last executing test programs: 2m22.221382158s ago: executing program 0 (id=393): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') r1 = mmap$IORING_OFF_SQ_RING(0x0, 0x1, 0x2, 0x10, r0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r2) (async) sendmsg$nl_netfilter(r2, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x1c, 0xe, 0x0, 0xe00, 0x7, 0x25dfdbfe, {0x0, 0x0, 0x4}, [@typed={0x8, 0x2b, 0x0, 0x0, @ipv4=@remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) r3 = syz_ublk_setup_io_uring(0x21, &(0x7f0000001880)={0x0, 0x0, 0x40, 0x0, 0x4158}, &(0x7f0000001900)=0x0, &(0x7f0000001940)=0x0, &(0x7f0000001980)=0x0) io_setup(0x2, &(0x7f0000002180)=0x0) io_destroy(r7) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002040), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000002140)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x24, r8, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x377}]}, 0x24}, 0x1, 0x0, 0x0, 0x48900}, 0x8000) (async) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000019c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001a40)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000001a80)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000001ac0)={0x0, 0x20000, 0x0, 0x1, 0x154, 0x0, r12}, &(0x7f0000001b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x1000004, 0x319}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6c71, 0x8000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0xffffffde}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e77, 0x8000, 0x1, 0x310}}], 0x1, &(0x7f0000001dc0)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x42, 0x0, 0x0}}, 0x0) (async) syz_ublk_setup_queues(r0, r10, &(0x7f0000000200)={0x0, 0x9b01, 0x20, 0x1, 0x19c, 0x0, r0}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc8dc, 0x0, 0x0, 0xb8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc5be, 0x40, 0x3, 0x32e, 0x0, r0}, 0xffffffffffffffff, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x50cc, 0x2000, 0x0, 0x335, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xba1e, 0x4000, 0x2, 0x11a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x12, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, '\x00', {0x1, 0x54c, 0x0, &(0x7f0000000540)=@buf_512="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"}}, &(0x7f00000015c0)) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, &(0x7f0000001640)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xe1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001600)=@new_dev={0x4, 0xbb6, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x188}}}, &(0x7f00000016c0)) (async) recvfrom$binder_report(0xffffffffffffffff, &(0x7f0000001700)={""/44, 0x0}, 0x80, 0x40000041, 0x0, 0x0) syz_ublk_add_dev(r0, 0x0, r1, r13, &(0x7f00000017c0)={0x2e, 0x21, 0x0, r14, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001780)=@new_dev={0x4, 0xd3a, 0x0, 0x0, 0x1000, 0xffffffff, r15, 0x0, 0x40}}}, &(0x7f0000001840)) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000080)=0xb) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r16, 0x6, 0x23, &(0x7f0000001f40)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001f80)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r16, 0x6, 0x15, &(0x7f0000001fc0)=0x4, 0x4) (async) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/150, 0x96}], 0x1, 0x1, 0x1) (async) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3f19, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x74, 0xa0, 0x9, {0x8, 0xb, 0x1, 0x2, 0x1, 0x6, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xdef2, 0xa, 0x9, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0xd7, 0x7, {0x8, 0x25, 0x1, 0x2, 0x6, 0x6, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xd7, 0xe, 0x4, {0x8, 0x25, 0x1, 0x81, 0x30, 0x6, 0x5}}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 2m20.098619085s ago: executing program 0 (id=413): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1}, 0x6e) connect$unix(r1, &(0x7f0000000300)=@file={0x1}, 0x6e) (fail_nth: 1) landlock_restrict_self(0xffffffffffffffff, 0xc) 2m19.897787856s ago: executing program 0 (id=416): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @multicast2}, 0x3, 0x2, 0x4}}, 0x26) bind$unix(r0, &(0x7f0000000200)=@file={0x1}, 0x6e) listen(r0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1}, 0x6e) connect$unix(r2, &(0x7f0000000300)=@file={0x1}, 0x6e) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x4, 0x2, 0x30, 0xa, 0x2}, 0x30, 0x1) landlock_restrict_self(r3, 0x17) 2m19.054053822s ago: executing program 0 (id=426): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f000015c000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x300) 2m18.704932088s ago: executing program 0 (id=433): mkdirat(0xffffffffffffff9c, &(0x7f0000002780)='./mysys\x00', 0x8ec5d82ac9a81a9c) mount(0x0, &(0x7f00000027c0)='./mysys\x00', &(0x7f0000002800)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002840)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000002880)={@host}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/prev\x00') read$FUSE(r1, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002780)='./mysys\x00', 0x8ec5d82ac9a81a9c) (async) mount(0x0, &(0x7f00000027c0)='./mysys\x00', &(0x7f0000002800)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000002840)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000002880)={@host}) (async) syz_open_procfs(0x0, &(0x7f0000000000)='attr/prev\x00') (async) read$FUSE(r1, 0x0, 0x0) (async) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 2m18.690923509s ago: executing program 0 (id=434): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000817000/0x3000)=nil, 0xfffffffffffffd51, &(0x7f00000000c0)='{\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xe9ac0000) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) timer_create(0x1, 0x0, &(0x7f0000000040)) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') writev(r1, &(0x7f00000010c0)=[{&(0x7f0000001100)='4', 0x1}], 0x1) 2m3.360780795s ago: executing program 32 (id=434): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000817000/0x3000)=nil, 0xfffffffffffffd51, &(0x7f00000000c0)='{\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xe9ac0000) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) timer_create(0x1, 0x0, &(0x7f0000000040)) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') writev(r1, &(0x7f00000010c0)=[{&(0x7f0000001100)='4', 0x1}], 0x1) 1m33.518381484s ago: executing program 3 (id=921): capset(&(0x7f0000006b40)={0x20080522}, &(0x7f0000006b80)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0) r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000680)=0x4125, 0x4) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000031c0)={0x1, 0x0, 0x1000, 0x64, &(0x7f0000003080)="12d11f704a7afd7e64d9ca97fca59f33edfedc55dd46a3a8bd86ae431088d64573371ded934035bc9d13acc921feaed771bef2bb9b541fceeff6005e53a11c2c74ab90d749d2df0b71c2fe746b9ad9aead8edee46e56d3e4568fb564fcfdd15b47eca6f5", 0xa9, 0x0, &(0x7f0000003100)="76d81246cb7236029ed221e2e56bf118524876b5dd469103695cd0fb02cd043ba6b92189da474c368770ff821f94e788b32fd9ea72c5ac2e7023103d8508b7bbeb9715c878885ebc14f4e592e53b93d1af397b7a5f8ed00d6115a7113b588f61cab817c316ff1084fa245f01c2aee7ad244b6cf44d4b00c20c835aed1122a3af10f3900707bcbf856d97daf4915a1d506c372975e43ae5e62645c114008373aa2fa4398a54a1679eee"}) sendmmsg(r0, &(0x7f00000006c0)=[{{&(0x7f0000001e40)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001f00)="d479183d7d98d181a4b5f3e38100e2f288a8d2", 0x13}, {&(0x7f0000001f40)="659900c3f7c8e544e1abc41796cae4c9908368acb3abdb908ada84b1c98b91c34352f80ed64e4606a25bcbab94869ac816a7fb9c29a8c768fbffb21ad7f6013ff676da589c2e0865cfd321543070c3dd36bf94deb1d137c220d9c559dd61fb2c8732b6ce023b635b5901ebe508133aeadc8f8f93a2198784aab8ae715ee249968c0429cc80bc8c85c985f4f5f04e3acb0ef2a012f59c82dca7d69dcecf011b0a44b1889cfdfa123ccc8c0cb6469c806560c7681f0c3cae69aeabd2fc80d666e8dd7962495507461967b881a6a840a22962f95d55a722cb40221b16e6a6482bab54591aec3770e27a80974d3e41795c35f7300c2ba523e8486dbf6d7988e56396d13f0c079d856946c3ef2a3aaa0dd0bce7389b152c112bed2c5e1ae45ae2be5624016a96be54a1e876acd47e6f3ea1e11f919a12c0db1885930d03ce0d622b1e8ed1bbef406bab5f09a6066b2c1fbc9ba713bf76930cf84520fbd9e3f550b8ea4473b30de57de284951111b723ec7c55d5b9b57022411357766680c60cb193ab17c680e44ebc39a149aba5d5c5d26b021e8275523e832018584a067c1a49a3ea9937d90ce4f04bdcacbe1e3c2dbed7aeed1d85714c7d29c7cbe8fccc9cc9d3bfa4dc80954c69ec3e5abc686ce1735726ef792fe7ffe003fedd7b9a478162e5a33a40014f2dd3a97231df13aa79463896dc0754336e79bd98afad2a36e6efbb4803d543d347cd5b80e4c0fd5333724465f6eddbddb6a176c522347195d64238aa7c6b373d172161f97d267f90fab6a941ddc7670061da257fd46a29919668c492f991e1a16be25638e41c7453d1a40b92a75b07f330a6e07b4b0850989f343998022c5cdb7d7473de1f67ce2ec2ddf0ff6e945dab94bed1abdb959995098a4ad8ca467208febec562fe7c06a8cec88cbe6847b6b24212144da679aa521263aa8c152535a0fbc67dccc7116278f8da118147e9efeb799f37ecde26d9aa2e158bde1bb36bb67218fc9d29eb5ee1a4eb87adb0d9a2c8b6cd04e0d6b3b04f347022afd3ee96f6092dc74e2a09e42a1846afa48c65cd83d2718b95bb2df495da53f6ecafaf5149cfade2ac94517c4765a4522e81b58924bc6471d266541b0f6cf44f0ff636092cb6bd7d2a995b21df583630e4fdbbde7da4da19d6786b9ba3d9c1df5fe2618414940d25d82561fd9bf7b39f704303000000000000009dbcc305bd87c4542ac3f852962fc5dee1da8fa4a6d1bf0149f04c06b81f81aedb4f07c9bf0a022a5cc0bcc57819b46931b99b00a0489e79b2bc1edc7d2d0404e09c9742e08867d7eedbc3b511207678c5087c0e01a41538742fdca667f39d8962b876386f6d1d798d09eac55c9587a4c86b4d5e3cfb08c0a0487cc7293ce91a7ec11896140ec8c0074f09497dd9b67382ca77d019bedfe97437429bdff299ba2d27669f6a8533c4a4be188a4e8cd439a6c72b6fe737e7388c5b10680bdba183433e99ccd6f0cf584980712088013aa625f9f78f0141b9fc3491c594229ef182c04a9b0e403511e8fb985918eb5c7bbc1ca5dca429efb209559363283f866c10bb3e05ef2a21182edc045341578e5ac63ba19206d804541fd40e84f5a6c9a20a44d8c76a815c7336c66c24bd9c8e61b95857ba3f06d72b6324d9e63c5672cf5dab0e8002000123c3f98626486e1396c897d92e79e34c6abd10d3f86a968c6b7ec95da7b04799a6419550ad511a45120457907a54296edbb1d7389da99608701c3e5e74d7a814c54e33a8473a8c8c3a6520268fe022d2771076ba921b5dca80301ed5ddda7aa5d3051e15330819abb9ab1da62041b1ebcd1cb38f37b7c13b6afa1351f541fac5539aa442ce2864a9048ce224e2855483a1a8fa12373f2568d7ee56752e67b2b115a7922a9af25c71c9fb67ea62e2bde4c176b57f6bcaa38117a9b0b2802f9b169e615a9e62100aeb1bbd8d03a3a94258a3ceb800c0b7b22af4afe24b0d8656e8fb8b2800c54173d063fd2c2330fe9b66592e144410ffd77207cd55fc317c1e66b98de7396ef3622f98305a460533a17145786910a7cfb3790734855adfeb01a8a0948108258e9a5b6a4d5958024d82079bf032e15666709cf4ed535f5a3a5f2b99377294fe16c24a72a1d6d95e151f478e770b5284c46890901b02b8696f688aa965ec3a70a33bd44346389ae3de7e8fdd4834fabc9afbb6341c6493de8faecf655a259e55944c48e0336660af313d0286f3e221092c0e4dc3834efabbf6931c44a8f8045bb418dbdc5ab9cd454726919a8aded5c679e5f62cf622ce8acd67f0a86634ce09b95677babe70dc216767824e2bbd6b066eebab6e5efc26d07a9a11b0ec4f2a2049b8edd01aa9dada0fc70fe52f1cee95e8df64532348c7317033ac4f54c76e5dfc5b532e237231a15b6bd0700f214a61ad7ace3f546e5f363055ba9f217cbc51ff5d0e4042d51761b8f055c775a305fdcb583c66ae2520c384aaf63d625c569ef2f4d2554d440e9e61118b8fbe1159d0558992a71db056dc5f16430b87fd329af2d7fe5928f430324dbbd247b938e4a4062fa7530da3e04a2b7824d17298e24bd7df0eba8caddfe808fe8a813c93c348eb9cbd651e92da3757450251ba9b2a5c96839fb3e3aadddbddc90a2dbb638b1fb87f990cfa2f96a8bfedf997b89f12dddf259fa1499c430f3cb8340c5cf66c85caf5c172cd0f651d1c2dba1cf26d8b936b17f0385183dfab24fd3bbaabfe866946b290dc278fd8418dc0ddb7785ab7e0f259a85fba0eabaaee55f52305d33339007e73fcded5f2613c710a32caad845b6c99958ccd5712097889f98858223d74042952bd238ee39eb7a1ebe0f0766946709cbb3a92d1551e5feb042452a76c557665fc9fab49768abcc7cb1977f7804d328421c30264b68a7ed05cbb7497a5014e6cdf32df82d41b33f55c67c9c15e723f629af4ac66a62ecc3214140354ef48bc73d3fb0eeb0719473498c2f3d192da0b360e5f3bf8f1ef579ed37a5d0c20eec42714bab59c134d4468736f19f5d32f5b8dc3df45941275264fca42ccb35cacd9965abb06dd7bd3bd0b1d8f32fb4b00d213d5f5d82ebf975b1fb4aeff137783f8b8da73864c3ed63f4142e4b3af5a3b82228eeb95f5d51f671f5b67964d2131c5e8869f8289997811dffe5b58d3dded907839316dbbf75ac8bebf35f036b4f2471808f389f3288ca48a3ae5d78343872df2fa6c67fd69f366c7861bfdde0b5126d5efdf825a03c6520b3a59ecc00469b0c9941f12ddead1f58d37da3ac1582ec701c47532629ae7e038707e3831e9a45f5cad2108f6e48c0c89bdd10bcebf29cb7cc84819cc292ad9c26f767159f2e13d8fc920401c8a682ad3c356d44ca1e7639ddd2c0f92d450069aaa5b778fa713c6c3813cafe6cf610916b02da8fd9ada5e02e0d08326df3dee4b203ddaaeff338be751e769e5c583d1488c5a22f644369d9079f387b36516dd5d706e4a29700d07986cbe1d64271ca0496ffd483fcf12ba1c2e891a2c9d940c61b61406a82a0157648acf3bc598d53046ec5a51c459a8e251ea0641d3d9148883dbb2a27cca1f0937505977689f4c89e045e6e45eec8939bece21fc3f3ff6b3437efe76b4bffdabcf34aaee2d04f21b482e3f2d20f904e723c572f5053e2642ffbf0287be1dc5c75c8e91cd446b1370d9c1c8a076a5eeceb11ad0b0ec959c2df769ae47751530c587b65b1a6feb8915dde7c11ddeaf6947392f746ab6a74630f5ec3a4d5499d46b8561e091c61c522063561ef31d91f680a5f660bf84020257657e79ef0670d93cf9f78c362954ac6f02602492c9f6bca75fe35fd371fe0db76a0a802bb5d04f6cacefb4ec79a3bdb5b0d7ce7b6b1734351b52225a31b16b8414b988f31c6e2aa07efc741e2ca1c3e4d7a382c863540497b12090acb69956e14ed51e569dc52bbbb747c335006a34333c32dac619ffc2d7e3abd7a5b53fde8eccc4f8963e996fabc8a96416d15fa7150faa154b97e685e6316fb73387a616d11aa486120a0d897c2055332eed5f07e50234b0383cb164ddd0501785f5d0109dabbf994be4fdd3e0c81e82cd19dffb63b312678d53c63c05b46739b61e363d944f36d48222476032db59415254879cd368d027fca68361d630fa93422badfc8b91e18e4fdcc2f0532dc7ff57a4100e8b15368a47af303c550542105860542d6fdf78d17e85ab334b7080237c5dd928e07ac0dfcdcd9c34ed4ad8ff47c0c9aa585f0c4f5d227eddf8b65802082a93bb82344162868df6cd2d804e7f9afd6a900f04157e30c796e0ece9998975723a6a9e6ea9f8159ad362bc35abcf779a174791a4aa7c043627075a44a1c93ccdd1df28fdc90d376551548bda51c390b4666c08cc23b1bd76993de97001aa7ccb5dd75dbd74f64b6bb2efdb672797060701e78bc1b5d72c025bba9c2d29c78024425af0e291a3f7386d3791aee91bc20d0f933ee2b2881c4c51720b3a5f5567ba105286c38f64f47b262f83f84e4f46907bca9c936b57e5196b4bbd64c1c8d7ae3e1ed64c598204f5cb90a26efd77ebec403e06f5c37eff5ddff5c30c615d8044e96a0b57a196af2deef36d7be5eada24a40a1eccb50e3466a208b94e2b69c66413ea0dae7eff6cef18fe83ee1717860b2cea2001ad3168f76733c6240c84a9eea9da926f29a74827843d40cf486dfb737ff1d4a9eed5ade6ea400eabea97481a58cdf8697225e71c6b5d22ad66fcfbee3955f3e186bc29a690f1d2874e70f032774a43ac4eec14117a31ef0a00ad6115223e2532dcca9310976ea7222a5c97703b3424bd9c7cf12bc5339d4705cf7dbf03d126b4da27e291a719ff3b1300ed21b425a2e8f7fd2002d137a47af192dd0dd1e26c2a49a16e0204a34fd92b7c3ca69861cdd143a494977e481b0e7c46bea8bedbc995e5a56702c9ab59c0f0cb90cae7a4f2185d50d1c699e4aa2a45177bb6827eb9422b23b8f78d20cec6bc373f62c07872eef3b1b4b7c77838b4e26e9573609f7bef3dcedc2fdf6c2c4aee6ebb9719b8ff578cf5e09933bc39083565e4fe1c18b90b40a72cf45bcfaec0f2c5cad49c606c9588bba24a1ad78be7ab315811c4b02c04b8d04866fa64147bb06f268ea9bc8a35440c4a1f73bd712107e86d5ac2864f592b7fb3aef2661a889475209c80c1adcf2bf165667253a452f1a2f7afb8cdd9ce3aa0b2193220773f11429d4e9f2bcef0c2128d34e632f351fea3b4538dbdf1c699b573b93fbba7a5256e5e3ae42e9fe120940d21f1e00b777031833e8d232283a86fa7ef511a7645d6fc6b0102aebe5b39ddddd4395a5a43dcb2d8a05d2587a4a1799d2239a51e097fadd28b09084148a6209edf2611181c1503c8bb2c5d0bde46d9cb200285ddfa7cb91cd49237ebd57241c3a7bf81da2ac1d95bfcd61faec3d58b52c08ef6c99a65b5a9ce6827705ba1f0d51ae7c84b93abcce96fdfbb2d21a3bc224552d326b65171956cfbd25faa0425bf61647d522b93367a5379c9bd3766ac03b15339e17ea5b0d7173455f6780073a637e8323563f58fe99f8d556a9ba4d8d84fa781ff8eea39bc4f7cb1364bf422bc1e7755cedd3c0c30d6a4930d54adebb81d26b9ba41c1eed62c9ed16a3fb2adc7eeeb2ec6a753878480790a617cacb3a5a590990236d308a2be73b1e1beff9a9b6c22ef627c1453bc6fd2296399821c6f85ed38966d43c9d48dc5000e7fa2c27b6e59dd20109c5cbba36d7532", 0xfdd}], 0x2}}], 0x1, 0x24044015) recvmmsg(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002fc0)=""/110, 0x6e}], 0x1}, 0x2}], 0x1, 0x2002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./bus\x00', 0x1c5) setresuid(0x0, 0xffffffffffffffff, 0xee01) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) clock_gettime(0x0, &(0x7f0000001dc0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001d80)=[{{&(0x7f0000000200)=@nfc, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000280)=""/135, 0x87}, {&(0x7f0000000340)=""/59, 0x3b}, {&(0x7f0000000380)=""/200, 0xc8}, {&(0x7f0000000480)=""/171, 0xab}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f00000005c0)=""/159, 0x9f}, {&(0x7f00000019c0)=""/160, 0xa0}, {&(0x7f0000001a80)=""/185, 0xb9}, {&(0x7f0000001b40)=""/151, 0x97}, {&(0x7f0000001c00)=""/55, 0x37}], 0xa, &(0x7f0000001d00)=""/107, 0x6b}, 0x6}], 0x1, 0x2020, &(0x7f0000001e00)={r2, r3+60000000}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000000)=""/203, 0xcb}, {&(0x7f0000000100)=""/225, 0xe1}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/168, 0xa8}], 0x4, &(0x7f0000001940)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x1) mount$overlay(0x0, &(0x7f0000003040)='./file0\x00', &(0x7f00000007c0), 0x0, &(0x7f0000000800)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@redirect_dir_on}, {@nfs_export_on}]}) 1m33.474479209s ago: executing program 3 (id=922): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x12, &(0x7f0000000000)="11106e00", 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x38c, 0x14, 0x1, 0x4, 0x25dfdbfe, {0x2}, [@typed={0x4}, @nested={0x36c, 0x8, 0x0, 0x1, [@nested={0x368, 0x147, 0x0, 0x1, [@nested={0x2f5, 0x98, 0x0, 0x1, [@nested={0x115, 0xe6, 0x0, 0x1, [@typed={0x8, 0x12f, 0x0, 0x0, @ipv4=@local}, @generic="0479b9edc86892ba185f879fdc1a0c91e9d7c95463e81d1c07249934ccbd764910c2b2159b3ed93f53c6b15a36d0efa3ec87fd8adc2f0c61b90c6e4d0bb09884c3cfdd017d78f2edaa23373d7e84bf7aaf8ce6d0cf4b4a8fe45f98", @generic="6a310dba13c3ecfc2d6b022b8b16cba2b6061a65d0f4125e482cfa862c59056895641b5564d2358155ecd6d5681cb6cc3ab8c2e1c657e88b9e4848232ea168626f93959dafd8be0a04a1967cec9b3aca83ebd08a41adcafd0bf0f2a860b074c6bd56af13e1885d648461d1b9d4e3b16ce74fa8b27d616e5d255a87d6e0621a6670571f880fb3077b49703a68ebc43f0a0f5fe3c3be2b", @nested={0x4, 0x151}, @nested={0x4, 0x139}, @nested={0x4, 0x3b}, @typed={0xc, 0x133, 0x0, 0x0, @u64=0x101}]}, @typed={0x8, 0xb9, 0x0, 0x0, @pid}, @nested={0x8, 0x11a, 0x0, 0x1, [@nested={0x4, 0x99}]}, @generic="f7213dec47845ea52602dbd22c786f453d7dc9512522aec072228dd5e8d35fd8977aeadaf427f9a51a9feff062a60b9065369521aaa46aaced527ac8faf04c80d45b09e5a2e0bceb6e4f979d2b40b695a5a842de955b505a6a12f93a3f6e03afce01749658d552377ebf311b0d4dfb4bdd8da0f8e1a955ce8560f735da6153cfd0ca31ce89c9dbdf16afdfb6688534e0258a79021516ed519b278114425aac0e317613df0684938dfca30e134b05a78cd17adb7806fb4709b1c181ffc625022a625577ee78458772f517d10c5f840ccfd42b2c01e66b937857614348770a9dd0de337abe606cc7", @generic="cde8289440b12dfc1a7db3bdf6b92c05e5f34d5266b51971fa261d233a92f627e8d2383099b0bf9881d7a1a4ac669aa0898fdc3fd8c14a7ad57bca27caed828d2e2f2d72827ff372d28126140d03ccb87d5d7fde2fbc3e6bac9f4ef51c4e30e75eecc54d759ef3b3041985e1dee4eaad3a5241983ba20895d836fbbf0fc8526c8929c1ca2917e31879d8412759002c8570e7718beb213d888bc3417aba0fb540c0c774d351fd7d016fad30fcffb51f0525c2def91914009e0aa29921cf301d38f9c384283310ee34818d78b164944e939ee48323085d0c7f3420", @nested={0x4, 0xe8}, @typed={0x4, 0x10a}]}, @typed={0x69, 0x7a, 0x0, 0x0, @binary="7e8359e8f8711759b2010b3c11cbb1e6f9d445a4570d3e7f1797da273b6597f416d07865a25f11bb41298da13b9a27bee05f2a2fde5c001e772108e76f8c4f55385a1681ce4e9852f26a2237c99c0947464274b04f5d1c104f27ca2af3bc3e2b90e5cdf3a9"}]}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="bf74a7df"]}]}, 0x38c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) r2 = timerfd_create(0x8, 0x0) timerfd_settime(r2, 0x3, &(0x7f00000002c0)={{}, {0x77359400}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close(0x3) r3 = socket$key(0xf, 0x3, 0x2) mkdir(&(0x7f0000000040)='./config\x00', 0x850e856b79c500b0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x0) mkdir(&(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x85) rmdir(&(0x7f0000000180)='./config/usb_gadget/g1/functions/acm.usb0\x00') r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448e4, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) rt_sigtimedwait(&(0x7f0000000200)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000001, 0x3032, 0xffffffffffffffff, 0x98bde000) close_range(r5, 0xffffffffffffffff, 0x0) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) mount$cgroup(0x0, &(0x7f0000000400)='./config\x00', &(0x7f0000000440), 0x8, &(0x7f0000000880)={[{@subsystem='cpuacct'}, {@cpuset_v2_mode}, {@subsystem='cpu'}, {}, {@subsystem='net'}, {@clone_children}, {@none}, {@name}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@uid_gt}, {@dont_measure}, {@smackfsroot={'smackfsroot', 0x3d, 'configfs\x00'}}, {@subj_user={'subj_user', 0x3d, '[])#&))'}}, {@permit_directio}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}) setsockopt$sock_int(r3, 0x1, 0x4b, &(0x7f00000001c0)=0xfd87, 0x4) 1m32.628848016s ago: executing program 3 (id=927): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fce000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000780)=@vmx={0x0, 0x0, 0x2080, {0x1ffc, 0xdddd1000, {}, 0x1, 0x1}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffffffffffff00", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f387400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000079cbee4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) 1m32.58090271s ago: executing program 3 (id=928): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f0000000600)='./tracefs\x00', &(0x7f0000000640)='tracefs\x00', 0x0, 0x0) (async, rerun: 64) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f00000006c0)='e:mygroup/myevent sched.sched_switch', 0x24) (async, rerun: 64) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000), 0x4) r2 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) ptrace$getregset(0x4204, r2, 0x2, &(0x7f00000000c0)={&(0x7f0000000280)=""/126, 0x7e}) (async) rt_sigsuspend(&(0x7f0000000080)={[0x5]}, 0x8) (async, rerun: 32) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000040)=0xfffffffe, 0x4) (async, rerun: 32) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x41, 0x3, 0x3}, 0x10) (async) open(&(0x7f0000000700)='./tracefs/dynamic_events\x00', 0x14927e, 0x0) 1m31.740325476s ago: executing program 3 (id=938): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="fc0000001900010027bd70000000000000000000000000000000000000000001fc02000000000000000000000000000300010000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000050000000000000000000000000000003c00000000000000ffffffffffffffff00000000002000000000000000000000abcd0000000000322f000000800000000500000000000000020000000000000801000000000000000100000000000000440005"], 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4000000) 1m31.70059533s ago: executing program 3 (id=939): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0xd0, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) sendto$inet(r0, &(0x7f00000001c0), 0xffffffffffffff94, 0x9b00, 0x0, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000200)=0x3, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) (async) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_ublk_setup_queues(r3, r1, 0x0, 0x0, 0x1, &(0x7f00000004c0)={0x2e, 0x8, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000005c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000600)=0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000640)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f00000006c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x0, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x10000, 0x1, 0x271}}], 0x1, 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40042, 0x1) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 1m31.674271233s ago: executing program 33 (id=939): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0xd0, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) sendto$inet(r0, &(0x7f00000001c0), 0xffffffffffffff94, 0x9b00, 0x0, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000200)=0x3, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) (async) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_ublk_setup_queues(r3, r1, 0x0, 0x0, 0x1, &(0x7f00000004c0)={0x2e, 0x8, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000005c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000600)=0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000640)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f00000006c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x0, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x10000, 0x1, 0x271}}], 0x1, 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40042, 0x1) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 1m14.465504481s ago: executing program 4 (id=1132): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'vlan0\x00', 0x500}) 1m14.424567576s ago: executing program 4 (id=1134): openat$kvm(0x0, &(0x7f00000002c0), 0x8080, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000440)={0x0, &(0x7f0000000940)=[@code={0xa, 0x6e, {"488d054900000048c7c30052020066890348c1e8106689430648c1e810894308b91b0000000f320d000c00000f30b90f08000031d2b8ff0100000f30b93008000031d2b8200000000f30fb90909090f4b90b08000031d231c00f3048cf"}}], 0x6e}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000009c0)={0x2, 0x0, @ioapic={0x80a0000, 0x5, 0x60, 0x7fffffff, 0x0, [{0xae, 0x9, 0x40, '\x00', 0x1}, {0x51, 0x7, 0x5, '\x00', 0x9}, {0x0, 0xfb, 0x80, '\x00', 0x5}, {0x40, 0x6, 0xe9, '\x00', 0xd}, {0x1, 0x9c, 0x7f, '\x00', 0x30}, {0x1, 0x4, 0x8, '\x00', 0x9}, {0xb, 0x0, 0xc, '\x00', 0x2}, {0x4, 0x2, 0x75}, {0x5, 0x20, 0x10, '\x00', 0xc}, {0x14, 0x10, 0x2, '\x00', 0xb0}, {0x4, 0x7, 0x7, '\x00', 0x3}, {0x5, 0x3, 0x65, '\x00', 0xfe}, {0xde, 0x9, 0x4, '\x00', 0x4}, {0x11, 0xaa, 0x8, '\x00', 0xcd}, {0x7f, 0x1, 0x8, '\x00', 0x8}, {0x40, 0x3, 0x8, '\x00', 0xfb}, {0x0, 0x5, 0x80, '\x00', 0x2}, {0xe8, 0xa, 0x80, '\x00', 0x5}, {0x8, 0x8, 0x4, '\x00', 0xfd}, {0x48, 0x9, 0xa, '\x00', 0x7}, {0x8, 0xfe, 0x80}, {0xc, 0x6, 0x7, '\x00', 0x40}, {0x10, 0xff, 0x7, '\x00', 0x6}, {0x9, 0xbc, 0x3, '\x00', 0x1}]}}) 1m14.37333325s ago: executing program 4 (id=1135): setpgid(0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x8}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000180)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='bridge0\x00', 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='task\x00') r3 = landlock_create_ruleset(&(0x7f00000002c0)={0xc0d8, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000300), 0x240, 0x0) fchdir(r2) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x8, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x1, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @global=@item_012={0x1, 0x1, 0x7, "01"}, @local=@item_012={0x1, 0x2, 0x0, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r4, 0x400c4808, 0x0) r5 = fsmount(0xffffffffffffffff, 0x1, 0x88) open_tree(r5, &(0x7f0000000100)='./file0\x00', 0x80801) setpgid(0x0, 0x0) (async) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x8}}]}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) socket$inet(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000140)=0x1, 0x4) (async) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000180)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='bridge0\x00', 0x10) (async) syz_open_procfs(0x0, &(0x7f0000000280)='task\x00') (async) landlock_create_ruleset(&(0x7f00000002c0)={0xc0d8, 0x1}, 0x18, 0x0) (async) landlock_restrict_self(r3, 0x0) (async) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000300), 0x240, 0x0) (async) fchdir(r2) (async) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @local}, 0x10) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x8, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x1, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @global=@item_012={0x1, 0x1, 0x7, "01"}, @local=@item_012={0x1, 0x2, 0x0, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$HIDIOCSREPORT(r4, 0x400c4808, 0x0) (async) fsmount(0xffffffffffffffff, 0x1, 0x88) (async) open_tree(r5, &(0x7f0000000100)='./file0\x00', 0x80801) (async) 1m12.22456875s ago: executing program 5 (id=1169): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000500)="66b9800000c00f326635000800000f3066b90404000066b80000000066ba000000000f30360f080f986f00f20f5fe40f21810fa576000f23ce0f9591fc4f0f0135", 0x41}], 0x1, 0x1, 0x0, 0x5b) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000300)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m12.188494034s ago: executing program 5 (id=1170): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x5, 0x4, 0x3f0, 0x0, 0x0, 0x0, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000780)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000004a00010200000000000000000a"], 0x164}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/net/bridge0/bridge/priority\x00', 0x2, 0x0) write$nsim_port_qreset(r3, &(0x7f0000000980)={0x30, 0x20, 0x30}, 0x3) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@private0, 0x7e, r1}) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) quotactl_fd$Q_GETNEXTQUOTA(r0, 0x0, r4, &(0x7f00000002c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000009c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x580107}) fstat(r5, &(0x7f0000002a00)) 1m12.167711836s ago: executing program 5 (id=1171): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fce000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000780)=@vmx={0x0, 0x0, 0x2080, {0x1ffc, 0xdddd1000, {}, 0x1, 0x1}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffffffffffff00", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f387400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000079cbee4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) 1m12.089592424s ago: executing program 5 (id=1172): r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000300000010bd100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a000700000009040100000102300009040101010102300009052b0920000e00030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920007f04000a2525000400008f0200a313ee2af9eb9b0e77f94344bdf6fc1fa60b678a"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0003020000000203"]}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000240)={0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="00060a00"], 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x224000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'syz_tun\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}) 1m11.603275913s ago: executing program 5 (id=1182): socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./tracing\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./tracing/synthetic_events\x00', 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470881000200", @ANYRES64=r0], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) 1m11.525104222s ago: executing program 2 (id=1185): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000500)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000b8010000000f01d90f300fc79d53bf0000c4e16dd3010f2202", 0x52}], 0x0, 0x6, 0x0, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000006c0)={0xffffff}, 0x10) (async) write(r0, &(0x7f0000000700)="240000001a005f0214f9f407000904000a000000200100000000000e291bfe18211d491799", 0x25) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x80000001, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x97, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xffff1549, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x2, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x230, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x8, 0x2, 0x40d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0xffffffff, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x6, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xc4, 0x6, 0x8, 0x5, 0x0, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x7, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x89d87, 0x8, 0x20008, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xe, 0x32d, 0x3, 0x1ff, 0x2000807, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x3, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x5, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f000000010000700000000000000", @ANYRES32=0xee00], 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x890) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x1fc}, 0x1, 0x0, 0x0, 0x40015}, 0x20000010) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = landlock_create_ruleset(&(0x7f0000000480)={0x8000}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0xa8041, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'veth0_to_bridge\x00', 0x0}) (async) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000600)="01005e00001652540012345608004600002c000100000102830bc0a80101e00000169404000022002aee0000000101000001ef010101c0a80164", 0x3a, 0x0, &(0x7f0000000640)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000680)={'bridge_slave_0\x00'}) (async) r10 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) 1m11.524910702s ago: executing program 2 (id=1186): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f0000000080)="0f01cf660f38808200180f212d360f01c3f6510064d9f90f01bf00000f0665f20f113b0f416e05", 0x27}], 0x1, 0x34, 0x0, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000000)={0xc1, 0x0, 0x1}) (async, rerun: 32) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0x70000, 0x80a0000, 0x10, 0x7, 0x40, 0x7, 0x3, 0x2, 0x0, 0xb1, 0x1, 0x8}, {0xeeea7002, 0x2ffc, 0xd, 0x1, 0xa1, 0x2, 0x7, 0x3, 0xb, 0xc4, 0x5, 0x7}, {0x50000, 0x80a0000, 0xc, 0xf, 0x9, 0xff, 0x7, 0x8, 0x5, 0x4, 0x3, 0x81}, {0x3000, 0x50000, 0x0, 0xd0, 0x6, 0x2, 0x3, 0x23, 0x7, 0x1, 0x1, 0x9}, {0x1000, 0x25000, 0xb, 0xb, 0x0, 0x1, 0xf8, 0x5, 0x10, 0x8, 0x5, 0xf0}, {0x0, 0xc000, 0xa, 0x3, 0x1, 0x3, 0x9, 0x3, 0x8, 0x1, 0xb1, 0xe0}, {0x4, 0xc000, 0xe, 0x5, 0x2, 0x8, 0x8, 0x1, 0xa4, 0x2, 0x5, 0x5}, {0x1ffe, 0xdddd0000, 0x3, 0xf9, 0x9, 0x0, 0x8, 0x9, 0x6, 0x1, 0x10, 0x9}, {0x1000, 0xc4}, {0x41000, 0xff51}, 0x10, 0x0, 0x4, 0x10040, 0xb, 0x100, 0x10000, 0x0, [0x776e, 0x7fffffffffffffff, 0x7, 0xa]}) (rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m11.519379093s ago: executing program 2 (id=1187): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="fc0000001900010027bd70000000000000000000000000000000000000000001fc02000000000000000000000000000300010000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000050000000000000000000000000000003c00000000000000ffffffffffffffff00000000002000000000000000000000abcd0000000000002f00002b800000000500000000000000020000000000000801000000000000000100000000000000440005"], 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4000000) 1m11.510513023s ago: executing program 2 (id=1188): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400), 0x42, 0x0) mmap(&(0x7f0000dab000/0x1000)=nil, 0x1000, 0x1000002, 0x11, r2, 0xffffb000) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='sockfs\x00', 0x1000020, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/kernel/watchdog\x00', 0x2, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000140)="629a3e", 0x3}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x17a) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1a7) mount(&(0x7f00000002c0)=@filename='./dev/sda1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='ext4\x00', 0x8410, 0x0) setxattr$incfs_metadata(&(0x7f0000000380)='./mnt\x00', &(0x7f00000003c0), &(0x7f0000000740)="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", 0xfbd, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000440)={0x1, 0x0, @pic={0x6, 0x87, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x41, 0x40, 0x1, 0x5}}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000001840)={0x1d, r6}, 0x10) sendto$packet(r2, &(0x7f0000001700)="1f3bdb6d809aa6ff2bf2b5d1a82e7684f07038261850cb6bf0511efa772d243961e3afbbd9cefb4d9a96fb0baac7eeb0135365386144bcd99e63aef14a4128b30a9a38b0fa896629382c94fdee057c6fe1866fa9704356c10adb4dc99eda494bc63b9aff097e92285510f82ab69a79a5ddda62c64a9b2b7830b9f03d829607ddb57804b2feab1b9e70930d007a9bd3633c09258b6335b8229d306acfe645bf45617f47659aadea7e047ba4d533be66df7222199c44cda4b9e946f1d4252cc3752511b69e3a17c5c987104d182318cd1e5206bce035cb135eed360e20a63408f32a63f108", 0xe4, 0x45, &(0x7f0000001880)={0x11, 0x1c, r6, 0x1, 0x7}, 0x14) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000680)={[0x0, 0xfffffffffffffff8, 0x3, 0x3, 0x3, 0x2, 0x106b, 0x102, 0x8000000000000, 0x1000000003, 0x0, 0x8, 0x10000, 0x6, 0x0, 0x8000], 0x1, 0x2c4210}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m11.452932499s ago: executing program 2 (id=1189): unshare(0x200) (async) unshare(0x4000000) (async) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000000)={0x2, 0x80000001}) (async) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = dup(r0) r2 = accept4(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000000c0)=0x80, 0x0) sendmsg$nl_generic(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x28, 0x300, 0x70bd2a, 0x25dfdbfd, {0x17}, [@typed={0x14, 