last executing test programs: 3.704550124s ago: executing program 3 (id=191): r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) setns(r0, 0xf416bf9410000000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x14, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4, 0x0, 0x0, 0x0}]}, 0x14}], 0x1, 0x0, 0x0, 0x20000044}, 0x40080) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kheaders.tar.xz', 0x0, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="180000007600010072a9709e960000000000005f"], 0x18}], 0x1}, 0x20040040) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0xa, 0x2, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f0000000380)={0xffffffffffffffff, 0x1, 0x9, 0x0, 0xfffffffa}, 0xc) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f0000008680)={&(0x7f00000084c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006180)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000000}, [{0x0, 0xf5f5}, {0x9, 0xffffffffffffffff}, {0x200, 0x6c5}, {0x8d, 0x2}, {0x0, 0x8}, {0x4, 0x4}, {0x101, 0x1}, {0xe}, {0x9, 0x6}, {0x11, 0x101}, {0x6, 0x81}, {0x1, 0x3a}, {0x4, 0x2}, {0x0, 0x8}, {0x2, 0xffffffff}, {0x1ff, 0x8000000000000001}, {0x7, 0x80}, {0x4, 0x1}, {0xd8, 0x6}, {0x3, 0x2}, {0x1, 0x8}, {0xfffffffffffff800, 0x7e6}, {0xe7, 0x8000000000000001}, {0xffff, 0x2}, {0x8974, 0x15938ae6}, {0x8, 0x9}, {0x7ff, 0x1}, {0x7, 0x81}, {0x1, 0x2}, {0x0, 0x2bd5}, {0x10000, 0x2ddc}, {0x8, 0xb}, {0x70, 0x6}, {0x77, 0x3}, {0xfffffffffffffb83, 0x80000001}, {0x8, 0x3}, {0x5, 0x6}, {0x7fffffff, 0x79}, {0x8, 0x3}, {0xc, 0x8001}, {0x8, 0x2}, {0x7, 0x6}, {0x7, 0x5}, {0x40000000000, 0x1}, {0x40, 0xffffffffffffffff}, {0x4, 0x3}, {0x5, 0xc}, {0xe, 0x7}, {0x800000005, 0x4}, {0xffffffff, 0x9}, {0xffffffffffffffff, 0x3}, {0x6, 0xb846}, {0x800000000004, 0x4}, {0x8, 0x4}, {0xfffffffffffff227, 0x80}, {0x8, 0x8}, {0x5, 0xfffffffffffffffc}, {0x5, 0x8}, {0x4, 0xf975}, {0x1, 0xe7}, {0x5, 0x1f}, {0x0, 0x4}, {0x8, 0xfffffffffffffff7}, {0x80, 0xa59}, {0x1, 0x6b4}, {0xfff, 0xea27860}, {0x888e, 0x387d6368}, {0x5, 0x8}, {0xf93b, 0xfff}, {0xedd5, 0x810}, {0x1b, 0x1}, {0xf1, 0xffffffffffffff20}, {0x6, 0x8}, {0x8, 0x3}, {0x0, 0xfffffffffffff211}, {0x7, 0x9ef}, {0xffffffffffffffff, 0x6}, {0x9, 0x6}, {0x8001, 0x4e}, {0x3, 0x2}, {0x0, 0x2}, {0x9, 0x6}, {0x5, 0x6}, {0xb, 0x8}, {0x8cd9, 0x86}, {0x6, 0xe}, {0x9, 0xeb}, {0x283, 0x8}, {0x80000001, 0x7f}, {0x0, 0x5}, {0xf6, 0x8}, {0x5, 0x7}, {0x6, 0x2}, {0x6}, {0x52, 0x8}, {0x7fffffff, 0x4}, {0x8, 0x30e}, {0x3b6, 0x3}, {0x5, 0x1}, {0x4, 0x5}, {0xdd, 0x4}, {0x7f, 0xe}, {0x0, 0xffffffff}, {0x9, 0x8}, {0x1, 0xfff}, {0x4, 0x8}, {0xffffffff00000000, 0x80}, {0x8, 0x81}, {0x8, 0x5}, {0x7, 0x9}, {0x400, 0x8}, {0x5, 0x7}, {0x80000001, 0x401}, {0x3, 0x2}, {0x9, 0x80000000}, {0x9, 0x3ff}, {0x4, 0xcf}, {0x6, 0x5}, {0x1, 0x6a}, {0xfffffffffffffffd, 0x6}, {0x6, 0x3}, {0x1af4148}, {0x66f, 0x3}, {0x4, 0xc}, {0xa1, 0x3}, {0x4, 0xe}, {0x1, 0x800}, {0x6, 0x5}, {0x6, 0xa45d}, {0x9, 0xfffffffffffffffd}, {0x3, 0x7}, {0x3, 0x65}, {0x6, 0x100}, {0x6, 0x280000}, {0x0, 0x9}, {0x7, 0x5}, {0x7ff, 0x2}, {0x7fff, 0x40}, {0xffffffffffffffae}, {0x6, 0xc}, {0x0, 0x4}, {0x100000000, 0x5}, {0x10000, 0x9}, {0xfffffffffffffff9, 0x6}, {0x39a6, 0x101}, {0x2, 0x4}, {0x2, 0x117}, {0x4, 0x5}, {0xfffffffffffffffe, 0xffff}, {0x10000, 0x8}, {}, {0x4, 0xfffffffffffffbff}, {0xfffffffffffffffa, 0xffffffffffffffff}, {0x3, 0x7f}, {0x9, 0x7ff}, {0x4, 0x1}, {0x3, 0x6}, {0x9, 0x100}, {0xe87, 0x8001}, {0x9, 0x7f}, {0x4, 0x1}, {0xfffffffffffff16e, 0x4}, {0x5, 0x1000000010}, {0xffffffffffffff9d, 0x401}, {0x8000000000000000, 0x6}, {0x9, 0x2}, {0xdb, 0xfffffffffffffff9}, {0x80, 0xfffffffffffffffb}, {0xc1c}, {0x8, 0x9}, {0x10001, 0x4}, {0x0, 0xff}, {0x5}, {0x3, 0x101}, {0x1}, {0x8, 0x80000000}, {0x8, 0xffff}, {0x7, 0x8}, {0x5, 0xf90}, {0x4, 0x4}, {0x24fe, 0x7f}, {0x8001000, 0x5}, {0x1, 0x4}, {0x5, 0x3}, {0x7, 0x7fff}, {0x4, 0x3ff}, {0x1c52d055, 0x3bc}, {0xfffffffffffffffd, 0x9}, {0x3, 0x100000001}, {0x7ff, 0x8001}, {0x9, 0x7e2}, {0xdaa, 0xffffffff}, {0x5, 0x9}, {0xbf89, 0x6}, {0x2, 0x10001}, {0xb, 0x4778653b}, {0x800000eec5, 0xffffffffffffb3a3}, {0x1, 0xf83}, {0x3, 0x3}, {0x8000000000000001, 0x5}, {0x8, 0x1}, {0x4, 0x80000000}, {0x400, 0x3}, {0x7, 0x7}, {0xa5f, 0x6}, {0xe, 0x8}, {0x1000, 0x6176300}, {0x80000000, 0x55b}, {0xfffffffffffffffb}, {0x3ff, 0x5}, {0x9ad, 0x4}, {0x66d8, 0x10001}, {0xffffffffffffff80, 0xfffffffffffffffc}, {0x80000001, 0x2}, {0x4, 0xfffffffffffffc00}, {0xfffc, 0x4}, {0x4f, 0x312}, {0x7ff, 0x9}, {0x7f, 0x1}, {0xe3b, 0xf310}, {0x6, 0xffffffffffffffff}, {0x7fff, 0x8}, {0x3, 0x8}, {0x4, 0x4}, {0x54, 0x81}, {0xb563, 0x9}, {0x8, 0xf6}, {0x8001, 0x5}, {0x8, 0x80000000}, {0x6, 0x8}, {0x100}, {0x8, 0x2}, {0x9, 0x9}, {0x8, 0x3}, {0x8}, {0x6, 0x8000000000000000}, {0xa98, 0xf552}, {0x8, 0xf1}, {0x7, 0xf4}, {0xfa, 0xfffffffffffffff8}, {0x8, 0x6}, {0x5f, 0x7}, {0x3, 0xd}, {0x8, 0x400}, {0x6, 0x7}, {0x3, 0x9}, {0x1, 0x14d}, {0x1, 0x7fffffff}, {0xb4ec, 0xf3}, {0x12000, 0x10001}, {0x7fff, 0x9}, {0x1, 0x7ff}, {0x7, 0x8}, {0x2, 0xd49}, {0xc4, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f00000001c0)=0x1, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="140000090000000300f7ff1b0000000004000d80f800caf9861c8b550196cb70095f9848faab7500cf8863459fae7a"], 0x14}], 0x1}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0x0, 0x1, 0x2, 0x3, 0x4}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r5) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r8, &(0x7f0000000000)={@val={0xa, 0x88e5}, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x1c, 0x3a, 0xff, @loopback, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x0, 0x9, @private1, 0x7, 0x1, 0x9, 0x5}}}}}}}, 0x56) r10 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x8c) openat$incfs(r10, &(0x7f0000000100)='.log\x00', 0x200000, 0x0) 3.577421748s ago: executing program 3 (id=195): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000080)={0x3ba, 0x9, 0x3, 0x9, 0x2, [0x80000000, 0x7, 0xfffffff8, 0x81]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xa, 0x8, "ff000000000000000000000000000200"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x11) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x1, 0x30, 0xe9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x26, 0x30, 0xe8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x9, 0x3, 0x4, {0xa, 0x25, 0x25, 0x0, 0x7, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xf8, 0xe, 0x4, {0xa, 0x25, 0x25, 0x2c5816, 0x4, 0x3a85}}}}}}}}]}}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000980)=@string={0x2}}, {0x21, &(0x7f0000000a40)=@string={0x21, 0x3, "c429a84ee4733cf4c35f28c9f420cc05cbe3725ea48ae656783500fb41534b"}}]}) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 2.214392751s ago: executing program 1 (id=211): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x3b}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0xc4, 0x5, [{{@in=@rand_addr=0x64010102, 0x0, 0x2b}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0xff, 0x0, 0xf}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0x0, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}]}, 0x17c}}, 0x0) 2.166499352s ago: executing program 1 (id=213): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102ed5c01dc0000000008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f3036db45ef0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x55}], 0x1, 0x2, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffb) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2000000) 2.166304822s ago: executing program 3 (id=214): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "3d8b00", "eb8e7ba12faf3700", "8000", "c16cb41f00bd22fc"}, 0x38) sendto$inet6(r1, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r2, &(0x7f0000000740)=[{&(0x7f00000002c0)="589224d2c334c1f63d8a621843f389412830dbab71374ae05f97e6e70c4963661dfdab277efd0f190d8751d9d425965e353e53940b202700ca7397ce47d12c2f1442b0af79f7afbc60261390920f78d8f8798aa12e3305b6400000020000000077148704b6cbfbb42d3228e32f061093a3e22906aed35e4407f6f2384f03957aa93423e7c21735d372423f3f1cc868b904373f127f13c5d68b907c74fdcc8d105e2e2538000000", 0xfeb7}], 0x1) close_range(r0, 0xffffffffffffffff, 0x8102) 2.161379642s ago: executing program 3 (id=215): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000140)='fuseblk\x00', 0x2200892, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) bind$can_raw(r3, &(0x7f00000001c0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000500), 0x4) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="442e2717bdbd39f5d2185ec9050d681a1038f4288cdf755974233383e991deafe13ec24721ef116fda212dd27e0721c58186bfbe1d785b388574284f5aa4690e75ef85fed10d5ea68101b561eceaa0819d3a08dd490e3e7329bbd7ae3046144c707d37", 0x63, 0x40, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) 2.140941193s ago: executing program 1 (id=216): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) (async) r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) syz_kvm_add_vcpu$x86(r0, &(0x7f00000002c0)={0x0, &(0x7f0000000000)=[@nested_vmresume={0x130, 0x18, 0x2}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x42e, 0x2, 0x8, 0x101}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @out_dx={0x6a, 0x28, {0xab86, 0x7, 0x8}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @control32=0x4006, 0x6, 0x5, 0x5}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x4eb, 0x3, 0x1, 0xf4e}}, @set_irq_handler={0xc8, 0x20, {0x44}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_stgi={0x17e, 0x10}, @rdmsr={0x66, 0x18, {0x8bd}}, @out_dx={0x6a, 0x28, {0xa680, 0x0, 0x81}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x10, 0xfffffffffffffff1, 0x1}}, @wrmsr={0x65, 0x20, {0x22d, 0x9}}, @in_dx={0x69, 0x20, {0x3f04, 0x2}}, @nested_amd_clgi={0x17f, 0x10}, @enable_nested={0x12c, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x5c2, 0x0, 0xbd, 0x5}}, @nested_amd_stgi={0x17e, 0x10}, @wrmsr={0x65, 0x20, {0x990, 0x8}}, @nested_amd_invlpga={0x17d, 0x20, {0x100000, 0xa5d1}}, @nested_amd_vmload={0x182, 0x18, 0x1}], 0x2b8}) (async) syz_kvm_add_vcpu$x86(r0, &(0x7f00000002c0)={0x0, &(0x7f0000000000)=[@nested_vmresume={0x130, 0x18, 0x2}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x42e, 0x2, 0x8, 0x101}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @out_dx={0x6a, 0x28, {0xab86, 0x7, 0x8}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @control32=0x4006, 0x6, 0x5, 0x5}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x4eb, 0x3, 0x1, 0xf4e}}, @set_irq_handler={0xc8, 0x20, {0x44}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_stgi={0x17e, 0x10}, @rdmsr={0x66, 0x18, {0x8bd}}, @out_dx={0x6a, 0x28, {0xa680, 0x0, 0x81}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x10, 0xfffffffffffffff1, 0x1}}, @wrmsr={0x65, 0x20, {0x22d, 0x9}}, @in_dx={0x69, 0x20, {0x3f04, 0x2}}, @nested_amd_clgi={0x17f, 0x10}, @enable_nested={0x12c, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x5c2, 0x0, 0xbd, 0x5}}, @nested_amd_stgi={0x17e, 0x10}, @wrmsr={0x65, 0x20, {0x990, 0x8}}, @nested_amd_invlpga={0x17d, 0x20, {0x100000, 0xa5d1}}, @nested_amd_vmload={0x182, 0x18, 0x1}], 0x2b8}) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x43501) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x1fff, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12, 0xff}, 0x8, 0xd2, 0x8, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 1.951999239s ago: executing program 1 (id=223): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) r1 = getpgid(0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff6000/0x1000)=nil, 0xfffffffffffffe90, &(0x7f0000000340)='aI\xfe>\x9cKT\x87<\x18\x1a\x8e\x9aG\x87Q\x80\x10\xd9\xafb\xa0;5w\xac\xe9\x9e \x01.X\x88F\xa7\xb2\xc1\xd5\x8f\xcf\x81x\x87kw~\v\xcc\xb7,R\xd9\x10\xa6\x8c\x99);\xd6\x04\x9aEH\xcb\n\xb9\xc38\xd5\x8c\x1d=\xca\xcf\xc9\x99\xbeWf8\xf5\xf8p\xac\xdc\xed\x11:\xb3\v(gG\xda\xce\xa2\xff\x93\xf3]\x93\xabB\xba\xa6\x96\xa1\xfe\x83oh\x0f\xe4l\xe5\xd7 E\"\xafGHA\x1b\xc8@\xf8\xf8K\xea\x94\xa5\xe3\x88\x1bB\x9b') r2 = landlock_create_ruleset(&(0x7f00000000c0)={0xc0d8, 0x1}, 0x44, 0x0) landlock_restrict_self(r2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r3, 0x21, 0x0, 0x4) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000001340)=""/4083) 1.891417481s ago: executing program 1 (id=226): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc52f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x1, "", [{{0x9, 0x4, 0x0, 0x58, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x10, 0x4}}}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214717a707000000004306000000000000000c0000721d5874ed568f0a00000200000feb56000000005d78fc44fac3f44d", 0x32}], 0x1, 0x7, 0x407ff) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="408b3000000010e75bcf47a8d5194f2523e524020010da0300000069cf2fa3d3d4832d0e95ce301f08dd21aa639400000000000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.335185439s ago: executing program 2 (id=231): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) socket$packet(0x11, 0xa, 0x300) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @loopback={0x0, 0x7ffffffe}, 0xfffffff7}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000040)="8000e8be", 0x4}], 0x1}, 0x4000010) 1.28254261s ago: executing program 2 (id=232): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x40}, 0x2}}, 0x10) 1.28164862s ago: executing program 3 (id=233): syz_usb_connect(0x3, 0x93c, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x8d, 0xf9, 0x16, 0x8, 0x1b3d, 0x19f, 0x867f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92a, 0x4, 0x3, 0x6, 0x90, 0x81, "", [{{0x9, 0x4, 0xd6, 0x1, 0x10, 0xe, 0x46, 0x1f, 0x1, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "40c0d3b0bc"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x2, 0x1, 0x1}, [@country_functional={0xc, 0x24, 0x7, 0x2, 0x2, [0x9, 0x7fff, 0x200]}, @mdlm_detail={0x51, 0x24, 0x13, 0xa, "7b3a01c9bcefec256e5f067273803d92aebe53e0c6e4c302e0c024bc2d209a8400e476703382333bd794e24f90e532521fd0976df00efb2894b70c99aff3671402bac67a4a644ffeb002ac32e8"}, @network_terminal={0x7, 0x24, 0xa, 0xb, 0x2c, 0x2, 0x6}, @ncm={0x6, 0x24, 0x1a, 0xfe7d, 0x10}, @mdlm_detail={0xdc, 0x24, 0x13, 0x32, "c96f7a57bfcf3d1c5d69080d319825a902737c04fbf21d3315f68cec02fc69bcf0fe5e08b41a5404f9916772f4b2fc26e956ab942882f31e5bea109ae33a975b5c2155166c9777e83d5365c720bb0ff0c593a02b597a103dcc4f9ccae73cdbdda82916ee5a1ee3bc7ca536488def4567e25d0cffd2cf48c933f3a7e3960b3019f2073153f5eafe55f93f0fc7d61d0288060422defc352977a24acfd35604ab57f95bc61492d096278ac9159071dbe856fb9353aa741080e9ddab8c35d109647d1f8b48bd02b4d16518c1d22ac510ec8711a754f8740aa496"}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x3}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x3, 0x4, 0x3}, {0x6, 0x24, 0x1a, 0xff, 0x27}, [@mdlm_detail={0x91, 0x24, 0x13, 0x4, "44f32890f9076a8636611a69c8a3d0b34ee393c86b088269cecfc52ae0b35e2d32646c34befc06f9ebf615bc86b0498d637a55af689bfdbab18f616991764387efd13b1dacb9e095cf729a6ce953b3981eb59f0a5598c13ca24d66abbae749ac9640e990f9d2b3e98b1ad7955ec35cb7c0afb4c84e5593ab88aaaefb1b2d791454d82353c5b73f2abd0897127e"}, @obex={0x5, 0x24, 0x15, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x5}]}], [{{0x9, 0x5, 0x4, 0x0, 0x400, 0x5, 0x28, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x8}]}}, {{0x9, 0x5, 0x5, 0x8, 0x20, 0xb, 0x81, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1e, 0x200}]}}, {{0x9, 0x5, 0x0, 0x1b, 0x40, 0x7f, 0x2, 0xfc, [@generic={0x6, 0xb, "7d9289a6"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x80}]}}, {{0x9, 0x5, 0xd, 0x1, 0x0, 0x1, 0x9, 0xff, [@generic={0xff, 0x21, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x44}]}}, {{0x9, 0x5, 0x6, 0x2, 0x258, 0xf6, 0x40, 0xd5, [@generic={0xea, 