45] usb 3-1: device descriptor read/8, error -71 [ 31.563934][ T67] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 31.594286][ T612] ./dev/sda1: Can't lookup blockdev [ 31.599682][ T612] ./dev/sda1: Can't lookup blockdev [ 31.625008][ T45] usb 3-1: device descriptor read/8, error -71 [ 31.645685][ T595] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 31.653756][ T595] rust_binder: Read failure Err(EFAULT) in pid:41 [ 31.660769][ T595] rust_binder: 594:595 got transaction to invalid handle 1 [ 31.668155][ T595] rust_binder: 594:595 transaction call to 0:0 failed ENOENT, code 0 size 112-24 line process.rs:952 [ 31.679678][ T31] usb 1-1: USB disconnect, device number 7 [ 31.689942][ T310] rust_binder: 594: undelivered TRANSACTION_ERROR: 29201 [ 31.715475][ T67] usb 4-1: unable to get BOS descriptor or descriptor too short [ 31.723628][ T67] usb 4-1: not running at top speed; connect to a high speed hub [ 31.733152][ T67] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 31.742060][ T67] usb 4-1: config 0 has no interface number 0 [ 31.748344][ T67] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 31.759463][ T67] usb 4-1: config 0 interface 88 has no altsetting 0 [ 31.768897][ T67] usb 4-1: language id specifier not provided by device, defaulting to English [ 31.780827][ T67] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 31.790053][ T67] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 31.798190][ T67] usb 4-1: Product: syz [ 31.802826][ T67] usb 4-1: SerialNumber: syz [ 31.811164][ T67] usb 4-1: config 0 descriptor?? [ 31.817157][ T602] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 31.864178][ T45] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 31.885055][ T45] usb 3-1: device descriptor read/8, error -71 [ 31.920133][ T627] overlayfs: missing 'workdir' [ 32.015095][ T45] usb 3-1: device descriptor read/8, error -71 [ 32.028234][ T67] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input6 [ 32.039694][ T67] usb 4-1: USB disconnect, device number 4 [ 32.124038][ T45] usb usb3-port1: unable to enumerate USB device [ 32.493930][ T440] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 32.547225][ T640] page size migration: [640 (syz.3.79)] madvise_vma_pad_pages:326: Invalid attempt to madvise padding on MAP_SHARED vma [ 32.645426][ T440] usb 1-1: unable to get BOS descriptor or descriptor too short [ 32.654957][ T36] kauditd_printk_skb: 52 callbacks suppressed [ 32.655000][ T36] audit: type=1400 audit(1792122341.420:233): avc: denied { ioctl } for pid=647 comm="syz.2.82" path="socket:[6380]" dev="sockfs" ino=6380 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.658891][ T440] usb 1-1: not running at top speed; connect to a high speed hub [ 32.676329][ T36] audit: type=1400 audit(1792122341.440:234): avc: denied { name_bind } for pid=647 comm="syz.2.82" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 32.703303][ T440] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 32.706687][ T36] audit: type=1400 audit(1792122341.440:235): avc: denied { node_bind } for pid=647 comm="syz.2.82" saddr=::ffff:172.20.20.45 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 32.734389][ T440] usb 1-1: string descriptor 0 read error: -22 [ 32.765307][ T440] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 32.774991][ T440] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.788668][ T440] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 32.819881][ T36] audit: type=1400 audit(1792122341.590:236): avc: denied { unlink } for pid=651 comm="syz.3.84" name="#1" dev="tmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 32.851416][ T36] audit: type=1400 audit(1792122341.590:237): avc: denied { mount } for pid=651 comm="syz.3.84" name="/" dev="overlay" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.874154][ T36] audit: type=1400 audit(1792122341.620:238): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.898063][ T36] audit: type=1400 audit(1792122341.670:239): avc: denied { create } for pid=653 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 32.914527][ T659] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 32.921061][ T36] audit: type=1400 audit(1792122341.670:240): avc: denied { setopt } for pid=653 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.927227][ T659] rust_binder: Read failure Err(EFAULT) in pid:77 [ 32.955794][ T659] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 32.963811][ T659] rust_binder: Read failure Err(EFAULT) in pid:77 [ 32.976494][ T36] audit: type=1400 audit(1792122341.750:241): avc: denied { call } for pid=658 comm="syz.3.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 32.995312][ T45] rust_binder: 658: undelivered TRANSACTION_COMPLETE [ 32.995527][ T440] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 33.014854][ T440] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 33.025319][ T36] audit: type=1400 audit(1792122341.780:242): avc: denied { bind } for pid=660 comm="syz.1.87" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.053516][ T440] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 33.065865][ T440] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 33.074418][ T440] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 33.086860][ T440] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 33.189140][ T693] overlayfs: failed to clone upperpath [ 33.222507][ T697] overlayfs: failed to clone upperpath [ 33.277106][ T702] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.285259][ T702] rust_binder: Read failure Err(EFAULT) in pid:99 [ 33.292511][ T702] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.310757][ T702] rust_binder: Read failure Err(EFAULT) in pid:99 [ 33.321136][ T45] rust_binder: 701: undelivered TRANSACTION_COMPLETE [ 33.374029][ T706] overlayfs: overlapping lowerdir path [ 33.381049][ T707] validate_nla: 23 callbacks suppressed [ 33.381065][ T707] netlink: 'syz.2.99': attribute type 13 has an invalid length. [ 33.395969][ T708] incfs: Options parsing error. -22 [ 33.401217][ T708] incfs: mount failed -22 [ 33.410081][ T711] incfs: Options parsing error. -22 [ 33.422424][ T711] incfs: mount failed -22 [ 33.427407][ T707] erspan0: refused to change device tx_queue_len [ 33.638418][ T723] SELinux: failed to load policy [ 33.751709][ T731] fuse: Bad value for 'fd' [ 33.813582][ T440] usb 1-1: USB disconnect, device number 8 [ 33.822874][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.180234][ T738] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 34.188341][ T738] rust_binder: Read failure Err(EFAULT) in pid:82 [ 34.195697][ T738] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 34.203729][ T738] rust_binder: Read failure Err(EFAULT) in pid:82 [ 34.210883][ T440] rust_binder: 737: undelivered TRANSACTION_COMPLETE [ 34.226827][ T740] netlink: 'syz.1.108': attribute type 4 has an invalid length. [ 34.279864][ T747] overlayfs: failed to clone upperpath [ 34.370277][ T758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.382043][ T758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.613924][ T310] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 34.753941][ T310] usb 1-1: device descriptor read/64, error -71 [ 34.843968][ T45] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 35.004758][ T45] usb 3-1: not running at top speed; connect to a high speed hub [ 35.013622][ T45] usb 3-1: config 1 interface 0 altsetting 230 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 35.027174][ T310] usb 1-1: device descriptor read/64, error -71 [ 35.033567][ T45] usb 3-1: config 1 interface 0 has no altsetting 0 [ 35.042360][ T45] usb 3-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.40 [ 35.051879][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.060155][ T45] usb 3-1: Product: syz [ 35.064678][ T45] usb 3-1: Manufacturer: syz [ 35.069383][ T45] usb 3-1: SerialNumber: syz [ 35.169641][ T772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.119'. [ 35.283936][ T310] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 35.288850][ T762] FAULT_INJECTION: forcing a failure. [ 35.288850][ T762] name failslab, interval 1, probability 0, space 0, times 0 [ 35.304262][ T762] CPU: 0 UID: 0 PID: 762 Comm: syz.2.115 Not tainted syzkaller #0 0dce1a42a4db61fd93e445decfbc7fc3d71b95b8 [ 35.304298][ T762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.304313][ T762] Call Trace: [ 35.304320][ T762] [ 35.304329][ T762] __dump_stack+0x21/0x30 [ 35.304392][ T762] dump_stack_lvl+0x140/0x1c0 [ 35.304428][ T762] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.304470][ T762] dump_stack+0x19/0x20 [ 35.304494][ T762] should_fail_ex+0x3c2/0x510 [ 35.304510][ T762] should_failslab+0xac/0x100 [ 35.304543][ T762] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 35.304578][ T762] ? alloc_inode+0xa9/0x270 [ 35.304600][ T762] ? avc_has_perm_noaudit+0x289/0x360 [ 35.304625][ T762] alloc_inode+0xa9/0x270 [ 35.304641][ T762] new_inode_pseudo+0x19/0x40 [ 35.304658][ T762] path_from_stashed+0x208/0x860 [ 35.304696][ T762] ? __kasan_check_write+0x18/0x20 [ 35.304728][ T762] ? __kasan_check_write+0x18/0x20 [ 35.304764][ T762] ? __cfi_path_from_stashed+0x10/0x10 [ 35.304785][ T762] ? _raw_spin_unlock+0x45/0x60 [ 35.304800][ T762] ns_get_path+0x7a/0xa0 [ 35.304815][ T762] proc_ns_get_link+0xfb/0x220 [ 35.304863][ T762] ? __cfi_proc_ns_get_link+0x10/0x10 [ 35.304890][ T762] ? bpf_lsm_inode_follow_link+0xd/0x20 [ 35.304926][ T762] ? security_inode_follow_link+0x7e/0x180 [ 35.304946][ T762] ? __cfi_proc_ns_get_link+0x10/0x10 [ 35.304965][ T762] pick_link+0x673/0xe80 [ 35.305011][ T762] step_into+0xc33/0xf10 [ 35.305041][ T762] ? selinux_task_to_inode+0x1da/0x280 [ 35.305078][ T762] ? set_root+0x420/0x420 [ 35.305100][ T762] ? lookup_fast+0x4ff/0x540 [ 35.305140][ T762] path_openat+0x1a30/0x35a0 [ 35.305168][ T762] ? kasan_save_alloc_info+0x3a/0x50 [ 35.305197][ T762] ? getname+0x1b/0x30 [ 35.305235][ T762] ? x64_sys_call+0xe69/0x2ee0 [ 35.305253][ T762] ? do_syscall_64+0x57/0xf0 [ 35.305269][ T762] ? do_filp_open+0x440/0x440 [ 35.305310][ T762] do_filp_open+0x1f2/0x440 [ 35.305335][ T762] ? __cfi_do_filp_open+0x10/0x10 [ 35.305369][ T762] ? alloc_fd+0x4c1/0x570 [ 35.305395][ T762] do_sys_openat2+0x134/0x1d0 [ 35.305415][ T762] ? do_sys_open+0x100/0x100 [ 35.305456][ T762] __x64_sys_openat+0x13a/0x170 [ 35.305484][ T762] x64_sys_call+0xe69/0x2ee0 [ 35.305514][ T762] do_syscall_64+0x57/0xf0 [ 35.305529][ T762] ? clear_bhb_loop+0x50/0xa0 [ 35.305549][ T762] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.305568][ T762] RIP: 0033:0x7fb51db5ed8e [ 35.305601][ T762] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 35.305620][ T762] RSP: 002b:00007fb51c5e2f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 35.305644][ T762] RAX: ffffffffffffffda RBX: 00007fb51c5e36c0 RCX: 00007fb51db5ed8e [ 35.305666][ T762] RDX: 0000000000000000 RSI: 00007fb51dc34fde RDI: ffffffffffffff9c [ 35.305678][ T762] RBP: 00007fb51dc358b0 R08: 0000000000000000 R09: 0000000000000000 [ 35.305688][ T762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.305697][ T762] R13: 00007fb51de26038 R14: 00007fb51de25fa0 R15: 00007ffd07952c78 [ 35.305711][ T762] [ 35.415589][ T310] usb 1-1: device descriptor read/64, error -71 [ 35.683920][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 35.835117][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.846254][ T31] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 35.855411][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.863909][ T310] usb 1-1: device descriptor read/64, error -71 [ 35.871411][ T31] usb 2-1: config 0 descriptor?? [ 35.974075][ T310] usb usb1-port1: attempt power cycle [ 36.073314][ T45] usbhid 3-1:1.0: can't add hid device: -71 [ 36.080056][ T45] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 36.090220][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 36.096239][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 36.104698][ T45] usb 3-1: USB disconnect, device number 7 [ 36.113996][ T31] usb 2-1: USB disconnect, device number 8 [ 36.323960][ T310] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 36.345069][ T310] usb 1-1: device descriptor read/8, error -71 [ 36.474006][ T45] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 36.482587][ T310] usb 1-1: device descriptor read/8, error -71 [ 36.513932][ T440] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 36.625085][ T45] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 36.633267][ T45] usb 3-1: config 0 has no interface number 0 [ 36.639515][ T45] usb 3-1: config 0 interface 41 has no altsetting 0 [ 36.647797][ T45] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 36.656942][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.665047][ T45] usb 3-1: Product: syz [ 36.669254][ T45] usb 3-1: Manufacturer: syz [ 36.674002][ T45] usb 3-1: SerialNumber: syz [ 36.676118][ T440] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.689767][ T440] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 36.690312][ T45] usb 3-1: config 0 descriptor?? [ 36.699892][ T440] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.701881][ T440] usb 2-1: config 0 descriptor?? [ 36.735877][ T310] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 36.754985][ T310] usb 1-1: device descriptor read/8, error -71 [ 36.884985][ T310] usb 1-1: device descriptor read/8, error -71 [ 36.994029][ T310] usb usb1-port1: unable to enumerate USB device [ 37.114314][ T45] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 37.159891][ T821] fuse: Bad value for 'fd' [ 37.166415][ T821] ./dev/sda1: Can't lookup blockdev [ 37.275445][ T826] overlayfs: failed to clone upperpath [ 37.293653][ T828] overlayfs: failed to clone upperpath [ 37.324914][ T832] overlayfs: failed to resolve './bus': -2 [ 37.331403][ T832] SELinux: Context system_u:object_r:dhcpd_state_t:s0 is not valid (left unmapped). [ 37.419713][ T838] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 37.427821][ T838] rust_binder: Read failure Err(EFAULT) in pid:56 [ 37.435386][ T838] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 37.443710][ T838] rust_binder: Read failure Err(EFAULT) in pid:56 [ 37.450993][ T310] rust_binder: 837: undelivered TRANSACTION_COMPLETE [ 37.486038][ T842] binder: Unknown parameter 'fscontext?}' [ 37.493531][ T842] incfs: Options parsing error. -22 [ 37.499027][ T842] incfs: mount failed -22 [ 37.544498][ T440] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 37.564207][ T440] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 37.764225][ T45] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 37.775224][ T45] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 37.785338][ T45] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 37.795463][ T45] usb 3-1: USB disconnect, device number 8 [ 37.856341][ T311] usb 2-1: USB disconnect, device number 9 [ 37.862244][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 37.913942][ T310] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 38.075160][ T310] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 38.086214][ T310] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 42492, setting to 1024 [ 38.100431][ T310] usb 1-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 38.109758][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.117909][ T310] usb 1-1: Product: syz [ 38.122215][ T310] usb 1-1: Manufacturer: syz [ 38.126997][ T310] usb 1-1: SerialNumber: syz [ 38.132825][ T846] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 38.140799][ T310] ums-onetouch 1-1:1.0: USB Mass Storage device detected [ 38.150374][ T310] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 38.161011][ T310] scsi host1: usb-storage 1-1:1.0 [ 38.188321][ T865] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.204113][ T865] rust_binder: 864:865 got transaction to invalid handle 1 [ 38.211456][ T865] rust_binder: 864:865 transaction call to 0:0 failed ENOENT, code 0 size 112-24 line process.rs:952 [ 38.222802][ T310] rust_binder: 864: undelivered TRANSACTION_ERROR: 29201 [ 38.340222][ T869] mmap: syz.2.154 (869) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 38.354060][ T310] usb 1-1: USB disconnect, device number 13 [ 38.354058][ C0] input input9: can't resubmit intr, dummy_hcd.0-1/input0, retval -19 [ 38.384395][ T885] overlayfs: failed to clone upperpath [ 38.439182][ T36] kauditd_printk_skb: 37 callbacks suppressed [ 38.439199][ T36] audit: type=1400 audit(1792122347.210:280): avc: denied { search } for pid=890 comm="syz.2.161" name="/" dev="configfs" ino=1336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 38.487589][ T36] audit: type=1400 audit(1792122347.260:281): avc: denied { setattr } for pid=890 comm="syz.2.161" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 38.643924][ T440] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 38.664149][ T36] audit: type=1400 audit(1792122347.440:282): avc: denied { sqpoll } for pid=893 comm="syz.2.