0xe1, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0x4, 0x156}, @nested={0x4, 0xac}, @nested={0x4, 0x15a}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8005}, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000200)=0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) write$nsim_port_qreset(r1, &(0x7f0000000240)={0x30, 0x20, 0x32}, 0x3) (async) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) sendfile(r1, r0, &(0x7f0000000280)=0x3574, 0xfffffffffffffffd) (async) getsockopt(r4, 0x5d7, 0x100, &(0x7f00000002c0)=""/206, &(0x7f00000003c0)=0xce) (async) r6 = syz_open_dev$loop(&(0x7f0000000400), 0x7, 0x143800) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x7a000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x82}, 0x4001840) (async) syz_usb_connect(0x6, 0x9ae, &(0x7f0000000580)={{0x12, 0x1, 0x201, 0xc, 0xac, 0xbf, 0x18, 0x52b, 0x1905, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99c, 0x4, 0xad, 0x7, 0x40, 0x0, "", [{{0x9, 0x4, 0x6d, 0x1, 0x3, 0xd4, 0x2d, 0x7c, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0x4d}, [@mixer_unit={0x6, 0x24, 0x4, 0x6, 0x40, "bd"}, @feature_unit={0xf, 0x24, 0x6, 0x4, 0x4, 0x4, [0x1, 0x0, 0x1, 0x2], 0x87}, @extension_unit={0xc, 0x24, 0x8, 0x2, 0x7f, 0xb, "86f7bf87b6"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x404, 0x2, 0x1, 0x9945, 0xfc, 0x17}, @processing_unit={0xb, 0x24, 0x7, 0x1, 0x1, 0x80, "c4b9d2a3"}, @feature_unit={0xb, 0x24, 0x6, 0x5, 0x6, 0x2, [0x8, 0x7], 0x51}]}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "4bdc895c"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x4, 0x7fff, 0x8}, [@mdlm_detail={0xb6, 0x24, 0x13, 0x0, "d063b6da7466c5afbdc5fe4d802ce5a1bb8a8f470137c6ca07939047e741a18cabf250ccce95cc53b31b8c659d960ea0e76d0b6388054fc1e703578f771ff1cdd452121c4fb2168ea3b3146576c2f79552836206d59f7025dba245194e2bbbb5c5234659caaac507961c9a91895afb245bf17e6a2f838d14fefe113b23992a197010c204ff5d0b4718e2f6798fc13e6316fe60670c570ff66c47cd11dfc38831a8dc9277d75ac5b833b8740000224b1df746"}, @mdlm_detail={0xb0, 0x24, 0x13, 0x2, "f0a557d3b4fdad60404d0e4dafeebdbeae25b00b9afedee26bf7e48e7f56087b7ffc2cde837ee442f5e50de8d88e84a8e39fc876919f77b28743fbe612eeaf0301a3744aef51e67e8b975f0d236025e56ca133e4b5b09d941c3926d0ad22c09e6e73e2af5a6870b9b12ebbe6a93009086925b1f05ef8096142deeba3e09221d2a2c7b45f701b0398e1f79c304d3266452d01bedc6bf1cccc2b4e805e8f29ffcedbe501c8109b0a7120b7db92"}, @country_functional={0x12, 0x24, 0x7, 0x1, 0x4, [0x0, 0x800, 0x8, 0xc9c, 0x800, 0x7fff]}, @ncm={0x6, 0x24, 0x1a, 0x1, 0x14}, @mdlm={0x15, 0x24, 0x12, 0x1}]}], [{{0x9, 0x5, 0x3, 0x0, 0x10, 0x4, 0x3, 0x8, [@generic={0x32, 0xf, "19f6205a6a3754ea0c9add776ee77bc738555afd880d607e9877ee9d68018a53a87b5f9c550a61db1ed081670ac8c264"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xf, 0x8}]}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x9e, 0x4, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0xaa}]}}, {{0x9, 0x5, 0xf, 0x8, 0x40, 0x6, 0x2, 0x3}}]}}, {{0x9, 0x4, 0xcf, 0xe, 0xf, 0x99, 0x87, 0x5f, 0x7f, [@generic={0x99, 0x22, "ee3189a69846ed621896b4a89dd69854139d0fbf0fa79e72a40c5e64aeec2b2b89fe894f7077b47571e1f9fcd82a3310467b4b7621d6f4985dcb6690f6ee36579e089de511c8c6bcac34efbbb7408a1fd7d96e2b3243f39550c5face9eddd5792e94aa2fcfe9bfc670777df8dffbf577f8f79a758c3e60de3c09b8b14758c2d080f61d47ce78a435f571c03d1138b7c1c4643f917ab439"}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "57ec5f7d73af"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xfffc, 0x101, 0xc}, {0x6, 0x24, 0x1a, 0xffff, 0x2}, [@dmm={0x7, 0x24, 0x14, 0x3, 0xef8}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x7}, @obex={0x5, 0x24, 0x15, 0x29}]}], [{{0x9, 0x5, 0xd, 0xc, 0x8, 0xf, 0x6, 0x8}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x6, 0x4, 0x8, [@generic={0x6e, 0x22, "3cc0ce84096470d989b22f4aba5489cd65357140c4117c5319b3b4bdc6c2440034a85012e6aefcf2265ac789b4c6b83b453d64407403496f3d4fbd92402b3f599eaab21a2ba1a2579746b3d7304f6a9fab214ec54e3c0a49d28c7f1c942029ff233e68e6662186a6dc3dd9ef"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x20, 0xa, 0x1, 0xf0, [@generic={0xaf, 0x23, "2b4ba8d4b273cf24c8a81c77fc7b771382bec564a6dda0cc6d4fb7f9c225a02db8d53e0e4567e2011302381baf9e25da5345934bc303180d220a19c0d9b5db93b79a5a88fcb2000646e903c38f37dcd8c7fc8593b61d7b430b799d0d0bbb94e76761f20b9a3a4a7f6b5e7eed93b612c42fe391dacd30cf9439c64816dc2895c2df1f44b9f38029687558084387e9c04659aa9037170b3ba2571a5f08d3cc051b21db84b6ece7b6ba6378e64f5f"}]}}, {{0x9, 0x5, 0xd, 0x87a6810abcb1094c, 0x20, 0x9, 0x4, 0x80}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0xd3, 0x5, 0x9}}, {{0x9, 0x5, 0xd, 0x2, 0x400, 0x2c, 0xf, 0x3}}, {{0x9, 0x5, 0xc, 0xc, 0x200, 0x8, 0x97}}, {{0x9, 0x5, 0xf, 0x8, 0x3ff, 0x5, 0x3, 0x7, [@generic={0x1f, 0x3, "f4d5dfbab7791dcf156a1f9e4daf39c20dd2e1cc78c30996316e4b2c4e"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0xfd, 0x8, 0xf}}, {{0x9, 0x5, 0xd, 0x8, 0x40, 0x5, 0x98, 0x79, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xcd, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x2}]}}, {{0x9, 0x5, 0x0, 0x4, 0x0, 0xfa, 0xf, 0x62, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x6995}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x5, 0x5, 0x52, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x401}, @generic={0xa0, 0x6, "12456e5a53c72598ecbabb31f4209fc297df05cf8ffc9c2bf3b7c2d8990e3ded97b462ca710aa98dbcba64f3dc96fd1164c8885289dc41c6eb8c669b156131f8877279bf6d4430584e2a3171cd7c55c4eafebe2db6a885337c01e85ed19430899eafca45db25b521c6588545ef73596ed32853c72bb69483cda0b72c7dd2b0c8383c3c338a248bbdd8378bbd4c6fb226dff547be4c3a3247777f1ca08d91"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x9, 0x1, 0xb}}, {{0x9, 0x5, 0xb, 0x2, 0x20, 0xdd, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x64, 0x7}, @generic={0x6b, 0xa, "e4b16abd8ca102fc993bb30db8014bdcac2cf418a1ed6a288abfd45df2e470995c0b24c7f8b2d7da6b43556e6b4d74bbcc7ce25dc0709794c04f7c78897a41e6b95d3215df1f1ba1d10af7a80099d38a951bc14e770265a279ef55ed52efc0058867f5d0e01f9e236b"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x8f, 0xc7, 0x8, [@generic={0xf5, 0x6, "404986a9edec3e04dbb694bd9b1909b5f694bbbc2c2364da593b1ca19fa6c9ee307c7f1881372bd57dd19cb61c5ce359fb34d3198da7c3de8be0fab63fab6dd2e04eec884e2a176ccecae88393411bab0fd0975854e81303296b507c942067e8d24d265a55f8c27170f1a1f73132557b7591f2de6caea0d1644e4defac55a79ee739eabf8cfe3a88bc15a78eb5cf2c6703af9ef3957bcad330e176a1249547cf6f79efeff7510d5a2fba5cb944951c08af876db0845cd274903a83a658eccc050a71e903ff473209ffc1c3a63fde81ef2c4ca834ec047ca5e0f62c65342e5fdb2e1a69cdd9595460e2afd577e210b8da116a7c"}]}}]}}, {{0x9, 0x4, 0xa1, 0x6, 0x0, 0x5d, 0x15, 0xdb, 0x6}}, {{0x9, 0x4, 0xa3, 0xc6, 0xb, 0x52, 0x0, 0x97, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0xa}}, @cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "ec09"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7, 0x5, 0x4}, {0x6, 0x24, 0x1a, 0x8}, [@obex={0x5, 0x24, 0x15, 0x987}, @mbim_extended={0x8, 0x24, 0x1c, 0xac28, 0x13, 0xa}, @dmm={0x7, 0x24, 0x14, 0x4ce, 0xfff9}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xc3}, @obex={0x5, 0x24, 0x15, 0xfff}]}], [{{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x3, 0x20, 0x0, [@generic={0x9a, 0xd, "37c2c9140752a1abfb3745fe379ca0cd73e27855c12ec3922cf5d35ada978a5770f5b7c7c33d9e37c39612ec009882e517b8c20e83ec0b7607cd3a125d76c45103d2da9dff913984a327cc41a8449ca9ce4efc4932af8c9a38d2da14f3d6ac49c0aa6860561d50dcd865721904121d8bac10af9a1face8c6bb5e847414b043dd42b8fc6f21b77cce47da468a2c5220a54337b20befea73a1"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x2}]}}, {{0x9, 0x5, 0x2, 0x18, 0x400, 0x0, 0xa4, 0x8c}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x52, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x2}]}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0xfd, 0x6, 0x5}}, {{0x9, 0x5, 0x6, 0x9, 0x3ff, 0x4, 0xf, 0xff}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0xf7, 0x2, 0xd8}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x9, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0xa8bf}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x1}]}}, {{0x9, 0x5, 0x0, 0x1, 0x0, 0x1, 0x49, 0x10, [@generic={0xea, 0x3, "9e2f887a17cd9e9b1c2f17485e862e8536f08053132ebc7040faee6b4513407e9327943d18292512ae9c961d90abbc62c4e09e387f6a04b2c47cdade0abab94d48ff0e80129f059909db1c100a03382a3b7b6644b5a1e2a93198c7da85895efc0815cc19b912c1865e6fb9b13914215d798dbf6d0d8f4911d3c5d1f11e238b4b2f972863a9a128bc6adca3173203c69c18d1cd8c9dcf75e0d41d91e2f83c661940a92a0fdfe79881b8fc8d7b51d3f35ce043904e60328313aedd81c96fa2e2e432f5ff5cf6fb1dbc323b0c13feeb5be6f161ae6a0ae31c33d60f7e3adc8417a3e24d75f0e73de258"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x0, 0x1, 0x10, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2}]}}, {{0x9, 0x5, 0x5, 0x2, 0x48, 0x1, 0x7, 0x7}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x6, 0x7, 0x1, [@generic={0xe, 0x3, "a46d1b3c6d9dd2a8b71a3958"}]}}]}}]}}]}}, &(0x7f0000001040)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x200, 0x2, 0x7d, 0x80, 0x40, 0x3}, 0x3d, &(0x7f0000000f80)={0x5, 0xf, 0x3d, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x7, 0xc601}, @wireless={0xb, 0x10, 0x1, 0x2, 0xc, 0x9, 0xd, 0x1000, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x6, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x10, 0x1, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x1, 0x2}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0x6, 0x29, 0x49, 0x3e}]}, 0x2, [{0x3b, &(0x7f0000000fc0)=@string={0x3b, 0x3, "a419fcfb1b16ba3ac19d3384cc24012ded0abaac4e3a693014276bd80d15e48889c01b9ce8893386c0f9abf8313baa66e8329ed02200780769"}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x44d}}]}) syz_usb_connect$cdc_ecm(0x4, 0x84, &(0x7f0000001080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x1, 0x1, 0x9, 0x40, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x6, {{0x6, 0x24, 0x6, 0x0, 0x0, "16"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x2, 0x628f, 0x7e}, [@dmm={0x7, 0x24, 0x14, 0xffff, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x3, 0x7, 0x6, 0x8000, 0x80}, @call_mgmt={0x5, 0x24, 0x1, 0x4b1e28e1c87f4e42, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x23, 0x80}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x9, 0xc, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x3, 0x2, 0xbf}}}}}]}}]}}, &(0x7f0000001240)={0xa, &(0x7f0000001140)={0xa, 0x6, 0x201, 0x7, 0x8, 0x8, 0x20, 0x2}, 0x54, &(0x7f0000001180)={0x5, 0xf, 0x54, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xfe, "01358838cbc15d2ed31eb1acfc8a4f81"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "da491e29a60bffc57d06ee09385f26bb"}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x7fff, 0xf00, 0x5, [0xc0, 0xff0000, 0xff00, 0x0, 0xff0000, 0x0]}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x401}}]}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000012c0), r2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001300)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001580)={&(0x7f0000001340)={0x23c, r7, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x90, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'hash:ip,port\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fff}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10001}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x88, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x80, 0x5, "41ce32bc228c30ebee02a352d1cf999f2350aec453d2cf951961552b08913454030c320aa39f9a6a6c2e450adf5b6a46858543bc183df681f4a316f4b75fbdcd10c5a0dbdd85c1059c2a6b9cec1878c8a4eeb7fd5d847844b0343f5143329d77710a0de22b9e06004b4814195878dfde5cc6295a4bc05689c081371d"}]}, @ETHTOOL_A_DEBUG_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x10}, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6923f00e42dc3e55, &(0x7f0000001640)={0x5, &(0x7f0000001600)=[{0x7, 0x5, 0xf, 0x29e8}, {0x3, 0x1, 0x9, 0x1}, {0x8, 0x3, 0x4b, 0xb02e}, {0x2, 0x9, 0x5, 0x8}, {0x292, 0xff, 0x8, 0x6}]}) (async) fcntl$setflags(r3, 0x2, 0x1) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000016c0), r5) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, r9, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) (async) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f00000017c0)) (async) r10 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001fc0)={0x0, &(0x7f0000001800)=[@wrmsr={0x65, 0x20, {0x38e, 0x5}}, @wrmsr={0x65, 0x20, {0xbc4, 0x7}}, @wr_crn={0x67, 0x20, {0x0, 0x8}}, @nested_amd_invlpga={0x17d, 0x20, {0x50000, 0x6918}}, @code={0xa, 0x59, {"2666470f72f07d67670fc7775e0fc7a9060000000f20d835200000000f22d836f326473c02440f320f20d835080000000f22d866bad00466b8c55a66ef2e670f01cbc463997dd124"}}, @nested_set_state_pages={0x140, 0x28, {0x0, 0x28, @unmapped=0x100000000}}, @nested_load_code={0x12e, 0x6c, {0x0, "0f2200410f011a410f9e33670f32b902000040b894167d81ba000000000f3066baf80cb840dc758def66bafc0cb804000000ef410f78ab00600000c4e185fc10b805000000b9871cd0e40f01d9c482d5b6445693"}}, @set_irq_handler={0xc8, 0x20, {0x12, 0x2}}, @nested_amd_vmload={0x182, 0x18}, @nested_load_syzos={0x136, 0xff, {0x3, 0x0, [@nested_amd_set_intercept={0x181, 0x30, {0x1, 0x40, 0x4, 0x1}}, @code={0xa, 0x3f, {"4f0fc71f0f2149440fbb62d6450f01c44d0fc76d190fc79bf7000000450f01c5b9960800000f32360fc2360b0f08"}}, @in_dx={0x69, 0x20, {0x1bd5, 0x2}}, @rdmsr={0x66, 0x18, {0x9d9}}, @enable_nested={0x12c, 0x18}, @in_dx={0x69, 0x20, {0x746a, 0x6}}]}}, @rdmsr={0x66, 0x18, {0xbc8}}, @nested_load_syzos={0x136, 0x1df, {0x2, 0x1, [@nested_load_syzos={0x136, 0x20, {0x3, 0xf}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_load_code={0x12e, 0x8f, {0x2, "f20f38f040008f097881bf00600000c48209471d0600000066baf80cb806bf9a8fef66bafc0cec66b867008ec0c7442400bb000000c744240209800000c7442406000000000f01142448b800500000000000000f23d80f21f835000000300f23f8360f0133c402550c0502000000660f3880b5fc000000"}}, @nested_intel_msr_list_add={0x155, 0x30, {0x3, 0x1, 0xbba, 0x8001}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x7, 0x8, 0x8000000000000001, 0xa}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_amd_invlpga={0x17d, 0x20, {0xdddd1000, 0x2241}}, @wr_crn={0x67, 0x20, {0x0, 0x3}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x49e, 0x80000001, 0x6, 0x6}}]}}, @uexit={0x0, 0x18}, @code={0xa, 0x73, {"470f783ccb66baf80cb8d6278f82ef66bafc0cec64f2420f076436f2440f7079000d656666440f50e764460f23b3f3470f0948b801000000000000000f23d80f21f835800000400f23f8c7442400a1000000c7442402f0eb0fd1ff1c242e0fa4f7f4"}}, @set_irq_handler={0xc8, 0x20, {0x5b, 0x2}}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host16=0xc00, 0x9, 0xe, 0x2}}, @wr_crn={0x67, 0x20, {0x2, 0x4}}, @nested_amd_invlpga={0x17d, 0x20, {0x58000, 0xc7f4}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_intel_msr_list_add={0x155, 0x30, {0x2, 0x2, 0x633, 0x2}}, @nested_load_code={0x12e, 0x5c, {0x0, "c402452f07c44115d959003e4280f001c442550d01b9bf0300000f32c4437904a5e71500000066baf80cb8d7f11089ef66bafc0cb00aee3e0f01f8f00fba77aee30f2210"}}, @wr_drn={0x68, 0x20, {0x7, 0x26cb496d}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x9b, 0x5, 0xc, 0x1}}, @nested_create_vm={0x12d, 0x18, 0x3}, @out_dx={0x6a, 0x28, {0x42df, 0x1, 0x1}}, @set_irq_handler={0xc8, 0x20, {0x5a, 0x2}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0xd3, 0x6, 0x1, 0x3}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmload={0x182, 0x18, 0x2}], 0x7aa}) mmap$KVM_DIRTY_RING(&(0x7f0000fee000/0x11000)=nil, 0x37000, 0x2000008, 0x10, r10, 0x40000) writev(r0, &(0x7f0000002200)=[{&(0x7f0000002000)="ab35cb51d481f2efb1c33f583b345fe96bb7077744a35ae6573da0d0f022b2f41a6678b7c05b6ebdb242ca273ef6e9fd400bbdfec046017dfcb492425ee1b64f9f57bca0d2829feec2d8ef99ed3cbc334e7bad6a0849930b40609716020efe11d1c73ec37c74da17f3731eec76c9ec1fed6629edf684c1114c958f532f6637b361e81fe5b5999508d9b87fba679beff0b0607d5770cc389df1cb2d0fb3104babcb10754b4e5d7a9983a9d4c43d0c8ac36467b7574181323f3d60c4456c7eb2", 0xbf}, {&(0x7f00000020c0)="d9ecd05e26befafa6d36b779e7d7ef139e6706c08e3d1a164b40512b0b39863225907135900c12b65d2d16cd2801959443ff4fe29953c5ca93b59dd54b390b971db10093ede351ff81119b4eebcc88270e23662cdd75fd5429ba8b5c8c165f0e6585f1732cafba87e632bb8003e976ff52c1443e90a555d0ad", 0x79}, {&(0x7f0000002140)="a8560c6a2eb1d1d28275505a363e902479753988eb34c76de379145ef3a26f7f92afcd8da4e978ab6c8a4897c1b159a54e9f43dd8e7295b6a65fd249b838805fc3dc0cab9a718647ea32e57ea793d04b4e94680ff724ae767ec119d859f8f0d14a160a06092c9ae2ea87e9b1b6bb19acdf94141265d72ed9a2b02cb624fdface74e9091dec4d1035808fa297ffc61234da7e61d552e6af55d687acf3a70f5901000ae751d895ea8f2434ff38f437b4307dce", 0xb2}], 0x3) 1m11.397277175s ago: executing program 4 (id=1190): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000500)='./file0\x00', 0x93000818) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) io_setup(0x2, &(0x7f00000000c0)=0x0) io_submit(r2, 0x7, &(0x7f0000000a40)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x4, r0, &(0x7f0000000540)="739edc648c2a3664cd794180155001731cd2203f3b3eff79ea21988634cec8f680f9d77e1b52a2eeee639bdf0c745fac7f6005672d2c81da3fef43952ffd", 0x3e, 0x4, 0x0, 0x0, r1}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x7, 0xc23, r0, &(0x7f0000000600)="22c3ef59374fba178a3b769ab6c732ab13d559456cb9b76a7c772c29969fb0d497c6f185ad36ae4a29a2506473bf77bb2eb89aa50aeecac9475076297e6191383c12c97d0f9fc667a355c0aa2316a6e8a04c81d3c5e87fec429d6723972ab75659e312075b0b136d72480e08eb7b5fcb735137c92f27fda101e7c5f994ebae48", 0x80, 0x2, 0x0, 0x1, r1}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x5, 0x9, r1, &(0x7f00000006c0)="4f2c904d519c640891a3e914c52439b6cf9ac8052b19758c0a3f05a952ce6b69edc9be95ac7816b0624ad8de0015e772cd021bb3a91955e4041f9a604c3772bed997911dddd25132fb3c7ce36bbc0a143f2b168a74db57b39361b9ce2166483d131a6cb1660a0a098a8e9b0f51ef3015b62c9d34eb8276a923472052e05abc245e3e6ec37d943fd60a3e5380a7469d769c3acfa1084596", 0x97, 0xd4df, 0x0, 0x3}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x6, 0x0, r1, &(0x7f00000007c0), 0x0, 0x9, 0x0, 0x0, r1}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0xa, 0xffffffffffffffff, &(0x7f0000000840)="0b225ac322c72a7b1dd764ada0411694fb9f4e713f376b", 0x17, 0x4}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x3, 0x10, r1, &(0x7f00000008c0)="338486ae18540208b67ebad3dd07e9d33b0e4a894f6ea788c6583683b589b5da63daa0b1c8cb85393c589f87ed95286e9992103d7481bb5709986ea16a627a57ee1dd8c9e3632deaf48687795119e59c88a3913e5857928f4ac6af3009cf8c234e1e55b698a6cdd1405f24528bc048026cd8d40608c28f475ea70e7314dd9a001b384cb23b69ca83c2d5c73204953e6255abbc868d59d4cf0aa23c1dd8", 0x9d, 0x7, 0x0, 0x4}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x3, 0xe15, r0, &(0x7f00000009c0)="4158376c0fee80d1fcf5c07faf781b6e45ded164be23e680662995813d3cb695d66122ab9afcdad1dc91aef0b0f0d5a8046be98e96bcc89e20b59c2b", 0x3c, 0xd8, 0x0, 0x2, r1}]) (async) io_submit(r2, 0x7, &(0x7f0000000a40)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x4, r0, &(0x7f0000000540)="739edc648c2a3664cd794180155001731cd2203f3b3eff79ea21988634cec8f680f9d77e1b52a2eeee639bdf0c745fac7f6005672d2c81da3fef43952ffd", 0x3e, 0x4, 0x0, 0x0, r1}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x7, 0xc23, r0, &(0x7f0000000600)="22c3ef59374fba178a3b769ab6c732ab13d559456cb9b76a7c772c29969fb0d497c6f185ad36ae4a29a2506473bf77bb2eb89aa50aeecac9475076297e6191383c12c97d0f9fc667a355c0aa2316a6e8a04c81d3c5e87fec429d6723972ab75659e312075b0b136d72480e08eb7b5fcb735137c92f27fda101e7c5f994ebae48", 0x80, 0x2, 0x0, 0x1, r1}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x5, 0x9, r1, &(0x7f00000006c0)="4f2c904d519c640891a3e914c52439b6cf9ac8052b19758c0a3f05a952ce6b69edc9be95ac7816b0624ad8de0015e772cd021bb3a91955e4041f9a604c3772bed997911dddd25132fb3c7ce36bbc0a143f2b168a74db57b39361b9ce2166483d131a6cb1660a0a098a8e9b0f51ef3015b62c9d34eb8276a923472052e05abc245e3e6ec37d943fd60a3e5380a7469d769c3acfa1084596", 0x97, 0xd4df, 0x0, 0x3}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x6, 0x0, r1, &(0x7f00000007c0), 0x0, 0x9, 0x0, 0x0, r1}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0xa, 0xffffffffffffffff, &(0x7f0000000840)="0b225ac322c72a7b1dd764ada0411694fb9f4e713f376b", 0x17, 0x4}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x3, 0x10, r1, &(0x7f00000008c0)="338486ae18540208b67ebad3dd07e9d33b0e4a894f6ea788c6583683b589b5da63daa0b1c8cb85393c589f87ed95286e9992103d7481bb5709986ea16a627a57ee1dd8c9e3632deaf48687795119e59c88a3913e5857928f4ac6af3009cf8c234e1e55b698a6cdd1405f24528bc048026cd8d40608c28f475ea70e7314dd9a001b384cb23b69ca83c2d5c73204953e6255abbc868d59d4cf0aa23c1dd8", 0x9d, 0x7, 0x0, 0x4}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x3, 0xe15, r0, &(0x7f00000009c0)="4158376c0fee80d1fcf5c07faf781b6e45ded164be23e680662995813d3cb695d66122ab9afcdad1dc91aef0b0f0d5a8046be98e96bcc89e20b59c2b", 0x3c, 0xd8, 0x0, 0x2, r1}]) getdents64(r1, &(0x7f0000000100)=""/1000, 0x3e8) (async) getdents64(r1, &(0x7f0000000100)=""/1000, 0x3e8) close(0x3) openat(r1, &(0x7f0000000143), 0x800, 0x0) (async) openat(r1, &(0x7f0000000143), 0x800, 0x0) 1m11.285551546s ago: executing program 4 (id=1192): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) sendfile(r0, r1, 0x0, 0x4) 1m11.284939436s ago: executing program 4 (id=1193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="6802000000050104000000000000000003000006540201000200000000020000800904000100160073797a31000000000000000000000012000000000000000000000000941074d2f18faf184d23b6cf52e8c676c218b39bb8335a19d528faa003da54c821603e499a3e11b3efe2be7aafa9680b20a26883ac0a4b86060002000000ff0300000300030002000000030000000200280003000000030000000700f8ff0100000001000000409d02000100000008"], 0x268}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$key(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x8810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000740)={0x4, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000840), 0x2c8, 0x0) syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000340)={0x2, 0x0, @ioapic={0x0, 0x0, 0xfffffffe, 0x7fffffff, 0x0, [{0xfc}, {0xff, 0x0, 0x10}, {0x0, 0x0, 0x3, '\x00', 0x3}, {0xbd, 0x0, 0x20}, {0x0, 0xdc, 0x0, '\x00', 0xfd}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x8}, {0x2, 0x1, 0x0, '\x00', 0x80}, {0x0, 0x0, 0x9}, {0x0, 0xf, 0x0, '\x00', 0xff}, {0x0, 0x89, 0x0, '\x00', 0xff}, {0xff, 0x0, 0x40, '\x00', 0xff}, {0x70, 0x6, 0x5}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x4}, {0x9, 0x0, 0x0, '\x00', 0xfe}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, '\x00', 0xbb}, {0x20}, {0x53, 0x2}, {0x4, 0x4f, 0x0, '\x00', 0x6}]}}) r4 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000280)=ANY=[@ANYBLOB="12010003000000103d10000140000101020101300209f9ffff8851c054f883aa007e36ffffffffff63512328dfe5000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920007f04000a2525000400008f0a0000000300000000"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0xffffffffffffff02, 0xa242) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000200)=0x3) dup3(r5, r6, 0x0) syz_usb_control_io$uac3(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0003020000000203"]}, 0x0) r7 = epoll_create(0x2) epoll_pwait(r7, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) syz_usb_control_io$uac3(r4, &(0x7f0000000240)={0x14, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r4, @ANYRES32=r7, @ANYRES32], 0x0}, 0x0) 1m11.066409349s ago: executing program 5 (id=1194): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mydev\x00', 0xfa) (async) mount(0x0, &(0x7f0000000080)='./mydev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev/ttyS0\x00', 0x2, 0xc0) ioctl$TIOCSBRK(r0, 0x5427) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newsa={0xf0, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in=@dev={0xac, 0x14, 0x14, 0x42}, @in6=@mcast1, 0x0, 0x4000, 0x4e23, 0x8001, 0x0, 0x20}, {@in=@local, 0x200, 0x32}, @in=@empty, {0x323, 0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x92be}, {0x0, 0x40000, 0x0, 0x3}, {0xfffffffb, 0xfffffbff, 0xca09}, 0x70bd29, 0x3502, 0x2, 0x1, 0x0, 0x10}}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1123102, 0x0) (async) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r4, &(0x7f00000007c0)=ANY=[], 0xffffff6a) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x40010003, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$uac3(0x3, 0x0, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="00222200000096231306e53f070f0000002a940183"], 0x0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) r6 = open(0x0, 0x10507e, 0xa6) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000002c0)=0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40042, 0x1) syz_ublk_setup_queues(r6, r7, &(0x7f0000000380)={0x0, 0xb828, 0x0, 0x20003, 0x3a6}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x4000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x19a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x400, 0x0, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xab60, 0x2, 0x1, 0xfffffffe}}], 0x1, 0x0, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x28, 0x1e, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 1m8.254300606s ago: executing program 2 (id=1195): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000001c40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x54, [0x39, 0x2, 0x4000401, 0x8, 0xe, 0x0, 0x10001, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x0, 0xfffffff6, 0x0, 0x8, 0xb7b6, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x4, 0x0, 0x0, 0xfffffff9, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x9ffffffc, 0x3, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0xffffffff, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0x1a0fadaf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x6, 0x80, 0x81, 0x967c, 0x0, 0x0, 0xfffffffc, 0x1, 0x2, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x881, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x8, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0x0, 0x47fff, 0x0, 0x0, 0xacc1, 0x3, 0x0, 0xd, 0x3, 0x0, 0x0, 0xfffffffd, 0xfffffffc, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x0, 0xfffffffe, 0x3], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x5, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0xfffffffb, 0x0, 0x0, 0x4, 0xffffffff, 0x1000000, 0x9, 0x5, 0x8, 0x2, 0x10, 0x5, 0xfffffffe, 0xfff, 0x0, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x2, 0x0, 0x20, 0xffffe]}, 0x45c) timer_create(0x3, &(0x7f0000000000)={0x0, 0x17, 0x1}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x236bd4336e4642df, &(0x7f0000000080)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) io_setup(0x82, &(0x7f0000000180)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x1b8) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x1, r3, &(0x7f0000000280)='N-', 0x2, 0x4}]) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xf) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x241, 0x14, 0x1, 0x2048, 0x8}, 0x30, 0x1) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x12, r4, 0xa968a000) ioctl$UI_DEV_CREATE(r0, 0x5501) 1m0.819531915s ago: executing program 1 (id=1197): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="80000000", @ANYRESOCT=0x0, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32, @ANYBLOB="2d000e001c"], 0x80}, 0x1, 0x0, 0x0, 0x2008081}, 0x0) 1m0.806303677s ago: executing program 1 (id=1198): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000001200)={'veth0_vlan\x00', @random='D \x00'}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000001280)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x4, 0x0, 0x2, 0x9, 0x0, 0xdf3}, {0x400, 0x2, 0x7, 0x2, 0x80000000, 0xfffffffffffffff8}], ['\x00']}) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001240), 0x80200, 0x0) ioctl$TIOCCBRK(r3, 0x5428) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/90, 0x5a}], 0x1, 0xa3, 0x0) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000180)={{0x1, 0x1, 0x6, 0x6, 0x730, 0x9}, 0x17, [0x5, 0x7c47fd47, 0x0, 0x4, 0x7fff, 0x3, 0x9, 0x6bc, 0x400, 0x9, 0x9, 0x9, 0x2, 0x0, 0x756, 0x4, 0x7fff, 0x4, 0x10001, 0x8, 0xfffffff8, 0x6, 0xe8a, 0x7, 0x80000001, 0x101, 0x1b, 0x7264fa09, 0x1, 0x31df, 0x9, 0x1, 0x7, 0xffffffbc, 0xfffffff9, 0x0, 0x1, 0xc, 0x6d8, 0x6afd, 0x2, 0x100, 0xa, 0x4, 0xfffffff7, 0x2, 0x0, 0x7, 0x40, 0x3, 0xe, 0x9, 0x1dd1, 0x319, 0xfff, 0x1, 0xffff, 0xffff, 0xfffffffb, 0x9, 0x1ff, 0x80000001, 0x9, 0x3, 0x400, 0x0, 0x6, 0x80000001, 0xc945, 0xbc3, 0xff, 0x1ff, 0x8, 0xffff5ed4, 0x6, 0x4, 0xffff8000, 0xfffffffb, 0xcf1, 0x3, 0x60, 0xaf, 0x6, 0x3, 0x2, 0x390, 0x5, 0x7, 0x5, 0x7ff, 0x1, 0x1, 0x5, 0x401, 0x7, 0x7, 0x8000, 0x4, 0x9, 0x3, 0x0, 0x1, 0x5, 0x1, 0x7a4, 0xfffffffd, 0x4, 0xfffffffe, 0x6, 0x1, 0x1, 0x2, 0x9, 0xc3, 0xc2, 0x100, 0x4e52, 0x2, 0xfffffc01, 0x8, 0x0, 0x8, 0xff, 0xffffffff, 0x1, 0x1, 0x4, 0x4, 0x3, 0x2, 0xff, 0x5, 0x0, 0x8, 0x0, 0x7000000, 0xfad, 0x7fffffff, 0x63d, 0x7f, 0x0, 0x76, 0x7f, 0x4, 0x0, 0xfffffffc, 0x5, 0x3, 0x10001, 0x81, 0xd, 0x3, 0xfffffffa, 0x78, 0x5c2, 0x6, 0x8001, 0xe870, 0x2, 0x1, 0x5b5, 0x8, 0x81, 0x80000001, 0x1, 0x2, 0x3bbf0, 0x9, 0x3, 0x300b, 0x5, 0xc, 0xb7a, 0x4, 0x5, 0x7ff, 0x8, 0x2, 0x8, 0x50, 0x0, 0x1, 0x8000, 0xd91, 0x6, 0x300d, 0x0, 0x8, 0x7, 0x700000, 0x7ff, 0x3ff, 0x7, 0x6, 0x5, 0x3ff, 0x7, 0x7, 0x200, 0x2, 0x2, 0x400, 0xe0, 0x9, 0x400, 0x4, 0x9, 0x8001, 0x2, 0x6, 0x7, 0x7, 0x1, 0x8, 0x8, 0x7, 0x10, 0x7, 0x4, 0x1, 0x7, 0x6, 0x0, 0x80, 0xff, 0x81, 0x7, 0x3, 0x1, 0x7, 0x7, 0xffffff70, 0x95, 0x2, 0x7fc000, 0x9, 0x5, 0x60337d80, 0x7, 0x8001, 0x6, 0xb, 0x3, 0xffffffff, 0x80000001, 0x7, 0x2, 0x2, 0x8, 0x2, 0x1, 0x3, 0x1c03, 0x79, 0x8, 0xc2cf, 0x8, 0x81, 0x3, 0x7, 0x80000001, 0x3, 0xe, 0x2, 0x3, 0xffffbd2c, 0x40, 0x4, 0x7, 0x8, 0x3, 0x2, 0xd, 0x400, 0x7, 0x2, 0x40, 0x3, 0x1, 0x8001, 0x0, 0x7fffffff, 0x5, 0x8, 0x0, 0xedf5, 0x9, 0x6, 0xc0000000, 0x6, 0x1, 0x200, 0x4, 0x28d, 0x82e, 0x101, 0x3, 0x52, 0x9, 0x2, 0x6, 0x80, 0x5, 0x1, 0x3, 0x8, 0x0, 0x1000, 0x1, 0x101, 0x9, 0x4, 0x2, 0x800, 0x5, 0x499, 0x2, 0xffffff00, 0x8, 0x20, 0x1, 0x4, 0x1, 0x7, 0x1, 0x55, 0x104c, 0x0, 0x7fff, 0xfffff800, 0x5, 0xd, 0x8, 0xfffffffb, 0xfffffffa, 0x10000, 0x9, 0x4, 0x5, 0x2, 0x2, 0x2fa, 0x33a, 0x0, 0xfc, 0x9, 0x3767, 0xaa, 0x9, 0x4, 0x6, 0x5, 0x2, 0x10000, 0x7, 0x605, 0x6d, 0x4, 0x4, 0x12c25f46, 0x100, 0x10, 0xff000, 0x7, 0xe, 0xcb61, 0x9, 0x5da3, 0xfffffff9, 0x4, 0x2, 0x10000, 0x6d, 0x9, 0x7, 0x1, 0x0, 0x7, 0x4, 0xfffffffd, 0x7fff, 0x3, 0x2, 0x1e, 0x6, 0x1e0, 0x6, 0xf, 0x1, 0xbf, 0x873, 0x3, 0x6, 0x4, 0x5, 0x81, 0x5, 0x7fffffff, 0x9, 0x2, 0x8, 0x7, 0x9, 0x8, 0x6, 0x2, 0x3, 0x2, 0x0, 0x6, 0x1, 0x1, 0xab, 0x5, 0x1, 0xd2, 0x9, 0x2, 0x0, 0x2, 0xfffffff9, 0x1, 0x5a9, 0x9, 0x3, 0x100, 0x3, 0x3, 0x6, 0x80000000, 0xffffffff, 0x6f, 0x7, 0x0, 0x32f5e5b8, 0x5450, 0xdfe0, 0x8fed, 0x4, 0x1000, 0x4, 0x2, 0xff, 0xc00d, 0x8, 0xc9, 0x7d53, 0xffff, 0x0, 0x4, 0xf, 0x9b70, 0x2, 0x8, 0x6, 0x2, 0x4c8, 0x5, 0xadb3, 0x8000, 0x1, 0xd69, 0x2, 0xffff, 0x4, 0x3, 0x3, 0x9, 0x400, 0x4, 0x0, 0x17e, 0x7ff, 0x3, 0xffffff7f, 0x4a, 0x2, 0x3, 0x7, 0xfffffffc, 0x9, 0x2, 0x80, 0x1, 0x8, 0x7dc, 0xff0b, 0x9, 0x0, 0x6, 0x1, 0x0, 0x2, 0xcb, 0x3, 0xcb46, 0xc0, 0x1, 0xe0000000, 0xdd85, 0x1, 0x10, 0x100, 0x0, 0x800, 0x22c, 0xdc, 0x43, 0xfffffffb, 0x3, 0x4, 0x6, 0x2, 0x6, 0x3, 0xfff, 0x0, 0x1, 0x6, 0x989, 0xffffff5f, 0xf, 0x0, 0x6, 0x1, 0x7, 0x8, 0x2, 0x200, 0x9, 0xd3e, 0x912, 0x9, 0xff, 0x2, 0x6, 0x3, 0x10001, 0x2, 0x9, 0x3ff, 0xffffffff, 0x0, 0xe, 0x1, 0x7, 0x3, 0x2, 0x2, 0xcea, 0x1, 0x9, 0x3, 0x3, 0x7, 0x8001, 0x39, 0x7b1f, 0x9, 0x7fffffff, 0x5609d714, 0x5, 0x4, 0xbff, 0xfff, 0x8, 0x5, 0x3, 0x8, 0x1, 0x2, 0x64e4, 0xaf, 0x2, 0xdf, 0x8000, 0xb, 0x6, 0x2, 0x9, 0xcffb, 0x4, 0x100, 0x1, 0xcc06, 0x1, 0x5, 0x1, 0xffff, 0x6, 0x3, 0x4, 0x6, 0x9, 0xc4, 0x1, 0xd9bf, 0x3, 0x3c6, 0x80000001, 0x6, 0x6, 0x8001, 0x1, 0x3, 0x7, 0xb45, 0x4, 0xffffffff, 0x20000, 0x1, 0x1, 0x3, 0x0, 0x0, 0xf, 0x7fffffff, 0x8, 0x6, 0xd71e, 0x7fffffff, 0x6, 0x9, 0xfff, 0x100, 0x67, 0x0, 0x6, 0x0, 0x2, 0x8, 0xc38c, 0x200, 0x6, 0x800, 0x0, 0x3, 0x3, 0x5, 0x9, 0x9, 0x10a9194b, 0x0, 0xffff8e0e, 0x4, 0xfffffff9, 0x5, 0x0, 0x5, 0x4, 0xfff, 0x7, 0x1ff, 0x3, 0x43, 0x9, 0xad9, 0x0, 0x6, 0x0, 0x80000000, 0x3, 0xe, 0x6, 0x8, 0x7, 0x3, 0x4, 0x40000000, 0x0, 0x3, 0x1, 0x4, 0x1, 0xeb, 0x80000001, 0x492, 0x7, 0x9, 0x0, 0x3, 0x7fffffff, 0x3ec, 0x6, 0x2, 0x40, 0x5, 0x4, 0x6, 0x0, 0xe17b, 0x1, 0xbe9, 0x80000000, 0xa2b8, 0xdd, 0x41b3, 0x1000, 0x7ff, 0x9, 0x6, 0x77ad2c65, 0xe0, 0x5, 0x8, 0xc29, 0x2, 0x8000, 0x2, 0xff, 0x5, 0x9, 0xd, 0x31f, 0x4, 0x5, 0x0, 0x7, 0x8, 0x1, 0x1, 0x0, 0x0, 0x9, 0x5, 0x7, 0x2, 0xbf, 0x7, 0x2, 0x3, 0xb038, 0x8, 0x200, 0x3, 0xb, 0x2, 0x0, 0x8, 0x8, 0x0, 0x200, 0x7fffffff, 0xfff, 0x40, 0x7f, 0x1, 0x9, 0x100, 0x3, 0x4, 0x4, 0xfffffffc, 0x11c, 0x1000, 0xffff8000, 0x7, 0x8, 0x8, 0x5, 0xffff64bc, 0x9, 0x2, 0x7, 0x3, 0x6, 0x200, 0x4, 0x3, 0x2, 0x7, 0x3, 0x6, 0x2, 0x7, 0x7fffffff, 0x2, 0x3140, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0xf9f, 0xe, 0x4, 0x4, 0x0, 0x6, 0x1000, 0x7, 0x7, 0x0, 0x9, 0xe, 0x9, 0x9, 0x9, 0x4, 0xffffffff, 0x6, 0xfffffffb, 0x599f, 0x7, 0x5, 0x9, 0xfffffffa, 0x0, 0x9, 0x6, 0x6, 0x3, 0x6, 0x4, 0x3, 0x7, 0xd2a, 0xf128, 0xff, 0x2ad, 0x2, 0x4, 0x2, 0xb, 0x1, 0x4, 0x85, 0x3, 0x5, 0x6, 0x0, 0x80000001, 0x10001, 0x7, 0x2, 0x0, 0x0, 0x1ff, 0x7, 0x3, 0x8, 0x2, 0x7, 0x80000000, 0x4, 0x8, 0x8, 0xa991, 0x1, 0x5, 0xf, 0xe, 0x4, 0x4, 0x7, 0x3cc, 0x4, 0x6, 0x7, 0xffff2881, 0x1, 0x3ff, 0xb8000000, 0xfffff3d5, 0x6, 0xdd9f, 0x6, 0x957b, 0x7, 0x5a2, 0x7, 0x21, 0x0, 0x7, 0x3ff, 0x13, 0x40, 0xd624, 0x1, 0xfffffff9, 0x2, 0x0, 0x3, 0x2, 0x70a, 0x5, 0x9, 0xffffff51, 0x9, 0xd, 0x8, 0x1, 0xd9, 0x8, 0xf, 0x18, 0xffffffff, 0xf822, 0xf, 0x4, 0x7, 0x3, 0x8, 0x7fff, 0x80, 0x400, 0x7ff, 0x52e9, 0xfffffff9, 0x6, 0x9, 0x1, 0x10000, 0x5, 0x3, 0x5, 0x8, 0x59, 0x0, 0x0, 0x9, 0x7, 0x80, 0x5, 0x5, 0x3, 0xa, 0x1, 0x6, 0x7, 0xf4bd, 0x0, 0x5d47, 0x38, 0x5, 0x8, 0x0, 0x1, 0xfffffffc, 0x100, 0x7, 0x2, 0x10000, 0x6, 0x343f, 0x4, 0x3, 0x30e, 0x7, 0x7, 0x3, 0x3, 0x10001, 0x4, 0x49, 0x0, 0x9, 0xf172, 0xe8, 0xb821, 0x8, 0x7fffffff, 0x3, 0xa46, 0x0, 0x20000000, 0x200, 0x9, 0x8, 0xd, 0x1, 0x4, 0xfffffffc, 0x9, 0x0, 0xa9, 0x1, 0x5, 0x6, 0x6, 0x2, 0x80000001, 0xb6f6, 0x5, 0xc2, 0x9, 0xb, 0x5, 0x81, 0xfffffffd, 0x8, 0x7f, 0x7db, 0x5, 0x7, 0x2, 0x5, 0x1, 0x1, 0xffffffff, 0x6, 0x6, 0x0, 0x1, 0x101, 0x2, 0x4, 0xfffffffe, 0x2, 0x9, 0x8, 0x6, 0xffff, 0x4, 0xe69e, 0x0, 0x3, 0x7, 0xfffffffe, 0xea, 0x2, 0x0, 0xe]}) write(r1, &(0x7f0000000000)="50000000100001040100000000000002000000009618000000000000000000000c0003006d6163736563300008000500020000001c0012800b0001006d616373656300000887028005000f0002d75000", 0x50) 55.112796869s ago: executing program 34 (id=1193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="6802000000050104000000000000000003000006540201000200000000020000800904000100160073797a31000000000000000000000012000000000000000000000000941074d2f18faf184d23b6cf52e8c676c218b39bb8335a19d528faa003da54c821603e499a3e11b3efe2be7aafa9680b20a26883ac0a4b86060002000000ff0300000300030002000000030000000200280003000000030000000700f8ff0100000001000000409d02000100000008"], 0x268}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$key(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x8810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000740)={0x4, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000840), 0x2c8, 0x0) syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000340)={0x2, 0x0, @ioapic={0x0, 0x0, 0xfffffffe, 0x7fffffff, 0x0, [{0xfc}, {0xff, 0x0, 0x10}, {0x0, 0x0, 0x3, '\x00', 0x3}, {0xbd, 0x0, 0x20}, {0x0, 0xdc, 0x0, '\x00', 0xfd}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x8}, {0x2, 0x1, 0x0, '\x00', 0x80}, {0x0, 0x0, 0x9}, {0x0, 0xf, 0x0, '\x00', 0xff}, {0x0, 0x89, 0x0, '\x00', 0xff}, {0xff, 0x0, 0x40, '\x00', 0xff}, {0x70, 0x6, 0x5}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x4}, {0x9, 0x0, 0x0, '\x00', 0xfe}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, '\x00', 0xbb}, {0x20}, {0x53, 0x2}, {0x4, 0x4f, 0x0, '\x00', 0x6}]}}) r4 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000280)=ANY=[@ANYBLOB="12010003000000103d10000140000101020101300209f9ffff8851c054f883aa007e36ffffffffff63512328dfe5000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920007f04000a2525000400008f0a0000000300000000"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0xffffffffffffff02, 0xa242) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000200)=0x3) dup3(r5, r6, 0x0) syz_usb_control_io$uac3(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0003020000000203"]}, 0x0) r7 = epoll_create(0x2) epoll_pwait(r7, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) syz_usb_control_io$uac3(r4, &(0x7f0000000240)={0x14, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r4, @ANYRES32=r7, @ANYRES32], 0x0}, 0x0) 48.654111608s ago: executing program 35 (id=1194): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mydev\x00', 0xfa) (async) mount(0x0, &(0x7f0000000080)='./mydev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev/ttyS0\x00', 0x2, 0xc0) ioctl$TIOCSBRK(r0, 0x5427) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newsa={0xf0, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in=@dev={0xac, 0x14, 