last executing test programs: 2.227576009s ago: executing program 2 (id=312): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) getgroups(0x2, &(0x7f0000005e00)=[0x0, 0x0]) setregid(r1, r1) write$binfmt_register(r0, &(0x7f0000000240)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x2, 0x3a, '/dev/kvm\x00', 0x3a, '\x00', 0x3a, './file0', 0x3a, [0x50, 0x46]}, 0x33) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) write(r2, &(0x7f0000000280)="4a4675343574689396dcee8cb5993d06bf62eb20548e2376b686d154b7b3c44a6a7685744d96765605df6aed7dafb34457c3599713c17f1cbac67f8e0746194175af849cf2d9aff30d9dd10a9c48ed6742cbbfad5c1a4557f6ff9521282e0e78", 0x60) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8000) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000050}, 0x8085) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x80001) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f00000019c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r11 = dup3(r4, r8, 0x0) ioctl$MON_IOCX_MFETCH(r11, 0xc0109207, &(0x7f0000000280)={0x0, 0x0, 0x2}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r11) ioctl$BTRFS_IOC_ENCODED_WRITE(r9, 0x40809440, &(0x7f0000000500)={&(0x7f00000004c0)=[{&(0x7f0000000300)="e562c18d56e953b2c3b1504eeb14794768ff3c069b9b6d5425523d33a5b0db2c6c9d31149e955ee4bd56d76868cc2ac0ce8ef207a1b40d3221f5d264c74afd262ecbec0f46f1adbe76cd5f4d7b26cdfb1366b8437c1b3f56d54e756b0cf847c6c45845000da6a2d4ade7dfad27f619c83a3e359f2f740c123cc6c12057c60aef630d719a827e587aac1761774ecbae263365ace373a81e1abb57b0fe92696b16883e5b4f28e751e22b1b0b9834ce785df76400db91b9d3e5d94ebe221c939c8ee82c9511b3749d3a8a5d4092c77d87c0ac61b0dbea029870f14043d8dbe8e471", 0xe0}, {&(0x7f0000000400)="194bf1be74c8a7ffa27255d504907a06a14915956da48c8885c180ea15472696fc0df73720e1186e58c8f1106fc77d90f579f85c0c6293be8d6f932fd80742f9f8aa462e354ccd53486312ce4427f265468d67c0b765b0b18f52b0adaab6562f29f63eb4a254be97954b2a27e04e84f97bb1b5b77ecc7829c3c02ec46359699e861266a88692fc1e8aa298b2f197a940a3aecab79713bee75b3e8e14d0287f927766bba113f5481f577e0dc3ecab940b7079c9eb2fa2db12b4c20ea49b", 0xbd}], 0x2, 0x9, 0x0, 0x8, 0xb33, 0x9, 0x8, 0x101}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r11, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYRES64=r9, @ANYRESHEX=r10, @ANYBLOB="0a082dbd7000ffdbdf25770000000800ef0001235e49c14019a4f9413de46c3399f17200000800ef00020000000500ee000800000008"], 0x3c}, 0x1, 0x0, 0x0, 0x40088d4}, 0x800) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000001c0)={'tunl0\x00'}) 2.217468199s ago: executing program 2 (id=314): write$tcp_mem(0xffffffffffffffff, &(0x7f0000000240)={0xffffffffffffffff, 0x20, 0x0, 0x20, 0x2}, 0x48) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x0, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0xa, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x3, 0x4, 0x16, 0x8, 0x40, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b397, 0x400080, 0x493d19c3, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0xffffffff, 0x1cb, 0x9, 0x80000000, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x40002, 0xffff0000, 0x41, 0x6, 0x5, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0x8, 0x97f7, 0x23, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x20077, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10001, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x7ff, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4000051}, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x203f00, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="110000001900010026bd7000000000001d"], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x804) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x4, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f00000002c0)={r6, &(0x7f00000000c0)='@:\xea^-@.%(\x00', 0x10200, &(0x7f0000000100)={@_ha_fsid={[0x7fffffff, 0x6]}, {0x3, 0x294c, 0xede8, 0x7}}, 0x101, &(0x7f0000000140), &(0x7f00000001c0)}) ioctl$KVM_SET_XCRS(r8, 0x4188aea7, &(0x7f0000000380)={0x1, 0x3, [{0x5c, 0x0, 0x7}, {0x0, 0x0, 0x3ff}, {0x1, 0x0, 0x6}, {0x6, 0x0, 0x8000000000000001}, {0x599, 0x0, 0x6}, {0x0, 0x0, 0x3}, {0x8, 0x0, 0xfffffffffffffff6}, {0x1, 0x0, 0x2}, {0x2, 0x0, 0x9d}, {0x7f, 0x0, 0xfffffffffffffff0}, {0xfffffff7, 0x0, 0xa}, {0x7fffffff, 0x0, 0x81}, {0x6}, {0x7f, 0x0, 0x6}, {0x5, 0x0, 0x6}, {0x7, 0x0, 0x5b011e91}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.064254863s ago: executing program 2 (id=316): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x39d4, 0x0, 0x1, 0x255, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4000, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80000, 0x3, 0x946}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x2, 0x28f, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa90c, 0x8200, 0x1, 0x366}}], 0x1, &(0x7f0000000340)={0x2e, 0x7, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0xfffa, 0x4, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) (async) socket(0x80000000000000a, 0x2, 0x0) (async) sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r6) (async) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x39d4, 0x0, 0x1, 0x255, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4000, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80000, 0x3, 0x946}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x2, 0x28f, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa90c, 0x8200, 0x1, 0x366}}], 0x1, &(0x7f0000000340)={0x2e, 0x7, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0xfffa, 0x4, 0x0, 0x0}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0) (async) 2.042895453s ago: executing program 2 (id=318): r0 = socket(0x10, 0x803, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x35) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000015c000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x29, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000006680)=@svm={0x1, 0x1, 0x0, {0xeeee0000}, {"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"}}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x2f, 0x1, 0x0, 0x0) sendto(r0, &(0x7f00000006c0)="120000001200e7ef00341618a585107b462e", 0x12, 0x10, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)=""/4078, 0xfe4}, {&(0x7f0000000300)=""/202, 0xca}, {&(0x7f0000000500)=""/85, 0x55}, {&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000002d00)=""/4106, 0x100a}, {&(0x7f0000000400)=""/238, 0xee}, {&(0x7f0000000580)=""/257, 0x101}, {&(0x7f00000000c0)=""/67, 0x43}, {&(0x7f00000008c0)=""/238, 0xee}, {&(0x7f0000000140)=""/108, 0x6c}], 0xa}, 0x2}, {{0x0, 0xffffff7c, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1f75}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x99c5}, {{0x0, 0x0, 0x0}, 0x2090d2}, {{0x0, 0x0, 0x0}, 0x3ff}, {{0x0, 0x0, 0x0}, 0x8000007a}], 0x8, 0x2100, 0x0) 2.029257504s ago: executing program 2 (id=319): write$tcp_mem(0xffffffffffffffff, &(0x7f0000000240)={0xffffffffffffffff, 0x20, 0x0, 0x20, 0x2}, 0x48) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x0, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0xa, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x3, 0x4, 0x16, 0x8, 0x40, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b397, 0x400080, 