last executing test programs: 3.799939123s ago: executing program 1 (id=118): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x9, 0x2, 0xb, 0x2}, {0xf, 0x1, 0x6, 0x923}, {0x101, 0x9, 0x9, 0x7}]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="662e660f6776000f0fe48e660f3a61dc25360f01c9360fc75e3d0f20223e0f01b00600baf80c66b89a2fcf8b66efbafc0ced3e0f92150f01c3", 0x39}], 0x1, 0x11, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@remote, 0x0}, &(0x7f0000000180)=0x14) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) lseek(r7, 0x8, 0x4) bind$xdp(r5, &(0x7f00000001c0)={0x2c, 0x7, r6, 0x40, r7}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 3.684273907s ago: executing program 1 (id=121): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) madvise(&(0x7f0000aed000/0x3000)=nil, 0x3000, 0x17) 3.669797807s ago: executing program 1 (id=122): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a404e2300000001ff0100000000000000000000000000010b000000200002000a004e2300000000fe80000000000000000000000000001e090000000d0001007564703a73"], 0x6c}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) lsetxattr$security_selinux(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840), &(0x7f0000000880)='system_u:object_r:vhost_device_t:s0\x00', 0x24, 0x2) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0xffffffff, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) syz_usb_connect(0x5, 0x46, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0x86, 0xad, 0x2b, 0x8, 0x67b, 0x23f3, 0xac64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x1, 0x6, 0x90, 0x3b, "", [{{0x9, 0x4, 0xce, 0xf, 0x3, 0xa5, 0x7a, 0x60, 0x80, [], [{{0x9, 0x5, 0x0, 0x3, 0x400, 0xf, 0x0, 0x81}}, {{0x9, 0x5, 0xa, 0x8, 0x8, 0x9, 0x81, 0x0, [@generic={0x7, 0x5, "a1662cbf36"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x8, 0x1, 0x7, 0x2}}]}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x3, 0x10000002, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x100, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x82100, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r12, 0x0, 0x29, &(0x7f00000002c0)={@multicast2, @dev={0xac, 0x14, 0x14, 0x1e}, 0x0, 0x5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @loopback, @broadcast]}, 0x24) r13 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010002, 0x20000, 0xffffff}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x12) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) syz_create_resource$binfmt(0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.468397834s ago: executing program 3 (id=124): read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f0000002300), 0x1003) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000002400)={{r1, &(0x7f0000000080)='\xb1\x17\xb4', 0x260200, &(0x7f00000000c0)={@_ha_fsid={[0xa77, 0xde9]}, {0x1, 0x200, 0x80000000, 0x979}}, 0x8, &(0x7f0000000200), &(0x7f0000000240)=0x5d}, {[0x44ca, 0xb44, 0xdf8, 0xfffffffb]}, 0x6, 0xac, &(0x7f0000002340)=""/172}) write$P9_RVERSION(r2, &(0x7f0000002480)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x15) statx(r1, 0x0, 0x1000, 0x100, &(0x7f0000000100)) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x82801, 0x0) r4 = dup(r3) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r5 = syz_open_pts(r3, 0x80) read(r5, &(0x7f0000001240)=""/4096, 0x1000) (async) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f00000001c0)={0x3, 0x2, 0x2, 0xfbdfffcf, 0x3, "65bd219f000062f800", 0xfffff7a4, 0xc}) (async) write$9p(r4, &(0x7f0000001200)='\x00', 0x1) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x51) (async) r7 = request_key(&(0x7f00000024c0)='asymmetric\x00', &(0x7f0000002500)={'syz', 0x1}, &(0x7f0000002540)='\x00', 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r2, 0x9f) (async) fallocate(r6, 0x0, 0x9, 0x10401) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) lseek(r8, 0x595e, 0x3) (async) syz_open_dev$rtc(&(0x7f0000002580), 0x5, 0xc0) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r10 = dup2(r9, r9) getsockopt$inet6_mreq(r10, 0x29, 0x14, 0x0, &(0x7f0000000280)) 3.466493203s ago: executing program 3 (id=125): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000f, 0x12, r2, 0x46f12000) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200), 0x88302, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x0, 0x10000000, 0x1}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x6b8f, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x10) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000140)='\x7f\xdb\xada\xe0\x8c\xeci\xb0Z\x87\x129\x05\x8d\x12G\xbf\x88QO\xb2\xe9\xf6~\xc7F\x02\x00\xff\xd2\x93Z\xf91\x9cIGB\b/\x18.\x82\x85}\xd0=\xd6\xc4jO\xe5\t\x9d\xde\xa2{\x94\x1c[\x0f\x9aW*h\xc2\x19\xb4\xe5\x13i\x88\xb5\x83\x1dF2\xbe\x15\x1c/\xbe\xa5B\x89\x12\xee\xee\\\b\xbb\x9d\x8b\xd6\xb6\x05]\xe3\x02\x85w\xd6U.\x87\x87\xe1\xe5V\xbbaGwMl \xfa\x84\xa4\xd9m\xebA}\xcdN\x9d]w\xd0\xf4\xad\x9b\xff%\x92\xe5\xe9,?l\x03\x83Q\xf3V\x11\xb7T\xed\xeab2\xae \xeb\xba\xa2C\xc4^M\x97\x0e\xabrj\xbf\x88g\x03\x13\xec\x8a8/\n\xb0\xce\x8c\xc1\xbe\xd6\x9ba\xc3z\xfc\xe8') close(0x3) 3.420658675s ago: executing program 3 (id=126): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200), 0x88302, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='\x7f\xdb\xada\xe0\x8c\xeci\xb0Z\x87\x129\x05\x8d\x12G\xbf\x88QO\xb2\xe9\xf6~\xc7F\x02\x00\xff\xd2\x93Z\xf91\x9cIGB\b/\x18.\x82\x85}\xd0=\xd6\xc4jO\xe5\t\x9d\xde\xa2{\x94\x1c[\x0f\x9aW*h\xc2\x19\xb4\xe5\x13i\x88\xb5\x83\x1dF2\xbe\x15\x1c/\xbe\xa5B\x89\x12\xee\xee\\\b\xbb\x9d\x8b\xd6\xb6\x05]\xe3\x02\x85w\xd6U.\x87\x87\xe1\xe5V\xbbaGwMl \xfa\x84\xa4\xd9m\xebA}\xcdN\x9d]w\xd0\xf4\xad\x9b\xff%\x92\xe5\xe9,?l\x03\x83Q\xf3V\x11\xb7T\xed\xeab2\xae \xeb\xba\xa2C\xc4^M\x97\x0e\xabrj\xbf\x88g\x03\x13\xec\x8a8/\n\xb0\xce\x8c\xc1\xbe\xd6\x9ba\xc3z\xfc\xe8') close(0x3) 3.407087245s ago: executing program 3 (id=127): clock_gettime(0x766293fdc5a3d1b3, 0x0) syz_usb_connect$uac2(0x3, 0xa2, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x18, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x3, 0x1, 0xb, 0x40, 0x40, {0x8, 0xb, 0x0, 0x1, 0x1, 0x4, 0x20, 0x81}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x1, 0x30, 0xc}, [@extension_unit={0x8, 0x24, 0x9, 0x2, 0x6, 0x5, "e4"}, @input_terminal={0x10, 0x24, 0x2, 0x6, 0x200, 0x3, 0x5, 0x2, 0x4, 0x10, 0x3, 0xb7}, @processing_unit={0xf, 0x24, 0x8, 0x1, 0x2, [0x3, 0x3, 0x3, 0x3, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x10, 0x5, 0x9, {0x8, 0x25, 0x1, 0x80, 0x3c, 0x4, 0x4000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xd, 0x3, 0x40, {0x8, 0x25, 0x1, 0x86, 0x3f, 0x4, 0xb6}}}}}}}}]}}, 0x0) 2.9393988s ago: executing program 2 (id=129): r0 = syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002014000000904000001020d0000052406000105240000000d240f000205000006174fb262160a186a1b665c11f45d241afeff1209058103000204fe000904010000020d00000904010102"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.436985835s ago: executing program 3 (id=131): r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x60, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2}}}}}]}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x202}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="0209000902"], 0x10}}, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3001}}}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) 2.154427983s ago: executing program 1 (id=132): r0 = socket$netlink(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x81, 0x80, 0x71, 0x3, 0x1, "2ad51a91dc285140da0038eff025f197d20bc9"}) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) ptrace$ARCH_MAP_VDSO_X32(0x1e, r2, 0xfff, 0x2001) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x6, {0x203, 0x4, 0x0, {0x4, 0x0, 0x3, 0x2, 0x8, 0x7, 0xa, 0xfffffff5, 0x81, 0x8000, 0x5, 0x0, 0xffffffffffffffff, 0x9, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) ioctl$TCXONC(r1, 0x540a, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000000401"], 0x24}}, 0x20004040) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="200000001100010002004000ffdbdf25100bcb1657b571c18861d00000833256ccab"], 0x20}], 0x1, 0x0, 0x0, 0x800}, 0x40080) 1.748649216s ago: executing program 2 (id=133): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x401}, 0x1c) sendto$packet(r1, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8910, &(0x7f00000028c0)={'ip6_vti0\x00', 0x0}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x161000, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f0000000040)={0xe, 0x8}) 1.728577996s ago: executing program 2 (id=134): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200), 0x88302, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='\x7f\xdb\xada\xe0\x8c\xeci\xb0Z\x87\x129\x05\x8d\x12G\xbf\x88QO\xb2\xe9\xf6~\xc7F\x02\x00\xff\xd2\x93Z\xf91\x9cIGB\b/\x18.\x82\x85}\xd0=\xd6\xc4jO\xe5\t\x9d\xde\xa2{\x94\x1c[\x0f\x9aW*h\xc2\x19\xb4\xe5\x13i\x88\xb5\x83\x1dF2\xbe\x15\x1c/\xbe\xa5B\x89\x12\xee\xee\\\b\xbb\x9d\x8b\xd6\xb6\x05]\xe3\x02\x85w\xd6U.\x87\x87\xe1\xe5V\xbbaGwMl \xfa\x84\xa4\xd9m\xebA}\xcdN\x9d]w\xd0\xf4\xad\x9b\xff%\x92\xe5\xe9,?l\x03\x83Q\xf3V\x11\xb7T\xed\xeab2\xae \xeb\xba\xa2C\xc4^M\x97\x0e\xabrj\xbf\x88g\x03\x13\xec\x8a8/\n\xb0\xce\x8c\xc1\xbe\xd6\x9ba\xc3z\xfc\xe8') r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x133, 0x80) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000080)={0x2, 0x9, 0xfffffffc, 0x3, 0x200, 0x8}) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/52) close(0x3) 1.716723687s ago: executing program 2 (id=135): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200), 0x88302, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='\x7f\xdb\xada\xe0\x8c\xeci\xb0Z\x87\x129\x05\x8d\x12G\xbf\x88QO\xb2\xe9\xf6~\xc7F\x02\x00\xff\xd2\x93Z\xf91\x9cIGB\b/\x18.\x82\x85}\xd0=\xd6\xc4jO\xe5\t\x9d\xde\xa2{\x94\x1c[\x0f\x9aW*h\xc2\x19\xb4\xe5\x13i\x88\xb5\x83\x1dF2\xbe\x15\x1c/\xbe\xa5B\x89\x12\xee\xee\\\b\xbb\x9d\x8b\xd6\xb6\x05]\xe3\x02\x85w\xd6U.