0x3, "e5cb9f6fd983c83dc25d246971ee1aa0cb532c93a63695676c7de66f2792a8756029313deb711838941733f7ffcbbf0d6beab2d4475c344278d723cda02bc4a3b456530c34dd330f8b3c59ae66c3a328183c3983e6c0d9c39e1485c8ef2de25ece6974422c06a6f5dea576d660643b21daff4bb5823a23219d9d16da8b8fd1bd388b4f24a3a0fd7b865ee7ae60696f4eb39904168b5a956ffd0f82f83e9c12a573780da2b88fbad635ac4e32de742b1db7e9699628a7e39ce3827b73f36d3d67464a557d2681b8f4fc544ea8b1cf0512d33fc82e36da87b1c18d372d9f01cfe5ba944518e3acab0e"}, @generic={0x7f, 0x23, "76bedbe94dcfef490c38e0f00da349b5da8b2638c969930834fe1dbcea8090fca4848ea24639fcfe63db0dd03f58733ef7c73646bd6b3cb00c9cf35757b16b6ccbf02ce035f2815a95098a7eefdb4420e0482212d75fc83fd68df400f854c8e3ace34747da9feda7a8d9d7b26944323f94fc2ea8caf799ab22638c1c56"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ef, 0x81, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0xa0}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x9}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x7e, 0x3, 0x6}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x4, 0x5, 0x4, [@generic={0xb4, 0xb, "5c380a233a3054941e31677c768de2031dfadeac3cd2cde5486c053e22879fb96c5330f640e087bfd9dc967b2f73ebd3399cf043f1b13e6e0f4fcc3f86625bca30d0b287b811516badd8b37132c2f19735d10b711ad1daf97c2f0ff4860dee7788ddefadae4c5220cba3ddaf04cc4348a083e5fd92c190d4de5f5f062909d3b4affead74206c701c04aee7efac9fc50dfad6076bd9f94fc0614565bf9923185cea38d0fae1666c86510f6977a3ac444f8761"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0xfa, 0xd, 0x6, [@generic={0xc4, 0x10, "f2085b617da4ff49e38aacaf27064f13aa5a40536f2f193431614b6a899eac7169740020faade584921c897970eedce334074b418856c10ca4c77d3c01ce4afff201d5715a6125f6914ff36600610193702f518872660436080fbd9a618e580966a18ad50882abd736c9221bba5ebfcc036ca76d2fca294694fb9e3b9c22bfaa12b2ff3b7e87e5fc4009a463103844f3a4cad9f719da94323dee995ac7a2408b129d83a114c2dcc5c8074e3f1b106ba21c602a661a6b79644d4ca50e85097cf9361d"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x3}]}}, {{0x9, 0x5, 0x2, 0x3, 0x40, 0x2, 0x0, 0x5}}, {{0x9, 0x5, 0x0, 0x3, 0x200, 0x7, 0x9, 0x76, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x5}, @generic={0x21, 0x11, "59e6fc6f18611307463fcb9521876d8e51ead28a331becc33c193e78038b0e"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x40, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x29, 0x1}]}}, {{0x9, 0x5, 0xf, 0xc, 0x8, 0x10, 0xf5, 0xf8}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x3, 0x2, 0x10, [@generic={0x62, 0x10, "e5d6209257b38d0337179d0c5a96cdfee790fb18a2248ab6b8fa7ec2f73b3febcd5287f5b011b98ef589572f1e0c493b05acefa060cac9304979ea04eebbde94c3ff3178b733a065d7d7d3d5c46f2ad95a045c35d8b8213c809abb7c38cd0205"}, @generic={0x77, 0x11, "95d52c57c1775b244d9cb458a2e91dcd22a8766e1332052b4cf679acecdb96e84ababb870fa689f123d9d49485f63f8f2665908281276fff0076ac471f41e7b527e1dacc20ce9d822b2629603863da16ac4fa1867fc9d009b3ad9f610740c5af41838c8cf434de48cc0b83402d9899413299f0279f"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x400, 0x17, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x3}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x81, 0x21, 0x59, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x7}]}}]}}, {{0x9, 0x4, 0x26, 0x9, 0x0, 0x90, 0x73, 0xb9, 0x5}}, {{0x9, 0x4, 0xdb, 0x3e, 0x6, 0xa6, 0xb4, 0xcf, 0x3, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "1e"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xf, 0x3ff, 0x7, 0x7}, {0x6, 0x24, 0x1a, 0x9}, [@acm={0x4}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x7, 0xc2}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xdb}]}], [{{0x9, 0x5, 0x5, 0x3, 0x70, 0xf, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf9, 0x4}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x5, 0x14, 0x20, [@generic={0x28, 0x6, "54252a15d4b6267b3c3c8765dfeb791d1923df9302f2a962d809d65f16c3416061690386cc12"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x20, 0x7f, 0x46, 0x81}}, {{0x9, 0x5, 0x1, 0x8, 0x200, 0x7, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x2}, @generic={0x22, 0x26, "2b249faf9a9fb05b45004dd6e95ef970630b58674c2c26b5662e953d6fd4efa7"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x400, 0x6, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x61, 0x1}]}}, {{0x9, 0x5, 0x7, 0xc, 0x8, 0x0, 0x8, 0xc}}]}}, {{0x9, 0x4, 0x6b, 0x1, 0x2, 0xff, 0x3, 0x66, 0xbc, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x3af}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0xd61, 0x2, 0x3}, {0x6, 0x24, 0x1a, 0x73, 0xc}, [@mbim={0xc, 0x24, 0x1b, 0x5, 0x40, 0x9, 0xe, 0xc, 0x80}, @dmm={0x7, 0x24, 0x14, 0x6, 0x5}]}], [{{0x9, 0x5, 0x9, 0x4, 0x40, 0x0, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3f, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x5}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x2, 0x7, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x1000}]}}]}}]}}]}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000043c0)={'veth0_to_team\x00', &(0x7f0000004380)=@ethtool_cmd={0x15, 0x6, 0x101, 0x7, 0x8, 0x8, 0xfe, 0xe, 0x29, 0xfe, 0x200, 0x9, 0x3, 0x1, 0xff, 0x7ff, [0xd87d, 0xffff]}}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x40, 0x14, 0x1, 0x4, 0x0, {0xa}, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x14, 0x2, 0x0, 0x1, [@generic="bf74a7dffdd8f8331b9dd3f2f9834b7f"]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) r2 = syz_usb_connect$uac3(0x2, 0x12a, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x2a39, 0x3fd4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x118, 0x3, 0x1, 0x5, 0x20, 0x3a, {0x8, 0xb, 0x1, 0x2, 0x1, 0x21, 0x30, 0xdb}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x38, 0x5}, [@source_unit={0xc, 0x24, 0xb, 0x2, 0x0, 0x0, 0x4, 0x3}, @selector_unit={0x9, 0x24, 0xc, 0x29, 0x4, "35d2c6e8"}, @power_domain={0x9, 0x24, 0x10, 0x40, 0x7, 0x40, 0xf9}, @mixer_unit={0xa, 0x24, 0x5, 0x3, 0xfd, "f4c3bec667"}, @selector_unit={0x6, 0x24, 0xc, 0x9, 0x1, "99"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x0, 0x7, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xc4, 0x8, 0x2, 0x6, 0x7}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x1, 0x4, 0x46, "c5b4d36439e4ecb917"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x5, 0x7, 0x9, {0xa, 0x25, 0x25, 0xc, 0x8, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xf1, 0x52, 0x83, 0x1, 0x8}, @as_header={0x17, 0x24, 0x1, 0x1, 0x9, 0xf, 0x3, 0x5, 0x7, 0x1000, 0xff}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x1, 0x8, 0xd0, "", "cc7a"}, @as_header={0x17, 0x24, 0x1, 0x8, 0x6, 0xf1, 0x4, 0xa, 0x80, 0xa, 0x9}, @as_header={0x17, 0x24, 0x1, 0x8, 0xba6, 0x7, 0x1, 0x9, 0x8, 0x506, 0x95}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x2, 0x5, {0xa, 0x25, 0x25, 0xbe4, 0x0, 0xfff}}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x1a, 0x2, 0x40, 0xff, 0x3}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x3, [{0x1b, &(0x7f00000001c0)=@string={0x1b, 0x3, "c8bacc3e8cc2dfcb02abbed0f17f587598f6ba9c7cdcf512a6"}}, {0x63, &(0x7f0000000280)=@string={0x63, 0x3, "ea6cbdec1d386b400e2c1328f90d44d36a75455acabc9c633242ce459520dcdfb2658ca5faa77515a6aac9f738ff9fe915630ee3be2b47a51c02d0110e56c727841dbc97914e9ccba058c7cfd92a55ed8bc0ed62f29781549b66dec6ba4dc28dd6"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x809}}]}) syz_usb_ep_write(r2, 0x3, 0x80, &(0x7f0000000200)="1e230346fc47b12eceb126c0e2cd26a850776253e8c94bafa2d8aed65426ce8b6e202a449d4a0b700febb1171aacaf31912c401c1c71c37050431eda659fcaacfacc5743b4287b93bcfbecba2e8572238396739a10059c558e4ed57d4b9294ee90b62c855e6d49af3ba4e6b4ebecfd402296b93d3cf8c2e59e98d57d3e9e2cc6") r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, &(0x7f0000000cc0)={{0xd000, 0xd000, 0x8, 0x0, 0x3, 0x1, 0xa, 0x1, 0x9, 0x7, 0x2, 0x9}, {0x25000, 0x54000, 0xd, 0x7f, 0x8, 0x6, 0x2, 0x0, 0xfa, 0x0, 0x2, 0x8}, {0x25000, 0x2000, 0x4, 0x7f, 0x63, 0x8, 0xa9, 0x3, 0x79, 0x80, 0x80, 0xa}, {0x30000, 0xe000, 0xb, 0x1, 0x81, 0x0, 0x5, 0x4, 0x1, 0x3, 0x3, 0x1}, {0x200000, 0x26000, 0xe, 0x5, 0xc, 0x1, 0x2, 0x8, 0x7, 0x72, 0xa8, 0x1}, {0x9000, 0x4, 0x1, 0x9f, 0x6, 0xaa, 0x8, 0x1, 0xc, 0x74, 0x40, 0x8}, {0x0, 0x4000, 0x10, 0x81, 0xe, 0xe7, 0xd, 0x0, 0x81, 0xc6, 0x9a, 0x3}, {0xdddd0000, 0xdddd0000, 0x3, 0x6, 0x10, 0xf7, 0xe5, 0x5, 0x8, 0x3, 0x40, 0x6}, {0x10000, 0x17}, {0x7000}, 0x1, 0x0, 0xdddd1000, 0x200000, 0x1, 0x2, 0x41000, 0x1, [0x1, 0x1, 0x1, 0x1]}) syz_usb_connect(0x3, 0x93c, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x8d, 0xf9, 0x16, 0x8, 0x1b3d, 0x19f, 0x867f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92a, 0x4, 0x3, 0x6, 0x90, 0x81, "", [{{0x9, 0x4, 0xd6, 0x1, 0x10, 0xe, 0x46, 0x1f, 0x1, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "40c0d3b0bc"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x2, 0x1, 0x1}, [@country_functional={0xc, 0x24, 0x7, 0x2, 0x2, [0x9, 0x7fff, 0x200]}, @mdlm_detail={0x51, 0x24, 0x13, 0xa, "7b3a01c9bcefec256e5f067273803d92aebe53e0c6e4c302e0c024bc2d209a8400e476703382333bd794e24f90e532521fd0976df00efb2894b70c99aff3671402bac67a4a644ffeb002ac32e8"}, @network_terminal={0x7, 0x24, 0xa, 0xb, 0x2c, 0x2, 0x6}, @ncm={0x6, 0x24, 0x1a, 0xfe7d, 0x10}, @mdlm_detail={0xdc, 0x24, 0x13, 0x32, "c96f7a57bfcf3d1c5d69080d319825a902737c04fbf21d3315f68cec02fc69bcf0fe5e08b41a5404f9916772f4b2fc26e956ab942882f31e5bea109ae33a975b5c2155166c9777e83d5365c720bb0ff0c593a02b597a103dcc4f9ccae73cdbdda82916ee5a1ee3bc7ca536488def4567e25d0cffd2cf48c933f3a7e3960b3019f2073153f5eafe55f93f0fc7d61d0288060422defc352977a24acfd35604ab57f95bc61492d096278ac9159071dbe856fb9353aa741080e9ddab8c35d109647d1f8b48bd02b4d16518c1d22ac510ec8711a754f8740aa496"}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x3}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x3, 0x4, 0x3}, {0x6, 0x24, 0x1a, 0xff, 0x27}, [@mdlm_detail={0x91, 0x24, 0x13, 0x4, "44f32890f9076a8636611a69c8a3d0b34ee393c86b088269cecfc52ae0b35e2d32646c34befc06f9ebf615bc86b0498d637a55af689bfdbab18f616991764387efd13b1dacb9e095cf729a6ce953b3981eb59f0a5598c13ca24d66abbae749ac9640e990f9d2b3e98b1ad7955ec35cb7c0afb4c84e5593ab88aaaefb1b2d791454d82353c5b73f2abd0897127e"}, @obex={0x5, 0x24, 0x15, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x5}]}], [{{0x9, 0x5, 0x4, 0x0, 0x400, 0x5, 0x28, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x8}]}}, {{0x9, 0x5, 0x5, 0x8, 0x20, 0xb, 0x81, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1e, 0x200}]}}, {{0x9, 0x5, 0x0, 0x1b, 0x40, 0x7f, 0x2, 0xfc, [@generic={0x6, 0xb, "7d9289a6"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x80}]}}, {{0x9, 0x5, 0xd, 0x1, 0x0, 0x1, 0x9, 0xff, [@generic={0xff, 0x21, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x44}]}}, {{0x9, 0x5, 0x6, 0x2, 0x258, 0xf6, 0x40, 0xd5, [@generic={0xea, 0x3, "e5cb9f6fd983c83dc25d246971ee1aa0cb532c93a63695676c7de66f2792a8756029313deb711838941733f7ffcbbf0d6beab2d4475c344278d723cda02bc4a3b456530c34dd330f8b3c59ae66c3a328183c3983e6c0d9c39e1485c8ef2de25ece6974422c06a6f5dea576d660643b21daff4bb5823a23219d9d16da8b8fd1bd388b4f24a3a0fd7b865ee7ae60696f4eb39904168b5a956ffd0f82f83e9c12a573780da2b88fbad635ac4e32de742b1db7e9699628a7e39ce3827b73f36d3d67464a557d2681b8f4fc544ea8b1cf0512d33fc82e36da87b1c18d372d9f01cfe5ba944518e3acab0e"}, @generic={0x7f, 0x23, "76bedbe94dcfef490c38e0f00da349b5da8b2638c969930834fe1dbcea8090fca4848ea24639fcfe63db0dd03f58733ef7c73646bd6b3cb00c9cf35757b16b6ccbf02ce035f2815a95098a7eefdb4420e0482212d75fc83fd68df400f854c8e3ace34747da9feda7a8d9d7b26944323f94fc2ea8caf799ab22638c1c56"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ef, 0x81, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0xa0}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x9}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x7e, 0x3, 0x6}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x4, 0x5, 0x4, [@generic={0xb4, 0xb, "5c380a233a3054941e31677c768de2031dfadeac3cd2cde5486c053e22879fb96c5330f640e087bfd9dc967b2f73ebd3399cf043f1b13e6e0f4fcc3f86625bca30d0b287b811516badd8b37132c2f19735d10b711ad1daf97c2f0ff4860dee7788ddefadae4c5220cba3ddaf04cc4348a083e5fd92c190d4de5f5f062909d3b4affead74206c701c04aee7efac9fc50dfad6076bd9f94fc0614565bf9923185cea38d0fae1666c86510f6977a3ac444f8761"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0xfa, 0xd, 0x6, [@generic={0xc4, 0x10, "f2085b617da4ff49e38aacaf27064f13aa5a40536f2f193431614b6a899eac7169740020faade584921c897970eedce334074b418856c10ca4c77d3c01ce4afff201d5715a6125f6914ff36600610193702f518872660436080fbd9a618e580966a18ad50882abd736c9221bba5ebfcc036ca76d2fca294694fb9e3b9c22bfaa12b2ff3b7e87e5fc4009a463103844f3a4cad9f719da94323dee995ac7a2408b129d83a114c2dcc5c8074e3f1b106ba21c602a661a6b79644d4ca50e85097cf9361d"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x3}]}}, {{0x9, 0x5, 0x2, 0x3, 0x40, 0x2, 0x0, 0x5}}, {{0x9, 0x5, 0x0, 0x3, 0x200, 0x7, 0x9, 0x76, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x5}, @generic={0x21, 0x11, "59e6fc6f18611307463fcb9521876d8e51ead28a331becc33c193e78038b0e"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x40, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x29, 0x1}]}}, {{0x9, 0x5, 0xf, 0xc, 0x8, 0x10, 0xf5, 0xf8}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x3, 0x2, 0x10, [@generic={0x62, 0x10, "e5d6209257b38d0337179d0c5a96cdfee790fb18a2248ab6b8fa7ec2f73b3febcd5287f5b011b98ef589572f1e0c493b05acefa060cac9304979ea04eebbde94c3ff3178b733a065d7d7d3d5c46f2ad95a045c35d8b8213c809abb7c38cd0205"}, @generic={0x77, 0x11, "95d52c57c1775b244d9cb458a2e91dcd22a8766e1332052b4cf679acecdb96e84ababb870fa689f123d9d49485f63f8f2665908281276fff0076ac471f41e7b527e1dacc20ce9d822b2629603863da16ac4fa1867fc9d009b3ad9f610740c5af41838c8cf434de48cc0b83402d9899413299f0279f"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x400, 0x17, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x3}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x81, 0x21, 0x59, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x7}]}}]}}, {{0x9, 0x4, 0x26, 0x9, 0x0, 0x90, 0x73, 0xb9, 0x5}}, {{0x9, 0x4, 0xdb, 0x3e, 0x6, 0xa6, 0xb4, 0xcf, 0x3, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "1e"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xf, 0x3ff, 0x7, 0x7}, {0x6, 0x24, 0x1a, 0x9}, [@acm={0x4}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x7, 0xc2}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xdb}]}], [{{0x9, 0x5, 0x5, 0x3, 0x70, 0xf, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf9, 0x4}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x5, 0x14, 0x20, [@generic={0x28, 0x6, "54252a15d4b6267b3c3c8765dfeb791d1923df9302f2a962d809d65f16c3416061690386cc12"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x20, 0x7f, 0x46, 0x81}}, {{0x9, 0x5, 0x1, 0x8, 0x200, 0x7, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x2}, @generic={0x22, 0x26, "2b249faf9a9fb05b45004dd6e95ef970630b58674c2c26b5662e953d6fd4efa7"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x400, 0x6, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x61, 0x1}]}}, {{0x9, 0x5, 0x7, 0xc, 0x8, 0x0, 0x8, 0xc}}]}}, {{0x9, 0x4, 0x6b, 0x1, 0x2, 0xff, 0x3, 0x66, 0xbc, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x3af}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0xd61, 0x2, 0x3}, {0x6, 0x24, 0x1a, 0x73, 0xc}, [@mbim={0xc, 0x24, 0x1b, 0x5, 0x40, 0x9, 0xe, 0xc, 0x80}, @dmm={0x7, 0x24, 0x14, 0x6, 0x5}]}], [{{0x9, 0x5, 0x9, 0x4, 0x40, 0x0, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3f, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x5}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x2, 0x7, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x1000}]}}]}}]}}]}}, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000043c0)={'veth0_to_team\x00', &(0x7f0000004380)=@ethtool_cmd={0x15, 0x6, 0x101, 0x7, 0x8, 0x8, 0xfe, 0xe, 0x29, 0xfe, 0x200, 0x9, 0x3, 0x1, 0xff, 0x7ff, [0xd87d, 0xffff]}}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x40, 0x14, 0x1, 0x4, 0x0, {0xa}, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x14, 0x2, 