0x493d19c3, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0xffffffff, 0x1cb, 0x9, 0x80000000, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x40002, 0xffff0000, 0x41, 0x6, 0x5, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0x8, 0x97f7, 0x23, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x20077, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10001, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x7ff, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2bf3, &(0x7f0000000040)={0x0, 0x1323, 0x4000, 0x3, 0x3cb}, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000001ec0)={0x0, 0x8, &(0x7f0000000ec0)="2f272ad8cb6dfa97"}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 1.964412705s ago: executing program 1 (id=320): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setitimer(0x2, &(0x7f0000000b40)={{}, {0x0, 0x2710}}, &(0x7f0000000b80)) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) chmod(&(0x7f00000000c0)='./file0\x00', 0xe0) umount2(&(0x7f0000000200)='./file0\x00', 0xb) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, 0xac0}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x44, 0x8, 0x7f, '\x00', 0x8}) 1.942083285s ago: executing program 2 (id=321): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x32) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_cmd={0x47, 0x2, 0x20000004, 0x3ff, 0x3f, 0x7, 0x1, 0x3, 0x6, 0x3, 0x101, 0x142f, 0x8, 0x3, 0x0, 0xa, [0x4000000, 0xff]}}) 1.927152716s ago: executing program 1 (id=322): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_add_dev(r1, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x70, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) pipe(&(0x7f0000000440)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x1c4, 0x0, 0x0) syz_ublk_setup_queues(r2, r7, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x2000, 0x1, 0x200000b, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0xfffffffe, 0x40021a, 0x0, r2}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r6, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 1.74992962s ago: executing program 1 (id=323): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={0x0, 0x60}, 0x1, 0x7}, 0x0) 1.73790178s ago: executing program 1 (id=324): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x0, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x4, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0xa, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x3, 0x4, 0x16, 0x8, 0x40, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x7, 0x9, 0x4, 0x8000c63, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b397, 0x400080, 0x493d19c3, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0xffffffff, 0x1cb, 0x9, 0x80000000, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x40002, 0xffff0000, 0x41, 0x6, 0x5, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0x8, 0x97f7, 0x23, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x20077, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10001, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x7ff, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000580), 0x40000, 0x0) ppoll(&(0x7f00000005c0)=[{0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x241}, {0xffffffffffffffff, 0x21d6}, {0xffffffffffffffff, 0x2001}, {0xffffffffffffffff, 0x1000}, {r0, 0x80}], 0x6, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x9]}, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="4e000000040801"], 0x48}, 0x1, 0x0, 0x0, 0x4000051}, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$NILFS_IOCTL_SYNC(0xffffffffffffffff, 0x80086e8a, &(0x7f0000000100)) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl2\x00', r7, 0x2f, 0x5, 0x0, 0x0, 0x5a, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x80, 0x3, 0x600}}) close(0xffffffffffffffff) socket$vsock_stream(0x28, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r8, 0x29, 0x17, 0x0, &(0x7f0000000040)) accept(r8, &(0x7f0000000440)=@hci, &(0x7f00000004c0)=0x80) setsockopt$sock_int(r6, 0x1, 0x3c, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 1.107614605s ago: executing program 3 (id=327): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) r3 = getpid() msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5) syz_open_procfs(r3, &(0x7f0000000040)='net/vlan/config\x00') r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000000100)="17000000020001000003be8c5ee15688a8006c000203000aff3f000098fc5ad90a00bb6a880000d6c8db0000dba67e06020000e28900000200df018002000000fc0607bdff59100ac45761547a6c1f004a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115003901000000000000ea0000000027658fc4b59bd2b8e56858977f6701e974d805859b590ce5af649a701102ffff02dfccebf6ba00087b47949a1dd1e040024f0298432d6628dcd87f4e312a", 0xb8) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x4}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) 1.024645547s ago: executing program 3 (id=328): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='15', 0x2}, {&(0x7f0000000400)='u;', 0x2}], 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f00000031c0)=[{&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f00000002c0)=""/55, 0x37}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, 0x6, 0x7) r3 = syz_clone(0x0, 0x0, 0x39, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/raw\x00') fchdir(r4) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000001c0)={0x1, 0x1, [@empty]}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000080)) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x100000}) r7 = syz_open_procfs(r3, &(0x7f0000000400)='stat\x00') r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xffffffffffffff94, &(0x7f00000008c0)={&(0x7f0000000740)=ANY=[@ANYRES16=r9], 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x810) r10 = socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0xa, 0x36, 0x7fffffff, 0x59, @local, @loopback, 0x20, 0x141b6f8934eddc6, 0x3c7, 0x4}}) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) sendmsg(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x2}], 0x1, 0x0, 0x0, 0x2c}, 0x4040094) setns(r9, 0x24020000) pread64(r7, &(0x7f0000000140)=""/15, 0xf, 0x4) 1.024482367s ago: executing program 3 (id=329): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/229, 0xe5}, {0x0}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}, {&(0x7f0000000140)=""/88, 0x58}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) 1.006428787s ago: executing program 3 (id=330): write$tcp_mem(0xffffffffffffffff, &(0x7f0000000240)={0xffffffffffffffff, 0x20, 0x0, 0x20, 0x2}, 0x48) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x0, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0xa, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x3, 0x4, 0x16, 0x8, 0x40, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b397, 0x400080, 0x493d19c3, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0xffffffff, 0x1cb, 0x9, 0x80000000, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x40002, 0xffff0000, 0x41, 0x6, 0x5, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0x8, 0x97f7, 0x23, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x20077, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10001, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x7ff, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2bf3, &(0x7f0000000040)={0x0, 