\x87\x87\xe1\xe5V\xbbaGwMl \xfa\x84\xa4\xd9m\xebA}\xcdN\x9d]w\xd0\xf4\xad\x9b\xff%\x92\xe5\xe9,?l\x03\x83Q\xf3V\x11\xb7T\xed\xeab2\xae \xeb\xba\xa2C\xc4^M\x97\x0e\xabrj\xbf\x88g\x03\x13\xec\x8a8/\n\xb0\xce\x8c\xc1\xbe\xd6\x9ba\xc3z\xfc\xe8') close(0x3) 1.706465368s ago: executing program 2 (id=136): syz_usb_connect$uac1(0x3, 0x87, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x7a, 0x60, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffff, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x6, 0x4, 0xfc, 0x2, "715eb9483414"}, @as_header={0x7, 0x24, 0x1, 0xff, 0x1, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x1, 0x81, {0x7, 0x25, 0x1, 0xe, 0x0, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0xc, 0xe9, {0x7, 0x25, 0x1, 0x0, 0x8, 0x3}}}}}}}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e80), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010029bd6c00fda077b4c70a5f"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r2) tkill(r2, 0x12) tkill(r2, 0x12) ptrace(0x4208, r2) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f00000019c0)=@vmx={0x106, 0x0, 0x2080, {0x2000, 0x30000, {0x2}}, {"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", "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"}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000180)={0xfff9, 0x4c8, 0x2, 0x9dfe, 0xe, "3d52e3ff00"}) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x84) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000006c0)={0x1, 0x0, [{0x1c5, 0x0, 0x3}]}) syz_usb_connect$cdc_ncm(0x4, 0x78, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x2, 0x1, 0x5, 0x40, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "7f669f8b96"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x8e0, 0x9, 0xfb3a, 0x5}, {0x6, 0x24, 0x1a, 0x200, 0x8}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x81}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1a, 0x40, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xff, 0x9, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xe6, 0x1, 0xa}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x7, 0x4c, 0x88, 0x10, 0x7}, 0x8, &(0x7f0000000340)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0xfd, &(0x7f0000000140)=@string={0xfd, 0x3, "6246586f2857171dcab8b0eab4001c4e2a78c15d450d00d902222cf1e60cd07ad18f240926a964982232a9f2fb7a9639ba536b3cceeb870553902c27b78faee71488e02410a8751bcd3eb735d6ef71fc0f238eea490809c0abb7e791c0e8ab8903ec23c1099a831e19b9ea313730e422c7c501b4979459235ef60eff09817b44afce34b7ee2748470f42d7dad13a0fe10863dcd2915dd16efc2340a9220a22726fc8c58d276ff66c77a56317fd9799f9d3dfd8b54c0ee1e04b78544d0d2e82d878dff3cc555f5cef0d02f1290f75c37e74c001bec29adbed7ed1551742c8d52b25fe9b137da93ea90bea211a9138dbfe8b8c02996cd62a7da93b96"}}]}) 1.28857896s ago: executing program 0 (id=137): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x101200, 0x8, 0x2}, 0x18) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', r0, &(0x7f00000003c0)='./file0\x00', 0x1000) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) lstat(&(0x7f0000000100)='./file0/file2\x00', &(0x7f0000000280)) 1.2882398s ago: executing program 1 (id=138): syz_ublk_setup_io_uring(0x5fe3, &(0x7f0000000900)={0x0, 0xa407, 0x4, 0x2, 0x366}, &(0x7f0000000980), 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090400000178eaf50009058437"], 0x0) clock_getres(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x3, 0x0, 0x0) syz_clone3(&(0x7f0000002040)={0x80, 0x0, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.280345201s ago: executing program 0 (id=139): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f00000000c0), 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom1\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e24, 0xfffffffe, @remote}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "8fba4af39b07069e", "67ccb3b3604f9a7e7732e0cb9c9d1b1500", "8000c800", "aad438264a00"}, 0x38) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c4603000704810000000000000003003e00f9ffffffd50100000000000040000000000000008b00000000000000360d00000500380003"], 0xe8) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r3) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x40010042, 0x0) writev(r2, &(0x7f0000000280), 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000001b40)={[0x5]}, 0x8) poll(&(0x7f00000002c0), 0x0, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/binder1\x00', 0x800, 0x0) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7) prctl$PR_SET_SECUREBITS(0x1c, 0x30) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0x2, 0x1, 0x0) ioctl$UFFDIO_POISON(r4, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='vcan0\x00', 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4f23, @multicast1}, 0x10) 1.170789173s ago: executing program 0 (id=140): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x4001, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x2020) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)={0x28, 0x4, 0x0, {0x1, 0x4}}, 0x28) 1.112494166s ago: executing program 0 (id=141): mount$tmpfs(0x0, 0x0, &(0x7f0000000280), 0x14, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(0xffffffffffffffff, 0x80809440, &(0x7f0000000540)={&(0x7f0000000500)=[{&(0x7f0000000100)="4d674b12373c7ff5f4f7606c5bec295a059c9bdac0ab957a07c3a31341978b8856a495533d92231dbed4e3b1baa1f420346813fa9257a88950981d2c7464155427f670e6209f0024375360d07efa71825bdf136423500cc122f78e06b5957a6a21ef4737d4da6e51c55b7992a4743a9055a1b3d16e052fd6e9d4f06f43a60c21738ea676d3c3492dbb987f518c62087e0cc598c901d5583a9638b744c68e93c805", 0xa1}], 0x1, 0x0, 0x0, 0x1, 0x1, 0x5, 0x3, 0x5}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x6, 0x248, 0x9b9a}, 0x3a, [0xfffffff5, 0x0, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x401, 0x40000b4, 0xa, 0x2, 0x4, 0x81, 0xe4, 0x6, 0xfc000000, 0x9, 0xbbf, 0x200, 0x1, 0x48, 0x100d, 0x3, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x7, 0x81, 0x40008a, 0x79, 0x2, 0x10001, 0x4, 0x91, 0x4, 0xe768, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x84, 0x9, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x8, 0x7, 0x5, 0x4007f, 0xffffffff, 0x6], [0x3, 0x16e, 0x6, 0xf6ca, 0x4, 0xda, 0xb8a9, 0x20000070, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffe, 0x80d, 0x5, 0xa7, 0x1000, 0x101, 0x200b395, 0x400000, 0x80000000, 0x4, 0x19, 0x7, 0x400001, 0x3, 0x3, 0xb, 0xffffff7f, 0x401, 0x6, 0x200, 0x96, 0x0, 0xfffffff6, 0x401, 0x6, 0xf1, 0x6, 0x55c, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x1, 0x0, 0x1ce, 0x1, 0x80000004, 0x80000001, 0x2, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40001003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xfffc, 0x6, 0x2, 0x2e6bf783, 0xfffff100, 0x5, 0x400005, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x5, 0xee4b, 0x2008004, 0x1, 0x691, 0x5, 0x89, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x8000, 0x401, 0x3e55, 0x9, 0xd3, 0x8, 0x3437, 0x2, 0xd, 0x7, 0x601, 0x101, 0x200dd80, 0x60a0, 0x3, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x4, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xa, 0x10000, 0x3, 0x8, 0x1], [0xa772, 0x2, 0x7, 0x1afa, 0xbfc, 0x8, 0x3, 0x7f, 0x55, 0x40, 0xc, 0x1005, 0x1, 0x8000007, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xfffffeff, 0xffbffff7, 0x8, 0x7, 0x3, 0x939, 0x6, 0x80008001, 0x7777, 0x7fffffff, 0x2, 0x100, 0xffffffff, 0x7ffffffe, 0x4009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x6, 0x10000, 0x0, 0x8004, 0x6fff, 0x2, 0x3, 0xf, 0xe, 0x10, 0x26c, 0x6, 0xfffffff9, 0x4, 0xfffffff8, 0x9, 0xf, 0x463f, 0x4, 0xdad, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x8, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x0, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x204344}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$cgroup_subtree(r6, 0x0, 0xfe33) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x9}], 0x1, 0x1d, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 302.15928ms ago: executing program 3 (id=142): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x161000, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x3, 0x1c3}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r1, r5, &(0x7f0000000380)={0x0, 0xcc45, 0x800, 0x1, 0x3be, 0x0, r1}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x2, 0x80000003, 0x3ad}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8, 0x1, 0x200000a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x40, 0x2, 0x902c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd8c1, 0x1, 0x3, 0x260, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, '\x00', {0x0, 0xb81, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x51, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000"], 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100)=0x101, 0x4) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_clone(0x2000, 0x0, 0xffdd, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000040)={0x6, 0x3}) 251.378982ms ago: executing program 2 (id=143): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000200)={@void, @void, @eth={@broadcast, @empty, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x67, 0x0, 0x7, 0x32, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}, @local}}}}}}, 0x26) 31.596379ms ago: executing program 0 (id=144): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5500000020007f2fb72d13b2a4a271930200002000aab88bb5969e41789848a3c728f1afa823ff0000010100005ae583de0d32d6ed9098d100000042e718f94b02000000000000002ce9c95d92fb38675800000000", 0x55}], 0x1}, 0x0) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2c, r2, 0x513, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x4}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200), 0x88302, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f0000000140)='\x7f\xdb\xada\xe0\x8c\xeci\xb0Z\x87\x129\x05\x8d\x12G\xbf\x88QO\xb2\xe9\xf6~\xc7F\x02\x00\xff\xd2\x93Z\xf91\x9cIGB\b/\x18.\x82\x85}\xd0=\xd6\xc4jO\xe5\t\x9d\xde\xa2{\x94\x1c[\x0f\x9aW*h\xc2\x19\xb4\xe5\x13i\x88\xb5\x83\x1dF2\xbe\x15\x1c/\xbe\xa5B\x89\x12\xee\xee\\\b\xbb\x9d\x8b\xd6\xb6\x05]\xe3\x02\x85w\xd6U.