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 38.793943][ T440] usb 2-1: Using ep0 maxpacket: 16 [ 38.800284][ T440] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.811247][ T440] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.821047][ T440] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 38.833919][ T440] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 38.842974][ T440] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.851657][ T440] usb 2-1: config 0 descriptor?? [ 38.892693][ T898] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.899411][ T898] rust_binder: 897:898 got transaction to invalid handle 1 [ 38.906738][ T898] rust_binder: 897:898 transaction call to 0:0 failed ENOENT, code 0 size 112-24 line process.rs:952 [ 38.918126][ T310] rust_binder: 897: undelivered TRANSACTION_ERROR: 29201 [ 38.942541][ T36] audit: type=1400 audit(1792122347.710:283): avc: denied { setopt } for pid=899 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.983085][ T36] audit: type=1400 audit(1792122347.750:284): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 39.004266][ T36] audit: type=1400 audit(1792122347.760:285): avc: denied { search } for pid=150 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.029633][ T36] audit: type=1400 audit(1792122347.760:286): avc: denied { read } for pid=150 comm="dhcpcd" name="n15" dev="tmpfs" ino=782 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.053966][ T36] audit: type=1400 audit(1792122347.760:287): avc: denied { open } for pid=150 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=782 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.076993][ T36] audit: type=1400 audit(1792122347.760:288): avc: denied { getattr } for pid=150 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=782 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.245126][ T36] audit: type=1400 audit(1792122348.020:289): avc: denied { write } for pid=917 comm="syz.2.171" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.271262][ T918] loop7: detected capacity change from 0 to 8 [ 39.280472][ T440] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 39.298212][ T440] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 39.306233][ T440] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 39.313486][ T440] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 39.322616][ T440] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 39.330033][ T440] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 39.337415][ T440] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 39.344795][ T440] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 39.352093][ T440] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 39.359561][ T440] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 39.382196][ T440] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0001/input/input10 [ 39.400939][ T440] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 39.423356][ T922] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.431885][ T922] rust_binder: 921:922 got transaction to invalid handle 1 [ 39.439201][ T922] rust_binder: 921:922 transaction call to 0:0 failed ENOENT, code 0 size 112-24 line process.rs:952 [ 39.466659][ T440] rust_binder: 921: undelivered TRANSACTION_ERROR: 29201 [ 39.568608][ T440] usb 2-1: USB disconnect, device number 10 [ 39.853957][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 40.003920][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 40.010284][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.021273][ T10] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 40.031435][ T10] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 40.042572][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 40.051651][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.059683][ T10] usb 1-1: Product: syz [ 40.063896][ T10] usb 1-1: Manufacturer: syz [ 40.068509][ T10] usb 1-1: SerialNumber: syz [ 40.209926][ T947] rust_binder: 946:947 no such ref 0 [ 40.215348][ T947] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 40.223374][ T947] rust_binder: Read failure Err(EFAULT) in pid:108 [ 40.231235][ T947] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 40.239359][ T947] rust_binder: Read failure Err(EFAULT) in pid:108 [ 40.246174][ T947] rust_binder: 946:947 got transaction to invalid handle 1 [ 40.253425][ T947] rust_binder: 946:947 transaction call to 0:0 failed ENOENT, code 0 size 112-24 line process.rs:952 [ 40.264722][ T440] rust_binder: 946: undelivered TRANSACTION_ERROR: 29201 [ 40.280979][ T930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.289545][ T948] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 40.297083][ T930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.305080][ T948] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 40.513158][ T10] cdc_ncm 1-1:1.0: bind() failure [ 40.520774][ T10] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 40.529351][ T10] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 40.543975][ T10] usb 1-1: USB disconnect, device number 14 [ 40.723944][ T310] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 40.745131][ T963] netlink: 52 bytes leftover after parsing attributes in process `syz.2.187'. [ 40.767268][ T965] netlink: 'syz.2.188': attribute type 6 has an invalid length. [ 40.777971][ T966] input: syz1 as /devices/virtual/input/input11 [ 40.875110][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.887966][ T310] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 40.897275][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.906243][ T310] usb 2-1: config 0 descriptor?? [ 41.039844][ T975] rust_binder: 974:975 no such ref 0 [ 41.045389][ T975] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 41.053503][ T975] rust_binder: Read failure Err(EFAULT) in pid:86 [ 41.061415][ T975] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 41.069527][ T975] rust_binder: Read failure Err(EFAULT) in pid:86 [ 41.076573][ T975] rust_binder: 974:975 got transaction to invalid handle 1 [ 41.084308][ T975] rust_binder: 974:975 transaction call to 0:0 failed ENOENT, code 0 size 112-24 line process.rs:952 [ 41.095912][ T31] rust_binder: 974: undelivered TRANSACTION_ERROR: 29201 [ 41.121684][ T977] veth0_to_batadv: mtu greater than device maximum [ 41.129213][ T310] usbhid 2-1:0.0: can't add hid device: -71 [ 41.139613][ T310] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 41.159345][ T310] usb 2-1: USB disconnect, device number 11 [ 41.563930][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 41.592583][ T1007] rust_binder: 1006:1007 no such ref 0 [ 41.598146][ T1007] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 41.606233][ T1007] rust_binder: Read failure Err(EFAULT) in pid:106 [ 41.613732][ T1007] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 41.621887][ T1007] rust_binder: Read failure Err(EFAULT) in pid:106 [ 41.628687][ T1007] rust_binder: 1006:1007 got transaction to invalid handle 1 [ 41.636185][ T1007] rust_binder: 1006:1007 transaction call to 0:0 failed ENOENT, code 0 size 112-24 line process.rs:952 [ 41.647613][ T67] rust_binder: 1006: undelivered TRANSACTION_ERROR: 29201 [ 41.669464][ T1009] syzkaller1: entered promiscuous mode [ 41.675021][ T1009] syzkaller1: entered allmulticast mode [ 41.681846][ T1009] syzkaller1: left promiscuous mode [ 41.687141][ T1009] syzkaller1: left allmulticast mode [ 41.731914][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.743072][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 41.761030][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.775781][ T10] usb 2-1: config 0 descriptor?? [ 42.090255][ T1032] overlayfs: failed to clone upperpath [ 42.112931][ T1034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1034 comm=syz.3.210 [ 42.145807][ T1037] fuse: Bad value for 'fd' [ 42.148504][ T1038] ./dev/sda1: Can't lookup blockdev [ 42.384470][ T1051] netlink: 'syz.2.212': attribute type 12 has an invalid length. [ 42.584414][ T10] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 42.592028][ T10] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input12 [ 42.717640][ T1065] rust_binder: 1064:1065 no such ref 0 [ 42.723195][ T1065] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 42.731537][ T1065] rust_binder: Read failure Err(EFAULT) in pid:217 [ 42.739635][ T1065] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 42.747708][ T1065] rust_binder: Read failure Err(EFAULT) in pid:217 [ 42.767582][ T1067] SELinux: security_context_str_to_sid (syt|v\{‹) failed with errno=-22 [ 42.777644][ T1069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.218'. [ 42.843203][ T1071] kvm_intel: kvm [1070]: vcpu0, guest rIP: 0x9115 Unhandled WRMSR(0x1d9) = 0xffffff0055 [ 42.854493][ T1071] kvm: kvm [1070]: vcpu0, guest rIP: 0x9115 Unhandled WRMSR(0x187) = 0xffffff0055 [ 42.863994][ T1071] kvm: kvm [1070]: vcpu0, guest rIP: 0x9115 Unhandled WRMSR(0x186) = 0xffffff00c3 [ 42.874925][ T1071] kvm: kvm [1070]: vcpu0, guest rIP: 0x9115 Unhandled WRMSR(0x11e) = 0xffffff000f [ 42.886088][ T1071] kvm: kvm [1070]: vcpu0, guest rIP: 0x9115 Unhandled WRMSR(0xc1) = 0xffffff007e [ 42.892157][ T67] usb 2-1: USB disconnect, device number 12 [ 42.892247][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 42.911104][ T1071] kvm: kvm [1070]: vcpu0, guest rIP: 0x9115 Unhandled WRMSR(0x186) = 0xffff006f [ 42.925308][ T1071] kvm: kvm [1070]: vcpu0, guest rIP: 0x9115 Unhandled WRMSR(0x186) = 0xffff00de [ 42.935524][ T1071] kvm: kvm [1070]: vcpu0, guest rIP: 0x9115 Unhandled WRMSR(0xc2) = 0xffff0028 [ 43.083967][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 43.159497][ T482] Bluetooth: hci0: Frame reassembly