0x14, 0x42}, @in6=@mcast1, 0x0, 0x4000, 0x4e23, 0x8001, 0x0, 0x20}, {@in=@local, 0x200, 0x32}, @in=@empty, {0x323, 0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x92be}, {0x0, 0x40000, 0x0, 0x3}, {0xfffffffb, 0xfffffbff, 0xca09}, 0x70bd29, 0x3502, 0x2, 0x1, 0x0, 0x10}}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x1123102, 0x0) (async) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r4, &(0x7f00000007c0)=ANY=[], 0xffffff6a) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x40010003, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$uac3(0x3, 0x0, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="00222200000096231306e53f070f0000002a940183"], 0x0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) r6 = open(0x0, 0x10507e, 0xa6) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000002c0)=0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40042, 0x1) syz_ublk_setup_queues(r6, r7, &(0x7f0000000380)={0x0, 0xb828, 0x0, 0x20003, 0x3a6}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x4000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x19a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x400, 0x0, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xab60, 0x2, 0x1, 0xfffffffe}}], 0x1, 0x0, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x28, 0x1e, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 43.137600172s ago: executing program 1 (id=1201): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x1440, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x11, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x4, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0xfc, 0x4}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x99f, &(0x7f0000000440)={{0x12, 0x1, 0x251, 0x9b, 0xcd, 0xf5, 0x40, 0x12fd, 0x1001, 0xdf1f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98d, 0x3, 0x9, 0x8, 0x0, 0x2d, "", [{{0x9, 0x4, 0x73, 0x40, 0x1, 0xf, 0x73, 0xbe, 0x0, [], [{{0x9, 0x5, 0xe, 0x4, 0x3ff, 0xff, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x6}, @generic={0xaf, 0xc, "bf5cb9829ad236a2be073f59fcfff530193a84f20d96deea3a8d08e0bfa09e41155341ddd82e0dea9be09ce2de7cf61bdd32ff46e96081960a46467171116403f386d94fe399302e1285f7b49edbdbd49fe6aeea4481fa39193200060c577147ff5d2e228ade97189c7faa6c2bb3308a2750aefc45aa8a8a38e54e35d14e9dba482940e0ec435234dcc39ae5c6677e7ab5ea2d63f917967c39b1b1ccde41447ab5a78bf987aa613719957f697e"}]}}]}}, {{0x9, 0x4, 0x86, 0x5, 0xd, 0xa6, 0xd7, 0xce, 0x3, [@generic={0xca, 0xf, "cc0bba383553e727b2968b7b1dd9715dac8b607f1f0e7809d5dcfa63f566e90c2f03ea6c89eee8db0c3e988699000d48dba3f9bfbec389df268bbc06b5794d5156d69f95129754b3e1c8d562002c664294c2ecff6293c6a6f0277f9870284feea6ff3af1af1fa5d4e380c430234a30d09ec0b66770c3cc4a3f1b8ea855dd56220b6ea0a3be68bf7a929279a6525a21063e5da40bce6bd69ad3eedcfd9d37d2b891f172f0768fda88b6d63af1a1e240d217a4323b32942e42a3927288b31ade36b7ed6b4b78b80bd8"}], [{{0x9, 0x5, 0x3, 0x10, 0x400, 0x1, 0x7, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2f, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x5}]}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x0, 0x81, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x60, 0x3}, @generic={0xaf, 0x29, "cbcd8c7256de6f6b8370d7e32b9e563689e3048ac6f967b98884fa023969d0acda225b17715431bdc6e2f517f01a82c2b59361aa7688624bb53207b01d8f901a527ce40e83f6b324c81a1ec45d7e6fa68a02fc11b6da88d82fdaae8d7316f3d0edd22db77157aa9f8750dab11ce2697576d833b63682b0f0d34025cd74ca25820f68a3914ddd7ca04eece283ff524ac65771b3e62ad34a249e95e61a06c8c24593ffc595c8aebc9225214ccc1b"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x40, 0x1, 0x62, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x8001}, @generic={0xcf, 0x3, "a5707e72404e36fab1ad12fbe971e48a298b95b24a5ea91021d238ed6bfd45f074f1bd2822ca658d836d18f75a5d7d46cbdd478c7b69164e23e92aa3b8c3be0bde35e2b1a6bd75e87284c838a792730c0f46cb0fd0884524a1571c294fd1ddf2fc581a484f946ff3522b5c0a74f6908f441a4c2008f53260dacd53badab173783e4744098a2e62534b9d75d8916d7533633d73695efa7ca51856e591376f7f8500632ea69a226386d54266584303f218b4e6b32b6546fab4584c1c440c55a1fd92e5c46ca9ccd5ed6831ee2f6c"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x9, 0x8, 0x5}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x7, 0x9, 0x3}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0x47, 0x4, 0x1, [@generic={0x5b, 0x23, "03c2cefb3eafec9e9ca563de42672bcc57af12ddc692e6f4654dcc9373923f49fe98ce3185ff9591ce49c3e8f7b632b641bf0157d7bce3800a32c3804caf03391f1ed4e461e355aac665328e249888bb6e7ff3296440122a2f"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x4}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0xf8, 0xc, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0xdb}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x3e, 0x5, 0x9, [@generic={0xf2, 0x1a, "eaa6cb61eaf1dd53779ff8ff9b624a9af484bcf001d3405c775c0a7575a39e87ef9435fdebfdc6da7bf5717bee19a89d8d9f2862c8d7fe17b2433e8851e57002fbc49d56c793f7dde0aa970d73bc5224aaa5983940d2fa3b827409642e73ba415b370469b1f26c1353c02dc70a33bd5932970dad4941f00cd2cce19b9a3b56efb64763ed48f1ec0b21bf9d8f71fa1b96036183c3c96ffafbe9098750c9bb47b22677e683fd68e0833ece8c46a0b625cf20e81d0a9b0d28f3ff6c9a64415cf2230b69567737eb17462b6c90ef83659cf5ef412642d3a5bebb37efe8d649f068b142f9f4cc0fce4eeb19f236532dd7101c"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x28, 0x6, 0xe}}, {{0x9, 0x5, 0xc, 0x10, 0x3e7, 0xf6, 0x4, 0x7}}, {{0x9, 0x5, 0x6, 0x0, 0x7ff, 0x6, 0xff, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x17d2}, @generic={0x24, 0x9, "94bd721070173c2fbcbe6b7d40fe199957e114bb9d5bceb29e08b303dd3e8e8e2943"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x8, 0x9, 0x9}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0xe, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xf, 0x7}]}}]}}, {{0x9, 0x4, 0xe0, 0x9, 0xa, 0xe, 0xfb, 0xa0, 0xff, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "fead"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xb, 0x9, 0x3, 0x40}, {0x6, 0x24, 0x1a, 0xfff, 0x34}, [@dmm={0x7, 0x24, 0x14, 0x8001, 0xfff7}, @dmm={0x7, 0x24, 0x14, 0x5, 0xe}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x8, 0x40}]}, @hid_hid={0x9, 0x21, 0xffff, 0x6, 0x1, {0x22, 0xbf8}}], [{{0x9, 0x5, 0xa, 0x10, 0x20, 0x9, 0x10, 0x3, [@generic={0xb1, 0xf, "35bd6a098cd16b7e187cc357b8f0b19c2163a25d1e806db5e236373b24cd08ba4969e0e3926085e14c9fd518051a768130cb8cb0c1d20b51084e12427132279557020811d0e315e3e75997ce4177efaa68ff9df0066c379f9cedfc56eb9d0639b96d80e80e56975c7438f74119d29f97221ba7b2c93c69a2903ec6572ebd0ca8a9f00e02182796350224cc24619438440f7ff5a1d96c00d2f7291228cee023abf12286fc40ba448ee08e64b93d8559"}, @generic={0x31, 0x0, "7b82e9719d60087b317ca9e01cc2e0aeb30d8ced2e30dadc41504150fad47e7e132d0936dcca8b4ef6ad64245e2be1"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0xff, 0xa, 0x3c, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfe, 0x8}]}}, {{0x9, 0x5, 0x9, 0xc, 0x20, 0x4, 0x5, 0x3}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0xbe, 0x5, 0xa, [@generic={0x5, 0xa, "ece5a2"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x8, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x9e}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x8, 0x6}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0xfc, 0xc, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x86}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2}]}}, {{0x9, 0x5, 0xb, 0xc, 0x200, 0x9, 0x10, 0x57, [@generic={0xc1, 0x23, "667d7a9030c61a3724369d52316e043259866484161070ae2724f4948c6ea7271e081048b684b1b1a9bb33c87f99e2b0cb18b0bc4d28b20234f20a5415e8daaa800d54a0796913f1a4c09e387c240acf25e5a0aabf04c31c2437fe1eead1e14936d20dfe9d8b240299c8e8dd963e63c738ddd9b182804599ec539906f7641442f61e0e7c2a62f6da1d9bbddc6560eb838a0cb7cacc056c83894794e504a2474199e373c991d3cc5463340d56c15a731373873656d92d8c94a1386f5cb1dbb6"}, @generic={0xed, 0x24, "fa4675da32ae7b61de1cbd0596afae4e145c2dc387f3f57441b1e1e3247e56737699d6047e7896f3613ed89314c17110bfdff9c7ef02e26b3a6cccf2db549a281286fac49dc2923ae03b53b6f5131a38b7972db1cfceda4e20f539351891a3fd9fdf020135e4cdbea1fc9c862376c0bb8e7c35092975e4bd40dcadd756aba334f02e4196e87784016f3b6dbfaf4bdb692c24a498855db7bdae4ee9b660e19968b2673a42df92dc7fb09c5e4eaa4020456d3b1b8b1e0e46f41e83bc4fb3cf4b05da6e2b42c1b13eacedd41aac223948e3c274714e189167865bb771eba1dfd6162c12bed89c91906e10c2c5"}]}}, {{0x9, 0x5, 0x8, 0xa415923e0ba4e180, 0x20, 0x5, 0xb9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x8}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x1, 0xa, 0x5, [@generic={0xdf, 0x23, "6aed9d1e0344078bea4d16e95cd3e609a8dd8507451c9699c2b4e9b00e4d6214fe9a1f7d2eeaf3225688e470b042c8425319c516f55ba45d253c0c8d8c868b1441a38dca8df3fdbde39e2fc5757847aa1acff2d667edb5fdef7665128e62c2f6c9f461e91635b36dcd71524790d75bcecf4d3a039db8aca7052ff1d2ef286ee30ab7f1f7c03634789ddc824d39cd798057a98ce92dfa29ba258b4c39878312aacb3c9b37ac40581baaa6a3f33b6410dcc36e72d9a5e3cfc3b40cfa1942066d2db0effced28cfa8561f81fed5cff8a2e11e7e3bcce710925550fc916cb9"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xf, 0x1}]}}]}}]}}]}}, &(0x7f0000001240)={0xa, &(0x7f0000000e00)={0xa, 0x6, 0x310, 0x2, 0x3, 0x1, 0x8, 0x40}, 0x4b, &(0x7f0000000e40)={0x5, 0xf, 0x4b, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xa1, 0x2, 0x101}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "6d854e7b16230ec7365ae5d9117dc742"}, @ssp_cap={0x14, 0x10, 0xa, 0x40, 0x2, 0x7, 0xf0f, 0x5, [0x2430316a0993d1df, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0xe4, "cf1dc5ea7f4e24319759ee7432d36d0e"}]}, 0x7, [{0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x449}}, {0xc9, &(0x7f0000000f00)=@string={0xc9, 0x3, "fc249ab9d90501f5785d2c1b980882f9498595f7b9fc430f555a76a7f06f9fee227503327904d55267545d918b3cf7e41a70e41e5b256a86d843fb3a63935d2b28a001bcb58e98df54e02b52877531a035a275b42ebd21d493796c746a86a0e1cf35e541d837064f1553d726006790feed6e85afc938913236069252cd23e037952ab4aaf89374da9bc2373666071e9dfb393680d9272d9656361b47e2613b795645c76ea0221bd0d49d8130facf465797b97e4910be87ad3e0f0d2ab869b442110b3de6d02627"}}, {0xb4, &(0x7f0000001000)=@string={0xb4, 0x3, "e5c2f2b44fefa854675ffababc6a0cd1122be421716cd372c053e3e01f33efd42ca978b30237a497650c29537706da39723be6b80225d12bf128530586ebc3247d30ebb212ead998a94f6b1484db1f22e48c6a6c107e3903c42a4e8b9f2db544763ea9a38bdb22aa37a8f5a7418fc2419b432deea451a45cbb38a8b8c0a6bd7c920d1f465823cabce241dbd267d7f3d51dc311684d76fb905ed560140ff78a4938d8f87986b305a9f5e4321f911bc104d7ef"}}, {0x8e, &(0x7f00000010c0)=@string={0x8e, 0x3, "dbcf4b3766022ea873704c5fac1fa5bd0afbf425e0949f311b0081e109a2c4c714cb978f9444f20310575520ae99819d295e47f9ea57e1ed4f9b08cbe638aa81fd9e5f4f84656ac20880fe0c5b1d966936c80e583895f5c24c30090156d85210d59dd862f8c6f97cf6d9053a4551813aeb136e4f3ee9a67a368e16b6a008d1265eb7fc58f4c0fc5556509649"}}, {0x5, &(0x7f0000001180)=@string={0x5, 0x3, "3c6eef"}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x2043}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x42f}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0022180000000501150025bf0904a101090192008c0508950129309102c0"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000400), 0x0, 0x0) 43.133148453s ago: executing program 36 (id=1195): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000001c40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x54, [0x39, 0x2, 0x4000401, 0x8, 0xe, 0x0, 0x10001, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x0, 0xfffffff6, 0x0, 0x8, 0xb7b6, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x4, 0x0, 0x0, 0xfffffff9, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x9ffffffc, 0x3, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0xffffffff, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0x1a0fadaf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x6, 0x80, 0x81, 0x967c, 0x0, 0x0, 0xfffffffc, 0x1, 0x2, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x881, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x8, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0x0, 0x47fff, 0x0, 0x0, 0xacc1, 0x3, 0x0, 0xd, 0x3, 0x0, 0x0, 0xfffffffd, 0xfffffffc, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x0, 0xfffffffe, 0x3], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x5, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0xfffffffb, 0x0, 0x0, 0x4, 0xffffffff, 0x1000000, 0x9, 0x5, 0x8, 0x2, 0x10, 0x5, 0xfffffffe, 0xfff, 0x0, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x2, 0x0, 0x20, 0xffffe]}, 0x45c) timer_create(0x3, &(0x7f0000000000)={0x0, 0x17, 0x1}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x236bd4336e4642df, &(0x7f0000000080)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) io_setup(0x82, &(0x7f0000000180)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x1b8) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x1, r3, &(0x7f0000000280)='N-', 0x2, 0x4}]) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xf) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x241, 0x14, 0x1, 0x2048, 0x8}, 0x30, 0x1) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x12, r4, 0xa968a000) ioctl$UI_DEV_CREATE(r0, 0x5501) 42.504843007s ago: executing program 1 (id=1203): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0xe5e4, 0x0, 0x9}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x4000000, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xeffffffe, 0x6, 0x0, 0x0, 0x9b05, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x7, 0x5, 0x1, 0x0, 0xef80, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc33, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x10, 0xfffffffe, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x567, 0x4, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0x9, 0x3, 0x0, 0x14, 0x1, 0x0, 0x400a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1d, 0x400, 0x0, 0x8, 0x4000002, 0x0, 0x100000], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0xaad, 0x10000, 0x80000, 0x0, 0x8, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x5, 0x0, 0x1]}, 0x45c) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015ffe0000000ffffffff0a2000000002000000000000240009801c000010000000001400"], 0x40}], 0x1}, 0x0) 33.533455443s ago: executing program 1 (id=1204): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000040)="18", 0x10, 0x0, &(0x7f0000000080)={0x11, 0xe, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) mount$incfs(&(0x7f0000003d00)='./file0\x00', &(0x7f0000003d40)='.\x00', &(0x7f0000003d80), 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB='rlog_pages=18447370955']) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000100)=0x1, 0x4) 15.673404979s ago: executing program 1 (id=1205): io_setup(0x7, &(0x7f0000000080)=0x0) io_pgetevents(r0, 0x1, 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000680), &(0x7f0000000200)={&(0x7f00000001c0)={[0x7ffffffd]}, 0xfffffffffffffe6e}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r1) (async) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000040)=0x7ffffffd, 0x4) getpeername$unix(r1, &(0x7f0000000540), &(0x7f00000005c0)=0x6e) (async) write$binfmt_script(r1, 0x0, 0x6f4000) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async) timer_create(0x0, &(0x7f0000000640)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000900)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0x8000, 0x3}) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async, rerun: 64) timer_settime(r3, 0x1, &(0x7f0000000700)={{0x77359400}}, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) (async, rerun: 32) fcntl$lock(r2, 0x6, &(0x7f0000000740)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000780)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r2, 0x26, &(0x7f00000007c0)={0x1, 0x1, 0x73f8, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000800)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000840)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000880), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000008c0)=0x1, 0x4) (async, rerun: 32) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) (async, rerun: 32) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000240)='\x00', 0x4800, &(0x7f0000000280)={@align=0x2, {0x12c0, 0x7, 0x5, 0x1}}, 0xa13, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x1000}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r7, 0x8916, &(0x7f00000003c0)="76657468303a30000000000000000000020000000a") ioctl(r7, 0x8914, &(0x7f0000000400)='veth0:0\x00') (async) r8 = eventfd2(0xadd, 0x1) io_submit(r0, 0x2, &(0x7f0000000500)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x4, 0x2, r1, &(0x7f0000000140)="77706188acdde2e3d06ea2ef1d07f883a852c5d18ed3fd92c89307b64d2f3248117016574901a605ff8f4fd007a2ce", 0x2f, 0x3, 0x0, 0x3, r6}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0xb, r7, &(0x7f0000000440)="6b91c4ab57de9346f478c630786e7fe222cf64d69ce0c60f88fcce4f1f4606b88e27654fb0f04809569de399f526d2ddc0a868290971b83b62897b0c310590748195763bcae419f8342148a24415ce7880", 0x51, 0x5, 0x0, 0x6, r8}]) 0s ago: executing program 37 (id=1205): io_setup(0x7, &(0x7f0000000080)=0x0) io_pgetevents(r0, 0x1, 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000680), &(0x7f0000000200)={&(0x7f00000001c0)={[0x7ffffffd]}, 0xfffffffffffffe6e}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r1) (async) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000040)=0x7ffffffd, 0x4) getpeername$unix(r1, &(0x7f0000000540), &(0x7f00000005c0)=0x6e) (async) write$binfmt_script(r1, 0x0, 0x6f4000) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async) timer_create(0x0, &(0x7f0000000640)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000900)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0x8000, 0x3}) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async, rerun: 64) timer_settime(r3, 0x1, &(0x7f0000000700)={{0x77359400}}, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) (async, rerun: 32) fcntl$lock(r2, 0x6, &(0x7f0000000740)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000780)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r2, 0x26, &(0x7f00000007c0)={0x1, 0x1, 0x73f8, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000800)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000840)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000880), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000008c0)=0x1, 0x4) (async, rerun: 32) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) (async, rerun: 32) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000240)='\x00', 0x4800, &(0x7f0000000280)={@align=0x2, {0x12c0, 0x7, 0x5, 0x1}}, 0xa13, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x1000}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r7, 0x8916, &(0x7f00000003c0)="76657468303a30000000000000000000020000000a") ioctl(r7, 0x8914, &(0x7f0000000400)='veth0:0\x00') (async) r8 = eventfd2(0xadd, 0x1) io_submit(r0, 0x2, &(0x7f0000000500)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x4, 0x2, r1, &(0x7f0000000140)="77706188acdde2e3d06ea2ef1d07f883a852c5d18ed3fd92c89307b64d2f3248117016574901a605ff8f4fd007a2ce", 0x2f, 0x3, 0x0, 0x3, r6}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0xb, r7, &(0x7f0000000440)="6b91c4ab57de9346f478c630786e7fe222cf64d69ce0c60f88fcce4f1f4606b88e27654fb0f04809569de399f526d2ddc0a868290971b83b62897b0c310590748195763bcae419f8342148a24415ce7880", 0x51, 0x5, 0x0, 0x6, r8}]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.59' (ED25519) to the list of known hosts. [ 22.091134][ T36] audit: type=1400 audit(1793973943.559:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.114083][ T36] audit: type=1400 audit(1793973943.589:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.114949][ T287] cgroup: Unknown subsys name 'net' [ 22.141815][ T36] audit: type=1400 audit(1793973943.619:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.141941][ T287] cgroup: Unknown subsys name 'devices' [ 22.283875][ T287] cgroup: Unknown subsys name 'hugetlb' [ 22.289473][ T287] cgroup: Unknown subsys name 'rlimit' [ 22.401886][ T36] audit: type=1400 audit(1793973943.869:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.425296][ T36] audit: type=1400 audit(1793973943.869:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.433123][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.450179][ T36] audit: type=1400 audit(1793973943.879:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.482320][ T36] audit: type=1400 audit(1793973943.939:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.507721][ T36] audit: type=1400 audit(1793973943.939:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.539275][ T36] audit: type=1400 audit(1793973944.009:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.564813][ T36] audit: type=1400 audit(1793973944.009:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.565142][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.270552][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.282370][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.289469][ T294] bridge_slave_0: entered allmulticast mode [ 23.295876][ T294] bridge_slave_0: entered promiscuous mode [ 23.302452][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.309484][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.316572][ T294] bridge_slave_1: entered allmulticast mode [ 23.324890][ T294] bridge_slave_1: entered promiscuous mode [ 23.461431][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.468495][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.475602][ T298] bridge_slave_0: entered allmulticast mode [ 23.481727][ T298] bridge_slave_0: entered promiscuous mode [ 23.488142][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.495202][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.502266][ T298] bridge_slave_1: entered allmulticast mode [ 23.508407][ T298] bridge_slave_1: entered promiscuous mode [ 23.514417][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.521450][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.528588][ T299] bridge_slave_0: entered allmulticast mode [ 23.534894][ T299] bridge_slave_0: entered promiscuous mode [ 23.544381][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.551405][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.558478][ T299] bridge_slave_1: entered allmulticast mode [ 23.564660][ T299] bridge_slave_1: entered promiscuous mode [ 23.589688][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.596750][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.603805][ T300] bridge_slave_0: entered allmulticast mode [ 23.609920][ T300] bridge_slave_0: entered promiscuous mode [ 23.618909][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.625994][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.633055][ T300] bridge_slave_1: entered allmulticast mode [ 23.639173][ T300] bridge_slave_1: entered promiscuous mode [ 23.719914][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.726992][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.734290][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.741305][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.788533][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.795591][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.802876][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.809887][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.827743][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.834785][ T299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.842080][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.849102][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.867192][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.874239][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.881563][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.888588][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.897709][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.905140][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.912657][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.919805][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.926983][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.934298][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.941469][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.952222][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.959249][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.999733][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.006792][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.014722][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.021732][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.032472][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.039499][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.051770][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.058813][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.085267][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.092330][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.100701][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.107726][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.134528][ T299] veth0_vlan: entered promiscuous mode [ 24.142454][ T294] veth0_vlan: entered promiscuous mode [ 24.157941][ T299] veth1_macvtap: entered promiscuous mode [ 24.167546][ T300] veth0_vlan: entered promiscuous mode [ 24.180614][ T294] veth1_macvtap: entered promiscuous mode [ 24.206710][ T300] veth1_macvtap: entered promiscuous mode [ 24.216496][ T299] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.237217][ T298] veth0_vlan: entered promiscuous mode [ 24.260254][ T298] veth1_macvtap: entered promiscuous mode [ 24.270442][ T313] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.342346][ T320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.350905][ T320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.572101][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.723546][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 24.731921][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.742166][ T45] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 24.754406][ T45] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 24.763598][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.771598][ T45] usb 4-1: Product: syz [ 24.775843][ T45] usb 4-1: Manufacturer: syz [ 24.780428][ T45] usb 4-1: SerialNumber: syz [ 24.892069][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 24.990706][ T45] usb 4-1: Can't get UAC3 power state for id 10 [ 24.997835][ T45] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 25.007001][ T45] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 25.026189][ T45] usb 4-1: USB disconnect, device number 2 [ 25.046670][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 25.063087][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 25.072334][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.082549][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 25.091575][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.103376][ T9] usb 2-1: Found UVC 1.00 device (046d:0825) [ 25.110598][ T9] usb 2-1: No streaming interface found for terminal 2. [ 25.303602][ T10] usb 2-1: USB disconnect, device number 2 [ 25.432265][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.563519][ T348] kvm: kvm [347]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 25.574653][ T348] kvm: kvm [347]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 25.582053][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 25.593341][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 25.603018][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 25.623147][ T9] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 25.642243][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.650256][ T9] usb 3-1: Product: syz [ 25.655387][ T9] usb 3-1: Manufacturer: syz [ 25.660082][ T9] usb 3-1: SerialNumber: syz [ 26.001586][ T375] kvm: kvm [374]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x1 [ 26.089872][ T9] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 26.098574][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 26.114172][ T9] usb 3-1: USB disconnect, device number 2 [ 26.621973][ T397] @0Ù: renamed from bond_slave_1 [ 26.642299][ T45] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 26.793083][ T45] usb 4-1: not running at top speed; connect to a high speed hub [ 26.801516][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.811639][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 26.820881][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.833197][ T45] usb 4-1: Found UVC 1.00 device (046d:0825) [ 26.872055][ T301] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.022063][ T301] usb 3-1: Using ep0 maxpacket: 16 [ 27.028242][ T301] usb 3-1: config 2 has an invalid interface number: 122 but max is 0 [ 27.036491][ T301] usb 3-1: config 2 has an invalid descriptor of length 144, skipping remainder of the config [ 27.046878][ T301] usb 3-1: config 2 has no interface number 0 [ 27.053079][ T301] usb 3-1: config 2 interface 122 has no altsetting 0 [ 27.059883][ T45] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 27.069400][ T45] uvcvideo 4-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 27.078270][ T45] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 27.086939][ T45] usb 4-1: USB disconnect, device number 3 [ 27.093913][ T301] usb 3-1: New USB device found, idVendor=c653, idProduct=9002, bcdDevice=f0.a5 [ 27.102054][ T340] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.103595][ T301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.118403][ T301] usb 3-1: Product: á°‰ [ 27.122597][ T301] usb 3-1: Manufacturer: Ñ [ 27.127088][ T301] usb 3-1: SerialNumber: 腗羳ଌ䱰ኣ鲴ゆ⊘ꈼ퀒轛嫈䆄íªì²…鿻쀵뼢醦劊ࡽ㡤晧äºåš™á²è«•ï®ºáŠ®ê‚§î’”鑒ⲃ贠ᦄ薜뙇难י뽱钑煎à«ä†²îˆì©ƒé›–㣼懻 [ 27.262049][ T340] usb 1-1: Using ep0 maxpacket: 16 [ 27.268587][ T340] usb 1-1: unable to get BOS descriptor or descriptor too short [ 27.276941][ T340] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 27.289371][ T340] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 27.298455][ T340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.306460][ T340] usb 1-1: Product: syz [ 27.310631][ T340] usb 1-1: Manufacturer: syz [ 27.315250][ T340] usb 1-1: SerialNumber: syz [ 27.350251][ T301] usb 3-1: USB disconnect, device number 3 [ 27.554197][ T36] kauditd_printk_skb: 117 callbacks suppressed [ 27.554236][ T36] audit: type=1400 audit(1793973949.029:191): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 27.723933][ T340] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 27.732732][ T340] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 27.746750][ T340] usb 1-1: USB disconnect, device number 2 [ 27.761931][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.920676][ T36] audit: type=1400 audit(1793973949.389:192): avc: denied { mount } for pid=439 comm="syz.1.49" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 28.122076][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 28.152095][ T341] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 28.283109][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 28.293966][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 28.305164][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 28.318624][ T341] usb 2-1: not running at top speed; connect to a high speed hub [ 28.326921][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.336029][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 28.344040][ T9] usb 3-1: SerialNumber: syz [ 28.348692][ T341] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.359058][ T341] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 28.368645][ T341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.370403][ T438] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 28.383357][ T341] usb 2-1: Found UVC 1.00 device (046d:0825) [ 28.383898][ T438] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 28.591592][ T341] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 28.602478][ T341] uvcvideo 2-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 28.611320][ T438] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 28.618501][ T341] uvcvideo 2-1:1.1: Failed to initialize the device (-71). [ 28.622190][ T438] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 28.627507][ T341] usb 2-1: USB disconnect, device number 3 [ 28.782067][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 28.912053][ T10] usb 4-1: device descriptor read/64, error -71 [ 29.041601][ T9] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 29.080891][ T36] audit: type=1400 audit(1793973950.549:193): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 29.126581][ T36] audit: type=1400 audit(1793973950.559:194): avc: denied { read } for pid=150 comm="dhcpcd" name="n15" dev="tmpfs" ino=631 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.162085][ T10] usb 4-1: device descriptor read/64, error -71 [ 29.176606][ T36] audit: type=1400 audit(1793973950.559:195): avc: denied { open } for pid=150 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=631 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.210784][ T36] audit: type=1400 audit(1793973950.559:196): avc: denied { getattr } for pid=150 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=631 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.233941][ T36] audit: type=1400 audit(1793973950.659:197): avc: denied { create } for pid=457 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.257027][ T36] audit: type=1400 audit(1793973950.659:198): avc: denied { write } for pid=457 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.usb0.link" dev="tmpfs" ino=634 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.284714][ T36] audit: type=1400 audit(1793973950.659:199): avc: denied { append } for pid=457 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" dev="tmpfs" ino=634 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.308769][ T36] audit: type=1400 audit(1793973950.699:200): avc: denied { unlink } for pid=478 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=634 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.412499][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 29.432099][ T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 29.451833][ T9] usb 3-1: USB disconnect, device number 4 [ 29.458017][ T9] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 29.542084][ T10] usb 4-1: device descriptor read/64, error -71 [ 29.582371][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 29.591368][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 29.599984][ T45] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 29.612608][ T45] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 29.621723][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.629886][ T45] usb 2-1: Product: syz [ 29.634236][ T45] usb 2-1: Manufacturer: syz [ 29.640615][ T45] usb 2-1: SerialNumber: syz [ 29.782063][ T10] usb 4-1: device descriptor read/64, error -71 [ 29.892372][ T10] usb usb4-port1: attempt power cycle [ 30.051827][ T45] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 30.060322][ T45] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 30.074979][ T45] usb 2-1: USB disconnect, device number 4 [ 30.195131][ T535] netlink: 124 bytes leftover after parsing attributes in process `syz.0.64'. [ 30.232103][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 30.252987][ T10] usb 4-1: device descriptor read/8, error -71 [ 30.383055][ T10] usb 4-1: device descriptor read/8, error -71 [ 30.482067][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 30.622107][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 30.632860][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 30.641258][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.651675][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 30.663421][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.671772][ T10] usb 4-1: device descriptor read/8, error -71 [ 30.679091][ T9] usb 1-1: Found UVC 1.00 device (046d:0825) [ 30.686981][ T9] usb 1-1: No streaming interface found for terminal 2. [ 30.803259][ T10] usb 4-1: device descriptor read/8, error -71 [ 30.880254][ T9] usb 1-1: USB disconnect, device number 3 [ 30.912159][ T10] usb usb4-port1: unable to enumerate USB device [ 30.960041][ T556] mmap: syz.2.73 (556) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 30.960614][ T558] Zero length message leads to an empty skb [ 31.242081][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 31.392086][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 31.399506][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 31.408097][ T45] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 31.420591][ T45] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 31.429757][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.437824][ T45] usb 3-1: Product: syz [ 31.442067][ T45] usb 3-1: Manufacturer: syz [ 31.446695][ T45] usb 3-1: SerialNumber: syz [ 31.859081][ T45] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 31.867397][ T45] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 31.880586][ T45] usb 3-1: USB disconnect, device number 5 [ 31.942083][ T9] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 32.103107][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 32.114159][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 32.125004][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 32.135956][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 32.148098][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.157187][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.165193][ T9] usb 4-1: Product: syz [ 32.169455][ T9] usb 4-1: Manufacturer: syz [ 32.174075][ T9] usb 4-1: SerialNumber: syz [ 32.179727][ T586] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 32.187541][ T9] cdc_mbim 4-1:1.0: skipping garbage [ 32.388365][ T586] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 32.395774][ T586] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 32.532081][ T45] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 32.601987][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 32.610315][ T36] audit: type=1400 audit(1793973954.069:226): avc: denied { append } for pid=604 comm="syz.2.93" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 32.713210][ T607] FAULT_INJECTION: forcing a failure. [ 32.713210][ T607] name failslab, interval 1, probability 0, space 0, times 1 [ 32.725914][ T607] CPU: 0 UID: 0 PID: 607 Comm: syz.1.94 Not tainted syzkaller #0 7b276d656437cde817a152a655ee87c3d6174d21 [ 32.725942][ T607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 32.725960][ T607] Call Trace: [ 32.725967][ T607] [ 32.725974][ T607] __dump_stack+0x21/0x30 [ 32.725995][ T607] dump_stack_lvl+0x140/0x1c0 [ 32.726007][ T607] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.726017][ T607] ? is_bpf_text_address+0x17b/0x1a0 [ 32.726031][ T607] dump_stack+0x19/0x20 [ 32.726039][ T607] should_fail_ex+0x3c2/0x510 [ 32.726053][ T607] should_failslab+0xac/0x100 [ 32.726071][ T607] kmem_cache_alloc_noprof+0x42/0x410 [ 32.726093][ T607] ? jbd2__journal_start+0x16d/0x860 [ 32.726109][ T607] jbd2__journal_start+0x16d/0x860 [ 32.726123][ T607] __ext4_journal_start_sb+0x111/0x3f0 [ 32.726146][ T607] ext4_file_write_iter+0xe7a/0x15c0 [ 32.726168][ T607] ? __cfi_ext4_file_write_iter+0x10/0x10 [ 32.726185][ T607] ? proc_fail_nth_write+0x184/0x220 [ 32.726201][ T607] vfs_write+0x765/0xfd0 [ 32.726221][ T607] ? __cfi_vfs_write+0x10/0x10 [ 32.726243][ T607] ? __cfi_mutex_lock+0x10/0x10 [ 32.726265][ T607] ksys_write+0x145/0x260 [ 32.726280][ T607] ? __cfi_ksys_write+0x10/0x10 [ 32.726294][ T607] ? __se_sys_chdir+0x1ad/0x280 [ 32.726312][ T607] ? __kasan_check_read+0x15/0x20 [ 32.726336][ T607] __x64_sys_write+0x7f/0x90 [ 32.726352][ T607] x64_sys_call+0x271c/0x2ee0 [ 32.726370][ T607] do_syscall_64+0x57/0xf0 [ 32.726382][ T607] ? clear_bhb_loop+0x50/0xa0 [ 32.726396][ T607] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.726409][ T607] RIP: 0033:0x7f9776d9fb19 [ 32.726429][ T607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.726443][ T607] RSP: 002b:00007f9777ba3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 32.726463][ T607] RAX: ffffffffffffffda RBX: 00007f9777025fa0 RCX: 00007f9776d9fb19 [ 32.726476][ T607] RDX: 00000000ffffffd7 RSI: 0000200000001000 RDI: 0000000000000003 [ 32.726489][ T607] RBP: 00007f9777ba3090 R08: 0000000000000000 R09: 0000000000000000 [ 32.726500][ T607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.726511][ T607] R13: 00007f9777026038 R14: 00007f9777025fa0 R15: 00007fffafd07b18 [ 32.726526][ T607] [ 32.726630][ T45] usb 1-1: not running at top speed; connect to a high speed hub [ 32.965724][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.975866][ T45] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 32.984911][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.994647][ T45] usb 1-1: Found UVC 1.00 device (046d:0825) [ 33.001540][ T45] usb 1-1: No streaming interface found for terminal 2. [ 33.015132][ T586] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 33.022522][ T586] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 33.029869][ T9] cdc_mbim 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 33.037364][ T9] cdc_mbim 4-1:1.0: setting rx_max = 2048 [ 33.168209][ T36] audit: type=1400 audit(1793973954.639:227): avc: denied { unmount } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 33.177738][ T611] ./dev/sda: Can't open blockdev [ 33.188140][ T36] audit: type=1400 audit(1793973954.649:228): avc: denied { write } for pid=610 comm="syz.2.96" name="route" dev="proc" ino=4026532526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 33.204337][ T611] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.215998][ T36] audit: type=1400 audit(1793973954.649:229): avc: denied { mounton } for pid=610 comm="syz.2.96" path="/17/dev/sda1" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.226933][ T341] usb 1-1: USB disconnect, device number 4 [ 33.227316][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 33.253126][ T36] audit: type=1400 audit(1793973954.679:230): avc: denied { mounton } for pid=610 comm="syz.2.96" path="/17/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 33.295372][ T36] audit: type=1400 audit(1793973954.739:231): avc: denied { create } for pid=585 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 33.314735][ T36] audit: type=1400 audit(1793973954.749:232): avc: denied { getopt } for pid=610 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.348874][ T586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.359256][ T586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.413946][ T9] cdc_mbim 4-1:1.0: setting tx_max = 28 [ 33.421783][ T9] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 33.427831][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 33.433727][ T9] wwan wwan0: port wwan0mbim0 attached [ 33.440274][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 33.448496][ T9] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, e2:ad:78:90:4d:af [ 33.459939][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 33.472246][ T9] usb 4-1: USB disconnect, device number 8 [ 33.478917][ T9] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 33.489107][ T10] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 33.498745][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.506811][ T10] usb 2-1: Product: syz [ 33.510963][ T10] usb 2-1: Manufacturer: syz [ 33.515571][ T10] usb 2-1: SerialNumber: syz [ 33.522986][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 33.925090][ T10] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 33.934549][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 33.949556][ T10] usb 2-1: USB disconnect, device number 5 [ 34.122081][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 34.230202][ T651] FAULT_INJECTION: forcing a failure. [ 34.230202][ T651] name failslab, interval 1, probability 0, space 0, times 0 [ 34.242880][ T651] CPU: 0 UID: 0 PID: 651 Comm: syz.2.112 Not tainted syzkaller #0 7b276d656437cde817a152a655ee87c3d6174d21 [ 34.242898][ T651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 34.242906][ T651] Call Trace: [ 34.242910][ T651] [ 34.242914][ T651] __dump_stack+0x21/0x30 [ 34.242931][ T651] dump_stack_lvl+0x140/0x1c0 [ 34.242940][ T651] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.242950][ T651] dump_stack+0x19/0x20 [ 34.242959][ T651] should_fail_ex+0x3c2/0x510 [ 34.242970][ T651] should_failslab+0xac/0x100 [ 34.242981][ T651] __kmalloc_cache_noprof+0x41/0x470 [ 34.242996][ T651] ? __x64_sys_write+0x7f/0x90 [ 34.243005][ T651] ? x64_sys_call+0x271c/0x2ee0 [ 34.243016][ T651] ? __iomap_dio_rw+0x2a6/0x1ba0 [ 34.243029][ T651] __iomap_dio_rw+0x2a6/0x1ba0 [ 34.243043][ T651] ? __cfi___iomap_dio_rw+0x10/0x10 [ 34.243064][ T651] ? jbd2_journal_stop+0x81f/0xc20 [ 34.243075][ T651] ? __cfi_jbd2_journal_stop+0x10/0x10 [ 34.243085][ T651] ? __cfi_ext4_orphan_add+0x10/0x10 [ 34.243098][ T651] iomap_dio_rw+0x45/0xa0 [ 34.243111][ T651] ext4_file_write_iter+0xf23/0x15c0 [ 34.243123][ T651] ? __cfi_ext4_file_write_iter+0x10/0x10 [ 34.243133][ T651] ? proc_fail_nth_write+0x184/0x220 [ 34.243147][ T651] vfs_write+0x765/0xfd0 [ 34.243162][ T651] ? __cfi_vfs_write+0x10/0x10 [ 34.243180][ T651] ? __cfi_mutex_lock+0x10/0x10 [ 34.243194][ T651] ksys_write+0x145/0x260 [ 34.243203][ T651] ? __cfi_ksys_write+0x10/0x10 [ 34.243211][ T651] ? __se_sys_chdir+0x1ad/0x280 [ 34.243222][ T651] ? __kasan_check_read+0x15/0x20 [ 34.243236][ T651] __x64_sys_write+0x7f/0x90 [ 34.243245][ T651] x64_sys_call+0x271c/0x2ee0 [ 34.243256][ T651] do_syscall_64+0x57/0xf0 [ 34.243266][ T651] ? clear_bhb_loop+0x50/0xa0 [ 34.243280][ T651] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.243293][ T651] RIP: 0033:0x7f4b5399fb19 [ 34.243302][ T651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.243311][ T651] RSP: 002b:00007f4b548d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 34.243323][ T651] RAX: ffffffffffffffda RBX: 00007f4b53c25fa0 RCX: 00007f4b5399fb19 [ 34.243330][ T651] RDX: 00000000ffffffd7 RSI: 0000200000001000 RDI: 0000000000000003 [ 34.243337][ T651] RBP: 00007f4b548d4090 R08: 0000000000000000 R09: 0000000000000000 [ 34.243344][ T651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.243350][ T651] R13: 00007f4b53c26038 R14: 00007f4b53c25fa0 R15: 00007ffc55775b38 [ 34.243359][ T651] [ 34.250509][ T36] audit: type=1400 audit(1793973955.719:233): avc: denied { append } for pid=652 comm="syz.2.113" name="001" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 34.542049][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 34.548628][ T45] usb 1-1: config 1 has an invalid interface association descriptor of length 5, skipping [ 34.558617][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.568723][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 14609, setting to 1024 [ 34.579790][ T45] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024 [ 34.589731][ T573] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 34.597259][ T45] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 34.611694][ T45] usb 1-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 34.620769][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.628823][ T45] usb 1-1: Product: syz [ 34.633036][ T45] usb 1-1: Manufacturer: syz [ 34.637627][ T45] usb 1-1: SerialNumber: syz [ 34.643831][ T628] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 34.752749][ T573] usb 4-1: not running at top speed; connect to a high speed hub [ 34.761292][ T573] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.771477][ T573] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 34.780574][ T573] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.792482][ T573] usb 4-1: Found UVC 1.00 device (046d:0825) [ 34.799411][ T573] usb 4-1: No streaming interface found for terminal 2. [ 34.851986][ T628] netlink: 44 bytes leftover after parsing attributes in process `syz.0.102'. [ 34.869218][ T45] usb 1-1: MIDIStreaming interface descriptor not found [ 34.878370][ T45] usb 1-1: USB disconnect, device number 5 [ 34.891227][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.993584][ T10] usb 4-1: USB disconnect, device number 9 [ 35.091390][ T36] audit: type=1400 audit(1793973956.559:234): avc: denied { nlmsg_read } for pid=673 comm="syz.2.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 35.111778][ T36] audit: type=1400 audit(1793973956.559:235): avc: denied { create } for pid=673 comm="syz.2.121" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 35.392197][ T45] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 35.517398][ T695] FAULT_INJECTION: forcing a failure. [ 35.517398][ T695] name failslab, interval 1, probability 0, space 0, times 0 [ 35.530348][ T695] CPU: 0 UID: 0 PID: 695 Comm: syz.1.130 Not tainted syzkaller #0 7b276d656437cde817a152a655ee87c3d6174d21 [ 35.530378][ T695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 35.530388][ T695] Call Trace: [ 35.530394][ T695] [ 35.530400][ T695] __dump_stack+0x21/0x30 [ 35.530423][ T695] dump_stack_lvl+0x140/0x1c0 [ 35.530440][ T695] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.530457][ T695] dump_stack+0x19/0x20 [ 35.530472][ T695] should_fail_ex+0x3c2/0x510 [ 35.530489][ T695] should_failslab+0xac/0x100 [ 35.530508][ T695] kmem_cache_alloc_noprof+0x42/0x410 [ 35.530530][ T695] ? filemap_invalidate_pages+0x3f3/0x430 [ 35.530549][ T695] ? jbd2__journal_start+0x16d/0x860 [ 35.530567][ T695] ? __kmalloc_cache_noprof+0x23c/0x470 [ 35.530591][ T695] jbd2__journal_start+0x16d/0x860 [ 35.530608][ T695] __ext4_journal_start_sb+0x111/0x3f0 [ 35.530631][ T695] ext4_iomap_begin+0x67d/0xb10 [ 35.530655][ T695] ? __cfi_ext4_iomap_begin+0x10/0x10 [ 35.530679][ T695] ? kasan_save_alloc_info+0x3a/0x50 [ 35.530701][ T695] iomap_iter+0x639/0xc60 [ 35.530720][ T695] ? __cfi_ext4_iomap_begin+0x10/0x10 [ 35.530743][ T695] __iomap_dio_rw+0xa96/0x1ba0 [ 35.530767][ T695] ? __cfi___iomap_dio_rw+0x10/0x10 [ 35.530791][ T695] ? jbd2_journal_stop+0x81f/0xc20 [ 35.530809][ T695] ? __cfi_jbd2_journal_stop+0x10/0x10 [ 35.530825][ T695] ? __cfi_ext4_orphan_add+0x10/0x10 [ 35.530848][ T695] iomap_dio_rw+0x45/0xa0 [ 35.530869][ T695] ext4_file_write_iter+0xf23/0x15c0 [ 35.530889][ T695] ? __cfi_ext4_file_write_iter+0x10/0x10 [ 35.530907][ T695] ? proc_fail_nth_write+0x184/0x220 [ 35.530928][ T695] vfs_write+0x765/0xfd0 [ 35.530952][ T695] ? __cfi_vfs_write+0x10/0x10 [ 35.530975][ T695] ? __cfi_mutex_lock+0x10/0x10 [ 35.530997][ T695] ksys_write+0x145/0x260 [ 35.531011][ T695] ? __cfi_ksys_write+0x10/0x10 [ 35.531024][ T695] ? __kasan_check_read+0x15/0x20 [ 35.531053][ T695] __x64_sys_write+0x7f/0x90 [ 35.531068][ T695] x64_sys_call+0x271c/0x2ee0 [ 35.531084][ T695] do_syscall_64+0x57/0xf0 [ 35.531100][ T695] ? clear_bhb_loop+0x50/0xa0 [ 35.531120][ T695] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.531140][ T695] RIP: 0033:0x7f9776d9fb19 [ 35.531153][ T695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.531165][ T695] RSP: 002b:00007f9777ba3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 35.531183][ T695] RAX: ffffffffffffffda RBX: 00007f9777025fa0 RCX: 00007f9776d9fb19 [ 35.531195][ T695] RDX: 00000000ffffffd7 RSI: 0000200000001000 RDI: 0000000000000003 [ 35.531205][ T695] RBP: 00007f9777ba3090 R08: 0000000000000000 R09: 0000000000000000 [ 35.531215][ T695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.531225][ T695] R13: 00007f9777026038 R14: 00007f9777025fa0 R15: 00007fffafd07b18 [ 35.531238][ T695] [ 35.573871][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 35.827879][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 35.837747][ T45] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 35.850472][ T45] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 35.859600][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.867713][ T45] usb 3-1: Product: syz [ 35.871880][ T45] usb 3-1: Manufacturer: syz [ 35.876504][ T45] usb 3-1: SerialNumber: syz [ 36.182064][ T10] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 36.232086][ T573] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 36.292144][ T45] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 36.300361][ T45] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 36.313740][ T45] usb 3-1: USB disconnect, device number 6 [ 36.333329][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 36.341304][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 36.349681][ T10] usb 2-1: config 1 has an invalid descriptor of length 235, skipping remainder of the config [ 36.360407][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 134, changing to 4 [ 36.371368][ T10] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 36.385503][ T10] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 36.392753][ T573] usb 1-1: not running at top speed; connect to a high speed hub [ 36.402046][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.403365][ T573] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.410198][ T10] usb 2-1: Product: syz [ 36.410216][ T10] usb 2-1: Manufacturer: syz [ 36.420643][ T573] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 36.424797][ T10] usb 2-1: SerialNumber: syz [ 36.429229][ T573] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.452756][ T573] usb 1-1: Found UVC 1.00 device (046d:0825) [ 36.652843][ T573] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 36.663018][ T573] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 36.671858][ T573] uvcvideo 1-1:1.1: Failed to initialize the device (-71). [ 36.685458][ T573] usb 1-1: USB disconnect, device number 6 [ 36.742932][ T723] FAULT_INJECTION: forcing a failure. [ 36.742932][ T723] name failslab, interval 1, probability 0, space 0, times 0 [ 36.756596][ T723] CPU: 1 UID: 0 PID: 723 Comm: syz.3.141 Not tainted syzkaller #0 7b276d656437cde817a152a655ee87c3d6174d21 [ 36.756622][ T723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 36.756633][ T723] Call Trace: [ 36.756639][ T723] [ 36.756646][ T723] __dump_stack+0x21/0x30 [ 36.756666][ T723] dump_stack_lvl+0x140/0x1c0 [ 36.756681][ T723] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.756695][ T723] ? is_bpf_text_address+0x17b/0x1a0 [ 36.756715][ T723] ? kernel_text_address+0xa9/0xe0 [ 36.756739][ T723] dump_stack+0x19/0x20 [ 36.756753][ T723] should_fail_ex+0x3c2/0x510 [ 36.756769][ T723] ? ext4_find_extent+0x1f5/0xd80 [ 36.756791][ T723] should_failslab+0xac/0x100 [ 36.756811][ T723] __kmalloc_noprof+0x69/0x510 [ 36.756832][ T723] ? ext4_find_extent+0x1f5/0xd80 [ 36.756851][ T723] ext4_find_extent+0x1f5/0xd80 [ 36.756871][ T723] ext4_ext_map_blocks+0x212/0x6080 [ 36.756894][ T723] ? __kasan_check_write+0x18/0x20 [ 36.756915][ T723] ? _raw_read_unlock+0x16/0x40 [ 36.756933][ T723] ? start_this_handle+0x1ed0/0x2050 [ 36.756948][ T723] ? jbd2__journal_start+0x16d/0x860 [ 36.756963][ T723] ? __ext4_journal_start_sb+0x111/0x3f0 [ 36.756982][ T723] ? __cfi_ext4_ext_map_blocks+0x10/0x10 [ 36.757001][ T723] ? __kasan_check_write+0x18/0x20 [ 36.757021][ T723] ? rwsem_read_trylock+0x275/0x5a0 [ 36.757042][ T723] ? down_read+0x7f/0xe0 [ 36.757063][ T723] ext4_map_query_blocks+0x9c/0x2d0 [ 36.757084][ T723] ext4_map_blocks+0x318/0x17f0 [ 36.757105][ T723] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 36.757125][ T723] ? __cfi_ext4_map_blocks+0x10/0x10 [ 36.757145][ T723] ? jbd2__journal_start+0x3c9/0x860 [ 36.757162][ T723] ext4_iomap_begin+0x784/0xb10 [ 36.757184][ T723] ? __cfi_ext4_iomap_begin+0x10/0x10 [ 36.757207][ T723] ? kasan_save_alloc_info+0x3a/0x50 [ 36.757226][ T723] iomap_iter+0x639/0xc60 [ 36.757243][ T723] ? __cfi_ext4_iomap_begin+0x10/0x10 [ 36.757264][ T723] __iomap_dio_rw+0xa96/0x1ba0 [ 36.757285][ T723] ? __cfi___iomap_dio_rw+0x10/0x10 [ 36.757307][ T723] ? jbd2_journal_stop+0x81f/0xc20 [ 36.757323][ T723] ? __cfi_jbd2_journal_stop+0x10/0x10 [ 36.757339][ T723] ? __cfi_ext4_orphan_add+0x10/0x10 [ 36.757360][ T723] iomap_dio_rw+0x45/0xa0 [ 36.757378][ T723] ext4_file_write_iter+0xf23/0x15c0 [ 36.757397][ T723] ? __cfi_ext4_file_write_iter+0x10/0x10 [ 36.757412][ T723] ? proc_fail_nth_write+0x184/0x220 [ 36.757432][ T723] vfs_write+0x765/0xfd0 [ 36.757454][ T723] ? __cfi_vfs_write+0x10/0x10 [ 36.757476][ T723] ? __cfi_mutex_lock+0x10/0x10 [ 36.757496][ T723] ksys_write+0x145/0x260 [ 36.757516][ T723] ? __cfi_ksys_write+0x10/0x10 [ 36.757530][ T723] ? __kasan_check_read+0x15/0x20 [ 36.757549][ T723] __x64_sys_write+0x7f/0x90 [ 36.757563][ T723] x64_sys_call+0x271c/0x2ee0 [ 36.757579][ T723] do_syscall_64+0x57/0xf0 [ 36.757596][ T723] ? clear_bhb_loop+0x50/0xa0 [ 36.757616][ T723] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.757635][ T723] RIP: 0033:0x7f14ad79fb19 [ 36.757649][ T723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.757662][ T723] RSP: 002b:00007f14ae655028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 36.757680][ T723] RAX: ffffffffffffffda RBX: 00007f14ada25fa0 RCX: 00007f14ad79fb19 [ 36.757692][ T723] RDX: 00000000ffffffd7 RSI: 0000200000001000 RDI: 0000000000000003 [ 36.757703][ T723] RBP: 00007f14ae655090 R08: 0000000000000000 R09: 0000000000000000 [ 36.757712][ T723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.757723][ T723] R13: 00007f14ada26038 R14: 00007f14ada25fa0 R15: 00007ffc5846e248 [ 36.757737][ T723] [ 37.579036][ T753] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.592055][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 37.625303][ T759] FAULT_INJECTION: forcing a failure. [ 37.625303][ T759] name failslab, interval 1, probability 0, space 0, times 0 [ 37.637957][ T759] CPU: 1 UID: 0 PID: 759 Comm: syz.0.154 Not tainted syzkaller #0 7b276d656437cde817a152a655ee87c3d6174d21 [ 37.637982][ T759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 37.637993][ T759] Call Trace: [ 37.637999][ T759] [ 37.638006][ T759] __dump_stack+0x21/0x30 [ 37.638026][ T759] dump_stack_lvl+0x140/0x1c0 [ 37.638040][ T759] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.638056][ T759] ? stack_depot_save_flags+0x38/0x800 [ 37.638072][ T759] dump_stack+0x19/0x20 [ 37.638085][ T759] should_fail_ex+0x3c2/0x510 [ 37.638101][ T759] should_failslab+0xac/0x100 [ 37.638118][ T759] kmem_cache_alloc_noprof+0x42/0x410 [ 37.638140][ T759] ? __es_insert_extent+0x6f9/0x17a0 [ 37.638156][ T759] __es_insert_extent+0x6f9/0x17a0 [ 37.638171][ T759] ? _raw_write_lock+0x92/0xf0 [ 37.638188][ T759] ? __cfi__raw_write_lock+0x10/0x10 [ 37.638205][ T759] ext4_es_insert_extent+0x576/0x2760 [ 37.638223][ T759] ? __cfi_ext4_es_insert_extent+0x10/0x10 [ 37.638238][ T759] ? __kasan_check_write+0x18/0x20 [ 37.638260][ T759] ? _raw_read_unlock+0x16/0x40 [ 37.638275][ T759] ? ext4_es_find_extent_range+0xeb/0x310 [ 37.638290][ T759] ? __cfi_ext4_es_is_delayed+0x10/0x10 [ 37.638312][ T759] ext4_ext_map_blocks+0x1dae/0x6080 [ 37.638335][ T759] ? __kasan_check_write+0x18/0x20 [ 37.638354][ T759] ? _raw_read_unlock+0x16/0x40 [ 37.638369][ T759] ? start_this_handle+0x1ed0/0x2050 [ 37.638385][ T759] ? jbd2__journal_start+0x16d/0x860 [ 37.638401][ T759] ? __ext4_journal_start_sb+0x111/0x3f0 [ 37.638419][ T759] ? __cfi_ext4_ext_map_blocks+0x10/0x10 [ 37.638441][ T759] ? down_read+0x7f/0xe0 [ 37.638460][ T759] ext4_map_query_blocks+0x9c/0x2d0 [ 37.638480][ T759] ext4_map_blocks+0x318/0x17f0 [ 37.638501][ T759] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 37.638523][ T759] ? __cfi_ext4_map_blocks+0x10/0x10 [ 37.638543][ T759] ? jbd2__journal_start+0x3c9/0x860 [ 37.638559][ T759] ext4_iomap_begin+0x784/0xb10 [ 37.638581][ T759] ? __cfi_ext4_iomap_begin+0x10/0x10 [ 37.638602][ T759] ? kasan_save_alloc_info+0x3a/0x50 [ 37.638622][ T759] iomap_iter+0x639/0xc60 [ 37.638638][ T759] ? __cfi_ext4_iomap_begin+0x10/0x10 [ 37.638661][ T759] __iomap_dio_rw+0xa96/0x1ba0 [ 37.638683][ T759] ? __cfi___iomap_dio_rw+0x10/0x10 [ 37.638704][ T759] ? jbd2_journal_stop+0x81f/0xc20 [ 37.638719][ T759] ? __cfi_jbd2_journal_stop+0x10/0x10 [ 37.638734][ T759] ? __cfi_ext4_orphan_add+0x10/0x10 [ 37.638754][ T759] iomap_dio_rw+0x45/0xa0 [ 37.638772][ T759] ext4_file_write_iter+0xf23/0x15c0 [ 37.638792][ T759] ? __cfi_ext4_file_write_iter+0x10/0x10 [ 37.638813][ T759] ? proc_fail_nth_write+0x184/0x220 [ 37.638834][ T759] vfs_write+0x765/0xfd0 [ 37.638855][ T759] ? __cfi_vfs_write+0x10/0x10 [ 37.638875][ T759] ? __cfi_mutex_lock+0x10/0x10 [ 37.638894][ T759] ksys_write+0x145/0x260 [ 37.638908][ T759] ? __cfi_ksys_write+0x10/0x10 [ 37.638924][ T759] ? __kasan_check_read+0x15/0x20 [ 37.638944][ T759] __x64_sys_write+0x7f/0x90 [ 37.638957][ T759] x64_sys_call+0x271c/0x2ee0 [ 37.638973][ T759] do_syscall_64+0x57/0xf0 [ 37.638988][ T759] ? clear_bhb_loop+0x50/0xa0 [ 37.639008][ T759] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.639027][ T759] RIP: 0033:0x7f2cdf79fb19 [ 37.639041][ T759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.639055][ T759] RSP: 002b:00007f2ce05e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 37.639073][ T759] RAX: ffffffffffffffda RBX: 00007f2cdfa25fa0 RCX: 00007f2cdf79fb19 [ 37.639085][ T759] RDX: 00000000ffffffd7 RSI: 0000200000001000 RDI: 0000000000000003 [ 37.639095][ T759] RBP: 00007f2ce05e3090 R08: 0000000000000000 R09: 0000000000000000 [ 37.639105][ T759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.639114][ T759] R13: 00007f2cdfa26038 R14: 00007f2cdfa25fa0 R15: 00007ffd61280928 [ 37.639128][ T759] [ 37.752051][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 38.040134][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 38.057610][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 38.073143][ T9] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 38.082253][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.090270][ T9] usb 4-1: Product: syz [ 38.094686][ T9] usb 4-1: Manufacturer: syz [ 38.099314][ T9] usb 4-1: SerialNumber: syz [ 38.412057][ T667] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 38.462061][ T341] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 38.563149][ T667] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 38.576096][ T667] usb 1-1: config 0 interface 0 has no altsetting 0 [ 38.582912][ T667] usb 1-1: New USB device found, idVendor=056a, idProduct=00b7, bcdDevice= 0.00 [ 38.592167][ T667] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.601357][ T667] usb 1-1: config 0 descriptor?? [ 38.612779][ T341] usb 3-1: not running at top speed; connect to a high speed hub [ 38.632408][ T341] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.642589][ T341] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 38.651640][ T341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.663253][ T341] usb 3-1: Found UVC 1.00 device (046d:0825) [ 38.849459][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 38.858639][ T9] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 38.871207][ T341] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 38.880658][ T10] usb 2-1: USB disconnect, device number 6 [ 38.888390][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 38.899209][ T341] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 38.909674][ T341] uvcvideo 3-1:1.1: Failed to initialize the device (-71). [ 38.920672][ T9] usb 4-1: USB disconnect, device number 10 [ 38.929366][ T341] usb 3-1: USB disconnect, device number 7 [ 38.974871][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 38.974887][ T36] audit: type=1400 audit(1793973960.449:253): avc: denied { ioctl } for pid=777 comm="syz.1.163" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 38.992643][ T778] netlink: 92 bytes leftover after parsing attributes in process `syz.1.163'. [ 39.005659][ T36] audit: type=1400 audit(1793973960.459:254): avc: denied { accept } for pid=777 comm="syz.1.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 39.017265][ T667] wacom 0003:056A:00B7.0001: unbalanced delimiter at end of report description [ 39.035173][ T36] audit: type=1400 audit(1793973960.489:255): avc: denied { bind } for pid=769 comm="syz.0.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.057141][ T667] wacom 0003:056A:00B7.0001: parse failed [ 39.068902][ T36] audit: type=1400 audit(1793973960.489:256): avc: denied { connect } for pid=769 comm="syz.0.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.088867][ T667] wacom 0003:056A:00B7.0001: probe with driver wacom failed with error -22 [ 39.101911][ T36] audit: type=1400 audit(1793973960.489:257): avc: denied { setopt } for pid=769 comm="syz.0.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.124942][ T36] audit: type=1400 audit(1793973960.539:258): avc: denied { create } for pid=777 comm="syz.1.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 39.142367][ T786] ./dev/sda1: Can't lookup blockdev [ 39.151846][ T786] veth0: entered promiscuous mode [ 39.160169][ T785] veth0: left promiscuous mode [ 39.197070][ T794] FAULT_INJECTION: forcing a failure. [ 39.197070][ T794] name failslab, interval 1, probability 0, space 0, times 0 [ 39.210307][ T794] CPU: 0 UID: 0 PID: 794 Comm: syz.3.170 Not tainted syzkaller #0 7b276d656437cde817a152a655ee87c3d6174d21 [ 39.210336][ T794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 39.210347][ T794] Call Trace: [ 39.210353][ T794] [ 39.210357][ T794] __dump_stack+0x21/0x30 [ 39.210372][ T794] dump_stack_lvl+0x140/0x1c0 [ 39.210382][ T794] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.210392][ T794] dump_stack+0x19/0x20 [ 39.210401][ T794] should_fail_ex+0x3c2/0x510 [ 39.210411][ T794] ? ext4_find_extent+0x1f5/0xd80 [ 39.210424][ T794] should_failslab+0xac/0x100 [ 39.210436][ T794] __kmalloc_noprof+0x69/0x510 [ 39.210450][ T794] ? ext4_find_extent+0x1f5/0xd80 [ 39.210463][ T794] ? __kasan_slab_free+0x6a/0x80 [ 39.210475][ T794] ext4_find_extent+0x1f5/0xd80 [ 39.210488][ T794] ext4_ext_map_blocks+0x212/0x6080 [ 39.210502][ T794] ? __kasan_check_write+0x18/0x20 [ 39.210516][ T794] ? _raw_read_unlock+0x16/0x40 [ 39.210527][ T794] ? start_this_handle+0x1ed0/0x2050 [ 39.210537][ T794] ? jbd2__journal_start+0x16d/0x860 [ 39.210547][ T794] ? __ext4_journal_start_sb+0x111/0x3f0 [ 39.210559][ T794] ? __cfi_ext4_ext_map_blocks+0x10/0x10 [ 39.210573][ T794] ? __cfi_ext4_ext_map_blocks+0x10/0x10 [ 39.210617][ T794] ext4_map_blocks+0x873/0x17f0 [ 39.210632][ T794] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 39.210646][ T794] ? __cfi_ext4_map_blocks+0x10/0x10 [ 39.210659][ T794] ? jbd2__journal_start+0x3c9/0x860 [ 39.210670][ T794] ext4_iomap_begin+0x784/0xb10 [ 39.210685][ T794] ? __cfi_ext4_iomap_begin+0x10/0x10 [ 39.210699][ T794] ? kasan_save_alloc_info+0x3a/0x50 [ 39.210712][ T794] iomap_iter+0x639/0xc60 [ 39.210724][ T794] ? __cfi_ext4_iomap_begin+0x10/0x10 [ 39.210738][ T794] __iomap_dio_rw+0xa96/0x1ba0 [ 39.210752][ T794] ? __cfi___iomap_dio_rw+0x10/0x10 [ 39.210770][ T794] ? jbd2_journal_stop+0x81f/0xc20 [ 39.210781][ T794] ? __cfi_jbd2_journal_stop+0x10/0x10 [ 39.210790][ T794] ? __cfi_ext4_orphan_add+0x10/0x10 [ 39.210805][ T794] iomap_dio_rw+0x45/0xa0 [ 39.210817][ T794] ext4_file_write_iter+0xf23/0x15c0 [ 39.210829][ T794] ? __cfi_ext4_file_write_iter+0x10/0x10 [ 39.210839][ T794] ? proc_fail_nth_write+0x184/0x220 [ 39.210853][ T794] vfs_write+0x765/0xfd0 [ 39.210868][ T794] ? __cfi_vfs_write+0x10/0x10 [ 39.210882][ T794] ? __cfi_mutex_lock+0x10/0x10 [ 39.210896][ T794] ksys_write+0x145/0x260 [ 39.210904][ T794] ? __cfi_ksys_write+0x10/0x10 [ 39.210913][ T794] ? __kasan_check_read+0x15/0x20 [ 39.210927][ T794] __x64_sys_write+0x7f/0x90 [ 39.210936][ T794] x64_sys_call+0x271c/0x2ee0 [ 39.210947][ T794] do_syscall_64+0x57/0xf0 [ 39.210957][ T794] ? clear_bhb_loop+0x50/0xa0 [ 39.210971][ T794] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.210984][ T794] RIP: 0033:0x7f14ad79fb19 [ 39.210993][ T794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.211002][ T794] RSP: 002b:00007f14ae655028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 39.211014][ T794] RAX: ffffffffffffffda RBX: 00007f14ada25fa0 RCX: 00007f14ad79fb19 [ 39.211022][ T794] RDX: 00000000ffffffd7 RSI: 0000200000001000 RDI: 0000000000000003 [ 39.211028][ T794] RBP: 00007f14ae655090 R08: 0000000000000000 R09: 0000000000000000 [ 39.211035][ T794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.211041][ T794] R13: 00007f14ada26038 R14: 00007f14ada25fa0 R15: 00007ffc5846e248 [ 39.211050][ T794] [ 39.226709][ T667] usb 1-1: USB disconnect, device number 7 [ 39.569638][ T36] audit: type=1400 audit(1793973961.039:259): avc: denied { ioctl } for pid=796 comm="syz.3.171" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9473 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.597288][ T797] FAULT_INJECTION: forcing a failure. [ 39.597288][ T797] name failslab, interval 1, probability 0, space 0, times 0 [ 39.609995][ T797] CPU: 0 UID: 0 PID: 797 Comm: syz.3.171 Not tainted syzkaller #0 7b276d656437cde817a152a655ee87c3d6174d21 [ 39.610014][ T797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 39.610021][ T797] Call Trace: [ 39.610025][ T797] [ 39.610030][ T797] __dump_stack+0x21/0x30 [ 39.610045][ T797] dump_stack_lvl+0x140/0x1c0 [ 39.610055][ T797] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.610077][ T797] ? vms_clear_ptes+0x4eb/0x610 [ 39.610088][ T797] dump_stack+0x19/0x20 [ 39.610098][ T797] should_fail_ex+0x3c2/0x510 [ 39.610108][ T797] should_failslab+0xac/0x100 [ 39.610119][ T797] kmem_cache_alloc_noprof+0x42/0x410 [ 39.610135][ T797] ? vma_merge_new_range+0x71e/0x900 [ 39.610150][ T797] ? vm_area_alloc+0x3f/0x190 [ 39.610163][ T797] vm_area_alloc+0x3f/0x190 [ 39.610174][ T797] mmap_region+0xce2/0x1d10 [ 39.610189][ T797] ? __cfi_mmap_region+0x10/0x10 [ 39.610202][ T797] ? __cfi_arch_get_unmapped_area_topdown+0x10/0x10 [ 39.610215][ T797] ? __cfi_try_to_wake_up+0x10/0x10 [ 39.610229][ T797] ? __kasan_check_read+0x15/0x20 [ 39.610243][ T797] ? __get_unmapped_area+0x406/0x470 [ 39.610257][ T797] do_mmap+0xa47/0x1370 [ 39.610270][ T797] ? __cfi_selinux_mmap_file+0x10/0x10 [ 39.610284][ T797] ? __cfi_do_mmap+0x10/0x10 [ 39.610297][ T797] ? __kasan_check_write+0x18/0x20 [ 39.610310][ T797] ? down_write_killable+0xee/0x2d0 [ 39.610325][ T797] ? __cfi_down_write_killable+0x10/0x10 [ 39.610338][ T797] ? do_futex+0x37d/0x510 [ 39.610349][ T797] vm_mmap_pgoff+0x367/0x4b0 [ 39.610364][ T797] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 39.610379][ T797] ? xfd_validate_state+0x68/0x140 [ 39.610389][ T797] ksys_mmap_pgoff+0xfa/0x1e0 [ 39.610403][ T797] ? __kasan_check_write+0x18/0x20 [ 39.610417][ T797] __x64_sys_mmap+0x121/0x140 [ 39.610427][ T797] x64_sys_call+0x13bf/0x2ee0 [ 39.610438][ T797] do_syscall_64+0x57/0xf0 [ 39.610448][ T797] ? clear_bhb_loop+0x50/0xa0 [ 39.610461][ T797] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.610474][ T797] RIP: 0033:0x7f14ad79fb19 [ 39.610484][ T797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.610492][ T797] RSP: 002b:00007f14ae655028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 39.610504][ T797] RAX: ffffffffffffffda RBX: 00007f14ada25fa0 RCX: 00007f14ad79fb19 [ 39.610512][ T797] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 39.610519][ T797] RBP: 00007f14ad837b70 R08: ffffffffffffffff R09: 0000000000000000 [ 39.610526][ T797] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 39.610532][ T797] R13: 00007f14ada26038 R14: 00007f14ada25fa0 R15: 00007ffc5846e248 [ 39.610541][ T797] [ 39.832068][ T573] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 39.962048][ T36] audit: type=1400 audit(1793973961.429:260): avc: denied { ioctl } for pid=812 comm="syz.0.179" path="socket:[9611]" dev="sockfs" ino=9611 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.036909][ T36] audit: type=1400 audit(1793973961.509:261): avc: denied { write } for pid=819 comm="syz.1.181" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 40.042059][ T573] usb 3-1: Using ep0 maxpacket: 16 [ 40.059935][ T36] audit: type=1400 audit(1793973961.509:262): avc: denied { open } for pid=819 comm="syz.1.181" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 40.077296][ T573] usb 3-1: unable to get BOS descriptor or descriptor too short [ 40.097248][ T573] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 40.109992][ T573] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 40.115534][ T822] FAULT_INJECTION: forcing a failure. [ 40.115534][ T822] name failslab, interval 1, probability 0, space 0, times 0 [ 40.119097][ T573] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.132263][ T822] CPU: 0 UID: 0 PID: 822 Comm: syz.1.182 Not tainted syzkaller #0 7b276d656437cde817a152a655ee87c3d6174d21 [ 40.132287][ T822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 40.132298][ T822] Call Trace: [ 40.132304][ T822] [ 40.132310][ T822] __dump_stack+0x21/0x30 [ 40.132332][ T822] dump_stack_lvl+0x140/0x1c0 [ 40.132348][ T822] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.132366][ T822] dump_stack+0x19/0x20 [ 40.132380][ T822] should_fail_ex+0x3c2/0x510 [ 40.132397][ T822] should_failslab+0xac/0x100 [ 40.132415][ T822] kmem_cache_alloc_noprof+0x42/0x410 [ 40.132438][ T822] ? ext4_mb_new_blocks+0x325/0x36c0 [ 40.132462][ T822] ext4_mb_new_blocks+0x325/0x36c0 [ 40.132483][ T822] ? __kmalloc_noprof+0x261/0x510 [ 40.132505][ T822] ? ext4_find_extent+0x1f5/0xd80 [ 40.132527][ T822] ? ext4_ext_search_right+0x49e/0x880 [ 40.132553][ T822] ? ext4_inode_to_goal_block+0x34f/0x4c0 [ 40.132573][ T822] ? ext4_ext_find_goal+0x11d/0x210 [ 40.132594][ T822] ext4_ext_map_blocks+0x14d9/0x6080 [ 40.132618][ T822] ? __kasan_check_write+0x18/0x20 [ 40.132640][ T822] ? _raw_read_unlock+0x16/0x40 [ 40.132658][ T822] ? start_this_handle+0x1ed0/0x2050 [ 40.132675][ T822] ? jbd2__journal_start+0x16d/0x860 [ 40.132690][ T822] ? __ext4_journal_start_sb+0x111/0x3f0 [ 40.132711][ T822] ? __cfi_ext4_ext_map_blocks+0x10/0x10 [ 40.132734][ T822] ? __cfi_ext4_ext_map_blocks+0x10/0x10 [ 40.132759][ T822] ext4_map_blocks+0x873/0x17f0 [ 40.132781][ T822] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 40.132803][ T822] ? __cfi_ext4_map_blocks+0x10/0x10 [ 40.132825][ T822] ? jbd2__journal_start+0x3c9/0x860 [ 40.132843][ T822] ext4_iomap_begin+0x784/0xb10 [ 40.132868][ T822] ? __cfi_ext4_iomap_begin+0x10/0x10 [ 40.132891][ T822] ? kasan_save_alloc_info+0x3a/0x50 [ 40.132912][ T822] iomap_iter+0x639/0xc60 [ 40.132930][ T822] ? __cfi_ext4_iomap_begin+0x10/0x10 [ 40.132954][ T822] __iomap_dio_rw+0xa96/0x1ba0 [ 40.132978][ T822] ? __cfi___iomap_dio_rw+0x10/0x10 [ 40.133006][ T822] ? jbd2_journal_stop+0x81f/0xc20 [ 40.133023][ T822] ? __cfi_jbd2_journal_stop+0x10/0x10 [ 40.133039][ T822] ? __cfi_ext4_orphan_add+0x10/0x10 [ 40.133062][ T822] iomap_dio_rw+0x45/0xa0 [ 40.133083][ T822] ext4_file_write_iter+0xf23/0x15c0 [ 40.133103][ T822] ? __cfi_ext4_file_write_iter+0x10/0x10 [ 40.133121][ T822] ? proc_fail_nth_write+0x184/0x220 [ 40.133144][ T822] vfs_write+0x765/0xfd0 [ 40.133168][ T822] ? __cfi_vfs_write+0x10/0x10 [ 40.133190][ T822] ? __cfi_mutex_lock+0x10/0x10 [ 40.133212][ T822] ksys_write+0x145/0x260 [ 40.133226][ T822] ? __cfi_ksys_write+0x10/0x10 [ 40.133242][ T822] ? __kasan_check_read+0x15/0x20 [ 40.133264][ T822] __x64_sys_write+0x7f/0x90 [ 40.133279][ T822] x64_sys_call+0x271c/0x2ee0 [ 40.133296][ T822] do_syscall_64+0x57/0xf0 [ 40.133313][ T822] ? clear_bhb_loop+0x50/0xa0 [ 40.133335][ T822] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.133356][ T822] RIP: 0033:0x7f9776d9fb19 [ 40.133371][ T822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.133384][ T822] RSP: 002b:00007f9777ba3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 40.133403][ T822] RAX: ffffffffffffffda RBX: 00007f9777025fa0 RCX: 00007f9776d9fb19 [ 40.133416][ T822] RDX: 00000000ffffffd7 RSI: 0000200000001000 RDI: 0000000000000003 [ 40.133427][ T822] RBP: 00007f9777ba3090 R08: 0000000000000000 R09: 0000000000000000 [ 40.133438][ T822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.133449][ T822] R13: 00007f9777026038 R14: 00007f9777025fa0 R15: 00007fffafd07b18 [ 40.133464][ T822] [ 40.500598][ T573] usb 3-1: Product: syz [ 40.504817][ T573] usb 3-1: Manufacturer: syz [ 40.509414][ T573] usb 3-1: SerialNumber: syz [ 40.552050][ T667] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 40.702771][ T667] usb 1-1: not running at top speed; connect to a high speed hub [ 40.711223][ T667] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.721446][ T667] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 40.730720][ T667] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.746112][ T667] usb 1-1: Found UVC 1.00 device (046d:0825) [ 40.941074][ T573] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 40.949362][ T573] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 40.958580][ T667] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 40.969522][ T667] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 40.980818][ T573] usb 3-1: USB disconnect, device number 8 [ 40.987448][ T667] uvcvideo 1-1:1.1: Failed to initialize the device (-71). [ 40.992119][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 40.996775][ T667] usb 1-1: USB disconnect, device number 8 [ 41.153183][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.164129][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.174217][ T9] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 41.183560][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.192137][ T9] usb 4-1: config 0 descriptor?? [ 41.455096][ T848] FAULT_INJECTION: forcing a failure. [ 41.455096][ T848] name failslab, interval 1, probability 0, space 0, times 0 [ 41.469835][ T848] CPU: 1 UID: 0 PID: 848 Comm: syz.1.192 Not tainted syzkaller #0 7b276d656437cde817a152a655ee87c3d6174d21 [ 41.469862][ T848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 41.469881][ T848] Call Trace: [ 41.469887][ T848] [ 41.469894][ T848] __dump_stack+0x21/0x30 [ 41.469916][ T848] dump_stack_lvl+0x140/0x1c0 [ 41.469932][ T848] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.469950][ T848] dump_stack+0x19/0x20 [ 41.469965][ T848] should_fail_ex+0x3c2/0x510 [ 41.469983][ T848] should_failslab+0xac/0x100 [ 41.470001][ T848] kmem_cache_alloc_noprof+0x42/0x410 [ 41.470023][ T848] ? ext4_mb_new_blocks+0x3ec/0x36c0 [ 41.470047][ T848] ext4_mb_new_blocks+0x3ec/0x36c0 [ 41.470068][ T848] ? __kmalloc_noprof+0x261/0x510 [ 41.470091][ T848] ? ext4_find_extent+0x1f5/0xd80 [ 41.470114][ T848] ? ext4_ext_search_right+0x49e/0x880 [ 41.470136][ T848] ? ext4_inode_to_goal_block+0x34f/0x4c0 [ 41.470158][ T848] ext4_ext_map_blocks+0x14d9/0x6080 [ 41.470183][ T848] ? __kasan_check_write+0x18/0x20 [ 41.470206][ T848] ? _raw_read_unlock+0x16/0x40 [ 41.470225][ T848] ? start_this_handle+0x1ed0/0x2050 [ 41.470242][ T848] ? jbd2__journal_start+0x16d/0x860 [ 41.470259][ T848] ? __ext4_journal_start_sb+0x111/0x3f0 [ 41.470282][ T848] ? __cfi_ext4_ext_map_blocks+0x10/0x10 [ 41.470305][ T848] ? __cfi_ext4_ext_map_blocks+0x10/0x10 [ 41.470332][ T848] ext4_map_blocks+0x873/0x17f0 [ 41.470356][ T848] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 41.470378][ T848] ? __cfi_ext4_map_blocks+0x10/0x10 [ 41.470401][ T848] ? jbd2__journal_start+0x3c9/0x860 [ 41.470420][ T848] ext4_iomap_begin+0x784/0xb10 [ 41.470447][ T848] ? __cfi_ext4_iomap_begin+0x10/0x10 [ 41.470471][ T848] ? kasan_save_alloc_info+0x3a/0x50 [ 41.470494][ T848] iomap_iter+0x639/0xc60 [ 41.470523][ T848] ? __cfi_ext4_iomap_begin+0x10/0x10 [ 41.470548][ T848] __iomap_dio_rw+0xa96/0x1ba0 [ 41.470572][ T848] ? __cfi___iomap_dio_rw+0x10/0x10 [ 41.470597][ T848] ? jbd2_journal_stop+0x81f/0xc20 [ 41.470615][ T848] ? __cfi_jbd2_journal_stop+0x10/0x10 [ 41.470632][ T848] ? __cfi_ext4_orphan_add+0x10/0x10 [ 41.470656][ T848] iomap_dio_rw+0x45/0xa0 [ 41.470678][ T848] ext4_file_write_iter+0xf23/0x15c0 [ 41.470700][ T848] ? __cfi_ext4_file_write_iter+0x10/0x10 [ 41.470717][ T848] ? proc_fail_nth_write+0x184/0x220 [ 41.470740][ T848] vfs_write+0x765/0xfd0 [ 41.470765][ T848] ? __cfi_vfs_write+0x10/0x10 [ 41.470788][ T848] ? __cfi_mutex_lock+0x10/0x10 [ 41.470812][ T848] ksys_write+0x145/0x260 [ 41.470828][ T848] ? __cfi_ksys_write+0x10/0x10 [ 41.470844][ T848] ? __kasan_check_read+0x15/0x20 [ 41.470867][ T848] __x64_sys_write+0x7f/0x90 [ 41.470890][ T848] x64_sys_call+0x271c/0x2ee0 [ 41.470909][ T848] do_syscall_64+0x57/0xf0 [ 41.470927][ T848] ? clear_bhb_loop+0x50/0xa0 [ 41.470951][ T848] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.470973][ T848] RIP: 0033:0x7f9776d9fb19 [ 41.470988][ T848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.471002][ T848] RSP: 002b:00007f9777ba3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 41.471021][ T848] RAX: ffffffffffffffda RBX: 00007f9777025fa0 RCX: 00007f9776d9fb19 [ 41.471035][ T848] RDX: 00000000ffffffd7 RSI: 0000200000001000 RDI: 0000000000000003 [ 41.471047][ T848] RBP: 00007f9777ba3090 R08: 0000000000000000 R09: 0000000000000000 [ 41.471058][ T848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.471069][ T848] R13: 00007f9777026038 R14: 00007f9777025fa0 R15: 00007fffafd07b18 [ 41.471085][ T848] [ 41.518927][ T856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.195'. [ 41.837679][ T9] hid-led 0003:1D34:000A.0002: item fetching failed at offset 0/3 [ 41.846311][ T9] hid-led 0003:1D34:000A.0002: probe with driver hid-led failed with error -22 [ 41.867408][ T9] usb 4-1: USB disconnect, device number 11 [ 42.038532][ T879] FAULT_INJECTION: forcing a failure. [ 42.038532][ T879] name failslab, interval 1, probability 0, space 0, times 0 [ 42.051226][ T879] CPU: 0 UID: 0 PID: 879 Comm: syz.1.205 Not tainted syzkaller #0 7b276d656437cde817a152a655ee87c3d6174d21 [ 42.051248][ T879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 42.051255][ T879] Call Trace: [ 42.051258][ T879] [ 42.051262][ T879] __dump_stack+0x21/0x30 [ 42.051277][ T879] dump_stack_lvl+0x140/0x1c0 [ 42.051286][ T879] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.051296][ T879] dump_stack+0x19/0x20 [ 42.051305][ T879] should_fail_ex+0x3c2/0x510 [ 42.051315][ T879] should_failslab+0xac/0x100 [ 42.051326][ T879] kmem_cache_alloc_noprof+0x42/0x410 [ 42.051343][ T879] ? __es_insert_extent+0x6f9/0x17a0 [ 42.051354][ T879] __es_insert_extent+0x6f9/0x17a0 [ 42.051364][ T879] ext4_es_insert_extent+0x576/0x2760 [ 42.051375][ T879] ? __cfi_ext4_es_insert_extent+0x10/0x10 [ 42.051386][ T879] ext4_map_blocks+0xb71/0x17f0 [ 42.051401][ T879] ? __cfi_ext4_map_blocks+0x10/0x10 [ 42.051414][ T879] ? jbd2__journal_start+0x3c9/0x860 [ 42.051425][ T879] ext4_iomap_begin+0x784/0xb10 [ 42.051440][ T879] ? __cfi_ext4_iomap_begin+0x10/0x10 [ 42.051454][ T879] ? kasan_save_alloc_info+0x3a/0x50 [ 42.051468][ T879] iomap_iter+0x639/0xc60 [ 42.051479][ T879] ? __cfi_ext4_iomap_begin+0x10/0x10 [ 42.051494][ T879] __iomap_dio_rw+0xa96/0x1ba0 [ 42.051508][ T879] ? __cfi___iomap_dio_rw+0x10/0x10 [ 42.051522][ T879] ? jbd2_journal_stop+0x81f/0xc20 [ 42.051532][ T879] ? __cfi_jbd2_journal_stop+0x10/0x10 [ 42.051541][ T879] ? __cfi_ext4_orphan_add+0x10/0x10 [ 42.051555][ T879] iomap_dio_rw+0x45/0xa0 [ 42.051567][ T879] ext4_file_write_iter+0xf23/0x15c0 [ 42.051579][ T879] ? __cfi_ext4_file_write_iter+0x10/0x10 [ 42.051589][ T879] ? proc_fail_nth_write+0x184/0x220 [ 42.051603][ T879] vfs_write+0x765/0xfd0 [ 42.051618][ T879] ? __cfi_vfs_write+0x10/0x10 [ 42.051632][ T879] ? __cfi_mutex_lock+0x10/0x10 [ 42.051646][ T879] ksys_write+0x145/0x260 [ 42.051654][ T879] ? __cfi_ksys_write+0x10/0x10 [ 42.051662][ T879] ? __se_sys_chdir+0x1ad/0x280 [ 42.051673][ T879] ? __kasan_check_read+0x15/0x20 [ 42.051686][ T879] __x64_sys_write+0x7f/0x90 [ 42.051695][ T879] x64_sys_call+0x271c/0x2ee0 [ 42.051706][ T879] do_syscall_64+0x57/0xf0 [ 42.051716][ T879] ? clear_bhb_loop+0x50/0xa0 [ 42.051730][ T879] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.051742][ T879] RIP: 0033:0x7f9776d9fb19 [ 42.051752][ T879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.051760][ T879] RSP: 002b:00007f9777ba3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 42.051772][ T879] RAX: ffffffffffffffda RBX: 00007f9777025fa0 RCX: 00007f9776d9fb19 [ 42.051780][ T879] RDX: 00000000ffffffd7 RSI: 0000200000001000 RDI: 0000000000000003 [ 42.051787][ T879] RBP: 00007f9777ba3090 R08: 0000000000000000 R09: 0000000000000000 [ 42.051794][ T879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.051800][ T879] R13: 00007f9777026038 R14: 00007f9777025fa0 R15: 00007fffafd07b18 [ 42.051809][ T879] [ 42.492088][ T341] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 42.499670][ T441] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 42.652071][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 42.659655][ T441] usb 3-1: Using ep0 maxpacket: 16 [ 42.667319][ T341] usb 1-1: not running at top speed; connect to a high speed hub [ 42.675833][ T441] usb 3-1: unable to get BOS descriptor or descriptor too short [ 42.683575][ T341] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.693718][ T341] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 42.702843][ T341] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.711387][ T441] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 42.724588][ T441] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 42.734241][ T341] usb 1-1: Found UVC 1.00 device (046d:0825) [ 42.741356][ T441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.749399][ T341] usb 1-1: No streaming interface found for terminal 2. [ 42.756382][ T441] usb 3-1: Product: syz [ 42.760747][ T441] usb 3-1: Manufacturer: syz [ 42.766670][ T441] usb 3-1: SerialNumber: syz [ 42.812047][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 42.819370][ T9] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 42.828451][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.836467][ T9] usb 2-1: Product: syz [ 42.840640][ T9] usb 2-1: Manufacturer: syz [ 42.845286][ T9] usb 2-1: SerialNumber: syz [ 42.927454][ T10] usb 1-1: USB disconnect, device number 9 [ 43.058168][ T887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.067517][ T887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.079515][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 43.090827][ T9] usb 2-1: USB disconnect, device number 7 [ 43.173757][ T919] overlayfs: failed to resolve './file1': -2 [ 43.381789][ T441] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 43.391323][ T441] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 43.406204][ T441] usb 3-1: USB disconnect, device number 9 [ 43.419635][ T619] udevd[619]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.454773][ T945] netlink: 'syz.0.235': attribute type 27 has an invalid length. [ 43.932158][ T573] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 44.082890][ T573] usb 1-1: not running at top speed; connect to a high speed hub [ 44.094372][ T573] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.104784][ T573] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 44.115513][ T573] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.127596][ T573] usb 1-1: Found UVC 1.00 device (046d:0825) [ 44.135112][ T573] usb 1-1: No streaming interface found for terminal 2. [ 44.285798][ T994] FAULT_INJECTION: forcing a failure. [ 44.285798][ T994] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 44.298894][ T994] CPU: 1 UID: 0 PID: 994 Comm: syz.2.256 Not tainted syzkaller #0 7b276d656437cde817a152a655ee87c3d6174d21 [ 44.298920][ T994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 44.298931][ T994] Call Trace: [ 44.298937][ T994] [ 44.298944][ T994] __dump_stack+0x21/0x30 [ 44.298965][ T994] dump_stack_lvl+0x140/0x1c0 [ 44.298981][ T994] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.298999][ T994] ? check_stack_object+0x138/0x150 [ 44.299049][ T994] dump_stack+0x19/0x20 [ 44.299064][ T994] should_fail_ex+0x3c2/0x510 [ 44.299081][ T994] should_fail+0xf/0x20 [ 44.299096][ T994] should_fail_usercopy+0x1e/0x30 [ 44.299114][ T994] _copy_to_user+0x24/0xa0 [ 44.299134][ T994] simple_read_from_buffer+0xed/0x160 [ 44.299156][ T994] proc_fail_nth_read+0x1aa/0x220 [ 44.299178][ T994] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 44.299200][ T994] ? bpf_lsm_file_permission+0xd/0x20 [ 44.299220][ T994] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 44.299241][ T994] vfs_read+0x28b/0xc70 [ 44.299263][ T994] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 44.299285][ T994] ? __cfi_vfs_read+0x10/0x10 [ 44.299304][ T994] ? __kasan_check_write+0x18/0x20 [ 44.299326][ T994] ? mutex_lock+0x97/0x1d0 [ 44.299346][ T994] ? __cfi_mutex_lock+0x10/0x10 [ 44.299368][ T994] ksys_read+0x145/0x260 [ 44.299390][ T994] ? __cfi_ksys_read+0x10/0x10 [ 44.299413][ T994] ? __kasan_check_write+0x18/0x20 [ 44.299435][ T994] ? fput+0x1a4/0x230 [ 44.299455][ T994] ? __kasan_check_read+0x15/0x20 [ 44.299477][ T994] __x64_sys_read+0x7f/0x90 [ 44.299493][ T994] x64_sys_call+0x2638/0x2ee0 [ 44.299511][ T994] do_syscall_64+0x57/0xf0 [ 44.299528][ T994] ? clear_bhb_loop+0x50/0xa0 [ 44.299552][ T994] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.299572][ T994] RIP: 0033:0x7f4b5396034e [ 44.299588][ T994] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 44.299601][ T994] RSP: 002b:00007f4b548d3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 44.299621][ T994] RAX: ffffffffffffffda RBX: 00007f4b548d46c0 RCX: 00007f4b5396034e [ 44.299635][ T994] RDX: 000000000000000f RSI: 00007f4b548d40a0 RDI: 0000000000000004 [ 44.299646][ T994] RBP: 00007f4b548d4090 R08: 0000000000000000 R09: 0000000000000000 [ 44.299657][ T994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.299669][ T994] R13: 00007f4b53c26038 R14: 00007f4b53c25fa0 R15: 00007ffc55775b38 [ 44.299684][ T994] [ 44.550910][ T573] usb 1-1: USB disconnect, device number 10 [ 44.602071][ T441] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 44.752081][ T441] usb 2-1: Using ep0 maxpacket: 16 [ 44.758511][ T441] usb 2-1: unable to get BOS descriptor or descriptor too short [ 44.767044][ T441] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 44.779465][ T441] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 44.788783][ T441] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.796894][ T441] usb 2-1: Product: syz [ 44.801078][ T441] usb 2-1: Manufacturer: syz [ 44.802065][ T45] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 44.805821][ T441] usb 2-1: SerialNumber: syz [ 44.963469][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 44.971932][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.982071][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 44.992284][ T45] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 45.001324][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.009343][ T45] usb 3-1: Product: syz [ 45.013527][ T45] usb 3-1: Manufacturer: syz [ 45.018138][ T45] usb 3-1: SerialNumber: syz [ 45.026231][ T45] usb 3-1: selecting invalid altsetting 1 [ 45.032154][ T45] usb 3-1: unit 6 not found! [ 45.088898][ T1004] ======================================================= [ 45.088898][ T1004] WARNING: The mand mount option has been deprecated and [ 45.088898][ T1004] and is ignored by this kernel. Remove the mand [ 45.088898][ T1004] option from the mount to silence this warning. [ 45.088898][ T1004] ======================================================= [ 45.127820][ T1004] bridge0: port 3(syz_tun) entered blocking state [ 45.134415][ T1004] bridge0: port 3(syz_tun) entered disabled state [ 45.140896][ T1004] syz_tun: entered allmulticast mode [ 45.146669][ T1004] syz_tun: entered promiscuous mode [ 45.151950][ T1004] bridge0: port 3(syz_tun) entered blocking state [ 45.158393][ T1004] bridge0: port 3(syz_tun) entered forwarding state [ 45.552581][ T1015] ./dev/sda1: Can't lookup blockdev [ 45.792071][ T573] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 45.826881][ T996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.835475][ T996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.943821][ T573] usb 4-1: Using ep0 maxpacket: 8 [ 45.950232][ T573] usb 4-1: unable to get BOS descriptor or descriptor too short [ 45.958642][ T573] usb 4-1: config 138 has an invalid interface number: 221 but max is 0 [ 45.967060][ T573] usb 4-1: config 138 has no interface number 0 [ 45.973425][ T573] usb 4-1: config 138 interface 221 altsetting 134 endpoint 0xA has an invalid bInterval 127, changing to 10 [ 45.985479][ T573] usb 4-1: config 138 interface 221 altsetting 134 endpoint 0xA has invalid maxpacket 18369, setting to 1024 [ 45.997316][ T573] usb 4-1: config 138 interface 221 has no altsetting 0 [ 46.005878][ T573] usb 4-1: New USB device found, idVendor=0582, idProduct=ed81, bcdDevice=a7.d3 [ 46.015023][ T573] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.023707][ T573] usb 4-1: Product: syz [ 46.028326][ T573] usb 4-1: Manufacturer: syz [ 46.033218][ T573] usb 4-1: SerialNumber: syz [ 46.041251][ T1015] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 46.056550][ T45] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 46.056704][ T441] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 46.072115][ T45] usb 3-1: USB disconnect, device number 10 [ 46.081478][ T441] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 46.105570][ T999] udevd[999]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.106623][ T441] usb 2-1: USB disconnect, device number 8 [ 46.149997][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 46.150015][ T36] audit: type=1400 audit(1793973967.619:272): avc: denied { create } for pid=1024 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 46.184979][ T36] audit: type=1400 audit(1793973967.619:273): avc: denied { sys_admin } for pid=1024 comm="syz.1.266" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 46.267323][ T1015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.264'. [ 46.277108][ T1015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.286876][ T1015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.309188][ T573] usb 4-1: USB disconnect, device number 12 [ 46.318363][ T619] udevd[619]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:138.221/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.442474][ T401] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 46.592849][ T401] usb 1-1: not running at top speed; connect to a high speed hub [ 46.602654][ T401] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.612998][ T401] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 46.622474][ T401] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.635967][ T401] usb 1-1: Found UVC 1.00 device (046d:0825) [ 46.643990][ T401] usb 1-1: No streaming interface found for terminal 2. [ 46.802102][ T441] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 46.834765][ T401] usb 1-1: USB disconnect, device number 11 [ 46.877253][ T36] audit: type=1400 audit(1793973968.349:274): avc: denied { bind } for pid=1055 comm="syz.3.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 46.896544][ T36] audit: type=1400 audit(1793973968.349:275): avc: denied { node_bind } for pid=1055 comm="syz.3.278" saddr=fec0:ffff::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 46.962068][ T441] usb 3-1: Using ep0 maxpacket: 16 [ 46.968603][ T441] usb 3-1: unable to get BOS descriptor or descriptor too short [ 46.977114][ T441] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 46.989597][ T441] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 46.998717][ T441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.006886][ T441] usb 3-1: Product: syz [ 47.011051][ T441] usb 3-1: Manufacturer: syz [ 47.015745][ T441] usb 3-1: SerialNumber: syz [ 47.132053][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 47.282042][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 47.288182][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.298302][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 47.308494][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 47.317565][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.325583][ T9] usb 4-1: Product: syz [ 47.329731][ T9] usb 4-1: Manufacturer: syz [ 47.334337][ T9] usb 4-1: SerialNumber: syz [ 47.542093][ T9] usb 4-1: 0:2 : does not exist [ 47.552717][ T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 47.567248][ T9] usb 4-1: USB disconnect, device number 13 [ 47.633052][ T441] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 47.641966][ T441] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 47.664623][ T441] usb 3-1: USB disconnect, device number 11 [ 47.682434][ T619] udevd[619]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.721244][ T36] audit: type=1400 audit(1793973969.189:276): avc: denied { search } for pid=150 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.768973][ T36] audit: type=1400 audit(1793973969.239:277): avc: denied { read } for pid=1082 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.804412][ T36] audit: type=1400 audit(1793973969.239:278): avc: denied { open } for pid=1082 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.855355][ T36] audit: type=1400 audit(1793973969.239:279): avc: denied { getattr } for pid=1082 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.908379][ T36] audit: type=1400 audit(1793973969.379:280): avc: denied { write } for pid=1081 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=424 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.937344][ T36] audit: type=1400 audit(1793973969.379:281): avc: denied { add_name } for pid=1081 comm="dhcpcd-run-hook" name="resolv.conf.syz_tun.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.974460][ T1096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.288'. [ 47.986333][ T1096] bridge_slave_1: left allmulticast mode [ 47.992072][ T1096] bridge_slave_1: left promiscuous mode [ 47.997709][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.005824][ T1096] bridge_slave_0: left allmulticast mode [ 48.011762][ T1096] bridge_slave_0: left promiscuous mode [ 48.017911][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.199218][ T1126] incfs_lookup_dentry err:-13 [ 48.280449][ T1138] netlink: 'syz.3.297': attribute type 4 has an invalid length. [ 48.293101][ T1143] tipc: Started in network mode [ 48.298132][ T1143] tipc: Node identity ac14140f, cluster identity 4711 [ 48.306775][ T1143] tipc: New replicast peer: 255.255.255.255 [ 48.316773][ T1143] tipc: Enabled bearer , priority 10 [ 48.352095][ T9] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 48.512766][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 48.521280][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.531468][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 48.540516][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.552240][ T9] usb 1-1: Found UVC 1.00 device (046d:0825) [ 48.682067][ T401] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 48.750887][ T9] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 48.761039][ T9] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 48.770091][ T9] uvcvideo 1-1:1.1: Failed to initialize the device (-71). [ 48.778770][ T9] usb 1-1: USB disconnect, device number 12 [ 48.832062][ T401] usb 3-1: Using ep0 maxpacket: 16 [ 48.838497][ T401] usb 3-1: unable to get BOS descriptor or descriptor too short [ 48.846976][ T401] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 48.859502][ T401] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 48.868601][ T401] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.876805][ T401] usb 3-1: Product: syz [ 48.881156][ T401] usb 3-1: Manufacturer: syz [ 48.886071][ T401] usb 3-1: SerialNumber: syz [ 49.280825][ T1201] netlink: 'syz.0.316': attribute type 4 has an invalid length. [ 49.288596][ T1201] netlink: 'syz.0.316': attribute type 6 has an invalid length. [ 49.296538][ T1201] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.316'. [ 49.352047][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 49.432084][ T441] tipc: Node number set to 2886997007 [ 49.499266][ T401] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 49.504828][ T9] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 49.508165][ T401] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 49.519352][ T9] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 49.538938][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 49.542265][ T401] usb 3-1: USB disconnect, device number 12 [ 49.548088][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.571281][ T619] udevd[619]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 49.583212][ T1211] ./mnt: Can't lookup blockdev [ 49.711512][ T1217] kvm: Disabled LAPIC found during irq injection [ 49.764326][ T9] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 49.780433][ T9] usb 4-1: USB disconnect, device number 14 [ 50.102820][ T1241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.331'. [ 50.302067][ T401] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 50.452084][ T401] usb 2-1: device descriptor read/64, error -71 [ 50.682251][ T573] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 50.695773][ T401] usb 2-1: device descriptor read/64, error -71 [ 50.723381][ T1268] syz.2.340 uses obsolete (PF_INET,SOCK_PACKET) [ 50.852080][ T573] usb 4-1: Using ep0 maxpacket: 16 [ 50.867539][ T573] usb 4-1: unable to get BOS descriptor or descriptor too short [ 50.879373][ T573] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 50.901141][ T573] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 50.912323][ T1274] device-mapper: ioctl: Invalid ioctl structure: uuid LVM-syzc0, name , dev c0c74800 [ 50.916321][ T573] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.937355][ T573] usb 4-1: Product: syz [ 50.942369][ T573] usb 4-1: Manufacturer: syz [ 50.947333][ T573] usb 4-1: SerialNumber: syz [ 50.952599][ T401] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 51.082044][ T401] usb 2-1: device descriptor read/64, error -71 [ 51.261056][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 51.261073][ T36] audit: type=1400 audit(1793974228.727:298): avc: denied { mounton } for pid=1306 comm="syz.2.354" path="/78/file0" dev="tmpfs" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 51.261103][ T1307] fuse: Invalid rootmode [ 51.304539][ T36] audit: type=1400 audit(1793974228.777:299): avc: denied { create } for pid=1308 comm="syz.2.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.312079][ T667] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 51.325614][ T36] audit: type=1400 audit(1793974228.807:300): avc: denied { listen } for pid=1308 comm="syz.2.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.352061][ T401] usb 2-1: device descriptor read/64, error -71 [ 51.363794][ T36] audit: type=1400 audit(1793974228.837:301): avc: denied { write } for pid=1312 comm="syz.2.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.383122][ T36] audit: type=1400 audit(1793974228.837:302): avc: denied { read write } for pid=1312 comm="syz.2.356" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.408503][ T36] audit: type=1400 audit(1793974228.837:303): avc: denied { open } for pid=1312 comm="syz.2.356" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.436850][ T36] audit: type=1400 audit(1793974228.907:304): avc: denied { read } for pid=1314 comm="syz.2.357" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 51.459514][ T36] audit: type=1400 audit(1793974228.907:305): avc: denied { open } for pid=1314 comm="syz.2.357" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 51.483543][ T401] usb usb2-port1: attempt power cycle [ 51.487757][ T36] audit: type=1400 audit(1793974228.967:306): avc: denied { create } for pid=1316 comm="syz.2.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 51.503298][ T667] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.509106][ T36] audit: type=1400 audit(1793974228.977:307): avc: denied { ioctl } for pid=1316 comm="syz.2.358" path="socket:[14162]" dev="sockfs" ino=14162 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 51.528766][ T667] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 51.555032][ T667] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.563402][ T667] usb 1-1: Product: syz [ 51.567816][ T667] usb 1-1: Manufacturer: syz [ 51.572652][ T667] usb 1-1: SerialNumber: syz [ 51.579714][ T667] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 51.585832][ T667] cdc_wdm 1-1:1.0: Unknown control protocol [ 51.594097][ T573] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 51.607886][ T573] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 51.627701][ T573] usb 4-1: USB disconnect, device number 15 [ 51.642492][ T619] udevd[619]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.790783][ C0] cdc_wdm 1-1:1.0: unknown notification 225 received: index 38327 len 44878 [ 51.795709][ T1339] process 'syz.2.366' launched './file1' with NULL argv: empty string added [ 51.799658][ C0] cdc_wdm 1-1:1.0: unknown notification 91 received: index 33259 len 57117 [ 51.817503][ C0] cdc_wdm 1-1:1.0: unknown notification 110 received: index 18283 len 55631 [ 51.826364][ C0] cdc_wdm 1-1:1.0: unknown notification 104 received: index 178 len 0 [ 51.832057][ T401] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 51.834690][ C0] cdc_wdm 1-1:1.0: unknown notification 158 received: index 35209 len 23102 [ 51.851244][ C0] cdc_wdm 1-1:1.0: unknown notification 4 received: index 2 len 5390 [ 51.859493][ C0] cdc_wdm 1-1:1.0: unknown notification 148 received: index 21201 len 823 [ 51.863005][ T401] usb 2-1: device descriptor read/8, error -71 [ 51.868152][ C0] cdc_wdm 1-1:1.0: unknown notification 247 received: index 54601 len 21127 [ 51.883213][ C0] cdc_wdm 1-1:1.0: unknown notification 118 received: index 25181 len 47250 [ 51.892042][ C0] cdc_wdm 1-1:1.0: unknown notification 138 received: index 57232 len 54334 [ 51.900875][ C0] cdc_wdm 1-1:1.0: unknown notification 84 received: index 57075 len 60198 [ 51.909633][ C0] cdc_wdm 1-1:1.0: unknown notification 119 received: index 349 len 178 [ 51.918110][ C0] cdc_wdm 1-1:1.0: unknown notification 146 received: index 28104 len 37665 [ 51.926947][ C0] cdc_wdm 1-1:1.0: unknown notification 20 received: index 5620 len 1302 [ 51.935554][ C0] cdc_wdm 1-1:1.0: unknown notification 139 received: index 53630 len 65225 [ 51.944402][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 1 bytes [ 51.993130][ T401] usb 2-1: device descriptor read/8, error -71 [ 52.113547][ T1353] futex_wake_op: syz.3.372 tries to shift op by 144; fix this program [ 52.230336][ T1369] device-mapper: ioctl: Unable to rename non-existent device, to uuid LVM-syzd1 [ 52.242075][ T401] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 52.273326][ T401] usb 2-1: device descriptor read/8, error -71 [ 52.351400][ T667] usb 1-1: USB disconnect, device number 13 [ 52.413155][ T401] usb 2-1: device descriptor read/8, error -71 [ 52.522377][ T401] usb usb2-port1: unable to enumerate USB device [ 52.622104][ T573] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 52.772799][ T573] usb 4-1: not running at top speed; connect to a high speed hub [ 52.781269][ T573] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.791401][ T573] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 52.800454][ T573] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.810642][ T573] usb 4-1: Found UVC 1.00 device (046d:0825) [ 52.817545][ T573] usb 4-1: No streaming interface found for terminal 2. [ 53.011392][ T9] usb 4-1: USB disconnect, device number 16 [ 53.079088][ T1387] netlink: 'syz.1.382': attribute type 4 has an invalid length. [ 53.172183][ T573] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 53.322092][ T573] usb 1-1: Using ep0 maxpacket: 16 [ 53.328589][ T573] usb 1-1: unable to get BOS descriptor or descriptor too short [ 53.337108][ T573] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 53.349486][ T573] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 53.358540][ T573] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.366551][ T573] usb 1-1: Product: syz [ 53.370700][ T573] usb 1-1: Manufacturer: syz [ 53.375380][ T573] usb 1-1: SerialNumber: syz [ 53.432068][ T401] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 53.602046][ T401] usb 3-1: Using ep0 maxpacket: 32 [ 53.608231][ T401] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 53.616360][ T401] usb 3-1: config 0 has no interface number 0 [ 53.623774][ T401] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 53.632857][ T401] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.640837][ T401] usb 3-1: Product: syz [ 53.645022][ T401] usb 3-1: Manufacturer: syz [ 53.649612][ T401] usb 3-1: SerialNumber: syz [ 53.654801][ T401] usb 3-1: config 0 descriptor?? [ 53.660464][ T401] smsc95xx v2.0.0 [ 53.812062][ T9] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 53.861575][ T1391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.870313][ T1391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.963131][ T9] usb 4-1: config 0 interface 0 altsetting 21 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 53.976360][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 53.983377][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 53.986165][ T573] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 53.992565][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.001861][ T573] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 54.009570][ T9] usb 4-1: config 0 descriptor?? [ 54.027322][ T573] usb 1-1: USB disconnect, device number 14 [ 54.037989][ T619] udevd[619]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.227145][ T9] logitech 0003:046D:C294.0003: hidraw0: USB HID v10.01 Device [HID 046d:c294] on usb-dummy_hcd.3-1/input0 [ 54.238625][ T9] logitech 0003:046D:C294.0003: no inputs found [ 54.264641][ T401] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 54.275497][ T401] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 54.284796][ T401] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 54.295708][ T401] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 54.304968][ T401] usb 3-1: USB disconnect, device number 13 [ 54.425343][ T9] usb 4-1: USB disconnect, device number 17 [ 54.618141][ T1411] FAULT_INJECTION: forcing a failure. [ 54.618141][ T1411] name failslab, interval 1, probability 0, space 0, times 0 [ 54.630797][ T1411] CPU: 0 UID: 0 PID: 1411 Comm: syz.0.388 Not tainted syzkaller #0 7b276d656437cde817a152a655ee87c3d6174d21 [ 54.630820][ T1411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 54.630828][ T1411] Call Trace: [ 54.630832][ T1411] [ 54.630837][ T1411] __dump_stack+0x21/0x30 [ 54.630852][ T1411] dump_stack_lvl+0x140/0x1c0 [ 54.630862][ T1411] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.630896][ T1411] ? avc_has_perm+0x155/0x240 [ 54.630907][ T1411] ? __cfi_avc_has_perm+0x10/0x10 [ 54.630924][ T1411] ? hook_file_open+0x1f2/0x8d0 [ 54.630938][ T1411] dump_stack+0x19/0x20 [ 54.630947][ T1411] should_fail_ex+0x3c2/0x510 [ 54.630957][ T1411] should_failslab+0xac/0x100 [ 54.630968][ T1411] __kmalloc_cache_noprof+0x41/0x470 [ 54.630983][ T1411] ? vhost_task_create+0x12c/0x3f0 [ 54.630996][ T1411] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 54.631010][ T1411] vhost_task_create+0x12c/0x3f0 [ 54.631022][ T1411] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 54.631035][ T1411] ? __cfi_vhost_task_create+0x10/0x10 [ 54.631048][ T1411] ? __cfi_vhost_task_fn+0x10/0x10 [ 54.631059][ T1411] ? __kasan_check_write+0x18/0x20 [ 54.631074][ T1411] ? mutex_lock+0x97/0x1d0 [ 54.631087][ T1411] ? __cfi_mutex_lock+0x10/0x10 [ 54.631098][ T1411] ? kernel_text_address+0xa9/0xe0 [ 54.631114][ T1411] kvm_mmu_post_init_vm+0x161/0x300 [ 54.631124][ T1411] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 54.631139][ T1411] ? _parse_integer_limit+0x195/0x1e0 [ 54.631155][ T1411] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 54.631169][ T1411] ? kstrtoull+0x13b/0x1e0 [ 54.631183][ T1411] ? kstrtouint+0x78/0xf0 [ 54.631196][ T1411] ? ioctl_has_perm+0x1bc/0x500 [ 54.631213][ T1411] ? __asan_memcpy+0x5a/0x80 [ 54.631234][ T1411] ? ioctl_has_perm+0x408/0x500 [ 54.631256][ T1411] ? has_cap_mac_admin+0xd0/0xd0 [ 54.631273][ T1411] ? __kasan_check_write+0x18/0x20 [ 54.631286][ T1411] ? mutex_lock_killable+0x97/0x1d0 [ 54.631299][ T1411] ? __cfi_mutex_lock_killable+0x10/0x10 [ 54.631312][ T1411] ? proc_fail_nth_write+0x184/0x220 [ 54.631326][ T1411] kvm_vcpu_ioctl+0xa43/0x1000 [ 54.631338][ T1411] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 54.631348][ T1411] ? hook_file_ioctl+0x1ef/0x590 [ 54.631361][ T1411] ? __cfi_vfs_write+0x10/0x10 [ 54.631377][ T1411] ? __cfi_hook_file_ioctl+0x10/0x10 [ 54.631390][ T1411] ? __kasan_check_write+0x18/0x20 [ 54.631403][ T1411] ? mutex_unlock+0x90/0x240 [ 54.631420][ T1411] ? __cfi_mutex_unlock+0x10/0x10 [ 54.631441][ T1411] ? __fget_files+0x2bc/0x330 [ 54.631460][ T1411] ? bpf_lsm_file_ioctl+0xd/0x20 [ 54.631475][ T1411] ? security_file_ioctl+0x3e/0x110 [ 54.631489][ T1411] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 54.631500][ T1411] __se_sys_ioctl+0x123/0x1b0 [ 54.631512][ T1411] __x64_sys_ioctl+0x7f/0xa0 [ 54.631522][ T1411] x64_sys_call+0x1878/0x2ee0 [ 54.631533][ T1411] do_syscall_64+0x57/0xf0 [ 54.631543][ T1411] ? clear_bhb_loop+0x50/0xa0 [ 54.631556][ T1411] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.631570][ T1411] RIP: 0033:0x7f2cdf79fb19 [ 54.631580][ T1411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.631589][ T1411] RSP: 002b:00007f2ce05e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.631601][ T1411] RAX: ffffffffffffffda RBX: 00007f2cdfa25fa0 RCX: 00007f2cdf79fb19 [ 54.631609][ T1411] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 54.631616][ T1411] RBP: 00007f2ce05e3090 R08: 0000000000000000 R09: 0000000000000000 [ 54.631623][ T1411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.631630][ T1411] R13: 00007f2cdfa26038 R14: 00007f2cdfa25fa0 R15: 00007ffd61280928 [ 54.631638][ T1411] [ 55.177147][ T1435] FAULT_INJECTION: forcing a failure. [ 55.177147][ T1435] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 55.191309][ T1435] CPU: 1 UID: 0 PID: 1435 Comm: syz.2.395 Not tainted syzkaller #0 7b276d656437cde817a152a655ee87c3d6174d21 [ 55.191338][ T1435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 55.191351][ T1435] Call Trace: [ 55.191357][ T1435] [ 55.191364][ T1435] __dump_stack+0x21/0x30 [ 55.191386][ T1435] dump_stack_lvl+0x140/0x1c0 [ 55.191403][ T1435] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.191420][ T1435] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 55.191440][ T1435] dump_stack+0x19/0x20 [ 55.191456][ T1435] should_fail_ex+0x3c2/0x510 [ 55.191473][ T1435] should_fail_alloc_page+0xec/0x110 [ 55.191492][ T1435] __alloc_pages_noprof+0x1c0/0x7e0 [ 55.191513][ T1435] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 55.191534][ T1435] ? _raw_spin_unlock+0x45/0x60 [ 55.191553][ T1435] pte_alloc_one+0x92/0x530 [ 55.191572][ T1435] ? __schedule+0x16e8/0x2380 [ 55.191590][ T1435] ? __cfi_pte_alloc_one+0x10/0x10 [ 55.191610][ T1435] ? __kasan_check_write+0x18/0x20 [ 55.191634][ T1435] ? _raw_spin_lock+0x92/0x120 [ 55.191651][ T1435] ? __cfi__raw_spin_lock+0x10/0x10 [ 55.191670][ T1435] __pte_alloc+0x79/0x440 [ 55.191692][ T1435] ? __cfi___pte_alloc+0x10/0x10 [ 55.191714][ T1435] ? __pte_offset_map_lock+0x279/0x2f0 [ 55.191738][ T1435] do_pte_missing+0x2b1a/0x4440 [ 55.191759][ T1435] ? preempt_schedule_irq+0xab/0x110 [ 55.191791][ T1435] ? pte_marker_clear+0x1b0/0x1b0 [ 55.191809][ T1435] ? cgroup_rstat_updated+0x144/0x800 [ 55.191834][ T1435] ? irqentry_exit+0x4a/0x60 [ 55.191857][ T1435] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 55.191881][ T1435] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 55.191906][ T1435] handle_mm_fault+0x1189/0x1ba0 [ 55.191927][ T1435] ? __cfi_handle_mm_fault+0x10/0x10 [ 55.191945][ T1435] ? follow_page_pte+0x8fb/0xba0 [ 55.191966][ T1435] ? gup_must_unshare+0x1e0/0x1e0 [ 55.191986][ T1435] ? vma_is_secretmem+0x11/0x50 [ 55.192009][ T1435] ? check_vma_flags+0x337/0x3a0 [ 55.192028][ T1435] __get_user_pages+0x114b/0x22d0 [ 55.192046][ T1435] ? __kasan_check_write+0x18/0x20 [ 55.192067][ T1435] ? mempool_alloc_slab+0x21/0x30 [ 55.192089][ T1435] ? populate_vma_page_range+0x220/0x220 [ 55.192108][ T1435] ? gup_fast_pgd_range+0xd63/0xe40 [ 55.192129][ T1435] __gup_longterm_locked+0xc53/0x1570 [ 55.192151][ T1435] ? kasan_save_alloc_info+0x3a/0x50 [ 55.192174][ T1435] gup_fast_fallback+0x64f/0x740 [ 55.192201][ T1435] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 55.192226][ T1435] ? get_user_pages_fast_only+0xc0/0xc0 [ 55.192246][ T1435] ? mempool_alloc_slab+0x21/0x30 [ 55.192267][ T1435] ? __cfi_mempool_alloc_slab+0x10/0x10 [ 55.192288][ T1435] ? mempool_alloc_noprof+0x14d/0x4e0 [ 55.192311][ T1435] pin_user_pages_fast+0xa4/0xf0 [ 55.192331][ T1435] iov_iter_extract_pages+0x3a8/0x6c0 [ 55.192355][ T1435] bio_iov_iter_get_pages+0x47a/0x1460 [ 55.192382][ T1435] ? __kasan_check_write+0x18/0x20 [ 55.192406][ T1435] ? __cfi_bio_iov_iter_get_pages+0x10/0x10 [ 55.192431][ T1435] ? __cfi_bio_alloc_bioset+0x10/0x10 [ 55.192455][ T1435] ? submit_bio+0x427/0x5b0 [ 55.192474][ T1435] iomap_dio_bio_iter+0xbc9/0x1840 [ 55.192501][ T1435] __iomap_dio_rw+0xd03/0x1ba0 [ 55.192526][ T1435] ? __cfi___iomap_dio_rw+0x10/0x10 [ 55.192549][ T1435] ? jbd2_journal_stop+0x81f/0xc20 [ 55.192569][ T1435] ? __cfi_jbd2_journal_stop+0x10/0x10 [ 55.192587][ T1435] ? __cfi_ext4_orphan_add+0x10/0x10 [ 55.192610][ T1435] iomap_dio_rw+0x45/0xa0 [ 55.192633][ T1435] ext4_file_write_iter+0xf23/0x15c0 [ 55.192655][ T1435] ? __cfi_ext4_file_write_iter+0x10/0x10 [ 55.192673][ T1435] ? proc_fail_nth_write+0x184/0x220 [ 55.192696][ T1435] vfs_write+0x765/0xfd0 [ 55.192720][ T1435] ? __cfi_vfs_write+0x10/0x10 [ 55.192744][ T1435] ? __cfi_mutex_lock+0x10/0x10 [ 55.192773][ T1435] ksys_write+0x145/0x260 [ 55.192789][ T1435] ? __cfi_ksys_write+0x10/0x10 [ 55.192806][ T1435] ? __kasan_check_read+0x15/0x20 [ 55.192828][ T1435] __x64_sys_write+0x7f/0x90 [ 55.192845][ T1435] x64_sys_call+0x271c/0x2ee0 [ 55.192864][ T1435] do_syscall_64+0x57/0xf0 [ 55.192882][ T1435] ? clear_bhb_loop+0x50/0xa0 [ 55.192905][ T1435] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.192928][ T1435] RIP: 0033:0x7f4b5399fb19 [ 55.192944][ T1435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.192959][ T1435] RSP: 002b:00007f4b548d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 55.192979][ T1435] RAX: ffffffffffffffda RBX: 00007f4b53c25fa0 RCX: 00007f4b5399fb19 [ 55.192993][ T1435] RDX: 00000000ffffffd7 RSI: 0000200000001000 RDI: 0000000000000003 [ 55.193006][ T1435] RBP: 00007f4b548d4090 R08: 0000000000000000 R09: 0000000000000000 [ 55.193018][ T1435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 55.193031][ T1435] R13: 00007f4b53c26038 R14: 00007f4b53c25fa0 R15: 00007ffc55775b38 [ 55.193046][ T1435] [ 55.722049][ T401] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 55.727751][ T1440] netlink: 57 bytes leftover after parsing attributes in process `syz.2.397'. [ 55.739208][ T1440] FAULT_INJECTION: forcing a failure. [ 55.739208][ T1440] name failslab, interval 1, probability 0, space 0, times 0 [ 55.752118][ T1440] CPU: 0 UID: 0 PID: 1440 Comm: syz.2.397 Not tainted syzkaller #0 7b276d656437cde817a152a655ee87c3d6174d21 [ 55.752146][ T1440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 55.752159][ T1440] Call Trace: [ 55.752166][ T1440] [ 55.752173][ T1440] __dump_stack+0x21/0x30 [ 55.752196][ T1440] dump_stack_lvl+0x140/0x1c0 [ 55.752215][ T1440] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.752233][ T1440] dump_stack+0x19/0x20 [ 55.752250][ T1440] should_fail_ex+0x3c2/0x510 [ 55.752268][ T1440] should_failslab+0xac/0x100 [ 55.752288][ T1440] kmem_cache_alloc_noprof+0x42/0x410 [ 55.752313][ T1440] ? fib_insert_alias+0x2a6/0x1200 [ 55.752335][ T1440] fib_insert_alias+0x2a6/0x1200 [ 55.752355][ T1440] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 55.752382][ T1440] ? fib_trie_unmerge+0x250/0x1410 [ 55.752402][ T1440] ? __asan_memcpy+0x5a/0x80 [ 55.752428][ T1440] fib_trie_unmerge+0x28b/0x1410 [ 55.752450][ T1440] fib_unmerge+0xce/0x360 [ 55.752473][ T1440] fib4_rule_configure+0x287/0xbb0 [ 55.752498][ T1440] fib_nl_newrule+0x136a/0x1e50 [ 55.752521][ T1440] ? __cfi_fib_nl_newrule+0x10/0x10 [ 55.752550][ T1440] ? mutex_lock+0x97/0x1d0 [ 55.752574][ T1440] ? __cfi_mutex_lock+0x10/0x10 [ 55.752597][ T1440] ? ns_capable+0x90/0xf0 [ 55.752617][ T1440] ? netlink_net_capable+0x129/0x160 [ 55.752639][ T1440] ? __cfi_fib_nl_newrule+0x10/0x10 [ 55.752658][ T1440] rtnetlink_rcv_msg+0x8be/0xa40 [ 55.752678][ T1440] ? __asan_memcpy+0x5a/0x80 [ 55.752702][ T1440] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 55.752729][ T1440] ? avc_has_perm+0x155/0x240 [ 55.752752][ T1440] netlink_rcv_skb+0x24a/0x4e0 [ 55.752776][ T1440] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 55.752797][ T1440] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 55.752821][ T1440] ? selinux_netlink_send+0x7df/0x8b0 [ 55.752846][ T1440] ? netlink_autobind+0x1c0/0x1c0 [ 55.752872][ T1440] ? is_vmalloc_addr+0x11/0x40 [ 55.752894][ T1440] rtnetlink_rcv+0x20/0x30 [ 55.752911][ T1440] netlink_unicast+0x8bf/0xa70 [ 55.752934][ T1440] netlink_sendmsg+0x7d1/0xad0 [ 55.752958][ T1440] ? __cfi_netlink_sendmsg+0x10/0x10 [ 55.752982][ T1440] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 55.753001][ T1440] ? security_socket_sendmsg+0x3d/0x100 [ 55.753023][ T1440] ____sys_sendmsg+0x9a1/0xa00 [ 55.753048][ T1440] ? __import_iovec+0x5b9/0x7d0 [ 55.753070][ T1440] ? __sys_sendmsg_sock+0x50/0x50 [ 55.753094][ T1440] ? import_iovec+0x80/0xb0 [ 55.753115][ T1440] ___sys_sendmsg+0x2a6/0x370 [ 55.753139][ T1440] ? __sys_sendmsg+0x260/0x260 [ 55.753166][ T1440] ? __fget_files+0x2bc/0x330 [ 55.753187][ T1440] __x64_sys_sendmsg+0x1be/0x2a0 [ 55.753211][ T1440] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 55.753235][ T1440] ? __kasan_check_write+0x18/0x20 [ 55.753260][ T1440] ? fpregs_restore_userregs+0x11c/0x260 [ 55.753284][ T1440] ? switch_fpu_return+0x12/0x20 [ 55.753308][ T1440] x64_sys_call+0x2a4c/0x2ee0 [ 55.753328][ T1440] do_syscall_64+0x57/0xf0 [ 55.753347][ T1440] ? clear_bhb_loop+0x50/0xa0 [ 55.753371][ T1440] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.753395][ T1440] RIP: 0033:0x7f4b5399fb19 [ 55.753411][ T1440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.753427][ T1440] RSP: 002b:00007f4b548d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.753448][ T1440] RAX: ffffffffffffffda RBX: 00007f4b53c25fa0 RCX: 00007f4b5399fb19 [ 55.753463][ T1440] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 55.753475][ T1440] RBP: 00007f4b53a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 55.753488][ T1440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.753500][ T1440] R13: 00007f4b53c26038 R14: 00007f4b53c25fa0 R15: 00007ffc55775b38 [ 55.753518][ T1440] [ 56.272049][ T401] usb 1-1: Using ep0 maxpacket: 32 [ 56.280574][ T401] usb 1-1: unable to get BOS descriptor or descriptor too short [ 56.301358][ T401] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 215, changing to 7 [ 56.314755][ T401] usb 1-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 56.325481][ T401] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.333631][ T401] usb 1-1: Product: syz [ 56.337866][ T401] usb 1-1: Manufacturer: syz [ 56.342679][ T401] usb 1-1: SerialNumber: syz [ 56.360029][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 56.360042][ T36] audit: type=1400 audit(1793974233.827:326): avc: denied { mount } for pid=1451 comm="syz.1.402" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 56.360922][ T1452] netlink: 'syz.1.402': attribute type 22 has an invalid length. [ 56.402695][ T1449] FAULT_INJECTION: forcing a failure. [ 56.402695][ T1449] name failslab, interval 1, probability 0, space 0, times 0 [ 56.413482][ T36] audit: type=1400 audit(1793974233.877:327): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 56.415375][ T1449] CPU: 0 UID: 0 PID: 1449 Comm: syz.3.401 Not tainted syzkaller #0 7b276d656437cde817a152a655ee87c3d6174d21 [ 56.415400][ T1449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 56.415420][ T1449] Call Trace: [ 56.415425][ T1449] [ 56.415433][ T1449] __dump_stack+0x21/0x30 [ 56.415455][ T1449] dump_stack_lvl+0x140/0x1c0 [ 56.415471][ T1449] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.415489][ T1449] dump_stack+0x19/0x20 [ 56.415504][ T1449] should_fail_ex+0x3c2/0x510 [ 56.415521][ T1449] should_failslab+0xac/0x100 [ 56.415540][ T1449] kmem_cache_alloc_node_noprof+0x45/0x420 [ 56.415564][ T1449] ? dup_task_struct+0xc1/0xd80 [ 56.415585][ T1449] ? kasan_save_alloc_info+0x3a/0x50 [ 56.415607][ T1449] ? __kasan_kmalloc+0x96/0xb0 [ 56.415623][ T1449] ? __kmalloc_cache_noprof+0x23c/0x470 [ 56.415653][ T1449] dup_task_struct+0xc1/0xd80 [ 56.415675][ T1449] ? __kasan_check_write+0x18/0x20 [ 56.415696][ T1449] ? _raw_spin_lock_irq+0x93/0x120 [ 56.415715][ T1449] ? copy_process+0x33a0/0x33a0 [ 56.415737][ T1449] ? __kasan_check_write+0x18/0x20 [ 56.415759][ T1449] copy_process+0x579/0x33a0 [ 56.415782][ T1449] ? kasan_save_alloc_info+0x3a/0x50 [ 56.415804][ T1449] ? __cfi_copy_process+0x10/0x10 [ 56.415825][ T1449] ? __kmalloc_cache_noprof+0x23c/0x470 [ 56.415849][ T1449] ? __kasan_check_write+0x18/0x20 [ 56.415870][ T1449] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 56.415892][ T1449] vhost_task_create+0x1f7/0x3f0 [ 56.415912][ T1449] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 56.415934][ T1449] ? __cfi_vhost_task_create+0x10/0x10 [ 56.415955][ T1449] ? __cfi_vhost_task_fn+0x10/0x10 [ 56.415974][ T1449] ? __kasan_check_write+0x18/0x20 [ 56.415996][ T1449] ? mutex_lock+0x97/0x1d0 [ 56.416016][ T1449] ? __cfi_mutex_lock+0x10/0x10 [ 56.416036][ T1449] ? kernel_text_address+0xa9/0xe0 [ 56.416060][ T1449] kvm_mmu_post_init_vm+0x161/0x300 [ 56.416077][ T1449] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 56.416101][ T1449] ? _parse_integer_limit+0x195/0x1e0 [ 56.416125][ T1449] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 56.416149][ T1449] ? kstrtoull+0x13b/0x1e0 [ 56.416170][ T1449] ? kstrtouint+0x78/0xf0 [ 56.416191][ T1449] ? ioctl_has_perm+0x1bc/0x500 [ 56.416214][ T1449] ? __asan_memcpy+0x5a/0x80 [ 56.416237][ T1449] ? ioctl_has_perm+0x408/0x500 [ 56.416261][ T1449] ? has_cap_mac_admin+0xd0/0xd0 [ 56.416283][ T1449] ? __kasan_check_write+0x18/0x20 [ 56.416305][ T1449] ? mutex_lock_killable+0x97/0x1d0 [ 56.416326][ T1449] ? __cfi_mutex_lock_killable+0x10/0x10 [ 56.416347][ T1449] ? proc_fail_nth_write+0x184/0x220 [ 56.416369][ T1449] kvm_vcpu_ioctl+0xa43/0x1000 [ 56.416389][ T1449] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 56.416407][ T1449] ? hook_file_ioctl+0x1ef/0x590 [ 56.416428][ T1449] ? __cfi_vfs_write+0x10/0x10 [ 56.416451][ T1449] ? __cfi_hook_file_ioctl+0x10/0x10 [ 56.416472][ T1449] ? __kasan_check_write+0x18/0x20 [ 56.416493][ T1449] ? mutex_unlock+0x90/0x240 [ 56.416513][ T1449] ? __cfi_mutex_unlock+0x10/0x10 [ 56.416534][ T1449] ? __fget_files+0x2bc/0x330 [ 56.416553][ T1449] ? bpf_lsm_file_ioctl+0xd/0x20 [ 56.416571][ T1449] ? security_file_ioctl+0x3e/0x110 [ 56.416594][ T1449] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 56.416611][ T1449] __se_sys_ioctl+0x123/0x1b0 [ 56.416630][ T1449] __x64_sys_ioctl+0x7f/0xa0 [ 56.416653][ T1449] x64_sys_call+0x1878/0x2ee0 [ 56.416671][ T1449] do_syscall_64+0x57/0xf0 [ 56.416688][ T1449] ? clear_bhb_loop+0x50/0xa0 [ 56.416709][ T1449] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.416731][ T1449] RIP: 0033:0x7f14ad79fb19 [ 56.416746][ T1449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.416760][ T1449] RSP: 002b:00007f14ae655028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.416781][ T1449] RAX: ffffffffffffffda RBX: 00007f14ada25fa0 RCX: 00007f14ad79fb19 [ 56.416795][ T1449] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 56.416806][ T1449] RBP: 00007f14ae655090 R08: 0000000000000000 R09: 0000000000000000 [ 56.416818][ T1449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.416829][ T1449] R13: 00007f14ada26038 R14: 00007f14ada25fa0 R15: 00007ffc5846e248 [ 56.416843][ T1449] [ 56.854201][ T36] audit: type=1400 audit(1793974234.227:328): avc: denied { mount } for pid=1442 comm="syz.2.398" name="/" dev="configfs" ino=2420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 56.860879][ T401] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 56.878524][ T36] audit: type=1400 audit(1793974234.227:329): avc: denied { search } for pid=1442 comm="syz.2.398" name="/" dev="configfs" ino=2420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.884444][ T401] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 56.923973][ T401] usb 1-1: USB disconnect, device number 15 [ 57.052225][ T1469] ./dev/sda1: Can't lookup blockdev [ 57.071605][ T36] audit: type=1400 audit(1793974234.537:330): avc: denied { mounton } for pid=1473 comm="syz.3.410" path="/111/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 57.102158][ T36] audit: type=1400 audit(1793974234.577:331): avc: denied { write } for pid=1478 comm="syz.3.411" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.125175][ T36] audit: type=1400 audit(1793974234.577:332): avc: denied { map } for pid=1478 comm="syz.3.411" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.204859][ T1483] FAULT_INJECTION: forcing a failure. [ 57.204859][ T1483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.217997][ T1483] CPU: 0 UID: 0 PID: 1483 Comm: syz.0.413 Not tainted syzkaller #0 7b276d656437cde817a152a655ee87c3d6174d21 [ 57.218026][ T1483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 57.218038][ T1483] Call Trace: [ 57.218044][ T1483] [ 57.218052][ T1483] __dump_stack+0x21/0x30 [ 57.218075][ T1483] dump_stack_lvl+0x140/0x1c0 [ 57.218091][ T1483] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.218108][ T1483] ? bpf_lsm_file_permission+0xd/0x20 [ 57.218133][ T1483] ? check_stack_object+0x10f/0x150 [ 57.218159][ T1483] dump_stack+0x19/0x20 [ 57.218174][ T1483] should_fail_ex+0x3c2/0x510 [ 57.218192][ T1483] should_fail+0xf/0x20 [ 57.218207][ T1483] should_fail_usercopy+0x1e/0x30 [ 57.218225][ T1483] _copy_from_user+0x20/0xa0 [ 57.218245][ T1483] __sys_connect+0x15b/0x460 [ 57.218267][ T1483] ? __cfi___sys_connect+0x10/0x10 [ 57.218289][ T1483] ? __kasan_check_read+0x15/0x20 [ 57.218313][ T1483] __x64_sys_connect+0x7e/0x90 [ 57.218333][ T1483] x64_sys_call+0x1c2f/0x2ee0 [ 57.218352][ T1483] do_syscall_64+0x57/0xf0 [ 57.218369][ T1483] ? clear_bhb_loop+0x50/0xa0 [ 57.218392][ T1483] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.218414][ T1483] RIP: 0033:0x7f2cdf79fb19 [ 57.218429][ T1483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.218444][ T1483] RSP: 002b:00007f2ce05e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 57.218463][ T1483] RAX: ffffffffffffffda RBX: 00007f2cdfa25fa0 RCX: 00007f2cdf79fb19 [ 57.218475][ T1483] RDX: 000000000000006e RSI: 0000200000000300 RDI: 0000000000000004 [ 57.218487][ T1483] RBP: 00007f2ce05e3090 R08: 0000000000000000 R09: 0000000000000000 [ 57.218497][ T1483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.218508][ T1483] R13: 00007f2cdfa26038 R14: 00007f2cdfa25fa0 R15: 00007ffd61280928 [ 57.218530][ T1483] [ 57.411108][ T10] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 57.429242][ T36] audit: type=1400 audit(1793974234.897:333): avc: denied { connect } for pid=1490 comm="syz.0.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.572780][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 57.581172][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.591282][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 57.600507][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.610648][ T10] usb 2-1: Found UVC 1.00 device (046d:0825) [ 57.617922][ T10] usb 2-1: No streaming interface found for terminal 2. [ 57.811926][ T401] usb 2-1: USB disconnect, device number 13 [ 57.872090][ T301] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 58.022318][ T301] usb 3-1: Using ep0 maxpacket: 16 [ 58.029076][ T301] usb 3-1: unable to get BOS descriptor or descriptor too short [ 58.038246][ T301] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 58.051174][ T301] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 58.060726][ T301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.068746][ T301] usb 3-1: Product: syz [ 58.072922][ T301] usb 3-1: Manufacturer: syz [ 58.077520][ T301] usb 3-1: SerialNumber: syz [ 58.097148][ T36] audit: type=1400 audit(1793974235.567:334): avc: denied { write } for pid=1510 comm="syz.3.424" name="softnet_stat" dev="proc" ino=4026532415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 58.125800][ T36] audit: type=1400 audit(1793974235.597:335): avc: denied { write } for pid=1510 comm="syz.3.424" name="kvm_hv_stimer_cleanup" dev="tracefs" ino=17558 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 58.302740][ T1519] FAULT_INJECTION: forcing a failure. [ 58.302740][ T1519] name failslab, interval 1, probability 0, space 0, times 0 [ 58.315431][ T1519] CPU: 0 UID: 0 PID: 1519 Comm: syz.3.427 Not tainted syzkaller #0 7b276d656437cde817a152a655ee87c3d6174d21 [ 58.315460][ T1519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 58.315472][ T1519] Call Trace: [ 58.315478][ T1519] [ 58.315484][ T1519] __dump_stack+0x21/0x30 [ 58.315507][ T1519] dump_stack_lvl+0x140/0x1c0 [ 58.315524][ T1519] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.315542][ T1519] ? avc_has_perm+0x155/0x240 [ 58.315561][ T1519] dump_stack+0x19/0x20 [ 58.315575][ T1519] should_fail_ex+0x3c2/0x510 [ 58.315585][ T1519] should_failslab+0xac/0x100 [ 58.315596][ T1519] kmem_cache_alloc_noprof+0x42/0x410 [ 58.315612][ T1519] ? sk_prot_alloc+0x69/0x3a0 [ 58.315626][ T1519] sk_prot_alloc+0x69/0x3a0 [ 58.315645][ T1519] sk_alloc+0x40/0x590 [ 58.315665][ T1519] unix_create1+0xb7/0x760 [ 58.315687][ T1519] unix_stream_connect+0x2e8/0xfb0 [ 58.315708][ T1519] ? __check_object_size+0xdc/0x870 [ 58.315723][ T1519] ? __cfi_unix_stream_connect+0x10/0x10 [ 58.315735][ T1519] ? selinux_socket_connect+0x27/0x40 [ 58.315748][ T1519] ? bpf_lsm_socket_connect+0xd/0x20 [ 58.315757][ T1519] ? security_socket_connect+0x3d/0x100 [ 58.315770][ T1519] __sys_connect+0x334/0x460 [ 58.315791][ T1519] ? __cfi___sys_connect+0x10/0x10 [ 58.315814][ T1519] ? __kasan_check_read+0x15/0x20 [ 58.315837][ T1519] __x64_sys_connect+0x7e/0x90 [ 58.315854][ T1519] x64_sys_call+0x1c2f/0x2ee0 [ 58.315865][ T1519] do_syscall_64+0x57/0xf0 [ 58.315876][ T1519] ? clear_bhb_loop+0x50/0xa0 [ 58.315891][ T1519] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 58.315904][ T1519] RIP: 0033:0x7f14ad79fb19 [ 58.315915][ T1519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.315930][ T1519] RSP: 002b:00007f14ae655028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 58.315951][ T1519] RAX: ffffffffffffffda RBX: 00007f14ada25fa0 RCX: 00007f14ad79fb19 [ 58.315965][ T1519] RDX: 000000000000006e RSI: 0000200000000300 RDI: 0000000000000004 [ 58.315977][ T1519] RBP: 00007f14ae655090 R08: 0000000000000000 R09: 0000000000000000 [ 58.315989][ T1519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.315999][ T1519] R13: 00007f14ada26038 R14: 00007f14ada25fa0 R15: 00007ffc5846e248 [ 58.316008][ T1519] [ 58.677724][ T1542] FAULT_INJECTION: forcing a failure. [ 58.677724][ T1542] name failslab, interval 1, probability 0, space 0, times 0 [ 58.690505][ T1542] CPU: 1 UID: 0 PID: 1542 Comm: syz.1.437 Not tainted syzkaller #0 7b276d656437cde817a152a655ee87c3d6174d21 [ 58.690533][ T1542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 58.690545][ T1542] Call Trace: [ 58.690552][ T1542] [ 58.690563][ T1542] __dump_stack+0x21/0x30 [ 58.690585][ T1542] dump_stack_lvl+0x140/0x1c0 [ 58.690602][ T1542] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.690621][ T1542] dump_stack+0x19/0x20 [ 58.690637][ T1542] should_fail_ex+0x3c2/0x510 [ 58.690655][ T1542] ? security_sk_alloc+0x65/0x260 [ 58.690677][ T1542] should_failslab+0xac/0x100 [ 58.690696][ T1542] __kmalloc_noprof+0x69/0x510 [ 58.690721][ T1542] ? kasan_save_alloc_info+0x3a/0x50 [ 58.690744][ T1542] ? security_sk_alloc+0x65/0x260 [ 58.690765][ T1542] ? __kasan_slab_alloc+0x73/0x90 [ 58.690783][ T1542] security_sk_alloc+0x65/0x260 [ 58.690805][ T1542] sk_prot_alloc+0x123/0x3a0 [ 58.690826][ T1542] sk_alloc+0x40/0x590 [ 58.690846][ T1542] unix_create1+0xb7/0x760 [ 58.690875][ T1542] unix_stream_connect+0x2e8/0xfb0 [ 58.690896][ T1542] ? __check_object_size+0xdc/0x870 [ 58.690921][ T1542] ? __cfi_unix_stream_connect+0x10/0x10 [ 58.690942][ T1542] ? selinux_socket_connect+0x27/0x40 [ 58.690963][ T1542] ? bpf_lsm_socket_connect+0xd/0x20 [ 58.690980][ T1542] ? security_socket_connect+0x3d/0x100 [ 58.691002][ T1542] __sys_connect+0x334/0x460 [ 58.691023][ T1542] ? __cfi___sys_connect+0x10/0x10 [ 58.691046][ T1542] ? __kasan_check_read+0x15/0x20 [ 58.691069][ T1542] __x64_sys_connect+0x7e/0x90 [ 58.691088][ T1542] x64_sys_call+0x1c2f/0x2ee0 [ 58.691106][ T1542] do_syscall_64+0x57/0xf0 [ 58.691125][ T1542] ? clear_bhb_loop+0x50/0xa0 [ 58.691148][ T1542] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 58.691170][ T1542] RIP: 0033:0x7f9776d9fb19 [ 58.691186][ T1542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.691201][ T1542] RSP: 002b:00007f9777ba3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 58.691222][ T1542] RAX: ffffffffffffffda RBX: 00007f9777025fa0 RCX: 00007f9776d9fb19 [ 58.691236][ T1542] RDX: 000000000000006e RSI: 0000200000000300 RDI: 0000000000000004 [ 58.691248][ T1542] RBP: 00007f9777ba3090 R08: 0000000000000000 R09: 0000000000000000 [ 58.691261][ T1542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.691272][ T1542] R13: 00007f9777026038 R14: 00007f9777025fa0 R15: 00007fffafd07b18 [ 58.691287][ T1542] [ 58.792150][ T1536] x86/PAT: syz.0.433:1536 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 58.817946][ T301] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 58.852145][ T1532] x86/PAT: syz.0.433:1532 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 58.853130][ T301] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 58.982800][ T301] usb 3-1: USB disconnect, device number 14 [ 59.005300][ T619] udevd[619]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.102122][ T667] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 59.263561][ T667] usb 4-1: Using ep0 maxpacket: 32 [ 59.271433][ T667] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 59.282072][ T10] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 59.283301][ T667] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 59.298750][ T667] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.309003][ T667] usb 4-1: Product: syz [ 59.313326][ T667] usb 4-1: Manufacturer: syz [ 59.317919][ T667] usb 4-1: SerialNumber: syz [ 59.323532][ T667] usb 4-1: config 0 descriptor?? [ 59.330763][ T667] usb 4-1: bad CDC descriptors [ 59.336224][ T667] usb 4-1: unsupported MDLM descriptors [ 59.442768][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 59.454948][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.465284][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 59.474510][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.487808][ T10] usb 2-1: Found UVC 1.00 device (046d:0825) [ 59.497374][ T10] usb 2-1: No streaming interface found for terminal 2. [ 59.541949][ T1540] capability: warning: `syz.3.436' uses deprecated v2 capabilities in a way that may be insecure [ 59.559933][ T667] usb 4-1: USB disconnect, device number 18 [ 59.686743][ T301] usb 2-1: USB disconnect, device number 14 [ 59.844415][ T1565] FAULT_INJECTION: forcing a failure. [ 59.844415][ T1565] name failslab, interval 1, probability 0, space 0, times 0 [ 59.857393][ T1565] CPU: 1 UID: 0 PID: 1565 Comm: syz.2.447 Not tainted syzkaller #0 7b276d656437cde817a152a655ee87c3d6174d21 [ 59.857424][ T1565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 59.857436][ T1565] Call Trace: [ 59.857443][ T1565] [ 59.857450][ T1565] __dump_stack+0x21/0x30 [ 59.857472][ T1565] dump_stack_lvl+0x140/0x1c0 [ 59.857489][ T1565] ? __cfi_dump_stack_lvl+0x10/0x10 [ 59.857506][ T1565] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 59.857526][ T1565] ? ref_tracker_alloc+0x356/0x5b0 [ 59.857545][ T1565] dump_stack+0x19/0x20 [ 59.857560][ T1565] should_fail_ex+0x3c2/0x510 [ 59.857578][ T1565] should_failslab+0xac/0x100 [ 59.857597][ T1565] kmem_cache_alloc_node_noprof+0x45/0x420 [ 59.857622][ T1565] ? _raw_spin_lock+0x92/0x120 [ 59.857639][ T1565] ? __alloc_skb+0x10c/0x360 [ 59.857657][ T1565] ? __cfi__raw_spin_lock+0x10/0x10 [ 59.857675][ T1565] __alloc_skb+0x10c/0x360 [ 59.857694][ T1565] sock_wmalloc+0xb9/0x140 [ 59.857716][ T1565] unix_stream_connect+0x314/0xfb0 [ 59.857739][ T1565] ? __check_object_size+0xdc/0x870 [ 59.857763][ T1565] ? __cfi_unix_stream_connect+0x10/0x10 [ 59.857784][ T1565] ? selinux_socket_connect+0x27/0x40 [ 59.857804][ T1565] ? bpf_lsm_socket_connect+0xd/0x20 [ 59.857821][ T1565] ? security_socket_connect+0x3d/0x100 [ 59.857842][ T1565] __sys_connect+0x334/0x460 [ 59.857862][ T1565] ? __cfi___sys_connect+0x10/0x10 [ 59.857884][ T1565] ? __kasan_check_read+0x15/0x20 [ 59.857907][ T1565] __x64_sys_connect+0x7e/0x90 [ 59.857927][ T1565] x64_sys_call+0x1c2f/0x2ee0 [ 59.857945][ T1565] do_syscall_64+0x57/0xf0 [ 59.857963][ T1565] ? clear_bhb_loop+0x50/0xa0 [ 59.857985][ T1565] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 59.858007][ T1565] RIP: 0033:0x7f4b5399fb19 [ 59.858022][ T1565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.858037][ T1565] RSP: 002b:00007f4b548d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 59.858057][ T1565] RAX: ffffffffffffffda RBX: 00007f4b53c25fa0 RCX: 00007f4b5399fb19 [ 59.858071][ T1565] RDX: 000000000000006e RSI: 0000200000000300 RDI: 0000000000000004 [ 59.858082][ T1565] RBP: 00007f4b548d4090 R08: 0000000000000000 R09: 0000000000000000 [ 59.858093][ T1565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.858103][ T1565] R13: 00007f4b53c26038 R14: 00007f4b53c25fa0 R15: 00007ffc55775b38 [ 59.858117][ T1565] [ 60.125340][ T1570] overlayfs: upper fs does not support file handles, falling back to index=off. [ 60.134468][ T1570] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 60.220510][ T1576] tipc: Started in network mode [ 60.225443][ T1576] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 60.234766][ T1576] tipc: Enabled bearer , priority 10 [ 60.242318][ T1576] tipc: Enabled bearer , priority 10 [ 60.249087][ T1576] tipc: Bearer : already 2 bearers with priority 10 [ 60.256945][ T1576] tipc: Bearer : trying with adjusted priority [ 60.264426][ T1576] tipc: Enabled bearer , priority 9 [ 60.271499][ T1576] tipc: Bearer : already 2 bearers with priority 10 [ 60.279389][ T1576] tipc: Bearer : trying with adjusted priority [ 60.286559][ T1576] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 60.465175][ T1590] FAULT_INJECTION: forcing a failure. [ 60.465175][ T1590] name failslab, interval 1, probability 0, space 0, times 0 [ 60.477836][ T1590] CPU: 1 UID: 0 PID: 1590 Comm: syz.3.457 Not tainted syzkaller #0 7b276d656437cde817a152a655ee87c3d6174d21 [ 60.477867][ T1590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 60.477880][ T1590] Call Trace: [ 60.477886][ T1590] [ 60.477893][ T1590] __dump_stack+0x21/0x30 [ 60.477916][ T1590] dump_stack_lvl+0x140/0x1c0 [ 60.477933][ T1590] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.477952][ T1590] dump_stack+0x19/0x20 [ 60.477968][ T1590] should_fail_ex+0x3c2/0x510 [ 60.477985][ T1590] should_failslab+0xac/0x100 [ 60.478004][ T1590] kmem_cache_alloc_node_noprof+0x45/0x420 [ 60.478030][ T1590] ? __alloc_skb+0x10c/0x360 [ 60.478050][ T1590] __alloc_skb+0x10c/0x360 [ 60.478071][ T1590] tipc_buf_acquire+0x2f/0xe0 [ 60.478094][ T1590] tipc_named_withdraw+0x229/0x7c0 [ 60.478113][ T1590] tipc_nametbl_withdraw+0x174/0x370 [ 60.478134][ T1590] tipc_sk_withdraw+0x2fb/0x650 [ 60.478155][ T1590] ? tipc_sk_dump+0xfd0/0xfd0 [ 60.478175][ T1590] tipc_sk_bind+0x5f6/0x7a0 [ 60.478191][ T1590] ? __cfi_tipc_sk_bind+0x10/0x10 [ 60.478206][ T1590] tipc_bind+0x7d/0x270 [ 60.478220][ T1590] __sys_bind+0x30c/0x410 [ 60.478237][ T1590] ? __cfi___sys_bind+0x10/0x10 [ 60.478258][ T1590] ? __kasan_check_read+0x15/0x20 [ 60.478281][ T1590] __x64_sys_bind+0x7e/0x90 [ 60.478300][ T1590] x64_sys_call+0x1ffd/0x2ee0 [ 60.478320][ T1590] do_syscall_64+0x57/0xf0 [ 60.478338][ T1590] ? clear_bhb_loop+0x50/0xa0 [ 60.478362][ T1590] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.478385][ T1590] RIP: 0033:0x7f14ad79fb19 [ 60.478400][ T1590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.478414][ T1590] RSP: 002b:00007f14ae655028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 60.478434][ T1590] RAX: ffffffffffffffda RBX: 00007f14ada25fa0 RCX: 00007f14ad79fb19 [ 60.478447][ T1590] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 60.478458][ T1590] RBP: 00007f14ae655090 R08: 0000000000000000 R09: 0000000000000000 [ 60.478470][ T1590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.478481][ T1590] R13: 00007f14ada26038 R14: 00007f14ada25fa0 R15: 00007ffc5846e248 [ 60.478496][ T1590] [ 60.478504][ T1590] tipc: Withdrawal distribution failure [ 60.745741][ T1596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'. [ 60.918221][ T1607] netlink: 20 bytes leftover after parsing attributes in process `syz.3.463'. [ 61.027125][ T1609] netlink: 'syz.3.463': attribute type 11 has an invalid length. [ 61.243883][ T1621] tipc: Withdrawal distribution failure [ 61.272075][ T667] tipc: Node number set to 4269801491 [ 61.432366][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 61.432382][ T36] audit: type=1400 audit(1793974238.907:352): avc: denied { connect } for pid=1624 comm="syz.2.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.486892][ T36] audit: type=1400 audit(1793974238.927:353): avc: denied { shutdown } for pid=1624 comm="syz.2.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.722583][ T1635] FAULT_INJECTION: forcing a failure. [ 61.722583][ T1635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.735939][ T1635] CPU: 1 UID: 0 PID: 1635 Comm: syz.2.471 Not tainted syzkaller #0 7b276d656437cde817a152a655ee87c3d6174d21 [ 61.735968][ T1635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 61.735980][ T1635] Call Trace: [ 61.735986][ T1635] [ 61.735994][ T1635] __dump_stack+0x21/0x30 [ 61.736016][ T1635] dump_stack_lvl+0x140/0x1c0 [ 61.736033][ T1635] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.736050][ T1635] ? __kasan_check_write+0x18/0x20 [ 61.736075][ T1635] ? check_stack_object+0x10f/0x150 [ 61.736100][ T1635] dump_stack+0x19/0x20 [ 61.736116][ T1635] should_fail_ex+0x3c2/0x510 [ 61.736134][ T1635] should_fail+0xf/0x20 [ 61.736148][ T1635] should_fail_usercopy+0x1e/0x30 [ 61.736166][ T1635] _copy_from_user+0x20/0xa0 [ 61.736186][ T1635] __sys_connect+0x15b/0x460 [ 61.736208][ T1635] ? __cfi___sys_connect+0x10/0x10 [ 61.736228][ T1635] ? arch_do_signal_or_restart+0x2de/0x700 [ 61.736251][ T1635] ? __kasan_check_write+0x18/0x20 [ 61.736273][ T1635] ? fpregs_restore_userregs+0x11c/0x260 [ 61.736298][ T1635] __x64_sys_connect+0x7e/0x90 [ 61.736340][ T1635] x64_sys_call+0x1c2f/0x2ee0 [ 61.736359][ T1635] do_syscall_64+0x57/0xf0 [ 61.736378][ T1635] ? clear_bhb_loop+0x50/0xa0 [ 61.736401][ T1635] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 61.736443][ T1635] RIP: 0033:0x7f4b5399fb19 [ 61.736459][ T1635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.736474][ T1635] RSP: 002b:00007f4b548d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 61.736495][ T1635] RAX: ffffffffffffffda RBX: 00007f4b53c25fa0 RCX: 00007f4b5399fb19 [ 61.736518][ T1635] RDX: 000000000000006e RSI: 0000200000000300 RDI: 0000000000000004 [ 61.736531][ T1635] RBP: 00007f4b548d4090 R08: 0000000000000000 R09: 0000000000000000 [ 61.736543][ T1635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.736555][ T1635] R13: 00007f4b53c26038 R14: 00007f4b53c25fa0 R15: 00007ffc55775b38 [ 61.736570][ T1635] [ 61.969242][ T36] audit: type=1400 audit(1793974239.437:354): avc: denied { ioctl } for pid=1638 comm="syz.3.473" path="socket:[18247]" dev="sockfs" ino=18247 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.995282][ T36] audit: type=1400 audit(1793974239.437:355): avc: denied { setopt } for pid=1637 comm="syz.2.