0x1323, 0x4000, 0x3, 0x3cb}, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000001ec0)={0x0, 0x8, &(0x7f0000000ec0)="2f272ad8cb6dfa97"}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 965.583658ms ago: executing program 3 (id=331): write$tcp_mem(0xffffffffffffffff, &(0x7f0000000240)={0xffffffffffffffff, 0x20, 0x0, 0x20, 0x2}, 0x48) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x0, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0xa, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x3, 0x4, 0x16, 0x8, 0x40, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b397, 0x400080, 0x493d19c3, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0x4, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0xffffffff, 0x1cb, 0x9, 0x80000000, 0x6, 0x438, 0x2002, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x40002, 0xffff0000, 0x41, 0x6, 0x5, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0x8, 0x97f7, 0x23, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x20077, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10001, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x7ff, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x3, 0x5000, 0x1000, &(0x7f0000013000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 720.391884ms ago: executing program 1 (id=333): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000040)=0x3) 720.247884ms ago: executing program 1 (id=334): socket$xdp(0x2c, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) epoll_create1(0x80000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB], 0x0) 376.500012ms ago: executing program 0 (id=337): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0xb6bc}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000400)={0x2020}, 0x1f8c) writev(r0, &(0x7f0000002900)=[{&(0x7f0000000100)="deb452db20ca709b915c53a657300179e7c6801fce4909b807f6f1636d670f8ee6063a270e1e6d1855e3ce2a27504b3fc404bc3ad298853f61e17e963466e8cf58bc4aec297e", 0x46}, {&(0x7f0000000180)="2d8ab17d0becba017f4aca5dfaea8bea173ce2a5f83fd966d298d3a5b45ebb984bcd1492b0", 0x25}, {&(0x7f00000002c0)="d951a7dc663d58302d29930b1440a0ddcdbf67c1b7cad64ef07047df97936b725135726a075d14beb7aa50acea6789a7cc7814834b3379c7bbd41bb66f0fd0e4a1c6bd4f979ae3f081ec93ba2334f82ece308b44ed36aa9e9a89460f0849b0b8fdbb0d79e557de7674fd379c450aa28cdf4236bf6deb88b6c5ee66694e6f3009b7bc57a97bc17a8e811d44dd7365e46962a8829f62c2acdc50a6b5d91dd57fb9051b5d594aecb653278c86b2e1ad1a3d5de688c23381e28027aba6805abcf74c96c37cf7bb63614d10d8925dbb953ec5f46d6065c045c189061d01cd31b1da2a513fd9d43ee6ed72", 0xe8}, {&(0x7f00000003c0)}, {&(0x7f0000002440)="5c805caef6e4038faf4254ccf919c0365550e8117684e754e15af10c6a143da773b06ad2ce206e0d309d18bf6ca6dd42e2b7cb7f3bf6a5f2c9bad9e9f8771b3e9466df5d48a06e0e217be3ae74d5bea4838ec215ebf1956733a1b41b68cf314044c1d47ab677ee60bcae21db8fc3b588e25334f5a9a3707aed3bfa1f661c36fa2be9b25daf7bfb4adb5f6ed147650561c08890040272ba978a4bc92b53326ce8960af71377d51e5b68254803883028f1cfce63d6181caeb27a498c48ab441672c16856645c399eae8da311f1568bd5b3b1b38781fe29b899bc28c10cc344", 0xde}, {&(0x7f0000002540)="c0e95629313c51092a1c9a7df7f84741a08135bb46b98f17a57ba30ecd3777908f7c2c60a345d97849c5b3b9fb3100c522017c7d3fedbb97a533b73a61284e", 0x3f}, {&(0x7f0000002580)="102094f200a9c5281c34bb607d6b776da5a566a5ad6e121baef3d38ead9b9f01b8a8b9363f17f7448b670463d54013b1a9bb428af9f838b8c5546d15970a552696ba9f5051007e6fc9ae19950c291d137c561db44791ead7b4e6a3045566b0139bb6616e46c8ddab42fefdb0a26d7d1f25c7b7d80f09920abf7e32cc8f088c01a4884da5335e4620e4e2", 0x8a}, {&(0x7f0000002640)="cd38d1b4620f70014bea12dbbeac64211f9effee1a0553595114d2d258b48dc62bbe2363de41917c2402a1498d9b96783f91f6be406b14404f81162875", 0x3d}, {&(0x7f0000002700)="6177f15dddb0a34804d41d08656b674b307d2ba2b73095aada86aa8ffb2c9fd64c659ba94b3e2209893eb0c0d03cbf51da38941e209ab31e0708dbf7534dba9eba79f0509f425fe5", 0x48}, {&(0x7f0000002780)}, {&(0x7f00000027c0)="752f1d7c248469d7ecdfdb8ce6a023b2245a10baefe2bf569dc2a78dbed23a3b4c05b2df14a46be7f3679d1aa1f432abf18bdadeebc008", 0x37}, {&(0x7f0000002800)="e19cc42ae5e4aaa9445bc4e6e60d312f4e925c533700a2c7a4b9193c44084cdb67c536c5fa8bec417e943cd64f1dcba2ec961db5d8d4126189b4140485ffa2b2872b516f2db06dc5a19f743447745393a8928a8040954c3339ef8faeb9afdd1bd3ded98c6cdc93d3e8ae93fd5600cf96f830fa029e8c19ad6a5ae2fa4be00b0af3161eff5add288fd191a0e22dab1479602083d083aff8b0f675939d631f87fa071424591d9f3e912cd83b4e5affc5a307b2f7497cf9fdcb141fde9f5de0830a4838442d017e69541bb27237923fc495a013c4f5c40cb3193deab39c14f854183f7ed1c0186d77d7130cecefa7e15719", 0xf0}], 0xc) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, r3, 0x1, 0x0, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x24004801}, 0x0) 376.381972ms ago: executing program 0 (id=338): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/229, 0xe5}, {0x0}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}, {&(0x7f0000000140)=""/88, 0x58}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) 358.959952ms ago: executing program 0 (id=339): write$tcp_mem(0xffffffffffffffff, &(0x7f0000000240)={0xffffffffffffffff, 0x20, 0x0, 0x20, 0x2}, 0x48) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x0, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0xa, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x3, 0x4, 0x16, 0x8, 0x40, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b397, 0x400080, 0x493d19c3, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0xffffffff, 0x1cb, 0x9, 0x80000000, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x40002, 0xffff0000, 0x41, 0x6, 0x5, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0x8, 0x97f7, 0x23, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x20077, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10001, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x7ff, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2bf3, &(0x7f0000000040)={0x0, 0x1323, 0x4000, 0x3, 0x3cb}, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000001ec0)={0x0, 0x8, &(0x7f0000000ec0)="2f272ad8cb6dfa97"}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 315.933303ms ago: executing program 0 (id=340): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x2, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmmsg$unix(r3, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}], 0x20}}], 0x2, 0x4000010) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455cb, 0x1f) getsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f0000000480)=""/66, &(0x7f0000000500)=0x42) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r7 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r7, 0x4, 0x44000) setsockopt$inet_mreqn(r7, 0x0, 0x4, &(0x7f0000000100)={@broadcast, @empty}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r9, 0x100, 0x70bd2d, 0x25dfdbfb}, 0xffffffffffffffad}, 0x1, 0x0, 0x0, 0x4c091}, 0x4004014) 228.325235ms ago: executing program 0 (id=341): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x14001, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000000)=0x10, 0x4) fsync(0xffffffffffffffff) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x4e20, @rand_addr=0x64010101}, {0x306, @random="abef5e14534e"}, 0x34, {0x2, 