failed (-84) [ 43.234875][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.245086][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 43.254827][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 43.268943][ T10] usb 1-1: New USB device found, idVendor=0499, idProduct=1003, bcdDevice= 0.40 [ 43.278180][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.286239][ T10] usb 1-1: Product: syz [ 43.290430][ T10] usb 1-1: Manufacturer: syz [ 43.295075][ T10] usb 1-1: SerialNumber: syz [ 43.411539][ T1098] rust_binder: 1097:1098 no such ref 0 [ 43.417101][ T1098] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 43.425213][ T1098] rust_binder: Read failure Err(EFAULT) in pid:116 [ 43.432536][ T1098] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 43.440591][ T1098] rust_binder: Read failure Err(EFAULT) in pid:116 [ 43.462089][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 43.462108][ T36] audit: type=1400 audit(1792122352.230:300): avc: denied { connect } for pid=1099 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.464745][ T1100] netlink: 'syz.1.227': attribute type 4 has an invalid length. [ 43.498559][ T36] audit: type=1400 audit(1792122352.270:301): avc: denied { map } for pid=1099 comm="syz.1.227" path="socket:[9740]" dev="sockfs" ino=9740 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 43.522466][ T36] audit: type=1400 audit(1792122352.270:302): avc: denied { accept } for pid=1099 comm="syz.1.227" path="socket:[9740]" dev="sockfs" ino=9740 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 43.572911][ T36] audit: type=1400 audit(1792122352.340:303): avc: denied { getopt } for pid=1102 comm="syz.1.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.323339][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 44.333126][ T10] usb 1-1: USB disconnect, device number 15 [ 44.345913][ T929] udevd[929]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.416464][ T36] audit: type=1400 audit(1792122353.190:304): avc: denied { append } for pid=1112 comm="syz.1.230" name="cpu_dma_latency" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 44.435726][ T1113] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 44.440735][ T36] audit: type=1400 audit(1792122353.190:305): avc: denied { open } for pid=1112 comm="syz.1.230" path="/42/dev/cpu_dma_latency" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 44.665164][ T36] audit: type=1400 audit(1792122353.440:306): avc: denied { remount } for pid=1127 comm="syz.3.237" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 44.671093][ T1128] incfs: Error accessing: ./cgroup.cpu/cpuset.cpus/file0. [ 44.692053][ T1128] incfs: mount failed -2 [ 44.703317][ T36] audit: type=1400 audit(1792122353.440:307): avc: denied { name_bind } for pid=1127 comm="syz.3.237" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 44.726278][ T36] audit: type=1400 audit(1792122353.500:308): avc: denied { map } for pid=1129 comm="syz.1.238" path="socket:[9094]" dev="sockfs" ino=9094 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 44.737446][ T1136] overlayfs: failed to clone upperpath [ 45.003936][ T67] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 45.153950][ T67] usb 2-1: Using ep0 maxpacket: 16 [ 45.160336][ T67] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.171297][ T67] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.181130][ T67] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 45.183984][ T1092] Bluetooth: hci0: command 0x1003 tx timeout [ 45.196591][ T67] usb 2-1: New USB device found, idVendor=045e, idProduct=09da, bcdDevice= 0.00 [ 45.199967][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 45.209215][ T67] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.231259][ T67] usb 2-1: config 0 descriptor?? [ 45.241805][ T1145] FAULT_INJECTION: forcing a failure. [ 45.241805][ T1145] name failslab, interval 1, probability 0, space 0, times 0 [ 45.254566][ T1145] CPU: 0 UID: 0 PID: 1145 Comm: syz.2.243 Not tainted syzkaller #0 0dce1a42a4db61fd93e445decfbc7fc3d71b95b8 [ 45.254601][ T1145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.254623][ T1145] Call Trace: [ 45.254631][ T1145] [ 45.254637][ T1145] __dump_stack+0x21/0x30 [ 45.254670][ T1145] dump_stack_lvl+0x140/0x1c0 [ 45.254695][ T1145] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.254722][ T1145] dump_stack+0x19/0x20 [ 45.254747][ T1145] should_fail_ex+0x3c2/0x510 [ 45.254763][ T1145] should_failslab+0xac/0x100 [ 45.254779][ T1145] __kmalloc_cache_noprof+0x41/0x470 [ 45.254802][ T1145] ? request_key_auth_new+0x11b/0x9e0 [ 45.254823][ T1145] request_key_auth_new+0x11b/0x9e0 [ 45.254844][ T1145] ? __cfi_request_key_auth_new+0x10/0x10 [ 45.254863][ T1145] ? mutex_unlock+0x90/0x240 [ 45.254883][ T1145] ? refcount_dec_and_lock+0x29/0xb0 [ 45.254903][ T1145] request_key_and_link+0xb26/0x1230 [ 45.254921][ T1145] ? key_task_permission+0x3be/0x500 [ 45.254939][ T1145] ? __cfi_request_key_and_link+0x10/0x10 [ 45.254957][ T1145] ? downgrade_write+0x470/0x470 [ 45.254977][ T1145] ? __cfi_asymmetric_key_cmp_partial+0x10/0x10 [ 45.254997][ T1145] ? __cfi_keyring_search_iterator+0x10/0x10 [ 45.255022][ T1145] __se_sys_request_key+0x29c/0x350 [ 45.255053][ T1145] ? __x64_sys_request_key+0xc0/0xc0 [ 45.255078][ T1145] ? __kasan_check_write+0x18/0x20 [ 45.255101][ T1145] ? fpregs_restore_userregs+0x11c/0x260 [ 45.255124][ T1145] __x64_sys_request_key+0x9f/0xc0 [ 45.255149][ T1145] x64_sys_call+0x2b60/0x2ee0 [ 45.255166][ T1145] do_syscall_64+0x57/0xf0 [ 45.255180][ T1145] ? clear_bhb_loop+0x50/0xa0 [ 45.255200][ T1145] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.255220][ T1145] RIP: 0033:0x7fb51db9e559 [ 45.255233][ T1145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.255246][ T1145] RSP: 002b:00007fb51c5e3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 45.255264][ T1145] RAX: ffffffffffffffda RBX: 00007fb51de25fa0 RCX: 00007fb51db9e559 [ 45.255276][ T1145] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 45.255288][ T1145] RBP: 00007fb51dc358b0 R08: 0000000000000000 R09: 0000000000000000 [ 45.255298][ T1145] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 45.255308][ T1145] R13: 00007fb51de26038 R14: 00007fb51de25fa0 R15: 00007ffd07952c78 [ 45.255322][ T1145] [ 45.541337][ T36] audit: type=1400 audit(1792122354.310:309): avc: denied { connect } for pid=1156 comm="syz.3.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.640819][ T1164] input: syz0 as /devices/virtual/input/input13 [ 45.671258][ T1167] »»»»»»: renamed from vlan0 (while UP) [ 45.729477][ T1169] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 45.735678][ T67] usbhid 2-1:0.0: can't add hid device: -71 [ 45.743811][ T67] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 45.752867][ T67] usb 2-1: USB disconnect, device number 13 [ 45.953017][ T1182] netlink: 28 bytes leftover after parsing attributes in process `syz.0.253'. [ 46.683792][ T1182] overlayfs: statfs failed on './file0' [ 46.719860][ T1211] netlink: 9 bytes leftover after parsing attributes in process `syz.1.262'. [ 46.743557][ T1211] gretap0: entered promiscuous mode [ 46.761309][ T1211] netlink: 5 bytes leftover after parsing attributes in process `syz.1.262'. [ 46.791298][ T1215] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 46.791937][ T1211] 0ªî{X¹¦: renamed from gretap0 [ 46.818730][ T1211] 0ªî{X¹¦: left promiscuous mode [ 46.834020][ T1211] 0ªî{X¹¦: entered allmulticast mode [ 46.837400][ T1215] rust_binder: Read failure Err(EFAULT) in pid:146 [ 46.853777][ T1211] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 46.864268][ T1215] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 46.888489][ T1215] rust_binder: Read failure Err(EFAULT) in pid:146 [ 46.898979][ T310] rust_binder: 1214: undelivered TRANSACTION_COMPLETE [ 47.047265][ T1238] zram0: detected capacity change from 0 to 8 [ 47.343901][ T310] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 47.505039][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.523922][ T310] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 47.543152][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.554057][ T310] usb 2-1: config 0 descriptor?? [ 47.919031][ T1258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 47.927115][ T1258] rust_binder: Read failure Err(EFAULT) in pid:161 [ 47.934647][ T1258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 47.942761][ T1258] rust_binder: Read failure Err(EFAULT) in pid:161 [ 47.950041][ T67] rust_binder: 1257: undelivered TRANSACTION_COMPLETE [ 47.968340][ T1260] FAULT_INJECTION: forcing a failure. [ 47.968340][ T1260] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 47.981674][ T1260] CPU: 0 UID: 0 PID: 1260 Comm: syz.0.275 Not tainted syzkaller #0 0dce1a42a4db61fd93e445decfbc7fc3d71b95b8 [ 47.981712][ T1260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.981728][ T1260] Call Trace: [ 47.981736][ T1260] [ 47.981745][ T1260] __dump_stack+0x21/0x30 [ 47.981788][ T1260] dump_stack_lvl+0x140/0x1c0 [ 47.981826][ T1260] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.981865][ T1260] dump_stack+0x19/0x20 [ 47.981901][ T1260] should_fail_ex+0x3c2/0x510 [ 47.981933][ T1260] should_fail+0xf/0x20 [ 47.981955][ T1260] should_fail_usercopy+0x1e/0x30 [ 47.981980][ T1260] _copy_from_user+0x20/0xa0 [ 47.982010][ T1260] do_seccomp+0x3b5/0xf20 [ 47.982034][ T1260] ? __se_sys_futex+0x13c/0x320 [ 47.982060][ T1260] ? prctl_set_seccomp+0x80/0x80 [ 47.982084][ T1260] ? __cfi_ksys_write+0x10/0x10 [ 47.982119][ T1260] ? __kasan_check_write+0x18/0x20 [ 47.982153][ T1260] ? fpregs_restore_userregs+0x11c/0x260 [ 47.982188][ T1260] __x64_sys_seccomp+0x7f/0x90 [ 47.982210][ T1260] x64_sys_call+0x249b/0x2ee0 [ 47.982235][ T1260] do_syscall_64+0x57/0xf0 [ 47.982257][ T1260] ? clear_bhb_loop+0x50/0xa0 [ 47.982288][ T1260] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.982317][ T1260] RIP: 0033:0x7f9af499e559 [ 47.982338][ T1260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.982359][ T1260] RSP: 002b:00007f9af57d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 47.982386][ T1260] RAX: ffffffffffffffda RBX: 00007f9af4c25fa0 RCX: 00007f9af499e559 [ 47.982405][ T1260] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 47.982422][ T1260] RBP: 00007f9af4a358b0 R08: 0000000000000000 R09: 0000000000000000 [ 47.982439][ T1260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.982455][ T1260] R13: 00007f9af4c26038 R14: 00007f9af4c25fa0 R15: 00007ffe9ceb37e8 [ 47.982477][ T1260] [ 48.182177][ T310] usbhid 2-1:0.0: can't add hid device: -71 [ 48.188370][ T310] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 48.201062][ T310] usb 2-1: USB disconnect, device number 14 [ 48.350031][ T1267] netlink: 'syz.0.278': attribute type 4 has an invalid length. [ 48.484850][ T1277] netlink: 48 bytes leftover after parsing attributes in process `syz.0.281'. [ 48.495786][ T1278] netlink: 48 bytes leftover after parsing attributes in process `syz.0.281'. [ 48.504714][ T440] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 48.539470][ T1287] rust_binder: 1286:1287 no such ref 0 [ 48.545118][ T1287] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 48.553128][ T1287] rust_binder: Read failure Err(EFAULT) in pid:183 [ 48.560477][ T1287] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 48.568572][ T1287] rust_binder: Read failure Err(EFAULT) in pid:183 [ 48.581287][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 48.581305][ T36] audit: type=1400 audit(1792122357.350:320): avc: denied { ioctl } for pid=1288 comm="syz.3.284" path="socket:[10201]" dev="sockfs" ino=10201 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.634333][ T1291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.644808][ T1291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.655064][ T440] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.666014][ T440] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 48.675272][ T440] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.684291][ T440] usb 3-1: config 0 descriptor?? [ 48.730392][ T1294] overlayfs: workdir and upperdir must be separate subtrees [ 48.853974][ T310] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 48.896561][ T440] usbhid 3-1:0.0: can't add hid device: -71 [ 48.903706][ T440] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 48.914752][ T440] usb 3-1: USB disconnect, device number 9 [ 49.015095][ T310] usb 1-1: config index 0 descriptor too short (expected 65386, got 45) [ 49.025843][ T310] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 49.035534][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.043642][ T310] usb 1-1: Product: syz [ 49.048276][ T310] usb 1-1: Manufacturer: syz [ 49.052947][ T310] usb 1-1: SerialNumber: syz [ 49.218763][ T1299] syz.3.288 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 49.260100][ T36] audit: type=1400 audit(1792122358.030:321): avc: granted { setsecparam } for pid=1290 comm="syz.0.285" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 49.307598][ T310] rtl8150 1-1:1.0: couldn't reset the device [ 49.314036][ T310] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 49.331677][ T310] usb 1-1: USB disconnect, device number 16 [ 49.414028][ T440] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 49.564982][ T440] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.576597][ T440] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 49.585871][ T440] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.600448][ T440] usb 3-1: config 0 descriptor?? [ 49.797434][ T1313] rust_binder: 1312:1313 no such ref 0 [ 49.802978][ T1313] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 49.811206][ T1313] rust_binder: Read failure Err(EFAULT) in pid:188 [ 49.819537][ T1313] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 49.827636][ T1313] rust_binder: Read failure Err(EFAULT) in pid:188 [ 49.847193][ T36] audit: type=1400 audit(1792122358.620:322): avc: denied { create } for pid=1314 comm="syz.0.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 49.851233][ T1315] fuse: Bad value for 'user_id' [ 49.871428][ T1315] fuse: Bad value for 'user_id' [ 49.933945][ T310] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 49.942233][ T36] audit: type=1400 audit(1792122358.710:323): avc: denied { ioctl } for pid=1310 comm="syz.1.292" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.971306][ T1318] rust_binder: 1316:1318 got transaction to invalid handle 3 [ 49.971586][ T36] audit: type=1400 audit(1792122358.740:324): avc: denied { setopt } for pid=1316 comm="syz.0.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.993459][ T1318] rust_binder: 1316:1318 transaction call to 0:0 failed ENOENT, code 0 size 72-24 line process.rs:952 [ 50.028912][ T36] audit: type=1400 audit(1792122358.800:325): avc: denied { execmem } for pid=1322 comm="syz.3.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 50.052507][ T36] audit: type=1400 audit(1792122358.820:326): avc: denied { ioctl } for pid=1316 comm="syz.0.295" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 50.088772][ T36] audit: type=1400 audit(1792122358.860:327): avc: denied { create } for pid=1325 comm="syz.3.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.108848][ T36] audit: type=1400 audit(1792122358.880:328): avc: denied { write } for pid=1325 comm="syz.3.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.114011][ T310] usb 2-1: Using ep0 maxpacket: 32 [ 50.135689][ T310] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 50.143941][ T310] usb 2-1: config 0 has no interface number 0 [ 50.150054][ T310] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 50.160133][ T310] usb 2-1: config 0 interface 196 has no altsetting 0 [ 50.168826][ T310] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 50.178045][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.186118][ T310] usb 2-1: Product: syz [ 50.190289][ T310] usb 2-1: Manufacturer: syz [ 50.194925][ T310] usb 2-1: SerialNumber: syz [ 50.203035][ T310] usb 2-1: config 0 descriptor?? [ 50.209602][ T1311] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 50.210778][ T36] audit: type=1400 audit(1792122358.980:329): avc: denied { ioctl } for pid=1310 comm="syz.1.292" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.424670][ T440] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 50.432359][ T440] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input14 [ 50.722167][ T67] rust_binder: 1316: undelivered TRANSACTION_COMPLETE [ 50.735223][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 50.743407][ T67] usb 3-1: USB disconnect, device number 10 [ 50.842913][ T45] rust_binder: 45:45 release transaction 66 in, still active [ 50.856850][ T45] rust_binder: 1316: undelivered TRANSACTION_ERROR: 29201 [ 50.871082][ T1329] ./dev/sda1: Can't lookup blockdev [ 50.985175][ T1329] netlink: 'syz.3.299': attribute type 19 has an invalid length. [ 50.993099][ T1329] netlink: 'syz.3.299': attribute type 28 has an invalid length. [ 51.229277][ T1354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.308'. [ 51.237694][ T1359] fuse: Bad value for 'fd' [ 51.242316][ T1355] 9pnet_fd: p9_fd_create_unix (1355): problem connecting socket: ./file0: -111 [ 51.245598][ T1359] fuse: Bad value for 'fd' [ 51.257968][ T1359] fuse: Bad value for 'fd' [ 51.264917][ T1359] fuse: Bad value for 'fd' [ 51.271083][ T1359] fuse: Bad value for 'fd' [ 51.287004][ T1359] fuse: Bad value for 'fd' [ 51.292881][ T1359] fuse: Bad value for 'fd' [ 51.298732][ T1359] fuse: Bad value for 'fd' [ 51.304461][ T1359] fuse: Bad value for 'fd' [ 51.309639][ T1359] fuse: Bad value for 'fd' [ 51.315181][ T1359] fuse: Bad value for 'fd' [ 51.320659][ T1359] fuse: Bad value for 'fd' [ 51.326174][ T1359] fuse: Bad value for 'fd' [ 