0x0, 0x1, [@generic="bf74a7dffdd8f8331b9dd3f2f9834b7f"]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) (async) syz_usb_connect$uac3(0x2, 0x12a, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x2a39, 0x3fd4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x118, 0x3, 0x1, 0x5, 0x20, 0x3a, {0x8, 0xb, 0x1, 0x2, 0x1, 0x21, 0x30, 0xdb}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x38, 0x5}, [@source_unit={0xc, 0x24, 0xb, 0x2, 0x0, 0x0, 0x4, 0x3}, @selector_unit={0x9, 0x24, 0xc, 0x29, 0x4, "35d2c6e8"}, @power_domain={0x9, 0x24, 0x10, 0x40, 0x7, 0x40, 0xf9}, @mixer_unit={0xa, 0x24, 0x5, 0x3, 0xfd, "f4c3bec667"}, @selector_unit={0x6, 0x24, 0xc, 0x9, 0x1, "99"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x0, 0x7, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xc4, 0x8, 0x2, 0x6, 0x7}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x1, 0x4, 0x46, "c5b4d36439e4ecb917"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x5, 0x7, 0x9, {0xa, 0x25, 0x25, 0xc, 0x8, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xf1, 0x52, 0x83, 0x1, 0x8}, @as_header={0x17, 0x24, 0x1, 0x1, 0x9, 0xf, 0x3, 0x5, 0x7, 0x1000, 0xff}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x1, 0x8, 0xd0, "", "cc7a"}, @as_header={0x17, 0x24, 0x1, 0x8, 0x6, 0xf1, 0x4, 0xa, 0x80, 0xa, 0x9}, @as_header={0x17, 0x24, 0x1, 0x8, 0xba6, 0x7, 0x1, 0x9, 0x8, 0x506, 0x95}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x2, 0x5, {0xa, 0x25, 0x25, 0xbe4, 0x0, 0xfff}}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x1a, 0x2, 0x40, 0xff, 0x3}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x3, [{0x1b, &(0x7f00000001c0)=@string={0x1b, 0x3, "c8bacc3e8cc2dfcb02abbed0f17f587598f6ba9c7cdcf512a6"}}, {0x63, &(0x7f0000000280)=@string={0x63, 0x3, "ea6cbdec1d386b400e2c1328f90d44d36a75455acabc9c633242ce459520dcdfb2658ca5faa77515a6aac9f738ff9fe915630ee3be2b47a51c02d0110e56c727841dbc97914e9ccba058c7cfd92a55ed8bc0ed62f29781549b66dec6ba4dc28dd6"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x809}}]}) (async) syz_usb_ep_write(r2, 0x3, 0x80, &(0x7f0000000200)="1e230346fc47b12eceb126c0e2cd26a850776253e8c94bafa2d8aed65426ce8b6e202a449d4a0b700febb1171aacaf31912c401c1c71c37050431eda659fcaacfacc5743b4287b93bcfbecba2e8572238396739a10059c558e4ed57d4b9294ee90b62c855e6d49af3ba4e6b4ebecfd402296b93d3cf8c2e59e98d57d3e9e2cc6") (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, &(0x7f0000000cc0)={{0xd000, 0xd000, 0x8, 0x0, 0x3, 0x1, 0xa, 0x1, 0x9, 0x7, 0x2, 0x9}, {0x25000, 0x54000, 0xd, 0x7f, 0x8, 0x6, 0x2, 0x0, 0xfa, 0x0, 0x2, 0x8}, {0x25000, 0x2000, 0x4, 0x7f, 0x63, 0x8, 0xa9, 0x3, 0x79, 0x80, 0x80, 0xa}, {0x30000, 0xe000, 0xb, 0x1, 0x81, 0x0, 0x5, 0x4, 0x1, 0x3, 0x3, 0x1}, {0x200000, 0x26000, 0xe, 0x5, 0xc, 0x1, 0x2, 0x8, 0x7, 0x72, 0xa8, 0x1}, {0x9000, 0x4, 0x1, 0x9f, 0x6, 0xaa, 0x8, 0x1, 0xc, 0x74, 0x40, 0x8}, {0x0, 0x4000, 0x10, 0x81, 0xe, 0xe7, 0xd, 0x0, 0x81, 0xc6, 0x9a, 0x3}, {0xdddd0000, 0xdddd0000, 0x3, 0x6, 0x10, 0xf7, 0xe5, 0x5, 0x8, 0x3, 0x40, 0x6}, {0x10000, 0x17}, {0x7000}, 0x1, 0x0, 0xdddd1000, 0x200000, 0x1, 0x2, 0x41000, 0x1, [0x1, 0x1, 0x1, 0x1]}) (async) 1.28125878s ago: executing program 2 (id=234): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)={0x40000, 0x40, 0x1d}, 0x18) statx(r1, &(0x7f0000000400)='./file1\x00', 0x2000, 0x80, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1e9) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x10000, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESHEX=r0, @ANYRES8=0x0, @ANYRES64=r3, @ANYRES8=0x0, @ANYRES16=r1]) read$FUSE(r3, &(0x7f00000063c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005f93000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, 0xee01) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2, &(0x7f0000000700)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@index_on}], [{@smackfsroot={'smackfsroot', 0x3d, 'K\x97n\x81\x00\x00\x00o\xa0ek}G\xfd\xd4\xf5jB\xe8-\xea\x1d\x1c\xf2.\xdfHk\x81\xe6\xe8\x0e\x85\xdfd\xb5\xbdY\x06?\xd7\xfaI\xe4\xe0\x95\x0e,\x8fz\xe0O\xddJ\x93\xc5\x199\xe2\x18\\\xa1\xf4\xd6D\x8a\x90\xef\x0e\x82\x8b\x8bV\x8f%(\xaa\xd3k(/\xf0\x1c\b\xe0R\xd7\xcf\xcd_\x92\xc7\x180?\xdf6\ay\xdfv\xd5\xfa\x00\x14\xc4#\xc2\x96e\xdb\'\"\x1f:k\xdcX\xbf \xe06ng\x93B\x89', r2}}, {@dont_appraise}, {@permit_directio}, {@obj_user={'obj_user', 0x3d, '&'}}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000080)={0xaaaaaaaaaaaac4e, 0x0, [{0xd, 0x7, 0x800004, 0x4, 0x420e}, {0x0, 0x4, 0xbe16, 0x84d, 0x10}]}) chdir(&(0x7f0000000140)='./bus\x00') r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r8) sendmsg$ETHTOOL_MSG_WOL_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r9, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048000}, 0x2040) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r10 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x39, 0x0, 0x101}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200), 0x6000) 1.223265002s ago: executing program 2 (id=235): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0xff81, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r1, @ANYBLOB="0500000003000000000001000000060006004e240000901008809005008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100000000000000000000000000000000000000000000000000000000000000000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691cb40409807c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030000000000f4000080060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000a00000014000200fc0200000000000000000000000000010500030000000000060001000200000008000200e00000020500030003000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030002000000060001000a00000014000200fc0200000000000000000000000000000500030003000000340000800600010002000000080002000a0101010500030004000000060001000200000008000200ac1414aa050003000300000064000080060001000a00000014000200200100000000000000000000000000000500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff010000000000000000000000000001050003000200000094000080060001000200000008000200ac1e00010500030002000000060001000200000008000200e00000010500030002000000060001000a00000014000200fc0000000000000000000000000000000500030002000000060001000200000008000200000000000500030003000000060001000a00000014000200fe80000000000000000000000000000e050003000000000040000080060001000a00000014000200fc0200000000000000000000000000000500030002000000060001000200000008000200ac1414aa050003000000000064000080060001000a00000014000200200100000000000000000000000000020500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002000a010100050003000200000070000080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200000000000000000000000000000000000500030002000000060001000a0000001400020000000000000000000000000000000001050003000000000000010080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000200000008000200000000000500030003000000060001000200000008000200640101000500030002000000060001000200000008000200640101010500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8000000000000000000000000000bb05000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000200000008000200640101010500030001000000240002005da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e1803008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39220600050005000000e802098058000080060001000200000008000200ac1e00010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff05000300010000007c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414bb0500030002000000060001000a000000140002000000000000000000000000000000000105000300020000000600010002000000080002000a0101010500030003000000f4000080060001000a0000001400020000000000000000000000ffffac1414aa0500030003000000060001000200000008000200ac1414aa05000300000000000600010002000000080002000a01010205000300020000000600010002000000080002007f00000105000300000000000600010002000000080002000a0101010500030003000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc01000000000000000000000000000005000300010000000600010002000000080002000a0101000500030000000000060001000200000008000200ac1e0101050003000200000094000080060001000a00000014000200fc0200000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030002000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ffffffff050003000200000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200ff02000000000000000000000000000105000300020000007c000080200004000a004e2100000006fc0100000000000000000000000000010400000008000a000100000024000100f44da367a88ee6564f020211456727082f5debee8b1bf5eb7337341b459b3922080003000300000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549780000800800030001000000080003000400000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000e4060080dc020980f4000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000200000008000200ffffffff0500030001000000060001000200000008000200ac1e00010500030001000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000a00000014000200fc010000000000000000000000000001050003000300000034000080060001000200000008000200640101000500030001000000060001000200000008000200ac1414bb050003000200000000010080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc0100000000000000000000000000010500030000000000940000800600010002000000080002006401010005000300010000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000200000008000200e00000020500030003000000060001000200000008000200ac1414120500030002000000060001000200000008000200ac14142d05000300020000001c000080060001000200000008000200ffffffff05000300030000000800030002000000200004000a004e2000000005fc010000000000000000000000000001000000009403098094000080060001000a0000001400020000000000000000000000ffffac1414bb0500030003000000060001000a00000014000200fe8800000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030003000000060001000a00000014000200fe880000000000000000000000000101050003000100000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414bb0500030001000000060001000a0000001400020000000000000000000000ffffe00000020500030003000000f4000080060001000200000008000200000000000500030001000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe80000000000000000000000000003e05000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200e0000001050003000000000058000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414410500030010000000060001000200000008000200ac1e00010500030001000000f4000080060001000200000008000200640101000500030002000000060001000a00000014000200200100000000000000000000000000000500030000000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000060001000200000008000200ac1414aa0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414270500030000000000060001000a0000001400020020010000000000000000000000000002050003000100000058000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe8000000000000000000000000000140500030000000000060001000200000008000200e0000001050003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e0c0000800800030006000000060006004e24000008000100", @ANYRES32=r2, @ANYBLOB="240003"], 0x10e0}}, 0x0) 1.209790922s ago: executing program 2 (id=236): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000100)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) 1.154409784s ago: executing program 2 (id=237): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="8e1425c5ced563727539545b53db03d1422ba49141c18c869f28cf36c0ac9365eedf905a423ecdebcec1dd966fdb0f4beb62122ac0d2e7891e9286b0636e94f5a103ab8460b01bd830943b737b37575b6afa3ec7cdff2b313df72aaf83"], 0x0) syz_usb_ep_write(r2, 0x5, 0x85, &(0x7f0000000000)="84711115a5ba6545aa71f9eebbfffe62d5fd5ad2824a735bcad7b7a86a38955202aa8a3c0cbcf7ba2e51e4a530a014c923cf8a90d4a9c6f7837542af1fcc4cd991a24f3d972a1930d567a9de5f5455878da4eb86d444a605f6295e7bccf64f85cc1098fa7d06fb1b12e5539ab4251758b7f450b48ef366a4a8c9593e7ccfe566f8a0693c93") 430.765516ms ago: executing program 0 (id=239): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x59, 0x0, &(0x7f0000000440)="f4037655de48a87740d0ca10c8e032d738e5855a46928d8b7c40f055f4924ebd858c6e18e1aa9886a06d5f91425a710164dbddabd988a204280ebb17dcacbb000f7e536a3ad7c2aa572e3c3bd900ac4b3571f7a39dfe1134cf"}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x143a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r1, 0xe85f000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCFLSH(r2, 0x40045431, 0xfffffffffffffffd) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x10, 0x17, 0x0, 0xf212, 0xfc, 0x2, 0x4, 0xff, 0x0, 0x6, 0x1, 0x0, 0x7, 0x7, 0x4, 0x5, 0x6, 0xfa, '\x00', 0x3, 0x1ff}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) 302.81659ms ago: executing program 3 (id=240): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000000)={0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x12, r0, 0x9f265000) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) mlock2(&(0x7f0000346000/0x2000)=nil, 0x2000, 0x0) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8214, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x2, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x4}}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@mcast2, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x8, 0x2, 0x4800, 0x500, 0xe, 0x83000200}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 298.607671ms ago: executing program 0 (id=248): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dvmrp1\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x5, 0x8}, {0x5, 0x9f}]}}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000280)={{0x2, 0x4e21, @empty}, {0x306, @remote}, 0xa8, {0x2, 0x4e24, @empty}, 'veth1_macvtap\x00'}) 285.505061ms ago: executing program 0 (id=241): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 32) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) (async, rerun: 32) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) (async) rt_sigtimedwait(&(0x7f00000000c0)={[0x10001]}, &(0x7f0000000100), &(0x7f0000000180), 0x8) (async, rerun: 64) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2142) (rerun: 64) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x40045402) 230.468662ms ago: executing program 0 (id=242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000001700)={@void, @void, @eth={@broadcast, @random="c222a5fe422d", @val={@void, {0x8100, 0x0, 0x0, 0x300}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x3, 0x78, 0x65, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010101}, {0x4e20, 0x4e24, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x2, "a2ae9a6092fa16aac8a20966ff90ac598edc5b03d7097bf849e09108ce3fc178", "65330fcc2d1ae6ed9493273be2bca8b7", {"628cc0c53b03b6209be40d78e3f5c507", "9cd52818fc0486cca7c5bbddc322b3e0"}}}}}}}}, 0x8a) 228.589442ms ago: executing program 1 (id=243): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x27d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x77, 0x8, 0xfe}}}}}]}}]}}, 0x0) r1 = syz_socket_connect_nvme_tcp() r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) poll(&(0x7f00000000c0)=[{r1, 0x200}, {r2, 0x2}], 0x2, 0x10000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00074b0000004b31f70ba3a1030000000000000000cb4fdca0560f920d54f365c5b1d43ee44fbf08251fa4c2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 206.624983ms ago: executing program 0 (id=244): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) sigaltstack(&(0x7f0000000500)={0x0, 0x3}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x22f) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r9}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0x35c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r6, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) ioctl$XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x7, '\x00', {0xe, 0xffff, 0x9, 0x10000, 0x9, 0x3a, 0xff, 0x5, {0x2, 0x6c842c5c}, {0xb, 0x173}, {0x5, 0xc}, 0x4, 0xff, 0x7, 0x30000000, 0x9, 0x3, 0x101, 0x7, 0x7, 0x754, '\x00', 0x41f4, 0x7, 0x0, 0x4}}) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0, 0x208000, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') read$FUSE(r12, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x80001, 0x0) ioctl$KVM_CREATE_PIT2(r11, 0x4040ae77, &(0x7f0000000040)={0xd}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x7, 0x3, 0x180, 0x2, 0xc, 0xf1, 0xfab3, 0x3, 0x5, 0x0, 0xd, 0x0, 0x6, 0x0, 0xbd9], 0x1000, 0x43102}) r13 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r13, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x7, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0x8003000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe5, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x10, 0x0, 0x42, 0x5, 0x75, 0x3, 0x36, 0xfe, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x1, 0x3, 0x9, 0x1, 0xa4, 0x5, 0x8}, {0x1, 0xeeee0000, 0x19, 0x6, 0x2, 0x42, 0x0, 0xff, 0x3, 0x7, 0x6}, {0xf000, 0xd000, 0xf, 0x3, 0x12, 0x7, 0xa9, 0x8, 0x9, 0x9, 0xfa, 0x97}, {0xeeefa000, 0xdddd0000, 0xd, 0xa0, 0x1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0xfe, 0x7}, {0x3000, 0xb000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0x7000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xa, 0x9, 0x2, 0x5, 0xb0, 0x81}, {0xeeef0000, 0x30}, {0x9000, 0x9}, 0x80000031, 0x0, 0xc000, 0x2024, 0x800000a, 0xc001, 0x100000, [0xe5b5, 0x4, 0x3, 0x8]}) recvmmsg(r12, &(0x7f00000061c0)=[{{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000002900)=""/4096, 0x1000}], 0x1, &(0x7f0000003940)=""/37, 0x25}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000003980)=""/221, 0xdd}, {&(0x7f0000003a80)=""/253, 0xfd}, {&(0x7f0000003b80)=""/111, 0x6f}, {&(0x7f0000003c00)=""/20, 0x14}, {&(0x7f0000003c40)=""/217, 0xd9}], 0x5, &(0x7f0000003dc0)=""/4096, 0x1000}, 0x437c}, {{&(0x7f0000004dc0)=@nl=@unspec, 0x80, &(0x7f0000006080)=[{&(0x7f0000004e40)=""/4096, 0x1000}, {&(0x7f0000005e40)=""/152, 0x98}, {&(0x7f0000005f00)=""/163, 0xa3}, {&(0x7f0000005fc0)=""/166, 0xa6}], 0x4, &(0x7f00000060c0)=""/207, 0xcf}, 0xc}], 0x3, 0x10040, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1804002, 0x0) unshare(0x0) chdir(&(0x7f00000003c0)='./bus\x00') ioctl$KVM_CREATE_VM(r0, 0xae01, 0x5) 0s ago: executing program 0 (id=245): socket$xdp(0x2c, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x1dc7, 0x0, 0x0, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r0, r5, &(0x7f0000000400)={0x0, 0xf39b, 0x80, 0x3, 0xb0}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd5fb, 0x1, 0x1, 0x31b, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7685, 0x800, 0x1, 0x3df, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xab1c, 0x10, 0x1, 0x902c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4bc6, 0x400, 0x2, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x35, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r4, '\x00', {0x5, 0xa0b, 0x0, 0x0}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.214' (ED25519) to the list of known hosts. [ 21.839899][ T36] audit: type=1400 audit(1781859471.430:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.841023][ T286] cgroup: Unknown subsys name 'net' [ 21.862547][ T36] audit: type=1400 audit(1781859471.440:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.889865][ T36] audit: type=1400 audit(1781859471.460:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.889998][ T286] cgroup: Unknown subsys name 'devices' [ 22.011769][ T286] cgroup: Unknown subsys name 'hugetlb' [ 22.017369][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.110418][ T36] audit: type=1400 audit(1781859471.710:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.133686][ T36] audit: type=1400 audit(1781859471.710:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.142048][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.158659][ T36] audit: type=1400 audit(1781859471.710:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.190078][ T36] audit: type=1400 audit(1781859471.760:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.215648][ T36] audit: type=1400 audit(1781859471.760:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.249190][ T36] audit: type=1400 audit(1781859471.840:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.274769][ T36] audit: type=1400 audit(1781859471.840:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.275098][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.073355][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.080452][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.087522][ T295] bridge_slave_0: entered allmulticast mode [ 23.093899][ T295] bridge_slave_0: entered promiscuous mode [ 23.101908][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.108946][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.116183][ T295] bridge_slave_1: entered allmulticast mode [ 23.122483][ T295] bridge_slave_1: entered promiscuous mode [ 23.142741][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.149794][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.156887][ T296] bridge_slave_0: entered allmulticast mode [ 23.163070][ T296] bridge_slave_0: entered promiscuous mode [ 23.172565][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.179601][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.186754][ T296] bridge_slave_1: entered allmulticast mode [ 23.192906][ T296] bridge_slave_1: entered promiscuous mode [ 23.230889][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.237933][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.245024][ T293] bridge_slave_0: entered allmulticast mode [ 23.251192][ T293] bridge_slave_0: entered promiscuous mode [ 23.272052][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.279106][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.286200][ T293] bridge_slave_1: entered allmulticast mode [ 23.292382][ T293] bridge_slave_1: entered promiscuous mode [ 23.310631][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.317681][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.324822][ T294] bridge_slave_0: entered allmulticast mode [ 23.331034][ T294] bridge_slave_0: entered promiscuous mode [ 23.352980][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.360126][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.367161][ T294] bridge_slave_1: entered allmulticast mode [ 23.373499][ T294] bridge_slave_1: entered promiscuous mode [ 23.480885][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.487935][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.495283][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.502316][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.510875][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.517911][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.525183][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.532210][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.547976][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.555038][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.562319][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.569334][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.593620][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.600690][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.607958][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.615012][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.637736][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.645070][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.652507][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.659888][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.667098][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.674658][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.681848][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.689027][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.712940][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.720000][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.727514][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.734551][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.747590][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.754659][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.766928][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.774001][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.802404][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.809471][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.823579][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.830653][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.843663][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.850759][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.859062][ T296] veth0_vlan: entered promiscuous mode [ 23.874151][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.881198][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.905479][ T295] veth0_vlan: entered promiscuous mode [ 23.914530][ T296] veth1_macvtap: entered promiscuous mode [ 23.937472][ T293] veth0_vlan: entered promiscuous mode [ 23.957670][ T294] veth0_vlan: entered promiscuous mode [ 23.964687][ T295] veth1_macvtap: entered promiscuous mode [ 23.971627][ T293] veth1_macvtap: entered promiscuous mode [ 23.986469][ T294] veth1_macvtap: entered promiscuous mode [ 23.996500][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.034608][ T312] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 24.068547][ T312] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.118897][ T321] tipc: Started in network mode [ 24.130576][ T321] tipc: Node identity ac14140f, cluster identity 4711 [ 24.143591][ T321] tipc: New replicast peer: 255.255.255.255 [ 24.149806][ T321] tipc: Enabled bearer , priority 10 [ 24.193991][ T321] rust_binder: 2: no such ref 3 [ 24.198937][ T321] rust_binder: 2: no such ref 2 [ 24.210588][ T321] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 24.228567][ T321] rust_binder: Write failure EFAULT in pid:2 [ 24.462907][ T367] capability: warning: `syz.0.10' uses deprecated v2 capabilities in a way that may be insecure [ 24.499973][ T310] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.631481][ T413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13'. [ 24.650059][ T310] usb 4-1: Using ep0 maxpacket: 8 [ 24.657072][ T310] usb 4-1: unable to get BOS descriptor or descriptor too short [ 24.665824][ T310] usb 4-1: config 1 has an invalid descriptor of length 221, skipping remainder of the config [ 24.670291][ T413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13'. [ 24.678899][ T310] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 24.697661][ T310] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 24.714052][ T310] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 24.723301][ T310] usb 4-1: New USB device strings: Mfr=1, Product=232, SerialNumber=3 [ 24.731536][ T310] usb 4-1: Product: syz [ 24.735851][ T310] usb 4-1: Manufacturer: syz [ 24.740501][ T310] usb 4-1: SerialNumber: syz [ 24.741246][ T413] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13'. [ 24.880574][ T422] fuse: Bad value for 'fd' [ 24.957645][ T310] cdc_ncm 4-1:1.0: invalid descriptor buffer length [ 24.964413][ T310] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 24.971523][ T310] cdc_ncm 4-1:1.0: bind() failure [ 24.977926][ T310] usb 4-1: USB disconnect, device number 2 [ 25.256528][ T427] FAULT_INJECTION: forcing a failure. [ 25.256528][ T427] name failslab, interval 1, probability 0, space 0, times 1 [ 25.269208][ T427] CPU: 1 UID: 0 PID: 427 Comm: syz.1.18 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 25.269238][ T427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 25.269257][ T427] Call Trace: [ 25.269263][ T427] [ 25.269271][ T427] __dump_stack+0x21/0x30 [ 25.269306][ T427] dump_stack_lvl+0x140/0x1c0 [ 25.269327][ T427] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.269350][ T427] ? selinux_file_permission+0x318/0xb60 [ 25.269370][ T427] dump_stack+0x19/0x20 [ 25.269388][ T427] should_fail_ex+0x3d7/0x530 [ 25.269401][ T427] should_failslab+0xac/0x100 [ 25.269414][ T427] __kmalloc_cache_noprof+0x41/0x470 [ 25.269425][ T427] ? bpf_lsm_file_permission+0xd/0x20 [ 25.269439][ T427] ? io_ring_ctx_alloc+0x61/0x1d60 [ 25.269450][ T427] io_ring_ctx_alloc+0x61/0x1d60 [ 25.269460][ T427] io_uring_create+0x2e0/0x13d0 [ 25.269469][ T427] ? __kasan_check_write+0x18/0x20 [ 25.269480][ T427] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 25.269501][ T427] ? __kasan_check_write+0x18/0x20 [ 25.269511][ T427] ? __x64_sys_io_uring_setup+0x80/0x80 [ 25.269525][ T427] ? __kasan_check_read+0x15/0x20 [ 25.269535][ T427] __x64_sys_io_uring_setup+0x5f/0x80 [ 25.269548][ T427] x64_sys_call+0x22c0/0x2ee0 [ 25.269558][ T427] do_syscall_64+0x57/0xf0 [ 25.269572][ T427] ? clear_bhb_loop+0x50/0xa0 [ 25.269584][ T427] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.269599][ T427] RIP: 0033:0x7f40f219ce59 [ 25.269616][ T427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.269624][ T427] RSP: 002b:00007f40f30d8ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 25.269641][ T427] RAX: ffffffffffffffda RBX: 0000200000000488 RCX: 00007f40f219ce59 [ 25.269649][ T427] RDX: 0000200000000508 RSI: 0000200000000488 RDI: 000000000000001c [ 25.269656][ T427] RBP: 0000200000000480 R08: 0000200000001540 R09: 0000000000000000 [ 25.269663][ T427] R10: 0000200000000510 R11: 0000000000000206 R12: 0000200000000508 [ 25.269670][ T427] R13: 0000200000000510 R14: 00007f40f30d8fd8 R15: 0000000000000000 [ 25.269678][ T427] [ 25.419936][ T314] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.431200][ T310] tipc: Node number set to 2886997007 [ 25.599928][ T314] usb 3-1: Using ep0 maxpacket: 32 [ 25.610684][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.622380][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.632616][ T314] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 25.641985][ T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.653892][ T314] usb 3-1: config 0 descriptor?? [ 25.670233][ T314] hub 3-1:0.0: USB hub found [ 25.803200][ T458] tipc: Started in network mode [ 25.808155][ T458] tipc: Node identity ac14140f, cluster identity 4711 [ 25.815869][ T458] tipc: New replicast peer: 255.255.255.255 [ 25.822195][ T458] tipc: Enabled bearer , priority 10 [ 25.871989][ T314] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 25.965057][ T465] FAULT_INJECTION: forcing a failure. [ 25.965057][ T465] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 25.978383][ T465] CPU: 0 UID: 0 PID: 465 Comm: syz.0.32 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 25.978414][ T465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 25.978425][ T465] Call Trace: [ 25.978431][ T465] [ 25.978437][ T465] __dump_stack+0x21/0x30 [ 25.978467][ T465] dump_stack_lvl+0x140/0x1c0 [ 25.978494][ T465] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.978519][ T465] ? check_stack_object+0x81/0x150 [ 25.978537][ T465] ? __virt_addr_valid+0x2a6/0x380 [ 25.978559][ T465] dump_stack+0x19/0x20 [ 25.978581][ T465] should_fail_ex+0x3d7/0x530 [ 25.978602][ T465] should_fail+0xf/0x20 [ 25.978619][ T465] should_fail_usercopy+0x1e/0x30 [ 25.978638][ T465] _copy_from_user+0x20/0xa0 [ 25.978653][ T465] memdup_user+0x81/0x170 [ 25.978665][ T465] ? kvm_arch_vcpu_ioctl+0x1367/0x2d90 [ 25.978682][ T465] kvm_arch_vcpu_ioctl+0x19a2/0x2d90 [ 25.978698][ T465] ? avc_has_perm+0x155/0x240 [ 25.978718][ T465] ? __cfi_avc_has_perm+0x10/0x10 [ 25.978736][ T465] ? kasan_save_alloc_info+0x40/0x50 [ 25.978751][ T465] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 25.978772][ T465] ? selinux_file_open+0x46c/0x630 [ 25.978789][ T465] ? __cfi_selinux_file_open+0x10/0x10 [ 25.978809][ T465] ? is_bpf_text_address+0x17b/0x1a0 [ 25.978836][ T465] ? kernel_text_address+0xa9/0xe0 [ 25.978859][ T465] ? __kernel_text_address+0x11/0x40 [ 25.978882][ T465] ? __asan_set_shadow_00+0x12/0x20 [ 25.978907][ T465] ? do_vfs_ioctl+0x182d/0x2010 [ 25.978928][ T465] ? arch_stack_walk+0x10a/0x170 [ 25.978946][ T465] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 25.978966][ T465] ? _parse_integer_limit+0x195/0x1e0 [ 25.978987][ T465] ? _parse_integer+0x2e/0x40 [ 25.979005][ T465] ? kstrtoull+0x13b/0x1e0 [ 25.979024][ T465] ? kstrtouint+0x78/0xf0 [ 25.979051][ T465] ? ioctl_has_perm+0x1bc/0x500 [ 25.979067][ T465] ? __asan_memcpy+0x5a/0x80 [ 25.979084][ T465] ? ioctl_has_perm+0x408/0x500 [ 25.979101][ T465] ? has_cap_mac_admin+0xd0/0xd0 [ 25.979118][ T465] ? __kasan_check_write+0x18/0x20 [ 25.979135][ T465] ? mutex_lock_killable+0x97/0x1d0 [ 25.979154][ T465] ? __cfi_mutex_lock_killable+0x10/0x10 [ 25.979172][ T465] ? proc_fail_nth_write+0x184/0x220 [ 25.979197][ T465] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 25.979222][ T465] kvm_vcpu_ioctl+0x7da/0x1000 [ 25.979241][ T465] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 25.979260][ T465] ? __cfi_vfs_write+0x10/0x10 [ 25.979278][ T465] ? __kasan_check_write+0x18/0x20 [ 25.979296][ T465] ? mutex_unlock+0x90/0x240 [ 25.979313][ T465] ? __cfi_mutex_unlock+0x10/0x10 [ 25.979331][ T465] ? __fget_files+0x2c5/0x340 [ 25.979353][ T465] ? __fget_files+0x2c5/0x340 [ 25.979373][ T465] ? bpf_lsm_file_ioctl+0xd/0x20 [ 25.979395][ T465] ? security_file_ioctl+0x3e/0x110 [ 25.979418][ T465] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 25.979435][ T465] __se_sys_ioctl+0x132/0x1b0 [ 25.979452][ T465] __x64_sys_ioctl+0x7f/0xa0 [ 25.979463][ T465] x64_sys_call+0x1878/0x2ee0 [ 25.979474][ T465] do_syscall_64+0x57/0xf0 [ 25.979490][ T465] ? clear_bhb_loop+0x50/0xa0 [ 25.979502][ T465] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.979518][ T465] RIP: 0033:0x7f2cc579ce59 [ 25.979528][ T465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.979539][ T465] RSP: 002b:00007f2cc663c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 25.979552][ T465] RAX: ffffffffffffffda RBX: 00007f2cc5a15fa0 RCX: 00007f2cc579ce59 [ 25.979560][ T465] RDX: 0000200000000000 RSI: 000000004008ae89 RDI: 0000000000000005 [ 25.979567][ T465] RBP: 00007f2cc663c090 R08: 0000000000000000 R09: 0000000000000000 [ 25.979574][ T465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 25.979580][ T465] R13: 00007f2cc5a16038 R14: 00007f2cc5a15fa0 R15: 00007ffc1c0d02d8 [ 25.979589][ T465] [ 26.079903][ T310] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.291506][ T314] hid-generic 0003:046D:C31C.0001: unknown main item tag 0x0 [ 26.376112][ T314] hid-generic 0003:046D:C31C.0001: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 26.421282][ T471] tc_dump_action: action bad kind [ 26.481436][ T310] usb 2-1: unable to get BOS descriptor or descriptor too short [ 26.489941][ T310] usb 2-1: config 1 has an invalid descriptor of length 62, skipping remainder of the config [ 26.500330][ T310] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 26.509380][ T310] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 26.524434][ T310] usb 2-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 26.534237][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.542310][ T310] usb 2-1: Product: syz [ 26.546592][ T310] usb 2-1: Manufacturer: syz [ 26.551247][ T310] usb 2-1: SerialNumber: syz [ 26.617701][ T478] netlink: 96 bytes leftover after parsing attributes in process `syz.0.36'. [ 26.641323][ T480] FAT-fs (rnullb0): bogus number of reserved sectors [ 26.651723][ T480] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 26.659918][ T466] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 26.682082][ T65] usb 3-1: USB disconnect, device number 2 [ 26.793375][ T460] kvm: kvm [459]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 26.802037][ T460] kvm: kvm [459]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 26.811515][ T466] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 26.819732][ T466] usb 4-1: config 0 has no interface number 0 [ 26.835689][ T460] kvm_intel: kvm [459]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1 [ 26.846113][ T466] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 26.856790][ T466] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.870048][ T466] usb 4-1: Product: syz [ 26.876650][ T460] kvm: kvm [459]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x1 [ 26.885092][ T466] usb 4-1: Manufacturer: syz [ 26.885338][ T460] kvm: kvm [459]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x1 [ 26.889718][ T466] usb 4-1: SerialNumber: syz [ 26.890606][ T466] usb 4-1: config 0 descriptor?? [ 26.939911][ T65] tipc: Node number set to 2886997007 [ 26.994889][ T36] kauditd_printk_skb: 107 callbacks suppressed [ 26.994906][ T36] audit: type=1400 audit(1781859476.590:181): avc: denied { ioctl } for pid=497 comm="syz.0.43" path="socket:[4747]" dev="sockfs" ino=4747 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.052892][ T310] usb 2-1: USB disconnect, device number 2 [ 27.252644][ T509] netlink: 72 bytes leftover after parsing attributes in process `syz.2.45'. [ 27.262030][ T509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.45'. [ 27.270900][ T509] netlink: 40 bytes leftover after parsing attributes in process `syz.2.45'. [ 27.304395][ T511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=511 comm=syz.2.46 [ 27.317288][ T511] netlink: 'syz.2.46': attribute type 4 has an invalid length. [ 27.324961][ T511] netlink: 'syz.2.46': attribute type 32 has an invalid length. [ 27.431315][ T36] audit: type=1400 audit(1781859477.030:182): avc: denied { create } for pid=518 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 27.455033][ T36] audit: type=1400 audit(1781859477.050:183): avc: denied { write } for pid=518 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 27.647069][ T36] audit: type=1400 audit(1781859477.240:184): avc: denied { read write } for pid=542 comm="syz.2.60" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 27.649894][ T543] netlink: 108 bytes leftover after parsing attributes in process `syz.2.60'. [ 27.676665][ T36] audit: type=1400 audit(1781859477.240:185): avc: denied { open } for pid=542 comm="syz.2.60" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 27.717525][ T466] asix 4-1:0.251 (unnamed net_device) (uninitialized): invalid PHY address: 212 [ 27.739761][ T36] audit: type=1400 audit(1781859477.330:186): avc: denied { mounton } for pid=544 comm="syz.1.61" path="/syzcgroup/cpu/syz1/cpuset.cpus" dev="cgroup" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 27.823589][ T555] process 'syz.2.60' launched './file0' with NULL argv: empty string added [ 27.874639][ T36] audit: type=1400 audit(1781859477.470:187): avc: denied { getopt } for pid=556 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.924186][ T314] usb 4-1: USB disconnect, device number 3 [ 27.946640][ T563] tipc: Enabled bearer , priority 0 [ 27.954131][ T563] syzkaller0: MTU too low for tipc bearer [ 27.960034][ T563] tipc: Disabling bearer [ 28.039908][ T466] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.189913][ T466] usb 2-1: Using ep0 maxpacket: 16 [ 28.196128][ T466] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 28.204381][ T466] usb 2-1: config 1 has no interface number 0 [ 28.210497][ T466] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 28.219899][ T9] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 28.220444][ T466] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 28.237769][ T466] usb 2-1: config 1 interface 105 has no altsetting 0 [ 28.245934][ T466] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 28.255013][ T466] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 28.263092][ T466] usb 2-1: Product: syz [ 28.267247][ T466] usb 2-1: Manufacturer: syz [ 28.271850][ T466] usb 2-1: SerialNumber: syz [ 28.277302][ T554] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 28.284509][ T554] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 28.381275][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 28.390293][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 32, setting to 0 [ 28.400896][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16, setting to 0 [ 28.413574][ T9] usb 1-1: string descriptor 0 read error: -22 [ 28.419770][ T9] usb 1-1: New USB device found, idVendor=0499, idProduct=1014, bcdDevice= 0.40 [ 28.428881][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.442218][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 28.452733][ T9] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 28.467504][ T423] udevd[423]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.469286][ T567] : renamed from vlan0 (while UP) [ 28.483551][ T9] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 28.583225][ T572] kvm: kvm [571]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0xc1) = 0xd105af [ 28.592090][ T572] kvm: kvm [571]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0xc2) = 0xd105af [ 28.603074][ T572] kvm: kvm [571]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x11e) = 0xd105af [ 28.614461][ T572] kvm: kvm [571]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x186) = 0xd105af [ 28.623413][ T572] kvm: kvm [571]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x187) = 0xd105af [ 28.634874][ T572] kvm_intel: kvm [571]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x1d9) = 0xd105af [ 28.650395][ T45] usb 1-1: USB disconnect, device number 2 [ 28.701723][ T554] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 28.713251][ T554] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 28.797386][ T36] audit: type=1400 audit(1781859478.390:188): avc: denied { append } for pid=578 comm="syz.3.72" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 28.822082][ T36] audit: type=1400 audit(1781859478.420:189): avc: denied { set_context_mgr } for pid=578 comm="syz.3.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 28.843096][ T36] audit: type=1400 audit(1781859478.440:190): avc: denied { write } for pid=578 comm="syz.3.72" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 29.128267][ T466] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 29.425560][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 29.521979][ T600] syzkaller0: entered promiscuous mode [ 29.527633][ T600] syzkaller0: entered allmulticast mode [ 29.537804][ T600] netlink: 112 bytes leftover after parsing attributes in process `syz.2.81'. [ 29.599879][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 29.610770][ T9] usb 4-1: New USB device found, idVendor=1b96, idProduct=000c, bcdDevice= 0.00 [ 29.619908][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.641701][ T9] usb 4-1: config 0 descriptor?? [ 29.950786][ T614] random: crng reseeded on system resumption [ 30.001648][ T466] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 30.055704][ T9] ntrig 0003:1B96:000C.0002: unexpected long global item [ 30.075674][ T618] netlink: 336 bytes leftover after parsing attributes in process `syz.1.87'. [ 30.075856][ T9] ntrig 0003:1B96:000C.0002: parse failed [ 30.106608][ T466] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, b2:94:32:78:79:23 [ 30.107754][ T9] ntrig 0003:1B96:000C.0002: probe with driver ntrig failed with error -22 [ 30.124066][ T466] usb 2-1: USB disconnect, device number 3 [ 30.137922][ T466] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 30.337780][ T314] usb 4-1: USB disconnect, device number 4 [ 30.370346][ T466] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 30.389805][ T466] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 30.399217][ T466] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 30.559912][ T310] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 30.719932][ T466] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 30.728592][ T310] usb 3-1: config index 0 descriptor too short (expected 7768, got 18) [ 30.737054][ T310] usb 3-1: config 0 has an invalid interface number: 180 but max is 0 [ 30.745380][ T310] usb 3-1: config 0 has no interface number 0 [ 30.751493][ T310] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 30.760535][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.769007][ T310] usb 3-1: config 0 descriptor?? [ 30.774940][ T310] ftdi_sio 3-1:0.180: FTDI USB Serial Device converter detected [ 30.782880][ T310] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 30.871250][ T466] usb 2-1: unable to get BOS descriptor or descriptor too short [ 30.881063][ T466] usb 2-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 30.890126][ T466] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.898092][ T466] usb 2-1: Product: syz [ 30.902292][ T466] usb 2-1: Manufacturer: syz [ 30.907052][ T466] usb 2-1: SerialNumber: syz [ 30.976234][ T9] usb 3-1: USB disconnect, device number 3 [ 30.984077][ T9] ftdi_sio 3-1:0.180: device disconnected [ 31.119460][ T466] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 31.126416][ T466] usb 2-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 31.141517][ T466] usb 2-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 31.150544][ T466] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 31.161491][ T466] usb 2-1: USB disconnect, device number 4 [ 31.188701][ T504] udevd[504]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.204567][ T314] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 31.329944][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 31.339984][ T314] usb 4-1: device descriptor read/64, error -71 [ 31.480937][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.491995][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.504184][ T10] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 31.513550][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.529975][ T10] usb 1-1: config 0 descriptor?? [ 31.579896][ T314] usb 4-1: device descriptor read/64, error -71 [ 31.611887][ T651] kvm: kvm [650]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 31.667553][ T655] rust_binder: 654:655 transaction to 0 failed: ENOENT [ 31.720118][ T659] kvm: apic: phys broadcast and lowest prio [ 31.743535][ T659] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 31.819914][ T314] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 31.938141][ T10] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 31.953244][ T10] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 31.960740][ T314] usb 4-1: device descriptor read/64, error -71 [ 31.975544][ T10] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 31.987649][ T10] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 32.010666][ T10] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 32.024450][ T673] kvm: pic: non byte write [ 32.029493][ T10] playstation 0003:054C:0DF2.0003: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 32.199901][ T314] usb 4-1: device descriptor read/64, error -71 [ 32.208556][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 32.208572][ T36] audit: type=1400 audit(1781859481.800:212): avc: denied { ioctl } for pid=680 comm="syz.2.110" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=7780 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.256167][ T36] audit: type=1400 audit(1781859481.850:213): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.309991][ T314] usb usb4-port1: attempt power cycle [ 32.322192][ T683] rust_binder: 682:683 transaction to 0 failed: ENOENT [ 32.337207][ T10] playstation 0003:054C:0DF2.0003: Failed to retrieve feature with reportID 32: -32 [ 32.370641][ T10] playstation 0003:054C:0DF2.0003: Failed to retrieve DualSense firmware info: -32 [ 32.382406][ T10] playstation 0003:054C:0DF2.0003: Failed to get firmware info from DualSense [ 32.392813][ T10] playstation 0003:054C:0DF2.0003: Failed to create dualsense. [ 32.404826][ T10] playstation 0003:054C:0DF2.0003: probe with driver playstation failed with error -32 [ 32.645356][ T691] FAULT_INJECTION: forcing a failure. [ 32.645356][ T691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 32.658437][ T314] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 32.659898][ T691] CPU: 1 UID: 0 PID: 691 Comm: syz.1.115 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 32.659924][ T691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 32.659935][ T691] Call Trace: [ 32.659942][ T691] [ 32.659950][ T691] __dump_stack+0x21/0x30 [ 32.659979][ T691] dump_stack_lvl+0x140/0x1c0 [ 32.660003][ T691] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.660026][ T691] ? _parse_integer+0x2e/0x40 [ 32.660045][ T691] ? kstrtoull+0x13b/0x1e0 [ 32.660064][ T691] dump_stack+0x19/0x20 [ 32.660086][ T691] should_fail_ex+0x3d7/0x530 [ 32.660108][ T691] should_fail+0xf/0x20 [ 32.660127][ T691] should_fail_usercopy+0x1e/0x30 [ 32.660149][ T691] _copy_from_user+0x20/0xa0 [ 32.660165][ T691] ___sys_sendmsg+0x1c7/0x370 [ 32.660188][ T691] ? __sys_sendmsg+0x2a0/0x2a0 [ 32.660209][ T691] ? proc_fail_nth_write+0x184/0x220 [ 32.660233][ T691] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 32.660262][ T691] __x64_sys_sendmsg+0x1fb/0x2d0 [ 32.660284][ T691] ? fput+0x1a4/0x240 [ 32.660305][ T691] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 32.660326][ T691] ? ksys_write+0x1f3/0x260 [ 32.660345][ T691] ? __kasan_check_read+0x15/0x20 [ 32.660363][ T691] x64_sys_call+0x2a4c/0x2ee0 [ 32.660380][ T691] do_syscall_64+0x57/0xf0 [ 32.660403][ T691] ? clear_bhb_loop+0x50/0xa0 [ 32.660420][ T691] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.660445][ T691] RIP: 0033:0x7f40f219ce59 [ 32.660460][ T691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.660474][ T691] RSP: 002b:00007f40f30d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 32.660494][ T691] RAX: ffffffffffffffda RBX: 00007f40f2415fa0 RCX: 00007f40f219ce59 [ 32.660507][ T691] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 32.660518][ T691] RBP: 00007f40f30d9090 R08: 0000000000000000 R09: 0000000000000000 [ 32.660529][ T691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.660540][ T691] R13: 00007f40f2416038 R14: 00007f40f2415fa0 R15: 00007ffcbb6979b8 [ 32.660555][ T691] [ 32.878450][ T10] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 32.902245][ T695] kvm_pr_unimpl_wrmsr: 1 callbacks suppressed [ 32.902265][ T695] kvm: kvm [694]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 32.902625][ T314] usb 4-1: device descriptor read/8, error -71 [ 33.030997][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 33.041901][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 33.054949][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 33.064031][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.072742][ T314] usb 4-1: device descriptor read/8, error -71 [ 33.079071][ T10] usb 3-1: config 0 descriptor?? [ 33.199894][ T466] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 33.309904][ T314] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 33.330868][ T314] usb 4-1: device descriptor read/8, error -71 [ 33.350948][ T466] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 33.361976][ T466] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 33.372827][ T466] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 33.385752][ T466] usb 2-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 33.394806][ T466] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.403430][ T466] usb 2-1: config 0 descriptor?? [ 33.408703][ T699] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 33.460894][ T314] usb 4-1: device descriptor read/8, error -71 [ 33.486766][ T10] ryos 0003:1E7D:31CE.0004: ignoring exceeding usage max [ 33.494722][ T10] ryos 0003:1E7D:31CE.0004: unknown main item tag 0xd [ 33.501539][ T10] ryos 0003:1E7D:31CE.0004: unknown main item tag 0x2 [ 33.508430][ T10] ryos 0003:1E7D:31CE.0004: item fetching failed at offset 39/40 [ 33.516386][ T10] ryos 0003:1E7D:31CE.0004: parse failed [ 33.522073][ T10] ryos 0003:1E7D:31CE.0004: probe with driver ryos failed with error -22 [ 33.570136][ T314] usb usb4-port1: unable to enumerate USB device [ 33.688115][ T564] usb 3-1: USB disconnect, device number 4 [ 33.818589][ T466] uclogic 0003:28BD:0075.0005: interface is invalid, ignoring [ 34.012707][ T701] rust_binder: 700:701 transaction to 0 failed: ENOENT [ 34.098421][ T564] usb 1-1: USB disconnect, device number 3 [ 34.203599][ T710] rust_binder: Write failure EINVAL in pid:99 [ 34.216207][ T36] audit: type=1400 audit(1781859483.810:214): avc: denied { bind } for pid=715 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 34.243121][ T716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.125'. [ 34.275880][ T723] overlayfs: conflicting options: userxattr,verity=on [ 34.292314][ T36] audit: type=1400 audit(1781859483.890:215): avc: denied { mount } for pid=722 comm="syz.2.126" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 34.333241][ T36] audit: type=1400 audit(1781859483.910:216): avc: denied { remount } for pid=722 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 34.430767][ T725] can0: slcan on ttyS3. [ 34.439792][ T36] audit: type=1400 audit(1781859484.030:217): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.473463][ T36] audit: type=1400 audit(1781859484.030:218): avc: denied { read } for pid=149 comm="dhcpcd" name="n16" dev="tmpfs" ino=1029 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.505512][ T36] audit: type=1400 audit(1781859484.030:219): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=1029 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.530184][ T36] audit: type=1400 audit(1781859484.030:220): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=1029 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.545843][ T466] usb 2-1: USB disconnect, device number 5 [ 34.575622][ T36] audit: type=1400 audit(1781859484.100:221): avc: denied { read } for pid=728 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.665471][ T723] can0 (unregistered): slcan off ttyS3. [ 35.109897][ T466] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 35.209892][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 35.260271][ T466] usb 3-1: too many configurations: 72, using maximum allowed: 8 [ 35.273727][ T466] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 35.283125][ T466] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.292129][ T466] usb 3-1: config 0 descriptor?? [ 35.359884][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 35.366407][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 35.379256][ T31] usb 1-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 35.388525][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.396702][ T31] usb 1-1: Product: syz [ 35.401056][ T31] usb 1-1: Manufacturer: syz [ 35.405661][ T31] usb 1-1: SerialNumber: syz [ 35.505631][ T564] usb 3-1: USB disconnect, device number 5 [ 35.612452][ T764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.626931][ T764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.644398][ T764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.660889][ T772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.661004][ T764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.671085][ T772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.713351][ T31] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 35.731422][ T31] usb 1-1: USB disconnect, device number 4 [ 35.747147][ T504] udevd[504]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.064987][ T786] FAULT_INJECTION: forcing a failure. [ 36.064987][ T786] name failslab, interval 1, probability 0, space 0, times 0 [ 36.077718][ T564] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 36.079906][ T786] CPU: 1 UID: 0 PID: 786 Comm: syz.2.139 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 36.079932][ T786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 36.079942][ T786] Call Trace: [ 36.079948][ T786] [ 36.079955][ T786] __dump_stack+0x21/0x30 [ 36.079984][ T786] dump_stack_lvl+0x140/0x1c0 [ 36.080007][ T786] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.080030][ T786] ? selinux_file_open+0x46c/0x630 [ 36.080047][ T786] ? __cfi_selinux_file_open+0x10/0x10 [ 36.080064][ T786] dump_stack+0x19/0x20 [ 36.080087][ T786] should_fail_ex+0x3d7/0x530 [ 36.080109][ T786] should_failslab+0xac/0x100 [ 36.080130][ T786] kmem_cache_alloc_node_noprof+0x45/0x420 [ 36.080148][ T786] ? __alloc_skb+0x108/0x370 [ 36.080168][ T786] __alloc_skb+0x108/0x370 [ 36.080186][ T786] tcp_stream_alloc_skb+0x43/0x370 [ 36.080208][ T786] tcp_sendmsg_locked+0xeb5/0x4b70 [ 36.080230][ T786] ? __asan_memcpy+0x5a/0x80 [ 36.080252][ T786] ? __cfi_tcp_sendmsg_locked+0x10/0x10 [ 36.080273][ T786] ? __kasan_check_write+0x18/0x20 [ 36.080290][ T786] ? proc_fail_nth_write+0x184/0x220 [ 36.080314][ T786] ? __cfi_tcp_sendmsg+0x10/0x10 [ 36.080336][ T786] tcp_sendmsg+0x3e/0xd0 [ 36.080355][ T786] ? __cfi_tcp_sendmsg+0x10/0x10 [ 36.080375][ T786] inet_sendmsg+0xb7/0x120 [ 36.080399][ T786] ? __cfi_inet_sendmsg+0x10/0x10 [ 36.080423][ T786] __sys_sendto+0x5ea/0x700 [ 36.080442][ T786] ? __cfi___sys_sendto+0x10/0x10 [ 36.080463][ T786] ? __kasan_check_write+0x18/0x20 [ 36.080481][ T786] ? __cfi_ksys_write+0x10/0x10 [ 36.080500][ T786] __x64_sys_sendto+0xe9/0x100 [ 36.080520][ T786] x64_sys_call+0x2c2c/0x2ee0 [ 36.080537][ T786] do_syscall_64+0x57/0xf0 [ 36.080559][ T786] ? clear_bhb_loop+0x50/0xa0 [ 36.080577][ T786] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.080603][ T786] RIP: 0033:0x7f40b679ce59 [ 36.080619][ T786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.080633][ T786] RSP: 002b:00007f40b7571028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 36.080652][ T786] RAX: ffffffffffffffda RBX: 00007f40b6a15fa0 RCX: 00007f40b679ce59 [ 36.080665][ T786] RDX: ffffffffffffffef RSI: 0000200000000080 RDI: 0000000000000003 [ 36.080678][ T786] RBP: 00007f40b7571090 R08: 0000000000000000 R09: 000000000000fe8d [ 36.080689][ T786] R10: 0000000000004805 R11: 0000000000000246 R12: 0000000000000001 [ 36.080700][ T786] R13: 00007f40b6a16038 R14: 00007f40b6a15fa0 R15: 00007ffc591fe0b8 [ 36.080715][ T786] [ 36.372769][ T795] overlayfs: lower data-only dirs require metacopy support. [ 36.433582][ T803] ======================================================= [ 36.433582][ T803] WARNING: The mand mount option has been deprecated and [ 36.433582][ T803] and is ignored by this kernel. Remove the mand [ 36.433582][ T803] option from the mount to silence this warning. [ 36.433582][ T803] ======================================================= [ 36.459912][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 36.468957][ T803] tmpfs: Unknown parameter 'grpquota' [ 36.476033][ T564] usb 2-1: device descriptor read/64, error -71 [ 36.536480][ T810] rust_binder: 131: no such ref 0 [ 36.572347][ T810] /dev/loop0: Can't lookup blockdev [ 36.577933][ T810] rust_binder: 809:810 transaction to 0 failed: ENOENT [ 36.629888][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 36.643116][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 36.653383][ T10] usb 4-1: no configurations [ 36.658155][ T10] usb 4-1: can't read configurations, error -22 [ 36.719943][ T564] usb 2-1: device descriptor read/64, error -71 [ 36.749917][ T31] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 36.899980][ T466] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 36.908441][ T31] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 36.919283][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 36.930245][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 36.943216][ T31] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 36.952269][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.960765][ T31] usb 1-1: config 0 descriptor?? [ 36.965989][ T808] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 36.973243][ T564] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 37.049886][ T466] usb 3-1: Using ep0 maxpacket: 16 [ 37.056033][ T466] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 37.066756][ T466] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 128, changing to 11 [ 37.077827][ T466] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 37.088531][ T466] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 37.099274][ T466] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x72, changing to 0x2 [ 37.110841][ T564] usb 2-1: device descriptor read/64, error -71 [ 37.112135][ T466] usb 3-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice= 0.40 [ 37.126153][ T466] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.134183][ T466] usb 3-1: Product: 뽽ꩄ낦쉽浑羞잸尿讟흿䁄墦⥧獒ㇶ㓍혐愞渃瓰峕夀熛꟪ġ暨鴺稿෬偞눯琇寔묯감 [ 37.147681][ T466] usb 3-1: Manufacturer: п [ 37.152221][ T466] usb 3-1: SerialNumber: э [ 37.213631][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 37.213648][ T36] audit: type=1400 audit(1781859486.810:243): avc: denied { ioctl } for pid=815 comm="syz.3.151" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 37.247405][ T36] audit: type=1400 audit(1781859486.830:244): avc: denied { nlmsg_write } for pid=817 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 37.271711][ T822] FAULT_INJECTION: forcing a failure. [ 37.271711][ T822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 37.285655][ T822] CPU: 0 UID: 0 PID: 822 Comm: syz.3.154 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 37.285682][ T822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 37.285694][ T822] Call Trace: [ 37.285700][ T822] [ 37.285707][ T822] __dump_stack+0x21/0x30 [ 37.285736][ T822] dump_stack_lvl+0x140/0x1c0 [ 37.285760][ T822] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.285784][ T822] ? _parse_integer+0x2e/0x40 [ 37.285804][ T822] ? kstrtoull+0x13b/0x1e0 [ 37.285824][ T822] dump_stack+0x19/0x20 [ 37.285847][ T822] should_fail_ex+0x3d7/0x530 [ 37.285869][ T822] should_fail+0xf/0x20 [ 37.285890][ T822] should_fail_usercopy+0x1e/0x30 [ 37.285912][ T822] _copy_from_user+0x20/0xa0 [ 37.285928][ T822] ___sys_sendmsg+0x1c7/0x370 [ 37.285952][ T822] ? __sys_sendmsg+0x2a0/0x2a0 [ 37.285975][ T822] ? proc_fail_nth_write+0x184/0x220 [ 37.285999][ T822] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 37.286037][ T822] __x64_sys_sendmsg+0x1fb/0x2d0 [ 37.286060][ T822] ? fput+0x1a4/0x240 [ 37.286083][ T822] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 37.286105][ T822] ? ksys_write+0x1f3/0x260 [ 37.286123][ T822] ? __kasan_check_read+0x15/0x20 [ 37.286143][ T822] x64_sys_call+0x2a4c/0x2ee0 [ 37.286160][ T822] do_syscall_64+0x57/0xf0 [ 37.286183][ T822] ? clear_bhb_loop+0x50/0xa0 [ 37.286202][ T822] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.286228][ T822] RIP: 0033:0x7fa63279ce59 [ 37.286243][ T822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.286257][ T822] RSP: 002b:00007fa633626028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.286278][ T822] RAX: ffffffffffffffda RBX: 00007fa632a15fa0 RCX: 00007fa63279ce59 [ 37.286292][ T822] RDX: 000000000000c004 RSI: 0000200000000100 RDI: 0000000000000003 [ 37.286305][ T822] RBP: 00007fa633626090 R08: 0000000000000000 R09: 0000000000000000 [ 37.286317][ T822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.286328][ T822] R13: 00007fa632a16038 R14: 00007fa632a15fa0 R15: 00007ffcc4412ee8 [ 37.286344][ T822] [ 37.506881][ T31] dragonrise 0003:0079:0011.0006: item fetching failed at offset 3/40 [ 37.520036][ T31] dragonrise 0003:0079:0011.0006: parse failed [ 37.523217][ T827] tmpfs: Unknown parameter 'grpquota' [ 37.526273][ T31] dragonrise 0003:0079:0011.0006: probe with driver dragonrise failed with error -22 [ 37.547457][ T829] rust_binder: 89: no such ref 0 [ 37.562438][ T564] usb 2-1: device descriptor read/64, error -71 [ 37.582390][ T829] /dev/loop0: Can't lookup blockdev [ 37.588041][ T829] rust_binder: 828:829 transaction to 0 failed: ENOENT [ 37.651890][ T36] audit: type=1400 audit(1781859487.250:245): avc: denied { setattr } for pid=830 comm="syz.3.158" path="socket:[12365]" dev="sockfs" ino=12365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.682463][ T36] audit: type=1400 audit(1781859487.250:246): avc: denied { block_suspend } for pid=830 comm="syz.3.158" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 37.689979][ T564] usb usb2-port1: attempt power cycle [ 37.779119][ T36] audit: type=1400 audit(1781859487.370:247): avc: denied { connect } for pid=834 comm="syz.3.