0x4e24, @rand_addr=0x64010102}, 'team_slave_0\x00'}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000380), &(0x7f00000003c0)=0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f0000000040)={0xd4, "15ac49948ca441f6811b4b38727c655c92851348357be69c9979da0acde054166027a50c306a599f1d1019db9067da4d1ad99e34295c8a231d717217648e5234ae26a89beeb3317edabdc31c7e00a34b0c2af93dfa56024ae6b4ae6649ba2782d9a1357e046e144b126c23cdc3eef0fed91a03ad3bc3a4f0d06f970a87bfaa302375f2c07be81896157274d1fda3d1512108b287cfb5b61df26e56ef58d86ac802dd1602a784ba96ff74e206d0fb10e469c0d62ce3c763158cda0eb1a3968a3efad77095f6cbceafc36f90433dc7ecca33d92594"}) ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f0000000200)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 163.692976ms ago: executing program 0 (id=342): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000a80)={@host}) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) epoll_create1(0x80000) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYBLOB='\a'], 0x0) 0s ago: executing program 3 (id=343): mkdir(&(0x7f0000000300)='./bus\x00', 0xde) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}, {@uuid_off}, {@xino_on}]}) fchmodat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x107) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) getsockname$unix(r0, &(0x7f0000000180), &(0x7f00000002c0)=0x6e) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.30' (ED25519) to the list of known hosts. [ 21.268708][ T36] audit: type=1400 audit(1784315512.900:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.269863][ T286] cgroup: Unknown subsys name 'net' [ 21.291376][ T36] audit: type=1400 audit(1784315512.900:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.318623][ T36] audit: type=1400 audit(1784315512.930:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.318788][ T286] cgroup: Unknown subsys name 'devices' [ 21.439498][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.445088][ T286] cgroup: Unknown subsys name 'rlimit' [ 21.536898][ T36] audit: type=1400 audit(1784315513.160:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.560074][ T36] audit: type=1400 audit(1784315513.160:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.582314][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.584772][ T36] audit: type=1400 audit(1784315513.160:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.616401][ T36] audit: type=1400 audit(1784315513.230:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.637409][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.641766][ T36] audit: type=1400 audit(1784315513.230:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.676014][ T36] audit: type=1400 audit(1784315513.260:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.701530][ T36] audit: type=1400 audit(1784315513.260:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.469931][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.476982][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.484094][ T294] bridge_slave_0: entered allmulticast mode [ 22.490346][ T294] bridge_slave_0: entered promiscuous mode [ 22.499479][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.506543][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.513645][ T295] bridge_slave_0: entered allmulticast mode [ 22.519794][ T295] bridge_slave_0: entered promiscuous mode [ 22.525923][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.533065][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.540136][ T294] bridge_slave_1: entered allmulticast mode [ 22.546271][ T294] bridge_slave_1: entered promiscuous mode [ 22.559621][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.566663][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.573869][ T295] bridge_slave_1: entered allmulticast mode [ 22.580090][ T295] bridge_slave_1: entered promiscuous mode [ 22.614296][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.621379][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.628491][ T296] bridge_slave_0: entered allmulticast mode [ 22.634622][ T296] bridge_slave_0: entered promiscuous mode [ 22.643764][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.650834][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.657964][ T296] bridge_slave_1: entered allmulticast mode [ 22.664100][ T296] bridge_slave_1: entered promiscuous mode [ 22.697854][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.704900][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.712032][ T293] bridge_slave_0: entered allmulticast mode [ 22.718379][ T293] bridge_slave_0: entered promiscuous mode [ 22.740135][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.747188][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.754282][ T293] bridge_slave_1: entered allmulticast mode [ 22.760454][ T293] bridge_slave_1: entered promiscuous mode [ 22.840113][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.847173][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.854527][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.861575][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.900718][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.907785][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.915049][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.922084][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.943541][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.950608][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.957883][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.964929][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.975079][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.982331][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.989954][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.997109][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.004780][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.012071][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.026288][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.033352][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.041321][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.048361][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.093455][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.100541][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.109162][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.116225][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.131074][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.138142][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.145582][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.152664][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.184437][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.191537][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.214406][ T295] veth0_vlan: entered promiscuous mode [ 23.222639][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.229722][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.243769][ T296] veth0_vlan: entered promiscuous mode [ 23.265081][ T295] veth1_macvtap: entered promiscuous mode [ 23.275232][ T294] veth0_vlan: entered promiscuous mode [ 23.291725][ T296] veth1_macvtap: entered promiscuous mode [ 23.313670][ T293] veth0_vlan: entered promiscuous mode [ 23.324546][ T294] veth1_macvtap: entered promiscuous mode [ 23.344591][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.383300][ T293] veth1_macvtap: entered promiscuous mode [ 23.458102][ T323] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.782407][ T334] Zero length message leads to an empty skb [ 24.192028][ T351] ======================================================= [ 24.192028][ T351] WARNING: The mand mount option has been deprecated and [ 24.192028][ T351] and is ignored by this kernel. Remove the mand [ 24.192028][ T351] option from the mount to silence this warning. [ 24.192028][ T351] ======================================================= [ 24.247407][ T351] SELinux: security_context_str_to_sid (syt|v\{‹) failed with errno=-22 [ 24.540124][ T366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14'. [ 24.595781][ T368] netlink: 'syz.1.15': attribute type 4 has an invalid length. [ 24.611438][ T368] netlink: 'syz.1.15': attribute type 4 has an invalid length. [ 24.687617][ T64] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.847611][ T64] usb 4-1: Using ep0 maxpacket: 32 [ 24.853773][ T64] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 24.877606][ T64] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 24.887893][ T64] usb 4-1: config 0 has no interface number 0 [ 24.893963][ T64] usb 4-1: config 0 interface 2 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 6 [ 24.903919][ T64] usb 4-1: config 0 interface 2 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 24.927648][ T64] usb 4-1: config 0 interface 2 has no altsetting 0 [ 24.937790][ T64] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 24.946866][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.960861][ T64] usb 4-1: Product: syz [ 24.971899][ T64] usb 4-1: Manufacturer: syz [ 24.976714][ T64] usb 4-1: SerialNumber: syz [ 25.000945][ T64] usb 4-1: config 0 descriptor?? [ 25.007719][ T360] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 25.015571][ T376] netlink: 'syz.0.17': attribute type 4 has an invalid length. [ 25.057823][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.189482][ T383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'. [ 25.228638][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 25.266040][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.277839][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 25.325471][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 25.334671][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.357678][ T10] usb 2-1: Product: syz [ 25.361872][ T10] usb 2-1: Manufacturer: syz [ 25.366471][ T10] usb 2-1: SerialNumber: syz [ 25.708740][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.887622][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 25.898058][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.927191][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 25.949017][ T45] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 25.967577][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.975590][ T45] usb 1-1: Product: syz [ 25.988754][ T45] usb 1-1: Manufacturer: syz [ 25.993426][ T45] usb 1-1: SerialNumber: syz [ 26.347591][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.508980][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 26.535483][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 26.548251][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 26.557313][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.587598][ T9] usb 3-1: Product: syz [ 26.591803][ T9] usb 3-1: Manufacturer: syz [ 26.596386][ T9] usb 3-1: SerialNumber: syz [ 26.830129][ T36] kauditd_printk_skb: 78 callbacks suppressed [ 26.830146][ T36] audit: type=1400 audit(1784315518.460:152): avc: denied { write } for pid=411 comm="syz.0.27" name="001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 26.948498][ T36] audit: type=1400 audit(1784315518.580:153): avc: denied { setopt } for pid=413 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.011685][ T36] audit: type=1400 audit(1784315518.640:154): avc: denied { map } for pid=403 comm="syz.2.24" path="/dev/input/event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.035635][ T36] audit: type=1400 audit(1784315518.640:155): avc: denied { read } for pid=403 comm="syz.2.24" path="/dev/input/event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.438397][ T64] usb 4-1: invalid MIDI in EP 0 [ 27.449664][ T64] snd-usb-audio 4-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 27.463108][ T10] usb 2-1: 0:2 : does not exist [ 27.469533][ T425] udevd[425]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.485362][ T64] usb 4-1: USB disconnect, device number 2 [ 27.492742][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 27.505232][ T45] usb 1-1: 0:2 : does not exist [ 27.506453][ T10] usb 2-1: USB disconnect, device number 2 [ 27.512476][ T45] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 27.532797][ T9] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 27.536056][ T45] usb 1-1: USB disconnect, device number 2 [ 27.548749][ T9] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 27.557180][ T9] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 27.568602][ T9] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 27.578489][ T9] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 27.585339][ T429] netlink: 'syz.3.33': attribute type 4 has an invalid length. [ 27.592791][ T9] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 27.602433][ T9] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 27.644130][ T429] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 27.653361][ T36] audit: type=1400 audit(1784315519.280:156): avc: denied { ioctl } for pid=428 comm="syz.3.33" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=5185 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.719732][ T36] audit: type=1400 audit(1784315519.350:157): avc: denied { read } for pid=431 comm="syz.3.34" dev="nsfs" ino=4026532547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.740595][ T36] audit: type=1400 audit(1784315519.350:158): avc: denied { open } for pid=431 comm="syz.3.34" path="net:[4026532547]" dev="nsfs" ino=4026532547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.947434][ T9] usb 3-1: USB disconnect, device number 2 [ 27.957637][ T64] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.969080][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 27.979069][ T425] udevd[425]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card2/controlC2/../uevent} for writing: No such file or directory [ 28.147640][ T64] usb 4-1: Using ep0 maxpacket: 16 [ 28.153787][ T64] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.163932][ T64] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 28.174131][ T64] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 28.183348][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.191842][ T64] usb 4-1: Product: syz [ 28.196009][ T64] usb 4-1: Manufacturer: syz [ 28.200620][ T64] usb 4-1: SerialNumber: syz [ 28.247588][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.277593][ T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 28.397588][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 28.403738][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.414295][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 28.425156][ T64] usb 4-1: 0:2 : does not exist [ 28.431535][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 28.437928][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 28.440732][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.452390][ T45] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 28.453955][ T10] usb 2-1: Product: syz [ 28.468100][ T45] usb 1-1: config 0 has no interface number 0 [ 28.468844][ T64] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 28.477408][ T45] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 28.484038][ T10] usb 2-1: Manufacturer: syz [ 28.493814][ T45] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 28.496684][ T10] usb 2-1: SerialNumber: syz [ 28.507721][ T45] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 28.520002][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.523650][ T64] usb 4-1: USB disconnect, device number 3 [ 28.531078][ T45] usb 1-1: Product: syz [ 28.539628][ T45] usb 1-1: Manufacturer: syz [ 28.547077][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.563291][ T45] usb 1-1: SerialNumber: syz [ 28.568779][ T45] usb 1-1: config 0 descriptor?? [ 28.574130][ T422] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 28.581337][ T422] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 28.639631][ T438] netlink: 57 bytes leftover after parsing attributes in process `syz.2.36'. [ 28.648975][ T36] audit: type=1400 audit(1784315520.280:159): avc: denied { name_bind } for pid=437 comm="syz.2.36" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 28.671674][ T36] audit: type=1400 audit(1784315520.280:160): avc: denied { node_bind } for pid=437 comm="syz.2.36" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 28.742326][ T10] usb 2-1: 0:2 : does not exist [ 28.751655][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 28.772731][ T10] usb 2-1: USB disconnect, device number 3 [ 28.781658][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.810362][ T422] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 28.817615][ T422] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 29.017594][ T310] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 29.093968][ T452] netlink: 100 bytes leftover after parsing attributes in process `syz.3.41'. [ 29.103340][ T36] audit: type=1400 audit(1784315520.740:161): avc: denied { getopt } for pid=451 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.168890][ T310] usb 3-1: unable to get BOS descriptor or descriptor too short [ 29.176858][ T310] usb 3-1: not running at top speed; connect to a high speed hub [ 29.185313][ T310] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 29.196315][ T310] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 29.205393][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.213392][ T310] usb 3-1: Product: syz [ 29.217584][ T310] usb 3-1: Manufacturer: syz [ 29.222175][ T310] usb 3-1: SerialNumber: syz [ 29.387600][ T446] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 29.432599][ T45] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 29.442815][ T45] asix 1-1:0.34: probe with driver asix failed with error -32 [ 29.549035][ T446] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.560010][ T446] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 29.572448][ T446] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 29.581590][ T446] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.589656][ T446] usb 4-1: Product: syz [ 29.593922][ T446] usb 4-1: Manufacturer: syz [ 29.598565][ T446] usb 4-1: SerialNumber: syz [ 29.606788][ T446] cdc_mbim 4-1:1.0: skipping garbage [ 29.808238][ T454] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 29.837588][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 29.987581][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 29.993786][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.004086][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.014429][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 30.023608][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.031642][ T10] usb 2-1: Product: syz [ 30.035800][ T10] usb 2-1: Manufacturer: syz [ 30.040434][ T10] usb 2-1: SerialNumber: syz [ 30.248181][ T10] usb 2-1: 0:2 : does not exist [ 30.255531][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 30.268223][ T10] usb 2-1: USB disconnect, device number 4 [ 30.279796][ T405] udevd[405]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.451670][ T10] usb 1-1: USB disconnect, device number 3 [ 30.625155][ T454] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 30.632579][ T446] cdc_mbim 4-1:1.0: setting rx_max = 16384 [ 30.780998][ T492] tmpfs: Bad value for 'nr_blocks' [ 30.825707][ T490] overlayfs: statfs failed on './file0' [ 30.833987][ T446] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 30.848618][ T446] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 30.859582][ T446] wwan wwan0: port wwan0mbim0 attached [ 30.866574][ T446] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 5a:25:a1:6b:ef:63 [ 30.890573][ T446] usb 4-1: USB disconnect, device number 4 [ 30.900124][ T446] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 30.988533][ T446] wwan wwan0: port wwan0mbim0 disconnected [ 31.355698][ T520] netlink: 44 bytes leftover after parsing attributes in process `syz.3.65'. [ 31.364564][ T520] netlink: 51 bytes leftover after parsing attributes in process `syz.3.65'. [ 31.373412][ T520] netlink: 51 bytes leftover after parsing attributes in process `syz.3.65'. [ 31.394359][ T522] netlink: 'syz.3.66': attribute type 22 has an invalid length. [ 31.447593][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 31.597595][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 31.603828][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.614156][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.624476][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 31.633734][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.641788][ T10] usb 1-1: Product: syz [ 31.646012][ T10] usb 1-1: Manufacturer: syz [ 31.650630][ T10] usb 1-1: SerialNumber: syz [ 31.859022][ T10] usb 1-1: 0:2 : does not exist [ 31.869231][ T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 31.883325][ T10] usb 1-1: USB disconnect, device number 4 [ 31.887577][ T310] usb 3-1: USB disconnect, device number 3 [ 31.910095][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.913334][ T405] udevd[405]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 31.989942][ T534] overlayfs: conflicting lowerdir path [ 31.995473][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 31.995486][ T36] audit: type=1400 audit(1784315523.620:181): avc: denied { unlink } for pid=533 comm="syz.2.71" name="#1" dev="tmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 32.026139][ T534] rust_binder: Error in use_page_slow: ESRCH [ 32.026171][ T534] rust_binder: use_range failure ESRCH [ 32.027609][ T36] audit: type=1400 audit(1784315523.660:182): avc: denied { map } for pid=533 comm="syz.2.71" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 32.039129][ T534] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 32.061252][ T534] rust_binder: Failure in copy_transaction_data: ESRCH [ 32.069431][ T534] rust_binder: 533:534 transaction to 533 failed: ESRCH [ 32.077384][ T36] audit: type=1400 audit(1784315523.660:183): avc: denied { call } for pid=533 comm="syz.2.