51.331632][ T1359] fuse: Bad value for 'fd' [ 51.337112][ T1359] fuse: Bad value for 'fd' [ 51.342544][ T1359] fuse: Bad value for 'fd' [ 51.348033][ T1359] fuse: Bad value for 'fd' [ 51.353504][ T1359] fuse: Bad value for 'fd' [ 51.359034][ T1359] fuse: Bad value for 'fd' [ 51.364540][ T1359] fuse: Bad value for 'fd' [ 51.369843][ T1359] fuse: Bad value for 'fd' [ 51.375279][ T1359] fuse: Bad value for 'fd' [ 51.380520][ T1359] fuse: Bad value for 'fd' [ 51.385852][ T1359] fuse: Bad value for 'fd' [ 51.391083][ T1359] fuse: Bad value for 'fd' [ 51.396463][ T1359] fuse: Bad value for 'fd' [ 51.401725][ T1359] fuse: Bad value for 'fd' [ 51.407167][ T1359] fuse: Bad value for 'fd' [ 51.412426][ T1359] fuse: Bad value for 'fd' [ 51.419400][ T1359] fuse: Bad value for 'fd' [ 51.424779][ T1359] fuse: Bad value for 'fd' [ 51.430031][ T1359] fuse: Bad value for 'fd' [ 51.435525][ T1359] fuse: Bad value for 'fd' [ 52.363943][ T440] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 52.454408][ T1414] rust_binder: 1413:1414 no such ref 0 [ 52.459998][ T1414] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.468329][ T1414] rust_binder: Read failure Err(EFAULT) in pid:294 [ 52.480378][ T1414] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.488482][ T1414] rust_binder: Read failure Err(EFAULT) in pid:294 [ 52.495929][ T1414] rust_binder: 1413:1414 got transaction to invalid handle 1 [ 52.503568][ T1414] rust_binder: 1413:1414 transaction call to 0:0 failed ENOENT, code 0 size 112-24 line process.rs:952 [ 52.515406][ T67] rust_binder: 1413: undelivered TRANSACTION_ERROR: 29201 [ 52.536627][ T440] usb 1-1: config index 0 descriptor too short (expected 56, got 39) [ 52.544815][ T440] usb 1-1: config 9 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 52.556957][ T440] usb 1-1: config 9 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 52.571340][ T440] usb 1-1: New USB device found, idVendor=0bda, idProduct=8152, bcdDevice=30.11 [ 52.581223][ T440] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.590057][ T440] usb 1-1: Product: syz [ 52.595091][ T440] usb 1-1: Manufacturer: syz [ 52.599723][ T440] usb 1-1: SerialNumber: syz [ 52.611596][ T440] r8152-cfgselector 1-1: Unknown version 0x0000 [ 52.629887][ T440] r8152 1-1:9.0: Invalid Rx endpoint address [ 52.731551][ T310] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 52.756212][ T310] ipheth 2-1:0.196: probe with driver ipheth failed with error -71 [ 52.780736][ T310] usb 2-1: USB disconnect, device number 15 [ 52.804617][ T929] udevd[929]: setting mode of /dev/bus/usb/002/015 to 020664 failed: No such file or directory [ 52.815630][ T929] udevd[929]: setting owner of /dev/bus/usb/002/015 to uid=0, gid=0 failed: No such file or directory [ 52.845450][ T67] r8152-cfgselector 1-1: USB disconnect, device number 17 [ 53.010063][ T1434] SELinux: policydb version 1562611028 does not match my version range 15-33 [ 53.027547][ T1436] rust_binder: 1435:1436 no such ref 0 [ 53.033514][ T1434] SELinux: failed to load policy [ 53.035293][ T1438] tipc: Enabled bearer , priority 0 [ 53.038686][ T1436] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 53.058847][ T1438] tipc: Enabling of bearer rejected, failed to enable media [ 53.070621][ T1436] rust_binder: Read failure Err(EFAULT) in pid:302 [ 53.100568][ T1436] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 53.112952][ T1436] rust_binder: Read failure Err(EFAULT) in pid:302 [ 53.121412][ T1436] rust_binder: 1435:1436 got transaction to invalid handle 1 [ 53.128935][ T1436] rust_binder: 1435:1436 transaction call to 0:0 failed ENOENT, code 0 size 112-24 line process.rs:952 [ 53.140565][ T67] rust_binder: 1435: undelivered TRANSACTION_ERROR: 29201 [ 53.353960][ T310] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 53.494264][ T310] usb 2-1: device descriptor read/64, error -71 [ 53.584760][ T36] kauditd_printk_skb: 505 callbacks suppressed [ 53.584780][ T36] audit: type=1400 audit(1792122362.360:835): avc: denied { setopt } for pid=1452 comm="syz.0.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.614748][ T36] audit: type=1400 audit(1792122362.390:836): avc: denied { ioctl } for pid=1440 comm="syz.1.331" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.641926][ T36] audit: type=1400 audit(1792122362.410:837): avc: denied { read } for pid=1452 comm="syz.0.336" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 53.667458][ T36] audit: type=1400 audit(1792122362.410:838): avc: denied { read open } for pid=1452 comm="syz.0.336" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 53.708384][ T36] audit: type=1400 audit(1792122362.410:839): avc: denied { ioctl } for pid=1440 comm="syz.1.331" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.749979][ T36] audit: type=1400 audit(1792122362.410:840): avc: denied { ioctl } for pid=1440 comm="syz.1.331" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.793125][ T36] audit: type=1400 audit(1792122362.410:841): avc: denied { ioctl } for pid=1452 comm="syz.0.336" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 53.819813][ T310] usb 2-1: device descriptor read/64, error -71 [ 53.823586][ T1461] netlink: 'syz.3.337': attribute type 27 has an invalid length. [ 53.855952][ T36] audit: type=1400 audit(1792122362.410:842): avc: denied { ioctl } for pid=1440 comm="syz.1.331" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.912208][ T36] audit: type=1400 audit(1792122362.410:843): avc: denied { ioctl } for pid=1440 comm="syz.1.331" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.947185][ T1464] process 'syz.3.338' launched './file1' with NULL argv: empty string added [ 53.965272][ T36] audit: type=1400 audit(1792122362.440:844): avc: denied { ioctl } for pid=1440 comm="syz.1.331" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.083977][ T1471] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=32 sclass=netlink_tcpdiag_socket pid=1471 comm=syz.3.340 [ 54.096664][ T310] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 54.233939][ T310] usb 2-1: device descriptor read/64, error -71 [ 54.243631][ T1474] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.264537][ T1474] rust_binder: 1473:1474 got transaction to invalid handle 1 [ 54.272163][ T1474] rust_binder: 1473:1474 transaction call to 0:0 failed ENOENT, code 0 size 112-24 line process.rs:952 [ 54.285576][ T311] rust_binder: 1473: undelivered TRANSACTION_ERROR: 29201 [ 54.473965][ T310] usb 2-1: device descriptor read/64, error -71 [ 54.583932][ T311] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 54.596044][ T310] usb usb2-port1: attempt power cycle [ 54.763915][ T311] usb 3-1: Using ep0 maxpacket: 16 [ 54.772204][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.785677][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 54.798156][ T311] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 54.812111][ T311] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 54.822448][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.833923][ T311] usb 3-1: config 0 descriptor?? [ 54.903912][ T440] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 54.943918][ T310] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 54.966229][ T310] usb 2-1: device descriptor read/8, error -71 [ 55.063908][ T440] usb 1-1: Using ep0 maxpacket: 16 [ 55.069968][ T440] usb 1-1: too many configurations: 112, using maximum allowed: 8 [ 55.096316][ T440] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 55.097566][ T310] usb 2-1: device descriptor read/8, error -71 [ 55.106519][ T440] usb 1-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 55.120251][ T440] usb 1-1: Product: syz [ 55.124479][ T440] usb 1-1: Manufacturer: syz [ 55.133776][ T440] r8152-cfgselector 1-1: Unknown version 0x0000 [ 55.140537][ T440] r8152-cfgselector 1-1: config 0 descriptor?? [ 55.257467][ T311] nintendo 0003:057E:2019.0002: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.2-1/input0 [ 55.353947][ T310] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 55.381741][ T310] usb 2-1: device descriptor read/8, error -71 [ 55.453284][ T1476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.474051][ T1476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.544899][ T310] usb 2-1: device descriptor read/8, error -71 [ 55.588509][ T440] r8152-cfgselector 1-1: bad CDC descriptors [ 55.611914][ T440] r8152-cfgselector 1-1: USB disconnect, device number 18 [ 55.654021][ T310] usb usb2-port1: unable to enumerate USB device [ 56.035150][ T1510] netlink: 'syz.3.352': attribute type 7 has an invalid length. [ 56.042861][ T1510] netlink: 48 bytes leftover after parsing attributes in process `syz.3.352'. [ 56.226193][ T1520] fuse: Bad value for 'fd' [ 56.269751][ T1520] kvm: pic: non byte write [ 56.315692][ T1518] overlayfs: null uuid detected in lower fs '/', falling back to xino=off,index=off,nfs_export=off. [ 56.410218][ T1526] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.417293][ T1526] rust_binder: 1525:1526 got transaction to invalid handle 1 [ 56.426023][ T1526] rust_binder: 1525:1526 transaction call to 0:0 failed ENOENT, code 0 size 112-24 line process.rs:952 [ 56.439188][ T440] rust_binder: 1525: undelivered TRANSACTION_ERROR: 29201 [ 56.455682][ T311] nintendo 0003:057E:2019.0002: Failed to get joycon info; ret=-71 [ 56.478980][ T311] nintendo 0003:057E:2019.0002: Failed to retrieve controller info; ret=-71 [ 56.512299][ T311] nintendo 0003:057E:2019.0002: Failed to initialize controller; ret=-71 [ 56.530887][ T311] nintendo 0003:057E:2019.0002: probe - fail = -71 [ 56.543075][ T311] nintendo 0003:057E:2019.0002: probe with driver nintendo failed with error -71 [ 56.582367][ T311] usb 3-1: USB disconnect, device number 11 [ 56.944912][ T1543] proc: Unknown parameter '*' [ 56.963288][ T1543] FAULT_INJECTION: forcing a failure. [ 56.963288][ T1543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.016673][ T1543] CPU: 1 UID: 0 PID: 1543 Comm: syz.0.362 Not tainted syzkaller #0 0dce1a42a4db61fd93e445decfbc7fc3d71b95b8 [ 57.016805][ T1543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.016852][ T1543] Call Trace: [ 57.016867][ T1543] [ 57.016901][ T1543] __dump_stack+0x21/0x30 [ 57.017034][ T1543] dump_stack_lvl+0x140/0x1c0 [ 57.017135][ T1543] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.017227][ T1543] ? check_stack_object+0x81/0x150 [ 57.017301][ T1543] dump_stack+0x19/0x20 [ 57.017442][ T1543] should_fail_ex+0x3c2/0x510 [ 57.017515][ T1543] should_fail+0xf/0x20 [ 57.017590][ T1543] should_fail_usercopy+0x1e/0x30 [ 57.017665][ T1543] _copy_from_user+0x20/0xa0 [ 57.017756][ T1543] memdup_user+0x81/0x170 [ 57.017845][ T1543] ? strndup_user+0x40/0xd0 [ 57.017939][ T1543] strndup_user+0x6c/0xd0 [ 57.018022][ T1543] __se_sys_mount+0x9f/0x480 [ 57.018099][ T1543] ? __x64_sys_mount+0xf0/0xf0 [ 57.018178][ T1543] ? __kasan_check_write+0x18/0x20 [ 57.018273][ T1543] ? fpregs_restore_userregs+0x11c/0x260 [ 57.018420][ T1543] __x64_sys_mount+0xc3/0xf0 [ 57.018532][ T1543] x64_sys_call+0x2021/0x2ee0 [ 57.018603][ T1543] do_syscall_64+0x57/0xf0 [ 57.018697][ T1543] ? clear_bhb_loop+0x50/0xa0 [ 57.018822][ T1543] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.018884][ T1543] RIP: 0033:0x7f9af499e559 [ 57.018950][ T1543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.018981][ T1543] RSP: 002b:00007f9af57d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 57.019040][ T1543] RAX: ffffffffffffffda RBX: 00007f9af4c25fa0 RCX: 00007f9af499e559 [ 57.019096][ T1543] RDX: 0000200000000440 RSI: 0000200000000400 RDI: 0000000000000000 [ 57.019151][ T1543] RBP: 00007f9af4a358b0 R08: 0000200000000480 R09: 0000000000000000 [ 57.019209][ T1543] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 57.019254][ T1543] R13: 00007f9af4c26038 R14: 00007f9af4c25fa0 R15: 00007ffe9ceb37e8 [ 57.019324][ T1543] [ 57.387347][ T1551] FAULT_INJECTION: forcing a failure. [ 57.387347][ T1551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.412682][ T1551] CPU: 1 UID: 0 PID: 1551 Comm: syz.0.365 Not tainted syzkaller #0 0dce1a42a4db61fd93e445decfbc7fc3d71b95b8 [ 57.412721][ T1551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.412737][ T1551] Call Trace: [ 57.412745][ T1551] [ 57.412754][ T1551] __dump_stack+0x21/0x30 [ 57.412797][ T1551] dump_stack_lvl+0x140/0x1c0 [ 57.412843][ T1551] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.412883][ T1551] dump_stack+0x19/0x20 [ 57.412918][ T1551] should_fail_ex+0x3c2/0x510 [ 57.412943][ T1551] should_fail+0xf/0x20 [ 57.412964][ T1551] should_fail_usercopy+0x1e/0x30 [ 57.412990][ T1551] strncpy_from_user+0x29/0x280 [ 57.413014][ T1551] getname_flags+0x106/0x6b0 [ 57.413052][ T1551] getname+0x1b/0x30 [ 57.413087][ T1551] do_sys_openat2+0xda/0x1d0 [ 57.413116][ T1551] ? do_sys_open+0x100/0x100 [ 57.413147][ T1551] __x64_sys_openat+0x13a/0x170 [ 57.413177][ T1551] x64_sys_call+0xe69/0x2ee0 [ 57.413202][ T1551] do_syscall_64+0x57/0xf0 [ 57.413224][ T1551] ? clear_bhb_loop+0x50/0xa0 [ 57.413254][ T1551] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.413283][ T1551] RIP: 0033:0x7f9af495ed8e [ 57.413303][ T1551] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 57.413326][ T1551] RSP: 002b:00007f9af57d4f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 57.413353][ T1551] RAX: ffffffffffffffda RBX: 00007f9af57d56c0 RCX: 00007f9af495ed8e [ 57.413372][ T1551] RDX: 0000000000000000 RSI: 00007f9af4a34fde RDI: ffffffffffffff9c [ 57.413390][ T1551] RBP: 00007f9af4a358b0 R08: 0000000000000000 R09: 0000000000000000 [ 57.413406][ T1551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.413421][ T1551] R13: 00007f9af4c26038 R14: 00007f9af4c25fa0 R15: 00007ffe9ceb37e8 [ 57.413443][ T1551] [ 57.660406][ T1559] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 57.668500][ T1559] rust_binder: Read failure Err(EFAULT) in pid:248 [ 57.686870][ T1559] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 57.695259][ T1559] rust_binder: Read failure Err(EFAULT) in pid:248 [ 57.703639][ T440] rust_binder: 1556: undelivered TRANSACTION_COMPLETE [ 57.724901][ T311] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 57.797673][ T1565] netlink: 'syz.3.372': attribute type 27 has an invalid length. [ 57.873920][ T311] usb 2-1: device descriptor read/64, error -71 [ 58.097848][ T1572] SELinux: security_context_str_to_sid (sytem_uÝGйÿÿ) failed with errno=-22 [ 58.111703][ T1573] SELinux: security_context_str_to_sid (sytem_uÝGйÿÿ) failed with errno=-22 [ 58.123912][ T311] usb 2-1: device descriptor read/64, error -71 [ 58.350154][ T1583] tipc: New replicast peer: 0.0.0.0 [ 58.355756][ T1583] tipc: Enabled bearer , priority 10 [ 58.363914][ T311] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 58.513922][ T311] usb 2-1: device descriptor read/64, error -71 [ 58.625549][ T36] kauditd_printk_skb: 1740 callbacks suppressed [ 58.625568][ T36] audit: type=1400 audit(1792122367.400:2585): avc: denied { read } for pid=294 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 58.658589][ T36] audit: type=1400 audit(1792122367.400:2586): avc: denied { read open } for pid=294 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 58.683980][ T36] audit: type=1400 audit(1792122367.400:2587): avc: denied { ioctl } for pid=294 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 58.711159][ T36] audit: type=1400 audit(1792122367.400:2588): avc: denied { ioctl } for pid=1546 comm="syz.1.364" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.736976][ T36] audit: type=1400 audit(1792122367.400:2589): avc: denied { ioctl } for pid=1546 comm="syz.1.364" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.763923][ T311] usb 2-1: device descriptor read/64, error -71 [ 58.767427][ T36] audit: type=1400 audit(1792122367.400:2590): avc: denied { ioctl } for pid=1546 comm="syz.1.364" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.797908][ T36] audit: type=1400 audit(1792122367.400:2591): avc: denied { ioctl } for pid=1546 comm="syz.1.364" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.827412][ T36] audit: type=1400 audit(1792122367.400:2592): avc: denied { ioctl } for pid=1546 comm="syz.1.364" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.866670][ T36] audit: type=1400 audit(1792122367.430:2593): avc: denied { ioctl } for pid=1546 comm="syz.1.364" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.892916][ T36] audit: type=1400 audit(1792122367.430:2594): avc: denied { ioctl } for pid=1546 comm="syz.1.364" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.894234][ T311] usb usb2-port1: attempt power cycle [ 59.083907][ T45] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 59.165080][ T1603] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 59.236178][ T45] usb 1-1: config 1 interface 0 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 59.249182][ T45] usb 1-1: config 1 interface 0 has no altsetting 0 [ 59.259720][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 59.268855][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.276958][ T311] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 59.284607][ T45] usb 1-1: Product: syz [ 59.288847][ T45] usb 1-1: Manufacturer: syz [ 59.293442][ T45] usb 1-1: SerialNumber: syz [ 59.307031][ T311] usb 2-1: device descriptor read/8, error -71 [ 59.413913][ T67] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 59.436082][ T311] usb 2-1: device descriptor read/8, error -71 [ 59.533397][ T1605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.546575][ T1605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.560280][ T45] usb 1-1: bad CDC descriptors [ 59.566650][ T45] usb 1-1: USB disconnect, device number 19 [ 59.573910][ T67] usb 3-1: Using ep0 maxpacket: 32 [ 59.589518][ T67] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 