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.014581][ T667] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 62.022724][ T36] audit: type=1326 audit(1793974239.467:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1638 comm="syz.3.473" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14ad79fb19 code=0x0 [ 62.173200][ T667] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.184216][ T667] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 62.197312][ T667] usb 2-1: config 0 interface 0 has no altsetting 0 [ 62.204133][ T667] usb 2-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 62.213389][ T667] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.231526][ T667] usb 2-1: config 0 descriptor?? [ 62.253641][ T36] audit: type=1400 audit(1793974239.727:357): avc: denied { mount } for pid=1645 comm="syz.2.475" name="/" dev="pstore" ino=1390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 62.277706][ T36] audit: type=1400 audit(1793974239.747:358): avc: denied { map } for pid=1645 comm="syz.2.475" path="socket:[19310]" dev="sockfs" ino=19310 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 62.305105][ T36] audit: type=1400 audit(1793974239.747:359): avc: denied { accept } for pid=1645 comm="syz.2.475" path="socket:[19310]" dev="sockfs" ino=19310 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 62.331098][ T36] audit: type=1400 audit(1793974239.797:360): avc: denied { ioctl } for pid=1645 comm="syz.2.475" path="socket:[19312]" dev="sockfs" ino=19312 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.440888][ T1632] fuse: Bad value for 'group_id' [ 62.447679][ T1632] fuse: Bad value for 'group_id' [ 62.455029][ T36] audit: type=1400 audit(1793974239.927:361): avc: denied { unmount } for pid=1631 comm="syz.1.470" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.481893][ T667] usbhid 2-1:0.0: can't add hid device: -71 [ 62.487958][ T667] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 62.506150][ T667] usb 2-1: USB disconnect, device number 15 [ 62.563681][ T1646] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input4 [ 62.701732][ T1656] FAULT_INJECTION: forcing a failure. [ 62.701732][ T1656] name failslab, interval 1, probability 0, space 0, times 0 [ 62.714411][ T1656] CPU: 1 UID: 0 PID: 1656 Comm: syz.2.479 Not tainted syzkaller #0 7b276d656437cde817a152a655ee87c3d6174d21 [ 62.714440][ T1656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 62.714452][ T1656] Call Trace: [ 62.714458][ T1656] [ 62.714465][ T1656] __dump_stack+0x21/0x30 [ 62.714487][ T1656] dump_stack_lvl+0x140/0x1c0 [ 62.714504][ T1656] ? __cfi_dump_stack_lvl+0x10/0x10 [ 62.714523][ T1656] dump_stack+0x19/0x20 [ 62.714538][ T1656] should_fail_ex+0x3c2/0x510 [ 62.714564][ T1656] should_failslab+0xac/0x100 [ 62.714584][ T1656] kmem_cache_alloc_node_noprof+0x45/0x420 [ 62.714609][ T1656] ? __alloc_skb+0x10c/0x360 [ 62.714630][ T1656] __alloc_skb+0x10c/0x360 [ 62.714649][ T1656] tipc_buf_acquire+0x2f/0xe0 [ 62.714674][ T1656] tipc_named_withdraw+0x229/0x7c0 [ 62.714693][ T1656] tipc_nametbl_withdraw+0x174/0x370 [ 62.714714][ T1656] tipc_sk_withdraw+0x2fb/0x650 [ 62.714736][ T1656] ? tipc_sk_dump+0xfd0/0xfd0 [ 62.714756][ T1656] tipc_sk_bind+0x5f6/0x7a0 [ 62.714773][ T1656] ? __cfi_tipc_sk_bind+0x10/0x10 [ 62.714792][ T1656] tipc_bind+0x7d/0x270 [ 62.714812][ T1656] __sys_bind+0x30c/0x410 [ 62.714831][ T1656] ? __cfi___sys_bind+0x10/0x10 [ 62.714852][ T1656] ? __kasan_check_read+0x15/0x20 [ 62.714875][ T1656] __x64_sys_bind+0x7e/0x90 [ 62.714894][ T1656] x64_sys_call+0x1ffd/0x2ee0 [ 62.714912][ T1656] do_syscall_64+0x57/0xf0 [ 62.714931][ T1656] ? clear_bhb_loop+0x50/0xa0 [ 62.714954][ T1656] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 62.714976][ T1656] RIP: 0033:0x7f4b5399fb19 [ 62.714992][ T1656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.715007][ T1656] RSP: 002b:00007f4b548d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 62.715029][ T1656] RAX: ffffffffffffffda RBX: 00007f4b53c25fa0 RCX: 00007f4b5399fb19 [ 62.715043][ T1656] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 62.715054][ T1656] RBP: 00007f4b548d4090 R08: 0000000000000000 R09: 0000000000000000 [ 62.715065][ T1656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.715077][ T1656] R13: 00007f4b53c26038 R14: 00007f4b53c25fa0 R15: 00007ffc55775b38 [ 62.715092][ T1656] [ 62.715100][ T1656] tipc: Withdrawal distribution failure [ 63.252294][ T301] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 63.402049][ T301] usb 3-1: Using ep0 maxpacket: 16 [ 63.411989][ T301] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 63.422107][ T667] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 63.430063][ T301] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 63.439524][ T301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.453159][ T301] usb 3-1: Product: syz [ 63.457340][ T301] usb 3-1: Manufacturer: syz [ 63.462215][ T301] usb 3-1: SerialNumber: syz [ 63.467599][ T301] usb 3-1: config 0 descriptor?? [ 63.475473][ T301] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 63.483649][ T301] usb 3-1: Detected FT232R [ 63.592048][ T667] usb 4-1: Using ep0 maxpacket: 8 [ 63.598353][ T667] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 191, changing to 7 [ 63.611159][ T667] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 63.622704][ T667] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.630761][ T667] usb 4-1: Product: syz [ 63.635179][ T667] usb 4-1: Manufacturer: syz [ 63.640176][ T667] usb 4-1: SerialNumber: syz [ 63.676560][ T301] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 63.685495][ T301] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 63.692892][ T301] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 63.700408][ T301] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 63.725447][ T301] usb 3-1: USB disconnect, device number 15 [ 63.737739][ T301] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 63.748977][ T301] ftdi_sio 3-1:0.0: device disconnected [ 63.852683][ T1669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.862619][ T1669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.874878][ T667] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 63.889693][ T667] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 63.911234][ T667] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 63.930824][ T999] udevd[999]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 63.930969][ T667] usb 4-1: USB disconnect, device number 19 [ 64.298068][ T1679] tipc: Withdrawal distribution failure [ 64.451304][ T1688] kvm: kvm [1683]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x7fffffffffffffff [ 64.483644][ T1692] ./dev/sda1: Can't lookup blockdev [ 64.712074][ T301] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 64.722083][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 64.872090][ T301] usb 4-1: Using ep0 maxpacket: 16 [ 64.881597][ T301] usb 4-1: unable to get BOS descriptor or descriptor too short [ 64.890297][ T301] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 64.902821][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.904613][ T301] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 64.922044][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.922959][ T301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.940653][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 64.940965][ T301] usb 4-1: Product: syz [ 64.957890][ T301] usb 4-1: Manufacturer: syz [ 64.967859][ T301] usb 4-1: SerialNumber: syz [ 64.972054][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 64.981552][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.002278][ T10] usb 3-1: config 0 descriptor?? [ 65.139553][ T1704] ./dev/sda1: Can't lookup blockdev [ 65.195923][ T301] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 65.205859][ T301] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 65.410165][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 65.412162][ T301] usb 4-1: USB disconnect, device number 20 [ 65.432072][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 65.442092][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 65.468309][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 65.479452][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 65.487047][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 65.495293][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 65.502883][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 65.510283][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 65.518172][ T10] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 65.527320][ T10] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 65.627733][ T1688] bridge0: port 3(syz_tun) entered blocking state [ 65.634253][ T1688] bridge0: port 3(syz_tun) entered disabled state [ 65.640723][ T1688] syz_tun: entered allmulticast mode [ 65.646669][ T1688] syz_tun: entered promiscuous mode [ 65.651991][ T1688] bridge0: port 3(syz_tun) entered blocking state [ 65.658461][ T1688] bridge0: port 3(syz_tun) entered forwarding state [ 65.804953][ T1720] overlayfs: missing 'workdir' [ 65.953498][ T1723] batadv_slave_0: entered promiscuous mode [ 65.969488][ T1723] batadv_slave_0: entered allmulticast mode [ 66.244807][ T1734] netlink: 'syz.3.509': attribute type 16 has an invalid length. [ 66.252689][ T1734] netlink: 'syz.3.509': attribute type 2 has an invalid length. [ 66.260338][ T1734] netlink: 64110 bytes leftover after parsing attributes in process `syz.3.509'. [ 66.542051][ T441] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 66.703061][ T441] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 66.711311][ T441] usb 4-1: config 0 has no interface number 0 [ 66.728950][ T441] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 66.738346][ T441] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.748453][ T441] usb 4-1: Product: syz [ 66.758537][ T441] usb 4-1: Manufacturer: syz [ 66.765401][ T441] usb 4-1: SerialNumber: syz [ 66.773946][ T441] usb 4-1: config 0 descriptor?? [ 67.203904][ T441] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 67.214090][ T441] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 67.225901][ T441] asix 4-1:0.251: probe with driver asix failed with error -71 [ 67.242622][ T441] usb 4-1: USB disconnect, device number 21 [ 67.552628][ T301] usb 3-1: USB disconnect, device number 16 [ 67.720883][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 67.720900][ T36] audit: type=1400 audit(1793974245.187:372): avc: denied { create } for pid=1754 comm="syz.3.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 67.782148][ T1765] Bluetooth: hci0: sending frame failed (-49) [ 67.788318][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 68.050338][ T1771] netlink: 'syz.2.520': attribute type 4 has an invalid length. [ 68.062070][ T1771] netlink: 'syz.2.520': attribute type 6 has an invalid length. [ 68.069804][ T1771] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.520'. [ 68.082053][ T36] audit: type=1400 audit(1793974245.537:373): avc: denied { create } for pid=1772 comm="syz.1.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 68.172811][ T36] audit: type=1400 audit(1793974245.647:374): avc: denied { lock } for pid=1780 comm="syz.1.525" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=19918 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 68.248817][ T36] audit: type=1400 audit(1793974245.717:375): avc: denied { mount } for pid=1788 comm="syz.1.527" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 68.742077][ T301] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 68.797817][ T36] audit: type=1400 audit(1793974246.267:376): avc: denied { bind } for pid=1804 comm="syz.1.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.900161][ T1814] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=1814 comm=syz.1.536 [ 68.914545][ T301] usb 4-1: Using ep0 maxpacket: 16 [ 68.928957][ T301] usb 4-1: unable to get BOS descriptor or descriptor too short [ 68.941698][ T301] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 68.963474][ T301] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 68.973402][ T301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.988700][ T301] usb 4-1: Product: syz [ 68.995278][ T301] usb 4-1: Manufacturer: syz [ 68.999996][ T301] usb 4-1: SerialNumber: syz [ 69.208684][ T301] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 69.217065][ T301] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 69.425790][ T301] usb 4-1: USB disconnect, device number 22 [ 69.452742][ T619] udevd[619]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 69.555019][ T36] audit: type=1400 audit(1793974247.027:377): avc: denied { listen } for pid=1829 comm="syz.2.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.584025][ T36] audit: type=1400 audit(1793974247.057:378): avc: denied { write } for pid=1829 comm="syz.2.542" path="socket:[19973]" dev="sockfs" ino=19973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.769402][ T1839] cgroup: fork rejected by pids controller in /syz2 [ 69.914179][ T36] audit: type=1400 audit(1793974247.387:379): avc: denied { setattr } for pid=1872 comm="syz.1.545" name="NETLINK" dev="sockfs" ino=20930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.302077][ T301] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 70.452807][ T301] usb 4-1: not running at top speed; connect to a high speed hub [ 70.462798][ T301] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.483106][ T301] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 70.494018][ T301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.509480][ T301] usb 4-1: Found UVC 1.00 device (046d:0825) [ 70.719216][ T301] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 70.728928][ T301] uvcvideo 4-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 70.737916][ T301] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 70.747239][ T301] usb 4-1: USB disconnect, device number 23 [ 71.259035][ T36] audit: type=1400 audit(1793974248.727:380): avc: denied { cmd } for pid=1909 comm="syz.1.559" path="socket:[20022]" dev="sockfs" ino=20022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 71.314032][ T1913] mmap: syz.3.560 (1913): VmData 29134848 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 73.009053][ T1953] fuse: Unknown parameter '0x0000000000000003ÿÿ18446744073709551615' [ 73.017815][ T1953] overlayfs: failed to resolve './file1/file0': -36 [ 73.025310][ T1953] overlay: Unknown parameter 'func' [ 73.114025][ T1974] ./dev/sda1: Can't lookup blockdev [ 73.312069][ T441] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 73.482728][ T441] usb 4-1: not running at top speed; connect to a high speed hub [ 73.503754][ T441] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.513897][ T441] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 73.523101][ T441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.537209][ T441] usb 4-1: Found UVC 1.00 device (046d:0825) [ 73.544228][ T441] usb 4-1: No streaming interface found for terminal 2. [ 73.737816][ T573] usb 4-1: USB disconnect, device number 24 [ 74.004493][ T36] audit: type=1400 audit(1793974251.477:381): avc: denied { setopt } for pid=1982 comm="syz.1.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.032815][ T299] bridge0: port 3(syz_tun) entered disabled state [ 74.050854][ T299] syz_tun (unregistering): left allmulticast mode [ 74.057369][ T299] syz_tun (unregistering): left promiscuous mode [ 74.063742][ T299] bridge0: port 3(syz_tun) entered disabled state [ 74.097800][ T1984] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.104888][ T1984] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.112069][ T1984] bridge_slave_0: entered allmulticast mode [ 74.118469][ T1984] bridge_slave_0: entered promiscuous mode [ 74.125172][ T1364] bridge_slave_1: left allmulticast mode [ 74.130817][ T1364] bridge_slave_1: left promiscuous mode [ 74.137528][ T1364] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.145192][ T1364] bridge_slave_0: left allmulticast mode [ 74.150938][ T1364] bridge_slave_0: left promiscuous mode [ 74.156780][ T1364] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.224414][ T1984] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.231472][ T1984] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.238577][ T1984] bridge_slave_1: entered allmulticast mode [ 74.244870][ T1984] bridge_slave_1: entered promiscuous mode [ 74.270188][ T1364] veth1_macvtap: left promiscuous mode [ 74.275718][ T1364] veth0_vlan: left promiscuous mode [ 74.331618][ T1984] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.338678][ T1984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.345965][ T1984] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.353000][ T1984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.376451][ T1366] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.383733][ T1366] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.392988][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.400038][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.408683][ T1366] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.415763][ T1366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.438493][ T1984] veth0_vlan: entered promiscuous mode [ 74.448716][ T1984] veth1_macvtap: entered promiscuous mode [ 74.465655][ T36] audit: type=1400 audit(1793974251.937:382): avc: denied { mount } for pid=1984 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.487999][ T36] audit: type=1400 audit(1793974251.937:383): avc: denied { mounton } for pid=1984 comm="syz-executor" path="/root/syzkaller.pcuXXM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 74.514712][ T573] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 74.553347][ T36] audit: type=1400 audit(1793974252.027:384): avc: denied { read } for pid=2002 comm="syz.1.590" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.623047][ T36] audit: type=1400 audit(1793974252.097:385): avc: denied { write } for pid=2007 comm="syz.1.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 74.673070][ T573] usb 4-1: config 3 has an invalid interface number: 99 but max is 0 [ 74.681291][ T573] usb 4-1: config 3 has no interface number 0 [ 74.687666][ T573] usb 4-1: config 3 interface 99 has no altsetting 0 [ 74.699021][ T573] usb 4-1: string descriptor 0 read error: -22 [ 74.705617][ T573] usb 4-1: New USB device found, idVendor=12d1, idProduct=3e12, bcdDevice=b2.be [ 74.714993][ T573] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.863877][ T36] audit: type=1400 audit(1793974252.337:386): avc: denied { setopt } for pid=2029 comm="syz.4.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 74.865652][ T2031] x_tables: unsorted underflow at hook 3 [ 74.900935][ T36] audit: type=1400 audit(1793974252.367:387): avc: denied { setopt } for pid=2033 comm="syz.2.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.926535][ T573] usb 4-1: USB disconnect, device number 25 [ 74.942218][ T36] audit: type=1400 audit(1793974252.367:388): avc: denied { ioctl } for pid=2033 comm="syz.2.598" path="socket:[21398]" dev="sockfs" ino=21398 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.390513][ T36] audit: type=1400 audit(1793974252.857:389): avc: denied { bind } for pid=2039 comm="syz.1.600" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.411065][ T36] audit: type=1400 audit(1793974252.857:390): avc: denied { node_bind } for pid=2039 comm="syz.1.600" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 75.702067][ T573] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 75.733147][ T9] rust_binder: 2058: undelivered TRANSACTION_ERROR: 29189 [ 75.791846][ T2068] netlink: 72 bytes leftover after parsing attributes in process `syz.4.609'. [ 75.832094][ T573] usb 4-1: device descriptor read/64, error -71 [ 76.072105][ T573] usb 4-1: device descriptor read/64, error -71 [ 76.312090][ T573] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 76.442110][ T573] usb 4-1: device descriptor read/64, error -71 [ 76.612403][ T2100] netlink: 48 bytes leftover after parsing attributes in process `syz.4.621'. [ 76.682060][ T573] usb 4-1: device descriptor read/64, error -71 [ 76.792197][ T573] usb usb4-port1: attempt power cycle [ 76.929944][ T2114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.625'. [ 77.142071][ T573] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 77.163060][ T573] usb 4-1: device descriptor read/8, error -71 [ 77.303057][ T573] usb 4-1: device descriptor read/8, error -71 [ 77.552072][ T573] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 77.579956][ T573] usb 4-1: device descriptor read/8, error -71 [ 77.678853][ T2162] netlink: 'syz.1.639': attribute type 22 has an invalid length. [ 77.713011][ T573] usb 4-1: device descriptor read/8, error -71 [ 77.822131][ T573] usb usb4-port1: unable to enumerate USB device [ 78.882108][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 79.033217][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.044292][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.054224][ T9] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 79.063441][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.072284][ T9] usb 4-1: config 0 descriptor?? [ 79.084460][ T2187] overlayfs: failed to clone upperpath [ 79.090415][ T2187] overlayfs: failed to clone upperpath [ 79.096274][ T2187] overlayfs: failed to clone upperpath [ 79.102165][ T2187] overlayfs: failed to clone upperpath [ 79.107875][ T2187] overlayfs: failed to clone upperpath [ 79.113640][ T2187] overlayfs: failed to clone upperpath [ 79.119369][ T2187] overlayfs: failed to clone upperpath [ 79.125154][ T2187] overlayfs: failed to clone upperpath [ 79.130884][ T2187] overlayfs: failed to clone upperpath [ 79.136655][ T2187] overlayfs: failed to clone upperpath [ 79.142886][ T2187] overlayfs: failed to clone upperpath [ 79.148651][ T2187] overlayfs: failed to clone upperpath [ 79.154453][ T2187] overlayfs: failed to clone upperpath [ 79.160198][ T2187] overlayfs: failed to clone upperpath [ 79.165967][ T2187] overlayfs: failed to clone upperpath [ 79.171954][ T2187] overlayfs: failed to clone upperpath [ 79.177723][ T2187] overlayfs: failed to clone upperpath [ 79.183463][ T2187] overlayfs: failed to clone upperpath [ 79.189172][ T2187] overlayfs: failed to clone upperpath [ 79.194980][ T2187] overlayfs: failed to clone upperpath [ 79.200678][ T2187] overlayfs: failed to clone upperpath [ 79.206487][ T2187] overlayfs: failed to clone upperpath [ 79.212240][ T2187] overlayfs: failed to clone upperpath [ 79.218019][ T2187] overlayfs: failed to clone upperpath [ 79.225659][ T2187] overlayfs: failed to clone upperpath [ 79.231372][ T2187] overlayfs: failed to clone upperpath [ 79.237148][ T2187] overlayfs: failed to clone upperpath [ 79.242855][ T2187] overlayfs: failed to clone upperpath [ 79.248583][ T2187] overlayfs: failed to clone upperpath [ 79.254384][ T2187] overlayfs: failed to clone upperpath [ 79.260056][ T2187] overlayfs: failed to clone upperpath [ 79.265869][ T2187] overlayfs: failed to clone upperpath [ 79.271619][ T2187] overlayfs: failed to clone upperpath [ 79.277404][ T2187] overlayfs: failed to clone upperpath [ 79.283249][ T2187] overlayfs: failed to clone upperpath [ 79.289054][ T2187] overlayfs: failed to clone upperpath [ 79.294849][ T2187] overlayfs: failed to clone upperpath [ 79.300526][ T2187] overlayfs: failed to clone upperpath [ 79.306301][ T2187] overlayfs: failed to clone upperpath [ 79.312093][ T2187] overlayfs: failed to clone upperpath [ 79.317827][ T2187] overlayfs: failed to clone upperpath [ 79.323572][ T2187] overlayfs: failed to clone upperpath [ 79.329274][ T2187] overlayfs: failed to clone upperpath [ 79.335092][ T2187] overlayfs: failed to clone upperpath [ 79.340781][ T2187] overlayfs: failed to clone upperpath [ 79.346560][ T2187] overlayfs: failed to clone upperpath [ 79.352272][ T2187] overlayfs: failed to clone upperpath [ 79.358010][ T2187] overlayfs: failed to clone upperpath [ 79.363777][ T2187] overlayfs: failed to clone upperpath [ 79.369434][ T2187] overlayfs: failed to clone upperpath [ 79.375179][ T2187] overlayfs: failed to clone upperpath [ 79.380905][ T2187] overlayfs: failed to clone upperpath [ 79.386659][ T2187] overlayfs: failed to clone upperpath [ 79.392609][ T2187] overlayfs: failed to clone upperpath [ 79.398299][ T2187] overlayfs: failed to clone upperpath [ 79.404072][ T2187] overlayfs: failed to clone upperpath [ 79.409731][ T2187] overlayfs: failed to clone upperpath [ 79.415702][ T2187] overlayfs: failed to clone upperpath [ 79.421366][ T2187] overlayfs: failed to clone upperpath [ 79.427131][ T2187] overlayfs: failed to clone upperpath [ 79.432949][ T2187] overlayfs: failed to clone upperpath [ 79.438692][ T2187] overlayfs: failed to clone upperpath [ 79.444438][ T2187] overlayfs: failed to clone upperpath [ 79.450183][ T2187] overlayfs: failed to clone upperpath [ 79.455947][ T2187] overlayfs: failed to clone upperpath [ 79.461626][ T2187] overlayfs: failed to clone upperpath [ 79.608224][ T2100] FAULT_INJECTION: forcing a failure. [ 79.608224][ T2100] name fail_futex, interval 1, probability 0, space 0, times 1 [ 79.621363][ T2100] CPU: 1 UID: 0 PID: 2100 Comm: syz.4.621 Not tainted syzkaller #0 7b276d656437cde817a152a655ee87c3d6174d21 [ 79.621392][ T2100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 79.621403][ T2100] Call Trace: [ 79.621409][ T2100] [ 79.621416][ T2100] __dump_stack+0x21/0x30 [ 79.621438][ T2100] dump_stack_lvl+0x140/0x1c0 [ 79.621455][ T2100] ? __cfi_dump_stack_lvl+0x10/0x10 [ 79.621482][ T2100] dump_stack+0x19/0x20 [ 79.621497][ T2100] should_fail_ex+0x3c2/0x510 [ 79.621515][ T2100] should_fail+0xf/0x20 [ 79.621531][ T2100] get_futex_key+0x22c/0x940 [ 79.621551][ T2100] ? __cfi_get_futex_key+0x10/0x10 [ 79.621569][ T2100] ? __schedule+0x16e8/0x2380 [ 79.621590][ T2100] futex_wake+0x150/0x950 [ 79.621612][ T2100] ? __cfi_futex_wake+0x10/0x10 [ 79.621634][ T2100] ? perf_lock_task_context+0x398/0x450 [ 79.621651][ T2100] ? __perf_event_period+0x490/0x490 [ 79.621668][ T2100] ? mutex_unlock+0x90/0x240 [ 79.621689][ T2100] do_futex+0x37d/0x510 [ 79.621708][ T2100] ? __kasan_check_read+0x15/0x20 [ 79.621731][ T2100] ? __cfi_do_futex+0x10/0x10 [ 79.621749][ T2100] ? __kasan_check_write+0x18/0x20 [ 79.621773][ T2100] mm_release+0x15f/0x300 [ 79.621795][ T2100] ? exit_mm_release+0x50/0x50 [ 79.621817][ T2100] ? futex_exit_release+0x11d/0x1f0 [ 79.621836][ T2100] exit_mm_release+0x29/0x50 [ 79.621858][ T2100] do_exit+0x832/0x2850 [ 79.621882][ T2100] ? futex_wake+0x666/0x950 [ 79.621904][ T2100] ? __cfi_do_exit+0x10/0x10 [ 79.621926][ T2100] ? futex_wait+0x2b8/0x7c0 [ 79.621947][ T2100] ? __cfi_futex_wait+0x10/0x10 [ 79.621968][ T2100] ? __kasan_check_write+0x18/0x20 [ 79.621990][ T2100] ? _raw_spin_lock_irq+0x93/0x120 [ 79.622011][ T2100] do_group_exit+0x21f/0x2f0 [ 79.622031][ T2100] ? __kasan_check_write+0x18/0x20 [ 79.622053][ T2100] ? recalc_sigpending+0x184/0x1d0 [ 79.622075][ T2100] get_signal+0x134c/0x1490 [ 79.622095][ T2100] arch_do_signal_or_restart+0xbc/0x700 [ 79.622115][ T2100] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 79.622138][ T2100] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 79.622158][ T2100] ? __kasan_check_write+0x18/0x20 [ 79.622183][ T2100] syscall_exit_to_user_mode+0x57/0xb0 [ 79.622206][ T2100] do_syscall_64+0x63/0xf0 [ 79.622225][ T2100] ? clear_bhb_loop+0x50/0xa0 [ 79.622248][ T2100] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.622271][ T2100] RIP: 0033:0x7fa67f39fb19 [ 79.622287][ T2100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.622302][ T2100] RSP: 002b:00007fa6801cf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 79.622322][ T2100] RAX: fffffffffffffe00 RBX: 00007fa67f626098 RCX: 00007fa67f39fb19 [ 79.622335][ T2100] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa67f626098 [ 79.622347][ T2100] RBP: 00007fa67f626090 R08: 0000000000000000 R09: 0000000000000000 [ 79.622358][ T2100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.622369][ T2100] R13: 00007fa67f626128 R14: 00007ffdbc7b83a0 R15: 00007ffdbc7b8488 [ 79.622384][ T2100] [ 79.855905][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 79.855922][ T36] audit: type=1400 audit(1793974256.967:398): avc: denied { read } for pid=2179 comm="syz.3.645" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 79.953091][ T36] audit: type=1400 audit(1793974256.967:399): avc: denied { open } for pid=2179 comm="syz.3.645" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 79.954525][ T9] hid-led 0003:1D34:000A.0005: unknown main item tag 0x0 [ 80.000848][ T9] hid-led 0003:1D34:000A.0005: unknown main item tag 0x0 [ 80.008009][ T9] hid-led 0003:1D34:000A.0005: unknown main item tag 0x0 [ 80.019151][ T9] hid-led 0003:1D34:000A.0005: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.3-1/input0 [ 80.033257][ T9] hid-led 0003:1D34:000A.0005: Dream Cheeky Webmail Notifier initialized [ 80.231183][ T2208] tipc: Started in network mode [ 80.236193][ T2208] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 80.245423][ T2180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.253898][ T2180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.261881][ T2208] tipc: Enabled bearer , priority 10 [ 80.268309][ T2180] vlan0: entered allmulticast mode [ 80.273455][ T2180] veth0_vlan: entered allmulticast mode [ 80.280080][ T2208] tipc: Enabled bearer , priority 10 [ 80.286759][ T2208] tipc: Bearer : already 2 bearers with priority 10 [ 80.286778][ T9] usb 4-1: USB disconnect, device number 30 [ 80.294457][ T2208] tipc: Bearer : trying with adjusted priority [ 80.294543][ T2208] tipc: Enabled bearer , priority 9 [ 80.314486][ T2208] tipc: Bearer : already 2 bearers with priority 10 [ 80.321937][ T2208] tipc: Bearer : trying with adjusted priority [ 80.328974][ T2208] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 80.346846][ T2212] tipc: Enabling of bearer rejected, already enabled [ 80.355096][ T2211] tipc: Enabling of bearer rejected, already enabled [ 80.363212][ T2215] tipc: Enabling of bearer rejected, already enabled [ 80.371171][ T2216] tipc: Bearer : already 2 bearers with priority 10 [ 80.378887][ T2216] tipc: Bearer : trying with adjusted priority [ 80.386029][ T2216] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 80.536288][ T2238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.660'. [ 80.561127][ T36] audit: type=1400 audit(1793974258.027:400): avc: denied { bind } for pid=2239 comm="syz.4.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.581457][ T36] audit: type=1400 audit(1793974258.047:401): avc: denied { name_bind } for pid=2239 comm="syz.4.661" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 80.633815][ T2249] fuse: Unknown parameter 'ÿ0xffffffffffffffff0000000000000000000300000000000000000000' [ 80.645293][ T36] audit: type=1400 audit(1793974258.117:402): avc: denied { execute } for pid=2248 comm="syz.1.664" name="file0" dev="tmpfs" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.910516][ T2275] netlink: 'syz.3.674': attribute type 4 has an invalid length. [ 80.920746][ T2275] netlink: 'syz.3.674': attribute type 4 has an invalid length. [ 80.947591][ T36] audit: type=1400 audit(1793974258.417:403): avc: denied { execute_no_trans } for pid=2278 comm="syz.3.676" path="/170/file1" dev="tmpfs" ino=964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 81.222080][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 81.239743][ T2287] netlink: 'syz.1.679': attribute type 12 has an invalid length. [ 81.248544][ T2287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2287 comm=syz.1.679 [ 81.372109][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 81.380912][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 81.389218][ T9] usb 4-1: config 0 has no interface number 0 [ 81.395476][ T10] tipc: Node number set to 4269801491 [ 81.400917][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.411932][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.422032][ T9] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 81.431113][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.439794][ T9] usb 4-1: config 0 descriptor?? [ 82.048066][ T9] uclogic 0003:28BD:0071.0006: pen parameters not found [ 82.055458][ T9] uclogic 0003:28BD:0071.0006: interface is invalid, ignoring [ 83.019240][ T36] audit: type=1400 audit(1793974260.487:404): avc: denied { mounton } for pid=2311 comm="syz.1.686" path="/205/file0" dev="tmpfs" ino=1166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.022331][ T2312] fuse: Bad value for 'fd' [ 83.057283][ T36] audit: type=1400 audit(1793974260.527:405): avc: denied { getopt } for pid=2313 comm="syz.1.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 83.089323][ T2318] overlayfs: empty lowerdir [ 83.604160][ T2322] tipc: Can't bind to reserved service type 2 [ 83.732294][ T36] audit: type=1400 audit(1793974261.207:406): avc: denied { mounton } for pid=2330 comm="syz.4.696" path="/22/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 83.732302][ T2331] overlay: Bad value for 'index' [ 83.759475][ T36] audit: type=1400 audit(1793974261.227:407): avc: denied { remount } for pid=2330 comm="syz.4.696" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 83.760903][ T2331] overlay: Bad value for 'index' [ 83.994715][ T667] usb 4-1: USB disconnect, device number 31 [ 84.497324][ T2360] fuse: Bad value for 'fd' [ 84.570860][ T2373] overlayfs: failed to clone lowerpath [ 84.879666][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 84.879681][ T36] audit: type=1400 audit(1793974262.347:419): avc: denied { unlink } for pid=298 comm="syz-executor" name="file2" dev="tmpfs" ino=1004 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 85.108578][ T36] audit: type=1400 audit(1793974262.577:420): avc: denied { getattr } for pid=2388 comm="syz.2.719" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=23309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 85.202097][ T9] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 85.366413][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 85.374036][ T9] usb 4-1: can't read configurations, error -71 [ 85.995678][ T2400] ./dev/sda1: Can't lookup blockdev [ 86.028558][ T2404] overlayfs: failed to clone upperpath [ 86.834379][ T2412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.729'. [ 86.851671][ T2415] syzkaller1: entered promiscuous mode [ 86.859023][ T2415] syzkaller1: entered allmulticast mode [ 87.152072][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 87.171868][ T36] audit: type=1400 audit(1793974264.637:421): avc: denied { watch } for pid=2435 comm="syz.1.738" path="/215" dev="tmpfs" ino=1216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 87.194022][ T36] audit: type=1326 audit(1793974264.647:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2435 comm="syz.1.738" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9776d9fb19 code=0x0 [ 87.222391][ T36] audit: type=1400 audit(1793974264.697:423): avc: denied { ioctl } for pid=2420 comm="syz.3.733" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.322060][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 87.328265][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.339673][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 87.352585][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 87.361643][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.370199][ T9] usb 4-1: config 0 descriptor?? [ 87.662135][ T2440] netlink: 'syz.2.739': attribute type 12 has an invalid length. [ 87.670045][ T2439] netlink: 'syz.2.739': attribute type 12 has an invalid length. [ 87.777715][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 87.784998][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 87.792227][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 87.799562][ T9] microsoft 0003:045E:07DA.0007: No inputs registered, leaving [ 87.807525][ T9] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 87.820322][ T9] microsoft 0003:045E:07DA.0007: no inputs found [ 87.826845][ T9] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 87.979533][ T36] audit: type=1400 audit(1793974265.447:424): avc: denied { read write } for pid=2420 comm="syz.3.733" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.002949][ T36] audit: type=1400 audit(1793974265.447:425): avc: denied { open } for pid=2420 comm="syz.3.733" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.222550][ T9] usb 4-1: USB disconnect, device number 34 [ 88.719307][ T2453] netlink: 'syz.2.744': attribute type 27 has an invalid length. [ 88.982080][ T667] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 89.132093][ T667] usb 4-1: Using ep0 maxpacket: 8 [ 89.138253][ T667] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.148485][ T667] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 89.157566][ T667] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 89.168602][ T667] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 89.177789][ T667] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.185780][ T667] usb 4-1: Product: syz [ 89.189933][ T667] usb 4-1: Manufacturer: syz [ 89.194536][ T667] usb 4-1: SerialNumber: syz [ 89.323087][ T2470] netlink: 24 bytes leftover after parsing attributes in process `syz.2.749'. [ 89.332048][ T2470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.749'. [ 89.403378][ T1367] Bluetooth: hci0: Frame reassembly failed (-84) [ 89.908785][ T2476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.752'. [ 89.918219][ T2476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2476 comm=syz.2.752 [ 89.931137][ T2476] netlink: 156 bytes leftover after parsing attributes in process `syz.2.752'. [ 89.941632][ T36] audit: type=1326 audit(1793974267.407:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2475 comm="syz.2.752" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b5399fb19 code=0x0 [ 90.700068][ T2486] overlayfs: failed to clone upperpath [ 91.412115][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 91.412141][ T1765] Bluetooth: hci0: command 0x1003 tx timeout [ 91.427165][ T667] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 91.435889][ T667] usb 4-1: clock source 0 is not valid, cannot use [ 91.442609][ T667] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 91.449152][ T667] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 91.460226][ T667] usb 4-1: USB disconnect, device number 35 [ 91.842671][ T2501] ./dev/sda1: Can't lookup blockdev [ 92.381460][ T36] audit: type=1326 audit(1793974269.847:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2514 comm="syz.2.764" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b5399fb19 code=0x0 [ 92.382178][ T2516] X.509: signatureAlgorithm (12) differs from tbsCertificate.signature (13) [ 93.012222][ T10] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 93.162766][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 93.171245][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.181504][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 93.190652][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.200286][ T10] usb 4-1: Found UVC 1.00 device (046d:0825) [ 93.207224][ T10] usb 4-1: No streaming interface found for terminal 2. [ 93.251401][ T2533] netlink: 'syz.2.770': attribute type 4 has an invalid length. [ 93.261550][ T2533] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.770'. [ 93.401211][ T667] usb 4-1: USB disconnect, device number 36 [ 93.984324][ T2561] FAULT_INJECTION: forcing a failure. [ 93.984324][ T2561] name failslab, interval 1, probability 0, space 0, times 0 [ 93.997002][ T2561] CPU: 1 UID: 0 PID: 2561 Comm: syz.3.781 Not tainted syzkaller #0 7b276d656437cde817a152a655ee87c3d6174d21 [ 93.997033][ T2561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 93.997045][ T2561] Call Trace: [ 93.997053][ T2561] [ 93.997061][ T2561] __dump_stack+0x21/0x30 [ 93.997077][ T2561] dump_stack_lvl+0x140/0x1c0 [ 93.997087][ T2561] ? __cfi_dump_stack_lvl+0x10/0x10 [ 93.997098][ T2561] dump_stack+0x19/0x20 [ 93.997107][ T2561] should_fail_ex+0x3c2/0x510 [ 93.997118][ T2561] should_failslab+0xac/0x100 [ 93.997129][ T2561] __kmalloc_cache_noprof+0x41/0x470 [ 93.997144][ T2561] ? debugfs_file_get+0x11d/0x590 [ 93.997156][ T2561] debugfs_file_get+0x11d/0x590 [ 93.997166][ T2561] ? __cfi_debugfs_file_get+0x10/0x10 [ 93.997177][ T2561] open_proxy_open+0x51/0x500 [ 93.997187][ T2561] ? __cfi_open_proxy_open+0x10/0x10 [ 93.997197][ T2561] do_dentry_open+0x97c/0x1510 [ 93.997210][ T2561] vfs_open+0x86/0x240 [ 93.997221][ T2561] ? __cfi_vfs_open+0x10/0x10 [ 93.997233][ T2561] ? may_open+0x352/0x430 [ 93.997244][ T2561] path_openat+0x2c49/0x35a0 [ 93.997257][ T2561] ? kasan_save_alloc_info+0x3a/0x50 [ 93.997270][ T2561] ? getname+0x1b/0x30 [ 93.997292][ T2561] ? x64_sys_call+0xe69/0x2ee0 [ 93.997303][ T2561] ? do_syscall_64+0x57/0xf0 [ 93.997315][ T2561] ? do_filp_open+0x440/0x440 [ 93.997328][ T2561] do_filp_open+0x1f2/0x440 [ 93.997339][ T2561] ? __cfi_do_filp_open+0x10/0x10 [ 93.997353][ T2561] ? alloc_fd+0x4c1/0x570 [ 93.997364][ T2561] do_sys_openat2+0x134/0x1d0 [ 93.997376][ T2561] ? fput+0x1a4/0x230 [ 93.997387][ T2561] ? do_sys_open+0x100/0x100 [ 93.997405][ T2561] ? __cfi_ksys_write+0x10/0x10 [ 93.997415][ T2561] __x64_sys_openat+0x13a/0x170 [ 93.997428][ T2561] x64_sys_call+0xe69/0x2ee0 [ 93.997439][ T2561] do_syscall_64+0x57/0xf0 [ 93.997449][ T2561] ? clear_bhb_loop+0x50/0xa0 [ 93.997464][ T2561] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 93.997477][ T2561] RIP: 0033:0x7f14ad79fb19 [ 93.997487][ T2561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.997496][ T2561] RSP: 002b:00007f14ae655028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 93.997509][ T2561] RAX: ffffffffffffffda RBX: 00007f14ada25fa0 RCX: 00007f14ad79fb19 [ 93.997517][ T2561] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 93.997524][ T2561] RBP: 00007f14ad837b70 R08: 0000000000000000 R09: 0000000000000000 [ 93.997530][ T2561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.997536][ T2561] R13: 00007f14ada26038 R14: 00007f14ada25fa0 R15: 00007ffc5846e248 [ 93.997545][ T2561] [ 94.418623][ T2574] tc_dump_action: action bad kind [ 94.742076][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 94.892095][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 94.898721][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 94.907043][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 94.919639][ T10] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 94.928862][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.937279][ T10] usb 4-1: Product: syz [ 94.941485][ T10] usb 4-1: Manufacturer: syz [ 94.946112][ T10] usb 4-1: SerialNumber: syz [ 95.154735][ T10] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 95.163170][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 95.194283][ T2605] 9pnet_fd: Insufficient options for proto=fd [ 95.225722][ T2609] SELinux: Context is not valid (left unmapped). [ 95.232419][ T36] audit: type=1400 audit(1793974272.707:428): avc: denied { relabelto } for pid=2608 comm="syz.1.796" name="blkio.bfq.io_serviced" dev="tmpfs" ino=1282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 95.257437][ T36] audit: type=1400 audit(1793974272.707:429): avc: denied { associate } for pid=2608 comm="syz.1.796" name="blkio.bfq.io_serviced" dev="tmpfs" ino=1282 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="" [ 95.283135][ T36] audit: type=1400 audit(1793974272.737:430): avc: denied { unlink } for pid=294 comm="syz-executor" name="blkio.bfq.io_serviced" dev="tmpfs" ino=1282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 95.354536][ T10] usb 4-1: 2:1 : can't get High Capability descriptor [ 95.539738][ T2632] netlink: 84 bytes leftover after parsing attributes in process `syz.2.805'. [ 95.563516][ T9] usb 4-1: USB disconnect, device number 37 [ 95.932025][ T36] audit: type=1400 audit(1793974273.397:431): avc: denied { append } for pid=2644 comm="syz.4.809" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.932939][ T2645] netlink: 'syz.4.809': attribute type 27 has an invalid length. [ 95.954749][ T36] audit: type=1400 audit(1793974273.407:432): avc: denied { map } for pid=2644 comm="syz.4.809" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.985409][ T36] audit: type=1400 audit(1793974273.407:433): avc: denied { execute } for pid=2644 comm="syz.4.809" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 96.008808][ T36] audit: type=1400 audit(1793974273.437:434): avc: denied { connect } for pid=2644 comm="syz.4.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 96.080334][ T2654] ./dev/sda1: Can't lookup blockdev [ 96.109873][ T2661] ./dev/sda1: Can't lookup blockdev [ 96.318454][ T36] audit: type=1326 audit(1793974273.787:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2676 comm="syz.4.820" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa67f39fb19 code=0x0 [ 96.401261][ T2689] netlink: 28 bytes leftover after parsing attributes in process `syz.1.825'. [ 96.532299][ T301] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 96.692603][ T301] usb 4-1: too many configurations: 100, using maximum allowed: 8 [ 96.701506][ T301] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 96.709213][ T301] usb 4-1: can't read configurations, error -61 [ 96.842076][ T301] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 97.012463][ T301] usb 4-1: too many configurations: 100, using maximum allowed: 8 [ 97.021284][ T301] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 97.029012][ T301] usb 4-1: can't read configurations, error -61 [ 97.035497][ T301] usb usb4-port1: attempt power cycle [ 97.372089][ T301] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 97.392697][ T301] usb 4-1: too many configurations: 100, using maximum allowed: 8 [ 97.401506][ T301] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 97.409173][ T301] usb 4-1: can't read configurations, error -61 [ 97.542087][ T301] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 97.562734][ T301] usb 4-1: too many configurations: 100, using maximum allowed: 8 [ 97.571641][ T301] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 97.579518][ T301] usb 4-1: can't read configurations, error -61 [ 97.585934][ T301] usb usb4-port1: unable to enumerate USB device [ 97.851157][ T36] audit: type=1400 audit(1793974275.317:436): avc: denied { mounton } for pid=2734 comm="syz.2.839" path="/256/file0" dev="tmpfs" ino=1459 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 98.849427][ T36] audit: type=1400 audit(1793974276.317:437): avc: denied { read } for pid=2749 comm="syz.1.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.702079][ T9] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 99.853166][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 99.864066][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 99.874925][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 99.888619][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.897681][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 99.905725][ T9] usb 4-1: SerialNumber: syz [ 99.911223][ T2764] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 99.918448][ T2764] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 100.127029][ T2764] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 100.134314][ T2764] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 100.746632][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 100.755875][ T9] usb 4-1: USB disconnect, device number 42 [ 101.371519][ T2789] netlink: 'syz.2.861': attribute type 27 has an invalid length. [ 101.562084][ T301] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 101.712077][ T301] usb 4-1: Using ep0 maxpacket: 16 [ 101.718502][ T301] usb 4-1: unable to get BOS descriptor or descriptor too short [ 101.726831][ T301] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 101.739401][ T301] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 101.748896][ T301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.756911][ T301] usb 4-1: Product: syz [ 101.761056][ T301] usb 4-1: Manufacturer: syz [ 101.765644][ T301] usb 4-1: SerialNumber: syz [ 101.974707][ T301] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 101.983303][ T301] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 101.994120][ T2801] ./dev/sda1: Can't lookup blockdev [ 102.182722][ T2824] fuse: Bad value for 'fd' [ 102.241954][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 102.241969][ T36] audit: type=1326 audit(1793974279.707:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2831 comm="syz.1.879" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9776d9fb19 code=0x7ffc0000 [ 102.273312][ T36] audit: type=1326 audit(1793974279.707:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2831 comm="syz.1.879" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9776d9fb19 code=0x7ffc0000 [ 102.298829][ T36] audit: type=1326 audit(1793974279.717:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2831 comm="syz.1.879" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9776d9fb19 code=0x7ffc0000 [ 102.325181][ T36] audit: type=1326 audit(1793974279.717:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2831 comm="syz.1.879" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9776d9fb19 code=0x7ffc0000 [ 102.350540][ T36] audit: type=1326 audit(1793974279.717:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2831 comm="syz.1.879" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9776d9fb19 code=0x7ffc0000 [ 102.375717][ T36] audit: type=1326 audit(1793974279.717:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2831 comm="syz.1.879" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9776d9fb19 code=0x7ffc0000 [ 102.401624][ T36] audit: type=1326 audit(1793974279.717:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2831 comm="syz.1.879" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9776d9fb19 code=0x7ffc0000 [ 102.427117][ T36] audit: type=1326 audit(1793974279.717:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2831 comm="syz.1.879" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9776d9fb19 code=0x7ffc0000 [ 102.428249][ T301] usb 4-1: USB disconnect, device number 43 [ 102.458937][ T36] audit: type=1326 audit(1793974279.717:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2831 comm="syz.1.879" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f9776d9fb19 code=0x7ffc0000 [ 102.484274][ T36] audit: type=1326 audit(1793974279.717:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2831 comm="syz.1.879" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9776d9fb19 code=0x7ffc0000 [ 102.685243][ T2868] ./dev/sda1: Can't lookup blockdev [ 102.809080][ T2888] tipc: Bearer : already 2 bearers with priority 10 [ 102.816620][ T2888] tipc: Bearer : trying with adjusted priority [ 102.823656][ T2888] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 102.930523][ T2894] veth1_macvtap: left promiscuous mode [ 102.936893][ T2894] macsec0: entered promiscuous mode [ 102.942193][ T2894] macsec0: entered allmulticast mode [ 103.255316][ T2922] overlayfs: failed to clone upperpath [ 103.806739][ T2960] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 103.815952][ T2960] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 103.827803][ T2960] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 103.851096][ T2962] netlink: 'syz.3.922': attribute type 8 has an invalid length. [ 103.938715][ T2963] cgroup: Unknown subsys name 'net' [ 104.804469][ T2986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.929'. [ 105.714100][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.721157][ T3007] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.728474][ T3007] bridge_slave_0: entered allmulticast mode [ 105.735122][ T3007] bridge_slave_0: entered promiscuous mode [ 105.741652][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.748849][ T3007] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.756117][ T3007] bridge_slave_1: entered allmulticast mode [ 105.762349][ T3007] bridge_slave_1: entered promiscuous mode [ 105.768411][ T1367] bridge_slave_1: left allmulticast mode [ 105.774122][ T1367] bridge_slave_1: left promiscuous mode [ 105.779707][ T1367] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.787218][ T1367] bridge_slave_0: left allmulticast mode [ 105.792917][ T1367] bridge_slave_0: left promiscuous mode [ 105.798503][ T1367] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.887689][ T1367] veth1_macvtap: left promiscuous mode [ 105.893267][ T1367] veth0_vlan: left promiscuous mode [ 105.971026][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.978131][ T3007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.985453][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.992497][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.028873][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.052132][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.062872][ T1364] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.069943][ T1364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.079244][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.086303][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.112984][ T3007] veth0_vlan: entered promiscuous mode [ 106.124914][ T3007] veth1_macvtap: entered promiscuous mode [ 106.255862][ T3042] netlink: 'syz.5.940': attribute type 8 has an invalid length. [ 106.353229][ T3044] syzkaller0: entered promiscuous mode [ 106.358774][ T3044] syzkaller0: entered allmulticast mode [ 107.252298][ T573] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 107.402061][ T573] usb 6-1: Using ep0 maxpacket: 32 [ 107.408312][ T573] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 107.416685][ T573] usb 6-1: config 0 has no interface number 0 [ 107.422861][ T573] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 107.432869][ T573] usb 6-1: config 0 interface 196 has no altsetting 0 [ 107.440996][ T573] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 107.450098][ T573] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.458126][ T573] usb 6-1: Product: syz [ 107.462319][ T573] usb 6-1: Manufacturer: syz [ 107.466906][ T573] usb 6-1: SerialNumber: syz [ 107.472059][ T573] usb 6-1: config 0 descriptor?? [ 107.477261][ T3064] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 107.660947][ T36] kauditd_printk_skb: 1886 callbacks suppressed [ 107.660963][ T36] audit: type=1400 audit(1793974285.127:2336): avc: denied { map } for pid=3073 comm="syz.1.963" path="socket:[26875]" dev="sockfs" ino=26875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 107.692630][ T36] audit: type=1400 audit(1793974285.127:2337): avc: denied { read } for pid=3073 comm="syz.1.963" path="socket:[26875]" dev="sockfs" ino=26875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 107.897736][ T36] audit: type=1400 audit(1793974285.367:2338): avc: denied { checkpoint_restore } for pid=3063 comm="syz.5.960" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 108.120162][ T3064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.129094][ T3064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.137957][ T573] ipheth 6-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 108.146743][ T573] ipheth 6-1:0.196: Apple iPhone USB Ethernet device attached [ 108.339838][ C1] ipheth 6-1:0.196: ipheth_rcvbulk_callback: callback retval: -22 [ 108.401687][ T36] audit: type=1400 audit(1793974285.867:2339): avc: denied { getopt } for pid=3095 comm="syz.2.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 108.540123][ C1] ipheth 6-1:0.196: ipheth_rcvbulk_callback: callback retval: -22 [ 108.964515][ T3112] netlink: 'syz.2.971': attribute type 49 has an invalid length. [ 108.973506][ T36] audit: type=1400 audit(1793974286.447:2340): avc: denied { bind } for pid=3111 comm="syz.2.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.250899][ T36] audit: type=1400 audit(1793974286.717:2341): avc: denied { listen } for pid=3113 comm="syz.5.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.276720][ T3116] TCP: TCP_TX_DELAY enabled [ 109.283438][ T36] audit: type=1400 audit(1793974286.757:2342): avc: denied { map } for pid=3115 comm="syz.5.973" path="/3/dev/sda" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.317647][ T36] audit: type=1400 audit(1793974286.787:2343): avc: denied { setattr } for pid=3115 comm="syz.5.973" name="sda" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.531336][ T3140] sit0: entered promiscuous mode [ 109.536447][ T36] audit: type=1400 audit(1793974287.017:2344): avc: denied { setopt } for pid=3139 comm="syz.5.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 109.537429][ T3141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.980'. [ 109.567017][ T3140] netlink: 'syz.2.979': attribute type 1 has an invalid length. [ 109.592399][ T3140] netlink: 1 bytes leftover after parsing attributes in process `syz.2.979'. [ 109.633854][ T3145] 9pnet_fd: Insufficient options for proto=fd [ 109.647460][ T3145] SELinux: Context system_u:object_r:xconsole_device_t:s0 is not valid (left unmapped). [ 109.658260][ T36] audit: type=1400 audit(1793974287.127:2345): avc: denied { relabelto } for pid=3144 comm="syz.2.981" name="proc" dev="tmpfs" ino=1710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:xconsole_device_t:s0" [ 109.933402][ T3167] ./dev/sda1: Can't lookup blockdev [ 110.036574][ T3177] syz.5.987: attempt to access beyond end of device [ 110.036574][ T3177] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 110.064555][ T3177] FAT-fs (loop5): unable to read boot sector [ 110.373687][ T3188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.382245][ T3188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.482235][ T573] ipheth 6-1:0.196: ipheth_carrier_set: usb_control_msg: -110 [ 111.001107][ T3193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.011721][ T3193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.011945][ T3199] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3199 comm=syz.5.994 [ 111.021611][ T3193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.040501][ T3193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.048883][ T3193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.058695][ T3193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.067663][ T3193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.076171][ T3193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.084193][ T3193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.092723][ T3193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.100734][ T3193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.109206][ T3193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.634342][ T3219] device-mapper: table: 252:3: snapshot-merge: Cannot get origin device (-ENOENT) [ 111.643643][ T3219] device-mapper: ioctl: error adding target to table [ 111.972307][ T573] ipheth 6-1:0.196: ipheth_carrier_set: usb_control_msg: -32 [ 112.183669][ T3230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.192269][ T3230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.455921][ T3232] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1005'. [ 112.504632][ T3232] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1005'. [ 112.513847][ T3232] netlink: 'syz.1.1005': attribute type 2 has an invalid length. [ 112.518617][ T3236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1007'. [ 112.534663][ T3236] ./dev/sda1: Can't lookup blockdev [ 112.605499][ T3241] VFS: Mount too revealing [ 113.012277][ T667] ipheth 6-1:0.196: ipheth_carrier_set: usb_control_msg: -32 [ 113.632249][ T3268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.640733][ T3268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.972263][ T667] ipheth 6-1:0.196: ipheth_carrier_set: usb_control_msg: -32 [ 115.012148][ T667] ipheth 6-1:0.196: ipheth_carrier_set: usb_control_msg: -32 [ 115.741402][ T3326] ./dev/sda1: Can't lookup blockdev [ 115.750416][ T3326] overlayfs: failed to resolve './bus': -2 [ 115.941908][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 115.941925][ T36] audit: type=1400 audit(1793974549.425:2355): avc: denied { ioctl } for pid=3345 comm="syz.4.1049" path="socket:[27700]" dev="sockfs" ino=27700 ioctlcmd=0x54a5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 115.972841][ T667] ipheth 6-1:0.196: ipheth_carrier_set: usb_control_msg: -32 [ 116.307252][ T3352] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1052'. [ 116.354472][ T3364] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1056'. [ 116.384464][ T3371] overlayfs: failed to clone upperpath [ 117.012198][ T667] ipheth 6-1:0.196: ipheth_carrier_set: usb_control_msg: -32 [ 117.041724][ T3384] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1062'. [ 117.340031][ T3395] devpts: called with bogus options [ 117.855350][ T3406] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1071'. [ 117.971973][ T667] ipheth 6-1:0.196: ipheth_carrier_set: usb_control_msg: -32 [ 118.179188][ T3422] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1078'. [ 118.653051][ T3437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.661629][ T3437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.670397][ T3437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.679008][ T3437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.011949][ T301] ipheth 6-1:0.196: ipheth_carrier_set: usb_control_msg: -32 [ 119.229474][ T3459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.238039][ T3459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.682046][ T36] audit: type=1400 audit(1793974553.166:2356): avc: denied { ioctl } for pid=3465 comm="syz.4.1097" path="/62/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0x4d09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 119.755536][ T3472] input: syz1 as /devices/virtual/input/input5 [ 119.971966][ T301] ipheth 6-1:0.196: ipheth_carrier_set: usb_control_msg: -32 [ 119.979124][ T3485] overlay: ./file0 is not a directory [ 119.979409][ T36] audit: type=1400 audit(1793974553.456:2357): avc: denied { mounton } for pid=3484 comm="syz.2.1105" path="/336/file0" dev="tmpfs" ino=1894 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 120.412549][ T3491] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1107'. [ 121.011627][ T301] ipheth 6-1:0.196: ipheth_carrier_set: usb_control_msg: -32 [ 121.119923][ T36] audit: type=1400 audit(1793974554.596:2358): avc: denied { accept } for pid=3511 comm="syz.1.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 121.181353][ T3513] overlayfs: failed to clone upperpath [ 121.326347][ T3520] netlink: 'syz.5.1118': attribute type 4 has an invalid length. [ 121.334353][ T3520] netlink: 'syz.5.1118': attribute type 6 has an invalid length. [ 121.342278][ T3520] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.1118'. [ 121.381640][ T36] audit: type=1400 audit(1793974554.856:2359): avc: denied { accept } for pid=3528 comm="syz.1.1122" path="socket:[28274]" dev="sockfs" ino=28274 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 121.420510][ T3531] syz.5.1123: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0 [ 121.435560][ T3531] CPU: 1 UID: 0 PID: 3531 Comm: syz.5.1123 Not tainted syzkaller #0 7b276d656437cde817a152a655ee87c3d6174d21 [ 121.435591][ T3531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 121.435612][ T3531] Call Trace: [ 121.435618][ T3531] [ 121.435625][ T3531] __dump_stack+0x21/0x30 [ 121.435659][ T3531] dump_stack_lvl+0x140/0x1c0 [ 121.435678][ T3531] ? __cfi_dump_stack_lvl+0x10/0x10 [ 121.435698][ T3531] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 121.435722][ T3531] dump_stack+0x19/0x20 [ 121.435738][ T3531] warn_alloc+0x1e7/0x2c0 [ 121.435762][ T3531] ? stack_depot_save_flags+0x399/0x800 [ 121.435782][ T3531] ? __cfi_warn_alloc+0x10/0x10 [ 121.435804][ T3531] ? kasan_save_track+0x3e/0x80 [ 121.435823][ T3531] ? kasan_save_alloc_info+0x3a/0x50 [ 121.435846][ T3531] ? xsk_init_queue+0xb2/0x120 [ 121.435872][ T3531] ? xsk_setsockopt+0x411/0x760 [ 121.435893][ T3531] ? do_sock_setsockopt+0x27f/0x410 [ 121.435918][ T3531] ? __x64_sys_setsockopt+0x18c/0x220 [ 121.435943][ T3531] ? x64_sys_call+0x2adc/0x2ee0 [ 121.435962][ T3531] ? do_syscall_64+0x57/0xf0 [ 121.435981][ T3531] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 121.436007][ T3531] __vmalloc_node_range_noprof+0x136/0x1300 [ 121.436035][ T3531] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 121.436060][ T3531] ? kasan_save_alloc_info+0x3a/0x50 [ 121.436083][ T3531] ? __kasan_kmalloc+0x96/0xb0 [ 121.436101][ T3531] ? __kmalloc_cache_noprof+0x23c/0x470 [ 121.436127][ T3531] vmalloc_user_noprof+0x77/0x90 [ 121.436150][ T3531] ? xskq_create+0xdb/0x290 [ 121.436171][ T3531] xskq_create+0xdb/0x290 [ 121.436192][ T3531] xsk_init_queue+0xb2/0x120 [ 121.436213][ T3531] xsk_setsockopt+0x411/0x760 [ 121.436234][ T3531] ? __cfi_xsk_setsockopt+0x10/0x10 [ 121.436254][ T3531] ? do_futex+0x32a/0x510 [ 121.436274][ T3531] ? errseq_sample+0x48/0x70 [ 121.436295][ T3531] ? file_init_path+0x434/0x590 [ 121.436317][ T3531] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 121.436335][ T3531] ? security_socket_setsockopt+0x3d/0x100 [ 121.436358][ T3531] ? __cfi_xsk_setsockopt+0x10/0x10 [ 121.436379][ T3531] do_sock_setsockopt+0x27f/0x410 [ 121.436403][ T3531] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 121.436427][ T3531] ? __fget_files+0x2bc/0x330 [ 121.436448][ T3531] __x64_sys_setsockopt+0x18c/0x220 [ 121.436472][ T3531] x64_sys_call+0x2adc/0x2ee0 [ 121.436491][ T3531] do_syscall_64+0x57/0xf0 [ 121.436509][ T3531] ? clear_bhb_loop+0x50/0xa0 [ 121.436533][ T3531] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 121.436557][ T3531] RIP: 0033:0x7f3342b9fb19 [ 121.436573][ T3531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.436590][ T3531] RSP: 002b:00007f33439d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 121.436612][ T3531] RAX: ffffffffffffffda RBX: 00007f3342e25fa0 RCX: 00007f3342b9fb19 [ 121.436626][ T3531] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 121.436638][ T3531] RBP: 00007f3342c37b70 R08: 0000000000000029 R09: 0000000000000000 [ 121.436658][ T3531] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 121.436672][ T3531] R13: 00007f3342e26038 R14: 00007f3342e25fa0 R15: 00007ffc8df4ede8 [ 121.436690][ T3531] [ 121.436719][ T3531] Mem-Info: [ 121.490573][ T3533] 9pnet_fd: Insufficient options for proto=fd [ 121.493479][ T3531] active_anon:57366 inactive_anon:0 isolated_anon:0 [ 121.493479][ T3531] active_file:14618 inactive_file:2710 isolated_file:0 [ 121.493479][ T3531] unevictable:33884 dirty:78 writeback:0 [ 121.493479][ T3531] slab_reclaimable:5677 slab_unreclaimable:71556 [ 121.493479][ T3531] mapped:34194 shmem:49395 pagetables:1156 [ 121.493479][ T3531] sec_pagetables:0 bounce:0 [ 121.493479][ T3531] kernel_misc_reclaimable:0 [ 121.493479][ T3531] free:1440469 free_pcp:2630 free_cma:0 [ 121.805697][ T3531] Node 0 active_anon:229456kB inactive_anon:0kB active_file:58472kB inactive_file:10788kB unevictable:135572kB isolated(anon):0kB isolated(file):0kB mapped:136808kB dirty:312kB writeback:0kB shmem:197580kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:5172kB pagetables:4648kB sec_pagetables:0kB all_unreclaimable? no [ 121.838757][ T3531] DMA32 free:2949972kB boost:0kB min:19052kB low:23812kB high:28572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2954996kB mlocked:0kB bounce:0kB free_pcp:5024kB local_pcp:68kB free_cma:0kB [ 121.868588][ T3531] lowmem_reserve[]: 0 3920 3920 [ 121.873499][ T3531] Normal free:2811832kB boost:0kB min:26000kB low:32500kB high:39000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:229536kB inactive_anon:0kB active_file:58472kB inactive_file:10708kB unevictable:135600kB writepending:312kB present:5242880kB managed:4014840kB mlocked:69820kB bounce:0kB free_pcp:5492kB local_pcp:748kB free_cma:0kB [ 121.905613][ T3531] lowmem_reserve[]: 0 0 0 [ 121.909958][ T3531] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 4*2048kB (M) 716*4096kB (M) = 2949972kB [ 121.925417][ T3531] Normal: 3574*4kB (UME) 596*8kB (UME) 476*16kB (UME) 426*32kB (UME) 391*64kB (UME) 41*128kB (UME) 10*256kB (UM) 13*512kB (UME) 10*1024kB (UME) 3*2048kB (UME) 663*4096kB (M) = 2811832kB [ 121.943867][ T3531] 93164 total pagecache pages [ 121.948775][ T3531] 36 pages in swap cache [ 121.953442][ T3531] Free swap = 124548kB [ 121.957615][ T3531] Total swap = 124996kB [ 121.961833][ T3531] 2097051 pages RAM [ 121.965631][ T3531] 0 pages HighMem/MovableOnly [ 121.970381][ T3531] 354592 pages reserved [ 121.974621][ T3531] 0 pages cma reserved [ 121.980443][ T3531] Memory allocations: [ 121.981575][ T667] ipheth 6-1:0.196: ipheth_carrier_set: usb_control_msg: -32 [ 121.984472][ T3531] 0 B 0 init/main.c:1477 func:do_initcalls [ 121.999006][ T3531] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 122.011378][ T3531] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 122.019143][ T3531] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 122.027230][ T3531] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 122.035412][ T3531] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 122.044190][ T3531] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 122.052330][ T3531] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 122.060282][ T3531] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 122.068471][ T3531] 0 B 0 init/initramfs.c:101 func:find_link [ 122.169394][ T3551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.177930][ T3551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.179554][ T3552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.194169][ T3552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.759858][ T36] audit: type=1400 audit(1793974556.226:2360): avc: denied { create } for pid=3555 comm="syz.5.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 122.829655][ T3558] vlan0: entered promiscuous mode [ 123.011467][ T667] ipheth 6-1:0.196: ipheth_carrier_set: usb_control_msg: -32 [ 123.507947][ T36] audit: type=1400 audit(1793974556.976:2361): avc: denied { lock } for pid=3582 comm="syz.2.1142" path="socket:[33486]" dev="sockfs" ino=33486 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.582670][ T3598] incfs: Backing dir is not set, filesystem can't be mounted. [ 123.590195][ T3598] incfs: mount failed -2 [ 123.606692][ T3601] fuse: blksize only supported for fuseblk [ 123.612926][ T3601] incfs: Error accessing: ./file0. [ 123.618112][ T3601] incfs: mount failed -20 [ 123.863862][ T3610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.872413][ T3610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.881982][ T3610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.890883][ T3610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.971397][ T573] ipheth 6-1:0.196: ipheth_carrier_set: usb_control_msg: -32 [ 124.491454][ T3637] kvm: Disabled LAPIC found during irq injection [ 124.517022][ T3639] netlink: 'syz.1.1163': attribute type 3 has an invalid length. [ 124.524852][ T3639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1163'. [ 124.586161][ T3642] 9pnet_fd: Insufficient options for proto=fd [ 124.930540][ T3651] x_tables: arp_tables: IDLETIMER target: not valid for this family [ 124.939459][ T36] audit: type=1400 audit(1793974558.406:2362): avc: denied { read } for pid=3650 comm="syz.5.1167" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 124.962194][ T36] audit: type=1400 audit(1793974558.406:2363): avc: denied { open } for pid=3650 comm="syz.5.1167" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 124.985342][ T36] audit: type=1400 audit(1793974558.406:2364): avc: denied { ioctl } for pid=3650 comm="syz.5.1167" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 125.011240][ T573] ipheth 6-1:0.196: ipheth_carrier_set: usb_control_msg: -32 [ 125.133741][ T3658] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 125.190151][ T3662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.198714][ T3662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.377840][ T3670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1176'. [ 125.386849][ T3670] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1176'. [ 125.718074][ T3688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.726633][ T3688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.750634][ T3693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1184'. [ 125.769499][ T3695] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.810040][ T3705] ./dev/sda1: Can't lookup blockdev [ 125.824672][ T36] audit: type=1400 audit(1793974559.297:2365): avc: denied { accept } for pid=3706 comm="syz.2.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.921573][ T36] audit: type=1400 audit(1793974559.397:2366): avc: denied { watch watch_reads } for pid=3710 comm="syz.4.1190" path="/70/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 125.971480][ T573] ipheth 6-1:0.196: ipheth_carrier_set: usb_control_msg: -32 [ 125.985515][ T36] audit: type=1400 audit(1793974559.457:2367): avc: denied { unmount } for pid=1984 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1