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 32.154616][ T36] audit: type=1400 audit(1784315523.780:184): avc: denied { map } for pid=536 comm="syz.2.72" path="socket:[6901]" dev="sockfs" ino=6901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.177566][ T36] audit: type=1400 audit(1784315523.780:185): avc: denied { read } for pid=536 comm="syz.2.72" path="socket:[6901]" dev="sockfs" ino=6901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.236044][ T542] netlink: 40 bytes leftover after parsing attributes in process `syz.1.74'. [ 32.237284][ T310] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.244885][ T36] audit: type=1400 audit(1784315523.860:186): avc: denied { write } for pid=541 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.257222][ T310] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 32.285352][ T36] audit: type=1400 audit(1784315523.860:187): avc: denied { nlmsg_write } for pid=541 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.331765][ T36] audit: type=1400 audit(1784315523.960:188): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.399705][ T552] netlink: 'syz.0.78': attribute type 9 has an invalid length. [ 32.413006][ T552] netlink: 'syz.0.78': attribute type 1 has an invalid length. [ 32.413007][ T36] audit: type=1400 audit(1784315524.040:189): avc: denied { read } for pid=551 comm="syz.0.78" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 32.413033][ T36] audit: type=1400 audit(1784315524.040:190): avc: denied { open } for pid=551 comm="syz.0.78" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 32.420606][ T552] netlink: 60 bytes leftover after parsing attributes in process `syz.0.78'. [ 32.767581][ T310] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 32.937586][ T310] usb 1-1: Using ep0 maxpacket: 16 [ 32.944017][ T310] usb 1-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 32.954579][ T310] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 32.963997][ T310] usb 1-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 32.973370][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.982298][ T310] usb 1-1: config 0 descriptor?? [ 33.087592][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 33.241378][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 33.250848][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.261664][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 33.272691][ T45] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 33.282148][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.290643][ T45] usb 2-1: Product: syz [ 33.305316][ T45] usb 2-1: Manufacturer: syz [ 33.312927][ T45] usb 2-1: SerialNumber: syz [ 33.525014][ T45] usb 2-1: 0:2 : does not exist [ 33.531918][ T45] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 33.543986][ T45] usb 2-1: USB disconnect, device number 5 [ 33.558116][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 33.707603][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 33.717941][ T10] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 70, changing to 10 [ 33.729172][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 33.735780][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 33.745126][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.756911][ T10] usb 3-1: config 0 descriptor?? [ 34.117581][ T439] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 34.168159][ T10] isku 0003:1E7D:319C.0002: item fetching failed at offset 6/40 [ 34.175997][ T10] isku 0003:1E7D:319C.0002: parse failed [ 34.182581][ T10] isku 0003:1E7D:319C.0002: probe with driver isku failed with error -22 [ 34.278522][ T439] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.317611][ T439] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 34.326651][ T439] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 34.338825][ T439] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 34.347901][ T439] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.355896][ T439] usb 4-1: Product: syz [ 34.360169][ T439] usb 4-1: Manufacturer: syz [ 34.364894][ T439] usb 4-1: SerialNumber: syz [ 34.370971][ T310] usb 3-1: USB disconnect, device number 4 [ 34.527904][ T620] process 'syz.1.100' launched './file0' with NULL argv: empty string added [ 34.598448][ T439] usb 4-1: 1:1 : invalid UAC_AS_GENERAL desc [ 34.606212][ T439] usb 4-1: 0:2 : does not exist [ 34.613985][ T439] usb 4-1: USB disconnect, device number 5 [ 34.797614][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 34.947590][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 34.958127][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.968523][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 34.978772][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 34.987866][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.995826][ T10] usb 2-1: Product: syz [ 34.999993][ T10] usb 2-1: Manufacturer: syz [ 35.004603][ T10] usb 2-1: SerialNumber: syz [ 35.040108][ T629] netlink: 144 bytes leftover after parsing attributes in process `syz.2.104'. [ 35.211341][ T10] usb 2-1: 0:2 : does not exist [ 35.218331][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 35.230737][ T10] usb 2-1: USB disconnect, device number 6 [ 35.240639][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.414831][ T642] mmap: syz.2.109 (642) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.437582][ T311] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 35.520771][ T439] usb 1-1: USB disconnect, device number 5 [ 35.587585][ T311] usb 4-1: Using ep0 maxpacket: 8 [ 35.599995][ T635] serio: Serial port ptm0 [ 35.677608][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 35.728633][ T311] usb 4-1: unable to get BOS descriptor or descriptor too short [ 35.738458][ T311] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 35.746758][ T311] usb 4-1: can't read configurations, error -71 [ 35.837617][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 35.843840][ T10] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 35.852063][ T10] usb 3-1: config 0 has no interface number 0 [ 35.858341][ T10] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 35.868353][ T10] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 35.879731][ T10] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 35.888824][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.896805][ T10] usb 3-1: Product: syz [ 35.901107][ T10] usb 3-1: Manufacturer: syz [ 35.905711][ T10] usb 3-1: SerialNumber: syz [ 35.911190][ T10] usb 3-1: config 0 descriptor?? [ 35.916393][ T644] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 35.923602][ T644] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 35.987590][ T439] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 