last executing test programs: 25.029402343s ago: executing program 3 (id=294): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracefs\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./tracefs/instances/foo\x00', 0x0, 0x6000) 25.010402275s ago: executing program 3 (id=296): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xc2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, 0x0) 24.904049256s ago: executing program 3 (id=298): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1bbc, 0x801) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/address_bits', 0x8040, 0x81) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000005c0)='.\x00', &(0x7f0000000600), 0x40, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f0000000440)=""/120, &(0x7f00000004c0)=0x78) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x5, 0x4, 0x408, 0x110, 0x0, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @private, @empty}}}, {{@uncond, 0xc0, 0x100}, @unspec=@CLASSIFY={0x0, 'CLASSIFY\x00', 0x0, {0x7}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x21}, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xfcd7) 24.903879356s ago: executing program 3 (id=299): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) unshare(0x60000600) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000002540)={'tunl0\x00', &(0x7f00000026c0)={'syztnl0\x00', 0x0, 0x20, 0x38, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x9, 0x4, 0x0, @empty, @broadcast}}}}) r1 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7df00bb7b8d5cddc52109218b7b00000000000000a1", 0x1c, 0x804, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0xfffffff7}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000000440)=""/4130, 0x1022}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000001480)=""/297, 0x129}, {&(0x7f0000003c00)=""/161, 0xa1}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000003dc0)=""/76, 0x4c}, {&(0x7f0000003e40)=""/228, 0xe4}, {&(0x7f0000003f40)=""/133, 0x85}, {&(0x7f0000004000)=""/73, 0x49}], 0x9}, 0x1207}], 0x3, 0x40012142, 0x0) 24.874193919s ago: executing program 3 (id=300): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x20005) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x3}, 0x8) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000003c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000002400)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064dd2f9ac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c252074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e13c4a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b670400d59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b6dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de0400000048dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a357339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca365892a2b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0x2000, &(0x7f0000004400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000044c0)={0x130, 0x0, 0x10001, {0xfffffffffffffff8, 0xfffffff7, 0x0, '\x00', {0x400, 0x2, 0x8000000001010000, 0x906, r4, r5, 0x1000, '\x00', 0x6, 0x27efc00800001, 0x20000000081, 0x3, {0x8, 0xc}, {0x7, 0x3}, {0x5, 0x1}, {0x6, 0x6}, 0x80008001, 0x8, 0xffffffff, 0x6}}}}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000140)=@sg0, r4, &(0x7f0000004600)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004680), 0x8000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000046c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000004700)=[@text32={0x20, &(0x7f0000004740)="8fe9789459fd0f00d3650fc77f9c66660f3825ae00000000d9ed660f55b30d450000b9000a0000b8b94b0000ba000000000f30b95a0200000f320f300f9e1d99360000"}], 0x1, 0x77, 0x0, 0x2f74149356f571ca) ioctl$KVM_RUN(r8, 0xae80, 0x0) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e1f, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) close(r2) syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000100)='6', 0x32) 24.66402719s ago: executing program 3 (id=301): mkdir(0x0, 0xe7) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/uprobe_events\x00', 0x3616c1, 0x1e) write(r0, &(0x7f0000000140)="70f65f5f73742f6576656e7431202e2f66696c65303a307830206172", 0x1c) capset(&(0x7f0000000700)={0x20071026}, &(0x7f0000000740)={0x200000, 0x200000, 0x0, 0x0, 0x8000000}) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev\x00', 0x1ff) r1 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0x91d9, 0x3010, 0x2, 0x200004}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = epoll_create(0xaf2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000002c0)={0xe000200f}) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x1ff) mount(&(0x7f00000005c0)=@filename='./dev/sda1\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000640)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000680)='./mnt\x00') r3 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f00000007c0)=@v2={0x2, @aes256, 0x3, '\x00', @auto="5b6470438f31fdddeac2337f8fb6fab6"}) 9.683060211s ago: executing program 32 (id=301): mkdir(0x0, 0xe7) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/uprobe_events\x00', 0x3616c1, 0x1e) write(r0, &(0x7f0000000140)="70f65f5f73742f6576656e7431202e2f66696c65303a307830206172", 0x1c) capset(&(0x7f0000000700)={0x20071026}, &(0x7f0000000740)={0x200000, 0x200000, 0x0, 0x0, 0x8000000}) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev\x00', 0x1ff) r1 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0x91d9, 0x3010, 0x2, 0x200004}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = epoll_create(0xaf2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000002c0)={0xe000200f}) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x1ff) mount(&(0x7f00000005c0)=@filename='./dev/sda1\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000640)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000680)='./mnt\x00') r3 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f00000007c0)=@v2={0x2, @aes256, 0x3, '\x00', @auto="5b6470438f31fdddeac2337f8fb6fab6"}) 4.903988059s ago: executing program 4 (id=475): r0 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYRES8=r0, @ANYRESDEC=0x0], 0x28}], 0x1}, 0x8000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4.840106046s ago: executing program 4 (id=476): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210808000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="200c00001000"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f00000007c0)={0x20, 0x16, 0x9, "7925410cdaa7ebf5dc"}, 0x0, 0x0, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x3, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) linkat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0xffffffffffffff9c, 0x0, 0x400) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x9) pipe2(0x0, 0x80000) ioctl$BLKROSET(0xffffffffffffffff, 0x5387, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x8001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7fff}, 0xe) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) 4.447700086s ago: executing program 2 (id=477): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracefs\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./tracefs/instances/foo\x00', &(0x7f00000001c0), 0x6000) 4.397709951s ago: executing program 2 (id=478): openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x1527, 0x0, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000200)=@new_dev={0x1, 0x4}}}, &(0x7f0000000240)=0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = syz_open_dev$ublk_chdev(0x0, r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f00000002c0), &(0x7f0000000740)=[{}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xea5e}}], 0x1, &(0x7f00000009c0)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xeae, 0x0, 0x0}}, &(0x7f0000000a40)=0x0) syz_ublk_process_io(r8, 0x0, 0x1, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000001bc0), 0x208e24b) syz_usb_connect(0x0, 0x63, &(0x7f0000001b40)=ANY=[@ANYBLOB="12010002000000404c17aa5600010102030109025100010100c032090400000208065000070501020002000705820200020009040001050806620007050102000200032401070502020002000324020705030200020003240307058402000200032404"], 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000440)={0x0, &(0x7f00000006c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_set_state_pages={0x140, 0x28, {0x0, 0x14, @unmapped=0xfffffffffffff000}}, @nested_vmlaunch={0x12f, 0x18}], 0x70}) 3.162665737s ago: executing program 2 (id=488): openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) (async) r0 = openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000180)=[@acquire, @enter_looper], 0x53}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000000200)=[@request_death, @clear_death]}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000000200)=[@request_death, @clear_death]}) mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000700), 0x8c03, &(0x7f0000000100)=ANY=[@ANYBLOB="6e725f624c6f636b733d1a2c00"]) 3.096001584s ago: executing program 2 (id=489): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002340)={0x14, 0x1b, 0x701, 0x10, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) r3 = dup3(r0, r1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002100)='./binderfs/binder0\x00', 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002140)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000002180)='./mnt\x00', &(0x7f00000022c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002200)='./mnt/trace_pipe\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000002240)={0x13, 0x5e2a, 0x1, 0x5, 0x0, 0x7fffffffffffffff, 0x6, 0xfffffffffffffffe}, 0x0, 0x0, &(0x7f0000002280), 0x0) read$FUSE(r3, &(0x7f00000000c0)={0x2020}, 0x2020) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f00000023c0)=ANY=[@ANYBLOB="1201500200000020cc170010400001020301090269f90201009003080b030101052005090400000001012000092401ddff000900e0090401000001022000090401010101022000090501090002020501082501000f7e000009040200000102200009058209080000080608250181001807001d50de30c31d354e1a71fa0ca8b64d4785e3fcd55f1c1ce98688b7db1e7892cc8bbb3a6922a93e7e3416e3baa7dcff262df7ffc3f8132a3b0fae861c46bfe6a6aa076e1b198d8db3d82ca2b1a65d7d48b3b5cfbb821c8f6aa645f9148830135925c9d0bdab6c1c76059f429a47beddae8b1b02f7129cb1be8461f771fabab2f9f7ba7646686aa27e954bbac47447e251bf8bd484ad046e120dd2914c9df51930f671693f6bf5166ab1f8286b588930a549bc17cc09a7d9ffa476a0"], &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0}) socketpair(0x6, 0x2, 0xb83e, &(0x7f0000000040)) 2.700293414s ago: executing program 4 (id=496): openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x1527, 0x0, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000200)=@new_dev={0x1, 0x4}}}, &(0x7f0000000240)=0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = syz_open_dev$ublk_chdev(0x0, r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f00000002c0), &(0x7f0000000740)=[{}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xea5e}}], 0x1, &(0x7f00000009c0)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xeae, 0x0, 0x0}}, &(0x7f0000000a40)=0x0) syz_ublk_process_io(r8, 0x0, 0x1, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000001bc0), 0x208e24b) syz_usb_connect(0x0, 0x63, &(0x7f0000001b40)=ANY=[@ANYBLOB="12010002000000404c17aa5600010102030109025100010100c032090400000208065000070501020002000705820200020009040001050806620007050102000200032401070502020002000324020705030200020003240307058402000200032404"], 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000440)={0x0, &(0x7f00000006c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_set_state_pages={0x140, 0x28, {0x0, 0x14, @unmapped=0xfffffffffffff000}}, @nested_vmlaunch={0x12f, 0x18}], 0x70}) 1.828514483s ago: executing program 2 (id=504): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x12, 0x0, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000040)=0x40) syz_usb_connect$midi(0x5, 0x3e, &(0x7f0000000680)=ANY=[@ANYBLOB="120110000000001035120a0040000102030109022c00010106200709040000020103000309050f03ff03ae5e010425010009050d12"], 0x0) 1.444078933s ago: executing program 4 (id=506): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x41e04000) 1.208131847s ago: executing program 4 (id=507): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x1, 0x5ff, 0x8, 0x84, 0x0, 0x7, 0x5a, 0x7f, 0x8, 0x1, 0xe, 0x8, 0x2d}, {0x8, 0x7f, 0x13, 0x8, 0xb, 0x1, 0x8, 0x7, 0x4, 0x37, 0x29, 0x3, 0x7ff}, {0x80000002, 0x7, 0x5, 0xf, 0x3, 0x14, 0x0, 0xfd, 0xf2, 0xf9, 0xe, 0xfb, 0x2}], 0x8}) ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, &(0x7f0000000140)={0x80}) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x18e0) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/mem_sleep', 0x20001, 0x18b) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000240)={r4, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x800) (async) sendfile(r4, r3, 0x0, 0x800) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="b91b0000000f3225ff0f00000d000010000f30b878563412bb000310008903", 0xfffffcad}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 32) 1.084650409s ago: executing program 4 (id=508): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000200)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x40000003}], 0x4000000000001d3, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)=@ll={0x11, 0x3, 0x0, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x44000) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0xf}, 0x2, 0x0, &(0x7f0000000040)={0x0, 0xf, 0x24, 0x4, 0x4}, 0x8, 0x7, 0x32e7, 0x0, 0x7fffffff, 0xff, 0x0}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f00000002c0)={0x0, 0xf, 0xa1, {0xa1, 0x30, "3ace727c20bc11a87681ae27881d5b3223abc60fdcc8112c3109b014fb25b2e95db3cc3c6cb803c963977d1bc57db4cbaee6bdc56f5ec3dd419e8d4d663a7e3e982f8e96586463f4065acaba5f8809f7df0ad94df32a6905ed443b2ac5f9855e83c92f94e18390c0f51dba57e6f39a64e9fec7dff8dce37ed0afb0a400db59013526291433af325602a30e36bfed9e271d5b143a51326150617bc14d501583"}}, &(0x7f0000000380)={0x0, 0x3, 0xc8, @string={0xc8, 0x3, "d559b95c57f791f413cf568793713481bce3d2d13ac67687a6701e18317c9b462a6c50b87535fb7be22dd8917583fa728057425354ad5aae0a9abc2543cf58deffefe8bbb7e051d101a18f85b74ce25f5bd2d6d7ee1b8e9aa25b44f2765aa8578d4506772d07b1f5e5012dd25262f8717854607c2bff6719f1b14b768108b4fdbed04037314b0b24c522e5dfc34ef783954c58f3a624c5391876f1441fbcba405b32a3951039979826d07cc78ea8a5365a1c9d0d99928c33497917734faa1b26c740fa0060f5"}}}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)={0x34, 0x2e, 0x503, 0x0, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0xf, 0x0, 0x0, @u64}]}, @generic='^']}, 0x34}], 0x1}, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0xfebc) 1.004130758s ago: executing program 0 (id=510): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000011c0)={0x0, 0x1, 0x0, &(0x7f0000001200)=""/70, 0x0, 0xfec00000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001280)={0x1, 0x1, 0x0, &(0x7f00000012c0)=""/85, 0x0, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001440)=0xfffffffe) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000001480)={0x1}) 1.003729168s ago: executing program 0 (id=511): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[@ANYBLOB="20100000180001000000000000000000020000000800000004000000040012", @ANYRES64=r0, @ANYRESOCT=r0, @ANYBLOB="60c456ce310b669ac17dc830542e511f3728376781601e85b16ef86a1aee105c41c8a6e871da150bd2f93bdc555eba6c87610cbecf5d7cb8a04a06787675d50f01e5c4fb37872386869b5774b5f3099cd6bcee7b7a0d555711f625e1ffe9af5db9d383dd0a9f68c643335b341298261bafd6887ea021d3519e2ed783d7ba931ebc98dc64671fc0e3f3b8027c684a6a48271b2d938fe668fbd08cadaa0b2aa4af01475c62ad3dca5ff4b5da51081c4dee03fc5ee8e35788539c9c4014eebc271f9429179e47c61128297dd802e81c8b5685429cc96311b1e645ce630ea84f05bf7cab8569ae73556858bc4e1f56aecf2f0aeb96", @ANYRESDEC=r0], 0x1020}}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r3) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000680)={'wpan1\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="050035eaffffff00050033000200451860a13fe40000"], 0x34}, 0x1, 0x0, 0x0, 0xc010}, 0x0) (async) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000600)) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), r6) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendto$inet6(r7, 0x0, 0x0, 0x20004845, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}}, 0x1c) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) (async) getsockopt$inet6_buf(r7, 0x29, 0x3d, 0x0, &(0x7f0000000040)=0x37) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x1, 0xa71, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x38}}}, &(0x7f0000000200)=0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000ac0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f0000000880)={0x48, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1c}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008814}, 0x40001) (async) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r8, &(0x7f0000000240)={0x0, 0xe861, 0x1, 0x1, 0x356}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x401, 0x42, 0x0, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8fcc, 0x8, 0x0, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x1, 0x5, 0x166}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf5ac, 0x2000, 0x1, 0x6f}}], 0x1, 0x0, 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r9) sendmsg$IEEE802154_START_REQ(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4c0000006cc7b4d4fe9fb674d70b6d390538c67a3449118e8dea637df0a50ce52f6b447062803ee2c972afd44f225352a7264a371c794fa55223e7dd90bd09834765cf91d6eaa338d6fea2f3f89de7b2650a", @ANYRES16=r10, @ANYBLOB="010000000000000000000d00000005001a000200000006000a000000000005001d0008000000050017000600000006000800a3aa0000050018006d0000000500070017000000"], 0x4c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) 1.003618978s ago: executing program 0 (id=512): socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = syz_io_uring_setup(0x6e00, &(0x7f0000000100)={0x0, 0x8d91, 0x4000, 0x3, 0x366}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)) syz_ublk_setup_queues(r2, r0, &(0x7f0000000280)={0x0, 0x42cc, 0x10, 0x1, 0x7f, 0x0, r3}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x4000, 0x4, 0xd4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x20, 0xfffffffd, 0x230}}], 0x1, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xc2840, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_GET_DEBUGREGS(r6, 0x8080aea1, &(0x7f00000004c0)) 932.896515ms ago: executing program 0 (id=513): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x121040, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000100)={0x9, "6eccdd"}, 0x6) syz_clone(0x530d6600, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f00000000c0)) syz_usb_connect(0x2, 0x5e, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x0) 594.850449ms ago: executing program 2 (id=514): openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x1527, 0x0, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000200)=@new_dev={0x1, 0x4}}}, &(0x7f0000000240)=0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = syz_open_dev$ublk_chdev(0x0, r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f00000002c0), &(0x7f0000000740)=[{}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xea5e}}], 0x1, &(0x7f00000009c0)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xeae, 0x0, 0x0}}, &(0x7f0000000a40)=0x0) syz_ublk_process_io(r8, 0x0, 0x1, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000001bc0), 0x208e24b) syz_usb_connect(0x0, 0x63, &(0x7f0000001b40)=ANY=[@ANYBLOB="12010002000000404c17aa5600010102030109025100010100c032090400000208065000070501020002000705820200020009040001050806620007050102000200032401070502020002000324020705030200020003240307058402000200032404"], 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000440)={0x0, &(0x7f00000006c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_set_state_pages={0x140, 0x28, {0x0, 0x14, @unmapped=0xfffffffffffff000}}, @nested_vmlaunch={0x12f, 0x18}], 0x70}) 380.048271ms ago: executing program 0 (id=515): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) getsockname$inet(r0, 0x0, &(0x7f0000000080)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x41800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) mremap(&(0x7f0000744000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f000026d000/0x2000)=nil) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0x4, 0x0, &(0x7f0000019740)) 379.462021ms ago: executing program 0 (id=516): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracefs\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./tracefs/instances/foo\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000002ac0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000002640)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000002680)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x94, 0x2}]}}}], 0x18}, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040e604050009000000030109022000010100803209040000020806"], 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002e00)=ANY=[@ANYBLOB="1c00000049000100000000000010ff000a00866e"], 0x1c}}, 0x4008000) r5 = getpgrp(0xffffffffffffffff) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl(r6, 0x800452d2, &(0x7f00000026c0)) syz_fuse_handle_req(r2, &(0x7f0000000240)="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", 0x2000, &(0x7f0000002a00)={&(0x7f0000002240)={0x50, 0x0, 0x2e0, {0x7, 0x2d, 0x5, 0x1804e50, 0x2, 0x2, 0xb2, 0x2, 0x0, 0x0, 0x10, 0xc199}}, &(0x7f00000022c0)={0x18, 0xffffffffffffffda, 0x6, {0x4}}, &(0x7f0000002300)={0x18, 0x0, 0x0, {0x1}}, &(0x7f0000002340)={0x18, 0xfffffffffffffffe, 0x81, {0x8}}, &(0x7f0000002380)={0x18, 0x0, 0x6, {0x101}}, &(0x7f00000023c0)={0x28, 0xfffffffffffffff5, 0xfffffffffffffffa, {{0x5, 0x10000, 0x1, r5}}}, &(0x7f0000002400)={0x60, 0x0, 0x1, {{0x1, 0x9, 0x3, 0x1, 0x7, 0x79538bf6, 0xaa, 0x10}}}, 0xfffffffffffffffc, &(0x7f0000002480)={0x18, 0x0, 0x401, {'tracefs\x00'}}, &(0x7f00000024c0)={0x20, 0x0, 0x7}, &(0x7f0000002500)={0x78, 0x0, 0x5, {0x9, 0x2, 0x0, {0x4, 0x2c, 0x4, 0x8000, 0xc, 0x7fffffff, 0x4, 0x684, 0x3, 0x2000, 0x4, r0, r1, 0x9, 0x1}}}, &(0x7f0000002580)={0x90, 0xffffffffffffffda, 0x5, {0x4, 0x2, 0x15c00000, 0xefbc, 0x7ff, 0x200, {0x4, 0x1ff, 0x6, 0x10, 0x2, 0x886, 0x2, 0xffffffff, 0xffff, 0xc000, 0x6de, r0, r1, 0x7fff, 0x9}}}, &(0x7f0000002d00)=ANY=[@ANYBLOB="a0000000f5ffffff03000000000d00000400000000002300010000000000000001000000ffff000023000000000000000000000000000000000e383133c094ac47000000000000004000000002000000020000000000000009000000000000000800000001feffff74726163656673000100000000000000050000000000000000000000030000000000020000000000000008000000e00000007472616365667300d7000000000000"], &(0x7f0000002700)={0xb0, 0x0, 0x3, [{{0x5, 0x0, 0x4, 0x5, 0x4, 0x1, {0x5, 0x1, 0x10, 0xb304, 0x6, 0x2, 0x4, 0x32a3, 0x0, 0xc000, 0xfffffffc, r0, r1, 0x6bda2ef, 0x7fff}}, {0x5, 0x800000, 0x7, 0x4, '\\\\-$+[)'}}]}, &(0x7f00000027c0)={0xa0, 0x0, 0x10000, {{0x5, 0x2, 0xf, 0xc, 0x10000, 0x4, {0x4, 0x0, 0x800, 0x7ab, 0xc153, 0x2, 0x80000000, 0x1, 0x400, 0x8000, 0x6, r0, r1, 0x2, 0x5}}, {0x0, 0x2}}}, &(0x7f0000002880)={0x20, 0x0, 0x1, {0x6, 0x4, 0x101, 0x43}}, &(0x7f00000028c0)={0x130, 0x0, 0x5c1, {0x838, 0x8, 0x0, '\x00', {0x10, 0x10, 0xfffffffffffffbff, 0x5, r0, r1, 0x2000, '\x00', 0xfffffffffffff432, 0x9, 0x3, 0x4, {0x6, 0x3ff}, {0x1, 0x1}, {0x0, 0xb73}, {0x1, 0x6}, 0x7, 0x1, 0x6, 0x5}}}}) 245.582865ms ago: executing program 1 (id=518): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000580)={0x1f, 0x3, 0x5}, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0xfffe}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x200000, 0x2, 0x0, 0x3, 0xe}, 0x20) write$binfmt_misc(r0, &(0x7f0000000300), 0x6) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) 188.115151ms ago: executing program 1 (id=519): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000011c0)={0x0, 0x1, 0x0, &(0x7f0000001200)=""/70, 0x0, 0xfec00000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001280)={0x1, 0x1, 0x0, &(0x7f00000012c0)=""/85, 0x0, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001440)=0xfffffffe) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000001480)={0x1}) 187.716171ms ago: executing program 1 (id=520): r0 = memfd_create(&(0x7f0000000100)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x0, 0x0}, 0x2020) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000005180)={&(0x7f00000050c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000005140)={&(0x7f0000005100)={0x3c, 0xf, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000004b40)=ANY=[@ANYBLOB="1c000000020301020000000000000000000009020800010001"], 0x1c}}, 0x0) r7 = fsopen(&(0x7f0000004b80)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) (async) fchdir(r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000004bc0)='./net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) read(r9, &(0x7f0000004c00)=""/1024, 0x400) write$FUSE_INIT(r2, &(0x7f0000002440)={0x50, 0x0, r3, {0x7, 0x2b, 0x2, 0x2b418842, 0x6, 0x0, 0x0, 0x4000000}}, 0x50) r10 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_ublk_add_dev(r10, r11, r12, r13, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000200)=0x0) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r15) (async) r16 = dup(r15) syz_ublk_setup_queues(r16, r14, &(0x7f0000004680)={0x0, 0x815f, 0x20, 0x2, 0x379, 0x0, r10}, &(0x7f0000004700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4c1, 0x1, 0x0, 0x8d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x28b, 0x1000, 0x1, 0x17c, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x550d, 0x0, 0x0, 0x1c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x56ef, 0x1000, 0x2, 0x131, 0x0, r10}}], 0x4, &(0x7f0000004980)={0x2e, 0x43, 0x0, r16, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x1800}, 0x0, 0x0, '\x00', {0x3, 0xf8e, 0x0, 0x0}}, &(0x7f0000004a00)) syz_fuse_handle_req(r2, &(0x7f00000024c0)="aa8e9df36226466e888b39901e75023156b5530e75c1e203314842ea78a6048cdec3383c60dcd8fa24f6928f6e02ab1090989c59ae38dceda05af132af4546a298837c63ea70975feb0919d7f7766791d530b90d522b23c58776ac7a4035383c5a0dd90d8b766c96816631f1742a0da0ce6ddd053a05966f6b6ec22dd28a0a2636d07696a307496b0b0d8bb370227dca3c96838e556681409be388f1dfbf500f1aee82b374f4473aecbdb77cf567fece7f8ec733fa91aa92a186f9768d16d0257ef826959fb3a73e4976a019bde8a82e9bb0a0443cbb1ab2c6e8f8748489948710294efb79d70edec2271491bc1cddc9c9d2713cc3063761f2bea07f5577bbe5224302ef23adcc96cb5ecee406c7977c97d7000000006e28198954bba79006fd58b2a2b43047e7f3ead143ccb6b27043d7a7512e9d3bad0138554f4b465ab6d1cec9b40cb301ac6491ee7fcdc0588e53eb2510471de91e3e73c98f0a3cc9929eac63f477a1208a80f8c75d0a1d9edb895d675d036a1863dddea98b18c846ac253b2470324b21eaaa6e69389b91bcd470995cd6835c6fac80d5ca41b66562c910f893124cf0f20dc65d90aa0f9cd1a7c88f755aaf33875d7639ae1b7413834636de57f44302b723646257ee7456bdfee10f2eaf0c05f2cf01a115ed8ac2908827af3d85da2f1bcf53d87ee830dc5e98fcfc1a22e547ce57508f606945a7599d8e1cc0268987cb7b3d00a6bfacea7bd05430255bc8b473a071b83695783944ef856fc89906e0b44a13166309bc8cc1dbae68399e1e8e4a2ea265c1a104dd862563cdaeee2b37e72fbda323cc72360b6d4fad2fd2409397f90422bbe6e9068aaf38e18918736e6357a6caac59ae803ffbe853ff716a388423bbc93bb2d6b1222bb94c96a3bddf421288d47039fa1b73573dbed87e1f6b280f8b045f9be8e0d85f6cf416bfc0f3f4ce988aefa2382cccf39e40b2a1657814b7953d0a0aea45d50d02d66982e5269f1ededd6a9f8f9e212314a4bb5c2f4898278fd3a585c1ff60e435b186c552134e5ddb0f2cc95dac405bc4bd32ccda41b05c6a376070c8ef2d6eb3ea7fce97da8f09440d47dc5faca6271d1ce4f4201b315d1cc3fa1d4cc2baa14e4c57bafb7b5bb2e9e859505360e1738a36100dd6c2fb6610fc0ed88e452148ecd8b73517f69c28f0c979525d21ba4fef353eebb2326f48217c44a322e9f1f08f92af1ff5ee5f2dc563f1a0edb09d0646105be0c46ddc8b71301e68013e863d539af5b3a2b11f770d8c0c086988216602619ec440f98d434add23bc7f54d145260773e53121188ca179832d5c406f2b4a91045edca91232416219fade02bf6ba002352943850294b05d9a142889205e6b69336cecfe8a7cfc88688368d54b475f3915eea851334395f80b41177ed4d17d91880a22c1c0cf33a550e32fbf76505458d07ebccc4e77bafae1700c9997f6fe28452f011e370642f228bbf0e2f3dc05741127f6d73e96c073b26e730ac19cb17dfc63c0ed4b5d53ffd6e312e3e80822c8bbea3cf2914f3f8ee53fb4edde1d4507fa9d7de54eecb75132befab6bf486cb05bc8727dadac49c83bf08d9eb94621b42241f9eb8fd1e6fbf969d932a023760faa62c178b7f0a1d43adbf5c21a35a58d381442ecdfc2dcce2d11e5efae8433b14fc9fc28294ae76eaa95f38ac121f255d9b478c81a1caf5c606c34e6efa80dd3aa77cc4001b9fceebcc77a1efea7bf9f749f62c7a8bd5deb0f70c54ab5daab010cf14b2f1012516dc1639edb2d890638b73559d060be47f594f322efdd40c5945148fe1690585923488910fcb3159006f935f7d184e4b4c404ccb6e2a799cc67aa2b56a13c16e3ad92b85a12060881c1d140708ffece6965f9746ed4eef74d37424e760f4b266c80c93390523eadc65494962bed4efc86a0fead2fe25c9108c5d591770cee92f9ff2d916ba0dedc6551a47ce3a4dbc97043e588b3483f0793786fe9f32f1b79ba3f4c4ccabba52a59861c8024bcdfc8ecb0acc821160b060d5dc24f0ade14d08b56218a32a03f9eba729c02fc6b714bc72b11cc7fe47b51b3a174cfa2d8f5df80a0fd4d1dd2ed36b868b46ee5a8cc72e91b57bd05005b5142b5531650813fb5496af379f9e7b1b73c49c64dead9725af0742a41b770205390791de856715c0138ca22f134911a28d2caf22ef21049d1ba721d278bcf675317c5303cbaf96535414fd92c55d741120200d49729e01e399e4c30fa8da659654196af7991a3d294c775a610f242a56c88d542641036de7eccbd64f9f306a3920596d350637a6409f667110b46c6d85ab94df4d7b0af12318522ba1e745e7de45176789a53213b9b3d23b2599275e4f1858fdb2fd63f8c6f7990235e2fb3c4c8f215715973b60b1e56d1f061b6ff33510d08fa403559cbcc21bd141b41f1e9ab4e163a0f80a918ba13031c483931a9dcdb790ad77fbdf5634662cb75e79d986e4724f64c80203600df7ac9950330431b83777bd968a86be5698b13c37513235ac89a0a1dcb799112a86a2d96b1708e0c5e983756d8243927fc7d42be6ff4c946c0763a9745897726f38b65920363b7c32051bf9e770ab1ec140ff11fc639f36fa760afcfd6ba2f609df8cb0949f26119895b69c8ffd0836a01da1e407ba08f37a1144674f5a71b3499ffcccb21e75f19cdfb33c7eded5fa5c264784a78edc5f6de17da15317a66fea522b6e92a52efa5013797212d816c3229c7dd523e2165f9f042c3b3b16e608a1d87ab9c46c2b291bf547e1f4312913b16e39a714c24ebc5cb4f4f80bb20ce4efdf2921db45b7389fef98bd0e8aa40be16758b0d7755ab631b27c5d49225e84fea63e3f031c665851ef4ed18628b26445da2cad4741800cf72a401ad79a7462657068e0f2ee65eeb86da66890247cb45b31d3ad06ea7500eac5be65528c55bf190b0ec27673b67b36117344097a0dbb9db47a2b5144218002d14cbb98629c2ed35db5cdcf93994e3e3d1a1673ff60ec0d9bae1217ba6f39ae4ac4c9e5a19f85634f3091150c4724aaabe3bd1445cfa33fac93b86c5871ca168a728899e2e0062a596fba22b962764420f1268bb8ae0a894559c488cfce6b71aa8478964d2eef5086b2cee891ca031b6543bb7ba55006621f1d80e17abcba9f9d05fc5e61c6c4a890aba4b205f5570e7866ec4de380420c4758de63ff0f7b1acb0521e45cd9bc54df1a4614c04c524f43e86f58757eddb645bbc56a63de5bb560f56a31796dc344d58e2ff2d3fe5228d87c0439e6353943c92160fb847a172eea37ad0c22de5d1e7cd66730218832c87b73366131e29a1545b26d4c500a9afd75864b460cea1ba33a5dca6e5585e9c78a8ee3361f20e2b79489ed2ef1c935d7deeef6de0d009b72a0751929209b351331c0225c29341f5d476b278061a0a33c1e455815bbb83eebf5f5c3fe97c4b3df32846a094501a157196b6c1db1e05cec4f2dee823ebea7da05f5ee63aee1670128471465ae83defcf26aba78f18544146fcc9305ed5899965edbcf9f677c499a52d984db346c12faf02553338e6553488c29c9f3f4537a9437b5eb7382f95f9e844d27fa0b1ffc48d2b44e383b1fdb567b7f23863e8e10b6210f8031859cea410d52f99b5a8d2f218e7c92e231904b171dc077c636db15087cfb0ca6a2cd09f6b7973627a03ebfb4772daddc8ad7c9e534d8bc58cfc6d1305374b589a2a85c8a3c471c7408712ff5cfd7a50bee627d0417a5667dba71866320857cdb84e071a37e477f1b5ac16bdd464d8bf3ae31860ad19722bea1d85d1a5c09e1ab36dcd6c4bf524ed2137745e3562147081027d7852bee1ccc9563e4ff0ce72affa7002e9a066591ddf31abc4388281d98d2d88fa1c5f22cb60523e72e3d838fc6b0163fe0082ce0d8d59098363a174818113182d40cdb6367cb4a867c5aaa480c95f4a98439a2b58291fedcbfedfc3ebb41fe6b0a12fce36518ea6082fb919cdff23e3b40aa26eac8d634e03fc3a1e0fafe402c875709b15b622f35bfdd233ea8d7989ec38dfa1e5b5688d76c615b5efba62dd7d50be97b92f16c838edecd426e18dd270ddda42121d7ad8d26ec28df29580e6dcd7f968885d1cbc5f573efda890a408b45701bdf5cb2e3c54f8481710145ac1f5bdb1b53a1e9a7efd8a3ad7dad7bd0fa017e080854913beda2ccc95631a5c1da5c5afaa84bcc3f1a7041208fac9e09ef52140f142bed882b8988ea062cc8ecd7fd78fd33aeee8e8d5cc891514e3407fbb171e84e45fa14713e995513e16763424e356032ac81047c8e2bfe05dfecc510b55866d4a8696c91afd7b6b809fcf2e0f8a21834f43149d8e2b5dc5fddacb8ff9341376281e8f7d762fdb61a8e6536529b0d4d3cd8217fdb4f0b8341587737da7f50dbe4e5b7851a25d52066bd0e3ad11aed47ee02bec11d0f125cdee1f505cc5c1223d386b2fda556331cf57d8df433927cf12a5fbff853be266c5a64b6424f7b106931d312f0fd447206d21c1945579915e7e21627c7fc423a813823ce5fa2c6f3114303d0995c5706418a088535c62eda2a60c82b727c31177252f8ea025c16a3676ea0ccec24ea57e68c7e0f1b0e06f78a8ccead63eb4c0ef5c59b1d3a805644f8089e604a5bd3aa4494ff7fca02dd5894a6f02e572edd487af04ace3e37f19074325613d6f7d2af73062607b45a3c9365337a1c5e6bae9702a65f0a1b9ce75e43f6381efd9d610ad37532b62c6ab5957ded77a5d01604f67d7ccaa495266ab7fe161268b9a6156643ab6289fa0be75ac433a0204df164c02d3d0cb1b7bf0acd92ca8ff19b710b0b511820d0500fdf58f598fc611380a0f7dffce7bbc934edc967ba0094a0281750176748a4e2c99684c1c4a40258b0da77a0bfb9a4b808d5932443389f0f346dad998cee519624aeb07ea4446064282b1448bfa2e5ac3393d30b5c3865a8995869f69bab0747cfcbbd2bfd407c82e198da326f36be9a508e12d6d73fb262b37fcd7ff70b372c966b7198a9f2364012ff8127f200c079cb70d550f9483c1bf9fba69ebc961c989a82fc38cffe853e4738f33f1fa42fe7167e4bb79110f237d7e4989d2f6f4bd21905e491e2d4b6ac5a66025c11a93ab1eddcade3c3e78c270eaf6a0a6ed43df6e35bcaea9aa716d547d2136c2388379abf645e3f7cad1cc1fdc92b882729ff92b0612302970bd9ca7e36d76b2eb4d9dfe35116bb7771e448867e57026e622e1e54422b064fdb707fef339aa16fde808f622a7269b77c292c7e85fade6dcde475c2f61d71370209bc0e46ba7c7b71e41df246d283f5574205ca6b4819c63d97193eb084fd6b0c20b956cfc4b45b51fd46b2e034ff0f003179c7539fbc4e888c0633767604ed0f07beb4fe00f5a3b56ad9f3997cb49c7a8b92a719411b20874686a8a5ab462914baa85d016df99796a868af3dfa6ad98ceaaa18af2f2fad2ebf3dee1df8c8863e84ed83d6da5e283ca9cc385e0ded20531f127ff4aa974b91634d8f367154d3e23ebb04571a5a453d1265e873d00d40be7e1eb7e74529822b4c81d742c981a988fb786084cbd1e721358c7a1ea5293aa609773b890a5c9de4d1349588def4232d41fa5d7cfbc3dd130754891c304118a895268555874613e9c89c66bceea609e7ca1a914ea327db1f85a3809098e801289d8ab71997c2ad5bd1f3fd4b3c6b80667ac2b6b23b35018206dbf708284f0e0fac58d0b6d72c0d0034b6ed37b1f9931158f2443f045f65e33084ebc6aac93d8c0e3c1c52878dd3f54b9f88a40821090cdeb3bdbb61f0be16338a2a7ba0f77e9ecd5400b6f809a49eee78346c69e7ab560fcc32f2d19e665bb91fbc00e4c00838a1385d5156d1696f694027a9e6a7ef66933202012caca81c1b3ebe64976a9d000e28a6aae5d6f061c5acf8e4bca00bc5ecc547ab1664cdb2125300130a5a92abc0d36cf911fb3123034e925ea097fde14253dd3de52bf5c8a6bf01436c92dbbf5450a9b7775a981b09eab05406dae83f8ddcf898b1bace4b8487f0b4ec5b5316a9b7e3bcd6da41caa23604b3932ff3daf31bb19e74c687773bb54503f6b3ed74aef1410dc4a9a72fa05b1e120e682a7e7f9b8c7b6836fa9d8f96d16fa17975bc3dd7784f0d621d5a69038b0947d1cb47381c82c6df030fc8033dd66b380d884b12991ef5d5283e552f723aaf791bf3af581423c57b536b91e5a158695b68f7eccfd72fd2af1016e261ec863215d1df0fe756366e56fa86c4495cd9a45e83227af93a5b431c5d33fea2b3d469aab08f57b85b3a14a47d7da8ca74dae34f963cf660057466dac3937ce00060f8db8099178944aa37474a37eaef3b9ca04bd0eb1d03c25887d530cd690625f5829830851a6a58a7b411bc87aa70f26e80514799664e35c44db243d61add5bcaba3695e45e9f1a3cbf8ebdfb87571c44b9dcddc5fd422e94cbeb02bb58abd14e140829e12f7f0c7e3cc1a1bcae8429775e531710bfa504e103b17c20c329f653c015ab514fd6cf162b96d871930de99413e148fa58c1ff262a997c6ed1bc008912c6b864031dc95b5a3ad6aa3521167a62fe771baff828cafaf178539048d2e91a62ee7a50df04062422150347774db320fb535ddd4c03a8cdfc3affd253c200e1d5678ff12eb6f5bd43da636778cd2f8551295f4cbbc902322e491c5c10fee144daeaec4cc2a2f855f5312f4c8cac1155c8d3b93a5fe6a60118a0a9912b16d583582b478e4f05c375247d4cd897c49a8cfd2540833311039d9b121e5d5779d71b206d0d862b95e0eab28005f86ddd6ec514d931a521fc035eaacfd10ec5f97af541cabf08512f6c79e7e0db5217bd14aab6d3e9458018c3e59769bcb689347d7e394b469e9c9d9da2be8fc7a54b1aab301b68c1faf7ba7bfd05b8a313c902ad3733e523fd64739d9af110e39a96f1048fd6a43d13045ec71ff3d1f64a904f3878cb18f58b3b84942331ec05d3372a328a83e8aab828574313964f6f6c5af246faf2c69a95e9ceca77c0fbf303103a2d38ef6da2929a3dbccae5823f82d9a37c989154c8a760df8e7d8589daf1fd69683cadd2c7ac13e285a7661c23913912ee272797e3a0808654fd0b9f74f2fe04cb34167aa630b8aa58efc2586bef8c7c2e354d7c8d08de7d25a80b08bae8d2326d16a15d537d8baffcbbae460ce608ded63a45bdf0caf9dc335aa8d2aac03a62a9c6c62ce7c2caa9a731baa549d1880d3facdb4bee43ae27ccd5a22f143da8e7b4deb5c2a194d450eb5ff6949a950115d4e1d60fc75115346a0aaaf1400a301dcc8a04f9d2762c093f88adac799f6bd5150ca9c7d3ac1f728b88b1b0807a7407ad9b8febd89a801c9845af62bf2fc98aea4835d52871774e72b9fc07d26d55ef163833fd2f5c951ff963f43fcdaf03995cf3f14360b05be587e7a19fb760a944166b1fbd04c0d02bda8ff5d92a23c4e683db1b2823a6b02a16a7bc7963aaeeec43d97a85752fa439544127fb71d8b4fee6a09b966bc4e7be67acca35bfe4acabf18f6e9cc938c1e0af43e11754cbe7b37738019d9a162083f5f1fcdd9299921a349f1e0ee840b19fed4c0b5273d5e71ff5f1f20dbb36c89e1edbbef78de1a6229a2cd22bcf2164a1b567f7c08c6ba78ff2e53bc348dd2ab53b9deffc9cf8726feaf9cb07b4f94d189314da8c0005f3bb031e44c402339588832779790e814c707fdbe0830d53b4d35812f27e7709bee185d6d6d67a65382dcf56d567180a4a74cb05b0f7d0202bf33b88729f2bab7003264a2d67ea93d022baea74d7ca54a0081923a82e56750f22f58bc997ea57afe1bce18405383055745f0c6bfbbc514df76107b3c5d04bfe033dace72bd5bead25e736a0052b6efe7eb1153d1afe9202e227d60e4e38f5f294894d2ef9b89998194492e427442a18506e24ddcc1952354fe0250ad949be08a63b6c0e206ecbac70415c36f1bf78d7068ce8eb804561eab2540c6c984e63d1217de1242ae70a5dd457d7a96f24ad9e8a59c060a2a95e9e04a6a4429f40d47d2770e9d3ece295d748aa30a7bbd2aec570733be7855c3a789d71d94b3c86ccdd3cca3ddcb35a969e8c2d5b17ded6ab8b81b90a4206ac2ff163c04ba9886b5ec6138db5eb6ffc19201f66a1057858e564960de679b2996bb93c8d2b440fde169d1fbb5886fe673639c514c2eb8bca75f79abbb73c4a125e5f4d7d4ccd5c9fc85cedc9fe6f2b2b75ec384fa6ecec37579a70bd29b4c9893badb36e1b33cf61b07ee7d2a5550ac9f23b5fe629297efe94eb8a8c2adce65a61ddae84544fe8f81455e2d053fdf7efde38b92b0b4d3e7ff9d81f5de7d571cb4db7e059cbe1ac2153b22b57b4d45d58fa50d152efa2d85d262238ce4816e40f93b65f53b6646297f69e3dde4ae7c57e9112054cb831eca5716863196db7667674b00be7c83f900c944ea2bc8e8e6b6b335a6e9f63e6f6635f6afc0889355aa4f0b928b90f76e6f03b5d40e9a0cace6243aff4590c0ef255860401b16da288687e890b1921b8ba63860df7aad86279c89d16cc4ad1ef4633639f203724c1958fb3b6a990f555e8df8f494fbdae25b353c14fe524541347c1d7f61c349f55773575fab73df09ebd1c635ad5f93fc8e075093ec3fd8b832e5331e329c2578d1f6f7a0a44838e578fe40db7d11645c2c73e0a438a80085988294d98a4ef4c5faa593dd5a9b0dec12d8a6dfd15cc4503bb2078739f26f9c10d0b1fc2634094cfd2ff6bec88a7513debde5fcabb85fd31df8d97bcfaf247edb89cb056fc52bc06f117a3e1022a57817b9abe1793cf279e163212f501681eb9ef08e39adb9ba80ec3cd45f5ae7afc0c256a3470e8ed3ca41c5502c510f0526eab848ec5a7115a53741cf05846989b9b5fc6d2ad74fb855a852e3fc7234bb0ed8b6937167133925dbeb4313a9895860e761300a0695e03e81c2c1e3fe3f4b8c42c946b010259ffa4c1d345350020cddc8e9697fb83c22fff5190558551584368e7a270f958bc72e2624c3e45bbef318b5134f0419e725945e445993f2f176f0a21f5dba86398529fe5159d57c0d75d64f950763b52935e778b20356615409dcb088514eeba3f811e9ce6ce2bd1ba6ac932bd79f7a518959f99d52acbc2a1d0c02c70b9ea46d662d39c315b36315f4220e5dce293275050a3e6df506d0c1d7786017572cd758ba4995963fa034ecd49cadb42bb1ee280600557ce2e17488e1dd4595b8c7d4f20f420a3a01b6228d764c5069222cc93e2091fd2053f05a50eda7840c13f45c6e2a2fbc0f9de4baefb7b40ea1fb7e9d30fb1fdb8f20eafca0c7c8c61c57dfcb8e2836e8d0ce546e8e37b9fc467e1bbeab314be171573398e0c2fb032049a99acf174a857c019609e83010dda8da078a4311efcaaff62fa908dde87cec4d41078c343eec5a80c42d0146d57e9a14f2b5611be05e3b665728c14ea9536d146926fe1e8d5acf12afca415ef5ad77bdfead7ea087183962592296d3d892c64a0a3b9fc95b50f03df7f4f50f950b43a289af09ca92a01a684e5c649b8da4a3365878273a00afd14b4fa2ddaeea5007f728899ba9f5fc9d1d7893a489e56c5fb152e5f775042f4b3bab6cea9cbf9a2b91647fe3c62d3ae4b5d065460b51d51b6e91f2f4fe90a3775e6312ffc805612fee8c314ee70c92de3feefb3cda56a59ddba83757b0e85cb0ee7ad1ac608a1e6a64656d9f586afc38fd1f6474b521724532d88cd351688db077dc9d229a78f8704b21f85324bf9c697874cac5f709c6701a421ac368edda0ec3a0b90268c449acf753d7e8cab501ae3d7e04788e899ec54a2517545b68fd928fb659349e1692bdeccca648fd13a7602868c44e77ed6fd587538a74adc6acdb1ebd1816af88ece2ca64f2603428a0aa842fe86be6b2b568fd29c23433c9e3f9f0e45bd13beb22ac06eb82ae0eb2b3b328aca4abba5e72a155e2cc82ac92c4697fdb9439511c1144fe2ba36f516fa181f7f8d58af69f87a6c936d1e561fff0509819e65a681aaea445a106f8ff3dfd987e2e24e977281cb85cc5e5eb987da2d17e73dacfd9880bd14ecad13d5705643f926303b389a61fd63139577de263a5fdef1facdac0068a9471fc17ac654e88e0a0d12c8aca1e850b64a88f2382e0cf3a4e3363827a06abc1eeb87216e3447dfbf8c04080ca2fe1a08cc2e2001eb386cf02ac0d3b328bcf1de009d048a03cd955c628971c30a137dc66879cbe938390a8f63251f55e559549dd11969b637876a20bc7c6f5fe2b753923d2f0269f2082206eb2312f40654cc95bb38add159104495018a5aa7b8f5836162de9a03b6981c662f2ee02a168d530a002616c09c4cc26c2a2726711e3e25b4e3acb6dcba25fde78ecede51f01e22a2f79409c77011a599ff57d81e70dbde5fcbdc841f9af0e49e8200cd2d3c73013e0e5608ee1951ac04a111864b545e7bc2434c2474286519feaff4da07324d1b13bb16d1daa1d485bcd5466b82c9622f92664f1153d08c6e644b3d0f5902b4d749895f7763015bf0e2849703ed920a3866a260f22fe40f46c76ca6ca10ae8994505fa613a6b1aec84ee6620c25ca4d002f56ddd21b12eed5132634a3194281283fe5fdac07d2fec091dc0f748fe25c6b08cf8d4ff893e863a43c4c92fba47d86c8dfbbabbdca0cec09f732bc0b8df2a97ee7208e64512249300aa4c44c10d4c4503bd76e7b4e2c9aa2e274166ef103d5c832a760f33b5a0eae4dab922f0fec5adbf409bff956b4ce40e6157d498d46ae053f1ad73655bfb0a3dfac6b96c09bac4d07e6bd7f3ac6337f58cccc631466985f6ad680d21a5fe9a9bde4b6980c689e6e8c7a413b6e3084997c089443ffaca9be80c96ce1d9b6de074b4aecfd2db3b679a2d5cf0523aa14414699d481eace4aa397d818ff4d3e73d82031849c7e4f1f1503b636728637f87cf7a7df5472abfcb7e5d77439e1018dba49a41e1c8e63942fe0d1a426f390e8e225fee14501a34762b8d835ca14d6a3a3d8042724ea9e6b568fe0eb84306397ffa8345935e9be8642e6ffbd96e636fd16cacae5d4b88fd0aa0bfbba8221f68eabc98c67de6f9eab2cca07b096b458bbfdc7f1da0bb845a1a6e19c6da87a958acb1aad0b74d6537e97fb0673a20178cbb963f909839e49ec593ddcfc3046aa54c22e3a54148c440d1f2ba1fa7417572c629e48e6d2e07760a87581971d1edccc03c0e465d4d6321d820b3346fb516c1813585a6a8462124f91428a90ed037f40cd6f23596dc90c03825636e55a061838964213c70104ec0c5909a0c62240e93314f9b67ce8fafa115251282a6ee7a036a861d1af11919dbfa7ceb7b2260e66be6300a536e78ebdf60a6f022574b35205341f3557e409d8ecc0c2304b372605c9284aebe1b92f13051db78210df83873b0496625507cf8e1ee5e90aa66f45be75e388d6e0a021b8af3787ee06cd710719b4d06ca5ba5f87de812a660f939584ea880d3c71bc58135e612431850180ee39b707bd98aff26d2c5e4396b43daefd82b2ec1004978637b8d389cc415d628fea6f66f28664f9409448e68a2d48a0a00", 0x2000, &(0x7f00000044c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004580)={0x90, 0x0, 0x7ff, {0x5, 0x3, 0xdc, 0x5, 0x2, 0x6, {0x4, 0x638, 0xfffffffffffffff8, 0x1000008, 0x3, 0x79, 0xfffffffe, 0x7, 0x93, 0x8000, 0x4, r4, r5, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r17, 0x0, 0x10, &(0x7f0000005000)="17000000020001000003be8c5e687a8a12003c00020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfccebf6ba00085d024f0298e9e90554062a", 0xb8) openat(0xffffffffffffff9c, &(0x7f0000004640)='./file0/file1\x00', 0x880cc2, 0x20) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file1\x00', 0x20400, 0x20) 69.305133ms ago: executing program 1 (id=522): ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000000)={0x1000, 0x8c76}) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8001) (async, rerun: 64) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x8c100, 0x0) (rerun: 64) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) r2 = socket(0x34, 0x3, 0x9) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x6ff, 0x1, 0x6, 0x8}) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000100)=0xa265, 0x4) (async, rerun: 64) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000140)={0x1, 0xfffffdfc, 0x4}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x80, 0x40, 0x8, 0x65, {{0x15, 0x4, 0x0, 0x19, 0x54, 0x66, 0x0, 0x49, 0x2f, 0x0, @empty, @local, {[@generic={0x44, 0xe, "b60f04f974af17a198fb6154"}, @generic={0x88, 0x9, "7034d7f01ee46f"}, @lsrr={0x83, 0x27, 0xde, [@remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @multicast1, @dev={0xac, 0x14, 0x14, 0x1b}, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x19}]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000240)={@loopback, 0x30, r4}) (async) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={@loopback, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x200, 0x1000, 0x300, 0x8000000000000001, 0x1000000, r4}) (async) r5 = syz_open_dev$loop(&(0x7f0000000300), 0x7, 0xd0880) (async, rerun: 64) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x1c9) (rerun: 64) write$FUSE_NOTIFY_STORE(r6, &(0x7f0000000380)={0x2a, 0x4, 0x0, {0x0, 0x2, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f00000003c0)={0x1ff, {{0xa, 0x4e20, 0x8, @empty, 0x8}}}, 0x88) ioctl$XFS_IOC_FSGEOMETRY_V4(r5, 0x8070587c, &(0x7f0000000480)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00'}) r7 = ioctl$KVM_GET_STATS_FD_cpu(r6, 0xaece) ioctl$KVM_SET_DEVICE_ATTR_vm(r7, 0x4018aee1, &(0x7f0000000580)=@attr_other={0x0, 0xc299, 0xf, &(0x7f0000000540)=0x40}) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f00000005c0)={0xa32d3e6d7544c15a, 0xb, '\x00', [@hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x48, {0x1, 0x10, 0x6, 0x4, [0x73, 0x7fffffff, 0x3, 0xffffffffffff2894, 0x9, 0x1, 0x4, 0xf]}}, @pad1]}, 0x68) getdents(r6, &(0x7f0000000640)=""/201, 0xc9) (async, rerun: 64) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000740)={0x2008, r2}, 0x0) (async, rerun: 64) ioctl$KVM_NMI(r7, 0xae9a) (async) getsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, &(0x7f0000000780), &(0x7f00000007c0)=0x4) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000840), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, r8, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1000}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008001}, 0xde910caa3702fd4) (async) vmsplice(r2, &(0x7f00000009c0)=[{&(0x7f0000000940)="c4468be6fdb704ff8b39aad5936647c12f458bcde627f03f0786b187dc65d3087e190f9a3fe73cb90c1ad7567d561d76011e6d85a35443b473babf05e247099f56e9f9dd305f1d9e7e6d25526b709a47e5b2539b35cdb30ab67d5bbf85f0f2d9d529b6d0107ff69050ace5cb", 0x6c}], 0x1, 0xe) preadv(r3, &(0x7f0000000b00)=[{&(0x7f0000000a00)=""/239, 0xef}], 0x1, 0x0, 0x6) 0s ago: executing program 1 (id=523): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xc2840, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0xc0505405, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = dup(r3) syz_usb_connect$midi(0x4, 0xef, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x763, 0x1031, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdd, 0x1, 0x1, 0x5, 0x10, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x30, 0x2, [@midi_out_jack={0x11, 0x24, 0x3, 0x1, 0x9, 0x5, [{0x3, 0x3}, {0x44, 0x8}, {0x9e, 0xa}, {0x9, 0x5}, {0x8, 0x2}], 0x2}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x8, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x200, 0x7}], [{{0x9, 0x5, 0x7, 0x2, 0x10, 0x7f, 0x37, 0xda, {0xb, 0x25, 0x1, 0x7, "6b6dc194ce055c"}}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x9, 0x6, 0xc5, {0x4}}}, {{0x9, 0x5, 0x8, 0x1, 0x20, 0x3, 0x4, 0x0, {0x12, 0x25, 0x1, 0xe, "a025b0c66e5fd5a93fb93999dcb6"}}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x5, 0x6, 0x2, {0xb, 0x25, 0x1, 0x7, "71222ed5bcf160"}}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x26, 0xe, 0x51, {0x10, 0x25, 0x1, 0xc, "bf62be11aa283d5a7a02a6ce"}}}, {{0x9, 0x5, 0xa, 0xd639f895c7be9ad9, 0x400, 0x5, 0x9, 0x2, {0x11, 0x25, 0x1, 0xd, "eb124b669b7a4909020c3e6054"}}}, {{0x9, 0x5, 0xd, 0x4a8b1133333cd219, 0x8, 0xab, 0xb, 0x0, {0xf, 0x25, 0x1, 0xb, "4eaedfbdb2047f6bc2e058"}}}, {{0x9, 0x5, 0x81, 0x8, 0x8, 0xfd, 0x9, 0x3d, {0x9, 0x25, 0x1, 0x5, "5fba441819"}}}]}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0x7, 0xc7, 0x40, 0x10, 0x49}, 0x7a, &(0x7f0000000380)={0x5, 0xf, 0x7a, 0x5, [@generic={0x39, 0x10, 0x3, "01470f309912621278722ea1b0a1155dafb4b4570c4209ff7e4c34e0f77d50d2dd6b655fae29a85a29ed93295df2c52a0f438338ba9a"}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0xfffa, 0xff00, 0xffd4, [0x3f0f, 0xc000, 0xc0, 0x3f0f, 0x9f, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x30, 0xf7, 0x5, 0x4, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0x5, 0x8}, @ptm_cap={0x3}]}}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f00000004c0)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3b) kernel console output (not intermixed with test programs): 36.264702][ T9] usb usb2-port1: attempt power cycle [ 36.272872][ T36] audit: type=1400 audit(1793595826.900:178): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 36.426535][ T36] audit: type=1400 audit(1793595827.070:179): avc: denied { mount } for pid=449 comm="syz.0.44" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 36.453800][ T36] audit: type=1400 audit(1793595827.090:180): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 36.473605][ T454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=454 comm=syz.0.45 [ 36.476375][ T454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=454 comm=syz.0.45 [ 36.501019][ T456] tipc: Started in network mode [ 36.506129][ T456] tipc: Node identity ac1414aa, cluster identity 4711 [ 36.513098][ T456] tipc: New replicast peer: 100.1.1.1 [ 36.523149][ T456] tipc: Enabled bearer , priority 10 [ 36.532031][ T460] tipc: Enabling of bearer rejected, already enabled [ 36.602483][ T469] netlink: 'syz.2.51': attribute type 32 has an invalid length. [ 36.634441][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 36.665802][ T9] usb 2-1: device descriptor read/8, error -71 [ 36.805502][ T9] usb 2-1: device descriptor read/8, error -71 [ 36.844606][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 36.944433][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 36.995533][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 37.006506][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 37.019578][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00 [ 37.028774][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.037455][ T10] usb 3-1: config 0 descriptor?? [ 37.044405][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 37.051987][ T66] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 37.075374][ T9] usb 2-1: device descriptor read/8, error -71 [ 37.094393][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 37.100699][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.111815][ T45] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 37.121741][ T45] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 37.131441][ T45] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 37.145661][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.154783][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 37.162793][ T45] usb 4-1: SerialNumber: syz [ 37.168899][ T472] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 37.176171][ T472] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 37.183927][ T45] hub 4-1:1.0: bad descriptor, ignoring hub [ 37.189939][ T45] hub 4-1:1.0: probe with driver hub failed with error -5 [ 37.215520][ T9] usb 2-1: device descriptor read/8, error -71 [ 37.222230][ T66] usb 1-1: unable to get BOS descriptor or descriptor too short [ 37.231325][ T66] usb 1-1: config 129 has an invalid interface number: 80 but max is 0 [ 37.239749][ T66] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 37.248055][ T66] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 37.257402][ T66] usb 1-1: config 129 has no interface number 0 [ 37.263717][ T66] usb 1-1: config 129 has no interface number 1 [ 37.270205][ T66] usb 1-1: config 129 interface 80 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 37.283499][ T66] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 37.294447][ T66] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 37.309125][ T66] usb 1-1: config 129 interface 80 has no altsetting 0 [ 37.316160][ T66] usb 1-1: config 129 interface 5 has no altsetting 0 [ 37.324591][ T9] usb usb2-port1: unable to enumerate USB device [ 37.331622][ T66] usb 1-1: string descriptor 0 read error: -22 [ 37.337964][ T66] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 37.347201][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.361004][ T66] usb 1-1: MIDIStreaming interface descriptor not found [ 37.385696][ T472] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 37.392955][ T472] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 37.450445][ T10] wacom 0003:056A:030A.0001: unknown main item tag 0x4 [ 37.457408][ T10] wacom 0003:056A:030A.0001: unknown main item tag 0xd [ 37.466623][ T10] wacom 0003:056A:030A.0001: hidraw0: USB HID v0.81 Device [HID 056a:030a] on usb-dummy_hcd.2-1/input0 [ 37.560441][ T10] usb 1-1: USB disconnect, device number 3 [ 37.644481][ T66] tipc: Node number set to 2886997162 [ 37.651681][ T469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.51'. [ 37.673235][ T469] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 37.684544][ T31] usb 3-1: USB disconnect, device number 4 [ 37.813368][ T45] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 38.013925][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 68! [ 38.022257][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 03! [ 38.248545][ T31] usb 4-1: USB disconnect, device number 4 [ 38.256469][ T31] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 38.325982][ T534] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.453114][ T549] fuse: Bad value for 'fd' [ 38.494172][ T556] FAULT_INJECTION: forcing a failure. [ 38.494172][ T556] name failslab, interval 1, probability 0, space 0, times 0 [ 38.506937][ T556] CPU: 1 UID: 0 PID: 556 Comm: syz.2.67 Not tainted syzkaller #0 51e652a054f6365e28d1d9b6834c4d7c058f4b23 [ 38.506974][ T556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 38.506989][ T556] Call Trace: [ 38.506998][ T556] [ 38.507007][ T556] __dump_stack+0x21/0x30 [ 38.507034][ T556] dump_stack_lvl+0x140/0x1c0 [ 38.507054][ T556] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.507077][ T556] dump_stack+0x19/0x20 [ 38.507100][ T556] should_fail_ex+0x3c2/0x510 [ 38.507125][ T556] should_failslab+0xac/0x100 [ 38.507142][ T556] kmem_cache_alloc_noprof+0x42/0x410 [ 38.507167][ T556] ? security_inode_alloc+0x51/0x230 [ 38.507186][ T556] security_inode_alloc+0x51/0x230 [ 38.507204][ T556] inode_init_always_gfp+0x756/0x9e0 [ 38.507222][ T556] alloc_inode+0xc5/0x270 [ 38.507239][ T556] new_inode_pseudo+0x19/0x40 [ 38.507256][ T556] path_from_stashed+0x208/0x860 [ 38.507277][ T556] ? __kasan_check_write+0x18/0x20 [ 38.507300][ T556] ? __kasan_check_write+0x18/0x20 [ 38.507323][ T556] ? __cfi_path_from_stashed+0x10/0x10 [ 38.507345][ T556] ? _raw_spin_unlock+0x45/0x60 [ 38.507363][ T556] ns_get_path+0x7a/0xa0 [ 38.507378][ T556] proc_ns_get_link+0xfb/0x220 [ 38.507398][ T556] ? __cfi_proc_ns_get_link+0x10/0x10 [ 38.507418][ T556] ? bpf_lsm_inode_follow_link+0xd/0x20 [ 38.507433][ T556] ? security_inode_follow_link+0x7e/0x180 [ 38.507462][ T556] ? __cfi_proc_ns_get_link+0x10/0x10 [ 38.507481][ T556] pick_link+0x670/0xe80 [ 38.507505][ T556] step_into+0xc33/0xf10 [ 38.507529][ T556] ? set_root+0x420/0x420 [ 38.507552][ T556] ? __kasan_check_write+0x18/0x20 [ 38.507575][ T556] path_openat+0x1a30/0x35a0 [ 38.507597][ T556] ? do_filp_open+0x440/0x440 [ 38.507617][ T556] do_filp_open+0x1f2/0x440 [ 38.507636][ T556] ? __cfi_do_filp_open+0x10/0x10 [ 38.507657][ T556] ? alloc_fd+0x4c1/0x570 [ 38.507673][ T556] do_sys_openat2+0x134/0x1d0 [ 38.507692][ T556] ? fput+0x1a4/0x230 [ 38.507709][ T556] ? do_sys_open+0x100/0x100 [ 38.507729][ T556] ? __cfi_ksys_write+0x10/0x10 [ 38.507754][ T556] __x64_sys_openat+0x13a/0x170 [ 38.507774][ T556] x64_sys_call+0xe69/0x2ee0 [ 38.507791][ T556] do_syscall_64+0x57/0xf0 [ 38.507812][ T556] ? clear_bhb_loop+0x50/0xa0 [ 38.507834][ T556] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.507859][ T556] RIP: 0033:0x7fb990d5fd8e [ 38.507873][ T556] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 38.507886][ T556] RSP: 002b:00007fb991c26f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 38.507903][ T556] RAX: ffffffffffffffda RBX: 00007fb991c276c0 RCX: 00007fb990d5fd8e [ 38.507915][ T556] RDX: 0000000000000000 RSI: 00007fb990e3627e RDI: ffffffffffffff9c [ 38.507926][ T556] RBP: 00007fb990e36b50 R08: 0000000000000000 R09: 0000000000000000 [ 38.507937][ T556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.507951][ T556] R13: 00007fb991026038 R14: 00007fb991025fa0 R15: 00007fff68463c18 [ 38.507965][ T556] [ 38.944423][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 39.063608][ T569] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 39.073538][ T568] netlink: 44 bytes leftover after parsing attributes in process `syz.3.70'. [ 39.094606][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 39.100878][ T10] usb 1-1: config 0 interface 0 altsetting 152 endpoint 0x81 has an invalid bInterval 237, changing to 11 [ 39.112946][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 39.121235][ T10] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 39.132080][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.140749][ T10] usb 1-1: config 0 descriptor?? [ 39.224841][ T421] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 39.354417][ T66] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 39.375463][ T421] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 39.385448][ T421] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 39.396098][ T421] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 39.405809][ T421] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 39.417341][ T421] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 39.426592][ T421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.434839][ T421] usb 3-1: Product: syz [ 39.439059][ T421] usb 3-1: Manufacturer: syz [ 39.443717][ T421] usb 3-1: SerialNumber: syz [ 39.449964][ T421] usb 3-1: config 0 descriptor?? [ 39.457856][ T421] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 39.514435][ T66] usb 4-1: Using ep0 maxpacket: 32 [ 39.520785][ T66] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 39.528967][ T66] usb 4-1: config 0 has no interface number 0 [ 39.536615][ T66] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 39.545760][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.555028][ T10] betop 0003:11C2:2208.0002: unknown main item tag 0x6 [ 39.561974][ T10] betop 0003:11C2:2208.0002: unknown main item tag 0x0 [ 39.568908][ T66] usb 4-1: Product: syz [ 39.573100][ T66] usb 4-1: Manufacturer: syz [ 39.577924][ T66] usb 4-1: SerialNumber: syz [ 39.582964][ T10] betop 0003:11C2:2208.0002: unknown main item tag 0x7 [ 39.590213][ T66] usb 4-1: config 0 descriptor?? [ 39.595275][ T10] betop 0003:11C2:2208.0002: unknown main item tag 0x0 [ 39.602216][ T10] betop 0003:11C2:2208.0002: unknown main item tag 0x0 [ 39.609801][ T66] smsc95xx v2.0.0 [ 39.613572][ T10] betop 0003:11C2:2208.0002: unknown main item tag 0x0 [ 39.620516][ T10] betop 0003:11C2:2208.0002: unknown main item tag 0x0 [ 39.627503][ T10] betop 0003:11C2:2208.0002: unknown main item tag 0x0 [ 39.634457][ T10] betop 0003:11C2:2208.0002: unknown main item tag 0x0 [ 39.641371][ T10] betop 0003:11C2:2208.0002: unknown main item tag 0x0 [ 39.648330][ T10] betop 0003:11C2:2208.0002: unknown main item tag 0x0 [ 39.655346][ T10] betop 0003:11C2:2208.0002: unknown main item tag 0x0 [ 39.662284][ T10] betop 0003:11C2:2208.0002: unknown main item tag 0x0 [ 39.665153][ T566] kernel read not supported for file /policy (pid: 566 comm: syz.2.69) [ 39.669546][ T10] betop 0003:11C2:2208.0002: unknown main item tag 0x0 [ 39.686822][ T421] scsi host1: usb-storage 3-1:0.0 [ 39.694860][ T10] betop 0003:11C2:2208.0002: hidraw0: USB HID v0.81 Device [HID 11c2:2208] on usb-dummy_hcd.0-1/input0 [ 39.706996][ T421] usb 3-1: USB disconnect, device number 5 [ 39.714844][ T10] betop 0003:11C2:2208.0002: no inputs found [ 39.716841][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 39.754713][ T554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.763467][ T581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.772359][ T554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.774906][ T581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.788377][ T10] usb 1-1: USB disconnect, device number 4 [ 39.874393][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 39.880713][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.890880][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 39.901719][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 39.912550][ T31] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 32 [ 39.922424][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 39.936820][ T31] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 39.945944][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.953955][ T31] usb 2-1: Product: syz [ 39.958179][ T31] usb 2-1: Manufacturer: syz [ 39.962800][ T31] usb 2-1: SerialNumber: syz [ 39.968613][ T576] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 40.012072][ T66] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 40.022943][ T66] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 40.032593][ T66] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 40.043545][ T66] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 40.053046][ T66] usb 4-1: USB disconnect, device number 5 [ 40.176829][ T576] netlink: 140 bytes leftover after parsing attributes in process `syz.1.71'. [ 40.191739][ T31] usb 2-1: USB disconnect, device number 6 [ 40.202088][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.306380][ T36] kauditd_printk_skb: 62 callbacks suppressed [ 40.306399][ T36] audit: type=1400 audit(1793595831.040:243): avc: denied { search } for pid=582 comm="syz.0.72" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 40.343737][ T36] audit: type=1400 audit(1793595831.070:244): avc: denied { getopt } for pid=584 comm="syz.0.73" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.365858][ T585] block device autoloading is deprecated and will be removed. [ 40.376017][ T36] audit: type=1400 audit(1793595831.110:245): avc: denied { read } for pid=587 comm="syz.2.74" path="socket:[5025]" dev="sockfs" ino=5025 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.654368][ T36] audit: type=1400 audit(1793595831.380:246): avc: denied { unlink } for pid=297 comm="syz-executor" name="file0" dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 40.723365][ T36] audit: type=1400 audit(1793595831.450:247): avc: denied { write } for pid=638 comm="syz.1.83" name="001" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 40.786157][ T36] audit: type=1400 audit(1793595831.520:248): avc: denied { create } for pid=650 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 40.827503][ T45] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 40.844957][ T36] audit: type=1400 audit(1793595831.560:249): avc: denied { create } for pid=656 comm="syz.3.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 40.906340][ T36] audit: type=1400 audit(1793595831.600:250): avc: denied { sys_admin } for pid=656 comm="syz.3.89" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 40.986027][ T45] usb 1-1: device descriptor read/64, error -71 [ 41.021888][ T680] input: syz0 as /devices/virtual/input/input9 [ 41.049755][ T36] audit: type=1400 audit(1793595831.780:251): avc: denied { read } for pid=96 comm="acpid" name="event3" dev="devtmpfs" ino=487 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.072193][ T36] audit: type=1400 audit(1793595831.780:252): avc: denied { open } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=487 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.113404][ T688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.94'. [ 41.146052][ T688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.94'. [ 41.219266][ T710] ./dev/sda1: Can't lookup blockdev [ 41.267006][ T45] usb 1-1: device descriptor read/64, error -71 [ 41.335269][ T719] SELinux: Context system_u:object_r:hald_var_lib_t:s0 is not valid (left unmapped). [ 41.524381][ T45] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 41.661263][ T714] kvm: kvm [713]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0xc1) = 0x800 [ 41.674377][ T45] usb 1-1: device descriptor read/64, error -71 [ 41.802715][ T727] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.809362][ T727] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.816225][ T727] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.822796][ T727] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.830004][ T727] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.836838][ T727] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.843479][ T727] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.850308][ T727] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.857071][ T727] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.863644][ T727] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.914408][ T45] usb 1-1: device descriptor read/64, error -71 [ 42.024505][ T45] usb usb1-port1: attempt power cycle [ 42.374464][ T45] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 42.415392][ T45] usb 1-1: device descriptor read/8, error -71 [ 42.545405][ T45] usb 1-1: device descriptor read/8, error -71 [ 42.794394][ T45] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 42.825472][ T45] usb 1-1: device descriptor read/8, error -71 [ 42.951280][ T739] overlayfs: failed to resolve './file1/file0': -2 [ 42.958907][ T45] usb 1-1: device descriptor read/8, error -71 [ 43.070845][ T745] netlink: 24 bytes leftover after parsing attributes in process `syz.2.105'. [ 43.074903][ T45] usb usb1-port1: unable to enumerate USB device [ 43.081069][ T745] netlink: 80 bytes leftover after parsing attributes in process `syz.2.105'. [ 43.179896][ T748] device-mapper: table: 252:1: crypt: Error allocating crypto tfm (-ENOENT) [ 43.188790][ T748] device-mapper: ioctl: error adding target to table [ 43.244462][ T45] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 43.384486][ T45] usb 1-1: device descriptor read/64, error -71 [ 43.624512][ T45] usb 1-1: device descriptor read/64, error -71 [ 44.084409][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 44.254370][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 44.261270][ T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 44.272056][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 44.283079][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 44.292784][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.301191][ T10] usb 3-1: Product: syz [ 44.305841][ T10] usb 3-1: Manufacturer: syz [ 44.310995][ T10] usb 3-1: SerialNumber: syz [ 44.519148][ T10] usb 3-1: 0:2 : does not exist [ 44.524197][ T10] usb 3-1: unit 9 not found! [ 44.531729][ T10] usb 3-1: USB disconnect, device number 6 [ 44.549733][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.863711][ T794] syzkaller1: entered promiscuous mode [ 44.869324][ T794] syzkaller1: entered allmulticast mode [ 44.908975][ T794] syzkaller1: left promiscuous mode [ 44.914464][ T794] syzkaller1: left allmulticast mode [ 44.920771][ T794] fuse: Bad value for 'user_id' [ 44.925713][ T794] fuse: Bad value for 'user_id' [ 45.037528][ T66] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 45.101747][ T803] overlayfs: missing 'lowerdir' [ 45.194383][ T66] usb 4-1: Using ep0 maxpacket: 32 [ 45.200749][ T66] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 45.209286][ T66] usb 4-1: config 0 has no interface number 0 [ 45.218016][ T66] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 45.224723][ T812] kvm: Disabled LAPIC found during irq injection [ 45.228301][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.241865][ T66] usb 4-1: Product: syz [ 45.246281][ T66] usb 4-1: Manufacturer: syz [ 45.251172][ T66] usb 4-1: SerialNumber: syz [ 45.257077][ T66] usb 4-1: config 0 descriptor?? [ 45.265010][ T66] smsc95xx v2.0.0 [ 45.421748][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 45.421784][ T36] audit: type=1400 audit(1793595836.150:279): avc: denied { connect } for pid=816 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 45.474468][ T826] FAULT_INJECTION: forcing a failure. [ 45.474468][ T826] name failslab, interval 1, probability 0, space 0, times 0 [ 45.492992][ T826] CPU: 1 UID: 0 PID: 826 Comm: syz.1.131 Not tainted syzkaller #0 51e652a054f6365e28d1d9b6834c4d7c058f4b23 [ 45.493031][ T826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 45.493046][ T826] Call Trace: [ 45.493054][ T826] [ 45.493063][ T826] __dump_stack+0x21/0x30 [ 45.493092][ T826] dump_stack_lvl+0x140/0x1c0 [ 45.493115][ T826] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.493139][ T826] dump_stack+0x19/0x20 [ 45.493159][ T826] should_fail_ex+0x3c2/0x510 [ 45.493196][ T826] should_failslab+0xac/0x100 [ 45.493221][ T826] kmem_cache_alloc_noprof+0x42/0x410 [ 45.493255][ T826] ? security_file_alloc+0x49/0x220 [ 45.493296][ T826] ? kasan_save_alloc_info+0x3a/0x50 [ 45.493329][ T826] security_file_alloc+0x49/0x220 [ 45.493362][ T826] init_file+0x9e/0x210 [ 45.493388][ T826] alloc_empty_file+0xd9/0x270 [ 45.493413][ T826] ? _raw_spin_unlock+0x45/0x60 [ 45.493436][ T826] alloc_file_pseudo+0x142/0x1f0 [ 45.493467][ T826] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 45.493502][ T826] sock_alloc_file+0xbe/0x2b0 [ 45.493523][ T826] __sys_socket+0x14c/0x1c0 [ 45.493547][ T826] __x64_sys_socket+0x7e/0x90 [ 45.493570][ T826] x64_sys_call+0x2608/0x2ee0 [ 45.493594][ T826] do_syscall_64+0x57/0xf0 [ 45.493616][ T826] ? clear_bhb_loop+0x50/0xa0 [ 45.493640][ T826] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.493663][ T826] RIP: 0033:0x7f5113f9f559 [ 45.493680][ T826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.493696][ T826] RSP: 002b:00007f5114dce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 45.493716][ T826] RAX: ffffffffffffffda RBX: 00007f5114225fa0 RCX: 00007f5113f9f559 [ 45.493731][ T826] RDX: 0000000000000006 RSI: 0000000000000003 RDI: 0000000000000010 [ 45.493745][ T826] RBP: 00007f5114036b50 R08: 0000000000000000 R09: 0000000000000000 [ 45.493787][ T826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.493799][ T826] R13: 00007f5114226038 R14: 00007f5114225fa0 R15: 00007ffdd3bd7a78 [ 45.493816][ T826] [ 45.739967][ T839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.749220][ T839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.777120][ T36] audit: type=1326 audit(1793595836.510:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=844 comm="syz.0.135" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4636d9f559 code=0x0 [ 45.862545][ T850] input: syz1 as /devices/virtual/input/input10 [ 46.004528][ T421] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 46.092949][ T36] audit: type=1400 audit(1793595836.820:281): avc: denied { name_bind } for pid=851 comm="syz.2.136" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 46.114740][ T36] audit: type=1400 audit(1793595836.820:282): avc: denied { create } for pid=851 comm="syz.2.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 46.134142][ T36] audit: type=1326 audit(1793595836.820:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=851 comm="syz.2.136" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb990d9f559 code=0x0 [ 46.174393][ T421] usb 2-1: Using ep0 maxpacket: 8 [ 46.181163][ T421] usb 2-1: unable to get BOS descriptor or descriptor too short [ 46.189656][ T421] usb 2-1: config 8 has an invalid interface number: 50 but max is 1 [ 46.197904][ T421] usb 2-1: config 8 has an invalid descriptor of length 226, skipping remainder of the config [ 46.208467][ T421] usb 2-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 46.217422][ T421] usb 2-1: config 8 has no interface number 0 [ 46.223555][ T421] usb 2-1: config 8 interface 50 altsetting 2 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 46.234502][ T421] usb 2-1: config 8 interface 50 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 46.248002][ T421] usb 2-1: config 8 interface 50 has no altsetting 0 [ 46.256576][ T421] usb 2-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=82.e4 [ 46.266125][ T421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.274222][ T421] usb 2-1: Product: syz [ 46.278642][ T421] usb 2-1: Manufacturer: syz [ 46.283333][ T421] usb 2-1: SerialNumber: syz [ 46.373199][ T36] audit: type=1400 audit(1793595837.100:284): avc: denied { mounton } for pid=856 comm="syz.3.138" path="/26/file0" dev="tmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 46.443846][ T36] audit: type=1400 audit(1793595837.170:285): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 46.486211][ T862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.494878][ T862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.505616][ T421] rtl8150 2-1:8.50: couldn't find required endpoints [ 46.512399][ T421] rtl8150 2-1:8.50: probe with driver rtl8150 failed with error -5 [ 46.523579][ T421] usb 2-1: USB disconnect, device number 7 [ 46.622109][ T865] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 46.649786][ T36] audit: type=1400 audit(1793595837.380:286): avc: denied { getopt } for pid=866 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 46.938735][ T36] audit: type=1400 audit(1793595837.670:287): avc: denied { mounton } for pid=871 comm="syz.2.143" path="/proc/126/task" dev="proc" ino=8322 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 47.162696][ T884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.164429][ T36] audit: type=1400 audit(1793595837.890:288): avc: denied { mounton } for pid=881 comm="syz.3.147" path="/30/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 47.179150][ T882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.206424][ T884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.215399][ T882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.334391][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 47.474389][ T31] usb 2-1: device descriptor read/64, error -71 [ 47.714400][ T31] usb 2-1: device descriptor read/64, error -71 [ 47.799949][ T916] overlayfs: failed to resolve 'work': -2 [ 47.819719][ T919] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 47.834063][ T919] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 47.931772][ T922] drivers/android/binder/context.rs:113: 54 callbacks suppressed [ 47.931796][ T922] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.947039][ T922] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.951867][ T924] drivers/android/binder/page_range.rs:334: 54 callbacks suppressed [ 47.953509][ T922] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.953527][ T922] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.953543][ T922] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.953557][ T922] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.953573][ T922] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.953588][ T922] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.953602][ T922] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.953617][ T922] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.964880][ T31] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 48.014470][ T45] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 48.031837][ T922] rust_binder: Error in use_page_slow: ESRCH [ 48.038186][ T922] rust_binder: use_range failure ESRCH [ 48.044071][ T922] rust_binder: 921:922 transaction call to 921:0 failed ESRCH, code 0 size 72-24 line process.rs:1128 [ 48.055672][ T922] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 48.063042][ T929] device-mapper: table: 252:3: ram5 too small for target: start=0, len=18624, dev_size=16384 [ 48.063690][ T922] rust_binder: Read failure Err(EFAULT) in pid:112 [ 48.074272][ T929] device-mapper: core: Cannot calculate initial queue limits [ 48.081895][ T517] rust_binder: 921: undelivered TRANSACTION_ERROR: 29201 [ 48.089326][ T929] device-mapper: ioctl: unable to set up device queue for new table. [ 48.114402][ T31] usb 2-1: device descriptor read/64, error -71 [ 48.123821][ T933] rust_binder: validate_parent_fixup: fixup_min_offset=8, parent_offset=0 [ 48.132864][ T933] rust_binder: 928:933 error while translating object: EINVAL [ 48.139756][ T935] FAULT_INJECTION: forcing a failure. [ 48.139756][ T935] name failslab, interval 1, probability 0, space 0, times 0 [ 48.141379][ T933] rust_binder: 928:933 transaction call to 928:0 failed EINVAL, code 0 size 112-24 line thread.rs:955 [ 48.153429][ T935] CPU: 0 UID: 0 PID: 935 Comm: syz.3.163 Not tainted syzkaller #0 51e652a054f6365e28d1d9b6834c4d7c058f4b23 [ 48.153522][ T935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 48.153563][ T935] Call Trace: [ 48.153584][ T935] [ 48.153606][ T935] __dump_stack+0x21/0x30 [ 48.153716][ T935] dump_stack_lvl+0x140/0x1c0 [ 48.153768][ T935] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.153830][ T935] dump_stack+0x19/0x20 [ 48.153882][ T935] should_fail_ex+0x3c2/0x510 [ 48.153968][ T935] should_failslab+0xac/0x100 [ 48.154024][ T935] kmem_cache_alloc_noprof+0x42/0x410 [ 48.154110][ T935] ? alloc_empty_file+0xbf/0x270 [ 48.154180][ T935] ? _raw_spin_unlock+0x45/0x60 [ 48.154229][ T935] alloc_empty_file+0xbf/0x270 [ 48.154291][ T935] ? _raw_spin_unlock+0x45/0x60 [ 48.154339][ T935] alloc_file_pseudo+0x142/0x1f0 [ 48.154410][ T935] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 48.154475][ T935] ? inode_init_always_gfp+0x76e/0x9e0 [ 48.154553][ T935] ? __cfi_sock_alloc_inode+0x10/0x10 [ 48.154628][ T935] sock_alloc_file+0xbe/0x2b0 [ 48.154683][ T935] do_accept+0x375/0x750 [ 48.154756][ T935] ? __kasan_check_write+0x18/0x20 [ 48.154842][ T935] ? __cfi_do_accept+0x10/0x10 [ 48.154916][ T935] __sys_accept4+0x12f/0x1f0 [ 48.154980][ T935] ? __cfi___sys_accept4+0x10/0x10 [ 48.155043][ T935] ? __kasan_check_read+0x15/0x20 [ 48.155118][ T935] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 48.155202][ T935] __x64_sys_accept4+0x9e/0xb0 [ 48.155259][ T935] x64_sys_call+0x2527/0x2ee0 [ 48.155330][ T935] do_syscall_64+0x57/0xf0 [ 48.155386][ T935] ? clear_bhb_loop+0x50/0xa0 [ 48.155460][ T935] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.155529][ T935] RIP: 0033:0x7ff39cd9f559 [ 48.155582][ T935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.155632][ T935] RSP: 002b:00007ff39dc2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 48.155703][ T935] RAX: ffffffffffffffda RBX: 00007ff39d026180 RCX: 00007ff39cd9f559 [ 48.155746][ T935] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 48.155785][ T935] RBP: 00007ff39ce36b50 R08: 0000000000000000 R09: 0000000000000000 [ 48.155826][ T935] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000000 [ 48.155859][ T935] R13: 00007ff39d026218 R14: 00007ff39d026180 R15: 00007ffce0e989d8 [ 48.155918][ T935] [ 48.428369][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 48.436609][ T45] usb 1-1: not running at top speed; connect to a high speed hub [ 48.445968][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.456242][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 48.466867][ T45] usb 1-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40 [ 48.476279][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.484397][ T45] usb 1-1: Product: syz [ 48.488639][ T45] usb 1-1: Manufacturer: syz [ 48.493307][ T45] usb 1-1: SerialNumber: syz [ 48.535240][ T31] usb 2-1: device descriptor read/64, error -71 [ 48.556622][ T10] rust_binder: 928: undelivered TRANSACTION_ERROR: 29201 [ 48.617134][ T951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.625796][ T951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.635557][ T953] netlink: 'syz.2.168': attribute type 150 has an invalid length. [ 48.644712][ T31] usb usb2-port1: attempt power cycle [ 48.701004][ T45] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 48.713709][ T45] usb 1-1: USB disconnect, device number 11 [ 48.984406][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 49.004411][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 49.006011][ T31] usb 2-1: device descriptor read/8, error -71 [ 49.145453][ T31] usb 2-1: device descriptor read/8, error -71 [ 49.155579][ T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 49.164474][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.177075][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 49.186160][ T10] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 49.195524][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.206914][ T10] uvcvideo 3-1:1.0: Found multiple Units with ID 1 [ 49.213548][ T10] usb 3-1: Found UVC 71.01 device (0000:0000) [ 49.227596][ T10] usb 3-1: No streaming interface found for terminal 2. [ 49.278702][ T963] IPv6: syztnl0: Disabled Multicast RS [ 49.310758][ T967] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 49.318875][ T967] rust_binder: Read failure Err(EFAULT) in pid:144 [ 49.327235][ T967] rust_binder: 966: undelivered TRANSACTION_COMPLETE [ 49.361958][ T971] netlink: 'syz.0.175': attribute type 4 has an invalid length. [ 49.373195][ T971] fuse: Unknown parameter '|dúíßÉ‘AµçÐ' [ 49.380727][ T971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.175'. [ 49.394382][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 49.425472][ T31] usb 2-1: device descriptor read/8, error -71 [ 49.501752][ T986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.511858][ T986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.521605][ T987] ./dev/sda1: Can't lookup blockdev [ 49.557566][ T31] usb 2-1: device descriptor read/8, error -71 [ 49.604908][ T150] dummy0: entered promiscuous mode [ 49.684517][ T31] usb usb2-port1: unable to enumerate USB device [ 50.131515][ T1012] device-mapper: table: 252:4: crypt: Not enough arguments (-EINVAL) [ 50.139780][ T1012] device-mapper: ioctl: error adding target to table [ 50.147370][ T1012] netlink: 32 bytes leftover after parsing attributes in process `syz.3.183'. [ 50.172228][ T1015] syzkaller1: entered promiscuous mode [ 50.177786][ T1015] syzkaller1: entered allmulticast mode [ 50.474421][ T10] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 50.504564][ T66] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -110 [ 50.517678][ T66] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 50.534626][ T66] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -32 [ 50.554497][ T66] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 50.614413][ T10] usb 2-1: device descriptor read/64, error -71 [ 50.854398][ T10] usb 2-1: device descriptor read/64, error -71 [ 50.870217][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 50.870236][ T36] audit: type=1400 audit(1793595841.600:323): avc: denied { setattr } for pid=1033 comm="syz.3.189" name="ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 50.977129][ T1039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.995686][ T1039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.104418][ T10] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 51.234489][ T10] usb 2-1: device descriptor read/64, error -71 [ 51.379831][ T36] audit: type=1400 audit(1793595842.110:324): avc: denied { append } for pid=1044 comm="syz.0.191" name="sda" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 51.403233][ T36] audit: type=1400 audit(1793595842.120:325): avc: denied { name_bind } for pid=1044 comm="syz.0.191" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 51.484451][ T10] usb 2-1: device descriptor read/64, error -71 [ 51.594639][ T10] usb usb2-port1: attempt power cycle [ 51.680254][ T31] usb 3-1: USB disconnect, device number 7 [ 51.704512][ T517] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 51.705694][ T36] audit: type=1400 audit(1793595842.440:326): avc: denied { create } for pid=1057 comm="syz.2.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 51.823171][ T36] audit: type=1400 audit(1793595842.550:327): avc: denied { setattr } for pid=1069 comm="syz.2.199" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 51.842388][ T36] audit: type=1400 audit(1793595842.560:328): avc: denied { lock } for pid=1069 comm="syz.2.199" path="socket:[9550]" dev="sockfs" ino=9550 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 51.843719][ T1071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.866015][ T36] audit: type=1400 audit(1793595842.560:329): avc: denied { ioctl } for pid=1069 comm="syz.2.199" path="/dev/usbmon9" dev="devtmpfs" ino=118 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 51.880533][ T1071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.914476][ T517] usb 1-1: Using ep0 maxpacket: 8 [ 51.921053][ T517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.933793][ T517] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 51.934481][ T10] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 51.947311][ T517] usb 1-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 51.963937][ T517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.973060][ T517] usb 1-1: config 0 descriptor?? [ 51.979071][ T10] usb 2-1: device descriptor read/8, error -71 [ 51.981226][ T517] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count [ 52.040884][ T1081] vlan1: entered promiscuous mode [ 52.046302][ T1081] vlan1: entered allmulticast mode [ 52.051483][ T1081] veth0_vlan: entered allmulticast mode [ 52.115457][ T10] usb 2-1: device descriptor read/8, error -71 [ 52.179833][ T36] audit: type=1400 audit(1793595842.910:330): avc: denied { append } for pid=1052 comm="syz.0.194" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 52.181056][ T1053] rust_binder: Read failure Err(EAGAIN) in pid:170 [ 52.203181][ T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 52.237165][ T1053] netlink: 'syz.0.194': attribute type 7 has an invalid length. [ 52.244897][ T1053] netlink: 'syz.0.194': attribute type 5 has an invalid length. [ 52.252685][ T1053] netlink: 17 bytes leftover after parsing attributes in process `syz.0.194'. [ 52.272789][ T1088] coredump: 1(syz.0.194): Core dump to core aborted: cannot preserve file permissions [ 52.351683][ T31] usb 3-1: device descriptor read/64, error -71 [ 52.351683][ T10] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 52.372182][ T10] usb 2-1: device descriptor read/8, error -71 [ 52.498272][ T10] usb 2-1: device descriptor read/8, error -71 [ 52.603851][ T31] usb 3-1: device descriptor read/64, error -71 [ 52.603916][ T10] usb usb2-port1: unable to enumerate USB device [ 52.790273][ T517] usbhid 1-1:0.0: can't add hid device: -71 [ 52.797439][ T517] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 52.806914][ T517] usb 1-1: USB disconnect, device number 12 [ 52.836657][ T31] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 52.972321][ T31] usb 3-1: device descriptor read/64, error -71 [ 53.011370][ T1109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.021953][ T1109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.084729][ T36] audit: type=1400 audit(1793595843.845:331): avc: denied { append } for pid=1110 comm="syz.1.211" name="usbmon5" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 53.205041][ T31] usb 3-1: device descriptor read/64, error -71 [ 53.216152][ T36] audit: type=1400 audit(1793595843.979:332): avc: denied { write } for pid=1122 comm="syz.1.214" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 53.273042][ T517] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 53.311984][ T31] usb usb3-port1: attempt power cycle [ 53.422953][ T1126] option changes via remount are deprecated (pid=1125 comm=syz.1.215) [ 53.431294][ T1126] cgroup: option or name mismatch, new: 0x0 "veth1_to_bond", old: 0x0 "" [ 53.432934][ T517] usb 1-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 53.455666][ T517] usb 1-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 53.464796][ T517] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.472895][ T517] usb 1-1: Product: syz [ 53.477240][ T517] usb 1-1: Manufacturer: syz [ 53.481896][ T517] usb 1-1: SerialNumber: syz [ 53.619573][ T1138] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 53.658949][ T1143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.661730][ T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 53.676288][ T1143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.691761][ T31] usb 3-1: device descriptor read/8, error -71 [ 53.700884][ T517] usb 1-1: USB disconnect, device number 13 [ 53.837652][ T31] usb 3-1: device descriptor read/8, error -71 [ 54.089077][ T31] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 54.109819][ T31] usb 3-1: device descriptor read/8, error -71 [ 54.235796][ T31] usb 3-1: device descriptor read/8, error -71 [ 54.251739][ T1156] netlink: 'syz.0.224': attribute type 28 has an invalid length. [ 54.351993][ T31] usb usb3-port1: unable to enumerate USB device [ 54.510004][ T1177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.529204][ T1177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.771876][ T1187] capability: warning: `syz.2.234' uses deprecated v2 capabilities in a way that may be insecure [ 54.917490][ T1223] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 55.104565][ T1244] netlink: 108 bytes leftover after parsing attributes in process `syz.0.252'. [ 55.248867][ T1259] netlink: 36 bytes leftover after parsing attributes in process `syz.3.256'. [ 55.258136][ T1259] netlink: 36 bytes leftover after parsing attributes in process `syz.3.256'. [ 55.267482][ T1259] netlink: 36 bytes leftover after parsing attributes in process `syz.3.256'. [ 55.277104][ T1259] netlink: 36 bytes leftover after parsing attributes in process `syz.3.256'. [ 55.286323][ T1259] netlink: 36 bytes leftover after parsing attributes in process `syz.3.256'. [ 55.295434][ T1259] netlink: 36 bytes leftover after parsing attributes in process `syz.3.256'. [ 55.305822][ T1259] netlink: 36 bytes leftover after parsing attributes in process `syz.3.256'. [ 55.314988][ T1259] netlink: 36 bytes leftover after parsing attributes in process `syz.3.256'. [ 55.324294][ T1259] netlink: 36 bytes leftover after parsing attributes in process `syz.3.256'. [ 55.570324][ T1277] syzkaller1: entered promiscuous mode [ 55.575941][ T1277] syzkaller1: entered allmulticast mode [ 55.695762][ T31] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 55.852945][ T31] usb 1-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 55.867550][ T31] usb 1-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 55.876772][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.885066][ T31] usb 1-1: Product: syz [ 55.889289][ T31] usb 1-1: Manufacturer: syz [ 55.893987][ T31] usb 1-1: SerialNumber: syz [ 55.910088][ T66] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 56.046552][ T45] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 56.057492][ T66] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 56.068497][ T66] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 56.081989][ T66] usb 3-1: config 0 interface 0 has no altsetting 0 [ 56.088996][ T66] usb 3-1: New USB device found, idVendor=05ac, idProduct=1440, bcdDevice= 0.00 [ 56.100267][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.114078][ T66] usb 3-1: config 0 descriptor?? [ 56.117642][ T31] usb 1-1: USB disconnect, device number 14 [ 56.127360][ T1286] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 56.183312][ T45] usb 2-1: device descriptor read/64, error -71 [ 56.383107][ T1308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.391766][ T1308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.400541][ T1308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.409059][ T1309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.412286][ T1308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.418055][ T1309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.432982][ T45] usb 2-1: device descriptor read/64, error -71 [ 56.533876][ T1286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.542798][ T1286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.551997][ T1286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.560571][ T1286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.569636][ T66] usbhid 3-1:0.0: can't add hid device: -71 [ 56.575922][ T66] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 56.584984][ T66] usb 3-1: USB disconnect, device number 12 [ 56.666567][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 56.666587][ T36] audit: type=1400 audit(1793595847.522:352): avc: denied { sqpoll } for pid=1310 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 56.673439][ T45] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 56.827698][ T45] usb 2-1: device descriptor read/64, error -71 [ 57.008866][ T1338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.018712][ T1338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.071768][ T45] usb 2-1: device descriptor read/64, error -71 [ 57.140052][ T31] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 57.189080][ T45] usb usb2-port1: attempt power cycle [ 57.288489][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 57.297170][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.307454][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 57.318180][ T31] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 57.327474][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.335515][ T31] usb 1-1: Product: syz [ 57.339917][ T31] usb 1-1: Manufacturer: syz [ 57.344551][ T31] usb 1-1: SerialNumber: syz [ 57.356550][ T31] usb 1-1: selecting invalid altsetting 1 [ 57.362706][ T31] usb 1-1: unit 6 not found! [ 57.521443][ T45] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 57.561528][ T45] usb 2-1: device descriptor read/8, error -71 [ 57.687425][ T1352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.696405][ T1352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.704782][ T45] usb 2-1: device descriptor read/8, error -71 [ 57.756870][ T1330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.766288][ T1330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.951712][ T45] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 57.977066][ T45] usb 2-1: device descriptor read/8, error -71 [ 57.983102][ T36] audit: type=1400 audit(1793595848.863:353): avc: denied { setopt } for pid=1353 comm="syz.2.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.003035][ T36] audit: type=1400 audit(1793595848.873:354): avc: denied { ioctl } for pid=1353 comm="syz.2.291" path="socket:[11616]" dev="sockfs" ino=11616 ioctlcmd=0x9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.030903][ T36] audit: type=1400 audit(1793595848.914:355): avc: denied { read } for pid=1353 comm="syz.2.291" path="socket:[11617]" dev="sockfs" ino=11617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.110223][ T45] usb 2-1: device descriptor read/8, error -71 [ 58.168694][ T1330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.177953][ T1330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.228842][ T45] usb usb2-port1: unable to enumerate USB device [ 58.299058][ T1383] 9pnet_fd: Insufficient options for proto=fd [ 58.386570][ T31] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 58.396539][ T31] usb 1-1: USB disconnect, device number 15 [ 58.404983][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.526749][ T1389] FAULT_INJECTION: forcing a failure. [ 58.526749][ T1389] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 58.540083][ T45] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 58.540286][ T1389] CPU: 0 UID: 0 PID: 1389 Comm: syz.3.300 Not tainted syzkaller #0 51e652a054f6365e28d1d9b6834c4d7c058f4b23 [ 58.540386][ T1389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 58.540428][ T1389] Call Trace: [ 58.540449][ T1389] [ 58.540473][ T1389] __dump_stack+0x21/0x30 [ 58.540546][ T1389] dump_stack_lvl+0x140/0x1c0 [ 58.540600][ T1389] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.540670][ T1389] dump_stack+0x19/0x20 [ 58.540733][ T1389] should_fail_ex+0x3c2/0x510 [ 58.540829][ T1389] should_fail+0xf/0x20 [ 58.540915][ T1389] should_fail_usercopy+0x1e/0x30 [ 58.540970][ T1389] fpu__restore_sig+0x1ff/0x10b0 [ 58.541075][ T1389] ? __cfi_fpu__restore_sig+0x10/0x10 [ 58.541171][ T1389] ? __kasan_check_write+0x18/0x20 [ 58.541258][ T1389] __ia32_sys_rt_sigreturn+0x6e9/0x830 [ 58.541322][ T1389] ? _raw_spin_unlock_irq+0x45/0x70 [ 58.541387][ T1389] ? __cfi___x64_sys_rt_sigreturn+0x10/0x10 [ 58.541470][ T1389] ? __kasan_check_read+0x15/0x20 [ 58.541556][ T1389] x64_sys_call+0x2c14/0x2ee0 [ 58.541643][ T1389] do_syscall_64+0x57/0xf0 [ 58.541728][ T1389] ? clear_bhb_loop+0x50/0xa0 [ 58.541810][ T1389] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 58.541878][ T1389] RIP: 0033:0x7ff39cd9f559 [ 58.541930][ T1389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.541982][ T1389] RSP: 002b:00007ff39dc6d028 EFLAGS: 00000246 [ 58.542043][ T1389] RAX: 0000000000000000 RBX: 00007ff39d025fa0 RCX: 00007ff39cd9f559 [ 58.542087][ T1389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 58.542121][ T1389] RBP: 00007ff39ce36b50 R08: 0000000000000000 R09: 0000000000000000 [ 58.542162][ T1389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.542195][ T1389] R13: 00007ff39d026038 R14: 00007ff39d025fa0 R15: 00007ffce0e989d8 [ 58.542242][ T1389] [ 58.902589][ T45] usb 3-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 58.932211][ T45] usb 3-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 58.952539][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.963283][ T45] usb 3-1: Product: syz [ 58.967722][ T45] usb 3-1: Manufacturer: syz [ 58.972626][ T45] usb 3-1: SerialNumber: syz [ 58.985362][ T1413] FAULT_INJECTION: forcing a failure. [ 58.985362][ T1413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.998569][ T1413] CPU: 1 UID: 0 PID: 1413 Comm: syz.0.308 Not tainted syzkaller #0 51e652a054f6365e28d1d9b6834c4d7c058f4b23 [ 58.998604][ T1413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 58.998619][ T1413] Call Trace: [ 58.998626][ T1413] [ 58.998638][ T1413] __dump_stack+0x21/0x30 [ 58.998664][ T1413] dump_stack_lvl+0x140/0x1c0 [ 58.998685][ T1413] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.998707][ T1413] ? __kasan_check_write+0x18/0x20 [ 58.998738][ T1413] ? kvm_arch_vcpu_load+0x665/0x8d0 [ 58.998765][ T1413] dump_stack+0x19/0x20 [ 58.998784][ T1413] should_fail_ex+0x3c2/0x510 [ 58.998817][ T1413] should_fail+0xf/0x20 [ 58.998848][ T1413] should_fail_usercopy+0x1e/0x30 [ 58.998869][ T1413] _copy_to_user+0x24/0xa0 [ 58.998894][ T1413] kvm_arch_vcpu_ioctl+0x25d6/0x3120 [ 58.998919][ T1413] ? avc_has_perm+0x155/0x240 [ 58.998943][ T1413] ? __cfi_avc_has_perm+0x10/0x10 [ 58.998964][ T1413] ? hook_file_open+0x1f2/0x8d0 [ 58.998992][ T1413] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 58.999019][ T1413] ? selinux_file_open+0x46c/0x630 [ 58.999054][ T1413] ? __cfi_selinux_file_open+0x10/0x10 [ 58.999092][ T1413] ? is_bpf_text_address+0x17b/0x1a0 [ 58.999119][ T1413] ? kernel_text_address+0xa9/0xe0 [ 58.999153][ T1413] ? __kernel_text_address+0x11/0x40 [ 58.999196][ T1413] ? __asan_set_shadow_00+0x12/0x20 [ 58.999223][ T1413] ? do_vfs_ioctl+0x1824/0x2010 [ 58.999247][ T1413] ? arch_stack_walk+0x10a/0x170 [ 58.999275][ T1413] ? _parse_integer+0x2e/0x40 [ 58.999304][ T1413] ? kstrtoull+0x13b/0x1e0 [ 58.999333][ T1413] ? kstrtouint+0x78/0xf0 [ 58.999360][ T1413] ? ioctl_has_perm+0x1bc/0x500 [ 58.999391][ T1413] ? __asan_memcpy+0x5a/0x80 [ 58.999421][ T1413] ? ioctl_has_perm+0x408/0x500 [ 58.999451][ T1413] ? has_cap_mac_admin+0xd0/0xd0 [ 58.999483][ T1413] ? __kasan_check_write+0x18/0x20 [ 58.999515][ T1413] ? mutex_lock_killable+0x97/0x1d0 [ 58.999545][ T1413] ? __cfi_mutex_lock_killable+0x10/0x10 [ 58.999574][ T1413] ? proc_fail_nth_write+0x184/0x220 [ 58.999604][ T1413] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 58.999634][ T1413] kvm_vcpu_ioctl+0x7da/0x1000 [ 58.999660][ T1413] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 58.999686][ T1413] ? hook_file_ioctl+0x1ef/0x590 [ 58.999715][ T1413] ? __cfi_vfs_write+0x10/0x10 [ 58.999748][ T1413] ? __cfi_hook_file_ioctl+0x10/0x10 [ 58.999777][ T1413] ? __kasan_check_write+0x18/0x20 [ 58.999808][ T1413] ? mutex_unlock+0x90/0x240 [ 58.999834][ T1413] ? __cfi_mutex_unlock+0x10/0x10 [ 58.999863][ T1413] ? __fget_files+0x2bc/0x330 [ 58.999886][ T1413] ? bpf_lsm_file_ioctl+0xd/0x20 [ 58.999934][ T1413] ? security_file_ioctl+0x3e/0x110 [ 58.999965][ T1413] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 58.999991][ T1413] __se_sys_ioctl+0x126/0x1b0 [ 59.000014][ T1413] __x64_sys_ioctl+0x7f/0xa0 [ 59.000037][ T1413] x64_sys_call+0x1878/0x2ee0 [ 59.000063][ T1413] do_syscall_64+0x57/0xf0 [ 59.000084][ T1413] ? clear_bhb_loop+0x50/0xa0 [ 59.000114][ T1413] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 59.000142][ T1413] RIP: 0033:0x7f4636d9f559 [ 59.000172][ T1413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.000191][ T1413] RSP: 002b:00007f4637d2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.000215][ T1413] RAX: ffffffffffffffda RBX: 00007f4637025fa0 RCX: 00007f4636d9f559 [ 59.000232][ T1413] RDX: 00002000000004c0 RSI: 000000008080aea1 RDI: 0000000000000005 [ 59.000248][ T1413] RBP: 00007f4637d2b090 R08: 0000000000000000 R09: 0000000000000000 [ 59.000263][ T1413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.000277][ T1413] R13: 00007f4637026038 R14: 00007f4637025fa0 R15: 00007ffea7ef0c38 [ 59.000298][ T1413] [ 59.385158][ T45] usb 3-1: USB disconnect, device number 13 [ 59.436155][ T36] audit: type=1400 audit(1793595850.353:356): avc: denied { write } for pid=1418 comm="syz.1.310" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 59.466689][ T36] audit: type=1400 audit(1793595850.384:357): avc: denied { read } for pid=1418 comm="syz.1.310" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.506298][ T1422] netlink: 'syz.0.311': attribute type 4 has an invalid length. [ 59.621497][ T1422] netlink: 'syz.0.311': attribute type 4 has an invalid length. [ 59.752949][ T1438] FAULT_INJECTION: forcing a failure. [ 59.752949][ T1438] name failslab, interval 1, probability 0, space 0, times 0 [ 59.765850][ T1438] CPU: 0 UID: 0 PID: 1438 Comm: syz.0.317 Not tainted syzkaller #0 51e652a054f6365e28d1d9b6834c4d7c058f4b23 [ 59.765889][ T1438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 59.765905][ T1438] Call Trace: [ 59.765913][ T1438] [ 59.765921][ T1438] __dump_stack+0x21/0x30 [ 59.765948][ T1438] dump_stack_lvl+0x140/0x1c0 [ 59.765969][ T1438] ? __cfi_dump_stack_lvl+0x10/0x10 [ 59.765991][ T1438] ? _parse_integer+0x2e/0x40 [ 59.766022][ T1438] ? kstrtoull+0x13b/0x1e0 [ 59.766052][ T1438] dump_stack+0x19/0x20 [ 59.766073][ T1438] should_fail_ex+0x3c2/0x510 [ 59.766117][ T1438] should_failslab+0xac/0x100 [ 59.766141][ T1438] kmem_cache_alloc_noprof+0x42/0x410 [ 59.766173][ T1438] ? getname_flags+0xcc/0x6b0 [ 59.766196][ T1438] getname_flags+0xcc/0x6b0 [ 59.766218][ T1438] vfs_fstatat+0xcb/0x1d0 [ 59.766241][ T1438] __se_sys_newfstatat+0x127/0x3c0 [ 59.766268][ T1438] ? __x64_sys_newfstatat+0xc0/0xc0 [ 59.766292][ T1438] ? vfs_write+0xbcf/0xfd0 [ 59.766326][ T1438] ? __cfi_vfs_write+0x10/0x10 [ 59.766359][ T1438] ? __kasan_check_write+0x18/0x20 [ 59.766391][ T1438] ? mutex_unlock+0x90/0x240 [ 59.766422][ T1438] ? __cfi_ksys_write+0x10/0x10 [ 59.766458][ T1438] __x64_sys_newfstatat+0x9f/0xc0 [ 59.766482][ T1438] x64_sys_call+0x1821/0x2ee0 [ 59.766506][ T1438] do_syscall_64+0x57/0xf0 [ 59.766527][ T1438] ? clear_bhb_loop+0x50/0xa0 [ 59.766557][ T1438] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 59.766586][ T1438] RIP: 0033:0x7f4636d9f559 [ 59.766606][ T1438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.766625][ T1438] RSP: 002b:00007f4637d2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 59.766650][ T1438] RAX: ffffffffffffffda RBX: 00007f4637025fa0 RCX: 00007f4636d9f559 [ 59.766668][ T1438] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 59.766684][ T1438] RBP: 00007f4637d2b090 R08: 0000000000000000 R09: 0000000000000000 [ 59.766699][ T1438] R10: 0000000000006000 R11: 0000000000000246 R12: 0000000000000001 [ 59.766713][ T1438] R13: 00007f4637026038 R14: 00007f4637025fa0 R15: 00007ffea7ef0c38 [ 59.766733][ T1438] [ 60.244517][ T45] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 60.367039][ T1460] __nla_validate_parse: 59 callbacks suppressed [ 60.367070][ T1460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'. [ 60.391422][ T36] audit: type=1400 audit(1793595851.322:358): avc: denied { getopt } for pid=1462 comm="syz.2.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.403992][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 60.444458][ T45] usb 1-1: not running at top speed; connect to a high speed hub [ 60.457474][ T45] usb 1-1: config 1 has an invalid interface number: 4 but max is 0 [ 60.470387][ T45] usb 1-1: config 1 has no interface number 0 [ 60.486697][ T45] usb 1-1: config 1 interface 4 has no altsetting 0 [ 60.501123][ T45] usb 1-1: New USB device found, idVendor=1bbb, idProduct=0640, bcdDevice=ff.42 [ 60.527774][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.549408][ T45] usb 1-1: Product: syz [ 60.553639][ T45] usb 1-1: Manufacturer: ࿚嚾奒ૂ髜ꤊꪺï�¬ë•´ã¡�ⶦ褵䘻æ’�î�±çª™èšƒî¼–鰦퓠ï©�꣛ã›�剨㽧尡㡺ొ㚣Ṁ素ῇ䎛蓫锷疹ä�§ç–²é—­ç¤˜è¦´ç†‰æª�॔袑愓剾䌯⋨汰腭ᯀ棪î�ªí—ˆåŠ‘ç»”ïš©éš‡â£‡ïƒšïŠµá¤¤ïŽ±èœ«è´¾ç’ºæ‡±â¿±â·Œçˆ£ïµºã©¢å†‹è–¶çŒ¹ìž¿î«¢äŽ�竈 [ 60.580819][ T1471] FAULT_INJECTION: forcing a failure. [ 60.580819][ T1471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.594242][ T1471] CPU: 1 UID: 0 PID: 1471 Comm: syz.1.325 Not tainted syzkaller #0 51e652a054f6365e28d1d9b6834c4d7c058f4b23 [ 60.594280][ T1471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 60.594296][ T1471] Call Trace: [ 60.594304][ T1471] [ 60.594312][ T1471] __dump_stack+0x21/0x30 [ 60.594339][ T1471] dump_stack_lvl+0x140/0x1c0 [ 60.594359][ T1471] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.594380][ T1471] ? check_stack_object+0x138/0x150 [ 60.594412][ T1471] dump_stack+0x19/0x20 [ 60.594431][ T1471] should_fail_ex+0x3c2/0x510 [ 60.594465][ T1471] should_fail+0xf/0x20 [ 60.594495][ T1471] should_fail_usercopy+0x1e/0x30 [ 60.594517][ T1471] _copy_to_user+0x24/0xa0 [ 60.594541][ T1471] simple_read_from_buffer+0xed/0x160 [ 60.594570][ T1471] proc_fail_nth_read+0x1aa/0x220 [ 60.594599][ T1471] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 60.594628][ T1471] ? bpf_lsm_file_permission+0xd/0x20 [ 60.594653][ T1471] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 60.594681][ T1471] vfs_read+0x288/0xc70 [ 60.594713][ T1471] ? __cfi_vfs_read+0x10/0x10 [ 60.594743][ T1471] ? __kasan_check_write+0x18/0x20 [ 60.594775][ T1471] ? mutex_lock+0x97/0x1d0 [ 60.594803][ T1471] ? __cfi_mutex_lock+0x10/0x10 [ 60.594833][ T1471] ksys_read+0x145/0x260 [ 60.594865][ T1471] ? __cfi_ksys_read+0x10/0x10 [ 60.594896][ T1471] ? __kasan_check_write+0x18/0x20 [ 60.594928][ T1471] ? fput+0x1a4/0x230 [ 60.594950][ T1471] ? __kasan_check_read+0x15/0x20 [ 60.594980][ T1471] __x64_sys_read+0x7f/0x90 [ 60.595010][ T1471] x64_sys_call+0x2638/0x2ee0 [ 60.595032][ T1471] do_syscall_64+0x57/0xf0 [ 60.595051][ T1471] ? clear_bhb_loop+0x50/0xa0 [ 60.595079][ T1471] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.595106][ T1471] RIP: 0033:0x7f5113f5fd8e [ 60.595125][ T1471] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 60.595143][ T1471] RSP: 002b:00007f5114dcdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.595176][ T1471] RAX: ffffffffffffffda RBX: 00007f5114dce6c0 RCX: 00007f5113f5fd8e [ 60.595193][ T1471] RDX: 000000000000000f RSI: 00007f5114dce0a0 RDI: 0000000000000006 [ 60.595208][ T1471] RBP: 00007f5114dce090 R08: 0000000000000000 R09: 0000000000000000 [ 60.595223][ T1471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.595236][ T1471] R13: 00007f5114226038 R14: 00007f5114225fa0 R15: 00007ffdd3bd7a78 [ 60.595256][ T1471] [ 60.841045][ T45] usb 1-1: SerialNumber: syz [ 61.049777][ T45] usb 1-1: USB disconnect, device number 16 [ 61.108754][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 61.236392][ T421] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 61.256061][ T10] usb 3-1: device descriptor read/64, error -71 [ 61.414704][ T421] usb 2-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 61.429290][ T421] usb 2-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 61.438707][ T421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.447188][ T421] usb 2-1: Product: syz [ 61.451447][ T421] usb 2-1: Manufacturer: syz [ 61.456403][ T421] usb 2-1: SerialNumber: syz [ 61.511413][ T10] usb 3-1: device descriptor read/64, error -71 [ 61.563442][ T1483] FAULT_INJECTION: forcing a failure. [ 61.563442][ T1483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.577289][ T1483] CPU: 0 UID: 0 PID: 1483 Comm: syz.0.329 Not tainted syzkaller #0 51e652a054f6365e28d1d9b6834c4d7c058f4b23 [ 61.577330][ T1483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 61.577346][ T1483] Call Trace: [ 61.577354][ T1483] [ 61.577363][ T1483] __dump_stack+0x21/0x30 [ 61.577390][ T1483] dump_stack_lvl+0x140/0x1c0 [ 61.577409][ T1483] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.577432][ T1483] dump_stack+0x19/0x20 [ 61.577452][ T1483] should_fail_ex+0x3c2/0x510 [ 61.577486][ T1483] should_fail+0xf/0x20 [ 61.577517][ T1483] should_fail_usercopy+0x1e/0x30 [ 61.577539][ T1483] strncpy_from_user+0x29/0x280 [ 61.577573][ T1483] getname_flags+0x106/0x6b0 [ 61.577596][ T1483] vfs_fstatat+0xcb/0x1d0 [ 61.577618][ T1483] __se_sys_newfstatat+0x127/0x3c0 [ 61.577644][ T1483] ? __x64_sys_newfstatat+0xc0/0xc0 [ 61.577668][ T1483] ? vfs_write+0xbcf/0xfd0 [ 61.577702][ T1483] ? __cfi_vfs_write+0x10/0x10 [ 61.577746][ T1483] ? __kasan_check_write+0x18/0x20 [ 61.577778][ T1483] ? mutex_unlock+0x90/0x240 [ 61.577809][ T1483] ? __cfi_ksys_write+0x10/0x10 [ 61.577844][ T1483] __x64_sys_newfstatat+0x9f/0xc0 [ 61.577869][ T1483] x64_sys_call+0x1821/0x2ee0 [ 61.577893][ T1483] do_syscall_64+0x57/0xf0 [ 61.577914][ T1483] ? clear_bhb_loop+0x50/0xa0 [ 61.577953][ T1483] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 61.577982][ T1483] RIP: 0033:0x7f4636d9f559 [ 61.578001][ T1483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.578021][ T1483] RSP: 002b:00007f4637d2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 61.578046][ T1483] RAX: ffffffffffffffda RBX: 00007f4637025fa0 RCX: 00007f4636d9f559 [ 61.578063][ T1483] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 61.578087][ T1483] RBP: 00007f4637d2b090 R08: 0000000000000000 R09: 0000000000000000 [ 61.578101][ T1483] R10: 0000000000006000 R11: 0000000000000246 R12: 0000000000000001 [ 61.578116][ T1483] R13: 00007f4637026038 R14: 00007f4637025fa0 R15: 00007ffea7ef0c38 [ 61.578135][ T1483] [ 61.826649][ T421] usb 2-1: USB disconnect, device number 20 [ 61.867662][ T36] audit: type=1400 audit(1793595852.839:359): avc: denied { getopt } for pid=1484 comm="syz.0.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.907084][ T36] audit: type=1400 audit(1793595852.859:360): avc: denied { map } for pid=1484 comm="syz.0.330" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 61.973356][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 62.111186][ T10] usb 3-1: device descriptor read/64, error -71 [ 62.170196][ T45] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 62.324551][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 62.347654][ T45] usb 1-1: not running at top speed; connect to a high speed hub [ 62.356172][ T45] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 177, changing to 4 [ 62.376691][ T10] usb 3-1: device descriptor read/64, error -71 [ 62.392275][ T45] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 62.406218][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.414292][ T45] usb 1-1: Product: syz [ 62.418540][ T45] usb 1-1: Manufacturer: syz [ 62.423175][ T45] usb 1-1: SerialNumber: syz [ 62.485077][ T10] usb usb3-port1: attempt power cycle [ 62.567879][ T1496] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 62.577053][ T1496] overlayfs: missing 'lowerdir' [ 62.582604][ T1496] overlay: Unknown parameter 'dont_measure' [ 62.820012][ T66] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 62.827698][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 62.849965][ T10] usb 3-1: device descriptor read/8, error -71 [ 62.976999][ T66] usb 2-1: Using ep0 maxpacket: 8 [ 62.983466][ T66] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.993906][ T66] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 63.003275][ T66] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 63.013578][ T10] usb 3-1: device descriptor read/8, error -71 [ 63.020987][ T66] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 63.030253][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.038641][ T66] usb 2-1: Product: syz [ 63.043089][ T66] usb 2-1: Manufacturer: syz [ 63.048051][ T66] usb 2-1: SerialNumber: syz [ 63.134965][ T45] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 63.145906][ T45] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 63.176399][ T45] usb 1-1: USB disconnect, device number 17 [ 63.199766][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 63.252593][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 63.273068][ T36] audit: type=1400 audit(1793595854.251:361): avc: denied { ioctl } for pid=1495 comm="syz.1.335" path="/65/trace/events/dwc3/dwc3_ctrl_req/inject" dev="tracefs" ino=19680823 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 63.284501][ T10] usb 3-1: device descriptor read/8, error -71 [ 63.342314][ T66] usb 2-1: unit 4 not found! [ 63.355585][ T66] usb 2-1: USB disconnect, device number 21 [ 63.378801][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 63.451347][ T10] usb 3-1: device descriptor read/8, error -71 [ 63.567894][ T10] usb usb3-port1: unable to enumerate USB device [ 63.577023][ T1509] FAULT_INJECTION: forcing a failure. [ 63.577023][ T1509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.590381][ T1509] CPU: 0 UID: 0 PID: 1509 Comm: syz.2.340 Not tainted syzkaller #0 51e652a054f6365e28d1d9b6834c4d7c058f4b23 [ 63.590418][ T1509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 63.590435][ T1509] Call Trace: [ 63.590444][ T1509] [ 63.590453][ T1509] __dump_stack+0x21/0x30 [ 63.590482][ T1509] dump_stack_lvl+0x140/0x1c0 [ 63.590506][ T1509] ? __cfi_dump_stack_lvl+0x10/0x10 [ 63.590530][ T1509] ? __kasan_slab_free+0x6a/0x80 [ 63.590558][ T1509] dump_stack+0x19/0x20 [ 63.590580][ T1509] should_fail_ex+0x3c2/0x510 [ 63.590618][ T1509] should_fail+0xf/0x20 [ 63.590654][ T1509] should_fail_usercopy+0x1e/0x30 [ 63.590678][ T1509] _copy_to_user+0x24/0xa0 [ 63.590706][ T1509] __se_sys_newfstatat+0x329/0x3c0 [ 63.590735][ T1509] ? __x64_sys_newfstatat+0xc0/0xc0 [ 63.590764][ T1509] ? vfs_write+0xbcf/0xfd0 [ 63.590803][ T1509] ? __kasan_check_write+0x18/0x20 [ 63.590839][ T1509] ? mutex_unlock+0x90/0x240 [ 63.590876][ T1509] ? __cfi_ksys_write+0x10/0x10 [ 63.590924][ T1509] __x64_sys_newfstatat+0x9f/0xc0 [ 63.590954][ T1509] x64_sys_call+0x1821/0x2ee0 [ 63.590981][ T1509] do_syscall_64+0x57/0xf0 [ 63.591006][ T1509] ? clear_bhb_loop+0x50/0xa0 [ 63.591040][ T1509] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 63.591072][ T1509] RIP: 0033:0x7fb990d9f559 [ 63.591094][ T1509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.591117][ T1509] RSP: 002b:00007fb991c27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 63.591145][ T1509] RAX: ffffffffffffffda RBX: 00007fb991025fa0 RCX: 00007fb990d9f559 [ 63.591165][ T1509] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 63.591185][ T1509] RBP: 00007fb991c27090 R08: 0000000000000000 R09: 0000000000000000 [ 63.591202][ T1509] R10: 0000000000006000 R11: 0000000000000246 R12: 0000000000000001 [ 63.591218][ T1509] R13: 00007fb991026038 R14: 00007fb991025fa0 R15: 00007fff68463c18 [ 63.591241][ T1509] [ 63.627073][ T45] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 63.814035][ T66] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 63.815961][ T1511] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=217 sclass=netlink_xfrm_socket pid=1511 comm=syz.2.341 [ 63.932272][ T45] usb 1-1: device descriptor read/64, error -71 [ 63.962979][ T66] usb 2-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 63.977613][ T66] usb 2-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 63.986810][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.994917][ T66] usb 2-1: Product: syz [ 63.999131][ T66] usb 2-1: Manufacturer: syz [ 64.003909][ T66] usb 2-1: SerialNumber: syz [ 64.080551][ T322] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 64.178592][ T45] usb 1-1: device descriptor read/64, error -71 [ 64.220809][ T66] usb 2-1: USB disconnect, device number 22 [ 64.247523][ T322] usb 3-1: Using ep0 maxpacket: 16 [ 64.254221][ T322] usb 3-1: unable to get BOS descriptor or descriptor too short [ 64.263037][ T322] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 36, changing to 7 [ 64.275768][ T322] usb 3-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40 [ 64.285135][ T322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.293654][ T322] usb 3-1: Product: syz [ 64.298217][ T322] usb 3-1: Manufacturer: syz [ 64.302855][ T322] usb 3-1: SerialNumber: syz [ 64.434869][ T45] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 64.511036][ T322] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 64.518314][ T322] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8211); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 64.533622][ T322] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 64.554371][ T322] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 64.566065][ T322] usb 3-1: USB disconnect, device number 18 [ 64.572912][ T45] usb 1-1: device descriptor read/64, error -71 [ 64.585144][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 64.809490][ T45] usb 1-1: device descriptor read/64, error -71 [ 64.880314][ T36] audit: type=1400 audit(1793595855.895:362): avc: denied { map } for pid=1516 comm="syz.1.344" path="socket:[12925]" dev="sockfs" ino=12925 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 64.918204][ T45] usb usb1-port1: attempt power cycle [ 65.140039][ T36] audit: type=1400 audit(1793595856.159:363): avc: denied { execute } for pid=1527 comm="syz.1.348" name="file0" dev="tmpfs" ino=413 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 65.140080][ T1530] process 'syz.1.348' launched './file0' with NULL argv: empty string added [ 65.173501][ T36] audit: type=1400 audit(1793595856.179:364): avc: denied { nnp_transition } for pid=1527 comm="syz.1.348" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 65.194249][ T36] audit: type=1400 audit(1793595856.179:365): avc: denied { transition } for pid=1527 comm="syz.1.348" path="/71/file0" dev="tmpfs" ino=413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 65.217929][ T36] audit: type=1400 audit(1793595856.179:366): avc: denied { entrypoint } for pid=1527 comm="syz.1.348" path="/71/file0" dev="tmpfs" ino=413 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 65.247769][ T36] audit: type=1400 audit(1793595856.179:367): avc: denied { noatsecure } for pid=1527 comm="syz.1.348" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 65.273514][ T45] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 65.290531][ T1532] FAULT_INJECTION: forcing a failure. [ 65.290531][ T1532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.303909][ T66] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 65.311736][ T1532] CPU: 0 UID: 0 PID: 1532 Comm: syz.1.349 Not tainted syzkaller #0 51e652a054f6365e28d1d9b6834c4d7c058f4b23 [ 65.311773][ T1532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 65.311788][ T1532] Call Trace: [ 65.311796][ T1532] [ 65.311805][ T1532] __dump_stack+0x21/0x30 [ 65.311836][ T1532] dump_stack_lvl+0x140/0x1c0 [ 65.311856][ T1532] ? __cfi_dump_stack_lvl+0x10/0x10 [ 65.311877][ T1532] ? check_stack_object+0x138/0x150 [ 65.311912][ T1532] dump_stack+0x19/0x20 [ 65.311932][ T1532] should_fail_ex+0x3c2/0x510 [ 65.311966][ T1532] should_fail+0xf/0x20 [ 65.311998][ T1532] should_fail_usercopy+0x1e/0x30 [ 65.312020][ T1532] _copy_to_user+0x24/0xa0 [ 65.312045][ T1532] simple_read_from_buffer+0xed/0x160 [ 65.312074][ T1532] proc_fail_nth_read+0x1aa/0x220 [ 65.312103][ T1532] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 65.312134][ T1532] ? bpf_lsm_file_permission+0xd/0x20 [ 65.312159][ T1532] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 65.312197][ T1532] vfs_read+0x288/0xc70 [ 65.312229][ T1532] ? __cfi_vfs_read+0x10/0x10 [ 65.312260][ T1532] ? __kasan_check_write+0x18/0x20 [ 65.312293][ T1532] ? mutex_lock+0x97/0x1d0 [ 65.312320][ T1532] ? __cfi_mutex_lock+0x10/0x10 [ 65.312350][ T1532] ksys_read+0x145/0x260 [ 65.312380][ T1532] ? __cfi_ksys_read+0x10/0x10 [ 65.312414][ T1532] ? __kasan_check_read+0x15/0x20 [ 65.312446][ T1532] __x64_sys_read+0x7f/0x90 [ 65.312478][ T1532] x64_sys_call+0x2638/0x2ee0 [ 65.312503][ T1532] do_syscall_64+0x57/0xf0 [ 65.312524][ T1532] ? clear_bhb_loop+0x50/0xa0 [ 65.312554][ T1532] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 65.312583][ T1532] RIP: 0033:0x7f5113f5fd8e [ 65.312603][ T1532] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 65.312622][ T1532] RSP: 002b:00007f5114dcdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 65.312647][ T1532] RAX: ffffffffffffffda RBX: 00007f5114dce6c0 RCX: 00007f5113f5fd8e [ 65.312664][ T1532] RDX: 000000000000000f RSI: 00007f5114dce0a0 RDI: 0000000000000003 [ 65.312679][ T1532] RBP: 00007f5114dce090 R08: 0000000000000000 R09: 0000000000000000 [ 65.312695][ T1532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.312709][ T1532] R13: 00007f5114226038 R14: 00007f5114225fa0 R15: 00007ffdd3bd7a78 [ 65.312730][ T1532] [ 65.472301][ T45] usb 1-1: device descriptor read/8, error -71 [ 65.618415][ T66] usb 3-1: Using ep0 maxpacket: 16 [ 65.625040][ T66] usb 3-1: unable to get BOS descriptor or descriptor too short [ 65.633549][ T66] usb 3-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 65.644357][ T66] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 65.656974][ T66] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 65.666163][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.674226][ T66] usb 3-1: Product: syz [ 65.678505][ T66] usb 3-1: Manufacturer: syz [ 65.683170][ T66] usb 3-1: SerialNumber: syz [ 65.688662][ T45] usb 1-1: device descriptor read/8, error -71 [ 65.855228][ T31] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 65.894821][ T1526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.347'. [ 65.924496][ T45] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 65.954529][ T45] usb 1-1: device descriptor read/8, error -71 [ 66.014319][ T31] usb 2-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 66.028979][ T31] usb 2-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 66.038395][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.046646][ T31] usb 2-1: Product: syz [ 66.050970][ T31] usb 2-1: Manufacturer: syz [ 66.055860][ T31] usb 2-1: SerialNumber: syz [ 66.083187][ T45] usb 1-1: device descriptor read/8, error -71 [ 66.155088][ T36] audit: type=1400 audit(1793595857.183:368): avc: denied { map } for pid=1525 comm="syz.2.347" path="socket:[13442]" dev="sockfs" ino=13442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 66.190875][ T45] usb usb1-port1: unable to enumerate USB device [ 66.274562][ T31] usb 2-1: USB disconnect, device number 23 [ 66.555072][ T1548] drivers/android/binder/context.rs:113: 54 callbacks suppressed [ 66.555094][ T1548] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.651259][ T1552] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=63751 sclass=netlink_xfrm_socket pid=1552 comm=syz.0.357 [ 66.694678][ T1552] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.739545][ T1552] overlayfs: failed to clone upperpath [ 66.954319][ T1557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.358'. [ 67.204034][ T36] audit: type=1400 audit(1793595858.246:369): avc: denied { accept } for pid=1563 comm="syz.0.362" path="socket:[13098]" dev="sockfs" ino=13098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 67.379021][ T1570] ./dev/sda1: Can't lookup blockdev [ 68.039997][ T66] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 68.051676][ T66] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 68.096958][ T66] usb 3-1: USB disconnect, device number 19 [ 68.720740][ T66] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 68.739179][ T36] audit: type=1400 audit(1793595859.793:370): avc: denied { setattr } for pid=1598 comm="syz.1.374" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 68.813201][ T1601] can: request_module (can-proto-0) failed. [ 68.850778][ T36] audit: type=1400 audit(1793595859.915:371): avc: denied { mounton } for pid=1602 comm="syz.1.376" path="/77/file0" dev="tmpfs" ino=450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.850822][ T1603] fuse: Bad value for 'user_id' [ 68.888923][ T1603] fuse: Bad value for 'user_id' [ 68.899265][ T66] usb 3-1: Using ep0 maxpacket: 32 [ 68.911403][ T66] usb 3-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 68.928436][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.946720][ T66] usb 3-1: Product: syz [ 68.951164][ T66] usb 3-1: Manufacturer: syz [ 68.955803][ T66] usb 3-1: SerialNumber: syz [ 69.136233][ T45] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 69.304528][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 69.312044][ T45] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 69.324148][ T45] usb 2-1: config 0 has no interface number 0 [ 69.336428][ T45] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.358316][ T45] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.379193][ T45] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 69.398516][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.419411][ T45] usb 2-1: config 0 descriptor?? [ 69.928067][ T1618] x_tables: arp_tables: IDLETIMER target: not valid for this family [ 69.987589][ T1620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=1620 comm=syz.0.383 [ 70.037022][ T45] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0003/input/input12 [ 70.079875][ T45] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0003/input/input13 [ 70.122101][ T45] uclogic 0003:28BD:0071.0003: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.1-1/input1 [ 70.232373][ T1603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.241155][ T1603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.250833][ T421] usb 2-1: USB disconnect, device number 24 [ 70.957492][ T1637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1637 comm=syz.0.390 [ 71.086712][ T421] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 71.256316][ T421] usb 2-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 71.270994][ T421] usb 2-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 71.280380][ T421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.288768][ T421] usb 2-1: Product: syz [ 71.293059][ T421] usb 2-1: Manufacturer: syz [ 71.298005][ T421] usb 2-1: SerialNumber: syz [ 71.438897][ T66] usb 3-1: MIDIStreaming interface descriptor not found [ 71.460414][ T66] usb 3-1: USB disconnect, device number 20 [ 71.512146][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.532032][ T421] usb 2-1: USB disconnect, device number 25 [ 71.919175][ T66] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 72.079759][ T66] usb 3-1: unable to get BOS descriptor or descriptor too short [ 72.088009][ T66] usb 3-1: not running at top speed; connect to a high speed hub [ 72.096580][ T66] usb 3-1: config 1 has an invalid interface number: 33 but max is 2 [ 72.116587][ T66] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.126841][ T36] audit: type=1400 audit(1793595863.216:372): avc: denied { read } for pid=1659 comm="syz.1.400" name="trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 72.149522][ T66] usb 3-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 72.164172][ T66] usb 3-1: config 1 has no interface number 3 [ 72.172164][ T66] usb 3-1: config 1 interface 33 has no altsetting 0 [ 72.180416][ T66] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 72.191822][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.204260][ T66] usb 3-1: Product: syz [ 72.208528][ T66] usb 3-1: Manufacturer: syz [ 72.213431][ T66] usb 3-1: SerialNumber: syz [ 72.444580][ T421] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 72.484334][ T1641] kvm: pic: non byte write [ 72.489034][ T1641] kvm: pic: non byte write [ 72.504194][ T1641] kvm: pic: non byte write [ 72.508892][ T1641] kvm: pic: non byte write [ 72.513577][ T1641] kvm: pic: non byte write [ 72.528784][ T1641] kvm: pic: non byte write [ 72.533410][ T1641] kvm: pic: non byte write [ 72.540488][ T1641] kvm: pic: non byte write [ 72.545502][ T1641] kvm: pic: non byte write [ 72.550289][ T1641] kvm: pic: non byte write [ 72.623074][ T421] usb 2-1: Using ep0 maxpacket: 8 [ 72.629886][ T421] usb 2-1: unable to get BOS descriptor or descriptor too short [ 72.640296][ T421] usb 2-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 72.652814][ T421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.667491][ T421] usb 2-1: Product: syz [ 72.674788][ T421] usb 2-1: Manufacturer: syz [ 72.680421][ T66] usb 3-1: USB disconnect, device number 21 [ 72.687580][ T421] usb 2-1: SerialNumber: syz [ 72.705850][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 72.979168][ T36] audit: type=1400 audit(1793595864.074:373): avc: denied { create } for pid=1665 comm="syz.1.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 73.021871][ T36] audit: type=1400 audit(1793595864.094:374): avc: denied { listen } for pid=1665 comm="syz.1.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 73.078157][ T421] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 73.085377][ T421] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 73.099034][ T421] usb 2-1: USB disconnect, device number 26 [ 73.119788][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 73.189844][ T1678] FAULT_INJECTION: forcing a failure. [ 73.189844][ T1678] name failslab, interval 1, probability 0, space 0, times 0 [ 73.204440][ T1678] CPU: 1 UID: 0 PID: 1678 Comm: syz.2.404 Not tainted syzkaller #0 51e652a054f6365e28d1d9b6834c4d7c058f4b23 [ 73.204481][ T1678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 73.204499][ T1678] Call Trace: [ 73.204507][ T1678] [ 73.204517][ T1678] __dump_stack+0x21/0x30 [ 73.204546][ T1678] dump_stack_lvl+0x140/0x1c0 [ 73.204568][ T1678] ? __cfi_dump_stack_lvl+0x10/0x10 [ 73.204595][ T1678] dump_stack+0x19/0x20 [ 73.204626][ T1678] should_fail_ex+0x3c2/0x510 [ 73.204664][ T1678] should_failslab+0xac/0x100 [ 73.204691][ T1678] kmem_cache_alloc_noprof+0x42/0x410 [ 73.204727][ T1678] ? security_file_alloc+0x49/0x220 [ 73.204761][ T1678] ? kasan_save_alloc_info+0x3a/0x50 [ 73.204794][ T1678] security_file_alloc+0x49/0x220 [ 73.204828][ T1678] init_file+0x9e/0x210 [ 73.204855][ T1678] alloc_empty_file+0xd9/0x270 [ 73.204880][ T1678] ? _raw_spin_unlock+0x45/0x60 [ 73.204904][ T1678] alloc_file_pseudo+0x142/0x1f0 [ 73.204933][ T1678] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 73.204962][ T1678] ? _raw_spin_unlock+0x45/0x60 [ 73.204986][ T1678] anon_inode_getfile+0xaa/0x190 [ 73.205017][ T1678] do_signalfd4+0x1e9/0x490 [ 73.205046][ T1678] ? __kasan_check_write+0x18/0x20 [ 73.205081][ T1678] __x64_sys_signalfd+0x132/0x180 [ 73.205111][ T1678] ? __cfi___x64_sys_signalfd+0x10/0x10 [ 73.205143][ T1678] ? switch_fpu_return+0x12/0x20 [ 73.205177][ T1678] x64_sys_call+0x316/0x2ee0 [ 73.205202][ T1678] do_syscall_64+0x57/0xf0 [ 73.205225][ T1678] ? clear_bhb_loop+0x50/0xa0 [ 73.205256][ T1678] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 73.205286][ T1678] RIP: 0033:0x7fb990d9f559 [ 73.205306][ T1678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.205328][ T1678] RSP: 002b:00007fb991c27028 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 73.205354][ T1678] RAX: ffffffffffffffda RBX: 00007fb991025fa0 RCX: 00007fb990d9f559 [ 73.205373][ T1678] RDX: 0000000000000008 RSI: 0000200000000380 RDI: ffffffffffffffff [ 73.205390][ T1678] RBP: 00007fb990e36b50 R08: 0000000000000000 R09: 0000000000000000 [ 73.205406][ T1678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.205421][ T1678] R13: 00007fb991026038 R14: 00007fb991025fa0 R15: 00007fff68463c18 [ 73.205443][ T1678] [ 73.533201][ T36] audit: type=1400 audit(1793595864.638:375): avc: denied { listen } for pid=1681 comm="syz.2.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.634854][ T36] audit: type=1400 audit(1793595864.638:376): avc: denied { accept } for pid=1681 comm="syz.2.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.723896][ T36] audit: type=1400 audit(1793595864.719:377): avc: denied { read } for pid=1681 comm="syz.2.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.768102][ T36] audit: type=1400 audit(1793595864.860:378): avc: denied { name_bind } for pid=1681 comm="syz.2.405" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 73.824410][ T36] audit: type=1400 audit(1793595864.931:379): avc: denied { mounton } for pid=1694 comm="syz.1.410" path="/85/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=fifo_file permissive=1 [ 73.911766][ T1700] rust_binder: Error in use_page_slow: ESRCH [ 73.915623][ T1693] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.934488][ T1693] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.941929][ T36] audit: type=1400 audit(1793595865.041:380): avc: denied { execmem } for pid=1702 comm="syz.2.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 73.942456][ T1693] bridge_slave_0: entered allmulticast mode [ 73.967479][ T1700] rust_binder: use_range failure ESRCH [ 73.968236][ T1693] bridge_slave_0: entered promiscuous mode [ 73.979822][ T1693] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.986978][ T1693] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.994155][ T1693] bridge_slave_1: entered allmulticast mode [ 73.994914][ T1700] rust_binder: 1698:1700 transaction call to 1698:0 failed ESRCH, code 0 size 112-0 line process.rs:1128 [ 74.001552][ T1693] bridge_slave_1: entered promiscuous mode [ 74.041611][ T31] rust_binder: 1698: undelivered TRANSACTION_ERROR: 29201 [ 74.118699][ T1693] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.125866][ T1693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.133255][ T1693] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.140364][ T1693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.151426][ T1707] incfs: Can't find or create .index dir in ./cgroup [ 74.158440][ T1707] incfs: mount failed -22 [ 74.191346][ T1041] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.199862][ T1041] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.233420][ T1041] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.240564][ T1041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.248626][ T1041] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.255742][ T1041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.309321][ T1693] veth0_vlan: entered promiscuous mode [ 74.337543][ T1693] veth1_macvtap: entered promiscuous mode [ 74.366636][ T36] audit: type=1400 audit(1793595865.475:381): avc: denied { mounton } for pid=1693 comm="syz-executor" path="/root/syzkaller.bPkoCM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 74.404813][ T45] usb 4-1: USB disconnect, device number 6 [ 74.442164][ T1716] netlink: 16 bytes leftover after parsing attributes in process `syz.4.406'. [ 74.549637][ T1041] bridge_slave_1: left allmulticast mode [ 74.555411][ T1041] bridge_slave_1: left promiscuous mode [ 74.561305][ T1041] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.569073][ T1041] bridge_slave_0: left allmulticast mode [ 74.574805][ T1041] bridge_slave_0: left promiscuous mode [ 74.580534][ T1041] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.703091][ T1041] tipc: Disabling bearer [ 74.710400][ T1041] tipc: Left network mode [ 74.718090][ T1041] veth1_macvtap: left promiscuous mode [ 74.738351][ T36] audit: type=1400 audit(1793595865.858:382): avc: denied { cmd } for pid=1744 comm="syz.1.423" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 75.044230][ T1774] netlink: 'syz.0.434': attribute type 11 has an invalid length. [ 75.073885][ T421] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.076041][ T45] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 75.202975][ T31] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 75.213044][ T421] usb 5-1: device descriptor read/64, error -71 [ 75.233874][ T45] usb 2-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 75.248692][ T45] usb 2-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 75.258054][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.266172][ T45] usb 2-1: Product: syz [ 75.270485][ T45] usb 2-1: Manufacturer: syz [ 75.275326][ T45] usb 2-1: SerialNumber: syz [ 75.351891][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 75.358328][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.368557][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.379152][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 75.388392][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.396512][ T31] usb 3-1: Product: syz [ 75.400708][ T31] usb 3-1: Manufacturer: syz [ 75.405475][ T31] usb 3-1: SerialNumber: syz [ 75.451152][ T421] usb 5-1: device descriptor read/64, error -71 [ 75.489961][ T45] usb 2-1: USB disconnect, device number 27 [ 75.589146][ T1779] netlink: 'syz.0.436': attribute type 8 has an invalid length. [ 75.613780][ T31] usb 3-1: 0:2 : does not exist [ 75.621249][ T31] usb 3-1: unit 6 not found! [ 75.631691][ T31] usb 3-1: USB disconnect, device number 22 [ 75.646879][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 75.709628][ T421] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 75.838462][ T421] usb 5-1: device descriptor read/64, error -71 [ 76.043446][ T1798] netlink: 'syz.1.444': attribute type 4 has an invalid length. [ 76.086756][ T421] usb 5-1: device descriptor read/64, error -71 [ 76.209016][ T421] usb usb5-port1: attempt power cycle [ 76.216534][ T1812] FAULT_INJECTION: forcing a failure. [ 76.216534][ T1812] name failslab, interval 1, probability 0, space 0, times 0 [ 76.229331][ T1812] CPU: 0 UID: 0 PID: 1812 Comm: syz.1.450 Not tainted syzkaller #0 51e652a054f6365e28d1d9b6834c4d7c058f4b23 [ 76.229376][ T1812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 76.229389][ T1812] Call Trace: [ 76.229395][ T1812] [ 76.229402][ T1812] __dump_stack+0x21/0x30 [ 76.229421][ T1812] dump_stack_lvl+0x140/0x1c0 [ 76.229436][ T1812] ? __cfi_dump_stack_lvl+0x10/0x10 [ 76.229452][ T1812] ? __kmalloc_cache_noprof+0x23c/0x470 [ 76.229478][ T1812] ? lockref_get+0x131/0x1c0 [ 76.229496][ T1812] ? proc_init_fs_context+0x65/0x3f0 [ 76.229522][ T1812] dump_stack+0x19/0x20 [ 76.229536][ T1812] should_fail_ex+0x3c2/0x510 [ 76.229561][ T1812] should_failslab+0xac/0x100 [ 76.229578][ T1812] __kmalloc_cache_noprof+0x41/0x470 [ 76.229602][ T1812] ? __se_sys_fspick+0x211/0x460 [ 76.229624][ T1812] __se_sys_fspick+0x211/0x460 [ 76.229645][ T1812] ? xfd_validate_state+0x68/0x140 [ 76.229670][ T1812] ? __x64_sys_fspick+0xa0/0xa0 [ 76.229691][ T1812] ? __kasan_check_write+0x18/0x20 [ 76.229714][ T1812] ? fpregs_restore_userregs+0x11c/0x260 [ 76.229737][ T1812] __x64_sys_fspick+0x7f/0xa0 [ 76.229758][ T1812] x64_sys_call+0x23c4/0x2ee0 [ 76.229775][ T1812] do_syscall_64+0x57/0xf0 [ 76.229791][ T1812] ? clear_bhb_loop+0x50/0xa0 [ 76.229813][ T1812] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.229833][ T1812] RIP: 0033:0x7f5113f9f559 [ 76.229847][ T1812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.229861][ T1812] RSP: 002b:00007f5114dce028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 76.229886][ T1812] RAX: ffffffffffffffda RBX: 00007f5114225fa0 RCX: 00007f5113f9f559 [ 76.229899][ T1812] RDX: 0000000000000000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 76.229911][ T1812] RBP: 00007f5114036b50 R08: 0000000000000000 R09: 0000000000000000 [ 76.229922][ T1812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.229932][ T1812] R13: 00007f5114226038 R14: 00007f5114225fa0 R15: 00007ffdd3bd7a78 [ 76.229947][ T1812] [ 76.366544][ T1814] tap0: tun_chr_ioctl cmd 1074025675 [ 76.448700][ T1814] tap0: persist enabled [ 76.455267][ T1814] tap0: tun_chr_ioctl cmd 1074025678 [ 76.460637][ T1814] tap0: group set to 0 [ 76.548259][ T1820] overlayfs: failed to clone lowerpath [ 76.653084][ T421] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 76.674110][ T421] usb 5-1: device descriptor read/8, error -71 [ 76.752379][ T31] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 76.803225][ T421] usb 5-1: device descriptor read/8, error -71 [ 76.912597][ T31] usb 2-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 76.927189][ T31] usb 2-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 76.936393][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.944478][ T31] usb 2-1: Product: syz [ 76.948684][ T31] usb 2-1: Manufacturer: syz [ 76.953352][ T31] usb 2-1: SerialNumber: syz [ 77.040547][ T421] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 77.061490][ T421] usb 5-1: device descriptor read/8, error -71 [ 77.101623][ T1861] rust_binder: Write failure EFAULT in pid:322 [ 77.121555][ T1863] FAULT_INJECTION: forcing a failure. [ 77.121555][ T1863] name failslab, interval 1, probability 0, space 0, times 0 [ 77.134333][ T1863] CPU: 0 UID: 0 PID: 1863 Comm: syz.2.459 Not tainted syzkaller #0 51e652a054f6365e28d1d9b6834c4d7c058f4b23 [ 77.134368][ T1863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 77.134383][ T1863] Call Trace: [ 77.134393][ T1863] [ 77.134405][ T1863] __dump_stack+0x21/0x30 [ 77.134424][ T1863] dump_stack_lvl+0x140/0x1c0 [ 77.134457][ T1863] ? __cfi_dump_stack_lvl+0x10/0x10 [ 77.134479][ T1863] ? _parse_integer+0x2e/0x40 [ 77.134508][ T1863] ? kstrtoull+0x13b/0x1e0 [ 77.134541][ T1863] dump_stack+0x19/0x20 [ 77.134555][ T1863] should_fail_ex+0x3c2/0x510 [ 77.134579][ T1863] should_failslab+0xac/0x100 [ 77.134610][ T1863] kmem_cache_alloc_noprof+0x42/0x410 [ 77.134644][ T1863] ? getname_flags+0xcc/0x6b0 [ 77.134664][ T1863] getname_flags+0xcc/0x6b0 [ 77.134690][ T1863] vfs_fstatat+0xcb/0x1d0 [ 77.134706][ T1863] __se_sys_newfstatat+0x127/0x3c0 [ 77.134724][ T1863] ? __x64_sys_newfstatat+0xc0/0xc0 [ 77.134741][ T1863] ? vfs_write+0xbcf/0xfd0 [ 77.134786][ T1863] ? __cfi_vfs_write+0x10/0x10 [ 77.134817][ T1863] ? __kasan_check_write+0x18/0x20 [ 77.134849][ T1863] ? mutex_unlock+0x90/0x240 [ 77.134871][ T1863] ? __cfi_ksys_write+0x10/0x10 [ 77.134910][ T1863] __x64_sys_newfstatat+0x9f/0xc0 [ 77.134935][ T1863] x64_sys_call+0x1821/0x2ee0 [ 77.134958][ T1863] do_syscall_64+0x57/0xf0 [ 77.134984][ T1863] ? clear_bhb_loop+0x50/0xa0 [ 77.135005][ T1863] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.135025][ T1863] RIP: 0033:0x7fb990d9f559 [ 77.135038][ T1863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.135071][ T1863] RSP: 002b:00007fb991c27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 77.135094][ T1863] RAX: ffffffffffffffda RBX: 00007fb991025fa0 RCX: 00007fb990d9f559 [ 77.135110][ T1863] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 77.135128][ T1863] RBP: 00007fb991c27090 R08: 0000000000000000 R09: 0000000000000000 [ 77.135143][ T1863] R10: 0000000000006000 R11: 0000000000000246 R12: 0000000000000001 [ 77.135153][ T1863] R13: 00007fb991026038 R14: 00007fb991025fa0 R15: 00007fff68463c18 [ 77.135167][ T1863] [ 77.368236][ T31] usb 2-1: USB disconnect, device number 28 [ 77.383598][ T421] usb 5-1: device descriptor read/8, error -71 [ 77.498050][ T421] usb usb5-port1: unable to enumerate USB device [ 77.636850][ T45] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 77.787391][ T45] usb 3-1: config 1 interface 0 altsetting 81 bulk endpoint 0x82 has invalid maxpacket 128 [ 77.797492][ T45] usb 3-1: config 1 interface 0 has no altsetting 0 [ 77.805738][ T45] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 77.814823][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.822907][ T45] usb 3-1: Product: syz [ 77.827133][ T45] usb 3-1: Manufacturer: syz [ 77.831766][ T45] usb 3-1: SerialNumber: syz [ 77.838981][ T1868] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 77.850709][ T1886] FAULT_INJECTION: forcing a failure. [ 77.850709][ T1886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.863880][ T1886] CPU: 1 UID: 0 PID: 1886 Comm: syz.4.469 Not tainted syzkaller #0 51e652a054f6365e28d1d9b6834c4d7c058f4b23 [ 77.863920][ T1886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 77.863938][ T1886] Call Trace: [ 77.863950][ T1886] [ 77.863957][ T1886] __dump_stack+0x21/0x30 [ 77.863977][ T1886] dump_stack_lvl+0x140/0x1c0 [ 77.863994][ T1886] ? __cfi_dump_stack_lvl+0x10/0x10 [ 77.864010][ T1886] dump_stack+0x19/0x20 [ 77.864023][ T1886] should_fail_ex+0x3c2/0x510 [ 77.864047][ T1886] should_fail+0xf/0x20 [ 77.864068][ T1886] should_fail_usercopy+0x1e/0x30 [ 77.864082][ T1886] strncpy_from_user+0x29/0x280 [ 77.864106][ T1886] getname_flags+0x106/0x6b0 [ 77.864121][ T1886] vfs_fstatat+0xcb/0x1d0 [ 77.864136][ T1886] __se_sys_newfstatat+0x127/0x3c0 [ 77.864158][ T1886] ? __x64_sys_newfstatat+0xc0/0xc0 [ 77.864175][ T1886] ? vfs_write+0xbcf/0xfd0 [ 77.864198][ T1886] ? __cfi_vfs_write+0x10/0x10 [ 77.864221][ T1886] ? __kasan_check_write+0x18/0x20 [ 77.864243][ T1886] ? mutex_unlock+0x90/0x240 [ 77.864267][ T1886] ? __cfi_ksys_write+0x10/0x10 [ 77.864290][ T1886] ? handle_softirqs+0x4f9/0x5b0 [ 77.864309][ T1886] __x64_sys_newfstatat+0x9f/0xc0 [ 77.864326][ T1886] x64_sys_call+0x1821/0x2ee0 [ 77.864342][ T1886] do_syscall_64+0x57/0xf0 [ 77.864357][ T1886] ? clear_bhb_loop+0x50/0xa0 [ 77.864378][ T1886] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.864397][ T1886] RIP: 0033:0x7fc29639f559 [ 77.864410][ T1886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.864423][ T1886] RSP: 002b:00007fc294df7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 77.864440][ T1886] RAX: ffffffffffffffda RBX: 00007fc296625fa0 RCX: 00007fc29639f559 [ 77.864452][ T1886] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 77.864464][ T1886] RBP: 00007fc294df7090 R08: 0000000000000000 R09: 0000000000000000 [ 77.864474][ T1886] R10: 0000000000006000 R11: 0000000000000246 R12: 0000000000000001 [ 77.864484][ T1886] R13: 00007fc296626038 R14: 00007fc296625fa0 R15: 00007fff5fb9b228 [ 77.864497][ T1886] [ 78.104191][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 78.104212][ T36] audit: type=1400 audit(1793595869.230:391): avc: denied { relabelfrom } for pid=1889 comm="syz.1.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 78.130205][ T36] audit: type=1400 audit(1793595869.230:392): avc: denied { relabelto } for pid=1889 comm="syz.1.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 78.149881][ T36] audit: type=1326 audit(1793595869.230:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1892 comm="syz.0.472" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4636d9f559 code=0x0 [ 78.174751][ T36] audit: type=1400 audit(1793595869.290:394): avc: denied { map } for pid=1899 comm="syz.4.474" path="/6/dev/sda" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.201373][ T36] audit: type=1400 audit(1793595869.330:395): avc: denied { setopt } for pid=1889 comm="syz.1.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 78.280367][ T45] usblp0: Disabling reads from problematic bidirectional printer [ 78.289166][ T45] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 81 proto 2 vid 0x03F0 pid 0x0004 [ 78.301526][ T45] usb 3-1: USB disconnect, device number 23 [ 78.308593][ T45] usblp0: removed [ 78.591131][ T66] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 78.705776][ T1897] cgroup: fork rejected by pids controller in /syz1 [ 78.740305][ T66] usb 5-1: Using ep0 maxpacket: 32 [ 78.750966][ T66] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.761940][ T66] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.771968][ T66] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 78.789161][ T66] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.806188][ T66] usb 5-1: config 0 descriptor?? [ 78.812728][ T66] hub 5-1:0.0: USB hub found [ 78.953776][ T36] audit: type=1400 audit(1793595870.095:396): avc: denied { cmd } for pid=1945 comm="syz.0.480" path="socket:[19245]" dev="sockfs" ino=19245 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 79.012187][ T66] hub 5-1:0.0: 1 port detected [ 79.054114][ T36] audit: type=1400 audit(1793595870.195:397): avc: denied { create } for pid=1946 comm="syz.1.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 79.054684][ T1947] EXT4-fs (sda1): shut down requested (0) [ 79.090117][ T36] audit: type=1400 audit(1793595870.236:398): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 79.112871][ T36] audit: type=1400 audit(1793595870.236:399): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.136141][ T36] audit: type=1400 audit(1793595870.236:400): avc: denied { write } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.148103][ T422] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 79.195951][ T1947] netlink: 40 bytes leftover after parsing attributes in process `syz.1.479'. [ 79.205274][ T1947] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2147483653 (only 8 groups) [ 79.308091][ T422] usb 3-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 79.323531][ T422] usb 3-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 79.332997][ T422] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.341273][ T422] usb 3-1: Product: syz [ 79.345565][ T422] usb 3-1: Manufacturer: syz [ 79.350535][ T422] usb 3-1: SerialNumber: syz [ 79.569691][ T422] usb 3-1: USB disconnect, device number 24 [ 79.620525][ T66] hub 5-1:0.0: activate --> -90 [ 80.020757][ T45] usb 5-1: USB disconnect, device number 6 [ 80.024183][ T66] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 80.104749][ T1976] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 80.112851][ T1976] rust_binder: Read failure Err(EFAULT) in pid:337 [ 80.119942][ T1976] tmpfs: Unknown parameter 'nr_bLocks' [ 80.125949][ T322] rust_binder: 1975: undelivered death notification, 0000000000000000 [ 80.222310][ T574] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 80.361652][ T574] usb 2-1: device descriptor read/64, error -71 [ 80.431216][ T45] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 80.582050][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 80.590315][ T45] usb 3-1: not running at top speed; connect to a high speed hub [ 80.600471][ T574] usb 2-1: device descriptor read/64, error -71 [ 80.604006][ T45] usb 3-1: config index 0 descriptor too short (expected 63849, got 105) [ 80.616174][ T45] usb 3-1: config 1 has an invalid interface number: 2 but max is 1 [ 80.624275][ T45] usb 3-1: config 1 has an invalid descriptor of length 29, skipping remainder of the config [ 80.634586][ T45] usb 3-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 80.643719][ T45] usb 3-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 80.659380][ T45] usb 3-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40 [ 80.669021][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.677333][ T45] usb 3-1: Product: syz [ 80.681700][ T45] usb 3-1: Manufacturer: syz [ 80.686330][ T45] usb 3-1: SerialNumber: syz [ 80.839076][ T574] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 80.859691][ T517] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 80.867908][ T1997] overlayfs: failed to clone upperpath [ 80.892674][ T45] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 80.903269][ T45] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 80.913451][ T45] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 80.923531][ T45] usb 3-1: USB disconnect, device number 25 [ 80.938590][ T1999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.498'. [ 80.968480][ T574] usb 2-1: device descriptor read/64, error -71 [ 81.019536][ T517] usb 5-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 81.036684][ T517] usb 5-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 81.046384][ T517] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.054807][ T517] usb 5-1: Product: syz [ 81.059512][ T517] usb 5-1: Manufacturer: syz [ 81.064163][ T517] usb 5-1: SerialNumber: syz [ 81.078882][ T2004] netlink: 'syz.0.500': attribute type 11 has an invalid length. [ 81.207319][ T574] usb 2-1: device descriptor read/64, error -71 [ 81.281019][ T517] usb 5-1: USB disconnect, device number 7 [ 81.316840][ T574] usb usb2-port1: attempt power cycle [ 81.655188][ T66] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 81.665256][ T574] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 81.687210][ T574] usb 2-1: device descriptor read/8, error -71 [ 81.804428][ T66] usb 3-1: Using ep0 maxpacket: 16 [ 81.810873][ T66] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.821355][ T66] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 174, changing to 11 [ 81.832701][ T66] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 81.842695][ T66] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 81.852847][ T574] usb 2-1: device descriptor read/8, error -71 [ 81.862036][ T66] usb 3-1: New USB device found, idVendor=1235, idProduct=000a, bcdDevice= 0.40 [ 81.871444][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.879631][ T66] usb 3-1: Product: syz [ 81.883836][ T66] usb 3-1: Manufacturer: syz [ 81.888653][ T66] usb 3-1: SerialNumber: syz [ 81.997309][ T2021] loop7: detected capacity change from 0 to 7 [ 82.058822][ T340] Buffer I/O error on dev loop7, logical block 0, async page read [ 82.067007][ T340] Buffer I/O error on dev loop7, logical block 0, async page read [ 82.075348][ T340] Buffer I/O error on dev loop7, logical block 0, async page read [ 82.083436][ T340] Buffer I/O error on dev loop7, logical block 0, async page read [ 82.091566][ T340] Buffer I/O error on dev loop7, logical block 0, async page read [ 82.093419][ T574] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 82.112891][ T66] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -12 [ 82.124105][ T574] usb 2-1: device descriptor read/8, error -71 [ 82.130822][ T66] usb 3-1: USB disconnect, device number 26 [ 82.143769][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 82.204297][ T2036] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.511'. [ 82.253608][ T574] usb 2-1: device descriptor read/8, error -71 [ 82.362045][ T574] usb usb2-port1: unable to enumerate USB device [ 82.451543][ T517] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 82.600908][ T517] usb 5-1: Using ep0 maxpacket: 16 [ 82.607579][ T517] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.618644][ T517] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.628555][ T517] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 82.641807][ T517] usb 5-1: config 0 interface 0 has no altsetting 0 [ 82.648467][ T517] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 82.657582][ T517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.666477][ T517] usb 5-1: config 0 descriptor?? [ 82.959372][ T45] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 83.083784][ T2073] fuse: Unknown parameter 'flGÉú [ 83.083784][ T2073] æýHÌ—#nìz.3ÀÁ"Í¿>¦8Ý�M…«Ì”“Fé|ôœµ ãÒË�€q˜›V�//.Ð׸¢e–ýêUüá%•Æš*·Yê†F÷/TI+ÄzÜÕu¤ ‡ô¸üÅKÚþàBŠÔ]möá÷‚�g{þY™¬C[� [ 83.083784][ T2073] 8}7F ôi0x0000000000000008' [ 83.109718][ T45] usb 3-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 83.130342][ T45] usb 3-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 83.139657][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.147761][ T45] usb 3-1: Product: syz [ 83.152326][ T45] usb 3-1: Manufacturer: syz [ 83.156971][ T45] usb 3-1: SerialNumber: syz [ 83.280218][ T2044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.508'. [ 83.289770][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 83.289805][ T36] audit: type=1400 audit(1793595874.456:411): avc: denied { load_policy } for pid=2024 comm="syz.4.508" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 83.290170][ T2044] ------------[ cut here ]------------ [ 83.321517][ T2044] WARNING: CPU: 0 PID: 2044 at mm/page_alloc.c:5286 __alloc_pages_noprof+0x109/0x7e0 [ 83.331072][ T2044] Modules linked in: [ 83.335036][ T2044] CPU: 0 UID: 0 PID: 2044 Comm: syz.4.508 Not tainted syzkaller #0 51e652a054f6365e28d1d9b6834c4d7c058f4b23 [ 83.346572][ T2044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 83.356720][ T2044] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 83.362844][ T2044] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d da 23 8a 06 00 0f 85 c2 00 00 00 c6 05 cd 23 8a 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 83.382582][ T2044] RSP: 0018:ffffc90010f47520 EFLAGS: 00010246 [ 83.388978][ T2044] RAX: 0000000000000000 RBX: 000000000000000f RCX: 0000000000000000 [ 83.397144][ T2044] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90010f475d8 [ 83.402047][ T36] audit: type=1400 audit(1793595874.556:412): avc: denied { create } for pid=2084 comm="syz.0.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 83.405209][ T2044] RBP: ffffc90010f47660 R08: ffffc90010f475d7 R09: 0000000000000000 [ 83.432584][ T2044] R10: ffffc90010f475c0 R11: fffff520021e8ebb R12: ffffc90010f47560 [ 83.440654][ T2044] R13: dffffc0000000000 R14: 1ffff920021e8ea8 R15: 0000000000000000 [ 83.448715][ T2044] FS: 00007fc294dd66c0(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 83.457747][ T2044] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.464466][ T2044] CR2: 0000200000010000 CR3: 000000012d1f6000 CR4: 00000000003526b0 [ 83.472546][ T2044] DR0: 0000000000000000 DR1: 0000000000008000 DR2: 0000000000000000 [ 83.477265][ T45] usb 3-1: USB disconnect, device number 27 [ 83.480609][ T2044] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 83.494657][ T2044] Call Trace: [ 83.498008][ T2044] [ 83.500982][ T2044] ? vfs_write+0x3c1/0xfd0 [ 83.505455][ T2044] ? ksys_write+0x145/0x260 [ 83.510077][ T2044] ? x64_sys_call+0x271c/0x2ee0 [ 83.515018][ T2044] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 83.520888][ T2044] ? hashtab_init+0xd6/0x1f0 [ 83.525527][ T2044] ___kmalloc_large_node+0x81/0x220 [ 83.530796][ T2044] ? hashtab_init+0xd6/0x1f0 [ 83.535430][ T2044] __kmalloc_large_node_noprof+0x1e/0xd0 [ 83.541152][ T2044] ? hashtab_init+0xd6/0x1f0 [ 83.545793][ T2044] __kmalloc_noprof+0x326/0x510 [ 83.550732][ T2044] ? kasan_save_alloc_info+0x3a/0x50 [ 83.556074][ T2044] hashtab_init+0xd6/0x1f0 [ 83.560563][ T2044] ? class_read+0x17f/0x8a0 [ 83.565106][ T2044] symtab_init+0x44/0x70 [ 83.569474][ T2044] class_read+0x208/0x8a0 [ 83.573891][ T2044] ? __kasan_kmalloc+0x96/0xb0 [ 83.578793][ T2044] ? hashtab_init+0xd6/0x1f0 [ 83.583425][ T2044] ? __cfi_class_read+0x10/0x10 [ 83.588347][ T2044] ? hashtab_init+0x100/0x1f0 [ 83.593116][ T2044] policydb_read+0xa86/0x2860 [ 83.597927][ T2044] ? __kasan_kmalloc+0x96/0xb0 [ 83.602765][ T2044] ? __cfi_policydb_read+0x10/0x10 [ 83.607960][ T2044] ? security_load_policy+0x130/0x12d0 [ 83.613490][ T2044] security_load_policy+0x16a/0x12d0 [ 83.618879][ T2044] ? irqentry_exit+0x4a/0x60 [ 83.623542][ T2044] ? __kasan_check_write+0x18/0x20 [ 83.628737][ T2044] ? mutex_lock+0x97/0x1d0 [ 83.633195][ T2044] ? __cfi_security_load_policy+0x10/0x10 [ 83.638990][ T2044] ? rep_movs_alternative+0x4a/0xa0 [ 83.644236][ T2044] sel_write_load+0x258/0x600 [ 83.649000][ T2044] ? __cfi_sel_write_load+0x10/0x10 [ 83.654242][ T2044] ? bpf_lsm_file_permission+0xd/0x20 [ 83.659683][ T2044] ? __cfi_sel_write_load+0x10/0x10 [ 83.664922][ T2044] vfs_write+0x3c1/0xfd0 [ 83.669253][ T2044] ? __cfi_vfs_write+0x10/0x10 [ 83.674075][ T2044] ? __kasan_check_write+0x18/0x20 [ 83.679289][ T2044] ? mutex_lock+0x97/0x1d0 [ 83.683753][ T2044] ? __cfi_mutex_lock+0x10/0x10 [ 83.688711][ T2044] ksys_write+0x145/0x260 [ 83.693116][ T2044] ? xfd_validate_state+0x68/0x140 [ 83.698322][ T2044] ? __cfi_ksys_write+0x10/0x10 [ 83.703241][ T2044] ? __kasan_check_write+0x18/0x20 [ 83.708452][ T2044] ? fpregs_restore_userregs+0x11c/0x260 [ 83.714145][ T2044] __x64_sys_write+0x7f/0x90 [ 83.718848][ T2044] x64_sys_call+0x271c/0x2ee0 [ 83.723663][ T2044] do_syscall_64+0x57/0xf0 [ 83.728155][ T2044] ? clear_bhb_loop+0x50/0xa0 [ 83.732902][ T2044] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 83.738887][ T2044] RIP: 0033:0x7fc29639f559 [ 83.743442][ T2044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.763271][ T2044] RSP: 002b:00007fc294dd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 83.771884][ T2044] RAX: ffffffffffffffda RBX: 00007fc296626090 RCX: 00007fc29639f559 [ 83.779940][ T2044] RDX: 000000000000febc RSI: 0000200000000280 RDI: 0000000000000007 [ 83.787997][ T2044] RBP: 00007fc296436b50 R08: 0000000000000000 R09: 0000000000000000 [ 83.796046][ T2044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.804052][ T2044] R13: 00007fc296626128 R14: 00007fc296626090 R15: 00007fff5fb9b228 [ 83.812084][ T2044] [ 83.815132][ T2044] ---[ end trace 0000000000000000 ]--- [ 83.820724][ T2044] SELinux: failed to load policy [ 84.075839][ T66] usb 5-1: USB disconnect, device number 8