last executing test programs: 1m22.733719339s ago: executing program 0 (id=229): socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) fsopen(&(0x7f0000000680)='sockfs\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000000)={0x24, @long={0x2403, 0x1}}, 0x14) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) syz_ublk_add_dev(r0, r3, r4, r5, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) socket$netlink(0x10, 0x3, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_ublk_setup_queues(r2, r7, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r2}}], 0x16, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r6, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 1m22.629996804s ago: executing program 0 (id=230): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) eventfd2(0x10001, 0x80800) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000300)=@arm64={0x5, 0x3, 0x4, '\x00', 0x10}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m22.538177188s ago: executing program 0 (id=234): r0 = fsopen(&(0x7f0000000280)='binder\x00', 0x1) r1 = fsmount(r0, 0x1, 0x80) creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='erofs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0xc7, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='rootcontext', &(0x7f0000000300)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd970xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) write$cgroup_pid(r0, &(0x7f0000000100)=r1, 0x12) 1m19.474229022s ago: executing program 0 (id=260): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x80}, 0x80) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000040)={0x2f, 0x1}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000f0000000c0007800800020001000014"], 0x20}}, 0x0) setns(0xc9, 0x0) r10 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r10, &(0x7f0000000680)="4c00000012008fe11d15b9409b849ac00a00a57000000000030038c88cc055c5ac27a6c5b068d0bf46d3234525dbfee9bdb94235235ba351d1ec0cffc8792cd80063a5c3aa7b8b7d2778b097", 0x4c, 0x0, 0x0, 0x0) openat$make_it_fail(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/3\x00') preadv(r10, &(0x7f0000001800)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000280)=""/222, 0x5c}], 0x2, 0xffffff00, 0xaec) 1m18.581253784s ago: executing program 0 (id=270): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400000fe0001090244000101000000090400021202060000052406000005240000000b240f0100000000000004000009b306bd457924bbeb090582020002000000090503020002000000"], 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f0000003900)={0x1, [{0x3, 0x8, 0x0, &(0x7f0000000040)='J'}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x0, 0x0, 0x5b2, 0x0}, {0x3, 0x0, 0x486, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x5, 0x0, 0x4, 0x0}, {0x0, 0x0, 0xde56353, 0x0}, {0x3, 0x0, 0x100, 0x0}, {0x2, 0x0, 0x15, 0x0}, {0x1, 0x0, 0xa9c, 0x0}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000134000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="0f20c035000000200f22c0b900090000b82f470000ba00000000b9e30a0000b80b000000ba000000000f30c46389224ed502652e46f7beed00000064f3400f09f028860080000066430f3804bc3ded00000047d03d00200000643e420f01c364673e0fc7ae00000000", 0x69}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000380), 0x14dd82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x12, r5, 0xe853000) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) listen(r1, 0x2400000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22']) accept4$inet(r1, 0x0, 0x0, 0x80800) 49.182492394s ago: executing program 32 (id=270): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400000fe0001090244000101000000090400021202060000052406000005240000000b240f0100000000000004000009b306bd457924bbeb090582020002000000090503020002000000"], 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f0000003900)={0x1, [{0x3, 0x8, 0x0, &(0x7f0000000040)='J'}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x0, 0x0, 0x5b2, 0x0}, {0x3, 0x0, 0x486, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x5, 0x0, 0x4, 0x0}, {0x0, 0x0, 0xde56353, 0x0}, {0x3, 0x0, 0x100, 0x0}, {0x2, 0x0, 0x15, 0x0}, {0x1, 0x0, 0xa9c, 0x0}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000134000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="0f20c035000000200f22c0b900090000b82f470000ba00000000b9e30a0000b80b000000ba000000000f30c46389224ed502652e46f7beed00000064f3400f09f028860080000066430f3804bc3ded00000047d03d00200000643e420f01c364673e0fc7ae00000000", 0x69}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000380), 0x14dd82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x12, r5, 0xe853000) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) listen(r1, 0x2400000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22']) accept4$inet(r1, 0x0, 0x0, 0x80800) 47.344334429s ago: executing program 4 (id=421): io_setup(0x66, &(0x7f0000000400)=0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xe, r1, &(0x7f00000000c0)='-', 0x1, 0x0, 0x0, 0x4}]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0xb904, 0x0, 0x0, 0x0, 0x6, 0x3, 0xfc, 0x0, 0xa, 0x0, 0x0, 0xa7a, 0xff, 0x0, 0xffeffeff}}) 47.183971907s ago: executing program 4 (id=424): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001240)={0x2f, {0x100000, 0xf8000000, 0xaf5a, 0x3, 0x8, 0x4}}) mount$bpf(0x0, 0x0, 0x0, 0x5805040, &(0x7f0000000080)=ANY=[]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) 47.165473318s ago: executing program 4 (id=425): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 46.743692338s ago: executing program 4 (id=426): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x800, 0x0) read$FUSE(r1, &(0x7f0000003240)={0x2020}, 0x2020) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000940)="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", 0x559, r3) mlock(&(0x7f0000123000/0x2000)=nil, 0x2000) r5 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/154, 0x9a}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000080)={r4, 0x0, 0x500}, &(0x7f0000000280)={'enc=', 'pkcs1', ' hash=', {'sha224\x00'}}, 0x0, 0x0) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f000075c000/0x3000)=nil, 0x6, &(0x7f0000000480)=[{0x0, 0xbe63, 0x9}, {0x1, 0x75b2d368, 0x8}], 0x2, 0x8000e5}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x7, 0x7800, 0xdf02, 0x4, {{0xe, 0x4, 0x2, 0x7, 0x38, 0x67, 0x0, 0x3, 0x29, 0x0, @multicast1, @multicast2, {[@cipso={0x86, 0x23, 0x2, [{0x2, 0xc, "e53233129ae7a58e1bf3"}, {0x0, 0x11, "f53cf173d156b3b625bf4e0f53a057"}]}]}}}}}) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) (async) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x800, 0x0) (async) read$FUSE(r1, &(0x7f0000003240)={0x2020}, 0x2020) (async) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) (async) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) (async) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000940)="308205553082033da00302010202147398ea982dd02ca8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7c00000000000000004c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bcff806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r3) (async) mlock(&(0x7f0000123000/0x2000)=nil, 0x2000) (async) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/154, 0x9a}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) (async) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000080)={r4, 0x0, 0x500}, &(0x7f0000000280)={'enc=', 'pkcs1', ' hash=', {'sha224\x00'}}, 0x0, 0x0) (async) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f000075c000/0x3000)=nil, 0x6, &(0x7f0000000480)=[{0x0, 0xbe63, 0x9}, {0x1, 0x75b2d368, 0x8}], 0x2, 0x8000e5}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x7, 0x7800, 0xdf02, 0x4, {{0xe, 0x4, 0x2, 0x7, 0x38, 0x67, 0x0, 0x3, 0x29, 0x0, @multicast1, @multicast2, {[@cipso={0x86, 0x23, 0x2, [{0x2, 0xc, "e53233129ae7a58e1bf3"}, {0x0, 0x11, "f53cf173d156b3b625bf4e0f53a057"}]}]}}}}}) (async) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) (async) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) (async) 46.597780575s ago: executing program 4 (id=427): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x400000010, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) accept$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYRES16=r1], 0x48}}, 0x40800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002f40)=ANY=[@ANYBLOB="240600001a0001002abd7000000000000a00fc003a2a5e247b00000008061b800106dc"], 0x624}], 0x1, 0x0, 0x0, 0x20400}, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) 46.353307406s ago: executing program 4 (id=429): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0xffffff94, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb8}, 0x80) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)) (async) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000740)={0x2, 0x1, 0x18, 0x1b, 0xaf, &(0x7f0000000340)="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"}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) (async) mount$tmpfs(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x204080, &(0x7f0000000300)=ANY=[@ANYBLOB='size=G']) (async) memfd_secret(0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) munlockall() (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async, rerun: 32) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) wait4(0x0, &(0x7f0000000440), 0x40000000, 0x0) (async) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020320001900000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e207f00000100000000000000000400040000000000feffffffffffffff0000000000000000000000000000000002000100000000000000000600000000030005000000000002004e21ffffffff00a849000000000005000700000000000a004e2200000005fc01000000000000000000000000000000000000000000000200", @ANYRESDEC], 0xc8}}, 0x0) 46.262121491s ago: executing program 33 (id=429): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0xffffff94, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb8}, 0x80) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)) (async) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000740)={0x2, 0x1, 0x18, 0x1b, 0xaf, &(0x7f0000000340)="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"}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) (async) mount$tmpfs(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x204080, &(0x7f0000000300)=ANY=[@ANYBLOB='size=G']) (async) memfd_secret(0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) munlockall() (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async, rerun: 32) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) wait4(0x0, &(0x7f0000000440), 0x40000000, 0x0) (async) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020320001900000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e207f00000100000000000000000400040000000000feffffffffffffff0000000000000000000000000000000002000100000000000000000600000000030005000000000002004e21ffffffff00a849000000000005000700000000000a004e2200000005fc01000000000000000000000000000000000000000000000200", @ANYRESDEC], 0xc8}}, 0x0) 3.733773894s ago: executing program 1 (id=731): r0 = socket$unix(0x1, 0x4, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000000c0)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1e) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x4, 0xffffffff, 0x1000, &(0x7f0000fff000/0x1000)=nil}) memfd_create(&(0x7f0000000000)='.::\x00', 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000040)={0x0, &(0x7f0000000040)}, 0x10) 3.733610285s ago: executing program 1 (id=732): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="89070404", 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 3.688839377s ago: executing program 1 (id=733): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) futex(0x0, 0x6, 0x3d, 0x0, 0x0, 0x2) (async) futex(0x0, 0x6, 0x3d, 0x0, 0x0, 0x2) futex(0x0, 0x7, 0xfffffffe, 0x0, 0x0, 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 3.054884586s ago: executing program 1 (id=744): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r3, &(0x7f0000000000)="240000001e005f0214f9f407000904001f0000000000000000000000080004000100000d", 0xfe3d) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x1f, &(0x7f0000000080)=[@cr4={0x1, 0x9e2}], 0x1) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r4, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x92000000200480c0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB="0c001a800800020004000180"], 0x2c}], 0x1, 0x0, 0x17451e44e82d1fbe}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 2.938672182s ago: executing program 1 (id=745): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1a5240, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0xd000, 0x200000, &(0x7f0000200000/0x200000)=nil}) setns(r1, 0x24020000) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000040)={0xfff, 0x9, 0xf, 0x7}) r5 = syz_clone(0xb2a62000, 0x0, 0xffffffffffffff13, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) move_mount(0xffffffffffffff9c, &(0x7f0000001100)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x174) 2.845554086s ago: executing program 1 (id=746): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x15}, {0x6}]}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r1) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESOCT=r1], 0x28}}, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) write(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x763, 0x2031, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x50, 0x16, {0x8, 0xb, 0x0, 0x2, 0x1, 0x21, 0x30, 0x20}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x85, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x3, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0xbe1}}}}}}}}]}}, 0x0) (async) mremap(&(0x7f0000001000/0x3000)=nil, 0x4000, 0x3021, 0x3, &(0x7f0000ffd000/0x3000)=nil) (async) getrlimit(0x7, &(0x7f0000000000)) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x8a, &(0x7f0000000080)={0x42, 0x1}, 0x10) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$pid(0x2, 0x0, 0x2004) (async) sync() 2.353174259s ago: executing program 2 (id=750): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f0000000240)={0x2, 0x4e01, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00D ', @ANYRESHEX], 0x38}, 0xfffd}], 0x1, 0x46000) 2.306927981s ago: executing program 2 (id=751): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 2.209862776s ago: executing program 2 (id=752): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='status\x00') mount(&(0x7f00000000c0)=@md0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='ncpfs\x00', 0xa00420, &(0x7f0000000180)='].^}}^@.\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000580)=""/85, 0x55}], 0x1, 0x0, 0xffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x3, 0x3, 0xfec00000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x3, 0xfffffff7}) 2.200669756s ago: executing program 2 (id=753): r0 = socket(0x840000000002, 0x3, 0xff) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x5, 0x10, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0xb9, 0x6, {0x7, 0x25, 0x1, 0x4, 0xff, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xf, 0x7, 0x3c, {0x7, 0x25, 0x1, 0x4, 0x9, 0x7}}}}}}}}]}}, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000100)=0xbffe) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x0, 0x34, 0x1, '\x00', 0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x2, 0x4e21, @multicast2=0xe0000001}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000140)="9745edff0000000001008cc5ffffffff", 0x10}, {&(0x7f0000000040)="74145fda", 0x4}], 0x2, &(0x7f0000000840)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010102}}}], 0x20}, 0x4004804) 1.70060171s ago: executing program 3 (id=756): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000001840)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2400cc00}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) socket$key(0xf, 0x3, 0x2) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="020100030a"], 0x50}}, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f00000001c0)=[{0x5, 0x4, 0x81, 0x5}]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x20, 0x0, 0xfffffffd, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x22, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 1.547622237s ago: executing program 3 (id=757): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x0, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xffffffffffffff75, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x2, 0x0, 0x17}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x0, 0x1, 0x12}, @flat=@binder={0x73622a85, 0x200, 0x2}}, &(0x7f00000003c0)={0x0, 0x20, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) 1.429854062s ago: executing program 3 (id=758): unshare(0x22020600) (async) unshare(0x60000600) syz_usb_connect$uac2(0x0, 0x9a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000200c201810400001020301090288000301018008080b0001010c200609040000000101200009240103000428000408240a05004000020c24030207030503050303001424060305", @ANYRESHEX], &(0x7f00000001c0)={0x0, 0x0, 0x37, 0x0}) 1.168484105s ago: executing program 5 (id=761): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) fcntl$setlease(r3, 0x400, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x100843, 0x98) 1.168270855s ago: executing program 5 (id=762): r0 = socket$inet(0x2, 0x7, 0xfffffffd) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x83, 0x2}]}}}], 0x18}}], 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x720, 0xfdef) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) socket(0x1f, 0xe, 0x9) bind$can_raw(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000180)=0x4, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000007800068014000500fc0200000000000000000000000000010c000380060001000000000014000400fc0200000000"], 0x10c}}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xa8}}, 0x0) 1.148211946s ago: executing program 2 (id=763): prctl$PR_MCE_KILL_GET(0x3d) prctl$PR_MCE_KILL_GET(0x22) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='+=0', 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x402002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) bind$inet6(r4, &(0x7f0000000380)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x157}, 0x1c) ioctl$KVM_RESET_DIRTY_RINGS(r2, 0xaec7) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000440)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r10, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r10, 0x4080aebf, &(0x7f0000000700)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) ioctl$KVM_GET_NESTED_STATE(r10, 0xc080aebe, &(0x7f0000002780)=@svm={0x108, 0x1, 0x1080, {0xffff1000, 0x6}, {"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"}}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x1f, &(0x7f0000000080)=[@cr4={0x1, 0x9e2}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) r11 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x21) syz_kvm_setup_syzos_vm$x86(r11, &(0x7f0000bff000/0x400000)=nil) 1.134229886s ago: executing program 5 (id=764): setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0xa70d6000) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00000b9000/0x400000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 977.473954ms ago: executing program 2 (id=765): r0 = syz_usb_connect$uac1(0x5, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000088205a30040000102030109026000030108809b0904efff00010100000a240101000a0002010209040100000102000009040101010102000009050109"], 0x0) (async) r1 = syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000340)=ANY=[@ANYBLOB="120110030000004082054c00400001020301090296000301053009080b00010107208c0904000000010120000924010040041d000708240a0001ff23000c2403020703000400070081090401000001022000090401010101022000090501090002030b040825010000400400090402000001022000090402010701022000092402020400cc1c051024010201000400000008b8000000030905820908004006030825018203f30600b84302d9e20d526324d4cf"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000700)={0x2c, 0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_connect(0x6, 0x944, &(0x7f0000000a40)={{0x12, 0x1, 0x310, 0xf2, 0xd6, 0xc5, 0xff, 0x1b3d, 0x195, 0xba97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x932, 0x4, 0x4, 0x3, 0x90, 0x1, "", [{{0x9, 0x4, 0x14, 0xfb, 0xb, 0xed, 0x7c, 0x99, 0x4, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, '=5('}, {0x5, 0x24, 0x0, 0x1b4}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0xf, 0xbc9, 0x45}, {0x6, 0x24, 0x1a, 0x100, 0xd}, [@network_terminal={0x7, 0x24, 0xa, 0x3, 0xfe, 0xfe, 0xa9}, @country_functional={0xa, 0x24, 0x7, 0x5, 0x9e, [0xb2a, 0x1]}, @country_functional={0x8, 0x24, 0x7, 0x6, 0x1, [0x9]}, @mbim={0xc, 0x24, 0x1b, 0xc, 0x7fff, 0x5, 0x6, 0x8, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x791}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x4, 0xa}]}, @uac_control={{0xa, 0x24, 0x1, 0x7, 0x3f}, [@feature_unit={0xb, 0x24, 0x6, 0x5, 0x2, 0x2, [0x1, 0x5], 0xe}, @selector_unit={0xb, 0x24, 0x5, 0x1, 0x6, "4d9450bdf033"}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x6, 0x2, [0x5, 0x7], 0xfb}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x5, "d27b7e"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x205, 0x4, 0x66, 0x3, 0x9, 0x6}]}], [{{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x3, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x9d, 0x8}]}}, {{0x9, 0x5, 0xe, 0x8, 0x608, 0x6, 0xfb, 0x55, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0x7}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0xc, 0xf0, 0x4}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x5, 0x4, 0x3, [@generic={0x37, 0xf, "ec49e2acf6f0980624629763aaeb4087b6fb70c266a4ec70ad82a4368f1a6aa05be72ee762a8b52bf13b2493625ff806f02e720fc6"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x401}]}}, {{0x9, 0x5, 0x2, 0x4, 0x40, 0x5, 0x8, 0x80, [@generic={0xc, 0xc, "ee1eb598c39a29ca534b"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x20, 0x81, 0x7, 0x5}}, {{0x9, 0x5, 0xc, 0x1, 0x8, 0xb1, 0xa, 0x7, [@generic={0xcd, 0x23, "16be9e825605716689150cb3787fe3bcf151e78f6baca98d86036d69c778733213356e2badfe39e8a05f6005e67e2c31f611c15f8825c50a146724d62e565ffaf154e34215410d3fb9a7dd79be31aed1987976205d480281664c2bf25be52b5541c48035e5b3b0842fd10c8334692253def54ec9f0252bde6bdf42316096e1061db22c17f2398e1c8a383869507eb687b1b70a689563753d099817bec19cd0724e603821cfef2d2395b98ef0ae0394ff0a07ed64923576a05a444de0114d33d1f4b753207a098814426fbf"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x2, 0x4, 0x3}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0xee, 0xd, 0xf, [@generic={0x1d, 0x0, "c5dd29bc6b99ec9b4365f5baaef611af402c35891161ea066843bf"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x40, 0x3, 0x6, 0x2}}, {{0x9, 0x5, 0x9, 0x5, 0x8, 0xc, 0x8, 0x1, [@generic={0x2, 0x7}, @generic={0x5, 0x42, "a62717"}]}}]}}, {{0x9, 0x4, 0x26, 0x80, 0x5, 0xff, 0x4, 0x72, 0x7, [], [{{0x9, 0x5, 0x6, 0x1, 0x10, 0x0, 0x1, 0x6, [@generic={0x57, 0x22, "faa4f6779ae7376c06bac4e4a8c83f349579a9e3445c9f9cea733b75af95d01f259f37b5229a24926f7394886cf306829ff651ed1e8336d4a5d6c754f95384990528c83141e060551b7757e2291f06e3cc20ed4bc3"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0xd}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x1, 0xf, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xa5, 0x8}]}}, {{0x9, 0x5, 0xc, 0x10, 0x7bf, 0x0, 0x9, 0x10}}, {{0x9, 0x5, 0x4, 0x3, 0x3ff, 0x86, 0x8, 0x2, [@generic={0x41, 0x13, "8a8be31d4b1033eb82aa1b5974af0e73a4eff2c068bf1315d7e5fdf5453fa9465247a6c0d67deabc2623aca4c62e4c58d0dca9a04b8610629c088b524908c4"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xbf}]}}, {{0x9, 0x5, 0xd, 0x2, 0x20, 0x8, 0xf, 0x6, [@generic={0x101, 0x5, "c486a66a5c3797774f9124fae87e8f7fe0bd0dc3367002f879e40f28d97b28b5edf469b30052d4566457a7d5bfaa6f39b1996afaac7fe4521dbd7297aab94c6be951bdf0728054a914ff9971918417ad01e32a314b18f60356d891d11716665ce6d260cead0759de0eb77813ac14f3f7c0216db3c03e2f746994e2bf09c2250dec38b9897a9e9258f871ba62cf4fa74cae5ca9582dbda680793067378b10c6a4b52308c14a86e36af4c4bb09c05fafc78d9b0a198395ba3deff383c27d32675b64608b0ba32cd01ceda4a41267e50f4f265121223ac14ee2e1a88f5bee518bdcb9668cf624608969409faaa422c1e2279a84b014fce35cbc73446dff33abe8"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x4}]}}]}}, {{0x9, 0x4, 0x91, 0x7, 0x0, 0x73, 0xe9, 0x7a, 0x6}}, {{0x9, 0x4, 0xd1, 0x2, 0xe, 0xb5, 0x2, 0x77, 0xe, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x6, 0x75, 0x1002}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x5, 0x1, 0x7, 0xd, "6a13"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xf4, 0x2, 0x90, 0x3, "", "9702"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xe, 0x1, 0xfb, 0x81, "830e", "e415"}]}], [{{0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x91, 0x1, [@generic={0xb0, 0x7, "5ff0ae167954b98eb162b0935d5a2ce4cd2fd9354bbc9c24e1a7aa63d98c19a4788fe8db16c0d7b29d2a0fe33384991459b29565d21a5bec6f2712ba42b9698aada979fd30f8423c36552290bcef1d30be09fd05b95f0fc62f52f28bae965e2106dc7b3d1eb5438ae9425474753d77d1da4b30178e67aae3ac9f1505cd10e53af71ab47af90335c32a3e85e3f9e63b68d9821efc8e49d6e64e7bc6bcec2914143fe9a3ed714a50f16aaf9e747866"}, @generic={0x93, 0xe, "b1e44948518440793fc6982b87e319825c914381837058ef94bbbf98ec46a82e4368280083d8b5e14aae603a80ca686638cd33aada1997a4908cb6b311a931621dda1633f70faaaac27e71edd935c6834a899087671de95c6c9d3a2115bb03b20d43094ff4098ccf148fb41cd626e4a765f5519f4e2adc09f4503089568c903ac998fd240d79d7f840a3d5b9625df36e24"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x1, 0x7f, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x6}]}}, {{0x9, 0x5, 0x7, 0x0, 0x0, 0x8, 0x9, 0x6}}, {{0x9, 0x5, 0xa, 0x8, 0x40, 0x2b, 0xa, 0xb7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x3}]}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0xb2, 0x7, 0xe0}}, {{0x9, 0x5, 0x5, 0x2, 0x10, 0xf, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x7e}]}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x0, 0x4, 0x7, [@generic={0x29, 0x22, "bd188913bfc43aca3d6cac1984aad888669c1cb5f58a2a1c1e34b090f68399aa45615f71d96409"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x10, 0x3, 0x4e, 0x6, [@generic={0x6c, 0xe, "4a3e8be29c2b8ee7a032fd3f9df3f54d2493b8789434020b1418327acf226a68cad16827e62e0991e726df01c9102441e93bb4ac171fa1e9b8b74b702c329a0da484ae17c0f12056b69b1b40da0a2bcccc7e6fbe548be1e180eff84b0c6e045e2a8a45dbe2789f65bb3c"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x3, 0x41, 0xff, [@generic={0x4c, 0x1, "c832e3295b8a2086e2918df610a6b80577fd04789bebc06d4ec2a2b58077bdba225e440c2505486676bb282e3d6aa986c12e06634885478454cef313366e074426a0be3271f83c385f27"}, @generic={0x84, 0xd, "7d3697bd0c6fbe800128d5308454d72c289f84c3b9e2663504713804f883f1fdfa30e7f66e96816f8cc741f574c80ea30a9ebd02c2818d7d561b8ca2f44ca82cd81b584023b2adcf130b3d37288ee1f68671e9deac223b785af1ff9d4f9cc80bbbcf416bca622f0cc296df1d962cfc2e94225cb2fcd8e1049e029527e2e5b7619940"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x6, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0xfff}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x8, 0xc5, 0xe0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x7}, @generic={0x97, 0x23, "7cf3b67719a635781767f47ace003748e6052dca57495c256fe262d07d7bb4ac767b799063b59f24b473a5c5d25f757c534bef7831ca0191cc3e9c6698e7e142ffc72ce6d2a9fb85cd5f5dd89d63c571fc47b69c7a10b9f421c0ac022d8811721a7eda642b590028e71ee1b53d0d4c9e264d39ad089db18062085214877a67859dbd252d2aeeb9f002ace5039f3688f242eb77de97"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x200, 0x4, 0x6, 0x81, [@generic={0xba, 0x11, "eb77f7981a369c11890ace6e79458d64b5652834047e26e62b7f45b9c88f72384c3998f614967f0f5b0cad504a5f2e9b0213d2a4605ac5146d3734d11cbbae12d829b557b35869599e870ddc0609620dc1946cd36b7bdcdca3384f33bbadead778ca86dbcd6748397547cb6af2d1bf9e2a9acf354a44ab738d1029443a563652c86f1b3458c3ed7da965ed523a8d5e084d675900baea8a2adecf01cd34d61800cca1301b8209e4a2dd593f3ca5157af641bf7f795ea47a22"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x3d}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x4, 0x5, 0x8}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x9, 0x3, 0xfe}}]}}]}}]}}, &(0x7f00000015c0)={0xa, &(0x7f00000013c0)={0x1b, 0x6, 0x201, 0xd, 0x3, 0x14, 0x20, 0x3e}, 0xb, &(0x7f0000001400)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0xc0a}}, {0x8e, &(0x7f0000001500)=@string={0x8e, 0x3, "afbda26b118fb37359ec7febbfc65c69bc6b9e4baa51518e620606f25f3bd56f7dd062b866e1d98449d0367eda47912613fcba4d2e0e6eae2045cf545ee44cb63104316057e668c1afa41838148736484d612dff02c8229f7692f6abee35fbf2ef082fc2817f6c0ae45068af5ffa1be04cb8fc2dd102ae29385fbbf7f2506036d867fa514f40dd07bcb07ecd"}}]}) syz_usb_control_io$uac2(r1, 0x0, 0x0) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) (async) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000000)='smb3\x00', 0x2080, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) syz_open_procfs(r2, &(0x7f0000000040)='ns\x00') r4 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) (async) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) (async) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) (async) r6 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) (async) r7 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) (async) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r7, 0x0) (async) landlock_restrict_self(r7, 0x0) (async) landlock_restrict_self(r7, 0x0) (async) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r7, 0x0) (async) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r5, 0x0) (async) landlock_restrict_self(r5, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) 863.368739ms ago: executing program 5 (id=766): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001d00210000000000000000000700000005000000000000000a00020077a9c6f76f000000060005"], 0x30}}, 0x0) (async) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='cgroup\x00', 0x40, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/irq/irq_handler_entry/filter\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='name ~ \"!\"', 0xa) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f00000000c0)={0x6, 0x3, 0x5, 0x1fe, 0x19, '\b\x00'}) (async) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x2281, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x12) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x80) (async) faccessat2(r3, &(0x7f00000000c0)='./trace\x00', 0x0, 0x1300) 824.075831ms ago: executing program 5 (id=767): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x12480c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/split_huge_pages\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x2000000, 0x3, 0x11, 0xffffffffffffffff, 0x0) syz_usb_disconnect(r1) syz_usb_connect$printer(0x7, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0xc0085504, &(0x7f0000000180)=0x20017) 737.484655ms ago: executing program 5 (id=768): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x50) mkdirat(r0, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x30, 0x17, 0x7, {0x1e, './sys/class/net/dummy0/carrier'}}, 0x27) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x50b0c0, 0xa8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000000400)={0x2020}, 0x1f8c) vmsplice(r3, &(0x7f0000000540)=[{&(0x7f0000000180)="583d45e40e5f745567fa6f375327593534350352c60abb56b9109d704000478e7f9017b99a", 0x25}, {&(0x7f0000000340)="fd8b3f971eda08c56a2cd1c778ce92cf5e55cb21a788998c0fd888ec702ff2f5db00434e1666cb82bdffd51cee06592ccaab1072af281263178b444152763195", 0x40}, {&(0x7f0000000240)="bc062df26e8ae8df6fc920e28d804f7bfc270e7769ca577053104c7d5d167467142b2df02cf8aac77af6b7d59d86f2f73c129d0762e2bbd451b5142a8c30a25f849b9a55a8c260a9c2c7fcbc44ddc4082884f308e9be0ea538acfadb2b96d42f92306010db214acd2d4c2227039742ecabcd9b113a6fbd91435861874e8ea4f95a71a205dd159885dfa74c51c0886f1d57056324ba9c0bc39ba2c545a77138fb5a590f248f63414a1259796854bcde7579686df6a472b1ad6bf75cfdf23d71", 0xbf}, {&(0x7f0000000440)="0e78bfeadc9bd71149f9ccdfdfb45125a4df1d1cee71981442ada9af51dc5c248bab445af1849b7f9415ad8c6bcdcd4daad55b016f2ea96bc8a1fcd25cc1f6d5d2810b7004e891fbe0e86cc0318cf5c047646abfe12f1796d2be648f627f7d8439b379938f8cb985e6f8ae168e3c3dc65f206b31093592d034e88865e2091ac19c41820a3b1a8aa5344bffeae83812bfc06394d343d5a63b825d6d765cfe7cf7edb7639ed5b2ed2e6c2536d8c9bbaee7a5c72b72e8db1f814c94795990fe22082e2729e7bd6a3573d673add71ecd53091f2a0c42a5e77dda31797483dcef665c326b689dd5e17db0ea", 0xe9}], 0x4, 0xe) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) dup2(r2, r5) sendmmsg$unix(r5, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x4004080) setresgid(0xffffffffffffffff, 0xee01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x848, &(0x7f00000001c0)={[{@verity_require}, {@metacopy_off}]}) 664.061109ms ago: executing program 34 (id=768): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x50) mkdirat(r0, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x30, 0x17, 0x7, {0x1e, './sys/class/net/dummy0/carrier'}}, 0x27) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x50b0c0, 0xa8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000000400)={0x2020}, 0x1f8c) vmsplice(r3, &(0x7f0000000540)=[{&(0x7f0000000180)="583d45e40e5f745567fa6f375327593534350352c60abb56b9109d704000478e7f9017b99a", 0x25}, {&(0x7f0000000340)="fd8b3f971eda08c56a2cd1c778ce92cf5e55cb21a788998c0fd888ec702ff2f5db00434e1666cb82bdffd51cee06592ccaab1072af281263178b444152763195", 0x40}, {&(0x7f0000000240)="bc062df26e8ae8df6fc920e28d804f7bfc270e7769ca577053104c7d5d167467142b2df02cf8aac77af6b7d59d86f2f73c129d0762e2bbd451b5142a8c30a25f849b9a55a8c260a9c2c7fcbc44ddc4082884f308e9be0ea538acfadb2b96d42f92306010db214acd2d4c2227039742ecabcd9b113a6fbd91435861874e8ea4f95a71a205dd159885dfa74c51c0886f1d57056324ba9c0bc39ba2c545a77138fb5a590f248f63414a1259796854bcde7579686df6a472b1ad6bf75cfdf23d71", 0xbf}, {&(0x7f0000000440)="0e78bfeadc9bd71149f9ccdfdfb45125a4df1d1cee71981442ada9af51dc5c248bab445af1849b7f9415ad8c6bcdcd4daad55b016f2ea96bc8a1fcd25cc1f6d5d2810b7004e891fbe0e86cc0318cf5c047646abfe12f1796d2be648f627f7d8439b379938f8cb985e6f8ae168e3c3dc65f206b31093592d034e88865e2091ac19c41820a3b1a8aa5344bffeae83812bfc06394d343d5a63b825d6d765cfe7cf7edb7639ed5b2ed2e6c2536d8c9bbaee7a5c72b72e8db1f814c94795990fe22082e2729e7bd6a3573d673add71ecd53091f2a0c42a5e77dda31797483dcef665c326b689dd5e17db0ea", 0xe9}], 0x4, 0xe) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) dup2(r2, r5) sendmmsg$unix(r5, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x4004080) setresgid(0xffffffffffffffff, 0xee01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x848, &(0x7f00000001c0)={[{@verity_require}, {@metacopy_off}]}) 141.952513ms ago: executing program 3 (id=770): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f0000000240)={0x2, 0x4e01, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00D ', @ANYRESHEX], 0x38}, 0x1000000}], 0x1, 0x46000) 72.947726ms ago: executing program 3 (id=771): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000000)=0x8, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') r3 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) setreuid(0x0, 0xee00) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r6, 0x8070ae9f, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x4b, 0x21, "4372070000001000476fb2940acfbe4c0e24fa98ddf306e50000b646376f385355"}}) r8 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r9 = syz_open_procfs(r3, &(0x7f0000000040)='ns\x00') readlinkat(r9, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00'}) pwrite64(r2, &(0x7f0000000140)="a8aff23cf87dd58e1831d54a01", 0xd, 0x10) 0s ago: executing program 3 (id=772): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000040)=0x2, 0x4) (async) close_range(r1, r1, 0x2) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x30080, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x254}) (async) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, &(0x7f0000000100)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) (async) r4 = fcntl$getown(r0, 0x9) kcmp(r3, r4, 0x3, r1, r1) (async) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f00000001c0), 0x4) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) (async) getsockopt$MRT6(r2, 0x29, 0xd0, &(0x7f0000000240), &(0x7f0000000280)=0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000002c0)=0x4) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r7, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc8c4}, 0x4084) (async) ioctl$NILFS_IOCTL_GET_BDESCS(r6, 0xc0186e87, &(0x7f0000000540)={&(0x7f0000000480)=[{0x7, 0x6, 0x2, 0x0, 0x10001}, {0x8, 0x5, 0x5, 0x5, 0x3}, {0x55, 0x5, 0x7, 0x7fffffffffffffff, 0x3}, {0x3, 0x2, 0x2, 0xf14f, 0xb600000}], 0x4, 0x28, 0x1, 0x2}) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000580), 0x400041, 0x0) ioctl$PPPIOCBRIDGECHAN(r9, 0x40047435, &(0x7f00000005c0)=0x7) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000600)={0x0, 0x0, 0x6, 0x0, '\x00', [{0x0, 0xfffffff8, 0x4, 0x9eb, 0x1ff, 0x5}, {0x2, 0x3, 0x2, 0x1, 0x8000000000000001, 0x7}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000840)=@v1={0x0, @aes128, 0x1, @desc2}) ioctl$XFS_IOC_GOINGDOWN(r5, 0x8004587d, &(0x7f0000000880)) (async) setsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f00000008c0)=0x1, 0x4) (async) ptrace$pokeuser(0x6, r3, 0x3, 0x5c72) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) (async) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000a40), 0x2000, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x28, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x200000c5) kernel console output (not intermixed with test programs): 2 comm="syz.2.347" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e61f9e159 code=0x0 [ 63.719144][ T1487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.727887][ T1487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.739515][ T1487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.748902][ T1487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.796880][ T394] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 63.817987][ T394] usb 2-1: device descriptor read/8, error -71 [ 63.947954][ T394] usb 2-1: device descriptor read/8, error -71 [ 63.956848][ T31] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 64.057000][ T394] usb usb2-port1: unable to enumerate USB device [ 64.116845][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 64.137939][ T31] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 64.156829][ T31] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 64.186843][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 64.193482][ T31] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 64.202547][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.211786][ T31] usb 4-1: config 0 descriptor?? [ 64.419467][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 64.425498][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 64.435923][ T36] audit: type=1400 audit(1790175947.720:370): avc: denied { lock } for pid=1489 comm="syz.2.349" path="socket:[13259]" dev="sockfs" ino=13259 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.436196][ T31] usb 4-1: USB disconnect, device number 15 [ 64.560366][ T1493] binder: Bad value for 'max' [ 64.576947][ T1495] netlink: 5 bytes leftover after parsing attributes in process `syz.2.351'. [ 64.598869][ T1497] tipc: Can't bind to reserved service type 0 [ 64.810701][ T1514] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 64.932348][ T36] audit: type=1400 audit(1790175948.220:371): avc: denied { write } for pid=1518 comm="syz.3.359" path="socket:[14528]" dev="sockfs" ino=14528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.970739][ T1521] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.000703][ T1523] netlink: 172 bytes leftover after parsing attributes in process `syz.3.361'. [ 65.266873][ T31] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 65.396912][ T31] usb 4-1: device descriptor read/64, error -71 [ 65.636953][ T31] usb 4-1: device descriptor read/64, error -71 [ 65.876881][ T31] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 66.006884][ T31] usb 4-1: device descriptor read/64, error -71 [ 66.246852][ T31] usb 4-1: device descriptor read/64, error -71 [ 66.356920][ T31] usb usb4-port1: attempt power cycle [ 66.449085][ T1552] usb usb8: usbfs: process 1552 (syz.1.369) did not claim interface 0 before use [ 66.498856][ T36] audit: type=1400 audit(1790175949.790:372): avc: denied { watch watch_reads } for pid=1553 comm="syz.1.370" path="/111/file1" dev="tmpfs" ino=673 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.571918][ T36] audit: type=1400 audit(1790175949.860:373): avc: denied { watch_reads } for pid=1557 comm="syz.2.372" path="/78" dev="tmpfs" ino=432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.605493][ T1560] batadv_slave_0: entered promiscuous mode [ 66.696861][ T31] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 66.718203][ T31] usb 4-1: device descriptor read/8, error -71 [ 66.846917][ T45] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 66.855660][ T31] usb 4-1: device descriptor read/8, error -71 [ 66.996846][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 67.003590][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 67.012019][ T45] usb 3-1: config 8 has an invalid interface number: 237 but max is 0 [ 67.020239][ T45] usb 3-1: config 8 has no interface number 0 [ 67.026317][ T45] usb 3-1: too many endpoints for config 8 interface 237 altsetting 201: 139, using maximum allowed: 30 [ 67.037582][ T45] usb 3-1: config 8 interface 237 altsetting 201 has 0 endpoint descriptors, different from the interface descriptor's value: 139 [ 67.052303][ T45] usb 3-1: config 8 interface 237 has no altsetting 0 [ 67.060994][ T45] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=4e.fe [ 67.070131][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.078334][ T45] usb 3-1: Product: syz [ 67.082871][ T45] usb 3-1: Manufacturer: syz [ 67.087622][ T45] usb 3-1: SerialNumber: syz [ 67.106845][ T31] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 67.127898][ T31] usb 4-1: device descriptor read/8, error -71 [ 67.139275][ T36] audit: type=1400 audit(1790175950.430:374): avc: denied { append } for pid=1563 comm="syz.1.375" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 67.190625][ T1566] syzkaller0: entered promiscuous mode [ 67.196169][ T1566] syzkaller0: entered allmulticast mode [ 67.259066][ T31] usb 4-1: device descriptor read/8, error -71 [ 67.294661][ T1559] batadv_slave_0: left promiscuous mode [ 67.300942][ T45] usb_ehset_test 3-1:8.237: probe with driver usb_ehset_test failed with error -32 [ 67.311520][ T45] usb 3-1: USB disconnect, device number 15 [ 67.367071][ T31] usb usb4-port1: unable to enumerate USB device [ 67.586872][ T1579] cgroup: fork rejected by pids controller in /syz1 [ 67.930949][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 67.930970][ T36] audit: type=1400 audit(1790175951.220:376): avc: denied { create } for pid=1616 comm="syz.2.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 67.960213][ T36] audit: type=1400 audit(1790175951.250:377): avc: denied { sys_admin } for pid=1616 comm="syz.2.382" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 69.094365][ T36] audit: type=1400 audit(1806953395.409:378): avc: denied { bind } for pid=1670 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.272147][ T45] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 69.456824][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 69.463427][ T45] usb 2-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 69.474336][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 51, changing to 7 [ 69.485453][ T45] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 69.497938][ T45] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 69.509297][ T45] usb 2-1: language id specifier not provided by device, defaulting to English [ 69.520029][ T45] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 69.529388][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.537607][ T45] usb 2-1: Product: ċ„â­•â€żîżŻáĦ€áŽ•í–¸ïĉĦ랺ĉ•—ëħ‚ğâ§ħĉ´’䔑î€èŒà˘‘ĉżâşĵ䉐ëİŻî‹•ìŻ°î†ĵê³ç€ŞïƒŞï‘ĉı›é‚ĵ聅ë“ħç„ŽáŻ˜ê„ì­ħ췂駋–­è”´ï°•éĴ鸘èžğꋚá›Ğċ‡ıĦ遐ċżâœ•â§Ĵ­ìİäĥĤ–Ĵ험ᢖĉƒ–èĴœċƒè‘ıĉ£Œż”âšŸïµżéœĴêħşí‡–è”żíƒ”ìş›ìÇ§ä²ëµé°àĞİàıµêİĤä²´ëŞ‰à¨ĦĉŠ¸äŻ°ë—Ä‚ċˆîˆáš–ĉŽ°É½í™–ïıĥğïż£à·àĴċħ­èĦ—쨜â·Ĥ৤ä‡á…ş [ 69.570488][ T45] usb 2-1: Manufacturer: ⠉ [ 69.575163][ T45] usb 2-1: SerialNumber: ᠉ [ 69.794824][ T45] usb 2-1: USB disconnect, device number 22 [ 69.829075][ T1148] udevd[1148]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 84.036728][ T36] audit: type=1400 audit(1806953410.339:379): avc: denied { mounton } for pid=1682 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 84.065303][ T1684] capability: warning: `syz.2.398' uses 32-bit capabilities (legacy support in use) [ 84.116987][ T36] audit: type=1400 audit(1806953410.439:380): avc: denied { read } for pid=1688 comm="syz.3.401" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 84.146396][ T1682] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.153833][ T1682] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.157062][ T36] audit: type=1400 audit(1806953410.469:381): avc: denied { open } for pid=1688 comm="syz.3.401" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 84.162582][ T1682] bridge_slave_0: entered allmulticast mode [ 84.191586][ T1682] bridge_slave_0: entered promiscuous mode [ 84.201069][ T1682] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.208342][ T1682] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.215537][ T1682] bridge_slave_1: entered allmulticast mode [ 84.221960][ T1682] bridge_slave_1: entered promiscuous mode [ 84.281014][ T1682] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.288133][ T1682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.295419][ T1682] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.302490][ T1682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.325727][ T1003] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.333492][ T1003] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.343871][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.350972][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.360749][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.367847][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.395490][ T1682] veth0_vlan: entered promiscuous mode [ 84.407380][ T1682] veth1_macvtap: entered promiscuous mode [ 84.428023][ T36] audit: type=1400 audit(1806953410.749:382): avc: denied { mounton } for pid=1682 comm="syz-executor" path="/root/syzkaller.kJRIun/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 84.485731][ T1697] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 84.566596][ T1702] ŞŞŞŞŞŞ: renamed from vlan0 (while UP) [ 84.791274][ T36] audit: type=1400 audit(1806953411.109:383): avc: denied { getopt } for pid=1713 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.976824][ T45] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 85.056875][ T394] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 85.159564][ T45] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 85.176863][ T45] usb 5-1: can't read configurations, error -71 [ 85.186853][ T394] usb 3-1: device descriptor read/64, error -71 [ 85.329967][ T36] audit: type=1400 audit(1806953411.649:384): avc: denied { read append } for pid=1740 comm="syz.1.416" name="usbmon2" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 85.332866][ T1741] support for cryptoloop has been removed. Use dm-crypt instead. [ 85.353873][ T36] audit: type=1400 audit(1806953411.649:385): avc: denied { open } for pid=1740 comm="syz.1.416" path="/dev/usbmon2" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 85.386370][ T36] audit: type=1400 audit(1806953411.679:386): avc: denied { ioctl } for pid=1740 comm="syz.1.416" path="/dev/usbmon2" dev="devtmpfs" ino=96 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 85.446932][ T394] usb 3-1: device descriptor read/64, error -71 [ 85.567341][ T1751] netlink: 24 bytes leftover after parsing attributes in process `syz.3.418'. [ 85.616846][ T472] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 85.696877][ T394] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 85.771099][ T472] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 253, changing to 7 [ 85.788912][ T472] usb 2-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 85.802291][ T472] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.816813][ T472] usb 2-1: Product: syz [ 85.826836][ T472] usb 2-1: Manufacturer: syz [ 85.836805][ T472] usb 2-1: SerialNumber: syz [ 85.846856][ T394] usb 3-1: device descriptor read/64, error -71 [ 85.908652][ T1766] devpts: called with bogus options [ 86.066901][ T472] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 86.085650][ T472] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 86.096872][ T394] usb 3-1: device descriptor read/64, error -71 [ 86.107574][ T472] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 86.139164][ T472] usb 2-1: USB disconnect, device number 23 [ 86.165908][ T1771] udevd[1771]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 86.227048][ T394] usb usb3-port1: attempt power cycle [ 86.387552][ T36] audit: type=1400 audit(1806953412.709:387): avc: denied { ioctl } for pid=1772 comm="syz.4.426" path="/9/dir0/per_cpu/cpu0/trace_pipe" dev="tracefs" ino=60 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 86.414742][ T36] audit: type=1400 audit(1806953412.719:388): avc: denied { mounton } for pid=1772 comm="syz.4.426" path="/9/dir0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 86.576899][ T394] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 86.607850][ T394] usb 3-1: device descriptor read/8, error -71 [ 86.663099][ T1000] bridge_slave_1: left allmulticast mode [ 86.668947][ T1000] bridge_slave_1: left promiscuous mode [ 86.687152][ T1000] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.694924][ T1000] bridge_slave_0: left allmulticast mode [ 86.716853][ T1000] bridge_slave_0: left promiscuous mode [ 86.722584][ T1000] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.748354][ T394] usb 3-1: device descriptor read/8, error -71 [ 86.941031][ T1000] veth1_macvtap: left promiscuous mode [ 86.946755][ T1000] veth0_vlan: left promiscuous mode [ 86.997903][ T394] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 87.039213][ T394] usb 3-1: device descriptor read/8, error -71 [ 87.112613][ T1788] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.119836][ T1788] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.127194][ T1788] bridge_slave_0: entered allmulticast mode [ 87.134502][ T1788] bridge_slave_0: entered promiscuous mode [ 87.149290][ T1788] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.156383][ T1788] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.167735][ T1795] random: crng reseeded on system resumption [ 87.177797][ T394] usb 3-1: device descriptor read/8, error -71 [ 87.186867][ T1788] bridge_slave_1: entered allmulticast mode [ 87.193156][ T1788] bridge_slave_1: entered promiscuous mode [ 87.266209][ T1788] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.273428][ T1788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.280805][ T1788] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.287910][ T1788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.290441][ T394] usb usb3-port1: unable to enumerate USB device [ 87.315608][ T1003] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.325933][ T1003] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.337998][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.345132][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.354293][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.361393][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.389355][ T1788] veth0_vlan: entered promiscuous mode [ 87.401328][ T1788] veth1_macvtap: entered promiscuous mode [ 87.496854][ T45] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 87.647637][ T45] usb 2-1: not running at top speed; connect to a high speed hub [ 87.656033][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.666467][ T45] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 87.675599][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.685898][ T45] usb 2-1: Found UVC 1.00 device (046d:0825) [ 87.693217][ T45] usb 2-1: No streaming interface found for terminal 2. [ 87.816958][ T394] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 87.887280][ T45] usb 2-1: USB disconnect, device number 24 [ 87.966912][ T394] usb 6-1: Using ep0 maxpacket: 32 [ 87.975458][ T394] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 87.983763][ T394] usb 6-1: config 0 has no interface number 0 [ 87.990113][ T394] usb 6-1: config 0 interface 184 has no altsetting 0 [ 87.998293][ T394] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 88.007733][ T394] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.016812][ T394] usb 6-1: Product: syz [ 88.021024][ T394] usb 6-1: Manufacturer: syz [ 88.025640][ T394] usb 6-1: SerialNumber: syz [ 88.031188][ T394] usb 6-1: config 0 descriptor?? [ 88.037208][ T394] smsc75xx v1.0.0 [ 88.639491][ T394] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 88.650610][ T394] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 88.676895][ T45] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 88.847832][ T45] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 88.858881][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.870061][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.880333][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 88.894242][ T45] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 88.903377][ T45] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 88.912850][ T45] usb 2-1: Manufacturer: syz [ 88.921145][ T45] usb 2-1: config 0 descriptor?? [ 88.966873][ T472] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 89.081311][ T394] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 89.092863][ T394] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 89.102657][ T394] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 89.112236][ T394] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 89.118722][ T472] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 60, changing to 9 [ 89.124995][ T394] usb 6-1: USB disconnect, device number 2 [ 89.140508][ T472] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.153525][ T472] usb 3-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 89.165351][ T472] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.174396][ T472] usb 3-1: config 0 descriptor?? [ 89.340953][ T45] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 89.348363][ T45] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 89.357186][ T45] appleir 0003:05AC:8243.0005: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 89.628414][ T1821] binder: Unknown parameter 'fsmagic' [ 89.785847][ T1818] SELinux: Context system_u:object_r:hald_keymap_exec_t:s0 is not valid (left unmapped). [ 89.796447][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 89.796464][ T36] audit: type=1400 audit(1806953416.109:395): avc: denied { relabelto } for pid=1817 comm="syz.2.440" name="file0" dev="tmpfs" ino=498 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 89.834860][ T36] audit: type=1400 audit(1806953416.149:396): avc: denied { associate } for pid=1817 comm="syz.2.440" name="file0" dev="tmpfs" ino=498 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 89.838300][ T472] usbhid 3-1:0.0: can't add hid device: -71 [ 89.894117][ T472] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 89.903143][ T472] usb 3-1: USB disconnect, device number 20 [ 89.966804][ T36] audit: type=1400 audit(1806953416.279:397): avc: denied { mount } for pid=1832 comm="syz.5.446" name="/" dev="pstore" ino=2564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 90.083121][ T1837] FAULT_INJECTION: forcing a failure. [ 90.083121][ T1837] name failslab, interval 1, probability 0, space 0, times 0 [ 90.111709][ T1837] CPU: 1 UID: 0 PID: 1837 Comm: syz.3.447 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 90.111772][ T1837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.111784][ T1837] Call Trace: [ 90.111790][ T1837] [ 90.111803][ T1837] __dump_stack+0x21/0x30 [ 90.111833][ T1837] dump_stack_lvl+0x140/0x1c0 [ 90.111856][ T1837] ? __cfi_dump_stack_lvl+0x10/0x10 [ 90.111881][ T1837] dump_stack+0x19/0x20 [ 90.111902][ T1837] should_fail_ex+0x3c2/0x510 [ 90.111923][ T1837] should_failslab+0xac/0x100 [ 90.111943][ T1837] __kmalloc_cache_noprof+0x41/0x470 [ 90.111961][ T1837] ? __list_lru_init+0xc0/0x480 [ 90.111981][ T1837] __list_lru_init+0xc0/0x480 [ 90.112026][ T1837] alloc_super+0x77e/0x950 [ 90.112060][ T1837] sget_fc+0x325/0xa70 [ 90.112092][ T1837] ? __cfi_set_anon_super_fc+0x10/0x10 [ 90.112108][ T1837] ? __cfi_fuse_fill_super+0x10/0x10 [ 90.112123][ T1837] get_tree_nodev+0x2e/0x170 [ 90.112137][ T1837] ? fuse_get_tree+0x2bc/0x640 [ 90.112151][ T1837] fuse_get_tree+0x2cb/0x640 [ 90.112166][ T1837] vfs_get_tree+0x9e/0x290 [ 90.112182][ T1837] do_new_mount+0x251/0xb40 [ 90.112198][ T1837] ? security_capable+0x44/0x130 [ 90.112218][ T1837] path_mount+0x66a/0xff0 [ 90.112233][ T1837] ? putname+0x113/0x150 [ 90.112251][ T1837] __se_sys_mount+0x2bf/0x480 [ 90.112269][ T1837] ? __x64_sys_mount+0xf0/0xf0 [ 90.112286][ T1837] ? __kasan_check_write+0x18/0x20 [ 90.112304][ T1837] ? fpregs_restore_userregs+0x11c/0x260 [ 90.112326][ T1837] __x64_sys_mount+0xc3/0xf0 [ 90.112343][ T1837] x64_sys_call+0x2021/0x2ee0 [ 90.112358][ T1837] do_syscall_64+0x57/0xf0 [ 90.112372][ T1837] ? clear_bhb_loop+0x50/0xa0 [ 90.112392][ T1837] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 90.112412][ T1837] RIP: 0033:0x7f0a6ab9e159 [ 90.112426][ T1837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.112440][ T1837] RSP: 002b:00007f0a6baca028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 90.112457][ T1837] RAX: ffffffffffffffda RBX: 00007f0a6ae25fa0 RCX: 00007f0a6ab9e159 [ 90.112469][ T1837] RDX: 0000200000000000 RSI: 0000200000002080 RDI: 0000000000000000 [ 90.112481][ T1837] RBP: 00007f0a6ac3506b R08: 0000200000000380 R09: 0000000000000000 [ 90.112492][ T1837] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.112501][ T1837] R13: 00007f0a6ae26038 R14: 00007f0a6ae25fa0 R15: 00007ffc713ed6b8 [ 90.112515][ T1837] [ 90.388174][ T36] audit: type=1400 audit(1806953416.699:398): avc: denied { unmount } for pid=1788 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 90.429203][ T1841] FAULT_INJECTION: forcing a failure. [ 90.429203][ T1841] name failslab, interval 1, probability 0, space 0, times 0 [ 90.442353][ T1841] CPU: 0 UID: 0 PID: 1841 Comm: syz.5.449 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 90.442392][ T1841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.442409][ T1841] Call Trace: [ 90.442418][ T1841] [ 90.442426][ T1841] __dump_stack+0x21/0x30 [ 90.442468][ T1841] dump_stack_lvl+0x140/0x1c0 [ 90.442502][ T1841] ? __cfi_dump_stack_lvl+0x10/0x10 [ 90.442540][ T1841] dump_stack+0x19/0x20 [ 90.442571][ T1841] should_fail_ex+0x3c2/0x510 [ 90.442601][ T1841] should_failslab+0xac/0x100 [ 90.442632][ T1841] kmem_cache_alloc_noprof+0x42/0x410 [ 90.442658][ T1841] ? alloc_empty_file+0xbf/0x270 [ 90.442690][ T1841] ? _raw_spin_unlock+0x45/0x60 [ 90.442714][ T1841] alloc_empty_file+0xbf/0x270 [ 90.442744][ T1841] ? _raw_spin_unlock+0x45/0x60 [ 90.442766][ T1841] alloc_file_pseudo+0x142/0x1f0 [ 90.442799][ T1841] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 90.442835][ T1841] sock_alloc_file+0xbe/0x2b0 [ 90.442860][ T1841] __sys_socket+0x14c/0x1c0 [ 90.442887][ T1841] __x64_sys_socket+0x7e/0x90 [ 90.442914][ T1841] x64_sys_call+0x2608/0x2ee0 [ 90.442935][ T1841] do_syscall_64+0x57/0xf0 [ 90.442957][ T1841] ? clear_bhb_loop+0x50/0xa0 [ 90.442987][ T1841] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 90.443015][ T1841] RIP: 0033:0x7f1cedb9e159 [ 90.443034][ T1841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.443055][ T1841] RSP: 002b:00007f1ceea8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 90.443081][ T1841] RAX: ffffffffffffffda RBX: 00007f1cede25fa0 RCX: 00007f1cedb9e159 [ 90.443099][ T1841] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 080000000000000a [ 90.443114][ T1841] RBP: 00007f1cedc3506b R08: 0000000000000000 R09: 0000000000000000 [ 90.443129][ T1841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.443144][ T1841] R13: 00007f1cede26038 R14: 00007f1cede25fa0 R15: 00007ffedacfbd88 [ 90.443164][ T1841] [ 90.587675][ T36] audit: type=1400 audit(1806953416.869:399): avc: denied { unlink } for pid=295 comm="syz-executor" name="file0" dev="tmpfs" ino=498 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 90.833228][ T36] audit: type=1400 audit(1806953417.149:400): avc: denied { map } for pid=1852 comm="syz.5.453" path="/12/dev/sda" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.836975][ T472] usb 2-1: reset high-speed USB device number 25 using dummy_hcd [ 91.209308][ T1870] FAULT_INJECTION: forcing a failure. [ 91.209308][ T1870] name failslab, interval 1, probability 0, space 0, times 0 [ 91.240842][ T1870] CPU: 1 UID: 0 PID: 1870 Comm: syz.5.457 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 91.240886][ T1870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.240901][ T1870] Call Trace: [ 91.240908][ T1870] [ 91.240918][ T1870] __dump_stack+0x21/0x30 [ 91.240959][ T1870] dump_stack_lvl+0x140/0x1c0 [ 91.240992][ T1870] ? __cfi_dump_stack_lvl+0x10/0x10 [ 91.241026][ T1870] ? __x64_sys_mount+0xc3/0xf0 [ 91.241054][ T1870] dump_stack+0x19/0x20 [ 91.241087][ T1870] should_fail_ex+0x3c2/0x510 [ 91.241118][ T1870] should_failslab+0xac/0x100 [ 91.241148][ T1870] __kmalloc_cache_node_noprof+0x46/0x430 [ 91.241175][ T1870] ? bdi_alloc+0x62/0x1d0 [ 91.241209][ T1870] bdi_alloc+0x62/0x1d0 [ 91.241244][ T1870] super_setup_bdi_name+0xbf/0x210 [ 91.241270][ T1870] ? _raw_spin_lock+0x92/0x120 [ 91.241293][ T1870] ? __cfi_super_setup_bdi_name+0x10/0x10 [ 91.241321][ T1870] ? _raw_spin_unlock+0x45/0x60 [ 91.241343][ T1870] ? fuse_dev_install+0x17a/0x1b0 [ 91.241376][ T1870] fuse_fill_super_common+0x6d1/0x1450 [ 91.241413][ T1870] ? __cfi_fuse_fill_super_common+0x10/0x10 [ 91.241446][ T1870] ? _raw_spin_lock+0x92/0x120 [ 91.241469][ T1870] ? __cfi__raw_spin_lock+0x10/0x10 [ 91.241492][ T1870] ? __kasan_check_write+0x18/0x20 [ 91.241516][ T1870] ? shrinker_register+0x162/0x220 [ 91.241543][ T1870] fuse_fill_super+0x71/0x250 [ 91.241565][ T1870] get_tree_nodev+0xcb/0x170 [ 91.241586][ T1870] ? __cfi_fuse_fill_super+0x10/0x10 [ 91.241610][ T1870] fuse_get_tree+0x2cb/0x640 [ 91.241632][ T1870] vfs_get_tree+0x9e/0x290 [ 91.241656][ T1870] do_new_mount+0x251/0xb40 [ 91.241681][ T1870] ? security_capable+0x44/0x130 [ 91.241719][ T1870] path_mount+0x66a/0xff0 [ 91.241744][ T1870] ? putname+0x113/0x150 [ 91.241772][ T1870] __se_sys_mount+0x2bf/0x480 [ 91.241799][ T1870] ? __x64_sys_mount+0xf0/0xf0 [ 91.241825][ T1870] ? __kasan_check_write+0x18/0x20 [ 91.241849][ T1870] ? fpregs_restore_userregs+0x11c/0x260 [ 91.241881][ T1870] __x64_sys_mount+0xc3/0xf0 [ 91.241906][ T1870] x64_sys_call+0x2021/0x2ee0 [ 91.241929][ T1870] do_syscall_64+0x57/0xf0 [ 91.241950][ T1870] ? clear_bhb_loop+0x50/0xa0 [ 91.241980][ T1870] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 91.242019][ T1870] RIP: 0033:0x7f1cedb9e159 [ 91.242039][ T1870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.242060][ T1870] RSP: 002b:00007f1ceea8b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 91.242086][ T1870] RAX: ffffffffffffffda RBX: 00007f1cede25fa0 RCX: 00007f1cedb9e159 [ 91.242103][ T1870] RDX: 0000200000000000 RSI: 0000200000002080 RDI: 0000000000000000 [ 91.242120][ T1870] RBP: 00007f1cedc3506b R08: 0000200000000380 R09: 0000000000000000 [ 91.242135][ T1870] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.242151][ T1870] R13: 00007f1cede26038 R14: 00007f1cede25fa0 R15: 00007ffedacfbd88 [ 91.242172][ T1870] [ 91.585316][ T31] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 91.747641][ T36] audit: type=1400 audit(1806953418.009:401): avc: denied { name_bind } for pid=1871 comm="syz.5.458" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 91.820846][ T36] audit: type=1400 audit(1806953418.039:402): avc: denied { create } for pid=1879 comm="syz.5.461" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 91.866833][ T36] audit: type=1400 audit(1806953418.039:403): avc: denied { write } for pid=1879 comm="syz.5.461" name="file0" dev="tmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 91.898495][ T36] audit: type=1400 audit(1806953418.069:404): avc: denied { unlink } for pid=1788 comm="syz-executor" name="file0" dev="tmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 92.018706][ T31] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.036878][ T31] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.056831][ T31] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.076805][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 92.087020][ T31] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 92.103912][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.117455][ T31] usb 4-1: config 0 descriptor?? [ 92.259446][ T394] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 92.307286][ T1241] usb 2-1: USB disconnect, device number 25 [ 92.417791][ T394] usb 3-1: config 1 has an invalid interface number: 7 but max is 2 [ 92.426786][ T394] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.437983][ T394] usb 3-1: config 1 has no interface number 2 [ 92.444237][ T394] usb 3-1: too many endpoints for config 1 interface 7 altsetting 1: 255, using maximum allowed: 30 [ 92.455657][ T394] usb 3-1: config 1 interface 7 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 92.469224][ T394] usb 3-1: config 1 interface 7 has no altsetting 0 [ 92.477405][ T394] usb 3-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 92.486593][ T394] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.497014][ T394] usb 3-1: Product: syz [ 92.502153][ T394] usb 3-1: Manufacturer: syz [ 92.507033][ T394] usb 3-1: SerialNumber: syz [ 92.524155][ T1908] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=1908 comm=syz.1.468 [ 92.538960][ T31] samsung 0003:0419:0600.0006: unbalanced collection at end of report description [ 92.548785][ T31] samsung 0003:0419:0600.0006: parse failed [ 92.554806][ T31] samsung 0003:0419:0600.0006: probe with driver samsung failed with error -22 [ 92.719029][ T394] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 92.735009][ T394] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 92.744747][ T456] usb 4-1: USB disconnect, device number 20 [ 92.746050][ T394] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 92.768462][ T394] usb 3-1: USB disconnect, device number 21 [ 92.806191][ T1771] udevd[1771]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 92.839467][ T1912] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.846571][ T1912] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.853810][ T1912] bridge_slave_0: entered allmulticast mode [ 92.860289][ T1912] bridge_slave_0: entered promiscuous mode [ 92.866997][ T1912] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.874030][ T1912] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.881159][ T1912] bridge_slave_1: entered allmulticast mode [ 92.887922][ T1912] bridge_slave_1: entered promiscuous mode [ 92.935198][ T1912] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.942308][ T1912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.949627][ T1912] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.956743][ T1912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.980558][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.988034][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.998291][ T632] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.005394][ T632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.014634][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.021790][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.051296][ T1912] veth0_vlan: entered promiscuous mode [ 93.066200][ T1912] veth1_macvtap: entered promiscuous mode [ 93.262254][ T1930] ŞŞŞŞŞŞ: renamed from vlan0 (while UP) [ 93.296750][ T1932] syzkaller0: entered promiscuous mode [ 93.323107][ T1932] syzkaller0: entered allmulticast mode [ 93.372813][ T1946] FAULT_INJECTION: forcing a failure. [ 93.372813][ T1946] name failslab, interval 1, probability 0, space 0, times 0 [ 93.385640][ T1946] CPU: 1 UID: 0 PID: 1946 Comm: syz.3.480 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 93.385677][ T1946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.385691][ T1946] Call Trace: [ 93.385704][ T1946] [ 93.385725][ T1946] __dump_stack+0x21/0x30 [ 93.385751][ T1946] dump_stack_lvl+0x140/0x1c0 [ 93.385773][ T1946] ? __cfi_dump_stack_lvl+0x10/0x10 [ 93.385797][ T1946] dump_stack+0x19/0x20 [ 93.385835][ T1946] should_fail_ex+0x3c2/0x510 [ 93.385868][ T1946] should_failslab+0xac/0x100 [ 93.385903][ T1946] kmem_cache_alloc_noprof+0x42/0x410 [ 93.385921][ T1946] ? __kasan_check_write+0x18/0x20 [ 93.385937][ T1946] ? skb_clone+0x21d/0x470 [ 93.385977][ T1946] ? __cfi__raw_read_lock_irqsave+0x10/0x10 [ 93.385995][ T1946] skb_clone+0x21d/0x470 [ 93.386017][ T1946] netlink_broadcast_filtered+0x691/0x11d0 [ 93.386042][ T1946] netlink_broadcast+0x3e/0x60 [ 93.386069][ T1946] kobject_uevent_net_broadcast+0x3de/0x5e0 [ 93.386088][ T1946] kobject_uevent_env+0x551/0x7e0 [ 93.386107][ T1946] kobject_uevent+0x21/0x40 [ 93.386124][ T1946] gadget_bind_driver+0x5e2/0x9c0 [ 93.386145][ T1946] ? __cfi_gadget_bind_driver+0x10/0x10 [ 93.386165][ T1946] really_probe+0x2e4/0x8b0 [ 93.386182][ T1946] __driver_probe_device+0x193/0x280 [ 93.386197][ T1946] driver_probe_device+0x54/0x3f0 [ 93.386213][ T1946] __driver_attach+0x422/0x5e0 [ 93.386227][ T1946] bus_for_each_dev+0x249/0x2d0 [ 93.386247][ T1946] ? __cfi___driver_attach+0x10/0x10 [ 93.386261][ T1946] ? __cfi_bus_for_each_dev+0x10/0x10 [ 93.386281][ T1946] ? __kasan_kmalloc+0x96/0xb0 [ 93.386300][ T1946] ? _raw_spin_unlock+0x45/0x60 [ 93.386315][ T1946] ? klist_add_tail+0x1dd/0x220 [ 93.386338][ T1946] driver_attach+0x46/0x50 [ 93.386352][ T1946] bus_add_driver+0x393/0x730 [ 93.386372][ T1946] driver_register+0x2b7/0x3c0 [ 93.386390][ T1946] usb_gadget_register_driver_owner+0xfc/0x270 [ 93.386409][ T1946] raw_ioctl+0x144c/0x37a0 [ 93.386426][ T1946] ? __cfi_raw_ioctl+0x10/0x10 [ 93.386440][ T1946] ? selinux_file_ioctl+0x732/0x1480 [ 93.386457][ T1946] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 93.386477][ T1946] ? __fget_files+0x2bc/0x330 [ 93.386498][ T1946] ? bpf_lsm_file_ioctl+0xd/0x20 [ 93.386519][ T1946] ? security_file_ioctl+0x3e/0x110 [ 93.386534][ T1946] ? __cfi_raw_ioctl+0x10/0x10 [ 93.386549][ T1946] __se_sys_ioctl+0x126/0x1b0 [ 93.386574][ T1946] __x64_sys_ioctl+0x7f/0xa0 [ 93.386594][ T1946] x64_sys_call+0x1878/0x2ee0 [ 93.386609][ T1946] do_syscall_64+0x57/0xf0 [ 93.386623][ T1946] ? clear_bhb_loop+0x50/0xa0 [ 93.386644][ T1946] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 93.386663][ T1946] RIP: 0033:0x7f0a6ab9ddeb [ 93.386677][ T1946] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 93.386690][ T1946] RSP: 002b:00007f0a6bac7f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.386708][ T1946] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f0a6ab9ddeb [ 93.386719][ T1946] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 93.386729][ T1946] RBP: 00007f0a6bac8fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 93.386739][ T1946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.386749][ T1946] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 93.386793][ T1946] [ 93.748449][ T1950] syz.1.481 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 93.846826][ T31] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 93.853538][ T1954] netlink: 5892 bytes leftover after parsing attributes in process `syz.1.482'. [ 93.999138][ T31] usb 4-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.42 [ 94.008328][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 94.016405][ T31] usb 4-1: Product: syz [ 94.020699][ T31] usb 4-1: Manufacturer: syz [ 94.058478][ T1963] overlayfs: failed to resolve './file0': -2 [ 94.089995][ T1959] SELinux: Context system_u:object_r:init_var_run_t:s0 is not valid (left unmapped). [ 94.246219][ T456] usb 4-1: USB disconnect, device number 21 [ 94.297577][ T1976] ŞŞŞŞŞŞ: renamed from vlan0 (while UP) [ 94.944875][ T36] kauditd_printk_skb: 520 callbacks suppressed [ 94.944895][ T36] audit: type=1400 audit(1806953421.259:925): avc: denied { create } for pid=1993 comm="syz.3.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 94.998991][ T456] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 95.166843][ T456] usb 3-1: device descriptor read/64, error -71 [ 95.186816][ T394] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 95.349015][ T2004] netlink: 112 bytes leftover after parsing attributes in process `syz.1.498'. [ 95.378011][ T394] usb 4-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 95.391052][ T394] usb 4-1: config 0 interface 0 has no altsetting 0 [ 95.397760][ T394] usb 4-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 95.407004][ T394] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.415771][ T394] usb 4-1: config 0 descriptor?? [ 95.424623][ T394] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 95.427739][ T456] usb 3-1: device descriptor read/64, error -71 [ 95.697350][ T456] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 95.826852][ T456] usb 3-1: device descriptor read/64, error -71 [ 95.926817][ T472] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 96.076922][ T456] usb 3-1: device descriptor read/64, error -71 [ 96.106825][ T472] usb 6-1: Using ep0 maxpacket: 8 [ 96.113350][ T472] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 209, changing to 7 [ 96.126253][ T472] usb 6-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 96.135525][ T472] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.143770][ T472] usb 6-1: Product: syz [ 96.148297][ T472] usb 6-1: Manufacturer: syz [ 96.152970][ T472] usb 6-1: SerialNumber: syz [ 96.197214][ T456] usb usb3-port1: attempt power cycle [ 96.296852][ T2018] rust_binder: 2017:2018 failed to claim space for a BINDER_TYPE_PTR (offset: 4240, limit: 4304, size: 18446744073709551607) [ 96.310244][ T2018] rust_binder: 2017:2018 error while translating object: EINVAL [ 96.318002][ T2018] rust_binder: Failure in copy_transaction_data: EINVAL [ 96.318031][ T2018] rust_binder: 2017:2018 transaction call to 2017:0 failed EINVAL, code 0 size 120-24 [ 96.335893][ T394] rust_binder: 2017: undelivered TRANSACTION_ERROR: 29201 [ 96.373081][ T2024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.505'. [ 96.388724][ T2025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.505'. [ 96.414353][ T36] audit: type=1400 audit(1806953422.729:926): avc: denied { remount } for pid=2008 comm="syz.5.500" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 96.480139][ T36] audit: type=1400 audit(1806953422.799:927): avc: denied { write } for pid=2030 comm="syz.1.507" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 96.536590][ T36] audit: type=1400 audit(1806953422.799:928): avc: denied { open } for pid=2030 comm="syz.1.507" path="/16/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 96.566937][ T456] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 96.576802][ T36] audit: type=1400 audit(1806953422.799:929): avc: denied { ioctl } for pid=2030 comm="syz.1.507" path="/16/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 96.609755][ T456] usb 3-1: device descriptor read/8, error -71 [ 96.747919][ T456] usb 3-1: device descriptor read/8, error -71 [ 97.006856][ T456] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 97.048245][ T456] usb 3-1: device descriptor read/8, error -71 [ 97.064791][ T2049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.083089][ T2049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.091247][ T2051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.099997][ T2051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.188012][ T456] usb 3-1: device descriptor read/8, error -71 [ 97.296812][ T394] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 97.297478][ T456] usb usb3-port1: unable to enumerate USB device [ 97.466820][ T394] usb 2-1: Using ep0 maxpacket: 8 [ 97.477564][ T394] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 97.485879][ T394] usb 2-1: config 179 has no interface number 0 [ 97.506819][ T394] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 97.518141][ T394] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 97.530370][ T394] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 97.542722][ T394] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 97.556266][ T394] usb 2-1: config 179 interface 65 has no altsetting 0 [ 97.563331][ T394] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 97.573092][ T394] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.584605][ T394] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input12 [ 97.627044][ T95] input input12: unable to receive magic message: -110 [ 97.634705][ T95] input input12: unable to receive magic message: -32 [ 97.795357][ T36] audit: type=1400 audit(1806953424.109:930): avc: denied { setopt } for pid=2054 comm="syz.2.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.957648][ T456] usb 4-1: USB disconnect, device number 22 [ 98.019790][ T2068] tipc: Started in network mode [ 98.027518][ T2068] tipc: Node identity 96f50c0c35d4, cluster identity 1 [ 98.034643][ T2068] tipc: Enabled bearer , priority 0 [ 98.042813][ T2073] tipc: Disabling bearer [ 98.050365][ T2070] netlink: 'syz.2.519': attribute type 1 has an invalid length. [ 98.058560][ T2070] netlink: 'syz.2.519': attribute type 2 has an invalid length. [ 98.187826][ T2085] kvm: emulating exchange as write [ 98.348377][ T36] audit: type=1400 audit(1806953424.669:931): avc: denied { setopt } for pid=2095 comm="syz.1.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.428175][ T456] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 98.577382][ T456] usb 4-1: Using ep0 maxpacket: 8 [ 98.583987][ T456] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 98.592464][ T456] usb 4-1: config 0 has no interface number 0 [ 98.600708][ T456] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 98.610206][ T456] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.618446][ T456] usb 4-1: Product: syz [ 98.622818][ T456] usb 4-1: Manufacturer: syz [ 98.627736][ T456] usb 4-1: SerialNumber: syz [ 98.633573][ T456] usb 4-1: config 0 descriptor?? [ 98.695497][ T472] usb 6-1: USB disconnect, device number 3 [ 98.706797][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 98.842228][ T456] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 98.851548][ T456] usb 4-1: No valid video chain found. [ 98.858148][ T456] usb 4-1: USB disconnect, device number 23 [ 98.875019][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 98.884171][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.897721][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 98.909584][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 98.919287][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.928730][ T10] usb 3-1: config 0 descriptor?? [ 99.097404][ T2126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.106220][ T2126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.510885][ T2129] IPv6: syztnl2: Disabled Multicast RS [ 99.796830][ T394] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 99.946833][ T394] usb 6-1: device descriptor read/64, error -71 [ 99.966839][ T415] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 100.136823][ T415] usb 4-1: Using ep0 maxpacket: 8 [ 100.143207][ T415] usb 4-1: config 1 has an invalid interface number: 250 but max is 2 [ 100.151647][ T415] usb 4-1: config 1 has an invalid descriptor of length 113, skipping remainder of the config [ 100.162090][ T415] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 100.171173][ T415] usb 4-1: config 1 has no interface number 1 [ 100.177464][ T415] usb 4-1: too many endpoints for config 1 interface 250 altsetting 78: 171, using maximum allowed: 30 [ 100.188742][ T394] usb 6-1: device descriptor read/64, error -71 [ 100.195134][ T415] usb 4-1: config 1 interface 250 altsetting 78 has 0 endpoint descriptors, different from the interface descriptor's value: 171 [ 100.208698][ T415] usb 4-1: config 1 interface 250 has no altsetting 0 [ 100.217068][ T415] usb 4-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 100.226350][ T415] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.234467][ T415] usb 4-1: Product: syz [ 100.238830][ T415] usb 4-1: Manufacturer: syz [ 100.243550][ T415] usb 4-1: SerialNumber: syz [ 100.457095][ T415] usb 4-1: USB disconnect, device number 24 [ 100.476815][ T394] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 100.626890][ T394] usb 6-1: device descriptor read/64, error -71 [ 100.876853][ T394] usb 6-1: device descriptor read/64, error -71 [ 101.006890][ T394] usb usb6-port1: attempt power cycle [ 101.206849][ T45] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 101.346852][ T394] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 101.368515][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.378944][ T394] usb 6-1: device descriptor read/8, error -71 [ 101.385725][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.395912][ T45] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 101.415276][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 101.423985][ T10] usb 3-1: USB disconnect, device number 26 [ 101.430125][ T45] usb 4-1: SerialNumber: syz [ 101.530295][ T394] usb 6-1: device descriptor read/8, error -71 [ 101.720783][ T45] usb 4-1: 0:2 : does not exist [ 101.728418][ T45] usb 4-1: USB disconnect, device number 25 [ 101.766833][ T10] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 101.786862][ T394] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 101.837705][ T394] usb 6-1: device descriptor read/8, error -71 [ 101.918423][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 101.927272][ T10] usb 3-1: config 5 has an invalid interface number: 114 but max is 2 [ 101.936035][ T10] usb 3-1: config 5 has an invalid interface descriptor of length 5, skipping [ 101.945168][ T10] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 3 [ 101.954454][ T10] usb 3-1: config 5 has no interface number 0 [ 101.962517][ T10] usb 3-1: Dual-Role OTG device on HNP port [ 101.969119][ T10] usb 3-1: New USB device found, idVendor=07d1, idProduct=3e02, bcdDevice=f1.49 [ 101.978382][ T394] usb 6-1: device descriptor read/8, error -71 [ 101.979199][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.992912][ T10] usb 3-1: Product: syz [ 101.997308][ T10] usb 3-1: Manufacturer: syz [ 102.001987][ T10] usb 3-1: SerialNumber: syz [ 102.087425][ T394] usb usb6-port1: unable to enumerate USB device [ 102.216896][ T10] usb 3-1: USB disconnect, device number 27 [ 102.257630][ T36] audit: type=1400 audit(1806953428.579:932): avc: denied { mounton } for pid=2148 comm="syz.3.546" path="/proc/433/task" dev="proc" ino=23583 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 102.570121][ T2165] FAULT_INJECTION: forcing a failure. [ 102.570121][ T2165] name failslab, interval 1, probability 0, space 0, times 0 [ 102.582952][ T2165] CPU: 1 UID: 0 PID: 2165 Comm: syz.5.550 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 102.582994][ T2165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.583011][ T2165] Call Trace: [ 102.583019][ T2165] [ 102.583027][ T2165] __dump_stack+0x21/0x30 [ 102.583068][ T2165] dump_stack_lvl+0x140/0x1c0 [ 102.583101][ T2165] ? __cfi_dump_stack_lvl+0x10/0x10 [ 102.583136][ T2165] ? selinux_kernfs_init_security+0x14b/0x4b0 [ 102.583164][ T2165] dump_stack+0x19/0x20 [ 102.583196][ T2165] should_fail_ex+0x3c2/0x510 [ 102.583235][ T2165] should_failslab+0xac/0x100 [ 102.583266][ T2165] kmem_cache_alloc_noprof+0x42/0x410 [ 102.583293][ T2165] ? __kernfs_new_node+0xf1/0x740 [ 102.583327][ T2165] __kernfs_new_node+0xf1/0x740 [ 102.583359][ T2165] ? down_write+0xee/0x2b0 [ 102.583391][ T2165] ? kernfs_new_node+0x280/0x280 [ 102.583420][ T2165] ? __kasan_check_write+0x18/0x20 [ 102.583445][ T2165] ? down_write+0xee/0x2b0 [ 102.583474][ T2165] ? __cfi_down_write+0x10/0x10 [ 102.583505][ T2165] ? __kasan_check_write+0x18/0x20 [ 102.583541][ T2165] kernfs_new_node+0x154/0x280 [ 102.583572][ T2165] __kernfs_create_file+0x52/0x280 [ 102.583617][ T2165] cgroup_addrm_files+0x775/0xac0 [ 102.583650][ T2165] ? trace_raw_output_cgroup_rstat+0x1f0/0x1f0 [ 102.583686][ T2165] ? __kasan_check_write+0x18/0x20 [ 102.583707][ T2165] ? _raw_spin_lock_irq+0x93/0x120 [ 102.583727][ T2165] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 102.583744][ T2165] css_populate_dir+0x2be/0x3d0 [ 102.583766][ T2165] cgroup_mkdir+0x124d/0x1600 [ 102.583794][ T2165] ? __cfi_cgroup_mkdir+0x10/0x10 [ 102.583819][ T2165] kernfs_iop_mkdir+0x1bb/0x2d0 [ 102.583848][ T2165] vfs_mkdir+0x58e/0x810 [ 102.583880][ T2165] do_mkdirat+0x240/0x530 [ 102.583910][ T2165] ? __cfi_do_mkdirat+0x10/0x10 [ 102.583940][ T2165] ? __kasan_check_write+0x18/0x20 [ 102.583962][ T2165] ? getname_flags+0x203/0x6b0 [ 102.583985][ T2165] ? __kasan_check_write+0x18/0x20 [ 102.584015][ T2165] __x64_sys_mkdirat+0x8b/0xa0 [ 102.584064][ T2165] x64_sys_call+0x2ba8/0x2ee0 [ 102.584105][ T2165] do_syscall_64+0x57/0xf0 [ 102.584132][ T2165] ? clear_bhb_loop+0x50/0xa0 [ 102.584163][ T2165] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 102.584197][ T2165] RIP: 0033:0x7f1cedb9e159 [ 102.584217][ T2165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.584245][ T2165] RSP: 002b:00007f1ceea8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 102.584272][ T2165] RAX: ffffffffffffffda RBX: 00007f1cede25fa0 RCX: 00007f1cedb9e159 [ 102.584290][ T2165] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 102.584308][ T2165] RBP: 00007f1cedc3506b R08: 0000000000000000 R09: 0000000000000000 [ 102.584323][ T2165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.584336][ T2165] R13: 00007f1cede26038 R14: 00007f1cede25fa0 R15: 00007ffedacfbd88 [ 102.584356][ T2165] [ 102.584390][ T2165] cgroup: cgroup_addrm_files: failed to add cgroup.controllers, err=-12 [ 102.966928][ T2173] FAULT_INJECTION: forcing a failure. [ 102.966928][ T2173] name failslab, interval 1, probability 0, space 0, times 0 [ 102.986379][ T2173] CPU: 0 UID: 0 PID: 2173 Comm: syz.5.554 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 102.986411][ T2173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.986424][ T2173] Call Trace: [ 102.986431][ T2173] [ 102.986439][ T2173] __dump_stack+0x21/0x30 [ 102.986475][ T2173] dump_stack_lvl+0x140/0x1c0 [ 102.986504][ T2173] ? __cfi_dump_stack_lvl+0x10/0x10 [ 102.986535][ T2173] dump_stack+0x19/0x20 [ 102.986562][ T2173] should_fail_ex+0x3c2/0x510 [ 102.986588][ T2173] should_failslab+0xac/0x100 [ 102.986616][ T2173] kmem_cache_alloc_node_noprof+0x45/0x420 [ 102.986640][ T2173] ? dup_task_struct+0xc1/0xd80 [ 102.986665][ T2173] ? kasan_save_alloc_info+0x3a/0x50 [ 102.986684][ T2173] ? __kasan_kmalloc+0x96/0xb0 [ 102.986711][ T2173] ? __kmalloc_cache_noprof+0x23c/0x470 [ 102.986736][ T2173] dup_task_struct+0xc1/0xd80 [ 102.986765][ T2173] ? __kasan_check_write+0x18/0x20 [ 102.986784][ T2173] ? _raw_spin_lock_irq+0x93/0x120 [ 102.986805][ T2173] ? copy_process+0x3350/0x3350 [ 102.986831][ T2173] ? __kasan_check_write+0x18/0x20 [ 102.986854][ T2173] copy_process+0x57c/0x3350 [ 102.986885][ T2173] ? kasan_save_alloc_info+0x3a/0x50 [ 102.986905][ T2173] ? __cfi_copy_process+0x10/0x10 [ 102.986931][ T2173] ? __kmalloc_cache_noprof+0x23c/0x470 [ 102.986954][ T2173] ? __kasan_check_write+0x18/0x20 [ 102.986975][ T2173] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 102.987001][ T2173] vhost_task_create+0x1f7/0x3f0 [ 102.987024][ T2173] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 102.987051][ T2173] ? __cfi_vhost_task_create+0x10/0x10 [ 102.987075][ T2173] ? __cfi_vhost_task_fn+0x10/0x10 [ 102.987096][ T2173] ? __kasan_check_write+0x18/0x20 [ 102.987117][ T2173] ? mutex_lock+0x97/0x1d0 [ 102.987142][ T2173] ? __cfi_mutex_lock+0x10/0x10 [ 102.987166][ T2173] ? kernel_text_address+0xa9/0xe0 [ 102.987204][ T2173] kvm_mmu_post_init_vm+0x161/0x300 [ 102.987236][ T2173] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 102.987264][ T2173] ? _parse_integer_limit+0x195/0x1e0 [ 102.987290][ T2173] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 102.987318][ T2173] ? kstrtoull+0x13b/0x1e0 [ 102.987341][ T2173] ? kstrtouint+0x78/0xf0 [ 102.987364][ T2173] ? ioctl_has_perm+0x1bc/0x500 [ 102.987388][ T2173] ? __asan_memcpy+0x5a/0x80 [ 102.987409][ T2173] ? ioctl_has_perm+0x408/0x500 [ 102.987430][ T2173] ? has_cap_mac_admin+0xd0/0xd0 [ 102.987452][ T2173] ? __kasan_check_write+0x18/0x20 [ 102.987473][ T2173] ? mutex_lock_killable+0x97/0x1d0 [ 102.987499][ T2173] ? __cfi_mutex_lock_killable+0x10/0x10 [ 102.987545][ T2173] ? proc_fail_nth_write+0x184/0x220 [ 102.987579][ T2173] kvm_vcpu_ioctl+0xa43/0x1000 [ 102.987602][ T2173] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 102.987623][ T2173] ? __cfi_vfs_write+0x10/0x10 [ 102.987646][ T2173] ? __kasan_check_write+0x18/0x20 [ 102.987669][ T2173] ? mutex_unlock+0x90/0x240 [ 102.987694][ T2173] ? __cfi_mutex_unlock+0x10/0x10 [ 102.987723][ T2173] ? __fget_files+0x2bc/0x330 [ 102.987749][ T2173] ? bpf_lsm_file_ioctl+0xd/0x20 [ 102.987777][ T2173] ? security_file_ioctl+0x3e/0x110 [ 102.987800][ T2173] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 102.987821][ T2173] __se_sys_ioctl+0x126/0x1b0 [ 102.987849][ T2173] __x64_sys_ioctl+0x7f/0xa0 [ 102.987875][ T2173] x64_sys_call+0x1878/0x2ee0 [ 102.987896][ T2173] do_syscall_64+0x57/0xf0 [ 102.987917][ T2173] ? clear_bhb_loop+0x50/0xa0 [ 102.987945][ T2173] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 102.987971][ T2173] RIP: 0033:0x7f1cedb9e159 [ 102.987989][ T2173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.988007][ T2173] RSP: 002b:00007f1ceea8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.988029][ T2173] RAX: ffffffffffffffda RBX: 00007f1cede25fa0 RCX: 00007f1cedb9e159 [ 102.988045][ T2173] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 102.988059][ T2173] RBP: 00007f1ceea8b090 R08: 0000000000000000 R09: 0000000000000000 [ 102.988073][ T2173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.988086][ T2173] R13: 00007f1cede26038 R14: 00007f1cede25fa0 R15: 00007ffedacfbd88 [ 102.988104][ T2173] [ 103.047007][ T45] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 103.216899][ T10] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 103.386982][ T45] usb 4-1: device descriptor read/64, error -71 [ 103.466896][ T2180] netlink: 20 bytes leftover after parsing attributes in process `syz.1.556'. [ 103.577236][ T10] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 103.596941][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 103.605871][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 103.626283][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.644367][ T10] usb 3-1: config 0 descriptor?? [ 103.656910][ T2178] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 103.706834][ T45] usb 4-1: device descriptor read/64, error -71 [ 103.865515][ T2178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.874492][ T2178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.895130][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 103.901921][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 103.916399][ T10] usb 3-1: USB disconnect, device number 28 [ 103.962297][ T45] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 103.975812][ T2208] FAULT_INJECTION: forcing a failure. [ 103.975812][ T2208] name failslab, interval 1, probability 0, space 0, times 0 [ 103.988871][ T2208] CPU: 0 UID: 0 PID: 2208 Comm: syz.1.566 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 103.988903][ T2208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.988915][ T2208] Call Trace: [ 103.988922][ T2208] [ 103.988929][ T2208] __dump_stack+0x21/0x30 [ 103.988961][ T2208] dump_stack_lvl+0x140/0x1c0 [ 103.988990][ T2208] ? __cfi_dump_stack_lvl+0x10/0x10 [ 103.989019][ T2208] dump_stack+0x19/0x20 [ 103.989045][ T2208] should_fail_ex+0x3c2/0x510 [ 103.989070][ T2208] should_failslab+0xac/0x100 [ 103.989114][ T2208] __kmalloc_cache_node_noprof+0x46/0x430 [ 103.989139][ T2208] ? __get_vm_area_node+0x150/0x390 [ 103.989170][ T2208] ? kasan_save_alloc_info+0x3a/0x50 [ 103.989190][ T2208] ? __kasan_slab_alloc+0x73/0x90 [ 103.989215][ T2208] ? kmem_cache_alloc_node_noprof+0x1ca/0x420 [ 103.989239][ T2208] __get_vm_area_node+0x150/0x390 [ 103.989271][ T2208] __vmalloc_node_range_noprof+0x340/0x1300 [ 103.989304][ T2208] ? copy_process+0x57c/0x3350 [ 103.989337][ T2208] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 103.989370][ T2208] ? kasan_save_alloc_info+0x3a/0x50 [ 103.989390][ T2208] ? __kasan_slab_alloc+0x73/0x90 [ 103.989416][ T2208] ? arch_dup_task_struct+0x5b/0xe0 [ 103.989448][ T2208] ? __asan_memcpy+0x5a/0x80 [ 103.989472][ T2208] dup_task_struct+0x5d6/0xd80 [ 103.989499][ T2208] ? copy_process+0x57c/0x3350 [ 103.989525][ T2208] ? _raw_spin_lock_irq+0x93/0x120 [ 103.989545][ T2208] ? copy_process+0x3350/0x3350 [ 103.989585][ T2208] ? __kasan_check_write+0x18/0x20 [ 103.989608][ T2208] copy_process+0x57c/0x3350 [ 103.989638][ T2208] ? kasan_save_alloc_info+0x3a/0x50 [ 103.989659][ T2208] ? __cfi_copy_process+0x10/0x10 [ 103.989687][ T2208] ? __kmalloc_cache_noprof+0x23c/0x470 [ 103.989710][ T2208] ? __kasan_check_write+0x18/0x20 [ 103.989731][ T2208] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 103.989757][ T2208] vhost_task_create+0x1f7/0x3f0 [ 103.989781][ T2208] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 103.989809][ T2208] ? __cfi_vhost_task_create+0x10/0x10 [ 103.989834][ T2208] ? __cfi_vhost_task_fn+0x10/0x10 [ 103.989856][ T2208] ? __kasan_check_write+0x18/0x20 [ 103.989876][ T2208] ? mutex_lock+0x97/0x1d0 [ 103.989901][ T2208] ? __cfi_mutex_lock+0x10/0x10 [ 103.989925][ T2208] ? kernel_text_address+0xa9/0xe0 [ 103.989957][ T2208] kvm_mmu_post_init_vm+0x161/0x300 [ 103.989989][ T2208] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 103.990020][ T2208] ? _parse_integer_limit+0x195/0x1e0 [ 103.990047][ T2208] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 103.990077][ T2208] ? kstrtoull+0x13b/0x1e0 [ 103.990101][ T2208] ? kstrtouint+0x78/0xf0 [ 103.990126][ T2208] ? ioctl_has_perm+0x1bc/0x500 [ 103.990150][ T2208] ? __asan_memcpy+0x5a/0x80 [ 103.990172][ T2208] ? ioctl_has_perm+0x408/0x500 [ 103.990196][ T2208] ? has_cap_mac_admin+0xd0/0xd0 [ 103.990218][ T2208] ? __kasan_check_write+0x18/0x20 [ 103.990240][ T2208] ? mutex_lock_killable+0x97/0x1d0 [ 103.990265][ T2208] ? __cfi_mutex_lock_killable+0x10/0x10 [ 103.990291][ T2208] ? proc_fail_nth_write+0x184/0x220 [ 103.990324][ T2208] kvm_vcpu_ioctl+0xa43/0x1000 [ 103.990346][ T2208] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 103.990368][ T2208] ? __cfi_vfs_write+0x10/0x10 [ 103.990400][ T2208] ? __kasan_check_write+0x18/0x20 [ 103.990420][ T2208] ? mutex_unlock+0x90/0x240 [ 103.990443][ T2208] ? __cfi_mutex_unlock+0x10/0x10 [ 103.990467][ T2208] ? __fget_files+0x2bc/0x330 [ 103.990490][ T2208] ? bpf_lsm_file_ioctl+0xd/0x20 [ 103.990516][ T2208] ? security_file_ioctl+0x3e/0x110 [ 103.990562][ T2208] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 103.990582][ T2208] __se_sys_ioctl+0x126/0x1b0 [ 103.990610][ T2208] __x64_sys_ioctl+0x7f/0xa0 [ 103.990636][ T2208] x64_sys_call+0x1878/0x2ee0 [ 103.990656][ T2208] do_syscall_64+0x57/0xf0 [ 103.990676][ T2208] ? clear_bhb_loop+0x50/0xa0 [ 103.990704][ T2208] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 103.990728][ T2208] RIP: 0033:0x7f9e21b9e159 [ 103.990746][ T2208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.990763][ T2208] RSP: 002b:00007f9e22998028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.990785][ T2208] RAX: ffffffffffffffda RBX: 00007f9e21e25fa0 RCX: 00007f9e21b9e159 [ 103.990802][ T2208] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 103.990814][ T2208] RBP: 00007f9e22998090 R08: 0000000000000000 R09: 0000000000000000 [ 103.990825][ T2208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.990837][ T2208] R13: 00007f9e21e26038 R14: 00007f9e21e25fa0 R15: 00007fffac239208 [ 103.990854][ T2208] [ 103.990864][ T2208] syz.1.566: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 104.126908][ T45] usb 4-1: device descriptor read/64, error -71 [ 104.132503][ T2208] ,cpuset= [ 104.397036][ T45] usb 4-1: device descriptor read/64, error -71 [ 104.398880][ T2208] syz1,mems_allowed=0 [ 104.474107][ T2208] CPU: 0 UID: 0 PID: 2208 Comm: syz.1.566 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 104.474135][ T2208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.474148][ T2208] Call Trace: [ 104.474156][ T2208] [ 104.474163][ T2208] __dump_stack+0x21/0x30 [ 104.474205][ T2208] dump_stack_lvl+0x140/0x1c0 [ 104.474234][ T2208] ? __cfi_dump_stack_lvl+0x10/0x10 [ 104.474265][ T2208] dump_stack+0x19/0x20 [ 104.474292][ T2208] warn_alloc+0x1e7/0x2c0 [ 104.474322][ T2208] ? __kasan_kmalloc+0x28/0xb0 [ 104.474348][ T2208] ? __cfi_warn_alloc+0x10/0x10 [ 104.474376][ T2208] ? __get_vm_area_node+0x150/0x390 [ 104.474405][ T2208] ? kasan_save_alloc_info+0x3a/0x50 [ 104.474426][ T2208] ? __get_vm_area_node+0x382/0x390 [ 104.474457][ T2208] __vmalloc_node_range_noprof+0x365/0x1300 [ 104.474494][ T2208] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 104.474526][ T2208] ? kasan_save_alloc_info+0x3a/0x50 [ 104.474546][ T2208] ? __kasan_slab_alloc+0x73/0x90 [ 104.474571][ T2208] ? arch_dup_task_struct+0x5b/0xe0 [ 104.474602][ T2208] ? __asan_memcpy+0x5a/0x80 [ 104.474624][ T2208] dup_task_struct+0x5d6/0xd80 [ 104.474650][ T2208] ? copy_process+0x57c/0x3350 [ 104.474677][ T2208] ? _raw_spin_lock_irq+0x93/0x120 [ 104.474697][ T2208] ? copy_process+0x3350/0x3350 [ 104.474722][ T2208] ? __kasan_check_write+0x18/0x20 [ 104.474742][ T2208] copy_process+0x57c/0x3350 [ 104.474770][ T2208] ? kasan_save_alloc_info+0x3a/0x50 [ 104.474789][ T2208] ? __cfi_copy_process+0x10/0x10 [ 104.474815][ T2208] ? __kmalloc_cache_noprof+0x23c/0x470 [ 104.474839][ T2208] ? __kasan_check_write+0x18/0x20 [ 104.474860][ T2208] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 104.474886][ T2208] vhost_task_create+0x1f7/0x3f0 [ 104.474908][ T2208] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 104.474934][ T2208] ? __cfi_vhost_task_create+0x10/0x10 [ 104.474956][ T2208] ? __cfi_vhost_task_fn+0x10/0x10 [ 104.474977][ T2208] ? __kasan_check_write+0x18/0x20 [ 104.474999][ T2208] ? mutex_lock+0x97/0x1d0 [ 104.475023][ T2208] ? __cfi_mutex_lock+0x10/0x10 [ 104.475047][ T2208] ? kernel_text_address+0xa9/0xe0 [ 104.475076][ T2208] kvm_mmu_post_init_vm+0x161/0x300 [ 104.475107][ T2208] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 104.475135][ T2208] ? _parse_integer_limit+0x195/0x1e0 [ 104.475160][ T2208] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 104.475197][ T2208] ? kstrtoull+0x13b/0x1e0 [ 104.475220][ T2208] ? kstrtouint+0x78/0xf0 [ 104.475242][ T2208] ? ioctl_has_perm+0x1bc/0x500 [ 104.475264][ T2208] ? __asan_memcpy+0x5a/0x80 [ 104.475286][ T2208] ? ioctl_has_perm+0x408/0x500 [ 104.475308][ T2208] ? has_cap_mac_admin+0xd0/0xd0 [ 104.475329][ T2208] ? __kasan_check_write+0x18/0x20 [ 104.475350][ T2208] ? mutex_lock_killable+0x97/0x1d0 [ 104.475375][ T2208] ? __cfi_mutex_lock_killable+0x10/0x10 [ 104.475400][ T2208] ? proc_fail_nth_write+0x184/0x220 [ 104.475433][ T2208] kvm_vcpu_ioctl+0xa43/0x1000 [ 104.475474][ T2208] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 104.475497][ T2208] ? __cfi_vfs_write+0x10/0x10 [ 104.475521][ T2208] ? __kasan_check_write+0x18/0x20 [ 104.475544][ T2208] ? mutex_unlock+0x90/0x240 [ 104.475569][ T2208] ? __cfi_mutex_unlock+0x10/0x10 [ 104.475598][ T2208] ? __fget_files+0x2bc/0x330 [ 104.475627][ T2208] ? bpf_lsm_file_ioctl+0xd/0x20 [ 104.475657][ T2208] ? security_file_ioctl+0x3e/0x110 [ 104.475681][ T2208] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 104.475703][ T2208] __se_sys_ioctl+0x126/0x1b0 [ 104.475733][ T2208] __x64_sys_ioctl+0x7f/0xa0 [ 104.475761][ T2208] x64_sys_call+0x1878/0x2ee0 [ 104.475783][ T2208] do_syscall_64+0x57/0xf0 [ 104.475804][ T2208] ? clear_bhb_loop+0x50/0xa0 [ 104.475833][ T2208] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 104.475860][ T2208] RIP: 0033:0x7f9e21b9e159 [ 104.475879][ T2208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.475898][ T2208] RSP: 002b:00007f9e22998028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.475922][ T2208] RAX: ffffffffffffffda RBX: 00007f9e21e25fa0 RCX: 00007f9e21b9e159 [ 104.475940][ T2208] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 104.475955][ T2208] RBP: 00007f9e22998090 R08: 0000000000000000 R09: 0000000000000000 [ 104.475970][ T2208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.475984][ T2208] R13: 00007f9e21e26038 R14: 00007f9e21e25fa0 R15: 00007fffac239208 [ 104.476005][ T2208] [ 104.476032][ T2208] Mem-Info: [ 104.517325][ T45] usb usb4-port1: attempt power cycle [ 104.544140][ T2208] active_anon:40550 inactive_anon:28 isolated_anon:0 [ 104.544140][ T2208] active_file:26484 inactive_file:2395 isolated_file:0 [ 104.544140][ T2208] unevictable:2048 dirty:237 writeback:0 [ 104.544140][ T2208] slab_reclaimable:7085 slab_unreclaimable:79282 [ 104.544140][ T2208] mapped:29591 shmem:33583 pagetables:992 [ 104.544140][ T2208] sec_pagetables:0 bounce:0 [ 104.544140][ T2208] kernel_misc_reclaimable:0 [ 104.544140][ T2208] free:1456410 free_pcp:1726 free_cma:0 [ 104.606933][ T36] audit: type=1326 audit(1806953430.919:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2210 comm="syz.2.568" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e61f9e159 code=0x0 [ 104.649917][ T2208] Node 0 active_anon:162100kB inactive_anon:112kB active_file:105936kB inactive_file:9580kB unevictable:8192kB isolated(anon):0kB isolated(file):0kB mapped:118364kB dirty:948kB writeback:0kB shmem:134332kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6844kB pagetables:4168kB sec_pagetables:0kB all_unreclaimable? no [ 104.663521][ T36] audit: type=1400 audit(1806953430.979:934): avc: denied { write } for pid=2210 comm="syz.2.568" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 104.685937][ T2208] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963376kB mlocked:0kB bounce:0kB free_pcp:5212kB local_pcp:5212kB free_cma:0kB [ 104.926887][ T45] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 104.965743][ T2208] lowmem_reserve[]: [ 105.009208][ T45] usb 4-1: device descriptor read/8, error -71 [ 105.051399][ T2208] 0 [ 105.092679][ T472] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 105.103096][ T2208] 3921 3921 [ 105.106945][ T2208] Normal free:2878584kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:162048kB inactive_anon:112kB active_file:105936kB inactive_file:9580kB unevictable:8192kB writepending:948kB present:5242880kB managed:4015864kB mlocked:8192kB bounce:0kB free_pcp:272kB local_pcp:32kB free_cma:0kB [ 105.138950][ T2208] lowmem_reserve[]: 0 0 0 [ 105.143388][ T2208] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 105.159180][ T2208] Normal: 228*4kB (UM) 891*8kB (UM) 613*16kB (UME) 86*32kB (UME) 115*64kB (UME) 78*128kB (UME) 43*256kB (UME) 14*512kB (UME) 6*1024kB (UM) 5*2048kB (UME) 685*4096kB (UM) = 2878264kB [ 105.177780][ T2208] 62478 total pagecache pages [ 105.182554][ T2208] 21 pages in swap cache [ 105.187075][ T2208] Free swap = 124516kB [ 105.191307][ T2208] Total swap = 124996kB [ 105.195524][ T2208] 2097051 pages RAM [ 105.199681][ T2208] 0 pages HighMem/MovableOnly [ 105.204419][ T2208] 352241 pages reserved [ 105.209968][ T2208] 0 pages cma reserved [ 105.217221][ T2208] Memory allocations: [ 105.218598][ T45] usb 4-1: device descriptor read/8, error -71 [ 105.221366][ T2208] 0 B 0 init/main.c:1477 func:do_initcalls [ 105.234979][ T2208] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 105.243446][ T2208] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 105.251327][ T2208] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 105.259328][ T472] usb 6-1: Using ep0 maxpacket: 16 [ 105.264719][ T2208] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 105.273012][ T2208] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 105.281975][ T2208] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 105.290178][ T472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.301276][ T472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.311101][ T472] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 105.324202][ T2208] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 105.332344][ T472] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 105.341478][ T2208] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 105.349495][ T472] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.357612][ T2208] 0 B 0 init/initramfs.c:101 func:find_link [ 105.366827][ T472] usb 6-1: config 0 descriptor?? [ 105.466973][ T45] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 105.497912][ T45] usb 4-1: device descriptor read/8, error -71 [ 105.592832][ T36] audit: type=1400 audit(1806953431.909:935): avc: denied { name_bind } for pid=2225 comm="syz.1.572" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 105.623317][ T2229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=2229 comm=syz.3.573 [ 105.639987][ T2229] netlink: 'syz.3.573': attribute type 11 has an invalid length. [ 105.646589][ T45] usb 4-1: device descriptor read/8, error -71 [ 105.666801][ T36] audit: type=1400 audit(1806953431.909:936): avc: denied { node_bind } for pid=2225 comm="syz.1.572" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 105.716798][ T36] audit: type=1400 audit(1806953431.929:937): avc: denied { mount } for pid=2227 comm="syz.3.573" name="/" dev="ramfs" ino=23914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 105.756923][ T45] usb usb4-port1: unable to enumerate USB device [ 105.769257][ T2239] netlink: 68 bytes leftover after parsing attributes in process `syz.1.576'. [ 105.787683][ T472] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 105.807125][ T472] microsoft 0003:045E:07DA.0007: unknown main item tag 0x1 [ 105.823381][ T472] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 105.841287][ T2239] netlink: 104 bytes leftover after parsing attributes in process `syz.1.576'. [ 105.852050][ T472] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 105.859831][ T472] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 105.872426][ T2239] kvm: pic: non byte write [ 105.876987][ T472] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 105.898078][ T472] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 105.905399][ T472] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 105.912855][ T472] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 105.921644][ T472] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 105.929191][ T472] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 105.936520][ T472] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 105.944152][ T472] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 105.968996][ T472] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 105.979104][ T472] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 105.986590][ T472] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 105.994171][ T472] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 106.002398][ T472] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 106.016586][ T472] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 106.026893][ T456] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 106.041571][ T472] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0007/input/input13 [ 106.054710][ T472] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 106.075819][ T472] usb 6-1: USB disconnect, device number 8 [ 106.082190][ T2252] rust_binder: Failed to allocate buffer. len:8192, is_oneway:true [ 106.082238][ T2252] rust_binder: Failure in copy_transaction_data: ENOSPC [ 106.090551][ T2252] rust_binder: 2251:2252 transaction async to 2251:0 failed ENOSPC, code 0 size 0-0 [ 106.114826][ T2252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.127045][ T2252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.135261][ T45] rust_binder: 2251: undelivered TRANSACTION_ERROR: 29201 [ 106.186820][ T456] usb 3-1: Using ep0 maxpacket: 16 [ 106.196907][ T456] usb 3-1: no configurations [ 106.201657][ T456] usb 3-1: can't read configurations, error -22 [ 106.346822][ T456] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 106.386837][ T520] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 106.526837][ T456] usb 3-1: Using ep0 maxpacket: 16 [ 106.532414][ T456] usb 3-1: no configurations [ 106.541165][ T456] usb 3-1: can't read configurations, error -22 [ 106.546936][ T520] usb 4-1: Using ep0 maxpacket: 16 [ 106.553682][ T520] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 106.557142][ T456] usb usb3-port1: attempt power cycle [ 106.566836][ T520] usb 4-1: config 1 has no interface number 0 [ 106.583551][ T520] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 106.603760][ T520] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 106.614024][ T520] usb 4-1: config 1 interface 105 has no altsetting 0 [ 106.622434][ T520] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 106.632211][ T520] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 106.664860][ T520] usb 4-1: Product: syz [ 106.669341][ T520] usb 4-1: Manufacturer: syz [ 106.673993][ T520] usb 4-1: SerialNumber: syz [ 106.680285][ T2254] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 106.687664][ T2254] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 106.729109][ T2262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.747730][ T2262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.890084][ T2274] FAULT_INJECTION: forcing a failure. [ 106.890084][ T2274] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 106.903346][ T2274] CPU: 1 UID: 0 PID: 2274 Comm: syz.5.589 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 106.903387][ T2274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.903402][ T2274] Call Trace: [ 106.903409][ T2274] [ 106.903418][ T2274] __dump_stack+0x21/0x30 [ 106.903459][ T2274] dump_stack_lvl+0x140/0x1c0 [ 106.903490][ T2274] ? __cfi_dump_stack_lvl+0x10/0x10 [ 106.903522][ T2274] ? check_stack_object+0x81/0x150 [ 106.903547][ T2274] ? __virt_addr_valid+0x2a1/0x370 [ 106.903576][ T2274] dump_stack+0x19/0x20 [ 106.903607][ T2274] should_fail_ex+0x3c2/0x510 [ 106.903638][ T2274] should_fail+0xf/0x20 [ 106.903665][ T2274] should_fail_usercopy+0x1e/0x30 [ 106.903695][ T2274] _copy_from_user+0x20/0xa0 [ 106.903729][ T2274] memdup_user+0x81/0x170 [ 106.903750][ T2274] ? strndup_user+0x40/0xd0 [ 106.903772][ T2274] strndup_user+0x6c/0xd0 [ 106.903793][ T2274] __se_sys_mount+0x9f/0x480 [ 106.903821][ T2274] ? __x64_sys_mount+0xf0/0xf0 [ 106.903848][ T2274] ? __kasan_check_write+0x18/0x20 [ 106.903874][ T2274] ? fpregs_restore_userregs+0x11c/0x260 [ 106.903904][ T2274] __x64_sys_mount+0xc3/0xf0 [ 106.903930][ T2274] x64_sys_call+0x2021/0x2ee0 [ 106.903952][ T2274] do_syscall_64+0x57/0xf0 [ 106.903986][ T2274] ? clear_bhb_loop+0x50/0xa0 [ 106.904019][ T2274] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 106.904050][ T2274] RIP: 0033:0x7f1cedb9e159 [ 106.904070][ T2274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.904089][ T2274] RSP: 002b:00007f1ceea8b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 106.904115][ T2274] RAX: ffffffffffffffda RBX: 00007f1cede25fa0 RCX: 00007f1cedb9e159 [ 106.904134][ T2274] RDX: 0000200000000380 RSI: 0000200000000240 RDI: 0000200000000300 [ 106.904151][ T2274] RBP: 00007f1cedc3506b R08: 00002000000002c0 R09: 0000000000000000 [ 106.904167][ T2274] R10: 0000000002305000 R11: 0000000000000246 R12: 0000000000000000 [ 106.904183][ T2274] R13: 00007f1cede26038 R14: 00007f1cede25fa0 R15: 00007ffedacfbd88 [ 106.904204][ T2274] [ 106.907641][ T456] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 107.124204][ T2254] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 107.138432][ T456] usb 3-1: Using ep0 maxpacket: 16 [ 107.143199][ T2254] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 107.149123][ T456] usb 3-1: no configurations [ 107.162162][ T456] usb 3-1: can't read configurations, error -22 [ 107.296810][ T456] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 107.337190][ T456] usb 3-1: Using ep0 maxpacket: 16 [ 107.342757][ T456] usb 3-1: no configurations [ 107.356798][ T456] usb 3-1: can't read configurations, error -22 [ 107.363237][ T456] usb usb3-port1: unable to enumerate USB device [ 107.370031][ T520] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 0 [ 107.406867][ T520] aqc111 4-1:1.105: probe with driver aqc111 failed with error -61 [ 107.456359][ T36] audit: type=1400 audit(1806953433.769:938): avc: denied { setopt } for pid=2280 comm="syz.5.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 107.543558][ T2291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.557197][ T2291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.936836][ T456] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 108.087989][ T456] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.106638][ T456] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 108.120425][ T456] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.128934][ T456] usb 6-1: Product: syz [ 108.133188][ T456] usb 6-1: Manufacturer: syz [ 108.138057][ T456] usb 6-1: SerialNumber: syz [ 108.144534][ T456] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 108.213983][ T2304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.222642][ T2304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.241900][ T2305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.250951][ T2305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.260240][ T2304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.268941][ T2304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.843550][ T36] audit: type=1400 audit(1806953435.159:939): avc: denied { write } for pid=2311 comm="syz.2.601" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 109.055370][ T2321] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32784 sclass=netlink_audit_socket pid=2321 comm=syz.1.604 [ 109.101833][ T2321] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32800 sclass=netlink_audit_socket pid=2321 comm=syz.1.604 [ 109.136019][ T2321] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32816 sclass=netlink_audit_socket pid=2321 comm=syz.1.604 [ 109.157036][ T2321] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32832 sclass=netlink_audit_socket pid=2321 comm=syz.1.604 [ 109.181426][ T2321] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32848 sclass=netlink_audit_socket pid=2321 comm=syz.1.604 [ 109.206842][ T2321] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32864 sclass=netlink_audit_socket pid=2321 comm=syz.1.604 [ 109.299008][ T456] usb 4-1: USB disconnect, device number 30 [ 109.643108][ T2343] netlink: 'syz.1.611': attribute type 30 has an invalid length. [ 109.829755][ T2357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.848676][ T36] audit: type=1400 audit(1806953436.169:940): avc: denied { write } for pid=2355 comm="syz.1.614" name="/" dev="incremental-fs" ino=316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.850218][ T2357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.887242][ T36] audit: type=1400 audit(1806953436.169:941): avc: denied { add_name } for pid=2355 comm="syz.1.614" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.909118][ T36] audit: type=1400 audit(1806953436.169:942): avc: denied { create } for pid=2355 comm="syz.1.614" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 109.941421][ T36] audit: type=1400 audit(1806953436.169:943): avc: denied { associate } for pid=2355 comm="syz.1.614" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 110.007497][ T2354] FAULT_INJECTION: forcing a failure. [ 110.007497][ T2354] name failslab, interval 1, probability 0, space 0, times 0 [ 110.020303][ T2354] CPU: 1 UID: 0 PID: 2354 Comm: syz.2.613 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 110.020342][ T2354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.020357][ T2354] Call Trace: [ 110.020369][ T2354] [ 110.020378][ T2354] __dump_stack+0x21/0x30 [ 110.020418][ T2354] dump_stack_lvl+0x140/0x1c0 [ 110.020451][ T2354] ? __cfi_dump_stack_lvl+0x10/0x10 [ 110.020484][ T2354] ? __cfi___netlink_kernel_create+0x10/0x10 [ 110.020518][ T2354] dump_stack+0x19/0x20 [ 110.020558][ T2354] should_fail_ex+0x3c2/0x510 [ 110.020607][ T2354] ? ops_init+0x81/0x5d0 [ 110.020632][ T2354] should_failslab+0xac/0x100 [ 110.020663][ T2354] __kmalloc_noprof+0x69/0x510 [ 110.020689][ T2354] ? ops_init+0x81/0x5d0 [ 110.020712][ T2354] ? __mutex_init+0xa6/0x1a0 [ 110.020748][ T2354] ops_init+0x81/0x5d0 [ 110.020771][ T2354] ? __kasan_check_write+0x18/0x20 [ 110.020795][ T2354] ? rwsem_read_trylock+0x275/0x5a0 [ 110.020862][ T2354] setup_net+0x227/0x9b0 [ 110.020898][ T2354] ? copy_net_ns+0xa20/0xa20 [ 110.020919][ T2354] ? down_read_killable+0x7f/0x100 [ 110.020951][ T2354] ? __cfi_down_read_killable+0x10/0x10 [ 110.020984][ T2354] copy_net_ns+0x4fc/0xa20 [ 110.021006][ T2354] create_new_namespaces+0x390/0x6f0 [ 110.021041][ T2354] unshare_nsproxy_namespaces+0x124/0x180 [ 110.021077][ T2354] ksys_unshare+0x4f9/0x920 [ 110.021111][ T2354] ? __cfi_ksys_unshare+0x10/0x10 [ 110.021142][ T2354] ? __kasan_check_write+0x18/0x20 [ 110.021166][ T2354] __x64_sys_unshare+0x3c/0x50 [ 110.021198][ T2354] x64_sys_call+0x2998/0x2ee0 [ 110.021220][ T2354] do_syscall_64+0x57/0xf0 [ 110.021242][ T2354] ? clear_bhb_loop+0x50/0xa0 [ 110.021272][ T2354] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 110.021300][ T2354] RIP: 0033:0x7f9e61f9e159 [ 110.021319][ T2354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.021340][ T2354] RSP: 002b:00007f9e62e6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 110.021365][ T2354] RAX: ffffffffffffffda RBX: 00007f9e62225fa0 RCX: 00007f9e61f9e159 [ 110.021382][ T2354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000600 [ 110.021397][ T2354] RBP: 00007f9e6203506b R08: 0000000000000000 R09: 0000000000000000 [ 110.021412][ T2354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.021425][ T2354] R13: 00007f9e62226038 R14: 00007f9e62225fa0 R15: 00007ffe4bf29a38 [ 110.021445][ T2354] [ 110.420195][ T36] audit: type=1326 audit(1806953436.739:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2364 comm="syz.2.616" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e61f9e159 code=0x0 [ 110.507118][ T2367] tipc: Started in network mode [ 110.512129][ T2367] tipc: Node identity 7f000001, cluster identity 4711 [ 110.519258][ T2367] tipc: New replicast peer: 127.0.0.1 [ 110.525481][ T2367] tipc: Enabled bearer , priority 10 [ 110.570546][ T2372] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 110.570918][ T36] audit: type=1400 audit(1806953436.889:945): avc: denied { remount } for pid=2371 comm="syz.1.619" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 110.576921][ T520] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 110.737791][ T520] usb 4-1: device descriptor read/64, error -71 [ 110.747312][ T394] usb 6-1: USB disconnect, device number 9 [ 110.827924][ T2386] tmpfs: Unknown parameter 'nodes' [ 110.827930][ T2387] tmpfs: Unknown parameter 'nodes' [ 110.961105][ T2391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.627'. [ 110.983519][ T2391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.993082][ T520] usb 4-1: device descriptor read/64, error -71 [ 110.999796][ T2391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.258489][ T520] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 111.406869][ T520] usb 4-1: device descriptor read/64, error -71 [ 111.636839][ T472] tipc: Node number set to 2130706433 [ 111.646849][ T520] usb 4-1: device descriptor read/64, error -71 [ 111.658670][ T2408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.667418][ T2408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.756990][ T520] usb usb4-port1: attempt power cycle [ 111.836825][ T423] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 111.966851][ T423] usb 6-1: device descriptor read/64, error -71 [ 112.106847][ T520] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 112.147873][ T520] usb 4-1: device descriptor read/8, error -71 [ 112.226827][ T423] usb 6-1: device descriptor read/64, error -71 [ 112.233172][ T456] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 112.277925][ T520] usb 4-1: device descriptor read/8, error -71 [ 112.406951][ T456] usb 3-1: Using ep0 maxpacket: 32 [ 112.427563][ T456] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.438536][ T456] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.448723][ T456] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 112.457956][ T456] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.466908][ T423] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 112.475029][ T456] usb 3-1: config 0 descriptor?? [ 112.526917][ T520] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 112.567927][ T520] usb 4-1: device descriptor read/8, error -71 [ 112.606841][ T423] usb 6-1: device descriptor read/64, error -71 [ 112.697818][ T520] usb 4-1: device descriptor read/8, error -71 [ 112.807130][ T520] usb usb4-port1: unable to enumerate USB device [ 112.856842][ T423] usb 6-1: device descriptor read/64, error -71 [ 112.884898][ T456] savu 0003:1E7D:2D5A.0008: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 112.966983][ T423] usb usb6-port1: attempt power cycle [ 113.316781][ T423] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 113.337874][ T423] usb 6-1: device descriptor read/8, error -71 [ 113.467853][ T423] usb 6-1: device descriptor read/8, error -71 [ 113.690270][ T456] smpboot: CPU 1 is now offline [ 113.716796][ T423] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 113.762196][ T423] usb 6-1: device descriptor read/8, error -71 [ 113.907766][ T423] usb 6-1: device descriptor read/8, error -71 [ 114.027897][ T423] usb usb6-port1: unable to enumerate USB device [ 114.616872][ T36] audit: type=1400 audit(1806953440.929:946): avc: denied { load_policy } for pid=2434 comm="syz.3.639" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 114.987955][ T2437] SELinux: policydb version 0 does not match my version range 15-33 [ 114.996090][ T2437] SELinux: failed to load policy [ 115.632394][ T423] usb 3-1: USB disconnect, device number 33 [ 116.390022][ T472] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 116.995853][ T472] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 117.039481][ T472] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.126987][ T423] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 117.167392][ T472] usb 4-1: can't set config #1, error -71 [ 117.207397][ T472] usb 4-1: USB disconnect, device number 35 [ 117.259996][ T2459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.290266][ T2461] random: crng reseeded on system resumption [ 117.309316][ T2459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.329725][ T423] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 117.366895][ T423] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 117.434710][ T423] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 117.466774][ T423] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 117.506202][ T423] usb 6-1: SerialNumber: syz [ 117.536596][ T2441] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 117.736799][ T66] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 117.747057][ T2441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.766452][ T2471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.799187][ T2441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.819560][ T2471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.847881][ T423] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 117.890233][ T423] usb 6-1: USB disconnect, device number 14 [ 117.897665][ T66] usb 4-1: device descriptor read/64, error -71 [ 117.927397][ T2478] netlink: 32 bytes leftover after parsing attributes in process `syz.2.653'. [ 117.958250][ T2480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.982276][ T2480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.992130][ T36] audit: type=1326 audit(1806953444.309:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2481 comm="syz.2.655" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e61f9e159 code=0x0 [ 118.030187][ T2480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.057034][ T2480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.176788][ T66] usb 4-1: device descriptor read/64, error -71 [ 118.416811][ T66] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 118.556784][ T66] usb 4-1: device descriptor read/64, error -71 [ 118.623598][ T36] audit: type=1400 audit(1806953444.939:948): avc: granted { setsecparam } for pid=2488 comm="syz.1.658" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 118.666824][ T472] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 118.704625][ T2492] overlayfs: conflicting options: nfs_export=on,index=off [ 118.720812][ T2492] overlayfs: failed to resolve './file1': -2 [ 118.736137][ T36] audit: type=1400 audit(1806953445.049:949): avc: denied { execute } for pid=2491 comm="syz.1.659" name="P" dev="tmpfs" ino=429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 118.816791][ T66] usb 4-1: device descriptor read/64, error -71 [ 118.836496][ T2495] syz.1.660: attempt to access beyond end of device [ 118.836496][ T2495] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 118.849346][ T472] usb 6-1: Using ep0 maxpacket: 32 [ 118.862884][ T472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.884227][ T2495] exFAT-fs (loop1): unable to read boot sector [ 118.890796][ T637] Bluetooth: hci0: Frame reassembly failed (-90) [ 118.898262][ T472] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.916799][ T2497] Bluetooth: hci0: Frame reassembly failed (-84) [ 118.923465][ T2495] exFAT-fs (loop1): failed to read boot sector [ 118.929781][ T66] usb usb4-port1: attempt power cycle [ 118.938061][ T472] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 118.959606][ T2495] exFAT-fs (loop1): failed to recognize exfat type [ 118.977081][ T472] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.991212][ T472] usb 6-1: config 0 descriptor?? [ 119.007227][ T472] hub 6-1:0.0: USB hub found [ 119.212886][ T2485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.221588][ T2485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.296816][ T66] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 119.327724][ T66] usb 4-1: device descriptor read/8, error -71 [ 119.437400][ T472] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 119.446693][ T472] usbhid 6-1:0.0: can't add hid device: -71 [ 119.455966][ T472] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 119.468099][ T66] usb 4-1: device descriptor read/8, error -71 [ 119.507112][ T472] usb 6-1: USB disconnect, device number 15 [ 119.746793][ T66] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 119.767720][ T66] usb 4-1: device descriptor read/8, error -71 [ 119.897746][ T66] usb 4-1: device descriptor read/8, error -71 [ 120.006909][ T66] usb usb4-port1: unable to enumerate USB device [ 120.033474][ T36] audit: type=1400 audit(1806953446.349:950): avc: denied { mounton } for pid=2508 comm="syz.5.664" path="/63/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 120.108847][ T36] audit: type=1400 audit(1806953446.429:951): avc: denied { lock } for pid=2508 comm="syz.5.664" path="socket:[27191]" dev="sockfs" ino=27191 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 120.222580][ T2517] tipc: Started in network mode [ 120.232995][ T2517] tipc: Node identity , cluster identity 4711 [ 120.246269][ T2517] tipc: Failed to obtain node identity [ 120.257214][ T2517] tipc: Enabling of bearer rejected, failed to enable media [ 120.542844][ T36] audit: type=1400 audit(1806953446.859:952): avc: denied { mounton } for pid=2523 comm="syz.3.668" path="/174/file0" dev="tmpfs" ino=1016 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 120.566108][ T2524] overlay: ./file0 is not a directory [ 120.638467][ T2530] 9pnet_fd: Insufficient options for proto=fd [ 120.651784][ T36] audit: type=1400 audit(1806953446.949:953): avc: denied { mount } for pid=2529 comm="syz.1.669" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 120.768583][ T2537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=2537 comm=syz.1.671 [ 120.887117][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 120.986790][ T456] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 121.127417][ T456] usb 4-1: device descriptor read/64, error -71 [ 121.156810][ T472] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 121.326785][ T472] usb 3-1: Using ep0 maxpacket: 16 [ 121.341942][ T472] usb 3-1: unable to get BOS descriptor or descriptor too short [ 121.354667][ T472] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.376882][ T456] usb 4-1: device descriptor read/64, error -71 [ 121.394255][ T472] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 121.423209][ T472] usb 3-1: config 1 interface 1 has no altsetting 2 [ 121.445238][ T472] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.463285][ T472] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.488574][ T472] usb 3-1: Product: syz [ 121.502449][ T472] usb 3-1: Manufacturer: syz [ 121.516817][ T472] usb 3-1: SerialNumber: syz [ 121.626785][ T456] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 121.733773][ T2550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.675'. [ 121.776795][ T456] usb 4-1: device descriptor read/64, error -71 [ 122.026806][ T456] usb 4-1: device descriptor read/64, error -71 [ 122.136901][ T456] usb usb4-port1: attempt power cycle [ 122.271395][ T472] usb 3-1: found format II with max.bitrate = 1610, frame size=0 [ 122.301125][ T472] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 122.322519][ T472] usb 3-1: 0:2 : does not exist [ 122.344677][ T472] usb 3-1: USB disconnect, device number 34 [ 122.487318][ T456] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 122.507763][ T456] usb 4-1: device descriptor read/8, error -71 [ 122.637714][ T456] usb 4-1: device descriptor read/8, error -71 [ 122.657002][ T472] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 122.796790][ T472] usb 3-1: device descriptor read/64, error -71 [ 122.876799][ T456] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 122.907804][ T456] usb 4-1: device descriptor read/8, error -71 [ 123.029312][ T36] audit: type=1400 audit(1806953449.349:954): avc: denied { read write } for pid=2585 comm="syz.5.680" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 123.054165][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.066987][ T2590] overlayfs: failed to resolve '/': -2 [ 123.072738][ T472] usb 3-1: device descriptor read/64, error -71 [ 123.087088][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.094853][ T456] usb 4-1: device descriptor read/8, error -71 [ 123.111266][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.127127][ T36] audit: type=1400 audit(1806953449.349:955): avc: denied { open } for pid=2585 comm="syz.5.680" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 123.150644][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.166843][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.194795][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.206867][ T456] usb usb4-port1: unable to enumerate USB device [ 123.215082][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.235002][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.246812][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.254264][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.281930][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.296803][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.314502][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.321990][ T472] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 123.336843][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.354662][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.364581][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.382179][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.396797][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.426513][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.460155][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.467943][ T472] usb 3-1: device descriptor read/64, error -71 [ 123.501945][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.519748][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.546799][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.568506][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.577013][ T2600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.585488][ T2600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.593714][ T2600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.602210][ T2600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.620210][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.636829][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.654443][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.666795][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.684402][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.702070][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.716792][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.734568][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.742056][ T472] usb 3-1: device descriptor read/64, error -71 [ 123.760842][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.796668][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.808588][ T36] audit: type=1400 audit(1806953450.119:956): avc: denied { shutdown } for pid=2602 comm="syz.3.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.828895][ T2607] overlayfs: unescaped trailing colons in lowerdir mount option. [ 123.838344][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.845748][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.867291][ T472] usb usb3-port1: attempt power cycle [ 123.886839][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.910828][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.941850][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 123.959497][ T36] audit: type=1400 audit(1806953450.279:957): avc: denied { audit_read } for pid=2611 comm="syz.3.686" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 123.984241][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 124.004442][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 124.028045][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 124.044672][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 124.062345][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 124.076805][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 124.094564][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 124.106792][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 124.114243][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 124.136799][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 124.186199][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 124.205154][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 124.224910][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 124.233984][ T472] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 124.261761][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 124.280479][ T472] usb 3-1: device descriptor read/8, error -71 [ 124.289546][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 124.302105][ T2622] rust_binder: 2621:2622 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 124.316939][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 124.327127][ T36] audit: type=1326 audit(1806953450.649:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2621 comm="syz.1.690" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e21b9e159 code=0x0 [ 124.352018][ T2622] rust_binder: 2621:2622 no such ref 0 [ 124.362197][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 124.376993][ T2622] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 124.396712][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 124.404652][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 124.421630][ T36] audit: type=1400 audit(1806953450.719:959): avc: denied { relabelto } for pid=2621 comm="syz.1.690" name="cgroup" dev="tmpfs" ino=493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 124.457076][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 124.466976][ T472] usb 3-1: device descriptor read/8, error -71 [ 124.473277][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 124.490957][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 124.506833][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 124.521848][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 124.538002][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 124.553053][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 124.569027][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 124.585149][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 124.601392][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 124.616608][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 124.632147][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 124.648061][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 124.664180][ T66] hid-generic 1000:0008:0068.0009: unknown main item tag 0x0 [ 124.680915][ T66] hid-generic 1000:0008:0068.0009: hidraw0: HID v0.05 Device [syz0] on syz1 [ 124.706833][ T472] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 124.737739][ T472] usb 3-1: device descriptor read/8, error -71 [ 124.868694][ T472] usb 3-1: device descriptor read/8, error -71 [ 124.986890][ T472] usb usb3-port1: unable to enumerate USB device [ 125.026796][ T66] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 125.136823][ T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 125.149583][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 125.149597][ T36] audit: type=1400 audit(1806953451.469:961): avc: denied { unlink } for pid=1912 comm="syz-executor" name="cgroup" dev="tmpfs" ino=493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 125.223430][ T66] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.247834][ T66] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.277280][ T66] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 125.308541][ T66] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.326835][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 125.342792][ T66] usb 6-1: config 0 descriptor?? [ 125.347915][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 125.374579][ T10] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 125.383955][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.401090][ T10] usb 4-1: Product: syz [ 125.409654][ T10] usb 4-1: Manufacturer: syz [ 125.419712][ T10] usb 4-1: SerialNumber: syz [ 125.691960][ T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 125.717916][ T10] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 125.739956][ T10] usb 4-1: USB disconnect, device number 44 [ 125.977061][ T2630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.006453][ T2630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.208104][ T66] usbhid 6-1:0.0: can't add hid device: -71 [ 126.214156][ T66] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 126.253030][ T66] usb 6-1: USB disconnect, device number 16 [ 126.540988][ T2691] rust_binder: Write failure EFAULT in pid:461 [ 126.548404][ T36] audit: type=1400 audit(1806953452.869:962): avc: denied { write } for pid=2690 comm="syz.2.709" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 126.741827][ T36] audit: type=1400 audit(1806953452.919:963): avc: denied { create } for pid=2696 comm="syz.3.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 126.928465][ T2722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.960941][ T2722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.008888][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 127.158752][ T10] usb 3-1: device descriptor read/64, error -71 [ 127.406824][ T10] usb 3-1: device descriptor read/64, error -71 [ 127.530098][ T36] audit: type=1326 audit(1806953453.849:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2725 comm="syz.1.722" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e21b9e159 code=0x0 [ 127.656808][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 127.817434][ T10] usb 3-1: device descriptor read/64, error -71 [ 128.066785][ T10] usb 3-1: device descriptor read/64, error -71 [ 128.186873][ T10] usb usb3-port1: attempt power cycle [ 128.556783][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 128.621604][ T10] usb 3-1: device descriptor read/8, error -71 [ 128.628471][ T2745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.670957][ T2745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.721269][ T2745] loop0: detected capacity change from 0 to 65536 [ 128.727861][ T456] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 128.746847][ T2745] netlink: 72 bytes leftover after parsing attributes in process `syz.1.728'. [ 128.787708][ T10] usb 3-1: device descriptor read/8, error -71 [ 128.888041][ T456] usb 4-1: unable to get BOS descriptor or descriptor too short [ 128.906848][ T456] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 35, changing to 7 [ 128.928080][ T456] usb 4-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 128.946781][ T456] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.954928][ T456] usb 4-1: Product: syz [ 128.965175][ T456] usb 4-1: Manufacturer: syz [ 128.974971][ T456] usb 4-1: SerialNumber: syz [ 129.026792][ T10] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 129.057711][ T10] usb 3-1: device descriptor read/8, error -71 [ 129.187732][ T10] usb 3-1: device descriptor read/8, error -71 [ 129.216412][ T2740] tmpfs: Unknown parameter 'nMnŻodes}t,5' [ 129.226565][ T2740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.255324][ T2740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.264978][ T456] usb 4-1: 1:1 : sample bitwidth 62 in over sample bytes 2 [ 129.293469][ T456] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 129.313226][ T10] usb usb3-port1: unable to enumerate USB device [ 129.340234][ T456] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 129.366922][ T456] usb 4-1: 1:1 : bogus bTerminalLink 5 [ 129.387069][ T456] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 129.412012][ T2756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.430645][ T456] usb 4-1: 1:1 : bogus bTerminalLink 5 [ 129.446694][ T2756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.457272][ T456] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 129.484105][ T456] usb 4-1: USB disconnect, device number 45 [ 129.841592][ T2773] fuse: Bad value for 'rootmode' [ 129.896775][ T2786] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.136787][ T10] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 130.226380][ T36] audit: type=1326 audit(1806953456.539:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2795 comm="syz.1.746" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e21b9e159 code=0x0 [ 130.323625][ T2797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.337505][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 130.350150][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.367566][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.398595][ T2797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.407744][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 130.429444][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.459534][ T10] usb 4-1: config 0 descriptor?? [ 130.876793][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 130.902461][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 130.935328][ T10] usb 4-1: USB disconnect, device number 46 [ 131.146809][ T472] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 131.317853][ T472] usb 3-1: Using ep0 maxpacket: 32 [ 131.366498][ T2816] kvm: pic: non byte write [ 131.433771][ T472] usb 3-1: unable to get BOS descriptor or descriptor too short [ 131.463252][ T472] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 131.490041][ T472] usb 3-1: can't read configurations, error -71 [ 131.561636][ T2827] rust_binder: 2825:2827 got reply transaction with no transaction stack [ 131.580039][ T2827] rust_binder: 2825:2827 transaction reply to 0:0 failed EINVAL, code 0 size 96-24 [ 131.604613][ T10] rust_binder: 2825: undelivered TRANSACTION_ERROR: 29201 [ 131.866816][ T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 131.919056][ T2837] netlink: 64 bytes leftover after parsing attributes in process `syz.5.762'. [ 132.027687][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 132.041660][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 132.061603][ T10] usb 4-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 132.090769][ T2845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.108973][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.129054][ T2845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.147518][ T10] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 132.167934][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.190730][ T10] usb 4-1: Product: syz [ 132.211685][ T10] usb 4-1: Manufacturer: syz [ 132.226036][ T10] usb 4-1: SerialNumber: syz [ 132.546814][ T472] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 132.635557][ T1010] bridge_slave_1: left allmulticast mode [ 132.644637][ T1010] bridge_slave_1: left promiscuous mode [ 132.659253][ T1010] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.675462][ T1010] bridge_slave_0: left allmulticast mode [ 132.686822][ T472] usb 3-1: device descriptor read/64, error -71 [ 132.694262][ T1010] bridge_slave_0: left promiscuous mode [ 132.706386][ T1010] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.792089][ T1010] veth1_macvtap: left promiscuous mode [ 132.804304][ T1010] veth0_vlan: left promiscuous mode [ 132.926952][ T472] usb 3-1: device descriptor read/64, error -71 [ 132.959283][ T10] usb 4-1: 3:0: cannot get min/max values for control 2 (id 3) [ 132.980214][ T2854] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.996192][ T10] usb 4-1: 3:0: cannot get min/max values for control 3 (id 3) [ 133.016325][ T2854] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.028350][ T10] usb 4-1: 3:0: cannot get min/max values for control 4 (id 3) [ 133.050757][ T472] usb usb3-port1: attempt power cycle [ 133.056279][ T2854] bridge_slave_0: entered allmulticast mode [ 133.067734][ T10] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 133.075451][ T2854] bridge_slave_0: entered promiscuous mode [ 133.100589][ T10] usb 4-1: 3:0: cannot get min/max values for control 8 (id 3) [ 133.110176][ T1010] ------------[ cut here ]------------ [ 133.115734][ T1010] WARNING: CPU: 0 PID: 1010 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 133.125871][ T1010] Modules linked in: [ 133.129848][ T1010] CPU: 0 UID: 0 PID: 1010 Comm: kworker/u8:44 Not tainted syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 133.141697][ T1010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 133.151899][ T1010] Workqueue: netns cleanup_net [ 133.156713][ T1010] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 133.162769][ T1010] Code: e8 01 87 d5 fc 4b 83 3c 3e 00 75 19 e8 75 a3 7c fc 49 81 ff f8 07 00 00 74 1b e8 67 a3 7c fc 49 83 c7 08 eb c9 e8 5c a3 7c fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 133.182451][ T1010] RSP: 0018:ffffc9000fdf7b90 EFLAGS: 00010293 [ 133.188593][ T1010] RAX: ffffffff850ad734 RBX: ffff88813cef3540 RCX: ffff888117c94c00 [ 133.196605][ T1010] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881217d0000 [ 133.204709][ T1010] RBP: ffffc9000fdf7bb0 R08: 0000000000000003 R09: 0000000000000004 [ 133.212755][ T1010] R10: dffffc0000000000 R11: fffff52001fbef04 R12: dffffc0000000000 [ 133.220900][ T1010] R13: dffffc0000000000 R14: ffff8881217d0000 R15: 0000000000000000 [ 133.228933][ T1010] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 133.237954][ T1010] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.244615][ T1010] CR2: 000055559015c918 CR3: 00000001171a0000 CR4: 00000000003526b0 [ 133.252650][ T1010] Call Trace: [ 133.255948][ T1010] [ 133.258932][ T1010] cleanup_net+0x6ba/0xc90 [ 133.263365][ T1010] ? __cfi_cleanup_net+0x10/0x10 [ 133.268323][ T1010] ? kick_pool+0xb9/0x540 [ 133.272668][ T1010] process_scheduled_works+0x7f7/0x1060 [ 133.278261][ T1010] worker_thread+0xc99/0x13f0 [ 133.282972][ T1010] kthread+0x2c7/0x360 [ 133.287111][ T1010] ? __cfi_worker_thread+0x10/0x10 [ 133.292238][ T1010] ? __cfi_kthread+0x10/0x10 [ 133.296867][ T1010] ret_from_fork+0x64/0xa0 [ 133.301315][ T1010] ? __cfi_kthread+0x10/0x10 [ 133.305916][ T1010] ret_from_fork_asm+0x1a/0x30 [ 133.310711][ T1010] [ 133.313745][ T1010] ---[ end trace 0000000000000000 ]--- [ 133.327406][ T2854] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.358368][ T2854] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.375893][ T2854] bridge_slave_1: entered allmulticast mode [ 133.382474][ T2854] bridge_slave_1: entered promiscuous mode [ 133.436550][ T10] usb 4-1: 3:0: cannot get min/max values for control 8 (id 3) [ 133.536799][ T10] usb 4-1: 3:0: failed to get current value for ch 1 (-71) [ 133.569987][ T10] usb 4-1: 3:0: failed to get current value for ch 2 (-71) [ 133.618169][ T1018] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.625257][ T1018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.637744][ T10] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 133.657784][ T1018] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.664929][ T1018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.687221][ T472] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 133.717104][ T10] usb 4-1: 3:0: cannot get min/max values for control 12 (id 3) [ 133.729321][ T2854] veth0_vlan: entered promiscuous mode [ 133.745347][ T472] usb 3-1: device descriptor read/8, error -71 [ 133.752464][ T10] usb 4-1: 3:0: cannot get min/max values for control 12 (id 3) [ 133.768965][ T2854] veth1_macvtap: entered promiscuous mode [ 133.786054][ T10] usb 4-1: USB disconnect, device number 47 [ 133.843000][ T1010] ------------[ cut here ]------------ [ 133.848653][ T1010] WARNING: CPU: 0 PID: 1010 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 133.858893][ T1010] Modules linked in: [ 133.862805][ T1010] CPU: 0 UID: 0 PID: 1010 Comm: kworker/u8:44 Tainted: G W syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 133.876136][ T1010] Tainted: [W]=WARN [ 133.879978][ T1010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 133.890094][ T1010] Workqueue: netns cleanup_net [ 133.894880][ T1010] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 133.900978][ T1010] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 20 a3 7c fc 49 81 ff f8 07 00 00 74 1b e8 12 a3 7c fc 49 83 c7 08 eb c5 e8 07 a3 7c fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 f7 a2 7c fc 5b 41 5c 41 5e 41 [ 133.920617][ T1010] RSP: 0018:ffffc9000fdf7b90 EFLAGS: 00010293 [ 133.926697][ T1010] RAX: ffffffff850ad789 RBX: ffff8881217d0800 RCX: ffff888117c94c00 [ 133.934715][ T1010] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881217d0808 [ 133.942705][ T1010] RBP: ffffc9000fdf7bb0 R08: 0000000000000003 R09: 0000000000000004 [ 133.950700][ T1010] R10: dffffc0000000000 R11: fffff52001fbef04 R12: dffffc0000000000 [ 133.958702][ T1010] R13: dffffc0000000000 R14: ffff8881217d0000 R15: 0000000000000008 [ 133.966682][ T1010] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 133.975643][ T1010] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.982258][ T1010] CR2: 00007f2a89dee1e0 CR3: 0000000110f88000 CR4: 00000000003526b0 [ 133.990269][ T1010] Call Trace: [ 133.993578][ T1010] [ 133.996519][ T1010] cleanup_net+0x6ba/0xc90 [ 134.000988][ T1010] ? __cfi_cleanup_net+0x10/0x10 [ 134.005957][ T1010] ? kick_pool+0xb9/0x540 [ 134.010393][ T1010] process_scheduled_works+0x7f7/0x1060 [ 134.015956][ T1010] worker_thread+0xc99/0x13f0 [ 134.020689][ T1010] kthread+0x2c7/0x360 [ 134.024777][ T1010] ? __cfi_worker_thread+0x10/0x10 [ 134.029911][ T1010] ? __cfi_kthread+0x10/0x10 [ 134.034533][ T1010] ret_from_fork+0x64/0xa0 [ 134.038982][ T1010] ? __cfi_kthread+0x10/0x10 [ 134.043588][ T1010] ret_from_fork_asm+0x1a/0x30 [ 134.048393][ T1010] [ 134.051423][ T1010] ---[ end trace 0000000000000000 ]--- [ 134.197941][ T472] usb 3-1: device descriptor read/8, error -71 [ 134.336830][ T1010] ------------[ cut here ]------------ [ 134.342366][ T1010] WARNING: CPU: 0 PID: 1010 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 134.351975][ T1010] Modules linked in: [ 134.355881][ T1010] CPU: 0 UID: 0 PID: 1010 Comm: kworker/u8:44 Tainted: G W syzkaller #0 3ab14c716d19d9a156d32fd3ac537b1a2e52e776 [ 134.369188][ T1010] Tainted: [W]=WARN [ 134.372996][ T1010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.383085][ T1010] Workqueue: netns cleanup_net [ 134.387898][ T1010] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 134.393463][ T1010] Code: 3c 20 00 74 08 48 89 df e8 1f 45 f0 fc 48 8b 3b e8 67 35 db fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 98 b7 00 cc e8 82 61 97 fc <0f> 0b e9 b0 fd ff ff e8 76 61 97 fc 0f 0b e9 18 fe ff ff e8 6a 61 [ 134.413166][ T1010] RSP: 0018:ffffc9000fdf7b70 EFLAGS: 00010293 [ 134.419291][ T1010] RAX: ffffffff84f0190e RBX: ffff88813cef3540 RCX: ffff888117c94c00 [ 134.427287][ T1010] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888117c94c00 [ 134.435267][ T1010] RBP: ffffc9000fdf7b98 R08: ffffffff87d43f07 R09: 1ffffffff0fa87e0 [ 134.443259][ T1010] R10: dffffc0000000000 R11: fffffbfff0fa87e1 R12: 1ffffffff0fa8534 [ 134.451310][ T1010] R13: dffffc0000000000 R14: ffff88813cef4140 R15: dffffc0000000000 [ 134.459308][ T1010] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 134.468278][ T1010] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.474871][ T1010] CR2: 00007f2a89dee1e0 CR3: 0000000110f88000 CR4: 00000000003526b0 [ 134.482882][ T1010] Call Trace: [ 134.486172][ T1010] [ 134.489243][ T1010] xfrm_net_exit+0x31/0x80 [ 134.493724][ T1010] cleanup_net+0x6ba/0xc90 [ 134.498171][ T1010] ? __cfi_cleanup_net+0x10/0x10 [ 134.503118][ T1010] ? kick_pool+0xb9/0x540 [ 134.507474][ T1010] process_scheduled_works+0x7f7/0x1060 [ 134.513060][ T1010] worker_thread+0xc99/0x13f0 [ 134.517768][ T1010] kthread+0x2c7/0x360 [ 134.521853][ T1010] ? __cfi_worker_thread+0x10/0x10 [ 134.526996][ T1010] ? __cfi_kthread+0x10/0x10 [ 134.531599][ T1010] ret_from_fork+0x64/0xa0 [ 134.536056][ T1010] ? __cfi_kthread+0x10/0x10 [ 134.540681][ T1010] ret_from_fork_asm+0x1a/0x30 [ 134.545462][ T1010] [ 134.548503][ T1010] ---[ end trace 0000000000000000 ]--- [ 134.687281][ T472] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 134.780305][ T472] usb 3-1: device descriptor read/8, error -71 [ 134.907726][ T472] usb 3-1: device descriptor read/8, error -71 [ 135.016911][ T472] usb usb3-port1: unable to enumerate USB device