250, changing to 11 [ 59.603419][ T67] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 41089, setting to 1024 [ 59.622669][ T67] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 59.634468][ T67] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.642621][ T67] usb 3-1: Product: syz [ 59.647772][ T67] usb 3-1: Manufacturer: syz [ 59.652406][ T67] usb 3-1: SerialNumber: syz [ 59.673905][ T311] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 59.706655][ T311] usb 2-1: device descriptor read/8, error -71 [ 59.721353][ T1614] overlayfs: failed to clone upperpath [ 59.836729][ T311] usb 2-1: device descriptor read/8, error -71 [ 59.903983][ T67] usb 3-1: USB disconnect, device number 12 [ 59.944406][ T311] usb usb2-port1: unable to enumerate USB device [ 59.965114][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 60.443903][ T1637] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 60.581800][ T1653] ================================================================== [ 60.589928][ T1653] BUG: KASAN: slab-out-of-bounds in link_path_walk+0x9e9/0xeb0 [ 60.597531][ T1653] Read of size 1 at addr ffff88811e0b11aa by task syz.2.396/1653 [ 60.605280][ T1653] [ 60.607638][ T1653] CPU: 0 UID: 0 PID: 1653 Comm: syz.2.396 Not tainted syzkaller #0 0dce1a42a4db61fd93e445decfbc7fc3d71b95b8 [ 60.607670][ T1653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.607687][ T1653] Call Trace: [ 60.607695][ T1653] [ 60.607703][ T1653] __dump_stack+0x21/0x30 [ 60.607741][ T1653] dump_stack_lvl+0x140/0x1c0 [ 60.607776][ T1653] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.607810][ T1653] ? selinux_inode_permission+0x3f2/0x5d0 [ 60.607842][ T1653] print_address_description+0x71/0x210 [ 60.607878][ T1653] print_report+0x4a/0x70 [ 60.607924][ T1653] kasan_report+0x162/0x1a0 [ 60.607948][ T1653] ? link_path_walk+0x9e9/0xeb0 [ 60.607980][ T1653] ? link_path_walk+0x9e9/0xeb0 [ 60.608011][ T1653] __asan_report_load1_noabort+0x18/0x20 [ 60.608042][ T1653] link_path_walk+0x9e9/0xeb0 [ 60.608075][ T1653] __filename_parentat+0x231/0x660 [ 60.608101][ T1653] ? vfs_path_parent_lookup+0x70/0x70 [ 60.608129][ T1653] ? __check_object_size+0x54c/0x870 [ 60.608163][ T1653] do_rmdir+0xe0/0x590 [ 60.608189][ T1653] ? __cfi_do_rmdir+0x10/0x10 [ 60.608215][ T1653] ? strncpy_from_user+0x14f/0x280 [ 60.608239][ T1653] ? __kasan_check_write+0x18/0x20 [ 60.608268][ T1653] ? getname_flags+0x203/0x6b0 [ 60.608301][ T1653] ? __kasan_check_read+0x15/0x20 [ 60.608332][ T1653] __x64_sys_unlinkat+0xc9/0xf0 [ 60.608359][ T1653] x64_sys_call+0x2974/0x2ee0 [ 60.608383][ T1653] do_syscall_64+0x57/0xf0 [ 60.608404][ T1653] ? clear_bhb_loop+0x50/0xa0 [ 60.608433][ T1653] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.608460][ T1653] RIP: 0033:0x7fb51db9e559 [ 60.608480][ T1653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.608500][ T1653] RSP: 002b:00007fb51c51d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 60.608525][ T1653] RAX: ffffffffffffffda RBX: 00007fb51de26540 RCX: 00007fb51db9e559 [ 60.608543][ T1653] RDX: 0000000000000200 RSI: 0000200000000180 RDI: 0000000000000007 [ 60.608559][ T1653] RBP: 00007fb51dc358b0 R08: 0000000000000000 R09: 0000000000000000 [ 60.608581][ T1653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.608595][ T1653] R13: 00007fb51de265d8 R14: 00007fb51de26540 R15: 00007ffd07952c78 [ 60.608616][ T1653] [ 60.608624][ T1653] [ 60.837635][ T1653] Allocated by task 1652: [ 60.841991][ T1653] kasan_save_track+0x3e/0x80 [ 60.846743][ T1653] kasan_save_alloc_info+0x3a/0x50 [ 60.851889][ T1653] __kasan_kmalloc+0x96/0xb0 [ 60.856539][ T1653] __kmalloc_node_track_caller_noprof+0x24e/0x4f0 [ 60.862995][ T1653] kstrdup+0x4d/0x130 [ 60.867023][ T1653] bpf_symlink+0x2d/0x200 [ 60.871387][ T1653] vfs_symlink+0x3f7/0x620 [ 60.875836][ T1653] do_symlinkat+0x1ba/0x400 [ 60.880369][ T1653] __x64_sys_symlinkat+0x99/0xb0 [ 60.885342][ T1653] x64_sys_call+0x1f79/0x2ee0 [ 60.890052][ T1653] do_syscall_64+0x57/0xf0 [ 60.894506][ T1653] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.900531][ T1653] [ 60.902877][ T1653] Freed by task 1647: [ 60.906885][ T1653] kasan_save_track+0x3e/0x80 [ 60.911604][ T1653] kasan_save_free_info+0x44/0x50 [ 60.916669][ T1653] __kasan_slab_free+0x5f/0x80 [ 60.921463][ T1653] kfree+0x158/0x440 [ 60.925399][ T1653] bpf_destroy_inode+0x7e/0x180 [ 60.930285][ T1653] evict+0x81d/0xaf0 [ 60.934227][ T1653] iput+0x651/0x910 [ 60.938070][ T1653] do_unlinkat+0x3d2/0x5a0 [ 60.942524][ T1653] __x64_sys_unlinkat+0xda/0xf0 [ 60.947423][ T1653] x64_sys_call+0x2974/0x2ee0 [ 60.952140][ T1653] do_syscall_64+0x57/0xf0 [ 60.956588][ T1653] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.962531][ T1653] [ 60.964886][ T1653] The buggy address belongs to the object at ffff88811e0b11a0 [ 60.964886][ T1653] which belongs to the cache kmalloc-8 of size 8 [ 60.978627][ T1653] The buggy address is located 2 bytes to the right of [ 60.978627][ T1653] allocated 8-byte region [ffff88811e0b11a0, ffff88811e0b11a8) [ 60.992977][ T1653] [ 60.995326][ T1653] The buggy address belongs to the physical page: [ 61.001767][ T1653] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11e0b1 [ 61.010631][ T1653] flags: 0x4000000000000000(zone=1) [ 61.015842][ T1653] page_type: f5(slab) [ 61.019846][ T1653] raw: 4000000000000000 ffff888100041500 ffffea00045c6840 dead000000000002 [ 61.028443][ T1653] raw: 0000000000000000 0000000080800080 00000001f5000000 0000000000000000 [ 61.037039][ T1653] page dumped because: kasan: bad access detected [ 61.043492][ T1653] page_owner tracks the page as allocated [ 61.049222][ T1653] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 296, tgid 296 (syz-executor), ts 39576362391, free_ts 39558041352 [ 61.068258][ T1653] post_alloc_hook+0x37d/0x3b0 [ 61.073053][ T1653] prep_new_page+0x2d/0x180 [ 61.077576][ T1653] get_page_from_freelist+0x4aea/0x4ba0 [ 61.083140][ T1653] __alloc_pages_noprof+0x35a/0x7e0 [ 61.088361][ T1653] alloc_slab_page+0x6b/0x1e0 [ 61.093057][ T1653] allocate_slab+0x69/0x430 [ 61.097579][ T1653] ___slab_alloc+0x591/0x8c0 [ 61.102186][ T1653] __kmalloc_node_noprof+0x2e7/0x500 [ 61.107495][ T1653] __vmalloc_node_range_noprof+0x529/0x1300 [ 61.113413][ T1653] vzalloc_noprof+0x103/0x1d0 [ 61.118120][ T1653] xt_counters_alloc+0x6c/0xe0 [ 61.122909][ T1653] __do_replace+0xb3/0x9b0 [ 61.127355][ T1653] do_ip6t_set_ctl+0xa7f/0xd70 [ 61.132153][ T1653] nf_setsockopt+0x28d/0x2b0 [ 61.136784][ T1653] ipv6_setsockopt+0x130/0x170 [ 61.141575][ T1653] tcp_setsockopt+0xef/0x110 [ 61.146209][ T1653] page last free pid 919 tgid 917 stack trace: [ 61.152372][ T1653] free_unref_page+0xb99/0xf50 [ 61.157170][ T1653] __free_pages+0x6b/0x3b0 [ 61.161605][ T1653] free_pages+0x86/0x90 [ 61.165779][ T1653] tlb_finish_mmu+0x117/0x1d0 [ 61.170488][ T1653] exit_mmap+0x458/0xc20 [ 61.174754][ T1653] __mmput+0x92/0x330 [ 61.178759][ T1653] mmput+0x55/0x170 [ 61.182591][ T1653] do_exit+0x9a5/0x2850 [ 61.186772][ T1653] do_group_exit+0x21f/0x2f0 [ 61.191386][ T1653] get_signal+0x134c/0x1490 [ 61.195919][ T1653] arch_do_signal_or_restart+0xbc/0x700 [ 61.201482][ T1653] syscall_exit_to_user_mode+0x57/0xb0 [ 61.206969][ T1653] do_syscall_64+0x63/0xf0 [ 61.211398][ T1653] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 61.217310][ T1653] [ 61.219642][ T1653] Memory state around the buggy address: [ 61.225283][ T1653] ffff88811e0b1080: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 61.233365][ T1653] ffff88811e0b1100: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 61.241479][ T1653] >ffff88811e0b1180: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 61.249555][ T1653] ^ [ 61.254954][ T1653] ffff88811e0b1200: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 61.263041][ T1653] ffff88811e0b1280: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 61.271119][ T1653] ================================================================== [ 61.351261][ T1653] Disabling lock debugging due to kernel taint [ 61.433950][ T67] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 61.588741][ T67] usb 2-1: unable to get BOS descriptor or descriptor too short [ 61.599264][ T67] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.609474][ T67] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 61.624130][ T67] usb 2-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 61.633172][ T67] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.641338][ T67] usb 2-1: Product: syz [ 61.645552][ T67] usb 2-1: Manufacturer: syz [ 61.650259][ T67] usb 2-1: SerialNumber: syz [ 61.864387][ T67] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 61.884660][ T67] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 61.903384][ T67] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 61.923984][ T67] usb 2-1: USB disconnect, device number 24 [ 61.986444][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory