last executing test programs: 7.274388738s ago: executing program 2 (id=986): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wr_drn={0x68, 0x20, {0x7, 0x2000}}], 0x20}) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000140)={0x3}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r5, 0x4) (async) syz_kvm_assert_syzos_kvm_exit$x86(r5, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r6, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0) 7.142845356s ago: executing program 2 (id=989): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f00000000c0)={0x5, 0xc, 0x3d, 0x7fff, 0x14, "71feaf33432ed6fe90107884be157e88b3e578"}) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) (async) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/197}) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xfe) 7.08827894s ago: executing program 2 (id=990): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x107, 0x1, &(0x7f0000000080)="010000000000060000071a80000001cc", 0x10) dup2(r2, r3) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='\x00', 0x68) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="09030000000000fdff072000adce04000280"], 0x18}, 0x1, 0xf000000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000055bed40020000000000000003010902380002000000060904c700010e0101000300d009050a000000000000090400000101be2600090500000000000000080b"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r7, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x40, 0x11) write$binfmt_script(r5, &(0x7f0000000140)={'#! ', './file0', [], 0xa, "a705f97c0ca2b389b6ef6d46b75eb472605c635d6db04e582f14f33bf0eff18c8b80c81a1ef0d19742f5053d00b9acd800df423dc777f1ec1c0641515634125ca2"}, 0x4c) sendfile(r6, r4, 0x0, 0x10000a007) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x9a8, 0x46, @private2, @empty, 0x700, 0x8, 0x6, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 4.085968568s ago: executing program 2 (id=1020): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x181900, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001581c2908570b2a85396d0102030109021b08010001000b0904c8020103010203090504"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b0f, &(0x7f0000000000)={'wg1\x00'}) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000680)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f000000c280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150fdf0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcb05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc28afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f2724f5024a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4a7e642fdc56d11c2ec87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b09ffd42a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3da452647e342e2591be4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a00", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xa, {0x3, 0xffffffffffffffff, 0x100000000000000, 0x800, 0x0, 0x0, {0x0, 0x3, 0x2, 0x0, 0x0, 0x46, 0x1, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x30000, 0x0, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x10}}, 0x50) write$FUSE_LSEEK(r2, &(0x7f0000000200)={0x18, 0x0, r4, {0xe6a}}, 0x18) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r6, 0x800454e1, 0x110c230020) r7 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030009025c0002010000000904000001020d0000052406000105240000000d240f0110000000000000000006241a0000390905810300020024000904010000020d00000904010102020d0000090582020002000000090523020002000000"], 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000500)={0x14, &(0x7f0000000400)={0x20, 0x3, 0x93, {0x93, 0x22, "c764bb0a117352d1b6f6f19bea162544ebc49a6d57b2e85eb0e2c74631a52c2e09ba5c206cc89436b683ce392a3242fe96fd67d141419939a84b9af66eb94c625eec72eb728197db760b8c51835866771226ad5a6c3d61589855b9bb0064463762b3f9097fe47f609e1c22d6185bf120def47639c8949c3ca31c546b0e7564e193f535dfdc70d07179b5ed972e5a337a35"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x458}}}, &(0x7f0000000640)={0x1c, &(0x7f0000000540)={0x0, 0xd, 0x87, "a3c25e8ef701deb8ec3e16c9395eb19c037d10a5f64b80054d792e4c1f339b869422ebe9bbef9209cbb1bfab9e07dbf2d02792bf3598e14e3139dfa6395b49b285ad44cff66cf263034ac9fd8cb443840969da95c69d238ce4bbd13ecddfc1bb863a71350ef65fad8a1fb72a262a3ec9f4af9780079f775fd446e0fa3d56750e91b75182040230"}, &(0x7f0000000840)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000600)={0x21, 0x0, 0x4, "afd39cc7"}}) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000040)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x80, 0x1c, {0x9, 0xa08a, 0x9, 0x6, 0x8, 0x0, 0xd, 0xb35, 0xaf2d, 0xfae, 0x104, 0x2}}, 0x0, 0x0, 0x0, 0x0}) r8 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000180)={0x0, 0x0, @auto=[0x2c]}, 0x9, 0xfffffffffffffffa) keyctl$get_security(0x11, r8, &(0x7f00000002c0)=""/133, 0x85) 4.033202371s ago: executing program 0 (id=1021): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0x2}}, 0x10) 3.976094664s ago: executing program 0 (id=1022): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x8, 0x9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x81, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@local=@item_012={0x1, 0x2, 0x7da40eb54723622b, "8c"}, @global=@item_012={0x1, 0x1, 0x0, "d9"}, @local=@item_012={0x0, 0x2, 0x1}]}}, 0x0}, 0x0) 2.668163392s ago: executing program 2 (id=1025): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz0\x00', {0x8000, 0x8001}, 0x0, [0x9, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0xffffc826, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0xd6, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0xdfffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x1, 0x1000, 0x14], [0x0, 0xffffffff, 0xbfd4e2cc, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xdffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x202, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000, 0x0, 0xb5, 0x0, 0x400, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x9, 0xffffffff, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x28000000], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x681, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0xe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x3, 0x9, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @private=0xa010101}, {0x2, 0x4e23, @private=0xa010102}, {0x2, 0x4e22, @multicast1}, 0x101, 0x0, 0x0, 0x0, 0x50ea, 0x0, 0x8, 0x5, 0x4}) unshare(0x30000000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000180)=0x2, 0x4) r3 = socket(0x10, 0x2, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', r5, 0x4, 0xfb, 0x53, 0x3, 0x58, @local, @mcast2={0xff, 0x5}, 0x8, 0x8000, 0xe3e1, 0xd01}}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2002, 0x0) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x9, 0x52, 0x46, 0xe5}, {0x1, 0x8d, 0xc0, 0x101}, {0xb, 0x0, 0x6d, 0xc}]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)={'gretap0\x00', r5, 0x80, 0x80, 0x7ff, 0x6, {{0x8, 0x4, 0x0, 0xd, 0x20, 0x66, 0x0, 0xea, 0x29, 0x0, @private=0xa010102, @private=0xa010102, {[@noop, @rr={0x7, 0xb, 0x6d, [@local, @multicast1]}]}}}}}) 2.666670922s ago: executing program 2 (id=1026): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000000)=0x7) 2.389550938s ago: executing program 0 (id=1032): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c460104028d0400000000000000020006000400000019000000380000005e020000080400000400200001"], 0x58) syz_open_dev$hidraw(&(0x7f0000000040), 0x5, 0x123400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) close$binfmt(r0) sendto$inet6(r2, &(0x7f00000001c0)="80006466d3805699", 0x8, 0x20004840, 0x0, 0x0) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2.375049789s ago: executing program 0 (id=1033): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') lseek(r1, 0xffffffffffff0000, 0x0) ptrace$setregset(0x4205, 0x0, 0x200, &(0x7f00000001c0)={&(0x7f0000000000)="c9453900000000000000000028", 0xd}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x1, 0x0, 0x0) fsetxattr$security_ima(r4, &(0x7f0000000100), &(0x7f00000002c0)=@sha1={0x1, "1bea220a0dd64bddf6292cc4fd31234ff0fd1fa4"}, 0x15, 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000200)={0xb4, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0xa1, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973"]}]}, 0xb4}], 0x1}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r6, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d"], 0xd0060) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r1, 0xaea2, 0xfff) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r7, 0xc008aec1, &(0x7f00000008c0)={0xa, 0x0, [{0xc0000000, 0xb21d, 0x5, 0x73, 0x68d2, 0x8}, {0xc000000a, 0x273, 0x1, 0x0, 0x6, 0x7c, 0x5}, {0xd, 0x6, 0x0, 0x6, 0x800, 0x1, 0x80000001}, {0xc0000000, 0x4, 0x1, 0x29, 0x2, 0x51d, 0x6}, {0x6, 0x6, 0x4, 0x4, 0xd4f, 0xeb, 0x3}, {0xcc3017f56549c1b0, 0x7, 0x6, 0xfff, 0x8, 0xfffffe00, 0x8}, {0x80000001, 0x3, 0x5, 0x6, 0x9, 0x221, 0xb}, {0x7, 0x7fffffff, 0x0, 0x3, 0x7fffffff, 0x4, 0x2}, {0x40000001, 0x7f, 0x4, 0xcceb, 0x4, 0x3, 0x5}, {0x80000000, 0xe83, 0x4, 0xbe, 0x1, 0xf, 0x8}]}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x800}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x5, 0x46, &(0x7f0000000580)={{0x12, 0x1, 0x310, 0x35, 0xfe, 0x65, 0x10, 0x1aca, 0xb28e, 0x9232, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0xd, 0x1, 0x90, 0x2, [{{0x9, 0x4, 0x32, 0xa7, 0x2, 0x1, 0x3, 0x9e, 0x8, [], [{{0x9, 0x5, 0x8, 0x6, 0x10, 0x6, 0x4, 0x8, [@generic={0x2, 0x23}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x4f8}]}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x4, 0x2, 0x66, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x3}]}}]}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1555555555555817}) r9 = dup(r8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000300)={@val={0x0, 0x6001}, @void, @x25={0x3, 0x9, 0xfb, "4f3a624e5cef0426d55cac454c7def4b8f4a6b80483879f53680fac97bf45a2c076451f7e971d8621e83f0fee78b6845a05d671cfab36f1f4343450420d58a62539a1b8b74dc3b3fa8649942b5989b9a2f5ff16bd93868386ff39f0ab3ba4856a2590681ec76e170144a1e924b98804276204b51b7708eae4ab449bab17b8e24c9685424920bac934a7665ac4197229f3ba3422f11d0988db23251fbfa02b34c6130efd0be54b5df6b79bec8e5892596f16cdb90c639c1c857e67ed42d4dd6462b38"}}, 0xc9) ptrace$setregs(0x1a, r2, 0xc, &(0x7f0000000000)) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x34, &(0x7f0000000040)=0x8004, 0x4) 1.969171603s ago: executing program 1 (id=1036): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000480)={0xe, 0x8, 0x1, 0x0, 0x7, "58bf00"}) inotify_init1(0x80000) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000000)=0x8004) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000001c0), 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 1.168420531s ago: executing program 0 (id=1042): r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x616d03, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) (async) r2 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, &(0x7f00000016c0)={0x84, &(0x7f0000001280)=ANY=[@ANYBLOB="20090d00000061853749739ff8b1ee48be3e39"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000001e40)={0x84, &(0x7f0000000340)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f0000000040)) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x3ffffe, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r6, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a60c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc86", 0xc1}], 0x1) (async) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) (async) readv(r6, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$rtc(&(0x7f0000000240), 0x7, 0x10000) 1.116259794s ago: executing program 1 (id=1043): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020580411500000000000010902240001000000000904000005030000000921060000012294030905810300000000"], 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr=0x64010102}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 799.546813ms ago: executing program 3 (id=1045): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000640)=ANY=[@ANYBLOB='\x00\b\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b0f, 0x0) mount$binder(0x0, &(0x7f0000000580)='./file1\x00', &(0x7f00000005c0), 0x4000, &(0x7f0000000600)={[{@max={'max', 0x3d, 0x2}}, {@max={'max', 0x3d, 0x4}}]}) openat$incfs(r1, &(0x7f0000000040)='.log\x00', 0x6200, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0xa, 0x4900) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@volatile}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000a00)) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000880)={0x2, 0x0, [{0x34, 0x0, 0x8000000000000001}, {0xb09, 0x0, 0x401}]}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000000680)) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f00000000c0)={0x20, 0x2, 0x11, {0x11, 0xf, "7549e9c6317968bd506e015c5394fa"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x851}}, &(0x7f00000001c0)={0x0, 0x22, 0x9, {[@global=@item_012={0x2, 0x1, 0x6, '\t#'}, @global=@item_012={0x0, 0x1, 0xa}, @main=@item_4={0x3, 0x0, 0xc, "3c990e68"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x8, 0x1, {0x22, 0x87e}}}}, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x0, 0x3, 0xc8, "6217b6ce0530923056c93f1a8e5a40ef22a59700def1cbc1765da518b7a8e0cf8506d0ec94d3ac8abd440ee5c5de69ad9c928be17cc25804ff39f38c76778e433ce3226f63e90731424102ff4162298a4700eb7047a6458022b992fec0e031d4a6fb1664129124e911ab183e530879570a85eddbee985ef77ef56d53f0930d2dc21c902a3e61375aa10f84179eb56eafb1e198e4842bcee86f828524eda2289ae4864e76d6a698ec074b08a4ebe947e67721a9a8c4439ab740fbc757633e265196122164054ccd0b"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x7c}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xf3}, &(0x7f0000000440)={0x20, 0x1, 0xb2, "774766a6ab5c191455f6ed299cd06bb9949ca71f41bf635eb5b24d53d4b6553d20e00121910a6ffde3a2983406260bfad3970f7216bbac80d5e8e59b8b663fa5100d5d67b4f33d6b4a83e45a22f40d6ae6b07fd9ec3e75662e1e30e21eb99a325a4be5ce5f0dc36a651492b43cbf0ca723478311b5b10ba347e2dde4c9b0dc5a1cc47b6552ad5e17ef5cf2f85f75289008446b4aab5b99dae6f076beb935c9ed3abf1f9b1917782cecd59ca9f08d7201aef5"}, &(0x7f0000000500)={0x20, 0x3, 0x1}}) 601.827034ms ago: executing program 1 (id=1046): socketpair(0x11, 0x1, 0x13a, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r2, 0x300, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x6a}, {0xc, 0x90, 0x6}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4009}, 0x8800) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f00000001c0)={0x1}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000200)={0x3, 'bond_slave_0\x00', {0x7}, 0x3}) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1ff}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x5}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_COMMENT={0x8, 0x1a, 'pci\x00'}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x4}]}, @IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xb8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000400)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x2f, 0xbe, 0x5, 0x5, 0x0, @loopback, @remote, 0x8000, 0x40, 0x7, 0xb}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x60020000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x4}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x80) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000006c0), r1) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x80, r7, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x53f}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}]}, 0x80}}, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000800)=0x1, 0x4) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000a40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0x158, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x158}, 0x1, 0x0, 0x0, 0x40000}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, r8, &(0x7f0000000b00)) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000b80)={0x30007, 0x4, 0x25000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r10, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x58, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x44) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000fc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f80)={&(0x7f0000000d40)={0x208, r2, 0x300, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xfffffffffffffffa}, {0xc, 0x90, 0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0xa}, {0xc, 0x90, 0x8000000000000001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xf}, {0xc, 0x90, 0x8000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x8000000000000001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc, 0x90, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x7fff}, {0xc, 0x90, 0x7f}}]}, 0x208}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001000)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r11, 0x4008af75, &(0x7f0000001040)={0x1, 0x2}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$SNAPSHOT_SET_SWAP_AREA(r11, 0x400c330d, &(0x7f0000001180)={0xfffffffffffff801}) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f00000011c0)={0x9, 0x4605}) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000001240), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x50, r12, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xa59}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5105ef1a}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x40044010) 585.158926ms ago: executing program 1 (id=1047): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$cgroup_pressure(r0, &(0x7f0000000040)={'some', 0x20, 0x3, 0x20, 0x1800000}, 0x2f) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000003, 0x12, r0, 0x8000000) 527.926699ms ago: executing program 1 (id=1048): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc534, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x83, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xfffc, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x9, 0x17}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000040)={0x1, 0xffffffff, 0x6f94, 0x5, 0xa45a2b2e, 0x7fff}) syz_usb_control_io(r1, &(0x7f0000000900)={0x2c, &(0x7f0000000740)=ANY=[@ANYBLOB="200c70000000700382db01a0f568af8faf267c2b7f9b8f8505bee04e8600de241fada63c5c73c56b2e59b1249a2bb78ca7bb5020f233927e9e586de1318577fcce9bcb2e5c28d8c70b4777f3fdba1e86d227c721512cf8bd02d6922e15589a785112a6443a3f8dd5b58717eacda1f500000000263acf"], &(0x7f00000007c0)={0x0, 0x3, 0x99, @string={0x99, 0x3, "533ac3ae0c90d0e446cbc20b53935754601b72f3b5ac52e3275fcc56e588b8a6007623d52b94118cb0e82a8588227af2e61df775b4a96021a4a8c812c5f73f1b3d17071dde62dda10c78d3f4c84fb3068527c15b567a3631949bfaf170daa2699d0cb819fda1c1be99b58ac53db57f79df84be187ab037a6b841a76210991384bd5faced0d47b0fd02ba0b65081ca71f6f0105965b863f"}}, &(0x7f0000000180)={0x0, 0xf, 0x34, {0x5, 0xf, 0x34, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x8, 0xff00, 0x10, [0xff0f, 0xff0000]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x8, 0x3, 0x81}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0xa, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x5, 0xf}, @ptm_cap={0x3}]}}, &(0x7f0000000880)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x2, 0x8, 0x78, "3007957a", "50605cf1"}}, &(0x7f00000008c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x60, 0x0, 0x81, 0x7, 0x1000, 0x62}}}, &(0x7f0000000e00)={0x84, &(0x7f0000000940)={0x20, 0xf, 0x8f, "4da67d18aa1887268a7f5b53f693ffc8d51da0da060ead625aab4932066a0c12118bfa9c7f9609fea07de0a3dc6eb27e916174231380fbe2520bdce7a1d9952d7a9129764e168a574eea7d879fa4f7a351eb13ee0d20fb5880d6462b590243eddb9013e763d129120523d8f23b7fc2ef147707391236d8fadc32eb79f18befd5d0f751a27af2437d62a0320b0315ca"}, &(0x7f0000000a00)={0x0, 0xa, 0x1}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000ac0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000b00)={0x20, 0x0, 0x8, {0x100, 0xc3, [0xf000]}}, &(0x7f0000000b40)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000b80)={0x40, 0x9, 0x1, 0xe0}, &(0x7f0000000bc0)={0x40, 0xb, 0x2, '_&'}, &(0x7f0000000c00)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000c40)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000c80)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000cc0)={0x40, 0x19, 0x2, '\'^'}, &(0x7f0000000d00)={0x40, 0x1a, 0x2, 0x2a1}, &(0x7f0000000d40)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000d80)={0x40, 0x1e, 0x1, 0xc}, &(0x7f0000000dc0)={0x40, 0x21, 0x1, 0xd}}) r3 = syz_open_dev$mouse(&(0x7f0000000ec0), 0xd, 0x88802) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000f00)={0x73622a85, 0xa, 0x2}) r4 = dup(r2) vmsplice(r4, &(0x7f0000001400)=[{&(0x7f0000000f40)="3376a9635ddd96aa43e91038bbf9c83794ce0c1382d62df61377aa8e472595496ea3755653a50be4e961aae96dbe6a05f7dc322c3e7c65fefc2d49698fd6629b39bb556feeddb24956789aa36f6022863d78827d36ffccb60610c0a4692b3e8558a86bdb94629c32c6c9aae7a1db3283f0710830c4292078f540d7b7ca44a409d6f84da1d901e304f85d094f1cb4c71720827bef823fdc92a0d97ddff82d6461bce127d5f72378a9edc2f033", 0xac}, {&(0x7f0000001000)="d21bd9", 0x3}, {&(0x7f0000001040)="1f4c6003c586ff21050b684df4", 0xd}, {&(0x7f0000001080)="dbc6beb6905823a1d0e1e589b2ffd3f5790cff6335d0dce76386a7bd5e43986ea2f8254f465481ee018fddf3d481a7b68b18fb597825d7af6be3887497018d99008a9e0fa9b72aa4a36ee8164089bbee577916404de8b1b69b9da5a6464d9e75f6f941760f59fc99240c362303d1efe87c1b5afa73b8f8d3eb4509aaee7f8318526a731ef886c93fd502bc9d7ca8310002c5161a7f8b9fc748535e05ff6897f53d38dfecde0b9cd754a53010487d3bd2e50417250a470d88d4e63599bae20b64d38a048ba354b34bc3c20569e9f23159c5c88e3509a21631a60a52261b19f138b2936ea192f3beb1f756174b2724c41b57536b2d90a585cfaa", 0xf9}, {&(0x7f0000001180)="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", 0xfc}, {&(0x7f0000001280)="bfb703b827b8891a34d7784761012db02604e280a7af92170952d293246472f570000b41fee79f570af1d06943eecd5ec75a1c414780dcef6edba255fbafc24696863846f40f8dec40b55606e4ab202979468783b25eb581aad6d143f4155f26f1c215ace3417e75d45f1d9af6de086c1c3d07479a003b10a2e0e970de73d62b109f51cf0b34b5d3604b3ab8d6930cbb050e23c96a073317857e2053336cec407443ef04e1be4e630f7f1a9683720a", 0xaf}, {&(0x7f0000001340)="02ce5d88adee56e8dc6ee23635262e7ab089e16764ab5cb0940678cea3c117a575864dfd39c46130c7c79f11fc83cc924f0073f23df07fb89e4bb98d6bfc7969f05ae3d422299f926e7459cbb2334732408e8e28e555788afd0eb18e1f8df73df3d69e2bcfae247ce5011b4837c66b0810465331b41eba5e061d57e76adcdf62316406c675d460ac0802104d40f47ae04b55f3dbee7d81629a534c52c70d6ebb4b549d487aba7de63b25b0a5601cdb34c4179dd427309b74b691ac14", 0xbc}], 0x7, 0x0) r5 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x48d, 0xce50, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x20, 0x20, 0x7f, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x603, 0x0, 0x1, {0x22, 0xa83}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x81, 0xd}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x9, 0x7}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x4, 0xcf, 0x5a, 0x40, 0x57}, 0x1b7, &(0x7f00000001c0)={0x5, 0xf, 0x1b7, 0x4, [@generic={0xaf, 0x10, 0x4, "30d26a8ddddc525634d26253f29358c600c7bccb1b22bfc770e55bfac2ac7eb53d42a8b29795f9d9f91ddcc7bbdc98ad7286769d7e64cce12fb878124cbab220a3d44e4b11d244f944a51359484942d42c9882233d55b045c1a393e86a80364c5d0d0ce85ca524a874bd70761f1b4c9c1345115dbfcbc38798ad1690d75cce9498e3a37d78281620a0b1d4f77ee55338228d9ee2987e2ff2f2567a64897f5ca8b5e8054413cce1fc4cd1eead"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "1fddf34601b64302615e6692535a0f65"}, @ssp_cap={0x24, 0x10, 0xa, 0x59, 0x6, 0xb39, 0xf00, 0xaacf, [0xff0000, 0x3f3f, 0x0, 0xf, 0x3f0f, 0x30]}, @generic={0xcb, 0x10, 0x2, "7d862ff211edf3bccfd5333f93b58df73b0ec9249492b8944870d6d0337be46b8d8894f08a0c91f8b573ffc423cbc54268da685e62bdac96896c22a195849eaf62c96da89e0552d9ccee9ae02f5ba1f61f74a73f170f50903846ab708bba4dd8d0fa8856d3fec85439a1589332fe9d765b66ed5b0b6a801fee51367808ad281154080a6b2d6324d3ae7eaa863f5a96f8d257235d0c53f99a503f9e0bf5a719c4bf805bb83c4fad820f1aabf1dbaffe4c440d6872e45b4780291f436a7c52bd1ba158adf25fb98e31"}]}, 0x7, [{0x50, &(0x7f0000000100)=@string={0x50, 0x3, "7201994d7918aeccdb39ba411809e393844cf414c669ab86a9ceec4248e3a4b148682a5cc40f8776c8fa8760f702ddbe29bd5679cdd5ab7c7409e9b77b882fd55fdfa8aca0cfca9eab0408984996"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x421}}, {0xf5, &(0x7f00000003c0)=@string={0xf5, 0x3, "97c6489ef6057441569588ec6f4ce26bfdd6784c28ced98e69c99e13774963d27082ee7f01164afff4ecb97011b5bb000165051a969709bca0f7cc86511a3754becd4d9239ebdd406964b36bb598b664ee80704fcad720bd60142e56ef6eb3a80e2b0e556e3a6308bc01f2ce25ad5054ae028fbd55d1bcff37841c398cbac1a39359b107a7389c43309d1cd735359f7604d863f2936cd977b46247ab62d4e4c44179f42a23a7986c819cf26ff099d6924698db1bd0786d1dcb75645714b203970a759121c0862bd5c48fd01de2c2642ce4a89c868e9268c198f8491e6d5f266ded081c5597c5e4bc8dff2ad9dd6e28da570388"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x425}}, {0xdc, &(0x7f0000000580)=@string={0xdc, 0x3, "92f8de8b87c81b5937377f9abe95407afb5ed43217005ca7e3e92912cbbf8acafd27629bb9c5a9f2dbf8d748cefc739fc66c4eb47c37f741a8cceef421d5efc9d69c722eee08951b3ecbe6776195030fbb10bc4ecf40f349894171807826c2ca9b43882657963057cd1565bbc297c191dcf88d5bb055979256ef5a01dc5cabf0b1ec5bd87a3bae34fad9b2e4e9ea4d53a827fd7d75edd2bd8b7275cd2c9d94ec000c7552d9a3124f30ef2fc299e37b5920a01aa9ae4778fb0504f56a6b8a9a7affad78616e37af370f0feb0410e1615e91217dde548f9e3e7ba1"}}]}) syz_usb_control_io(r5, &(0x7f0000000000)={0x2c, &(0x7f0000000700)={0x20, 0x0, 0xb, {0xb, 0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 527.410769ms ago: executing program 0 (id=1049): statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x100, 0x180, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[], [{@euid_gt={'euid>', r0}}, {@uid_eq={'uid', 0x3d, r0}}, {@smackfsroot={'smackfsroot', 0x3d, '9-~L\xd6\x13\xf1VOD\xaa\xd1p\xd96\xdf\x99\x87\xf7\xf8\xb0x\xfc\x11\xd3\x9e\x11<\x9d)^\n\x01\xa2\t)\x1ac\xc8\xb3\xde[\xce*[\xef\xce\xa4\xefp~\xc5\xaf\x00X\\~XwqWB\x8f\xbb\xa8\r~\xed\xfd\xa1\xfd!n\xdc\xd2cO\x1d\x1a\xc2\n\xcb]\xfc\xb0K\xa8\x92<'}}]}) mount$fuse(0x0, 0x0, 0x0, 0xa08821, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x9b, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902890002010420040904000001020d0000052406000105240006000d240f0106000000020006000606241a05ed0d0724140e00400005241500001524120004a317a88b045e4f01a607c0ffcb7e392a0c"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) dup3(r1, 0xffffffffffffffff, 0x80000) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1, 0xe, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r6, 0x0, 0x8, 0x0) keyctl$join(0x1, &(0x7f0000000340)={'syz', 0x1}) io_submit(0x0, 0x1, &(0x7f0000000940)=[0x0]) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x2000) 251.127965ms ago: executing program 3 (id=1050): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x80ffffff, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 229.588207ms ago: executing program 3 (id=1051): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x2e, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000380)={'veth1_to_team\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0xfffffffb, 0x5}, {0x2, 0xffff}]}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x894a, &(0x7f00000028c0)={'ip6_vti0\x00', 0x0}) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) (rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) (async) sendmmsg$inet6(r0, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x50}}], 0x2, 0x40) (async, rerun: 32) r4 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={@loopback, 0x0, 0x0, 0x50, 0x0, [{}, {@empty}, {}, {@empty}, {@remote}]}}) (async) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x17ef, 0x60a4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x406, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc, 0x8, 0x7}}}}}]}}]}}, 0x0) r6 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2000, 0x162, 0x8}, 0x18) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x0, 0x48, 0x0, "7da50b9433c5c33950b019bdcd5e139e6fd78ec0e5d94c423dda43e9d68e2052cbb9febb4ed2d0da9a11dbded1a52e6bf20dc73d3c6a6fc21141e19f1186434283cedb127c2071a5ac410ba9af44d2fd"}, 0xd8) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 144.269341ms ago: executing program 3 (id=1052): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendto(r1, 0x0, 0x0, 0x200048d1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 89.000225ms ago: executing program 3 (id=1053): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000100)="ff02040000ffff0a000000ffff1f3be838b1af0000000000", 0x18) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f00000000c0)=0x4, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000480)="b48ded36af", 0x5}], 0x1}}], 0x1, 0x0) read(r0, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) (async) socket$inet6(0xa, 0x802, 0x0) (async) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000100)="ff02040000ffff0a000000ffff1f3be838b1af0000000000", 0x18) (async) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f00000000c0)=0x4, 0x4) (async) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) (async) sendmmsg$inet6(r2, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000480)="b48ded36af", 0x5}], 0x1}}], 0x1, 0x0) (async) read(r0, 0x0, 0x0) (async) 76.903365ms ago: executing program 3 (id=1054): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xa, 0x6, "efd0282b7822"}, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x8000000010, 0x2, 0x0) r2 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x28, 0x18, 0x229, 0x0, 0x25dfdbff, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0x8}, @typed={0x8, 0x1e, 0x0, 0x0, @fd=r3}]}, 0x28}}, 0x0) write(r1, &(0x7f0000000600)="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", 0x113) getgroups(0x2, &(0x7f00000000c0)=[0xee01, 0xee01]) setfsgid(r4) setfsgid(r4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x2000}, 0x4) 0s ago: executing program 1 (id=1055): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1, 0x2172, 0xffffffffffffffff, 0x5ef59000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)) mprotect(&(0x7f0000142000/0x2000)=nil, 0x2000, 0xe) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mmap$IORING_OFF_SQ_RING(&(0x7f00002ad000/0x2000)=nil, 0x2000, 0x8, 0x2c813, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): evice descriptor read/64, error -71 [ 115.125907][ T45] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 115.171439][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 115.182335][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 115.255938][ T45] usb 1-1: device descriptor read/64, error -71 [ 115.325948][ T537] usb 2-1: device descriptor read/64, error -71 [ 115.392347][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 115.403237][ T10] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 115.436094][ T537] usb usb2-port1: attempt power cycle [ 115.495924][ T45] usb 1-1: device descriptor read/64, error -71 [ 115.694548][ T36] audit: type=1400 audit(2000000035.190:39582): avc: denied { listen } for pid=2132 comm="syz.3.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 115.735916][ T45] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 115.776100][ T537] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 115.796900][ T537] usb 2-1: device descriptor read/8, error -71 [ 115.865954][ T45] usb 1-1: device descriptor read/64, error -71 [ 115.927028][ T537] usb 2-1: device descriptor read/8, error -71 [ 116.102349][ T442] usb 3-1: USB disconnect, device number 35 [ 116.108382][ T45] usb 1-1: device descriptor read/64, error -71 [ 116.124703][ T36] audit: type=1400 audit(2000000035.620:39583): avc: denied { create } for pid=2140 comm="syz.2.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 116.146796][ T1605] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 116.176060][ T537] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 116.208201][ T537] usb 2-1: device descriptor read/8, error -71 [ 116.225988][ T45] usb usb1-port1: attempt power cycle [ 116.287448][ T36] audit: type=1400 audit(2000000035.790:39584): avc: denied { read } for pid=2144 comm="syz.2.559" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 116.309690][ T1605] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 116.318925][ T1605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.327285][ T1605] usb 4-1: Product: syz [ 116.334291][ T1605] usb 4-1: Manufacturer: syz [ 116.339222][ T1605] usb 4-1: SerialNumber: syz [ 116.347429][ T537] usb 2-1: device descriptor read/8, error -71 [ 116.456227][ T537] usb usb2-port1: unable to enumerate USB device [ 116.575881][ T45] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 116.586002][ T331] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 116.596998][ T45] usb 1-1: device descriptor read/8, error -71 [ 116.726998][ T45] usb 1-1: device descriptor read/8, error -71 [ 116.737074][ T331] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.747261][ T331] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.756506][ T1605] (unnamed net_device) (uninitialized): Assigned a random MAC address: aa:71:a2:a1:ff:1d [ 116.767619][ T331] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 116.777900][ T1605] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 116.784068][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.794117][ T1605] usb 4-1: USB disconnect, device number 56 [ 116.800765][ T331] usb 3-1: Product: syz [ 116.804985][ T331] usb 3-1: Manufacturer: syz [ 116.809869][ T331] usb 3-1: SerialNumber: syz [ 116.965902][ T45] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 116.988460][ T45] usb 1-1: device descriptor read/8, error -71 [ 117.020432][ T2150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.029900][ T2150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.049048][ T331] usb 3-1: 0:2 : does not exist [ 117.061103][ T331] usb 3-1: USB disconnect, device number 36 [ 117.112253][ T1605] hid-generic 0007:FFFFFBFF:0004.001F: hidraw0: HID v0.01 Device [syz0] on syz1 [ 117.124141][ T45] usb 1-1: device descriptor read/8, error -71 [ 117.163177][ T2191] fido_id[2191]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 117.198591][ T2197] netlink: 152 bytes leftover after parsing attributes in process `syz.2.566'. [ 117.230767][ T2199] netlink: 104 bytes leftover after parsing attributes in process `syz.2.567'. [ 117.236301][ T45] usb usb1-port1: unable to enumerate USB device [ 117.267194][ T2202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'. [ 117.284296][ T36] audit: type=1326 audit(2000000036.780:39585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2203 comm="syz.3.569" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6e679bf79 code=0x0 [ 117.306177][ T2202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'. [ 117.321176][ T2202] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 117.337147][ T2205] lo: entered allmulticast mode [ 117.342338][ T2205] lo: left allmulticast mode [ 117.412517][ T2208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6672 sclass=netlink_route_socket pid=2208 comm=syz.2.570 [ 117.597384][ T2224] GUP no longer grows the stack in syz.2.574 (2224): 200000005000-20000000a000 (200000001000) [ 117.607864][ T2224] CPU: 1 UID: 0 PID: 2224 Comm: syz.2.574 Not tainted syzkaller #0 4ae5b12b683c07c90cf68c53485f2a5719abf10e [ 117.607892][ T2224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 117.607906][ T2224] Call Trace: [ 117.607913][ T2224] [ 117.607921][ T2224] __dump_stack+0x21/0x30 [ 117.607947][ T2224] dump_stack_lvl+0x140/0x1c0 [ 117.607967][ T2224] ? __cfi_dump_stack_lvl+0x10/0x10 [ 117.607988][ T2224] ? find_vma+0xd3/0x120 [ 117.608008][ T2224] ? try_grab_folio_fast+0x155/0x520 [ 117.608025][ T2224] ? stack_depot_save_flags+0x38/0x800 [ 117.608044][ T2224] dump_stack+0x19/0x20 [ 117.608064][ T2224] __get_user_pages+0x1e18/0x22b0 [ 117.608094][ T2224] ? gup_fast_fallback+0x130d/0x14e0 [ 117.608110][ T2224] ? __reset_page_owner+0x450/0x450 [ 117.608160][ T2224] ? populate_vma_page_range+0x220/0x220 [ 117.608196][ T2224] ? down_read_killable+0x7f/0x100 [ 117.608226][ T2224] ? __cfi_down_read_killable+0x10/0x10 [ 117.608246][ T2224] ? get_user_pages_fast_only+0xc0/0xc0 [ 117.608262][ T2224] get_user_pages_unlocked+0x1b6/0x6d0 [ 117.608278][ T2224] hva_to_pfn+0x28a/0xab0 [ 117.608302][ T2224] ? __cfi_hva_to_pfn+0x10/0x10 [ 117.608325][ T2224] ? handle_changed_spte+0x70a/0x12c0 [ 117.608345][ T2224] ? mmu_try_to_unsync_pages+0xa3/0x790 [ 117.608363][ T2224] ? kvm_tdp_mmu_fast_pf_get_last_sptep+0x2d0/0x2d0 [ 117.608385][ T2224] __gfn_to_pfn_memslot+0x29f/0x330 [ 117.608410][ T2224] kvm_faultin_pfn+0x5d6/0x1560 [ 117.608435][ T2224] ? fast_page_fault+0x1170/0x1170 [ 117.608458][ T2224] ? __kvm_mmu_topup_memory_cache+0x490/0x850 [ 117.608480][ T2224] ? get_guest_cr3+0xc0/0xc0 [ 117.608504][ T2224] kvm_tdp_page_fault+0x204/0x320 [ 117.608521][ T2224] kvm_mmu_do_page_fault+0x2b9/0x660 [ 117.608537][ T2224] ? __kasan_check_write+0x18/0x20 [ 117.608557][ T2224] ? kvm_arch_async_page_ready+0x480/0x480 [ 117.608575][ T2224] ? kvm_multiple_exception+0x6d8/0xad0 [ 117.608594][ T2224] ? __cfi_rcu_note_context_switch+0x10/0x10 [ 117.608615][ T2224] kvm_mmu_page_fault+0x143/0x970 [ 117.608632][ T2224] handle_ept_violation+0x256/0x450 [ 117.608648][ T2224] ? vmx_vcpu_run+0x1116/0x1f70 [ 117.608693][ T2224] ? __cfi_handle_ept_violation+0x10/0x10 [ 117.608716][ T2224] vmx_handle_exit+0x12c0/0x1b10 [ 117.608745][ T2224] ? kvm_deliver_exception_payload+0xd7/0x200 [ 117.608765][ T2224] ? __cfi_vmx_vcpu_run+0x10/0x10 [ 117.608807][ T2224] ? vmx_handle_exit_irqoff+0xe9/0x780 [ 117.608838][ T2224] vcpu_run+0x49f7/0x7840 [ 117.608878][ T2224] ? signal_pending+0xc0/0xc0 [ 117.608897][ T2224] ? __kasan_check_write+0x18/0x20 [ 117.608915][ T2224] ? xfd_validate_state+0x68/0x140 [ 117.608935][ T2224] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 117.608951][ T2224] ? __kasan_check_write+0x18/0x20 [ 117.608970][ T2224] ? fpregs_mark_activate+0x68/0x160 [ 117.608985][ T2224] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 117.609001][ T2224] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 117.609017][ T2224] kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0 [ 117.609038][ T2224] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 117.609058][ T2224] ? __futex_wait+0x33c/0x3e0 [ 117.609081][ T2224] ? __cfi___futex_wait+0x10/0x10 [ 117.609108][ T2224] ? ioctl_has_perm+0x1bc/0x500 [ 117.609126][ T2224] ? __asan_memcpy+0x5a/0x80 [ 117.609163][ T2224] ? ioctl_has_perm+0x408/0x500 [ 117.609180][ T2224] ? has_cap_mac_admin+0xd0/0xd0 [ 117.609197][ T2224] ? __kasan_check_write+0x18/0x20 [ 117.609226][ T2224] ? mutex_lock_killable+0x97/0x1d0 [ 117.609276][ T2224] ? __cfi_mutex_lock_killable+0x10/0x10 [ 117.609304][ T2224] kvm_vcpu_ioctl+0xa48/0x1000 [ 117.609339][ T2224] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 117.609368][ T2224] ? do_futex+0x32a/0x510 [ 117.609386][ T2224] ? __cfi_do_futex+0x10/0x10 [ 117.609406][ T2224] ? __fget_files+0x2c5/0x340 [ 117.609429][ T2224] ? bpf_lsm_file_ioctl+0xd/0x20 [ 117.609444][ T2224] ? security_file_ioctl+0x3e/0x110 [ 117.609459][ T2224] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 117.609482][ T2224] __se_sys_ioctl+0x132/0x1b0 [ 117.609505][ T2224] __x64_sys_ioctl+0x7f/0xa0 [ 117.609527][ T2224] x64_sys_call+0x1878/0x2ee0 [ 117.609563][ T2224] do_syscall_64+0x57/0xf0 [ 117.609587][ T2224] ? clear_bhb_loop+0x50/0xa0 [ 117.609611][ T2224] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 117.609633][ T2224] RIP: 0033:0x7f8965b9bf79 [ 117.609655][ T2224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.609669][ T2224] RSP: 002b:00007f89645f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.609692][ T2224] RAX: ffffffffffffffda RBX: 00007f8965e15fa0 RCX: 00007f8965b9bf79 [ 117.609705][ T2224] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 117.609715][ T2224] RBP: 00007f8965c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 117.609725][ T2224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.609735][ T2224] R13: 00007f8965e16038 R14: 00007f8965e15fa0 R15: 00007ffc56c5ee48 [ 117.609749][ T2224] [ 118.110818][ T36] audit: type=1400 audit(2000000037.610:39586): avc: denied { sqpoll } for pid=2226 comm="syz.2.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 118.158751][ T2232] netlink: 104 bytes leftover after parsing attributes in process `syz.3.577'. [ 118.239207][ T2242] overlay: filesystem on ./bus not supported as upperdir [ 118.375883][ T10] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 118.547688][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 118.555858][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 118.565250][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.582150][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.592829][ T36] audit: type=1400 audit(2000000038.100:39587): avc: denied { relabelfrom } for pid=2255 comm="syz.0.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 118.613091][ T36] audit: type=1400 audit(2000000038.100:39588): avc: denied { relabelto } for pid=2255 comm="syz.0.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 118.613644][ T2256] syzkaller1: entered promiscuous mode [ 118.638529][ T2256] syzkaller1: entered allmulticast mode [ 118.656477][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 118.665554][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.673866][ T10] usb 3-1: Product: syz [ 118.678217][ T10] usb 3-1: Manufacturer: syz [ 118.682984][ T10] usb 3-1: SerialNumber: syz [ 118.813656][ T36] audit: type=1400 audit(2000000038.310:39589): avc: denied { ioctl } for pid=2266 comm="syz.0.589" path="/156/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 118.893366][ T10] usb 3-1: 0:2 : does not exist [ 118.898888][ T10] usb 3-1: unit 0 not found! [ 118.906315][ T10] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 118.916741][ T10] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 118.926917][ T10] usb 3-1: USB disconnect, device number 37 [ 118.941910][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 119.127106][ T36] audit: type=1400 audit(2000000038.630:39590): avc: denied { getopt } for pid=2286 comm="syz.3.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 119.205898][ T1605] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 119.355918][ T1605] usb 1-1: Using ep0 maxpacket: 16 [ 119.362414][ T1605] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 119.370668][ T1605] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.380852][ T1605] usb 1-1: config 0 has no interface number 0 [ 119.388447][ T1605] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 119.402403][ T1605] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.410559][ T1605] usb 1-1: Product: syz [ 119.414755][ T1605] usb 1-1: Manufacturer: syz [ 119.419421][ T1605] usb 1-1: SerialNumber: syz [ 119.424870][ T1605] usb 1-1: config 0 descriptor?? [ 119.435799][ T1605] snd-usb-audio 1-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 119.453869][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 119.634181][ T2293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.642792][ T2293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.656776][ T45] usb 1-1: USB disconnect, device number 64 [ 119.826062][ T1147] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 119.955899][ T1147] usb 3-1: device descriptor read/64, error -71 [ 120.195919][ T1147] usb 3-1: device descriptor read/64, error -71 [ 120.415915][ T45] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 120.415915][ T10] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 120.435931][ T1147] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 120.565883][ T1147] usb 3-1: device descriptor read/64, error -71 [ 120.576007][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 120.576124][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 120.583083][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 120.597160][ T45] usb 1-1: config 1 interface 0 altsetting 250 bulk endpoint 0x82 has invalid maxpacket 1023 [ 120.607563][ T45] usb 1-1: config 1 interface 0 altsetting 250 bulk endpoint 0x3 has invalid maxpacket 1015 [ 120.617896][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.617933][ T45] usb 1-1: config 1 interface 0 has no altsetting 0 [ 120.628558][ T10] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 120.638256][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.652909][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.660944][ T45] usb 1-1: Product: syz [ 120.661961][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 120.665510][ T45] usb 1-1: Manufacturer: syz [ 120.674744][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.679186][ T45] usb 1-1: SerialNumber: syz [ 120.692434][ T10] usb 2-1: Product: syz [ 120.693166][ T2301] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 120.697663][ T10] usb 2-1: Manufacturer: syz [ 120.708484][ T2301] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 120.711694][ T10] usb 2-1: SerialNumber: syz [ 120.825902][ T1147] usb 3-1: device descriptor read/64, error -71 [ 120.853813][ T36] audit: type=1400 audit(2000000040.350:39591): avc: denied { listen } for pid=2321 comm="syz.3.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.874264][ T36] audit: type=1400 audit(2000000040.370:39592): avc: denied { accept } for pid=2321 comm="syz.3.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.936041][ T1147] usb usb3-port1: attempt power cycle [ 120.998702][ T2303] netlink: 'syz.1.603': attribute type 27 has an invalid length. [ 121.009554][ T2303] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 121.026283][ T36] audit: type=1400 audit(2000000040.530:39593): avc: denied { ioctl } for pid=2302 comm="syz.1.603" path="socket:[18605]" dev="sockfs" ino=18605 ioctlcmd=0x8981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 121.124068][ T2301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.132723][ T2301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.141335][ T2301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.149953][ T2301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.159223][ T2301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.168429][ T2301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.180794][ T45] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 121.191277][ T45] usb 1-1: USB disconnect, device number 65 [ 121.275925][ T1147] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 121.297011][ T1147] usb 3-1: device descriptor read/8, error -71 [ 121.427056][ T1147] usb 3-1: device descriptor read/8, error -71 [ 121.540649][ T10] usb 2-1: USB disconnect, device number 52 [ 121.665992][ T1147] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 121.687152][ T1147] usb 3-1: device descriptor read/8, error -71 [ 121.711147][ T2338] netlink: 104 bytes leftover after parsing attributes in process `syz.0.615'. [ 121.741947][ T2336] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:396 [ 121.796378][ T36] audit: type=1400 audit(2000000041.290:39594): avc: denied { mounton } for pid=2343 comm="syz.1.618" path="/139/file0" dev="tmpfs" ino=754 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 121.840174][ T1147] usb 3-1: device descriptor read/8, error -71 [ 121.890241][ T36] audit: type=1400 audit(2000000041.390:39595): avc: denied { accept } for pid=2339 comm="syz.0.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 121.955994][ T1147] usb usb3-port1: unable to enumerate USB device [ 122.095914][ T10] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 122.246944][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.257114][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.266798][ T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 122.275945][ T1147] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 122.283535][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 122.291619][ T10] usb 2-1: SerialNumber: syz [ 122.445866][ T1147] usb 1-1: Using ep0 maxpacket: 16 [ 122.452589][ T1147] usb 1-1: unable to get BOS descriptor or descriptor too short [ 122.461084][ T1147] usb 1-1: config 13 has an invalid interface number: 50 but max is 0 [ 122.469424][ T1147] usb 1-1: config 13 has no interface number 0 [ 122.475630][ T1147] usb 1-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 122.485773][ T1147] usb 1-1: config 13 interface 50 has no altsetting 0 [ 122.494278][ T1147] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 122.503423][ T1147] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.511498][ T1147] usb 1-1: Product: syz [ 122.517237][ T10] usb 2-1: 0:2 : does not exist [ 122.523086][ T1147] usb 1-1: Manufacturer: syz [ 122.528764][ T10] usb 2-1: USB disconnect, device number 53 [ 122.534884][ T1147] usb 1-1: SerialNumber: syz [ 122.543455][ T2358] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 122.550982][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 122.740795][ T2365] netlink: 104 bytes leftover after parsing attributes in process `syz.2.624'. [ 122.766150][ T1147] usb 1-1: MIDIStreaming interface descriptor not found [ 122.786591][ T1147] usb 1-1: USB disconnect, device number 66 [ 122.804071][ T352] udevd[352]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:13.50/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 122.857602][ T36] audit: type=1400 audit(2000000042.360:39596): avc: denied { execute } for pid=2366 comm="syz.2.625" name="file1" dev="tmpfs" ino=804 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 122.955874][ T45] usb 4-1: new low-speed USB device number 57 using dummy_hcd [ 123.051958][ T2372] syz.1.626: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 123.070061][ T2372] CPU: 1 UID: 0 PID: 2372 Comm: syz.1.626 Not tainted syzkaller #0 4ae5b12b683c07c90cf68c53485f2a5719abf10e [ 123.070094][ T2372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 123.070107][ T2372] Call Trace: [ 123.070114][ T2372] [ 123.070123][ T2372] __dump_stack+0x21/0x30 [ 123.070156][ T2372] dump_stack_lvl+0x140/0x1c0 [ 123.070181][ T2372] ? __cfi_dump_stack_lvl+0x10/0x10 [ 123.070209][ T2372] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 123.070243][ T2372] dump_stack+0x19/0x20 [ 123.070268][ T2372] warn_alloc+0x1e7/0x2c0 [ 123.070291][ T2372] ? do_syscall_64+0x57/0xf0 [ 123.070320][ T2372] ? __cfi_warn_alloc+0x10/0x10 [ 123.070343][ T2372] ? __get_vm_area_node+0x201/0x3d0 [ 123.070365][ T2372] ? kvm_sched_clock_read+0x15/0x30 [ 123.070390][ T2372] ? packet_set_ring+0x745/0x28c0 [ 123.070420][ T2372] __vmalloc_node_range_noprof+0x6aa/0x1480 [ 123.070444][ T2372] ? packet_set_ring+0x679/0x28c0 [ 123.070470][ T2372] ? do_sock_setsockopt+0x27c/0x410 [ 123.070501][ T2372] ? __x64_sys_setsockopt+0x1b7/0x250 [ 123.070533][ T2372] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 123.070559][ T2372] ? __asan_memset+0x39/0x50 [ 123.070583][ T2372] ? __alloc_pages_noprof+0xe0/0x7e0 [ 123.070605][ T2372] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 123.070629][ T2372] ? packet_set_ring+0x745/0x28c0 [ 123.070657][ T2372] vzalloc_noprof+0x103/0x1d0 [ 123.070681][ T2372] ? packet_set_ring+0x745/0x28c0 [ 123.070711][ T2372] ? __cfi_vzalloc_noprof+0x10/0x10 [ 123.070735][ T2372] ? packet_set_ring+0x679/0x28c0 [ 123.070774][ T2372] packet_set_ring+0x745/0x28c0 [ 123.070805][ T2372] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 123.070837][ T2372] ? check_stack_object+0x12b/0x150 [ 123.070864][ T2372] ? packet_mmap+0x590/0x590 [ 123.070892][ T2372] ? __check_object_size+0xe0/0x830 [ 123.070916][ T2372] ? __asan_memcpy+0x5a/0x80 [ 123.070942][ T2372] ? __cfi___check_object_size+0x10/0x10 [ 123.070968][ T2372] ? avc_has_perm_noaudit+0x28a/0x360 [ 123.070997][ T2372] ? __kasan_check_write+0x18/0x20 [ 123.071023][ T2372] packet_setsockopt+0xdb5/0x1510 [ 123.071052][ T2372] ? __cfi_packet_setsockopt+0x10/0x10 [ 123.071082][ T2372] ? selinux_socket_setsockopt+0x324/0x3d0 [ 123.071115][ T2372] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 123.071149][ T2372] ? do_futex+0x32a/0x510 [ 123.071175][ T2372] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 123.071206][ T2372] ? security_socket_setsockopt+0x3d/0x100 [ 123.071237][ T2372] ? __cfi_packet_setsockopt+0x10/0x10 [ 123.071266][ T2372] do_sock_setsockopt+0x27c/0x410 [ 123.071297][ T2372] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 123.071329][ T2372] __x64_sys_setsockopt+0x1b7/0x250 [ 123.071360][ T2372] x64_sys_call+0x2adc/0x2ee0 [ 123.071389][ T2372] do_syscall_64+0x57/0xf0 [ 123.071419][ T2372] ? clear_bhb_loop+0x50/0xa0 [ 123.071450][ T2372] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 123.071480][ T2372] RIP: 0033:0x7f7f5cf9bf79 [ 123.071498][ T2372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.071516][ T2372] RSP: 002b:00007f7f5ddce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 123.071541][ T2372] RAX: ffffffffffffffda RBX: 00007f7f5d215fa0 RCX: 00007f7f5cf9bf79 [ 123.071558][ T2372] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000006 [ 123.071571][ T2372] RBP: 00007f7f5d0327e0 R08: 000000000000001c R09: 0000000000000000 [ 123.071586][ T2372] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 123.071600][ T2372] R13: 00007f7f5d216038 R14: 00007f7f5d215fa0 R15: 00007ffd0d9552b8 [ 123.071620][ T2372] [ 123.071836][ T2372] Mem-Info: [ 123.370059][ T2377] fuse: Bad value for 'user_id' [ 123.373984][ T2372] active_anon:31653 inactive_anon:426 isolated_anon:0 [ 123.373984][ T2372] active_file:11459 inactive_file:12556 isolated_file:0 [ 123.373984][ T2372] unevictable:0 dirty:60 writeback:0 [ 123.373984][ T2372] slab_reclaimable:5489 slab_unreclaimable:70928 [ 123.373984][ T2372] mapped:25651 shmem:20701 pagetables:997 [ 123.373984][ T2372] sec_pagetables:0 bounce:0 [ 123.373984][ T2372] kernel_misc_reclaimable:0 [ 123.373984][ T2372] free:1494619 free_pcp:4170 free_cma:0 [ 123.399270][ T2378] fuse: Bad value for 'user_id' [ 123.399331][ T2378] fuse: Bad value for 'user_id' [ 123.418315][ T2377] fuse: Bad value for 'user_id' [ 123.423731][ T2372] Node 0 active_anon:127012kB inactive_anon:1704kB active_file:45836kB inactive_file:50224kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:102604kB dirty:240kB writeback:0kB shmem:82804kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5596kB pagetables:3988kB sec_pagetables:0kB all_unreclaimable? no [ 123.526535][ T2372] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963376kB mlocked:0kB bounce:0kB free_pcp:5212kB local_pcp:0kB free_cma:0kB [ 123.556443][ T2372] lowmem_reserve[]: 0 3921 3921 [ 123.561423][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.571614][ T45] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 123.585151][ T2372] Normal free:3020288kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:128312kB inactive_anon:1704kB active_file:45836kB inactive_file:50224kB unevictable:0kB writepending:240kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:9144kB local_pcp:8200kB free_cma:0kB [ 123.617871][ T2372] lowmem_reserve[]: 0 0 0 [ 123.622373][ T2372] DMA32: 5*4kB (M) 2*8kB (M) 5*16kB (M) 5*32kB (M) 5*64kB (M) 4*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 123.639768][ T2372] Normal: 47*4kB (UE) 41*8kB (UME) 3*16kB (UE) 37*32kB (UE) 362*64kB (UME) 130*128kB (UME) 21*256kB (UME) 3*512kB (UE) 4*1024kB (UME) 5*2048kB (UME) 724*4096kB (M) = 3028308kB [ 123.657654][ T45] usb 4-1: string descriptor 0 read error: -22 [ 123.663994][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.674690][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.690390][ T2372] 44752 total pagecache pages [ 123.695222][ T2372] 40 pages in swap cache [ 123.700300][ T45] usb 4-1: bad CDC descriptors [ 123.706285][ T2372] Free swap = 124320kB [ 123.710467][ T2372] Total swap = 124996kB [ 123.714639][ T2372] 2097051 pages RAM [ 123.718848][ T2372] 0 pages HighMem/MovableOnly [ 123.723545][ T2372] 352241 pages reserved [ 123.727942][ T2372] 0 pages cma reserved [ 123.734664][ T2372] Memory allocations: [ 123.749365][ T2372] 0 B 0 init/main.c:1477 func:do_initcalls [ 123.756842][ T2372] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 123.765060][ T2372] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 123.772989][ T2372] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 123.781177][ T2372] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 123.789162][ T2372] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 123.798406][ T2372] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 123.807262][ T2372] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 123.815337][ T2372] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 123.823283][ T2372] 0 B 0 init/initramfs.c:101 func:find_link [ 123.880049][ T2401] netlink: 68 bytes leftover after parsing attributes in process `syz.1.631'. [ 123.890750][ T2401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.631'. [ 123.900531][ T2401] tipc: Enabled bearer , priority 10 [ 123.970890][ T45] usb 4-1: USB disconnect, device number 57 [ 124.165921][ T1605] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 124.335896][ T1605] usb 3-1: Using ep0 maxpacket: 16 [ 124.342324][ T1605] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 124.352840][ T1605] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.363794][ T1605] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.373590][ T1605] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 124.386427][ T1605] usb 3-1: config 7 interface 0 has no altsetting 0 [ 124.393060][ T1605] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 124.402421][ T1605] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.466069][ T45] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 124.499895][ T2435] netlink: 464 bytes leftover after parsing attributes in process `syz.3.636'. [ 124.627133][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.638176][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.651084][ T45] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 124.660232][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.669397][ T45] usb 2-1: config 0 descriptor?? [ 124.747184][ T10] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 124.876792][ T45] aureal 0003:0755:2626.0020: unknown main item tag 0x0 [ 124.883843][ T45] aureal 0003:0755:2626.0020: unknown main item tag 0x0 [ 124.890871][ T45] aureal 0003:0755:2626.0020: unknown main item tag 0x0 [ 124.897964][ T45] aureal 0003:0755:2626.0020: unknown main item tag 0x0 [ 124.904962][ T45] aureal 0003:0755:2626.0020: unknown main item tag 0x0 [ 124.905930][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 124.912027][ T45] aureal 0003:0755:2626.0020: unknown main item tag 0x0 [ 124.920111][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.935148][ T45] aureal 0003:0755:2626.0020: hidraw0: USB HID v2.00 Device [HID 0755:2626] on usb-dummy_hcd.1-1/input0 [ 124.935327][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.957174][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 124.970367][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 124.979723][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.989142][ T10] usb 4-1: config 0 descriptor?? [ 125.015043][ T1605] usbhid 3-1:7.0: can't add hid device: -71 [ 125.025897][ T9] tipc: Node number set to 1309745818 [ 125.025994][ T1605] usbhid 3-1:7.0: probe with driver usbhid failed with error -71 [ 125.045142][ T1605] usb 3-1: USB disconnect, device number 42 [ 125.088041][ T9] usb 2-1: USB disconnect, device number 54 [ 125.831210][ T36] audit: type=1400 audit(2000000045.330:39597): avc: denied { execute_no_trans } for pid=2459 comm="syz.0.643" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8A54858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 125.847180][ T2460] overlayfs: failed to resolve './bus': -2 [ 125.875912][ T1605] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 125.915346][ T36] audit: type=1400 audit(2000000045.410:39598): avc: denied { map } for pid=2465 comm="syz.0.646" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 125.939556][ T36] audit: type=1400 audit(2000000045.440:39599): avc: denied { setattr } for pid=2465 comm="syz.0.646" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 125.966005][ T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 126.037064][ T1605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.047001][ T1605] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 126.056191][ T1605] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.065016][ T1605] usb 2-1: config 0 descriptor?? [ 126.095919][ T9] usb 3-1: device descriptor read/64, error -71 [ 126.120478][ T2468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.129121][ T2468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.139048][ T36] audit: type=1326 audit(2000000045.640:39600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2467 comm="syz.3.647" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb6e679bf79 code=0x0 [ 126.205894][ T673] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 126.336321][ T9] usb 3-1: device descriptor read/64, error -71 [ 126.357060][ T673] usb 1-1: config 1 interface 0 altsetting 185 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 126.368113][ T673] usb 1-1: config 1 interface 0 altsetting 185 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 126.379146][ T673] usb 1-1: config 1 interface 0 has no altsetting 0 [ 126.387651][ T673] usb 1-1: New USB device found, idVendor=056a, idProduct=00d4, bcdDevice= 0.40 [ 126.396799][ T673] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.404933][ T673] usb 1-1: Product: ᒭ䈰彽䑫▿ſ姩ê螓긮ꥄ覤袆뒊㷡ê¿è¸ìšºÕ’歎헜ꎶè„㹡욊䩴Ý㒟㈔à¹ê‚˜ç„–謩㖳䭕蓱়櫽闀驉⊅䔬࿧ [ 126.421128][ T673] usb 1-1: Manufacturer: ë¼î©µâ…¡à¦³ê‹µï„レ䚂⪉╿㪹봓〳ᜉⲃ뽫創àªã„½å™ç–·è¬í¾à¸–璽㾖 [ 126.432840][ T673] usb 1-1: SerialNumber: syz [ 126.438938][ T2466] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 126.446272][ T2466] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 126.575913][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 126.674438][ T1605] usbhid 2-1:0.0: can't add hid device: -71 [ 126.680713][ T1605] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 126.689567][ T1605] usb 2-1: USB disconnect, device number 55 [ 126.715867][ T9] usb 3-1: device descriptor read/64, error -71 [ 126.858567][ T673] usbhid 1-1:1.0: can't add hid device: -71 [ 126.864608][ T673] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 126.874090][ T673] usb 1-1: USB disconnect, device number 67 [ 126.955923][ T9] usb 3-1: device descriptor read/64, error -71 [ 127.065964][ T9] usb usb3-port1: attempt power cycle [ 127.405905][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 127.415003][ T2473] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 127.425877][ T1605] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 127.434412][ T2473] syzkaller1: left promiscuous mode [ 127.439925][ T2473] syzkaller1: left allmulticast mode [ 127.446369][ T9] usb 3-1: device descriptor read/8, error -71 [ 127.575878][ T1605] usb 2-1: Using ep0 maxpacket: 8 [ 127.582110][ T1605] usb 2-1: config 1 has an invalid interface number: 5 but max is 2 [ 127.590229][ T1605] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 127.598087][ T9] usb 3-1: device descriptor read/8, error -71 [ 127.600697][ T1605] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 127.616112][ T1605] usb 2-1: config 1 has no interface number 1 [ 127.622241][ T1605] usb 2-1: too many endpoints for config 1 interface 5 altsetting 80: 120, using maximum allowed: 30 [ 127.633223][ T1605] usb 2-1: config 1 interface 5 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 127.646573][ T1605] usb 2-1: config 1 interface 5 has no altsetting 0 [ 127.654763][ T1605] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 127.669211][ T1605] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.677461][ T1605] usb 2-1: Product: syz [ 127.682037][ T1605] usb 2-1: Manufacturer: syz [ 127.686724][ T1605] usb 2-1: SerialNumber: syz [ 127.697889][ T36] audit: type=1400 audit(2000000047.200:39601): avc: denied { ioctl } for pid=2479 comm="syz.0.651" path="/180/file2" dev="tmpfs" ino=995 ioctlcmd=0x1282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 127.846192][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 127.866940][ T9] usb 3-1: device descriptor read/8, error -71 [ 127.900179][ T1605] usb 2-1: 0:2 : does not exist [ 127.910139][ T1605] usb 2-1: USB disconnect, device number 56 [ 127.921051][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 127.975996][ T1147] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 127.996987][ T9] usb 3-1: device descriptor read/8, error -71 [ 128.106067][ T9] usb usb3-port1: unable to enumerate USB device [ 128.127083][ T1147] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.138750][ T1147] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 128.147912][ T1147] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.155958][ T1147] usb 1-1: Product: syz [ 128.160210][ T1147] usb 1-1: Manufacturer: syz [ 128.164842][ T1147] usb 1-1: SerialNumber: syz [ 128.170353][ T1147] usb 1-1: config 0 descriptor?? [ 128.177393][ T1147] CoreChips 1-1:0.0: probe with driver CoreChips failed with error -22 [ 128.378959][ T2482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.387764][ T2482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.396212][ T1605] usb 1-1: USB disconnect, device number 68 [ 128.428070][ T2484] kvm: kvm [2483]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x400005 [ 128.705889][ T1147] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 128.855905][ T1147] usb 2-1: Using ep0 maxpacket: 32 [ 128.862211][ T1147] usb 2-1: config 0 has an invalid interface number: 191 but max is 0 [ 128.870493][ T1147] usb 2-1: config 0 has no interface number 0 [ 128.876653][ T1147] usb 2-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 128.888559][ T1147] usb 2-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 128.897697][ T1147] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.905742][ T1147] usb 2-1: Product: syz [ 128.909975][ T1147] usb 2-1: Manufacturer: syz [ 128.914611][ T1147] usb 2-1: SerialNumber: syz [ 128.919962][ T1147] usb 2-1: config 0 descriptor?? [ 128.925945][ T2488] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 129.115916][ T1605] usb 3-1: new low-speed USB device number 47 using dummy_hcd [ 129.137133][ T2487] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 129.255899][ T1605] usb 3-1: device descriptor read/64, error -71 [ 129.344932][ T1147] asix 2-1:0.191 (unnamed net_device) (uninitialized): invalid hw address, using random [ 129.365915][ T673] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 129.495933][ T1605] usb 3-1: device descriptor read/64, error -71 [ 129.515880][ T673] usb 1-1: Using ep0 maxpacket: 16 [ 129.522901][ T673] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 129.532035][ T673] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=20 [ 129.540225][ T673] usb 1-1: SerialNumber: syz [ 129.545578][ T673] usb 1-1: config 0 descriptor?? [ 129.551881][ T673] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 129.560027][ T1147] asix 2-1:0.191 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 129.570682][ T673] usb 1-1: Detected FT232A [ 129.575442][ T1147] asix 2-1:0.191 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 129.586312][ T673] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 129.735869][ T1605] usb 3-1: new low-speed USB device number 48 using dummy_hcd [ 129.753550][ T673] usb 1-1: USB disconnect, device number 69 [ 129.760353][ T673] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 129.771069][ T1147] asix 2-1:0.191 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 129.783954][ T673] ftdi_sio 1-1:0.0: device disconnected [ 129.784833][ T2500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.789592][ T1147] asix 2-1:0.191 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 129.799421][ T2500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.875926][ T1605] usb 3-1: device descriptor read/64, error -71 [ 129.957633][ T1147] asix 2-1:0.191 eth1: register 'asix' at usb-dummy_hcd.1-1, ASIX AX88178 USB 2.0 Ethernet, c6:ef:39:ac:28:a0 [ 129.970730][ T1147] usb 2-1: USB disconnect, device number 57 [ 129.977228][ T1147] asix 2-1:0.191 eth1: unregister 'asix' usb-dummy_hcd.1-1, ASIX AX88178 USB 2.0 Ethernet [ 130.125932][ T1605] usb 3-1: device descriptor read/64, error -71 [ 130.235988][ T1605] usb usb3-port1: attempt power cycle [ 130.333099][ T2508] netlink: 104 bytes leftover after parsing attributes in process `syz.3.663'. [ 130.356247][ T2510] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 130.362928][ T2511] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 130.365141][ T2510] overlayfs: missing 'lowerdir' [ 130.372934][ T2511] overlayfs: missing 'lowerdir' [ 130.394922][ T2513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.403971][ T2513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.425862][ T1147] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 130.466382][ T10] usbhid 4-1:0.0: can't add hid device: -32 [ 130.472357][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 130.545885][ T45] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 130.575897][ T1605] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 130.577543][ T1147] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 174, changing to 11 [ 130.594661][ T1147] usb 2-1: config 0 interface 0 has no altsetting 0 [ 130.597484][ T1605] usb 3-1: device descriptor read/8, error -71 [ 130.601396][ T1147] usb 2-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 130.616619][ T1147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.625405][ T1147] usb 2-1: config 0 descriptor?? [ 130.696326][ T45] usb 1-1: no configurations [ 130.701029][ T45] usb 1-1: can't read configurations, error -22 [ 130.737022][ T1605] usb 3-1: device descriptor read/8, error -71 [ 130.835911][ T45] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 130.942428][ T2518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.951162][ T2518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.971464][ T36] audit: type=1400 audit(2000000050.470:39602): avc: denied { create } for pid=2517 comm="syz.3.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 130.991276][ T1605] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 130.999325][ T45] usb 1-1: no configurations [ 131.003969][ T45] usb 1-1: can't read configurations, error -22 [ 131.010886][ T45] usb usb1-port1: attempt power cycle [ 131.027196][ T1605] usb 3-1: device descriptor read/8, error -71 [ 131.157151][ T1605] usb 3-1: device descriptor read/8, error -71 [ 131.266018][ T1605] usb usb3-port1: unable to enumerate USB device [ 131.289488][ T2520] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=18 sclass=netlink_audit_socket pid=2520 comm=syz.1.660 [ 131.355902][ T45] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 131.376765][ T45] usb 1-1: no configurations [ 131.381443][ T45] usb 1-1: can't read configurations, error -22 [ 131.395735][ T1147] usb 2-1: string descriptor 0 read error: -71 [ 131.402229][ T1147] uclogic 0003:5543:0081.0021: failed retrieving string descriptor #200: -71 [ 131.411288][ T1147] uclogic 0003:5543:0081.0021: failed retrieving pen parameters: -71 [ 131.419479][ T1147] uclogic 0003:5543:0081.0021: failed probing pen v2 parameters: -71 [ 131.427652][ T1147] uclogic 0003:5543:0081.0021: failed probing parameters: -71 [ 131.435180][ T1147] uclogic 0003:5543:0081.0021: probe with driver uclogic failed with error -71 [ 131.446696][ T1147] usb 2-1: USB disconnect, device number 58 [ 131.522293][ T2522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.530782][ T45] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 131.538622][ T2522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.547105][ T2522] loop7: detected capacity change from 0 to 8 [ 131.556738][ T45] usb 1-1: no configurations [ 131.561360][ T45] usb 1-1: can't read configurations, error -22 [ 131.567778][ T45] usb usb1-port1: unable to enumerate USB device [ 131.608173][ T51] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.617421][ T51] Buffer I/O error on dev loop7, logical block 0, async page read [ 131.625298][ T2522] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.634541][ T2522] Buffer I/O error on dev loop7, logical block 0, async page read [ 131.642401][ T2522] loop7: unable to read partition table [ 131.648148][ T2522] loop_reread_partitions: partition scan of loop7 (úùƒå´ ‰ü¾CêjÌ–ã¢P=ý?ø}Xÿ) failed (rc=-5) [ 131.660123][ T2523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.668901][ T2523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.757708][ T2530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.766547][ T2530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.978958][ T2537] overlay: Bad value for 'redirect_dir' [ 132.037754][ T36] audit: type=1400 audit(2000000051.540:39603): avc: denied { getopt } for pid=2539 comm="syz.1.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.097206][ T12] bridge_slave_0: left allmulticast mode [ 132.102948][ T12] bridge_slave_0: left promiscuous mode [ 132.108928][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.134177][ T36] audit: type=1400 audit(2000000051.630:39604): avc: denied { mounton } for pid=2541 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 132.229938][ T2541] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.237169][ T2541] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.244262][ T2541] bridge_slave_0: entered allmulticast mode [ 132.250785][ T2541] bridge_slave_0: entered promiscuous mode [ 132.257588][ T2541] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.264751][ T2541] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.271950][ T2541] bridge_slave_1: entered allmulticast mode [ 132.278499][ T2541] bridge_slave_1: entered promiscuous mode [ 132.285429][ T12] veth1_macvtap: left promiscuous mode [ 132.291188][ T12] >: left promiscuous mode [ 132.296063][ T1605] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 132.404271][ T2541] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.411409][ T2541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.419153][ T2541] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.426211][ T2541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.445900][ T1605] usb 2-1: Using ep0 maxpacket: 32 [ 132.453983][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.454458][ T1605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.472300][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.479515][ T1605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.492169][ T1605] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 132.492724][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.501393][ T1605] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.508334][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.534938][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.542051][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.551575][ T1605] usb 2-1: config 0 descriptor?? [ 132.578534][ T2541] veth0_vlan: entered promiscuous mode [ 132.592382][ T2541] veth1_macvtap: entered promiscuous mode [ 132.614792][ T36] audit: type=1400 audit(2000000052.110:39605): avc: denied { mounton } for pid=2541 comm="syz-executor" path="/root/syzkaller.8iiczU/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 132.964928][ T2575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.683'. [ 132.976316][ T1147] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 132.984394][ T1605] savu 0003:1E7D:2D5A.0022: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 133.146059][ T1147] usb 3-1: Using ep0 maxpacket: 32 [ 133.152326][ T1147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.163417][ T1147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.173369][ T1147] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 133.182520][ T1147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.195064][ T1147] usb 3-1: config 0 descriptor?? [ 133.205893][ T331] usb 2-1: USB disconnect, device number 59 [ 133.206062][ T1147] hub 3-1:0.0: USB hub found [ 133.228506][ T2585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.237159][ T2585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.247147][ T2585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.255666][ T2585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.264439][ T2585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.273545][ T2585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.341110][ T36] audit: type=1400 audit(2000000052.840:39606): avc: denied { getopt } for pid=2586 comm="syz.0.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.408612][ T1147] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 133.695975][ T1605] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 133.809880][ T36] audit: type=1326 audit(2000000053.310:39607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2595 comm="syz.3.689" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6e679bf79 code=0x0 [ 133.837001][ T1147] hid-generic 0003:046D:C31C.0023: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 133.855914][ T1605] usb 1-1: Using ep0 maxpacket: 16 [ 133.868434][ T1605] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 133.880867][ T1605] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.888963][ T1605] usb 1-1: Product: syz [ 133.893195][ T1605] usb 1-1: Manufacturer: syz [ 133.904227][ T1605] usb 1-1: SerialNumber: syz [ 134.186053][ T331] usb 3-1: USB disconnect, device number 51 [ 134.196113][ T45] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 134.323602][ T1605] snd-usb-audio 1-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 134.335446][ T1605] usb 1-1: USB disconnect, device number 74 [ 134.344183][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:222.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 134.363334][ T45] usb 2-1: config 0 has an invalid descriptor of length 214, skipping remainder of the config [ 134.374522][ T45] usb 2-1: config 0 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 134.387722][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 134.394870][ T45] usb 2-1: New USB device found, idVendor=06a3, idProduct=0cd7, bcdDevice= 0.00 [ 134.406450][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.416655][ T45] usb 2-1: config 0 descriptor?? [ 134.424920][ T45] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 134.829747][ T2612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.838965][ T2612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.909799][ T2619] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1339904195 (1339904195 ns) > initial count (1330684943 ns). Using initial count to start timer. [ 134.927366][ T1605] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 134.938170][ T2619] kvm: kvm [2618]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 134.947633][ T2619] kvm: kvm [2618]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 134.957106][ T36] audit: type=1400 audit(2000000054.460:39608): avc: denied { create } for pid=2621 comm="syz.0.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 134.972499][ T2619] kvm: vcpu 0: requested 14336 ns lapic timer period limited to 200000 ns [ 134.995455][ T2626] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3356105871 (214790775744 ns) > initial count (20330104064 ns). Using initial count to start timer. [ 135.019500][ T36] audit: type=1326 audit(2000000054.520:39609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2628 comm="syz.0.698" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3417b9bf79 code=0x0 [ 135.085881][ T1605] usb 3-1: Using ep0 maxpacket: 8 [ 135.092293][ T1605] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 135.100612][ T1605] usb 3-1: can't read configurations, error -61 [ 135.118177][ T2631] syzkaller1: entered promiscuous mode [ 135.123863][ T2631] syzkaller1: entered allmulticast mode [ 135.235963][ T1605] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 135.395875][ T1605] usb 3-1: Using ep0 maxpacket: 8 [ 135.402504][ T1605] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 135.410362][ T1605] usb 3-1: can't read configurations, error -61 [ 135.416947][ T1605] usb usb3-port1: attempt power cycle [ 135.755880][ T1605] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 135.776265][ T1605] usb 3-1: Using ep0 maxpacket: 8 [ 135.782731][ T1605] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 135.790563][ T1605] usb 3-1: can't read configurations, error -61 [ 135.866104][ T2651] 9pnet_fd: Insufficient options for proto=fd [ 135.925917][ T1605] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 135.946247][ T1605] usb 3-1: Using ep0 maxpacket: 8 [ 135.952874][ T1605] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 135.961074][ T1605] usb 3-1: can't read configurations, error -61 [ 135.968637][ T1605] usb usb3-port1: unable to enumerate USB device [ 136.107982][ T2658] netlink: 'syz.3.705': attribute type 1 has an invalid length. [ 136.115686][ T2658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.705'. [ 136.124614][ T2658] bridge0: port 1(bridge_slave_0) entered listening state [ 136.205888][ T331] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 136.357055][ T331] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 136.365317][ T331] usb 1-1: config 1 has no interface number 0 [ 136.371479][ T331] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023 [ 136.381492][ T331] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16 [ 136.392598][ T331] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 136.401819][ T331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.409862][ T331] usb 1-1: Product: syz [ 136.414170][ T331] usb 1-1: Manufacturer: syz [ 136.418850][ T331] usb 1-1: SerialNumber: syz [ 136.424542][ T2655] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 136.431829][ T2655] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 136.731856][ T2660] netlink: 104 bytes leftover after parsing attributes in process `syz.3.707'. [ 136.752524][ T2664] rust_binder: 640: no such ref 0 [ 136.779305][ T2669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.788104][ T2669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.954979][ T1147] usb 2-1: USB disconnect, device number 60 [ 137.051586][ T36] audit: type=1400 audit(2000000056.550:39610): avc: denied { create } for pid=2672 comm="syz.1.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 137.311422][ T2677] netlink: 'syz.3.714': attribute type 1 has an invalid length. [ 137.332349][ T2679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.340977][ T2679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.375973][ T1605] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 137.527140][ T1605] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 137.537077][ T1605] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 137.548329][ T1605] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 137.557559][ T1605] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.565569][ T1605] usb 2-1: Product: syz [ 137.569864][ T1605] usb 2-1: Manufacturer: syz [ 137.574498][ T1605] usb 2-1: SerialNumber: syz [ 137.580342][ T1605] usb 2-1: config 0 descriptor?? [ 137.585598][ T2675] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 137.592971][ T2675] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 137.801289][ T2675] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 137.808613][ T2675] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 137.937204][ T2697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.946463][ T2697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.017659][ T1605] Error reading MAC address [ 138.023720][ T1605] usb 2-1: USB disconnect, device number 61 [ 138.085931][ T331] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 138.236985][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 138.248068][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.257903][ T331] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 138.267049][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.276053][ T331] usb 3-1: config 0 descriptor?? [ 138.468773][ T2700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.477375][ T2700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.539244][ T36] audit: type=1400 audit(2000000058.040:39611): avc: denied { setattr } for pid=2702 comm="syz.1.723" name="/" dev="incremental-fs" ino=847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.584966][ T2710] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.592882][ T2710] IPv6: NLM_F_REPLACE set, but no existing node found! [ 138.687141][ T331] savu 0003:1E7D:2D5A.0024: unknown main item tag 0x2 [ 138.694101][ T331] savu 0003:1E7D:2D5A.0024: unknown main item tag 0x0 [ 138.701828][ T331] savu 0003:1E7D:2D5A.0024: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 138.875891][ T442] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 138.961585][ T331] usb 1-1: USB disconnect, device number 75 [ 138.989109][ T2721] incfs: Options parsing error. -22 [ 138.994494][ T2721] incfs: mount failed -22 [ 138.999833][ T2721] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 139.025884][ T442] usb 2-1: Using ep0 maxpacket: 16 [ 139.032602][ T442] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 139.041123][ T442] usb 2-1: config 0 has no interface number 0 [ 139.047474][ T442] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 139.060886][ T442] usb 2-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 139.070797][ T442] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.079192][ T442] usb 2-1: Product: syz [ 139.083497][ T442] usb 2-1: Manufacturer: syz [ 139.088383][ T442] usb 2-1: SerialNumber: syz [ 139.096685][ T442] usb 2-1: config 0 descriptor?? [ 139.285243][ T2728] overlayfs: conflicting options: userxattr,verity=on [ 139.308305][ T2714] tipc: Enabled bearer , priority 0 [ 139.316508][ T2714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.327257][ T2714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.336881][ T2713] tipc: Disabling bearer [ 139.377008][ T442] usb 2-1: USB disconnect, device number 62 [ 140.215893][ T673] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 140.355890][ T673] usb 2-1: device descriptor read/64, error -71 [ 140.389378][ T2755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.398228][ T2755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.595930][ T673] usb 2-1: device descriptor read/64, error -71 [ 140.820328][ T331] usb 3-1: USB disconnect, device number 56 [ 140.835854][ T673] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 140.843786][ T2764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=2764 comm=syz.0.742 [ 140.964076][ T2785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.972672][ T2785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.985896][ T673] usb 2-1: device descriptor read/64, error -71 [ 141.024283][ T2793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.033109][ T2793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.215900][ T331] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 141.225905][ T673] usb 2-1: device descriptor read/64, error -71 [ 141.335979][ T673] usb usb2-port1: attempt power cycle [ 141.365878][ T331] usb 3-1: Using ep0 maxpacket: 32 [ 141.372163][ T331] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 141.380478][ T331] usb 3-1: config 2 has no interface number 0 [ 141.386642][ T331] usb 3-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 141.396618][ T331] usb 3-1: config 2 interface 88 has no altsetting 0 [ 141.404563][ T331] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 141.413906][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.421985][ T331] usb 3-1: Product: syz [ 141.426230][ T331] usb 3-1: Manufacturer: syz [ 141.430941][ T331] usb 3-1: SerialNumber: syz [ 141.436885][ T2775] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 141.627045][ T2798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.635702][ T2798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.644582][ T36] audit: type=1400 audit(2000000061.140:39612): avc: denied { lock } for pid=2797 comm="syz.3.756" path="socket:[22549]" dev="sockfs" ino=22549 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 141.649110][ T2775] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 141.675892][ T673] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 141.697032][ T673] usb 2-1: device descriptor read/8, error -71 [ 141.705907][ T1605] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 141.827142][ T673] usb 2-1: device descriptor read/8, error -71 [ 141.856862][ T1605] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.867927][ T1605] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.878787][ T1605] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 141.887874][ T1605] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.896864][ T1605] usb 1-1: config 0 descriptor?? [ 142.065936][ T673] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 142.086996][ T673] usb 2-1: device descriptor read/8, error -71 [ 142.217102][ T673] usb 2-1: device descriptor read/8, error -71 [ 142.282168][ T331] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 142.292801][ T331] asix 3-1:2.88: probe with driver asix failed with error -71 [ 142.301612][ T331] usb 3-1: USB disconnect, device number 57 [ 142.310258][ T1605] lg-g15 0003:046D:C222.0025: collection stack underflow [ 142.317513][ T1605] lg-g15 0003:046D:C222.0025: item 0 0 0 12 parsing failed [ 142.326063][ T1605] lg-g15 0003:046D:C222.0025: probe with driver lg-g15 failed with error -22 [ 142.336304][ T673] usb usb2-port1: unable to enumerate USB device [ 142.510057][ T673] usb 1-1: USB disconnect, device number 76 [ 142.799992][ T2801] netlink: 'syz.2.757': attribute type 10 has an invalid length. [ 142.807857][ T2801] netlink: 5 bytes leftover after parsing attributes in process `syz.2.757'. [ 142.816990][ T2801] bridge_slave_1: left promiscuous mode [ 142.822619][ T2801] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.036986][ T36] audit: type=1400 audit(2000000062.540:39613): avc: denied { mount } for pid=2821 comm="syz.0.765" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 143.061149][ T36] audit: type=1400 audit(2000000062.560:39614): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 143.245876][ T1605] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 143.335891][ T10] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 143.385878][ T331] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 143.395887][ T1605] usb 3-1: Using ep0 maxpacket: 16 [ 143.404938][ T1605] usb 3-1: unable to get BOS descriptor or descriptor too short [ 143.413202][ T1605] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 143.420878][ T1605] usb 3-1: can't read configurations, error -71 [ 143.485872][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 143.492271][ T10] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 143.501539][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.510458][ T10] usb 1-1: config 0 descriptor?? [ 143.517245][ T10] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 143.535905][ T331] usb 2-1: Using ep0 maxpacket: 16 [ 143.542266][ T331] usb 2-1: too many endpoints for config 0 interface 0 altsetting 3: 62, using maximum allowed: 30 [ 143.553093][ T331] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 62 [ 143.566171][ T331] usb 2-1: config 0 interface 0 has no altsetting 0 [ 143.572795][ T331] usb 2-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 143.581937][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.590783][ T331] usb 2-1: config 0 descriptor?? [ 143.716773][ T10] usb 1-1: Detected FT232B [ 143.916018][ T2831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.924667][ T2831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.927446][ T2828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.943183][ T2828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.156371][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 144.161588][ T331] hid (null): global environment stack underflow [ 144.175922][ T10] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 144.189280][ T331] uclogic 0003:5543:0003.0026: global environment stack underflow [ 144.199048][ T10] usb 1-1: USB disconnect, device number 77 [ 144.207909][ T331] uclogic 0003:5543:0003.0026: item 0 4 1 11 parsing failed [ 144.213447][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 144.215977][ T331] uclogic 0003:5543:0003.0026: parse failed [ 144.231099][ T10] ftdi_sio 1-1:0.0: device disconnected [ 144.237117][ T331] uclogic 0003:5543:0003.0026: probe with driver uclogic failed with error -22 [ 144.535879][ T1605] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 144.687042][ T1605] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.697652][ T2848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.700564][ T1605] usb 3-1: config 0 interface 0 has no altsetting 0 [ 144.714184][ T2848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.715680][ T1605] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 144.735959][ T1605] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.746064][ T1605] usb 3-1: config 0 descriptor?? [ 144.782634][ T36] audit: type=1400 audit(2000000064.280:39615): avc: denied { mounton } for pid=2840 comm="syz.3.771" path="/230/file0" dev="tmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 144.834566][ T2848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.843397][ T2848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.950281][ T2862] kvm: kvm [2861]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 144.959193][ T2862] kvm: kvm [2861]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 145.136734][ T36] audit: type=1400 audit(2000000064.640:39616): avc: denied { setattr } for pid=2866 comm="syz.0.780" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 145.162331][ T1605] uclogic 0003:145F:0212.0027: interface is invalid, ignoring [ 145.310538][ T2877] netlink: 'syz.0.784': attribute type 13 has an invalid length. [ 145.318796][ T2877] erspan0: refused to change device tx_queue_len [ 145.337132][ T2880] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:641 [ 145.362774][ T2882] netlink: 104 bytes leftover after parsing attributes in process `syz.0.786'. [ 145.363697][ T2839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.389554][ T2839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.405495][ T354] usb 3-1: USB disconnect, device number 60 [ 145.414796][ T2884] netlink: 57 bytes leftover after parsing attributes in process `syz.0.787'. [ 145.665892][ T10] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 145.815871][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 145.822285][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.833283][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.843104][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 145.855981][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 145.865036][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.873786][ T10] usb 1-1: config 0 descriptor?? [ 145.929856][ T36] audit: type=1400 audit(2000000065.430:39617): avc: denied { accept } for pid=2885 comm="syz.2.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 146.107499][ T331] usb 2-1: USB disconnect, device number 67 [ 146.281175][ T10] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 146.288543][ T10] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 146.296024][ T10] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 146.303293][ T10] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 146.310587][ T10] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 146.317868][ T10] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 146.325090][ T10] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 146.332347][ T10] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 146.339628][ T10] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 146.346905][ T10] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 146.354270][ T10] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 146.361543][ T10] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 146.368807][ T10] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 146.376093][ T10] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 146.383344][ T10] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 146.391240][ T10] microsoft 0003:045E:07DA.0028: No inputs registered, leaving [ 146.435872][ T1605] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 146.455865][ T331] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 146.482017][ T2884] rust_binder: Write failure EFAULT in pid:645 [ 146.531191][ T10] microsoft 0003:045E:07DA.0028: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 146.548991][ T10] microsoft 0003:045E:07DA.0028: no inputs found [ 146.555378][ T10] microsoft 0003:045E:07DA.0028: could not initialize ff, continuing anyway [ 146.566942][ T10] usb 1-1: USB disconnect, device number 78 [ 146.605911][ T331] usb 2-1: Using ep0 maxpacket: 16 [ 146.611111][ T1605] usb 3-1: Using ep0 maxpacket: 32 [ 146.617383][ T1605] usb 3-1: config 0 interface 0 has no altsetting 0 [ 146.624046][ T1605] usb 3-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 146.633419][ T331] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 146.641619][ T331] usb 2-1: config 0 has no interface number 0 [ 146.647768][ T1605] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.656322][ T331] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.667525][ T1605] usb 3-1: config 0 descriptor?? [ 146.672614][ T331] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.683684][ T331] usb 2-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 146.692840][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.701714][ T331] usb 2-1: config 0 descriptor?? [ 147.016563][ T2903] veth0_virt_wifi: entered allmulticast mode [ 147.023442][ T2905] veth0_virt_wifi: left allmulticast mode [ 147.113308][ T331] holtek_mouse 0003:04D9:A081.002A: item fetching failed at offset 5/8 [ 147.121844][ T331] holtek_mouse 0003:04D9:A081.002A: hid parse failed: -22 [ 147.129899][ T331] holtek_mouse 0003:04D9:A081.002A: probe with driver holtek_mouse failed with error -22 [ 147.299237][ T1605] hid-led 0003:1D34:0004.0029: hidraw0: USB HID v0.00 Device [HID 1d34:0004] on usb-dummy_hcd.2-1/input0 [ 147.311959][ T1605] hid-led 0003:1D34:0004.0029: Dream Cheeky Webmail Notifier initialized [ 147.425893][ T10] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 147.501327][ T673] usb 3-1: USB disconnect, device number 61 [ 147.557061][ T1605] usb 2-1: USB disconnect, device number 68 [ 147.576953][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 147.583681][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 147.592883][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.601891][ T10] usb 1-1: config 0 descriptor?? [ 147.649468][ T2922] netlink: 104 bytes leftover after parsing attributes in process `syz.3.798'. [ 147.672149][ T2924] FAULT_INJECTION: forcing a failure. [ 147.672149][ T2924] name failslab, interval 1, probability 0, space 0, times 1 [ 147.685057][ T2924] CPU: 0 UID: 0 PID: 2924 Comm: syz.3.799 Not tainted syzkaller #0 4ae5b12b683c07c90cf68c53485f2a5719abf10e [ 147.685097][ T2924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 147.685108][ T2924] Call Trace: [ 147.685114][ T2924] [ 147.685120][ T2924] __dump_stack+0x21/0x30 [ 147.685145][ T2924] dump_stack_lvl+0x140/0x1c0 [ 147.685165][ T2924] ? __cfi_dump_stack_lvl+0x10/0x10 [ 147.685185][ T2924] ? release_sock+0x171/0x1f0 [ 147.685205][ T2924] dump_stack+0x19/0x20 [ 147.685223][ T2924] should_fail_ex+0x3d7/0x530 [ 147.685246][ T2924] should_failslab+0xac/0x100 [ 147.685269][ T2924] kmem_cache_alloc_node_noprof+0x45/0x420 [ 147.685290][ T2924] ? netlink_data_ready+0x20/0x20 [ 147.685310][ T2924] ? __alloc_skb+0x108/0x370 [ 147.685329][ T2924] __alloc_skb+0x108/0x370 [ 147.685347][ T2924] netlink_alloc_large_skb+0xf7/0x1b0 [ 147.685366][ T2924] netlink_sendmsg+0x594/0xb10 [ 147.685390][ T2924] ? __cfi_netlink_sendmsg+0x10/0x10 [ 147.685412][ T2924] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 147.685435][ T2924] ? security_socket_sendmsg+0x3d/0x100 [ 147.685457][ T2924] ? __cfi_netlink_sendmsg+0x10/0x10 [ 147.685479][ T2924] ____sys_sendmsg+0xa8c/0xae0 [ 147.685502][ T2924] ? __import_iovec+0x5ad/0x7c0 [ 147.685524][ T2924] ? __sys_sendmsg_sock+0x50/0x50 [ 147.685547][ T2924] ? import_iovec+0x80/0xb0 [ 147.685569][ T2924] ___sys_sendmsg+0x2a6/0x370 [ 147.685591][ T2924] ? __sys_sendmsg+0x2a0/0x2a0 [ 147.685613][ T2924] ? proc_fail_nth_write+0x184/0x220 [ 147.685630][ T2924] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 147.685651][ T2924] __x64_sys_sendmsg+0x1fb/0x2d0 [ 147.685673][ T2924] ? fput+0x1a4/0x240 [ 147.685686][ T2924] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 147.685709][ T2924] ? ksys_write+0x1f3/0x260 [ 147.685729][ T2924] ? __kasan_check_read+0x15/0x20 [ 147.685749][ T2924] x64_sys_call+0x2a4c/0x2ee0 [ 147.685771][ T2924] do_syscall_64+0x57/0xf0 [ 147.685793][ T2924] ? clear_bhb_loop+0x50/0xa0 [ 147.685841][ T2924] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 147.685875][ T2924] RIP: 0033:0x7fb6e679bf79 [ 147.685889][ T2924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.685903][ T2924] RSP: 002b:00007fb6e757c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.685921][ T2924] RAX: ffffffffffffffda RBX: 00007fb6e6a15fa0 RCX: 00007fb6e679bf79 [ 147.685934][ T2924] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 147.685945][ T2924] RBP: 00007fb6e757c090 R08: 0000000000000000 R09: 0000000000000000 [ 147.685956][ T2924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.685966][ T2924] R13: 00007fb6e6a16038 R14: 00007fb6e6a15fa0 R15: 00007ffea8b4d4a8 [ 147.685980][ T2924] [ 147.975921][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 147.981934][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 147.992064][ T10] usb 1-1: USB disconnect, device number 79 [ 148.039252][ T2931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.047959][ T2931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.300888][ T2950] netlink: 'syz.2.808': attribute type 33 has an invalid length. [ 148.348981][ T2953] input: syz0 as /devices/virtual/input/input34 [ 148.383667][ T10] kernel write not supported for file /ppp (pid: 10 comm: kworker/0:1) [ 148.834707][ T2992] overlayfs: failed to clone upperpath [ 148.841972][ T2992] netlink: 'syz.1.822': attribute type 27 has an invalid length. [ 148.862801][ T2995] netlink: 104 bytes leftover after parsing attributes in process `syz.1.823'. [ 149.035891][ T673] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 149.187217][ T673] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.197388][ T673] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.211981][ T673] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 149.221109][ T673] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 149.229175][ T673] usb 3-1: SerialNumber: syz [ 149.245877][ T10] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 149.315055][ T3024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.323652][ T3024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.395914][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 149.402262][ T10] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.413222][ T10] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.424017][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 149.433213][ T10] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 149.441748][ T10] usb 1-1: Product: syz [ 149.446108][ T10] usb 1-1: Manufacturer: syz [ 149.452095][ T673] usb 3-1: 0:2 : does not exist [ 149.467211][ T10] hub 1-1:4.0: USB hub found [ 149.473046][ T673] usb 3-1: USB disconnect, device number 62 [ 149.483057][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 149.667000][ T10] hub 1-1:4.0: 2 ports detected [ 149.685873][ T3029] virtiofs: Unknown parameter 'always' [ 149.786973][ T3046] netlink: 104 bytes leftover after parsing attributes in process `syz.1.843'. [ 149.862255][ T3051] binfmt_misc: register: failed to install interpreter file ./file0 [ 149.866156][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 149.893736][ T10] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 149.909699][ T36] audit: type=1400 audit(2000000069.410:39618): avc: denied { read } for pid=3054 comm="syz.0.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 149.930907][ T10] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 149.966271][ T10] usb 1-1: USB disconnect, device number 80 [ 149.995412][ T3063] batadv_slave_0: entered promiscuous mode [ 150.008229][ T3063] batadv_slave_0: left promiscuous mode [ 150.021053][ T36] audit: type=1400 audit(2000000069.520:39619): avc: denied { mount } for pid=3067 comm="syz.0.850" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 150.026060][ T3068] overlayfs: maximum fs stacking depth exceeded [ 150.050860][ T3068] overlayfs: maximum fs stacking depth exceeded [ 150.075861][ T36] audit: type=1400 audit(2000000069.520:39620): avc: denied { mounton } for pid=3067 comm="syz.0.850" path="/237/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 150.115928][ T36] audit: type=1400 audit(2000000069.600:39621): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 150.155848][ T36] audit: type=1400 audit(2000000069.650:39622): avc: denied { read write } for pid=3076 comm="syz.0.852" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.179407][ T36] audit: type=1400 audit(2000000069.650:39623): avc: denied { open } for pid=3076 comm="syz.0.852" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.202949][ T36] audit: type=1400 audit(2000000069.650:39624): avc: denied { ioctl } for pid=3076 comm="syz.0.852" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.308606][ T3079] netlink: 104 bytes leftover after parsing attributes in process `syz.2.853'. [ 150.385942][ T10] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 150.402737][ T36] audit: type=1326 audit(2000000069.900:39625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3090 comm="syz.2.859" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc19979bf79 code=0x0 [ 150.536887][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 150.544966][ T10] usb 1-1: config 0 has no interface number 0 [ 150.551137][ T10] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.562068][ T10] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.571883][ T10] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 150.581001][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.590000][ T10] usb 1-1: config 0 descriptor?? [ 150.781928][ T36] audit: type=1400 audit(2000000070.280:39626): avc: denied { ioctl } for pid=3102 comm="syz.1.862" path="socket:[25627]" dev="sockfs" ino=25627 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 151.010322][ T10] prodikeys 0003:041E:2801.002B: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1 [ 151.022040][ T10] hid_prodikeys: hid-prodikeys: failed to find output report [ 151.022040][ T10] [ 151.209796][ T3077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.218427][ T3077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.227619][ T331] usb 1-1: USB disconnect, device number 81 [ 151.429552][ T36] audit: type=1326 audit(2000000070.930:39627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3116 comm="syz.1.868" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f7f5cf95d97 code=0x0 [ 151.876582][ T3126] netlink: 'syz.2.872': attribute type 2 has an invalid length. [ 151.905853][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 151.906089][ T1672] Bluetooth: hci0: command 0x1003 tx timeout [ 152.009019][ T3137] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 152.045720][ T3138] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.876'. [ 152.057095][ T3138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.066475][ T3138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.075934][ T331] usb 1-1: new low-speed USB device number 82 using dummy_hcd [ 152.077394][ T3138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.092936][ T3138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.152497][ T3141] netlink: 120 bytes leftover after parsing attributes in process `syz.3.876'. [ 152.245854][ T331] usb 1-1: Invalid ep0 maxpacket: 16 [ 152.275879][ T10] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 152.386013][ T331] usb 1-1: new low-speed USB device number 83 using dummy_hcd [ 152.446907][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.527456][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 152.536812][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 152.544960][ T10] usb 3-1: Product: syz [ 152.549418][ T10] usb 3-1: Manufacturer: syz [ 152.554056][ T10] usb 3-1: SerialNumber: syz [ 152.565860][ T331] usb 1-1: Invalid ep0 maxpacket: 16 [ 152.576041][ T331] usb usb1-port1: attempt power cycle [ 152.767490][ T10] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 63 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 152.915875][ T331] usb 1-1: new low-speed USB device number 84 using dummy_hcd [ 152.936228][ T331] usb 1-1: Invalid ep0 maxpacket: 16 [ 153.019139][ C0] usblp0: nonzero write bulk status received: -71 [ 153.019316][ T1605] usb 3-1: USB disconnect, device number 63 [ 153.035042][ T1605] usblp0: removed [ 153.065888][ T331] usb 1-1: new low-speed USB device number 85 using dummy_hcd [ 153.106234][ T331] usb 1-1: Invalid ep0 maxpacket: 16 [ 153.115890][ T331] usb usb1-port1: unable to enumerate USB device [ 153.221089][ T3162] netlink: 16 bytes leftover after parsing attributes in process `syz.3.884'. [ 153.230112][ T3161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.884'. [ 153.239222][ T3162] netlink: 'syz.3.884': attribute type 12 has an invalid length. [ 153.247147][ T3163] netlink: 'syz.3.884': attribute type 12 has an invalid length. [ 153.256830][ T3161] input: syz0 as /devices/virtual/input/input35 [ 153.332549][ T3166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.341868][ T3166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.352038][ T3166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.360603][ T3166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.368764][ T3166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.377277][ T3166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.385377][ T3166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.394009][ T3166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.402104][ T3166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.410646][ T3166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.052028][ T3180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.060653][ T3180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.069307][ T3181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.078904][ T3180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.079963][ T3181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.090670][ T3180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.706501][ T3194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.734011][ T3194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.783503][ T3198] netlink: 104 bytes leftover after parsing attributes in process `syz.2.894'. [ 155.035877][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 155.035899][ T36] audit: type=1400 audit(2000000074.510:39630): avc: denied { append } for pid=3199 comm="syz.2.896" name="netlink" dev="proc" ino=4026532646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 155.345865][ T442] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 155.354307][ T3214] overlayfs: workdir and upperdir must be separate subtrees [ 155.362546][ T3214] netlink: 20 bytes leftover after parsing attributes in process `syz.0.900'. [ 155.382869][ T3214] usb usb7: usbfs: process 3214 (syz.0.900) did not claim interface 0 before use [ 155.386711][ T36] audit: type=1400 audit(2000000074.880:39631): avc: denied { append } for pid=3212 comm="syz.0.900" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 155.527013][ T442] usb 3-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 155.545888][ T442] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.556091][ T442] usb 3-1: config 0 descriptor?? [ 155.901315][ T36] audit: type=1326 audit(2000000075.400:39632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3150 comm="syz.1.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5cf9bf79 code=0x7fc00000 [ 155.973506][ T3207] netlink: 'syz.2.897': attribute type 25 has an invalid length. [ 155.986789][ T442] logitech 0003:046D:CA03.002C: unknown main item tag 0x0 [ 155.993986][ T442] logitech 0003:046D:CA03.002C: unknown main item tag 0x0 [ 156.015860][ T442] logitech 0003:046D:CA03.002C: item fetching failed at offset 2/5 [ 156.023911][ T442] logitech 0003:046D:CA03.002C: parse failed [ 156.035930][ T442] logitech 0003:046D:CA03.002C: probe with driver logitech failed with error -22 [ 156.188405][ T673] usb 3-1: USB disconnect, device number 64 [ 156.242176][ T3233] netlink: 104 bytes leftover after parsing attributes in process `syz.0.907'. [ 156.251455][ T3233] FAULT_INJECTION: forcing a failure. [ 156.251455][ T3233] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 156.264708][ T3233] CPU: 1 UID: 0 PID: 3233 Comm: syz.0.907 Not tainted syzkaller #0 4ae5b12b683c07c90cf68c53485f2a5719abf10e [ 156.264741][ T3233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 156.264756][ T3233] Call Trace: [ 156.264765][ T3233] [ 156.264775][ T3233] __dump_stack+0x21/0x30 [ 156.264809][ T3233] dump_stack_lvl+0x140/0x1c0 [ 156.264836][ T3233] ? __cfi_dump_stack_lvl+0x10/0x10 [ 156.264866][ T3233] ? check_stack_object+0x12b/0x150 [ 156.264895][ T3233] dump_stack+0x19/0x20 [ 156.264923][ T3233] should_fail_ex+0x3d7/0x530 [ 156.264947][ T3233] should_fail+0xf/0x20 [ 156.264969][ T3233] should_fail_usercopy+0x1e/0x30 [ 156.264995][ T3233] _copy_to_user+0x24/0xa0 [ 156.265035][ T3233] simple_read_from_buffer+0xed/0x160 [ 156.265069][ T3233] proc_fail_nth_read+0x1aa/0x220 [ 156.265092][ T3233] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 156.265115][ T3233] ? bpf_lsm_file_permission+0xd/0x20 [ 156.265136][ T3233] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 156.265159][ T3233] vfs_read+0x289/0xcb0 [ 156.265186][ T3233] ? __cfi_vfs_read+0x10/0x10 [ 156.265211][ T3233] ? __kasan_check_write+0x18/0x20 [ 156.265236][ T3233] ? mutex_lock+0x97/0x1d0 [ 156.265260][ T3233] ? __cfi_mutex_lock+0x10/0x10 [ 156.265283][ T3233] ? __fget_files+0x2c5/0x340 [ 156.265314][ T3233] ksys_read+0x145/0x260 [ 156.265347][ T3233] ? xfd_validate_state+0x68/0x140 [ 156.265374][ T3233] ? __cfi_ksys_read+0x10/0x10 [ 156.265401][ T3233] ? __kasan_check_write+0x18/0x20 [ 156.265426][ T3233] ? fpregs_restore_userregs+0x11c/0x260 [ 156.265450][ T3233] __x64_sys_read+0x7f/0x90 [ 156.265477][ T3233] x64_sys_call+0x2638/0x2ee0 [ 156.265506][ T3233] do_syscall_64+0x57/0xf0 [ 156.265538][ T3233] ? clear_bhb_loop+0x50/0xa0 [ 156.265570][ T3233] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 156.265600][ T3233] RIP: 0033:0x7f3417b5c84e [ 156.265619][ T3233] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 156.265638][ T3233] RSP: 002b:00007f34165f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 156.265661][ T3233] RAX: ffffffffffffffda RBX: 00007f34165f76c0 RCX: 00007f3417b5c84e [ 156.265678][ T3233] RDX: 000000000000000f RSI: 00007f34165f70a0 RDI: 0000000000000005 [ 156.265697][ T3233] RBP: 00007f34165f7090 R08: 0000000000000000 R09: 0000000000000000 [ 156.265711][ T3233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.265724][ T3233] R13: 00007f3417e16038 R14: 00007f3417e15fa0 R15: 00007ffc61543098 [ 156.265743][ T3233] [ 156.576986][ T3239] netlink: 'syz.0.910': attribute type 4 has an invalid length. [ 156.585111][ T3239] netlink: 17 bytes leftover after parsing attributes in process `syz.0.910'. [ 156.820229][ T36] audit: type=1400 audit(2000000076.320:39633): avc: denied { create } for pid=3245 comm="syz.2.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 156.842146][ T3246] netlink: 'syz.2.912': attribute type 4 has an invalid length. [ 156.855867][ T673] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 156.940069][ T3251] netlink: 'syz.2.914': attribute type 32 has an invalid length. [ 156.948028][ T3251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.914'. [ 156.960580][ T3251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3251 comm=syz.2.914 [ 157.026574][ T673] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.037748][ T673] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.048099][ T673] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 157.061351][ T673] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 157.070660][ T673] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.079923][ T673] usb 1-1: config 0 descriptor?? [ 157.245890][ T10] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 157.406028][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 157.416605][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 157.423457][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 157.435191][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.447809][ T10] usb 3-1: config 0 descriptor?? [ 157.496361][ T673] plantronics 0003:047F:FFFF.002D: No inputs registered, leaving [ 157.516657][ T673] plantronics 0003:047F:FFFF.002D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 157.713444][ T36] audit: type=1400 audit(2000000077.210:39634): avc: denied { shutdown } for pid=3278 comm="syz.3.925" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 157.748425][ T3282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.757235][ T3282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.766876][ T3282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.775417][ T3282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.863468][ T10] wacom 0003:056A:00D0.002E: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 157.873794][ T10] wacom 0003:056A:00D0.002E: hidraw1: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.2-1/input0 [ 157.892816][ T10] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00D0.002E/input/input37 [ 158.066370][ T3253] netlink: 'syz.2.915': attribute type 10 has an invalid length. [ 158.074673][ T331] usb 3-1: USB disconnect, device number 65 [ 158.252854][ T354] usb 1-1: USB disconnect, device number 86 [ 158.273429][ T3289] netlink: 'syz.0.929': attribute type 12 has an invalid length. [ 158.297385][ T3291] erspan0: default FDB implementation only supports local addresses [ 158.595887][ T354] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 158.747392][ T354] usb 1-1: config 151 has an invalid interface number: 131 but max is 0 [ 158.755851][ T354] usb 1-1: config 151 has no interface number 0 [ 158.762140][ T354] usb 1-1: config 151 interface 131 has no altsetting 0 [ 158.770997][ T354] usb 1-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=4b.2c [ 158.780375][ T354] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.788906][ T354] usb 1-1: Product: syz [ 158.793220][ T354] usb 1-1: Manufacturer: syz [ 158.798107][ T354] usb 1-1: SerialNumber: syz [ 158.845878][ T331] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 158.871921][ T36] audit: type=1400 audit(2000000078.370:39635): avc: denied { create } for pid=3317 comm="syz.1.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 158.996646][ T331] usb 3-1: not running at top speed; connect to a high speed hub [ 159.005238][ T331] usb 3-1: config 95 has an invalid interface number: 1 but max is 0 [ 159.007068][ T354] usbhid 1-1:151.131: couldn't find an input interrupt endpoint [ 159.017549][ T331] usb 3-1: config 95 has no interface number 0 [ 159.027512][ T354] usb 1-1: USB disconnect, device number 87 [ 159.034591][ T331] usb 3-1: config 95 interface 1 has no altsetting 0 [ 159.043039][ T331] usb 3-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=79.79 [ 159.052382][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.060590][ T331] usb 3-1: Product: syz [ 159.064847][ T331] usb 3-1: Manufacturer: syz [ 159.069617][ T331] usb 3-1: SerialNumber: syz [ 159.289571][ T331] usb 3-1: USB disconnect, device number 66 [ 159.310077][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:95.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 159.441351][ T3329] netlink: 'syz.1.941': attribute type 12 has an invalid length. [ 159.504775][ T36] audit: type=1400 audit(2000000079.000:39636): avc: denied { shutdown } for pid=3328 comm="syz.1.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 159.554172][ T3334] loop2: detected capacity change from 0 to 7 [ 159.795870][ T331] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 159.835417][ T3340] netlink: 288 bytes leftover after parsing attributes in process `syz.2.945'. [ 159.957039][ T331] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.969262][ T331] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=f8.41 [ 159.983166][ T331] usb 1-1: New USB device strings: Mfr=255, Product=246, SerialNumber=2 [ 159.992260][ T331] usb 1-1: Product: syz [ 159.997575][ T331] usb 1-1: Manufacturer: syz [ 160.002211][ T331] usb 1-1: SerialNumber: syz [ 160.011495][ T331] usb 1-1: config 0 descriptor?? [ 160.017503][ T331] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 160.025389][ T331] ftdi_sio ttyUSB0: unknown device type: 0xf841 [ 160.225511][ T10] usb 1-1: USB disconnect, device number 88 [ 160.232811][ T10] ftdi_sio 1-1:0.0: device disconnected [ 160.246235][ T442] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 160.285052][ T3351] netlink: 324 bytes leftover after parsing attributes in process `syz.1.950'. [ 160.407152][ T442] usb 3-1: config 127 has an invalid interface number: 4 but max is 0 [ 160.415510][ T442] usb 3-1: config 127 has no interface number 0 [ 160.421857][ T442] usb 3-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice= c.a3 [ 160.431050][ T442] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.644342][ T3349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.652918][ T3349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.661947][ T442] usb 3-1: string descriptor 0 read error: -71 [ 160.668960][ T442] ums-datafab 3-1:127.4: USB Mass Storage device detected [ 160.697225][ T442] ums-sddr55 3-1:127.4: USB Mass Storage device detected [ 160.719414][ T442] usb 3-1: USB disconnect, device number 67 [ 160.752677][ T3360] rust_binder: 762: no such ref 3 [ 160.758958][ T3360] Trying to write to read-only block-device rnullb0 [ 160.875630][ T3363] netlink: 'syz.0.953': attribute type 30 has an invalid length. [ 160.986093][ T3366] netlink: 316 bytes leftover after parsing attributes in process `syz.0.954'. [ 160.995453][ T3366] netlink: 316 bytes leftover after parsing attributes in process `syz.0.954'. [ 161.315878][ T10] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 161.371695][ T3387] netlink: 'syz.3.961': attribute type 15 has an invalid length. [ 161.399779][ T3389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.410843][ T3389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.416370][ T442] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 161.487068][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.498079][ T10] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 161.507597][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.519780][ T10] usb 1-1: config 0 descriptor?? [ 161.575888][ T442] usb 3-1: Using ep0 maxpacket: 8 [ 161.587123][ T442] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 161.598554][ T442] usb 3-1: config 0 interface 0 has no altsetting 0 [ 161.605226][ T442] usb 3-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00 [ 161.614910][ T442] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.626151][ T442] usb 3-1: config 0 descriptor?? [ 161.939475][ T10] keytouch 0003:0926:3333.002F: fixing up Keytouch IEC report descriptor [ 161.952140][ T3399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.962417][ T3399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.969138][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.002F/input/input40 [ 162.015614][ T3404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.026245][ T3404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.061384][ T10] keytouch 0003:0926:3333.002F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 162.346106][ T331] usb 1-1: USB disconnect, device number 89 [ 162.419366][ T442] usbhid 3-1:0.0: can't add hid device: -71 [ 162.425384][ T442] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 162.434516][ T442] usb 3-1: USB disconnect, device number 68 [ 162.578056][ T3413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.588960][ T3413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.942479][ T3425] netlink: 104 bytes leftover after parsing attributes in process `syz.0.973'. [ 162.970833][ T36] audit: type=1326 audit(2000000082.470:39637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3426 comm="syz.0.974" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3417b9bf79 code=0x0 [ 163.163517][ T3450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.172204][ T3450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.176060][ T10] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 163.182661][ T3450] netlink: 20 bytes leftover after parsing attributes in process `syz.3.982'. [ 163.266027][ T354] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 163.337177][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 163.347137][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 163.356934][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 163.366664][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 163.377896][ T10] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 163.387060][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.395052][ T10] usb 3-1: Product: syz [ 163.399276][ T10] usb 3-1: Manufacturer: syz [ 163.403957][ T10] usb 3-1: SerialNumber: syz [ 163.409220][ T10] usb 3-1: config 0 descriptor?? [ 163.415065][ T10] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 163.426995][ T354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 163.438059][ T354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.447854][ T354] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.460796][ T354] usb 1-1: New USB device found, idVendor=0b05, idProduct=1854, bcdDevice= 0.00 [ 163.469961][ T354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.478651][ T354] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 163.487441][ T354] usb 1-1: no configuration chosen from 1 choice [ 163.617198][ T10] scsi host1: usb-storage 3-1:0.0 [ 163.624566][ T10] usb 3-1: USB disconnect, device number 69 [ 163.711612][ T3463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.721654][ T3463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.241860][ T3475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.250549][ T3475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.282094][ T3473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=3473 comm=syz.1.987 [ 164.615886][ T10] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 164.767030][ T10] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 164.775387][ T10] usb 3-1: config 0 has no interface number 1 [ 164.781833][ T10] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 164.792426][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 164.796566][ T3483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.805098][ T10] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 164.816596][ T3483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.824732][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 164.836380][ T3483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.836922][ T10] usb 3-1: SerialNumber: syz [ 164.847257][ T3483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.852920][ T10] usb 3-1: config 0 descriptor?? [ 164.863293][ T10] usb 3-1: Found UVC 0.00 device (0002:0000) [ 164.867577][ T3483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.870222][ T10] usb 3-1: No valid video chain found. [ 164.882764][ T3483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.066224][ T3494] netlink: 85 bytes leftover after parsing attributes in process `syz.1.994'. [ 165.406039][ T3517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.414647][ T3517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.941619][ T3529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=3529 comm=syz.1.1006 [ 165.945967][ T3531] syzkaller1: left promiscuous mode [ 165.954577][ T3529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=3529 comm=syz.1.1006 [ 165.959632][ T3531] syzkaller1: left allmulticast mode [ 165.982033][ T3529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=3529 comm=syz.1.1006 [ 166.012645][ T3539] netlink: 'syz.1.1008': attribute type 4 has an invalid length. [ 166.020564][ T3539] netlink: 'syz.1.1008': attribute type 5 has an invalid length. [ 166.029006][ T3539] netlink: 'syz.1.1008': attribute type 1 has an invalid length. [ 166.047580][ T442] usb 1-1: USB disconnect, device number 90 [ 166.065011][ T3545] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1011'. [ 166.072700][ T3548] fuse: Bad value for 'fd' [ 166.425906][ T442] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 166.577054][ T442] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 166.588054][ T442] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 166.599165][ T442] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 166.610210][ T442] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 166.624099][ T442] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.633190][ T442] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 166.641235][ T442] usb 1-1: SerialNumber: syz [ 166.646915][ T3557] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 166.654770][ T442] cdc_acm 1-1:1.0: skipping garbage [ 166.856100][ T442] usb 1-1: USB disconnect, device number 91 [ 167.099431][ T36] audit: type=1400 audit(2000000086.600:39638): avc: denied { write } for pid=3566 comm="syz.3.1017" path="socket:[26525]" dev="sockfs" ino=26525 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 167.212459][ T3572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.221458][ T3572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.235336][ T36] audit: type=1400 audit(2000000086.730:39639): avc: denied { write } for pid=3570 comm="syz.3.1019" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 167.296034][ T442] usb 3-1: USB disconnect, device number 70 [ 167.615868][ T10] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 167.645861][ T442] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 167.758536][ T3582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.767195][ T3582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.768654][ T10] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.776919][ T3582] fuse: Unknown parameter 'fC' [ 167.787870][ T10] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.795284][ T3582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.805158][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 167.814801][ T3582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.820132][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 167.830148][ T442] usb 3-1: config index 0 descriptor too short (expected 2075, got 27) [ 167.837863][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.844377][ T442] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 167.860503][ T442] usb 3-1: config 0 has no interface number 0 [ 167.863621][ T10] usb 1-1: config 0 descriptor?? [ 167.867170][ T442] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 167.881619][ T442] usb 3-1: config 0 interface 200 has no altsetting 0 [ 167.890069][ T442] usb 3-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 167.899305][ T442] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.907455][ T442] usb 3-1: Product: syz [ 167.911653][ T442] usb 3-1: Manufacturer: syz [ 167.916901][ T442] usb 3-1: SerialNumber: syz [ 167.922409][ T442] usb 3-1: config 0 descriptor?? [ 168.134119][ T3576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.142860][ T3576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.179571][ T442] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input44 [ 168.193119][ T442] usb 3-1: USB disconnect, device number 71 [ 168.292107][ T10] logitech 0003:046D:C218.0030: hidraw0: USB HID v0.08 Device [HID 046d:c218] on usb-dummy_hcd.0-1/input0 [ 168.303596][ T10] logitech 0003:046D:C218.0030: no inputs found [ 168.340180][ T3586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.348915][ T3586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.358581][ T3586] netlink: 'syz.3.1024': attribute type 4 has an invalid length. [ 168.366399][ T3586] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1024'. [ 168.491883][ T331] usb 1-1: USB disconnect, device number 92 [ 168.709588][ T3590] netlink: 'syz.2.1026': attribute type 12 has an invalid length. [ 168.740463][ T3592] netlink: 'syz.1.1027': attribute type 15 has an invalid length. [ 168.784237][ T36] audit: type=1400 audit(2000000088.280:39640): avc: denied { mount } for pid=3596 comm="syz.1.1029" name="/" dev="ramfs" ino=27181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 168.906972][ T3602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.915603][ T3602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.275876][ T331] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 169.340131][ T3610] x_tables: duplicate underflow at hook 2 [ 169.414509][ T3615] overlayfs: disabling nfs_export due to verity=require [ 169.421742][ T3615] overlayfs: failed to clone upperpath [ 169.436974][ T331] usb 1-1: Using ep0 maxpacket: 16 [ 169.444909][ T331] usb 1-1: unable to get BOS descriptor or descriptor too short [ 169.453834][ T331] usb 1-1: config 13 has an invalid interface number: 50 but max is 0 [ 169.464841][ T331] usb 1-1: config 13 has no interface number 0 [ 169.471118][ T331] usb 1-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 169.481361][ T331] usb 1-1: config 13 interface 50 has no altsetting 0 [ 169.490662][ T331] usb 1-1: string descriptor 0 read error: -22 [ 169.496995][ T331] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 169.506529][ T331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.515521][ T3607] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 169.524200][ T331] usb 1-1: MIDIStreaming interface descriptor not found [ 169.636557][ T36] audit: type=1400 audit(2000000089.140:39641): avc: denied { setcheckreqprot } for pid=3618 comm="syz.3.1037" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 169.725548][ T331] usb 1-1: USB disconnect, device number 93 [ 169.732616][ T36] audit: type=1326 audit(2000000089.230:39642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3624 comm="syz.3.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e679bf79 code=0x7ffc0000 [ 169.756294][ T36] audit: type=1326 audit(2000000089.230:39643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3624 comm="syz.3.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e679bf79 code=0x7ffc0000 [ 169.779957][ T36] audit: type=1326 audit(2000000089.240:39644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3624 comm="syz.3.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e679bf79 code=0x7ffc0000 [ 169.803752][ T36] audit: type=1326 audit(2000000089.240:39645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3624 comm="syz.3.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e679bf79 code=0x7ffc0000 [ 169.827435][ T36] audit: type=1326 audit(2000000089.240:39646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3624 comm="syz.3.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb6e679bf79 code=0x7ffc0000 [ 169.850960][ T36] audit: type=1326 audit(2000000089.240:39647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3624 comm="syz.3.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e679bf79 code=0x7ffc0000 [ 169.874452][ T36] audit: type=1326 audit(2000000089.240:39648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3624 comm="syz.3.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e679bf79 code=0x7ffc0000 [ 169.897957][ T36] audit: type=1326 audit(2000000089.240:39649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3624 comm="syz.3.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e679bf79 code=0x7ffc0000 [ 169.953417][ T3630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.963069][ T3630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.975017][ T3630] syzkaller0: entered promiscuous mode [ 169.980560][ T3630] syzkaller0: entered allmulticast mode [ 169.988110][ T3630] tipc: Started in network mode [ 169.993223][ T3630] tipc: Node identity 026269ceea2, cluster identity 4711 [ 170.000480][ T3630] tipc: Enabled bearer , priority 0 [ 170.007909][ T3630] tipc: Resetting bearer [ 170.014913][ T3630] tipc: Disabling bearer [ 170.475910][ T354] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 170.571447][ T3640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.580186][ T3640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.597649][ T3640] overlayfs: regular lower layers cannot follow data lower layers [ 170.628985][ T354] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 170.638190][ T354] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.646427][ T354] usb 1-1: Product: syz [ 170.650631][ T354] usb 1-1: Manufacturer: syz [ 170.655228][ T354] usb 1-1: SerialNumber: syz [ 170.890385][ T354] rtl8150 1-1:1.0: couldn't reset the device [ 170.896614][ T354] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 170.905798][ T354] usb 1-1: USB disconnect, device number 94 [ 171.157070][ T3651] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1050'. [ 171.196298][ T354] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 171.330136][ T3666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.339567][ T3666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.348941][ T354] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 171.357621][ T354] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 171.367346][ T354] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 171.378027][ T3666] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1054'. [ 171.387186][ T354] usb 1-1: config 220 has no interface number 2 [ 171.393685][ T354] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 171.407442][ T354] usb 1-1: config 220 interface 0 has no altsetting 0 [ 171.414263][ T354] usb 1-1: config 220 interface 76 has no altsetting 0 [ 171.421354][ T354] usb 1-1: config 220 interface 1 has no altsetting 0 [ 171.429712][ T354] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 171.438996][ T354] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.447198][ T354] usb 1-1: Product: syz [ 171.451477][ T354] usb 1-1: Manufacturer: syz [ 171.456253][ T354] usb 1-1: SerialNumber: syz [ 171.682074][ T3649] ------------[ cut here ]------------ [ 171.687658][ T3649] WARNING: CPU: 0 PID: 3649 at mm/page_alloc.c:5234 __alloc_pages_noprof+0x109/0x7e0 [ 171.697215][ T3649] Modules linked in: [ 171.701166][ T3649] CPU: 0 UID: 0 PID: 3649 Comm: syz.0.1049 Not tainted syzkaller #0 4ae5b12b683c07c90cf68c53485f2a5719abf10e [ 171.712791][ T3649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 171.722922][ T3649] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 171.728983][ T3649] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 0a b4 0b 06 00 0f 85 c2 00 00 00 c6 05 fd b3 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 171.748672][ T3649] RSP: 0018:ffffc90010a3f560 EFLAGS: 00010246 [ 171.754805][ T3649] RAX: 0000000000000000 RBX: 0000000000000012 RCX: 0000000000000000 [ 171.762848][ T3649] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90010a3f618 [ 171.770907][ T3649] RBP: ffffc90010a3f6a0 R08: ffffc90010a3f617 R09: 0000000000000000 [ 171.778953][ T3649] R10: ffffc90010a3f600 R11: fffff52002147ec3 R12: ffffc90010a3f5a0 [ 171.787001][ T3649] R13: dffffc0000000000 R14: 1ffff92002147eb0 R15: 0000000000000000 [ 171.795029][ T3649] FS: 00007f34165f76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 171.804027][ T3649] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 171.810675][ T3649] CR2: 0000200000001000 CR3: 00000001317da000 CR4: 00000000003526b0 [ 171.818734][ T3649] Call Trace: [ 171.822064][ T3649] [ 171.825042][ T3649] ? vfs_write+0x3c8/0xf90 [ 171.829542][ T3649] ? ksys_write+0x145/0x260 [ 171.834120][ T3649] ? x64_sys_call+0x271c/0x2ee0 [ 171.839045][ T3649] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 171.844918][ T3649] ? hashtab_init+0xdb/0x1f0 [ 171.849624][ T3649] ___kmalloc_large_node+0x81/0x210 [ 171.854893][ T3649] ? hashtab_init+0xdb/0x1f0 [ 171.859560][ T3649] __kmalloc_large_node_noprof+0x1e/0xd0 [ 171.865263][ T3649] ? hashtab_init+0xdb/0x1f0 [ 171.869925][ T3649] __kmalloc_noprof+0x326/0x500 [ 171.874833][ T3649] ? kasan_save_alloc_info+0x40/0x50 [ 171.880206][ T3649] hashtab_init+0xdb/0x1f0 [ 171.884693][ T3649] ? common_read+0x175/0x490 [ 171.889362][ T3649] symtab_init+0x44/0x70 [ 171.893676][ T3649] common_read+0x1e6/0x490 [ 171.898167][ T3649] ? hashtab_init+0xdb/0x1f0 [ 171.902818][ T3649] ? __cfi_common_read+0x10/0x10 [ 171.907969][ T3649] ? hashtab_init+0x105/0x1f0 [ 171.912761][ T3649] policydb_read+0xabb/0x28b0 [ 171.917525][ T3649] ? __kasan_kmalloc+0x96/0xb0 [ 171.922355][ T3649] ? __cfi_policydb_read+0x10/0x10 [ 171.927554][ T3649] ? security_load_policy+0x130/0x12d0 [ 171.933088][ T3649] security_load_policy+0x16a/0x12d0 [ 171.938472][ T3649] ? irqentry_exit+0x4a/0x60 [ 171.943116][ T3649] ? asm_exc_page_fault+0x2b/0x30 [ 171.948212][ T3649] ? __cfi_security_load_policy+0x10/0x10 [ 171.954004][ T3649] ? rep_movs_alternative+0x4a/0xa0 [ 171.959295][ T3649] sel_write_load+0x2a7/0x5f0 [ 171.964035][ T3649] ? __cfi_futex_wake+0x10/0x10 [ 171.968977][ T3649] ? __cfi_sel_write_load+0x10/0x10 [ 171.974244][ T3649] ? bpf_lsm_file_permission+0xd/0x20 [ 171.979699][ T3649] ? __cfi_sel_write_load+0x10/0x10 [ 171.984961][ T3649] vfs_write+0x3c8/0xf90 [ 171.989320][ T3649] ? __cfi_vfs_write+0x10/0x10 [ 171.994137][ T3649] ? __kasan_check_write+0x18/0x20 [ 171.999312][ T3649] ? mutex_lock+0x97/0x1d0 [ 172.003777][ T3649] ? __cfi_mutex_lock+0x10/0x10 [ 172.008696][ T3649] ? __fget_files+0x2c5/0x340 [ 172.013434][ T3649] ksys_write+0x145/0x260 [ 172.017935][ T3649] ? xfd_validate_state+0x68/0x140 [ 172.023197][ T3649] ? __cfi_ksys_write+0x10/0x10 [ 172.028144][ T3649] ? __kasan_check_write+0x18/0x20 [ 172.033310][ T3649] ? fpregs_restore_userregs+0x11c/0x260 [ 172.039013][ T3649] __x64_sys_write+0x7f/0x90 [ 172.043660][ T3649] x64_sys_call+0x271c/0x2ee0 [ 172.048402][ T3649] do_syscall_64+0x57/0xf0 [ 172.052883][ T3649] ? clear_bhb_loop+0x50/0xa0 [ 172.057625][ T3649] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 172.063564][ T3649] RIP: 0033:0x7f3417b9bf79 [ 172.068039][ T3649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.087745][ T3649] RSP: 002b:00007f34165f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 172.096247][ T3649] RAX: ffffffffffffffda RBX: 00007f3417e15fa0 RCX: 00007f3417b9bf79 [ 172.104260][ T3649] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000007 [ 172.112292][ T3649] RBP: 00007f3417c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 172.120336][ T3649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.128362][ T3649] R13: 00007f3417e16038 R14: 00007f3417e15fa0 R15: 00007ffc61543098 [ 172.136409][ T3649] [ 172.139450][ T3649] ---[ end trace 0000000000000000 ]--- [ 172.145613][ T3649] SELinux: failed to load policy [ 172.156848][ T354] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 172.163245][ T354] usb 1-1: No valid video chain found. [ 172.168781][ T354] usb 1-1: selecting invalid altsetting 0 [ 172.178855][ T354] usb 1-1: USB disconnect, device number 95