\x87\x87\xe1\xe5V\xbbaGwMl \xfa\x84\xa4\xd9m\xebA}\xcdN\x9d]w\xd0\xf4\xad\x9b\xff%\x92\xe5\xe9,?l\x03\x83Q\xf3V\x11\xb7T\xed\xeab2\xae \xeb\xba\xa2C\xc4^M\x97\x0e\xabrj\xbf\x88g\x03\x13\xec\x8a8/\n\xb0\xce\x8c\xc1\xbe\xd6\x9ba\xc3z\xfc\xe8') close(0x3) 29.021788ms ago: executing program 0 (id=145): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) (async, rerun: 32) r2 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) (async, rerun: 64) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x11000) (rerun: 64) r3 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0xed58ed8ed9e5ca2e, 0x0, 0x4, "27872af9"}, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=146): r0 = socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$netlink(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)={0x28, 0x2e, 0x503, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0xd}, @typed={0x8, 0x110, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x28}], 0x1}, 0x14008010) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.212' (ED25519) to the list of known hosts. [ 21.263550][ T36] audit: type=1400 audit(1781915989.880:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.264687][ T286] cgroup: Unknown subsys name 'net' [ 21.286321][ T36] audit: type=1400 audit(1781915989.880:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.313666][ T36] audit: type=1400 audit(1781915989.910:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.313885][ T286] cgroup: Unknown subsys name 'devices' [ 21.441774][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.447509][ T286] cgroup: Unknown subsys name 'rlimit' [ 21.560485][ T36] audit: type=1400 audit(1781915990.180:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.583652][ T36] audit: type=1400 audit(1781915990.180:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.608627][ T36] audit: type=1400 audit(1781915990.180:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.617189][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.640508][ T36] audit: type=1400 audit(1781915990.260:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.665990][ T36] audit: type=1400 audit(1781915990.260:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.705629][ T36] audit: type=1400 audit(1781915990.320:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.731233][ T36] audit: type=1400 audit(1781915990.320:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.731500][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.001606][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.008767][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.015972][ T295] bridge_slave_0: entered allmulticast mode [ 23.022226][ T295] bridge_slave_0: entered promiscuous mode [ 23.035306][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.042395][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.049467][ T295] bridge_slave_1: entered allmulticast mode [ 23.055780][ T295] bridge_slave_1: entered promiscuous mode [ 23.077307][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.084531][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.091689][ T293] bridge_slave_0: entered allmulticast mode [ 23.097871][ T293] bridge_slave_0: entered promiscuous mode [ 23.104328][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.111414][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.118487][ T293] bridge_slave_1: entered allmulticast mode [ 23.124826][ T293] bridge_slave_1: entered promiscuous mode [ 23.130902][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.138112][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.145226][ T296] bridge_slave_0: entered allmulticast mode [ 23.151417][ T296] bridge_slave_0: entered promiscuous mode [ 23.169547][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.176646][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.183795][ T294] bridge_slave_0: entered allmulticast mode [ 23.189986][ T294] bridge_slave_0: entered promiscuous mode [ 23.196174][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.203228][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.210431][ T296] bridge_slave_1: entered allmulticast mode [ 23.216639][ T296] bridge_slave_1: entered promiscuous mode [ 23.241207][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.248272][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.255428][ T294] bridge_slave_1: entered allmulticast mode [ 23.261653][ T294] bridge_slave_1: entered promiscuous mode [ 23.396255][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.403361][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.410705][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.417735][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.452149][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.459214][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.466534][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.473580][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.483302][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.490371][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.497658][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.504751][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.522084][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.529384][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.536790][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.544245][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.551904][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.559078][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.575606][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.582733][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.601453][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.608515][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.640759][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.647795][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.661425][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.668490][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.683097][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.690178][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.706892][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.713956][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.722317][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.729344][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.736913][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.743963][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.783313][ T293] veth0_vlan: entered promiscuous mode [ 23.792730][ T295] veth0_vlan: entered promiscuous mode [ 23.807884][ T294] veth0_vlan: entered promiscuous mode [ 23.818064][ T295] veth1_macvtap: entered promiscuous mode [ 23.830444][ T293] veth1_macvtap: entered promiscuous mode [ 23.854982][ T294] veth1_macvtap: entered promiscuous mode [ 23.884859][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.885674][ T296] veth0_vlan: entered promiscuous mode [ 23.925285][ T296] veth1_macvtap: entered promiscuous mode [ 23.943778][ T314] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.008949][ T314] incfs_lookup_dentry err:-13 [ 24.018005][ T314] incfs: Can't find or create .index dir in ./file0 [ 24.035720][ T314] incfs: mount failed -13 [ 24.083443][ T315] Zero length message leads to an empty skb [ 24.116854][ T350] overlayfs: failed to resolve './file0': -2 [ 24.225134][ T401] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 24.239799][ T319] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.389970][ T319] usb 2-1: Using ep0 maxpacket: 16 [ 24.396322][ T319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.407316][ T319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.417087][ T319] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 24.430116][ T319] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 24.439179][ T319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.448506][ T319] usb 2-1: config 0 descriptor?? [ 24.856282][ T317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.864902][ T317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.876267][ T319] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 24.883605][ T319] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 24.890873][ T319] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 24.898119][ T319] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 24.905430][ T319] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 24.912811][ T319] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 24.920797][ T319] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 24.928084][ T319] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 24.935427][ T319] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 24.942710][ T319] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 24.950194][ T319] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 24.957630][ T319] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 24.965098][ T319] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 24.972405][ T319] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 24.979699][ T319] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 24.989955][ T319] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0001/input/input4 [ 25.003810][ T319] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 25.079918][ T319] usb 2-1: USB disconnect, device number 2 [ 25.260917][ T65] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.412582][ T65] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.423195][ T65] usb 1-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 25.436898][ T65] usb 1-1: config 1 interface 0 has no altsetting 0 [ 25.444516][ T65] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 25.454031][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 25.463026][ T65] usb 1-1: SerialNumber: syz [ 25.471304][ T65] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 25.569911][ T48] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.671901][ T423] usb 1-1: USB disconnect, device number 2 [ 25.729674][ T48] usb 3-1: Using ep0 maxpacket: 8 [ 25.741338][ T48] usb 3-1: config 0 interface 0 has no altsetting 0 [ 25.758645][ T48] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 25.768418][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.788760][ T48] usb 3-1: config 0 descriptor?? [ 25.872008][ T437] incfs: Error accessing: ./file0. [ 25.877191][ T437] incfs: mount failed -20 [ 25.882844][ T437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'. [ 25.900338][ T65] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 26.060817][ T65] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 26.072096][ T65] usb 2-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 26.085388][ T65] usb 2-1: config 0 interface 0 has no altsetting 0 [ 26.092049][ T65] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 26.106865][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.124845][ T65] usb 2-1: config 0 descriptor?? [ 26.130183][ T427] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 26.172269][ T445] netlink: 44 bytes leftover after parsing attributes in process `syz.3.23'. [ 26.183333][ T445] incfs_lookup_dentry err:-13 [ 26.249686][ T319] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 26.254719][ T48] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x2 [ 26.264672][ T48] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x6 [ 26.271900][ T48] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 26.278906][ T48] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 26.285991][ T48] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 26.292998][ T48] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 26.300008][ T48] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 26.306988][ T48] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 26.313971][ T48] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 26.320958][ T48] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 26.327934][ T48] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 26.334931][ T48] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 26.341924][ T48] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 26.348974][ T48] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 26.356022][ T48] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 26.363053][ T48] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 26.370066][ T48] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 26.377042][ T48] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 26.379680][ T319] usb 1-1: device descriptor read/64, error -71 [ 26.384035][ T48] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 26.397250][ T48] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 26.404324][ T48] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 26.411352][ T48] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 26.418409][ T48] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 26.425421][ T48] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 26.433054][ T48] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 26.440293][ T48] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 26.447365][ T48] lenovo 0003:17EF:60A4.0002: unknown main item tag 0x0 [ 26.455099][ T48] lenovo 0003:17EF:60A4.0002: hidraw0: USB HID v0.c1 Device [HID 17ef:60a4] on usb-dummy_hcd.2-1/input0 [ 26.603999][ T36] kauditd_printk_skb: 88 callbacks suppressed [ 26.604015][ T36] audit: type=1400 audit(1781915995.220:162): avc: denied { read write } for pid=426 comm="syz.1.16" name="usbmon1" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 26.633741][ T36] audit: type=1400 audit(1781915995.220:163): avc: denied { open } for pid=426 comm="syz.1.16" path="/dev/usbmon1" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 26.634311][ T65] usbhid 2-1:0.0: can't add hid device: -71 [ 26.657396][ T319] usb 1-1: device descriptor read/64, error -71 [ 26.663087][ T65] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 26.679529][ T65] usb 2-1: USB disconnect, device number 3 [ 26.899708][ T319] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 27.029754][ T319] usb 1-1: device descriptor read/64, error -71 [ 27.071595][ T455] netlink: 252 bytes leftover after parsing attributes in process `syz.3.25'. [ 27.080641][ T455] IPv6: NLM_F_CREATE should be specified when creating new route [ 27.279722][ T319] usb 1-1: device descriptor read/64, error -71 [ 27.319731][ T453] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.389866][ T319] usb usb1-port1: attempt power cycle [ 27.469673][ T453] usb 4-1: Using ep0 maxpacket: 8 [ 27.475836][ T453] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 27.487240][ T453] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 27.500047][ T453] usb 4-1: config 0 interface 0 has no altsetting 0 [ 27.506655][ T453] usb 4-1: New USB device found, idVendor=04b3, idProduct=3100, bcdDevice= 0.00 [ 27.515698][ T453] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.524248][ T453] usb 4-1: config 0 descriptor?? [ 27.729709][ T319] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 27.750731][ T319] usb 1-1: device descriptor read/8, error -71 [ 27.880833][ T319] usb 1-1: device descriptor read/8, error -71 [ 27.937975][ T455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.946551][ T455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.955049][ T455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.963820][ T455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.972453][ T36] audit: type=1400 audit(1781915996.590:164): avc: denied { create } for pid=454 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 27.993475][ T36] audit: type=1400 audit(1781915996.590:165): avc: denied { ioctl } for pid=454 comm="syz.3.25" path="socket:[4685]" dev="sockfs" ino=4685 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 28.019151][ T36] audit: type=1400 audit(1781915996.590:166): avc: denied { setopt } for pid=454 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.038891][ T36] audit: type=1400 audit(1781915996.590:167): avc: denied { getopt } for pid=454 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.070911][ T453] usbhid 4-1:0.0: can't add hid device: -71 [ 28.076876][ T453] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 28.085693][ T453] usb 4-1: USB disconnect, device number 2 [ 28.120016][ T319] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 28.140808][ T319] usb 1-1: device descriptor read/8, error -71 [ 28.270778][ T319] usb 1-1: device descriptor read/8, error -71 [ 28.379837][ T319] usb usb1-port1: unable to enumerate USB device [ 28.391081][ T65] usb 3-1: USB disconnect, device number 2 [ 28.752536][ T36] audit: type=1400 audit(1781915997.370:168): avc: denied { create } for pid=471 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 28.772246][ T36] audit: type=1400 audit(1781915997.370:169): avc: denied { connect } for pid=471 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 28.798997][ T36] audit: type=1400 audit(1781915997.410:170): avc: denied { getopt } for pid=471 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 28.825188][ T36] audit: type=1400 audit(1781915997.440:171): avc: denied { ioctl } for pid=473 comm="syz.1.32" path="socket:[4792]" dev="sockfs" ino=4792 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.859681][ T319] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.941971][ T481] capability: warning: `syz.1.34' uses 32-bit capabilities (legacy support in use) [ 29.001931][ T486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.011187][ T319] usb 4-1: Using ep0 maxpacket: 16 [ 29.018088][ T319] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 29.029214][ T486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.037183][ T319] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 0.04 [ 29.046405][ T319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 29.054500][ T319] usb 4-1: SerialNumber: syz [ 29.059649][ T319] usb 4-1: config 0 descriptor?? [ 29.065336][ T319] hub 4-1:0.0: bad descriptor, ignoring hub [ 29.071290][ T319] hub 4-1:0.0: probe with driver hub failed with error -5 [ 29.078607][ T319] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 29.086945][ T319] usb 4-1: Detected SIO [ 29.092107][ T319] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 29.240029][ T453] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 29.369674][ T453] usb 2-1: device descriptor read/64, error -71 [ 29.429683][ T65] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 29.590815][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.601839][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.611625][ T65] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 29.619666][ T453] usb 2-1: device descriptor read/64, error -71 [ 29.620767][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.635505][ T65] usb 1-1: config 0 descriptor?? [ 29.859695][ T453] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 29.989699][ T453] usb 2-1: device descriptor read/64, error -71 [ 30.019667][ T48] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 30.044729][ T65] steelseries 0003:1038:12B6.0003: item fetching failed at offset 6/7 [ 30.053176][ T65] steelseries 0003:1038:12B6.0003: probe with driver steelseries failed with error -22 [ 30.149737][ T48] usb 4-1: device descriptor read/64, error -71 [ 30.239678][ T453] usb 2-1: device descriptor read/64, error -71 [ 30.249126][ T65] usb 1-1: USB disconnect, device number 7 [ 30.349768][ T453] usb usb2-port1: attempt power cycle [ 30.389687][ T48] usb 4-1: device descriptor read/64, error -71 [ 30.629703][ T48] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 30.689697][ T453] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 30.710781][ T453] usb 2-1: device descriptor read/8, error -71 [ 30.762516][ T48] usb 4-1: device descriptor read/64, error -71 [ 30.841369][ T453] usb 2-1: device descriptor read/8, error -71 [ 31.009696][ T48] usb 4-1: device descriptor read/64, error -71 [ 31.089654][ T453] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 31.110757][ T453] usb 2-1: device descriptor read/8, error -71 [ 31.240688][ T453] usb 2-1: device descriptor read/8, error -71 [ 31.249852][ T48] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 31.270753][ T48] usb 4-1: device descriptor read/8, error -71 [ 31.359670][ T453] usb usb2-port1: unable to enumerate USB device [ 31.402974][ T48] usb 4-1: device descriptor read/8, error -71 [ 31.659710][ T48] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 31.681034][ T48] usb 4-1: device descriptor read/8, error -71 [ 31.769686][ T453] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 31.810716][ T48] usb 4-1: device descriptor read/8, error -71 [ 31.909668][ T9] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 31.919677][ T453] usb 3-1: Using ep0 maxpacket: 16 [ 31.920089][ T48] usb 4-1: USB disconnect, device number 3 [ 31.926279][ T453] usb 3-1: unable to get BOS descriptor or descriptor too short [ 31.933259][ T48] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 31.940845][ T453] usb 3-1: New USB device found, idVendor=2b73, idProduct=0034, bcdDevice= 0.40 [ 31.948454][ T48] ftdi_sio 4-1:0.0: device disconnected [ 31.962303][ T453] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.971957][ T453] usb 3-1: Product: syz [ 31.976146][ T453] usb 3-1: Manufacturer: syz [ 31.980796][ T453] usb 3-1: SerialNumber: syz [ 32.060594][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.079643][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 14 [ 32.090848][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.100999][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 14 [ 32.111175][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.121296][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 14 [ 32.131394][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.141514][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 14 [ 32.154645][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.164885][ T514] capability: warning: `syz.1.44' uses deprecated v2 capabilities in a way that may be insecure [ 32.164930][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 14 [ 32.187784][ T9] usb 1-1: New USB device found, idVendor=17cc, idProduct=2305, bcdDevice= 0.40 [ 32.197540][ T9] usb 1-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 32.205729][ T9] usb 1-1: Product: syz [ 32.210121][ T453] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 32.217538][ T9] usb 1-1: Manufacturer: syz [ 32.222177][ T453] usb 3-1: 1:1 : sample bitwidth 249 in over sample bytes 4 [ 32.229525][ T453] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 32.238923][ T9] usb 1-1: SerialNumber: syz [ 32.244914][ T453] usb 3-1: failed to enable PITCH for EP 0x1 [ 32.251395][ T453] usb 3-1: unit 3 not found! [ 32.260372][ T453] usb 3-1: USB disconnect, device number 3 [ 32.271578][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.279678][ T48] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 32.419710][ T48] usb 4-1: device descriptor read/64, error -71 [ 32.440046][ T65] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 32.447461][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 32.447476][ T36] audit: type=1400 audit(1781916001.060:182): avc: denied { create } for pid=505 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.474373][ T36] audit: type=1400 audit(1781916001.060:183): avc: denied { relabelfrom } for pid=505 comm="syz.0.42" name="NETLINK" dev="sockfs" ino=4989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.498757][ T36] audit: type=1400 audit(1781916001.060:184): avc: denied { relabelto } for pid=505 comm="syz.0.42" name="NETLINK" dev="sockfs" ino=4989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 32.524075][ T36] audit: type=1400 audit(1781916001.060:185): avc: denied { sqpoll } for pid=505 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 32.620724][ T65] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 32.631857][ T65] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 32.644915][ T65] usb 2-1: config 0 interface 0 has no altsetting 0 [ 32.651782][ T65] usb 2-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 32.661055][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.669660][ T48] usb 4-1: device descriptor read/64, error -71 [ 32.676408][ T65] usb 2-1: config 0 descriptor?? [ 32.681665][ T519] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 32.856482][ T36] audit: type=1400 audit(1781916001.470:186): avc: denied { read } for pid=523 comm="syz.3.47" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 32.879527][ T524] rust_binder: 523:524 transaction to 0 failed: BR_DEAD_REPLY [ 32.889500][ T524] rust_binder: Read failure Err(EFAULT) in pid:41 [ 32.919711][ T36] audit: type=1400 audit(1781916001.470:187): avc: denied { open } for pid=523 comm="syz.3.47" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 32.972195][ T36] audit: type=1400 audit(1781916001.500:188): avc: denied { write } for pid=523 comm="syz.3.47" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 32.979318][ T9] usb 1-1: 0:1 : does not exist [ 32.997607][ T36] audit: type=1400 audit(1781916001.500:189): avc: denied { ioctl } for pid=523 comm="syz.3.47" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 33.023490][ T9] usb 1-1: USB disconnect, device number 8 [ 33.033814][ T36] audit: type=1400 audit(1781916001.520:190): avc: denied { wake_alarm } for pid=521 comm="syz.2.46" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.066295][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.098604][ T65] hid (null): report_id 26544 is invalid [ 33.105730][ T65] hid (null): unknown global tag 0xd [ 33.119556][ T65] lg-g15 0003:046D:C227.0004: unknown main item tag 0x7 [ 33.131962][ T65] lg-g15 0003:046D:C227.0004: unknown main item tag 0x1 [ 33.139259][ T65] lg-g15 0003:046D:C227.0004: report_id 26544 is invalid [ 33.146711][ T36] audit: type=1400 audit(1781916001.750:191): avc: denied { create } for pid=536 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 33.169632][ T65] lg-g15 0003:046D:C227.0004: item 0 2 1 8 parsing failed [ 33.178505][ T65] lg-g15 0003:046D:C227.0004: probe with driver lg-g15 failed with error -22 [ 33.308082][ T65] usb 2-1: USB disconnect, device number 8 [ 33.650433][ T545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.52'. [ 33.949717][ T423] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 34.029725][ T65] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 34.130098][ T423] usb 1-1: unable to get BOS descriptor or descriptor too short [ 34.138407][ T423] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 34.146047][ T423] usb 1-1: can't read configurations, error -71 [ 34.169711][ T48] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 34.179714][ T65] usb 3-1: Using ep0 maxpacket: 16 [ 34.185949][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.196888][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.206642][ T65] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 34.219470][ T65] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 34.228588][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.237323][ T65] usb 3-1: config 0 descriptor?? [ 34.321077][ T48] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 34.334610][ T564] netlink: 122 bytes leftover after parsing attributes in process `syz.3.58'. [ 34.338393][ T48] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 34.356600][ T48] usb 2-1: config 0 interface 0 has no altsetting 0 [ 34.363434][ T48] usb 2-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 34.372589][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.382206][ T48] usb 2-1: config 0 descriptor?? [ 34.650519][ T430] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 34.658861][ T65] microsoft 0003:045E:07DA.0006: unknown main item tag 0x1 [ 34.666953][ T430] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 34.676732][ T65] microsoft 0003:045E:07DA.0006: unknown global tag 0xd [ 34.679708][ T453] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 34.687368][ T65] microsoft 0003:045E:07DA.0006: item 0 2 1 13 parsing failed [ 34.700732][ T65] microsoft 0003:045E:07DA.0006: parse failed [ 34.707438][ T65] microsoft 0003:045E:07DA.0006: probe with driver microsoft failed with error -22 [ 34.778192][ T573] sit0: entered promiscuous mode [ 34.784394][ T573] netlink: 'syz.0.61': attribute type 1 has an invalid length. [ 34.792103][ T573] netlink: 1 bytes leftover after parsing attributes in process `syz.0.61'. [ 34.804471][ T48] wacom 0003:056A:0314.0007: unknown main item tag 0x2 [ 34.816075][ T48] wacom 0003:056A:0314.0007: unknown main item tag 0x0 [ 34.823478][ T578] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 34.824559][ T48] wacom 0003:056A:0314.0007: unknown main item tag 0x0 [ 34.840819][ T48] wacom 0003:056A:0314.0007: unknown main item tag 0x0 [ 34.847714][ T48] wacom 0003:056A:0314.0007: unknown main item tag 0x0 [ 34.854817][ T48] wacom 0003:056A:0314.0007: unknown main item tag 0x0 [ 34.861950][ T48] wacom 0003:056A:0314.0007: unknown main item tag 0x0 [ 34.869503][ T48] wacom 0003:056A:0314.0007: Unknown device_type for 'HID 056a:0314'. Assuming pen. [ 34.879693][ T453] usb 4-1: Using ep0 maxpacket: 16 [ 34.881751][ T48] wacom 0003:056A:0314.0007: hidraw0: USB HID v0.04 Device [HID 056a:0314] on usb-dummy_hcd.1-1/input0 [ 34.890886][ T453] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 34.915148][ T48] input: Wacom Intuos Pro S Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0314.0007/input/input5 [ 34.917126][ T453] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.942375][ T453] usb 4-1: config 0 descriptor?? [ 35.107444][ T603] ======================================================= [ 35.107444][ T603] WARNING: The mand mount option has been deprecated and [ 35.107444][ T603] and is ignored by this kernel. Remove the mand [ 35.107444][ T603] option from the mount to silence this warning. [ 35.107444][ T603] ======================================================= [ 35.173661][ T566] fuse: Unknown parameter 'f„£>Më<ïÂ{˜p‘®d' [ 35.581791][ T453] usb 4-1: string descriptor 0 read error: -71 [ 35.589635][ T453] uclogic 0003:5543:006E.0008: failed retrieving string descriptor #200: -71 [ 35.598581][ T453] uclogic 0003:5543:006E.0008: failed retrieving pen parameters: -71 [ 35.608838][ T453] uclogic 0003:5543:006E.0008: failed probing pen v2 parameters: -71 [ 35.617311][ T453] uclogic 0003:5543:006E.0008: failed probing parameters: -71 [ 35.624988][ T453] uclogic 0003:5543:006E.0008: probe with driver uclogic failed with error -71 [ 35.640236][ T453] usb 4-1: USB disconnect, device number 6 [ 35.880495][ T10] usb 2-1: USB disconnect, device number 9 [ 36.048329][ T610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.056883][ T610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.359637][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 36.509676][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 36.519486][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 36.534252][ T10] usb 4-1: config 106 has an invalid interface number: 22 but max is 0 [ 36.546995][ T10] usb 4-1: config 106 has no interface number 0 [ 36.559799][ T10] usb 4-1: config 106 interface 22 altsetting 2 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 36.577559][ T10] usb 4-1: config 106 interface 22 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 36.595032][ T10] usb 4-1: config 106 interface 22 has no altsetting 0 [ 36.609416][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=9218, bcdDevice=eb.64 [ 36.618772][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.626920][ T10] usb 4-1: Product: syz [ 36.631520][ T10] usb 4-1: Manufacturer: syz [ 36.636131][ T10] usb 4-1: SerialNumber: syz [ 36.789000][ T423] usb 3-1: USB disconnect, device number 4 [ 36.799650][ T453] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 36.846156][ T10] usbhid 4-1:106.22: couldn't find an input interrupt endpoint [ 36.865951][ T10] usb 4-1: USB disconnect, device number 7 [ 36.880011][ T631] netlink: 'syz.2.79': attribute type 29 has an invalid length. [ 36.887915][ T631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.79'. [ 36.980328][ T453] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.999684][ T453] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.016421][ T453] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 37.033257][ T453] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.050481][ T453] usb 2-1: config 0 descriptor?? [ 37.219673][ T423] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 37.349663][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 37.371205][ T423] usb 3-1: unable to get BOS descriptor or descriptor too short [ 37.379684][ T423] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.389913][ T423] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 37.401159][ T423] usb 3-1: config 1 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 37.421439][ T423] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 37.430686][ T423] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.438754][ T423] usb 3-1: Product: syz [ 37.443164][ T423] usb 3-1: Manufacturer: syz [ 37.448023][ T423] usb 3-1: SerialNumber: syz [ 37.509646][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 37.516330][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 37.525010][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.540545][ T10] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 37.551146][ T10] usb 1-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice= 0.40 [ 37.560307][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.568442][ T10] usb 1-1: Product: syz [ 37.573044][ T10] usb 1-1: Manufacturer: syz [ 37.577931][ T10] usb 1-1: SerialNumber: syz [ 37.618172][ T453] usbhid 2-1:0.0: can't add hid device: -71 [ 37.624556][ T453] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 37.633370][ T453] usb 2-1: USB disconnect, device number 10 [ 37.660135][ T423] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 37.673737][ T423] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 37.690446][ T423] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 37.701138][ T423] usb 3-1: USB disconnect, device number 5 [ 37.701185][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.793993][ T10] usb 1-1: unit 2 not found! [ 37.801775][ T10] usb 1-1: USB disconnect, device number 11 [ 37.979703][ T310] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 38.130988][ T310] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 38.131605][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 38.131621][ T36] audit: type=1400 audit(1781916006.750:216): avc: denied { read append } for pid=657 comm="syz.1.89" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 38.142545][ T310] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.151293][ T36] audit: type=1400 audit(1781916006.760:217): avc: denied { open } for pid=657 comm="syz.1.89" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 38.171887][ T310] usb 4-1: config 0 interface 0 has no altsetting 0 [ 38.181617][ T36] audit: type=1400 audit(1781916006.760:218): avc: denied { ioctl } for pid=657 comm="syz.1.89" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x9432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 38.219767][ T310] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 38.244281][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.258123][ T310] usb 4-1: config 0 descriptor?? [ 38.272253][ T662] FAULT_INJECTION: forcing a failure. [ 38.272253][ T662] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 38.287738][ T662] CPU: 1 UID: 0 PID: 662 Comm: syz.1.91 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 38.287768][ T662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 38.287786][ T662] Call Trace: [ 38.287792][ T662] [ 38.287800][ T662] __dump_stack+0x21/0x30 [ 38.287831][ T662] dump_stack_lvl+0x140/0x1c0 [ 38.287855][ T662] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.287880][ T662] ? check_stack_object+0x12b/0x150 [ 38.287901][ T662] dump_stack+0x19/0x20 [ 38.287924][ T662] should_fail_ex+0x3d7/0x530 [ 38.287946][ T662] should_fail+0xf/0x20 [ 38.287967][ T662] should_fail_usercopy+0x1e/0x30 [ 38.287989][ T662] _copy_to_user+0x24/0xa0 [ 38.288006][ T662] simple_read_from_buffer+0xed/0x160 [ 38.288031][ T662] proc_fail_nth_read+0x1aa/0x220 [ 38.288056][ T662] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 38.288079][ T662] ? bpf_lsm_file_permission+0xd/0x20 [ 38.288102][ T662] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 38.288124][ T662] vfs_read+0x289/0xcb0 [ 38.288142][ T662] ? __cfi_vfs_read+0x10/0x10 [ 38.288157][ T662] ? __kasan_check_write+0x18/0x20 [ 38.288173][ T662] ? mutex_lock+0x97/0x1d0 [ 38.288189][ T662] ? __cfi_mutex_lock+0x10/0x10 [ 38.288205][ T662] ? __fget_files+0x2c5/0x340 [ 38.288226][ T662] ksys_read+0x145/0x260 [ 38.288243][ T662] ? __cfi_ksys_read+0x10/0x10 [ 38.288259][ T662] ? fdget+0x188/0x1e0 [ 38.288277][ T662] ? __kasan_check_read+0x15/0x20 [ 38.288293][ T662] __x64_sys_read+0x7f/0x90 [ 38.288312][ T662] x64_sys_call+0x2638/0x2ee0 [ 38.288329][ T662] do_syscall_64+0x57/0xf0 [ 38.288353][ T662] ? clear_bhb_loop+0x50/0xa0 [ 38.288372][ T662] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.288398][ T662] RIP: 0033:0x7f4596d5d68e [ 38.288425][ T662] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 38.288438][ T662] RSP: 002b:00007f4597bd7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 38.288473][ T662] RAX: ffffffffffffffda RBX: 00007f4597bd86c0 RCX: 00007f4596d5d68e [ 38.288487][ T662] RDX: 000000000000000f RSI: 00007f4597bd80a0 RDI: 0000000000000003 [ 38.288498][ T662] RBP: 00007f4597bd8090 R08: 0000000000000000 R09: 0000000000000000 [ 38.288509][ T662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.288520][ T662] R13: 00007f4597016038 R14: 00007f4597015fa0 R15: 00007ffec9e85e38 [ 38.288536][ T662] [ 38.731488][ T310] hid (null): report_id 0 is invalid [ 38.737725][ T310] hid-steam 0003:28DE:1102.0009: report_id 0 is invalid [ 38.745010][ T310] hid-steam 0003:28DE:1102.0009: item 0 0 1 8 parsing failed [ 38.753106][ T310] hid-steam 0003:28DE:1102.0009: steam_probe:parse of hid interface failed [ 38.762011][ T310] hid-steam 0003:28DE:1102.0009: probe with driver hid-steam failed with error -22 [ 38.839698][ T65] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 38.879624][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 38.958933][ T310] usb 4-1: USB disconnect, device number 8 [ 38.999912][ T65] usb 2-1: Using ep0 maxpacket: 8 [ 39.006301][ T65] usb 2-1: config 0 interface 0 altsetting 249 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.017809][ T65] usb 2-1: config 0 interface 0 altsetting 249 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 39.031118][ T65] usb 2-1: config 0 interface 0 has no altsetting 0 [ 39.037824][ T65] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 39.047241][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.057406][ T65] usb 2-1: config 0 descriptor?? [ 39.060790][ T10] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 39.073990][ T10] usb 1-1: config 1 has no interface number 0 [ 39.080274][ T10] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xFA, changing to 0x8A [ 39.091814][ T10] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 32 [ 39.101760][ T10] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0xC has invalid maxpacket 8 [ 39.113000][ T10] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 39.122455][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.130504][ T10] usb 1-1: Product: syz [ 39.134842][ T10] usb 1-1: Manufacturer: syz [ 39.139452][ T10] usb 1-1: SerialNumber: syz [ 39.148679][ T679] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 39.156155][ T679] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 39.274221][ T673] incfs: Options parsing error. -22 [ 39.279653][ T673] incfs: mount failed -22 [ 39.289580][ T36] audit: type=1400 audit(1781916007.900:219): avc: denied { mount } for pid=672 comm="syz.1.95" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 39.290322][ T673] overlayfs: failed to resolve '/000000000600430771': -2 [ 39.311969][ T36] audit: type=1400 audit(1781916007.910:220): avc: denied { mounton } for pid=672 comm="syz.1.95" path="/18/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.367096][ T684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.375705][ T684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.386067][ T65] usbhid 2-1:0.0: can't add hid device: -71 [ 39.389447][ T310] usb 1-1: USB disconnect, device number 12 [ 39.393592][ T65] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 39.407365][ T65] usb 2-1: USB disconnect, device number 11 [ 39.479682][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 39.501775][ T36] audit: type=1400 audit(1781916008.120:221): avc: denied { read } for pid=688 comm="syz.3.100" path="socket:[5915]" dev="sockfs" ino=5915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.609688][ T10] usb 3-1: device descriptor read/64, error -71 [ 39.849650][ T10] usb 3-1: device descriptor read/64, error -71 [ 39.900164][ T36] audit: type=1400 audit(1781916008.520:222): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 39.942633][ T36] audit: type=1400 audit(1781916008.560:223): avc: denied { mount } for pid=693 comm="syz.1.103" name="/" dev="ramfs" ino=5932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 39.978761][ T699] overlayfs: missing 'lowerdir' [ 40.046285][ T36] audit: type=1400 audit(1781916008.660:224): avc: denied { read } for pid=700 comm="syz.1.105" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 40.069387][ T36] audit: type=1400 audit(1781916008.660:225): avc: denied { open } for pid=700 comm="syz.1.105" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 40.100015][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 40.189677][ T310] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 40.229644][ T10] usb 3-1: device descriptor read/64, error -71 [ 40.359644][ T310] usb 1-1: Using ep0 maxpacket: 8 [ 40.371850][ T310] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 74, changing to 7 [ 40.387676][ T310] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 40.397141][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.414789][ T310] usb 1-1: Product: syz [ 40.419297][ T310] usb 1-1: Manufacturer: syz [ 40.425083][ T310] usb 1-1: SerialNumber: syz [ 40.469695][ T10] usb 3-1: device descriptor read/64, error -71 [ 40.579809][ T10] usb usb3-port1: attempt power cycle [ 40.633776][ T310] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 40.647712][ T310] usb 1-1: USB disconnect, device number 13 [ 40.661208][ T453] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 40.820817][ T453] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 40.829065][ T453] usb 4-1: config 0 has no interface number 0 [ 40.835834][ T453] usb 4-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 40.848719][ T453] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 40.858099][ T453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.866531][ T453] usb 4-1: Product: syz [ 40.871029][ T453] usb 4-1: Manufacturer: syz [ 40.875674][ T453] usb 4-1: SerialNumber: syz [ 40.882781][ T453] usb 4-1: config 0 descriptor?? [ 40.888763][ T712] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 40.900257][ T453] plusb 4-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 3e:5a:55:0e:5d:ed [ 40.919648][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 40.971112][ T10] usb 3-1: device descriptor read/8, error -71 [ 41.110661][ T10] usb 3-1: device descriptor read/8, error -71 [ 41.349655][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 41.370622][ T10] usb 3-1: device descriptor read/8, error -71 [ 41.510634][ T10] usb 3-1: device descriptor read/8, error -71 [ 41.619811][ T10] usb usb3-port1: unable to enumerate USB device [ 42.609652][ T423] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 42.760672][ T423] usb 3-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 42.771872][ T423] usb 3-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.781803][ T423] usb 3-1: config 2 interface 0 has no altsetting 0 [ 42.788460][ T423] usb 3-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 42.797605][ T423] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.209256][ T423] elo 0003:04E7:0009.000A: hidraw0: USB HID vff.ff Device [HID 04e7:0009] on usb-dummy_hcd.2-1/input0 [ 43.409615][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 43.409631][ T36] audit: type=1400 audit(1781916012.020:244): avc: denied { mount } for pid=744 comm="syz.2.113" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 43.437842][ T36] audit: type=1400 audit(1781916012.030:245): avc: denied { search } for pid=744 comm="syz.2.113" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 43.440177][ T453] usb 3-1: USB disconnect, device number 10 [ 43.460318][ T36] audit: type=1400 audit(1781916012.030:246): avc: denied { read } for pid=744 comm="syz.2.113" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 43.486567][ T36] audit: type=1400 audit(1781916012.030:247): avc: denied { open } for pid=744 comm="syz.2.113" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 44.189666][ T453] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 44.496280][ T453] usb 3-1: unable to get BOS descriptor or descriptor too short [ 44.504983][ T453] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 44.512603][ T453] usb 3-1: can't read configurations, error -71 [ 45.139636][ T453] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 45.290863][ T453] usb 3-1: unable to get BOS descriptor or descriptor too short [ 45.299176][ T453] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 45.311525][ T453] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 45.320680][ T453] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.328662][ T453] usb 3-1: Product: syz [ 45.332909][ T453] usb 3-1: Manufacturer: syz [ 45.337523][ T453] usb 3-1: SerialNumber: syz [ 45.545174][ T453] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 45.744930][ T453] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 46.128426][ T738] netlink: 'syz.0.112': attribute type 4 has an invalid length. [ 46.138478][ T739] netlink: 'syz.0.112': attribute type 4 has an invalid length. [ 46.138753][ T423] usb 4-1: USB disconnect, device number 9 [ 46.169932][ T755] syz.3.116 uses obsolete (PF_INET,SOCK_PACKET) [ 46.170326][ T423] plusb 4-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 46.196796][ T36] audit: type=1400 audit(1781916014.810:248): avc: denied { setattr } for pid=753 comm="syz.3.116" name="PACKET" dev="sockfs" ino=6825 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.227013][ T36] audit: type=1400 audit(1781916014.820:249): avc: denied { watch } for pid=757 comm="syz.1.117" path="/26" dev="tmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 46.292240][ T36] audit: type=1400 audit(1781916014.890:250): avc: denied { bind } for pid=763 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.326859][ T36] audit: type=1400 audit(1781916014.890:251): avc: denied { name_bind } for pid=763 comm="syz.0.119" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 46.347632][ T36] audit: type=1400 audit(1781916014.890:252): avc: denied { node_bind } for pid=763 comm="syz.0.119" saddr=::ffff:100.1.1.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 46.378254][ T776] process 'syz.0.120' launched '/dev/fd/5/./file1' with NULL argv: empty string added [ 46.379555][ T36] audit: type=1400 audit(1781916014.990:253): avc: denied { execute } for pid=773 comm="syz.0.120" name="file1" dev="ramfs" ino=7178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 46.408538][ T779] tipc: Enabling of bearer rejected, failed to enable media [ 46.424983][ T779] SELinux: Context system_u:object_r:vhost_device_t:s0 is not valid (left unmapped). [ 46.577042][ T453] usb 3-1: USB disconnect, device number 12 [ 46.596528][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.729714][ T423] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 46.879648][ T423] usb 2-1: Using ep0 maxpacket: 8 [ 46.886005][ T423] usb 2-1: unable to get BOS descriptor or descriptor too short [ 46.894413][ T423] usb 2-1: config 1 has an invalid interface number: 206 but max is 0 [ 46.902643][ T65] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 46.910257][ T423] usb 2-1: config 1 has no interface number 0 [ 46.916357][ T423] usb 2-1: config 1 interface 206 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 46.927395][ T423] usb 2-1: config 1 interface 206 altsetting 15 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 46.939176][ T423] usb 2-1: config 1 interface 206 altsetting 15 endpoint 0x81 has invalid maxpacket 48940, setting to 1024 [ 46.950741][ T423] usb 2-1: config 1 interface 206 altsetting 15 bulk endpoint 0x81 has invalid maxpacket 1024 [ 46.961031][ T423] usb 2-1: config 1 interface 206 altsetting 15 bulk endpoint 0xC has invalid maxpacket 8 [ 46.970941][ T423] usb 2-1: config 1 interface 206 altsetting 15 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 46.984087][ T423] usb 2-1: config 1 interface 206 has no altsetting 0 [ 46.992224][ T423] usb 2-1: New USB device found, idVendor=067b, idProduct=23f3, bcdDevice=ac.64 [ 47.001918][ T423] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.009971][ T423] usb 2-1: Product: syz [ 47.014132][ T423] usb 2-1: Manufacturer: syz [ 47.018708][ T423] usb 2-1: SerialNumber: syz [ 47.024511][ T779] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 47.031708][ T779] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 47.120051][ T65] usb 4-1: unable to get BOS descriptor or descriptor too short [ 47.125744][ T821] netlink: 'syz.0.130': attribute type 16 has an invalid length. [ 47.132368][ T65] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 47.135675][ T821] netlink: 'syz.0.130': attribute type 2 has an invalid length. [ 47.143204][ T65] usb 4-1: can't read configurations, error -71 [ 47.151134][ T821] netlink: 64086 bytes leftover after parsing attributes in process `syz.0.130'. [ 47.329648][ T453] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 47.352742][ T779] kvm: kvm [778]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 47.382085][ T423] pl2303 2-1:1.206: required interrupt-in endpoint missing [ 47.390795][ T423] usb 2-1: USB disconnect, device number 12 [ 47.409668][ T567] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 47.490745][ T453] usb 3-1: config 1 has an invalid descriptor of length 254, skipping remainder of the config [ 47.501084][ T453] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 47.509974][ T453] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 47.524320][ T453] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 47.533423][ T453] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.541472][ T453] usb 3-1: Product: syz [ 47.545619][ T453] usb 3-1: Manufacturer: syz [ 47.550230][ T453] usb 3-1: SerialNumber: syz [ 47.559710][ T567] usb 1-1: Using ep0 maxpacket: 16 [ 47.566152][ T567] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 47.579021][ T567] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 47.588090][ T567] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.596960][ T567] usb 1-1: config 0 descriptor?? [ 47.759550][ T453] cdc_ncm 3-1:1.0: skipping garbage [ 47.764830][ T453] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 47.771954][ T453] cdc_ncm 3-1:1.0: bind() failure [ 47.778714][ T453] usb 3-1: USB disconnect, device number 13 [ 47.979684][ T65] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 48.003967][ T567] kone 0003:1E7D:2CED.000B: unknown main item tag 0x0 [ 48.011092][ T567] kone 0003:1E7D:2CED.000B: unknown main item tag 0x1 [ 48.017960][ T567] kone 0003:1E7D:2CED.000B: unknown main item tag 0x0 [ 48.025336][ T567] kone 0003:1E7D:2CED.000B: unknown main item tag 0x0 [ 48.032973][ T567] kone 0003:1E7D:2CED.000B: unknown main item tag 0x3 [ 48.040496][ T567] kone 0003:1E7D:2CED.000B: unknown main item tag 0x6 [ 48.047939][ T567] kone 0003:1E7D:2CED.000B: hidraw0: USB HID v0.09 Device [HID 1e7d:2ced] on usb-dummy_hcd.0-1/input0 [ 48.084862][ T837] netlink: 16 bytes leftover after parsing attributes in process `syz.1.132'. [ 48.159616][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 48.167064][ T65] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 48.176151][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.184197][ T65] usb 4-1: Product: syz [ 48.188351][ T65] usb 4-1: Manufacturer: syz [ 48.192964][ T65] usb 4-1: SerialNumber: syz [ 48.203747][ T821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.212365][ T821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.220689][ T567] kone 0003:1E7D:2CED.000B: couldn't init struct kone_device [ 48.228169][ T567] kone 0003:1E7D:2CED.000B: couldn't install mouse [ 48.235347][ T567] kone 0003:1E7D:2CED.000B: probe with driver kone failed with error -5 [ 48.245056][ T567] usb 1-1: USB disconnect, device number 14 [ 48.589646][ T430] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 48.736382][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 48.736399][ T36] audit: type=1400 audit(1781916017.350:264): avc: denied { remount } for pid=846 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 48.739635][ T430] usb 3-1: Using ep0 maxpacket: 8 [ 48.771998][ T430] usb 3-1: unable to get BOS descriptor or descriptor too short [ 48.789334][ T430] usb 3-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 48.790270][ T36] audit: type=1400 audit(1781916017.400:265): avc: denied { execute } for pid=850 comm="syz.0.139" name="file0" dev="tmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 48.798491][ T430] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.821258][ T851] Invalid argument reading file caps for ./file0 [ 48.828653][ T430] usb 3-1: Product: syz [ 48.835044][ T36] audit: type=1400 audit(1781916017.440:266): avc: denied { execute_no_trans } for pid=850 comm="syz.0.139" path="/44/file0" dev="tmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 48.838955][ T430] usb 3-1: Manufacturer: syz [ 48.866800][ T430] usb 3-1: SerialNumber: syz [ 48.871356][ T851] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.009654][ T453] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 49.160744][ T453] usb 2-1: Using ep0 maxpacket: 8 [ 49.172343][ T453] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 49.186284][ T453] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 49.203089][ T453] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 49.222063][ T453] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 49.234143][ T65] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 49.248441][ T453] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 49.249718][ T65] usb 4-1: USB disconnect, device number 11 [ 49.278220][ T453] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 49.290274][ T453] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.298418][ T453] usb 2-1: Product: syz [ 49.302830][ T453] usb 2-1: Manufacturer: syz [ 49.307480][ T453] usb 2-1: SerialNumber: syz [ 49.316908][ T453] usb 2-1: config 0 descriptor?? [ 49.324350][ T453] hub 2-1:0.0: bad descriptor, ignoring hub [ 49.330447][ T453] hub 2-1:0.0: probe with driver hub failed with error -5 [ 49.342979][ T453] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 49.541129][ T65] usb 2-1: USB disconnect, device number 13 [ 49.799413][ T430] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 49.815580][ T430] usb 3-1: 1:1 : sample bitwidth 252 in over sample bytes 4 [ 49.832183][ T430] usb 3-1: failed to enable PITCH for EP 0x1 [ 49.844192][ T430] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 49.867507][ T430] usb 3-1: USB disconnect, device number 14 [ 49.981184][ T869] netlink: 57 bytes leftover after parsing attributes in process `syz.0.144'. [ 50.008356][ T36] audit: type=1400 audit(1781916018.620:268): avc: denied { load_policy } for pid=870 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 50.008877][ T872] SELinux: failed to load policy [ 50.028839][ T36] audit: type=1400 audit(1781916018.620:267): avc: denied { getopt } for pid=870 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.034495][ T872] SELinux: failed to load policy [ 50.060651][ T872] ------------[ cut here ]------------ [ 50.066176][ T872] WARNING: CPU: 0 PID: 872 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 50.075640][ T872] Modules linked in: [ 50.079544][ T872] CPU: 0 UID: 0 PID: 872 Comm: syz.0.145 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 50.091119][ T872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 50.101225][ T872] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 50.107244][ T872] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 62 1b 0c 06 00 0f 85 c2 00 00 00 c6 05 55 1b 0c 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 50.109901][ T874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.146'. [ 50.126957][ T872] RSP: 0018:ffffc9000fb4f560 EFLAGS: 00010246 [ 50.141911][ T872] RAX: 0000000000000000 RBX: 0000000000000013 RCX: 0000000000000000 [ 50.149626][ T65] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 50.149954][ T872] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000fb4f618 [ 50.165501][ T872] RBP: ffffc9000fb4f6a0 R08: ffffc9000fb4f617 R09: 0000000000000000 [ 50.173506][ T872] R10: ffffc9000fb4f600 R11: fffff52001f69ec3 R12: ffffc9000fb4f5a0 [ 50.181574][ T872] R13: dffffc0000000000 R14: 1ffff92001f69eb0 R15: 0000000000000000 [ 50.189560][ T872] FS: 00007febb023d6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 50.198579][ T872] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.205187][ T872] CR2: 00007febaf3ea540 CR3: 000000012e7a6000 CR4: 00000000003526b0 [ 50.213210][ T872] Call Trace: [ 50.216487][ T872] [ 50.219405][ T872] ? vfs_write+0x3c8/0xf90 [ 50.223862][ T872] ? ksys_write+0x145/0x260 [ 50.228403][ T872] ? x64_sys_call+0x271c/0x2ee0 [ 50.233294][ T872] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 50.239033][ T872] ? hashtab_init+0xdb/0x1f0 [ 50.243672][ T872] ___kmalloc_large_node+0x81/0x210 [ 50.248920][ T872] ? hashtab_init+0xdb/0x1f0 [ 50.253545][ T872] __kmalloc_large_node_noprof+0x1e/0xd0 [ 50.259185][ T872] ? hashtab_init+0xdb/0x1f0 [ 50.263819][ T872] __kmalloc_noprof+0x326/0x500 [ 50.268673][ T872] ? kasan_save_alloc_info+0x40/0x50 [ 50.273991][ T872] hashtab_init+0xdb/0x1f0 [ 50.278439][ T872] ? common_read+0x175/0x490 [ 50.283083][ T872] symtab_init+0x44/0x70 [ 50.287374][ T872] common_read+0x1e6/0x490 [ 50.291816][ T872] ? hashtab_init+0xdb/0x1f0 [ 50.296414][ T872] ? __cfi_common_read+0x10/0x10 [ 50.301384][ T872] ? hashtab_init+0x105/0x1f0 [ 50.306066][ T872] policydb_read+0xabb/0x28b0 [ 50.309631][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 50.310785][ T872] ? __kasan_kmalloc+0x96/0xb0 [ 50.317370][ T65] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.321006][ T872] ? __cfi_policydb_read+0x10/0x10 [ 50.321035][ T872] ? security_load_policy+0x130/0x12d0 [ 50.331456][ T65] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 50.336208][ T872] security_load_policy+0x16a/0x12d0 [ 50.336243][ T872] ? avc_has_perm_noaudit+0x28a/0x360 [ 50.342054][ T65] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 50.350676][ T872] ? _raw_spin_unlock+0x45/0x60 [ 50.350715][ T872] ? __check_object_size+0x527/0x830 [ 50.356385][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.361449][ T872] ? __cfi_security_load_policy+0x10/0x10 [ 50.373055][ T65] usb 4-1: config 0 descriptor?? [ 50.375563][ T872] ? __kasan_check_write+0x18/0x20 [ 50.404724][ T872] sel_write_load+0x2a7/0x5f0 [ 50.409402][ T872] ? __cfi_futex_wake+0x10/0x10 [ 50.414274][ T872] ? __cfi_sel_write_load+0x10/0x10 [ 50.419477][ T872] ? bpf_lsm_file_permission+0xd/0x20 [ 50.424881][ T872] ? __cfi_sel_write_load+0x10/0x10 [ 50.430112][ T872] vfs_write+0x3c8/0xf90 [ 50.434458][ T872] ? __cfi_vfs_write+0x10/0x10 [ 50.439227][ T872] ? __kasan_check_write+0x18/0x20 [ 50.444371][ T872] ? mutex_lock+0x97/0x1d0 [ 50.448793][ T872] ? __cfi_mutex_lock+0x10/0x10 [ 50.453673][ T872] ? __fget_files+0x2c5/0x340 [ 50.458357][ T872] ksys_write+0x145/0x260 [ 50.462706][ T872] ? xfd_validate_state+0x68/0x140 [ 50.467839][ T872] ? __cfi_ksys_write+0x10/0x10 [ 50.472735][ T872] ? __kasan_check_write+0x18/0x20 [ 50.477957][ T872] ? fpregs_restore_userregs+0x11c/0x260 [ 50.483647][ T872] __x64_sys_write+0x7f/0x90 [ 50.488246][ T872] x64_sys_call+0x271c/0x2ee0 [ 50.492952][ T872] do_syscall_64+0x57/0xf0 [ 50.497378][ T872] ? clear_bhb_loop+0x50/0xa0 [ 50.502257][ T872] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.508193][ T872] RIP: 0033:0x7febaf39ce59 [ 50.512641][ T872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.532359][ T872] RSP: 002b:00007febb023d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 50.540801][ T872] RAX: ffffffffffffffda RBX: 00007febaf616090 RCX: 00007febaf39ce59 [ 50.548787][ T872] RDX: 0000000000011000 RSI: 0000200000000000 RDI: 0000000000000003 [ 50.556822][ T872] RBP: 00007febaf432e6f R08: 0000000000000000 R09: 0000000000000000 [ 50.564819][ T872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.572870][ T872] R13: 00007febaf616128 R14: 00007febaf616090 R15: 00007ffd3797bdf8 [ 50.580882][ T872] [ 50.583982][ T872] ---[ end trace 0000000000000000 ]--- [ 50.591607][ T872] SELinux: failed to load policy [ 50.597347][ T872] SELinux: failed to load policy [ 50.603080][ T872] SELinux: failed to load policy [ 50.608756][ T872] SELinux: failed to load policy [ 50.614481][ T872] SELinux: failed to load policy [ 50.620555][ T872] SELinux: failed to load policy [ 50.626271][ T872] SELinux: failed to load policy [ 50.632013][ T872] SELinux: failed to load policy [ 50.853455][ T453] usb 4-1: USB disconnect, device number 12