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.039959][ T564] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 38.060951][ T564] usb 2-1: device descriptor read/8, error -71 [ 38.190914][ T564] usb 2-1: device descriptor read/8, error -71 [ 38.261438][ T31] usb 1-1: USB disconnect, device number 5 [ 38.429923][ T564] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 38.450910][ T564] usb 2-1: device descriptor read/8, error -71 [ 38.580786][ T36] audit: type=1400 audit(1781859488.180:248): avc: denied { write } for pid=845 comm="syz.3.163" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 38.580958][ T564] usb 2-1: device descriptor read/8, error -71 [ 38.638717][ T36] audit: type=1400 audit(1781859488.230:249): avc: denied { setopt } for pid=850 comm="syz.3.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.659886][ T31] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 38.720006][ T564] usb usb2-port1: unable to enumerate USB device [ 38.810946][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.821225][ T31] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 38.832077][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 38.846574][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=0010, bcdDevice= 0.40 [ 38.855983][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 38.864089][ T31] usb 1-1: SerialNumber: syz [ 38.873076][ T36] audit: type=1400 audit(1781859488.470:250): avc: denied { create } for pid=858 comm="syz.1.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 38.884605][ T859] kvm: vcpu 0: requested 1536 ns lapic timer period limited to 200000 ns [ 39.049900][ T314] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 39.070120][ T31] usb 1-1: USB disconnect, device number 6 [ 39.209897][ T314] usb 4-1: Using ep0 maxpacket: 8 [ 39.216057][ T314] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.226318][ T314] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.236703][ T314] usb 4-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 39.245793][ T314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.253817][ T314] usb 4-1: Product: syz [ 39.258001][ T314] usb 4-1: Manufacturer: syz [ 39.262629][ T314] usb 4-1: SerialNumber: syz [ 39.469828][ T857] kvm: MONITOR instruction emulated as NOP! [ 39.587537][ T879] mmap: syz.0.176 (879) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.651912][ T36] audit: type=1400 audit(1781859489.250:251): avc: denied { read write } for pid=880 comm="syz.0.177" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 39.674931][ T36] audit: type=1400 audit(1781859489.250:252): avc: denied { open } for pid=880 comm="syz.0.177" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 39.691211][ T466] usb 3-1: USB disconnect, device number 6 [ 39.701690][ T314] usb 4-1: unit 0 not found! [ 39.710082][ T314] usb 4-1: USB disconnect, device number 11 [ 39.724919][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.733815][ T504] udevd[504]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 40.229925][ T314] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 40.349911][ T466] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 40.382223][ T314] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 40.391431][ T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.399469][ T314] usb 3-1: Product: syz [ 40.403711][ T314] usb 3-1: Manufacturer: syz [ 40.408336][ T314] usb 3-1: SerialNumber: syz [ 40.499888][ T466] usb 4-1: Using ep0 maxpacket: 32 [ 40.507965][ T466] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 40.517052][ T466] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.525067][ T466] usb 4-1: Product: syz [ 40.529225][ T466] usb 4-1: Manufacturer: syz [ 40.534111][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 40.541846][ T466] usb 4-1: SerialNumber: syz [ 40.634110][ T314] rtl8150 3-1:1.0: couldn't reset the device [ 40.640384][ T314] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 40.649762][ T314] usb 3-1: USB disconnect, device number 7 [ 40.712333][ T31] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 40.721500][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.729509][ T31] usb 2-1: Product: syz [ 40.733758][ T31] usb 2-1: Manufacturer: syz [ 40.738380][ T31] usb 2-1: SerialNumber: syz [ 40.740001][ T564] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 40.853729][ T466] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 40.863996][ T466] usb 4-1: USB disconnect, device number 12 [ 40.901236][ T564] usb 1-1: unable to get BOS descriptor or descriptor too short [ 40.909756][ T564] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 40.922172][ T564] usb 1-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 40.931318][ T564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.939314][ T564] usb 1-1: Product: syz [ 40.943503][ T564] usb 1-1: Manufacturer: syz [ 40.948104][ T564] usb 1-1: SerialNumber: syz [ 40.971925][ T31] rtl8150 2-1:1.0: couldn't reset the device [ 40.978002][ T31] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 40.987373][ T31] usb 2-1: USB disconnect, device number 10 [ 41.221805][ T564] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 41.237004][ T564] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 41.247512][ T564] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 41.263614][ T564] usb 1-1: USB disconnect, device number 7 [ 41.285401][ T504] udevd[504]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.374373][ T912] netlink: 1012 bytes leftover after parsing attributes in process `syz.2.189'. [ 41.493061][ T929] netlink: 84 bytes leftover after parsing attributes in process `syz.1.194'. [ 41.709691][ T944] FAULT_INJECTION: forcing a failure. [ 41.709691][ T944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.722776][ T944] CPU: 1 UID: 0 PID: 944 Comm: syz.2.200 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 41.722803][ T944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 41.722814][ T944] Call Trace: [ 41.722820][ T944] [ 41.722827][ T944] __dump_stack+0x21/0x30 [ 41.722855][ T944] dump_stack_lvl+0x140/0x1c0 [ 41.722872][ T944] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.722886][ T944] ? _parse_integer+0x2e/0x40 [ 41.722899][ T944] ? kstrtoull+0x13b/0x1e0 [ 41.722910][ T944] dump_stack+0x19/0x20 [ 41.722930][ T944] should_fail_ex+0x3d7/0x530 [ 41.722943][ T944] should_fail+0xf/0x20 [ 41.722954][ T944] should_fail_usercopy+0x1e/0x30 [ 41.722967][ T944] _copy_from_user+0x20/0xa0 [ 41.722976][ T944] ___sys_sendmsg+0x1c7/0x370 [ 41.722990][ T944] ? __sys_sendmsg+0x2a0/0x2a0 [ 41.723003][ T944] ? proc_fail_nth_write+0x184/0x220 [ 41.723017][ T944] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 41.723040][ T944] __x64_sys_sendmsg+0x1fb/0x2d0 [ 41.723053][ T944] ? fput+0x1a4/0x240 [ 41.723066][ T944] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 41.723079][ T944] ? ksys_write+0x1f3/0x260 [ 41.723090][ T944] ? __kasan_check_read+0x15/0x20 [ 41.723101][ T944] x64_sys_call+0x2a4c/0x2ee0 [ 41.723111][ T944] do_syscall_64+0x57/0xf0 [ 41.723125][ T944] ? clear_bhb_loop+0x50/0xa0 [ 41.723136][ T944] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.723151][ T944] RIP: 0033:0x7f40b679ce59 [ 41.723162][ T944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.723171][ T944] RSP: 002b:00007f40b7571028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 41.723183][ T944] RAX: ffffffffffffffda RBX: 00007f40b6a15fa0 RCX: 00007f40b679ce59 [ 41.723191][ T944] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 41.723197][ T944] RBP: 00007f40b7571090 R08: 0000000000000000 R09: 0000000000000000 [ 41.723204][ T944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.723210][ T944] R13: 00007f40b6a16038 R14: 00007f40b6a15fa0 R15: 00007ffc591fe0b8 [ 41.723219][ T944] [ 41.810054][ T564] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 42.079929][ T10] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 42.101259][ T564] usb 4-1: unable to get BOS descriptor or descriptor too short [ 42.109247][ T564] usb 4-1: not running at top speed; connect to a high speed hub [ 42.117701][ T564] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4 [ 42.129125][ T564] usb 4-1: language id specifier not provided by device, defaulting to English [ 42.139128][ T564] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 42.148228][ T564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.156518][ T564] usb 4-1: Product: syz [ 42.160725][ T564] usb 4-1: Manufacturer: ⧄亨珤心줨⃴׌干誤囦㕸ff十 [ 42.168867][ T564] usb 4-1: SerialNumber: syz [ 42.231153][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 42.239217][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 42.247710][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 215, changing to 4 [ 42.260754][ T10] usb 3-1: language id specifier not provided by device, defaulting to English [ 42.270782][ T10] usb 3-1: New USB device found, idVendor=04b4, idProduct=931d, bcdDevice= 0.40 [ 42.279892][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.287876][ T10] usb 3-1: Product: syz [ 42.292076][ T10] usb 3-1: Manufacturer: 鴪ꋾ犪䍌甩㪖Ᶎ䑕炗ꃗ㯑ꚕ䄝隇텝⽺䰸㰚힇阚电둰₶헒ⷡ셌孾種⺗⟗轈헴ꄦ큠㷽ꮓኍ㞪噞ഐ㏯쨀行袡ᒏ檧鐞澁ﮱ쏑݇䱮괙ᮋ汖ႋँ錎㜇䊠⑱ຐꨣ衟ꁭ悝粈赤㶯춎敧 [ 42.316519][ T10] usb 3-1: SerialNumber: syz [ 42.378447][ T564] usb 4-1: BAAD SPEAKERPHONE c_chmask mismatch [ 42.386259][ T564] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 42.397578][ T564] usb 4-1: USB disconnect, device number 13 [ 42.407475][ T504] udevd[504]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.526910][ T10] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 42.534002][ T10] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 42.550181][ T10] usb 3-1: USB disconnect, device number 8 [ 42.560682][ T504] udevd[504]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.598476][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 42.598493][ T36] audit: type=1400 audit(1781859492.190:261): avc: denied { create } for pid=957 comm="syz.0.205" name="#8" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 42.624791][ T36] audit: type=1400 audit(1781859492.200:262): avc: denied { link } for pid=957 comm="syz.0.205" name="#8" dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 42.646753][ T36] audit: type=1400 audit(1781859492.200:263): avc: denied { rename } for pid=957 comm="syz.0.205" name="#9" dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 42.674181][ T36] audit: type=1400 audit(1781859492.270:264): avc: denied { mount } for pid=959 comm="syz.0.206" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 42.674733][ T960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.206'. [ 42.708388][ T36] audit: type=1400 audit(1781859492.300:265): avc: denied { unmount } for pid=959 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 42.708901][ T960] fuse: Bad value for 'fd' [ 42.727915][ T36] audit: type=1400 audit(1781859492.300:266): avc: denied { mounton } for pid=959 comm="syz.0.206" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 42.934829][ T980] fuseblk: Bad value for 'source' [ 43.009859][ T36] audit: type=1400 audit(1781859492.600:267): avc: denied { ioctl } for pid=979 comm="syz.3.215" path="socket:[13218]" dev="sockfs" ino=13218 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.046590][ T36] audit: type=1400 audit(1781859492.600:268): avc: denied { bind } for pid=979 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.075889][ T36] audit: type=1400 audit(1781859492.630:269): avc: denied { append } for pid=981 comm="syz.1.216" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 43.162484][ T36] audit: type=1400 audit(1781859492.760:270): avc: denied { read } for pid=997 comm="syz.2.222" path="socket:[13255]" dev="sockfs" ino=13255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.429905][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 43.499912][ T565] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 43.579908][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 43.586227][ T10] usb 2-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 43.599230][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 43.605887][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 43.614973][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.623580][ T10] usb 2-1: config 0 descriptor?? [ 43.649882][ T565] usb 1-1: Using ep0 maxpacket: 8 [ 43.656043][ T565] usb 1-1: config 3 has an invalid interface number: 45 but max is 0 [ 43.664202][ T565] usb 1-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 43.672905][ T565] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 43.683009][ T565] usb 1-1: config 3 has no interface number 0 [ 43.689103][ T565] usb 1-1: config 3 interface 45 altsetting 2 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 43.700005][ T565] usb 1-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 43.712879][ T565] usb 1-1: config 3 interface 45 has no altsetting 0 [ 43.720929][ T565] usb 1-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 43.730015][ T565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.737991][ T565] usb 1-1: Product: syz [ 43.742286][ T565] usb 1-1: Manufacturer: syz [ 43.746926][ T565] usb 1-1: SerialNumber: syz [ 43.793298][ T1024] fuse: Bad value for 'user_id' [ 43.798191][ T1024] fuse: Bad value for 'user_id' [ 43.958734][ T1016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.967307][ T1016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.029897][ T855] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 44.038017][ T10] hid (null): unknown global tag 0xe [ 44.043351][ T10] hid (null): unknown global tag 0xd [ 44.049645][ T10] logitech-djreceiver 0003:046D:C52F.0007: unknown main item tag 0x1 [ 44.058070][ T10] logitech-djreceiver 0003:046D:C52F.0007: unknown global tag 0xe [ 44.065986][ T10] logitech-djreceiver 0003:046D:C52F.0007: item 0 4 1 14 parsing failed [ 44.074554][ T10] logitech-djreceiver 0003:046D:C52F.0007: logi_dj_probe: parse failed [ 44.083306][ T10] logitech-djreceiver 0003:046D:C52F.0007: probe with driver logitech-djreceiver failed with error -22 [ 44.139912][ T466] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 44.179913][ T855] usb 4-1: Using ep0 maxpacket: 8 [ 44.186041][ T855] usb 4-1: config 3 has an invalid interface number: 214 but max is 3 [ 44.194439][ T855] usb 4-1: config 3 has an invalid interface association descriptor of length 6, skipping [ 44.204491][ T855] usb 4-1: config 3 has an invalid interface number: 38 but max is 3 [ 44.212686][ T855] usb 4-1: config 3 has an invalid interface number: 219 but max is 3 [ 44.221006][ T855] usb 4-1: config 3 has an invalid interface number: 107 but max is 3 [ 44.229157][ T855] usb 4-1: config 3 has no interface number 0 [ 44.235288][ T855] usb 4-1: config 3 has no interface number 1 [ 44.241408][ T855] usb 4-1: config 3 has no interface number 2 [ 44.247523][ T855] usb 4-1: config 3 has no interface number 3 [ 44.253663][ T855] usb 4-1: config 3 interface 214 altsetting 1 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 44.264631][ T855] usb 4-1: config 3 interface 214 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 44.275543][ T855] usb 4-1: config 3 interface 214 altsetting 1 endpoint 0xD has invalid wMaxPacketSize 0 [ 44.285445][ T466] usb 3-1: device descriptor read/64, error -71 [ 44.291827][ T855] usb 4-1: config 3 interface 214 altsetting 1 bulk endpoint 0x6 has invalid maxpacket 600 [ 44.294831][ T10] usb 2-1: USB disconnect, device number 11 [ 44.302387][ T855] usb 4-1: config 3 interface 214 altsetting 1 endpoint 0xB has invalid maxpacket 1007, setting to 64 [ 44.318699][ T855] usb 4-1: config 3 interface 214 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 44.329612][ T855] usb 4-1: config 3 interface 214 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 44.340315][ T855] usb 4-1: config 3 interface 214 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 44.351056][ T855] usb 4-1: config 3 interface 214 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 44.361931][ T855] usb 4-1: config 3 interface 214 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 44.372615][ T855] usb 4-1: config 3 interface 214 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 44.383490][ T855] usb 4-1: config 3 interface 214 altsetting 1 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 44.394450][ T855] usb 4-1: config 3 interface 214 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 44.405204][ T855] usb 4-1: config 3 interface 219 altsetting 62 has a duplicate endpoint with address 0x5, skipping [ 44.416081][ T855] usb 4-1: config 3 interface 219 altsetting 62 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 44.427217][ T855] usb 4-1: config 3 interface 219 altsetting 62 bulk endpoint 0xE has invalid maxpacket 32 [ 44.437286][ T855] usb 4-1: config 3 interface 219 altsetting 62 has a duplicate endpoint with address 0x1, skipping [ 44.448334][ T855] usb 4-1: config 3 interface 219 altsetting 62 has a duplicate endpoint with address 0xE, skipping [ 44.459182][ T855] usb 4-1: config 3 interface 107 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 44.470096][ T855] usb 4-1: config 3 interface 214 has no altsetting 0 [ 44.476878][ T855] usb 4-1: config 3 interface 38 has no altsetting 0 [ 44.483616][ T855] usb 4-1: config 3 interface 219 has no altsetting 0 [ 44.490415][ T855] usb 4-1: config 3 interface 107 has no altsetting 0 [ 44.499742][ T855] usb 4-1: New USB device found, idVendor=1b3d, idProduct=019f, bcdDevice=86.7f [ 44.508826][ T855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.516833][ T855] usb 4-1: Product: syz [ 44.521038][ T855] usb 4-1: Manufacturer: syz [ 44.525625][ T855] usb 4-1: SerialNumber: syz [ 44.531333][ T1022] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 44.551165][ T565] usb 1-1: USB disconnect, device number 8 [ 44.561901][ T504] udevd[504]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.45/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.599907][ T466] usb 3-1: device descriptor read/64, error -71 [ 44.662911][ T1035] rust_binder: 1034:1035 transaction to 0 failed: ENOENT [ 44.699779][ T1035] rust_binder: Write failure EINVAL in pid:169 [ 44.740098][ T1022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.755174][ T1022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.763867][ T1022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.772428][ T1022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.793329][ T855] ftdi_sio 4-1:3.214: FTDI USB Serial Device converter detected [ 44.808048][ T855] ftdi_sio ttyUSB0: unknown device type: 0x867f [ 44.826853][ T855] ftdi_sio 4-1:3.38: FTDI USB Serial Device converter detected [ 44.835007][ T855] ftdi_sio ttyUSB1: unknown device type: 0x867f [ 44.842637][ T855] ftdi_sio 4-1:3.219: FTDI USB Serial Device converter detected [ 44.850388][ T466] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 44.858503][ T855] ftdi_sio ttyUSB2: unknown device type: 0x867f [ 44.866651][ T855] ftdi_sio 4-1:3.107: FTDI USB Serial Device converter detected [ 44.875310][ T855] ftdi_sio ttyUSB3: unknown device type: 0x867f [ 44.886392][ T855] usb 4-1: USB disconnect, device number 14 [ 44.901697][ T855] ftdi_sio 4-1:3.214: device disconnected [ 44.908009][ T855] ftdi_sio 4-1:3.38: device disconnected [ 44.916543][ T855] ftdi_sio 4-1:3.219: device disconnected [ 44.923411][ T855] ftdi_sio 4-1:3.107: device disconnected [ 44.999914][ T466] usb 3-1: device descriptor read/64, error -71 [ 45.059929][ T565] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 45.088251][ T293] ------------[ cut here ]------------ [ 45.093827][ T293] WARNING: CPU: 0 PID: 293 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 45.101757][ T293] Modules linked in: [ 45.105651][ T293] CPU: 0 UID: 0 PID: 293 Comm: syz-executor Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 45.117311][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 45.127390][ T293] RIP: 0010:drop_nlink+0xce/0x110 [ 45.132448][ T293] Code: 04 00 00 be 08 00 00 00 e8 6f 06 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f2 4f 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 45.152119][ T293] RSP: 0018:ffffc9000b6efc60 EFLAGS: 00010293 [ 45.158186][ T293] RAX: ffffffff81f271be RBX: ffff88811845cf50 RCX: ffff8881000bb900 [ 45.166177][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 45.174220][ T293] RBP: ffffc9000b6efc88 R08: 0000000000000003 R09: 0000000000000004 [ 45.182231][ T293] R10: dffffc0000000000 R11: fffff520016ddf7c R12: dffffc0000000000 [ 45.190228][ T293] R13: 1ffff1102308b9f3 R14: ffff88811845cf98 R15: 0000000000000000 [ 45.198198][ T293] FS: 0000555559eef500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 45.207198][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.213819][ T293] CR2: 0000200000003900 CR3: 0000000112862000 CR4: 00000000003526b0 [ 45.221830][ T293] Call Trace: [ 45.225109][ T293] [ 45.228032][ T293] shmem_rmdir+0x5f/0x90 [ 45.229913][ T855] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 45.232311][ T293] vfs_rmdir+0x3e3/0x560 [ 45.240175][ T466] usb 3-1: device descriptor read/64, error -71 [ 45.244077][ T293] incfs_kill_sb+0x109/0x230 [ 45.244104][ T293] deactivate_locked_super+0xd5/0x2a0 [ 45.260283][ T293] deactivate_super+0xb8/0xe0 [ 45.264955][ T293] cleanup_mnt+0x406/0x4a0 [ 45.269375][ T293] __cleanup_mnt+0x1d/0x40 [ 45.273828][ T293] task_work_run+0x1e5/0x260 [ 45.278421][ T293] ? __cfi_task_work_run+0x10/0x10 [ 45.283550][ T293] ? __x64_sys_umount+0x12e/0x180 [ 45.288582][ T293] ? __cfi___x64_sys_umount+0x10/0x10 [ 45.293980][ T293] ? __kasan_check_read+0x15/0x20 [ 45.299003][ T293] resume_user_mode_work+0x35/0x50 [ 45.304179][ T293] syscall_exit_to_user_mode+0x63/0xb0 [ 45.309641][ T293] do_syscall_64+0x63/0xf0 [ 45.314070][ T293] ? clear_bhb_loop+0x50/0xa0 [ 45.318752][ T293] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.324677][ T293] RIP: 0033:0x7f2cc579e097 [ 45.329088][ T293] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 45.348899][ T293] RSP: 002b:00007ffc1c0cf548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 45.357378][ T293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f2cc579e097 [ 45.365387][ T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc1c0cf600 [ 45.370130][ T466] usb usb3-port1: attempt power cycle [ 45.373391][ T293] RBP: 00007ffc1c0cf600 R08: 00007ffc1c0d0600 R09: 00000000ffffffff [ 45.386741][ T293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc1c0d0690 [ 45.394741][ T293] R13: 00007f2cc58322ca R14: 000000000000afa9 R15: 00007ffc1c0d06d0 [ 45.402738][ T293] [ 45.405742][ T293] ---[ end trace 0000000000000000 ]--- [ 45.411300][ T293] ================================================================== [ 45.419370][ T293] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 45.425599][ T293] Write of size 4 at addr 0000000000000168 by task syz-executor/293 [ 45.433553][ T293] [ 45.435857][ T293] CPU: 1 UID: 0 PID: 293 Comm: syz-executor Tainted: G W syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 45.435875][ T293] Tainted: [W]=WARN [ 45.435878][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 45.435886][ T293] Call Trace: [ 45.435890][ T293] [ 45.435896][ T293] __dump_stack+0x21/0x30 [ 45.435914][ T293] dump_stack_lvl+0x140/0x1c0 [ 45.435929][ T293] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.435943][ T293] print_report+0x3d/0x70 [ 45.435957][ T293] kasan_report+0x162/0x1a0 [ 45.435970][ T293] ? ihold+0x24/0x70 [ 45.435982][ T293] ? _raw_spin_unlock+0x45/0x60 [ 45.435996][ T293] ? ihold+0x24/0x70 [ 45.436007][ T293] kasan_check_range+0x25a/0x2b0 [ 45.436020][ T293] __kasan_check_write+0x18/0x20 [ 45.436030][ T293] ihold+0x24/0x70 [ 45.436041][ T293] vfs_rmdir+0x26a/0x560 [ 45.436054][ T293] incfs_kill_sb+0x109/0x230 [ 45.436066][ T293] deactivate_locked_super+0xd5/0x2a0 [ 45.436081][ T293] deactivate_super+0xb8/0xe0 [ 45.436094][ T293] cleanup_mnt+0x406/0x4a0 [ 45.436107][ T293] __cleanup_mnt+0x1d/0x40 [ 45.436119][ T293] task_work_run+0x1e5/0x260 [ 45.436133][ T293] ? __cfi_task_work_run+0x10/0x10 [ 45.436145][ T293] ? __x64_sys_umount+0x12e/0x180 [ 45.436155][ T293] ? __cfi___x64_sys_umount+0x10/0x10 [ 45.436164][ T293] ? __kasan_check_read+0x15/0x20 [ 45.436174][ T293] resume_user_mode_work+0x35/0x50 [ 45.436185][ T293] syscall_exit_to_user_mode+0x63/0xb0 [ 45.436198][ T293] do_syscall_64+0x63/0xf0 [ 45.436211][ T293] ? clear_bhb_loop+0x50/0xa0 [ 45.436222][ T293] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.436238][ T293] RIP: 0033:0x7f2cc579e097 [ 45.436248][ T293] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 45.436258][ T293] RSP: 002b:00007ffc1c0cf548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 45.436270][ T293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f2cc579e097 [ 45.436278][ T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc1c0cf600 [ 45.436284][ T293] RBP: 00007ffc1c0cf600 R08: 00007ffc1c0d0600 R09: 00000000ffffffff [ 45.436291][ T293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc1c0d0690 [ 45.436298][ T293] R13: 00007f2cc58322ca R14: 000000000000afa9 R15: 00007ffc1c0d06d0 [ 45.436307][ T293] [ 45.436311][ T293] ================================================================== [ 45.490984][ T565] usb 2-1: config 0 interface 0 has no altsetting 0 [ 45.492615][ T855] usb 4-1: unable to get BOS descriptor or descriptor too short [ 45.496091][ T565] usb 2-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 45.501190][ T293] Disabling lock debugging due to kernel taint [ 45.506878][ T565] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.510009][ T293] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 45.517086][ T565] usb 2-1: config 0 descriptor?? [ 45.518390][ T293] #PF: supervisor write access in kernel mode [ 45.735487][ T293] #PF: error_code(0x0002) - not-present page [ 45.741467][ T293] PGD 800000010f33d067 P4D 800000010f33d067 PUD 0 [ 45.747981][ T293] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 45.754133][ T293] CPU: 1 UID: 0 PID: 293 Comm: syz-executor Tainted: G B W syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 45.767235][ T293] Tainted: [B]=BAD_PAGE, [W]=WARN [ 45.772234][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 45.782278][ T293] RIP: 0010:ihold+0x2a/0x70 [ 45.786796][ T293] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd 46 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c fd ed ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 45.806387][ T293] RSP: 0018:ffffc9000b6efca0 EFLAGS: 00010246 [ 45.812455][ T293] RAX: ffff8881000bb900 RBX: 0000000000000000 RCX: ffff8881000bb900 [ 45.820438][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 45.828404][ T293] RBP: ffffc9000b6efcb0 R08: ffffffff88bbe947 R09: 1ffffffff1177d28 [ 45.836363][ T293] R10: dffffc0000000000 R11: fffffbfff1177d29 R12: ffff88811845cf5c [ 45.844333][ T293] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 45.852286][ T293] FS: 0000555559eef500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 45.861216][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.867793][ T293] CR2: 0000000000000168 CR3: 0000000112862000 CR4: 00000000003526b0 [ 45.875764][ T293] Call Trace: [ 45.879039][ T293] [ 45.881965][ T293] vfs_rmdir+0x26a/0x560 [ 45.886204][ T293] incfs_kill_sb+0x109/0x230 [ 45.890787][ T293] deactivate_locked_super+0xd5/0x2a0 [ 45.896151][ T293] deactivate_super+0xb8/0xe0 [ 45.900827][ T293] cleanup_mnt+0x406/0x4a0 [ 45.905236][ T293] __cleanup_mnt+0x1d/0x40 [ 45.909637][ T293] task_work_run+0x1e5/0x260 [ 45.914222][ T293] ? __cfi_task_work_run+0x10/0x10 [ 45.919321][ T293] ? __x64_sys_umount+0x12e/0x180 [ 45.924352][ T293] ? __cfi___x64_sys_umount+0x10/0x10 [ 45.929715][ T293] ? __kasan_check_read+0x15/0x20 [ 45.934725][ T293] resume_user_mode_work+0x35/0x50 [ 45.939832][ T293] syscall_exit_to_user_mode+0x63/0xb0 [ 45.945274][ T293] do_syscall_64+0x63/0xf0 [ 45.949687][ T293] ? clear_bhb_loop+0x50/0xa0 [ 45.954348][ T293] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.960231][ T293] RIP: 0033:0x7f2cc579e097 [ 45.964629][ T293] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 45.983462][ T565] apple 0003:05AC:027D.0008: unknown main item tag 0x0 [ 45.984226][ T293] RSP: 002b:00007ffc1c0cf548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 45.991137][ T565] apple 0003:05AC:027D.0008: unknown main item tag 0x0 [ 45.999464][ T293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f2cc579e097 [ 46.006626][ T565] apple 0003:05AC:027D.0008: unknown main item tag 0x0 [ 46.014252][ T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc1c0cf600 [ 46.014270][ T293] RBP: 00007ffc1c0cf600 R08: 00007ffc1c0d0600 R09: 00000000ffffffff [ 46.014281][ T293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc1c0d0690 [ 46.014292][ T293] R13: 00007f2cc58322ca R14: 000000000000afa9 R15: 00007ffc1c0d06d0 [ 46.014308][ T293] [ 46.014314][ T293] Modules linked in: [ 46.023017][ T565] apple 0003:05AC:027D.0008: unknown main item tag 0x0 [ 46.029113][ T293] [ 46.029148][ T293] CR2: 0000000000000168 [ 46.037417][ T565] apple 0003:05AC:027D.0008: unknown main item tag 0x0 [ 46.045036][ T293] ---[ end trace 0000000000000000 ]--- [ 46.045047][ T293] RIP: 0010:ihold+0x2a/0x70 [ 46.045074][ T293] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd 46 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c fd ed ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 46.053473][ T565] apple 0003:05AC:027D.0008: unknown main item tag 0x0 [ 46.056050][ T293] RSP: 0018:ffffc9000b6efca0 EFLAGS: 00010246 [ 46.060100][ T565] apple 0003:05AC:027D.0008: unknown main item tag 0x0 [ 46.066748][ T293] [ 46.066756][ T293] RAX: ffff8881000bb900 RBX: 0000000000000000 RCX: ffff8881000bb900 [ 46.069075][ T565] apple 0003:05AC:027D.0008: unknown main item tag 0x0 [ 46.073187][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 46.073200][ T293] RBP: ffffc9000b6efcb0 R08: ffffffff88bbe947 R09: 1ffffffff1177d28 [ 46.073212][ T293] R10: dffffc0000000000 R11: fffffbfff1177d29 R12: ffff88811845cf5c [ 46.073223][ T293] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 46.073233][ T293] FS: 0000555559eef500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 46.073248][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.073259][ T293] CR2: 0000000000000168 CR3: 0000000112862000 CR4: 00000000003526b0 [ 46.084787][ T565] apple 0003:05AC:027D.0008: hidraw0: USB HID v0.04 Device [HID 05ac:027d] on usb-dummy_hcd.1-1/input0 [ 46.085541][ T293] Kernel panic - not syncing: Fatal exception [ 46.090254][ T293] Kernel Offset: disabled