35.997797][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 36.127580][ T45] usb 1-1: device descriptor read/64, error -71 [ 36.132672][ T644] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 36.141103][ T644] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 36.149457][ T439] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 36.158228][ T439] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.168357][ T439] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.180640][ T439] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 36.189724][ T439] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.197742][ T439] usb 2-1: Product: syz [ 36.201899][ T439] usb 2-1: Manufacturer: syz [ 36.206481][ T439] usb 2-1: SerialNumber: syz [ 36.213177][ T439] cdc_mbim 2-1:1.0: skipping garbage [ 36.218511][ T439] cdc_mbim 2-1:1.0: skipping garbage [ 36.223861][ T439] usb 2-1: selecting invalid altsetting 1 [ 36.304869][ T660] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 36.367591][ T45] usb 1-1: device descriptor read/64, error -71 [ 36.459153][ T439] cdc_mbim 2-1:1.0: bind() failure [ 36.465835][ T439] usb 2-1: USB disconnect, device number 7 [ 36.607659][ T45] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 36.737593][ T45] usb 1-1: device descriptor read/64, error -71 [ 36.750141][ T10] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 36.760492][ T10] asix 3-1:0.34: probe with driver asix failed with error -32 [ 36.977624][ T45] usb 1-1: device descriptor read/64, error -71 [ 37.087692][ T45] usb usb1-port1: attempt power cycle [ 37.315251][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 37.315267][ T36] audit: type=1400 audit(1784315528.940:211): avc: denied { map } for pid=733 comm="syz.1.122" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 37.344197][ T36] audit: type=1400 audit(1784315528.940:212): avc: denied { execute } for pid=733 comm="syz.1.122" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 37.369098][ T36] audit: type=1400 audit(1784315528.950:213): avc: denied { create } for pid=733 comm="syz.1.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 37.408963][ T740] capability: warning: `syz.1.125' uses deprecated v2 capabilities in a way that may be insecure [ 37.427594][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 37.427594][ T45] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 37.448587][ T45] usb 1-1: device descriptor read/8, error -71 [ 37.528502][ T744] FAULT_INJECTION: forcing a failure. [ 37.528502][ T744] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 37.541664][ T744] CPU: 0 UID: 0 PID: 744 Comm: syz.1.126 Not tainted syzkaller #0 aa47339593e321b90b560b4c24185f0bcfbb52ab [ 37.541684][ T744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 37.541694][ T744] Call Trace: [ 37.541697][ T744] [ 37.541702][ T744] __dump_stack+0x21/0x30 [ 37.541724][ T744] dump_stack_lvl+0x140/0x1c0 [ 37.541738][ T744] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.541751][ T744] ? __sys_recvmsg_sock+0x60/0x60 [ 37.541762][ T744] dump_stack+0x19/0x20 [ 37.541775][ T744] should_fail_ex+0x3c2/0x510 [ 37.541786][ T744] should_fail+0xf/0x20 [ 37.541796][ T744] should_fail_usercopy+0x1e/0x30 [ 37.541807][ T744] _copy_from_user+0x20/0xa0 [ 37.541820][ T744] ___sys_recvmsg+0x174/0x590 [ 37.541830][ T744] ? __sys_recvmsg+0x2a0/0x2a0 [ 37.541843][ T744] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 37.541859][ T744] ? selinux_file_permission+0x318/0xb60 [ 37.541877][ T744] do_recvmmsg+0x36d/0x7f0 [ 37.541888][ T744] ? __sys_recvmmsg+0x2a0/0x2a0 [ 37.541897][ T744] ? __cfi_vfs_write+0x10/0x10 [ 37.541909][ T744] ? fput+0x1a4/0x230 [ 37.541921][ T744] __x64_sys_recvmmsg+0x199/0x250 [ 37.541931][ T744] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 37.541942][ T744] ? __kasan_check_read+0x15/0x20 [ 37.541952][ T744] x64_sys_call+0x292c/0x2ee0 [ 37.541961][ T744] do_syscall_64+0x57/0xf0 [ 37.541972][ T744] ? clear_bhb_loop+0x50/0xa0 [ 37.541985][ T744] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.541997][ T744] RIP: 0033:0x7fc1f9b9de99 [ 37.542011][ T744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.542019][ T744] RSP: 002b:00007fc1fa99e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 37.542035][ T744] RAX: ffffffffffffffda RBX: 00007fc1f9e25fa0 RCX: 00007fc1f9b9de99 [ 37.542043][ T744] RDX: 000000000400021c RSI: 0000200000000800 RDI: 0000000000000003 [ 37.542050][ T744] RBP: 00007fc1fa99e090 R08: 0000000000000000 R09: 0000000000000000 [ 37.542056][ T744] R10: 0000000040012002 R11: 0000000000000246 R12: 0000000000000002 [ 37.542062][ T744] R13: 00007fc1f9e26038 R14: 00007fc1f9e25fa0 R15: 00007fff865a9c58 [ 37.542071][ T744] [ 37.577108][ T750] can0: slcan on ttyS3. [ 37.599390][ T36] audit: type=1400 audit(1784315529.220:214): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.628812][ T45] usb 1-1: device descriptor read/8, error -71 [ 37.632924][ T36] audit: type=1400 audit(1784315529.220:215): avc: denied { read } for pid=149 comm="dhcpcd" name="n16" dev="tmpfs" ino=1236 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.819587][ T36] audit: type=1400 audit(1784315529.220:216): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=1236 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.821337][ T10] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 37.842984][ T36] audit: type=1400 audit(1784315529.220:217): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=1236 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.851478][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.875613][ T36] audit: type=1400 audit(1784315529.270:218): avc: denied { read } for pid=753 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.886317][ T10] usb 4-1: Product: syz [ 37.906062][ T45] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 37.917465][ T10] usb 4-1: Manufacturer: syz [ 37.918779][ T36] audit: type=1400 audit(1784315529.270:219): avc: denied { open } for pid=753 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.926537][ T10] usb 4-1: SerialNumber: syz [ 37.947477][ T36] audit: type=1400 audit(1784315529.270:220): avc: denied { getattr } for pid=753 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.976955][ T45] usb 1-1: device descriptor read/8, error -71 [ 37.987820][ T750] can0 (unregistered): slcan off ttyS3. [ 38.108552][ T45] usb 1-1: device descriptor read/8, error -71 [ 38.217682][ T45] usb usb1-port1: unable to enumerate USB device [ 38.224712][ T784] SELinux: failed to load policy [ 38.450333][ T45] usb 3-1: USB disconnect, device number 5 [ 38.584093][ T704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.602837][ T704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.637675][ T806] netlink: 'syz.1.140': attribute type 64 has an invalid length. [ 38.645459][ T806] netlink: 5 bytes leftover after parsing attributes in process `syz.1.140'. [ 38.655708][ T10] (unnamed net_device) (uninitialized): Assigned a random MAC address: 12:69:06:4b:95:bf [ 38.668584][ T10] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 38.677360][ T10] usb 4-1: USB disconnect, device number 8 [ 38.771179][ T821] netlink: 60 bytes leftover after parsing attributes in process `syz.1.140'. [ 39.051638][ T851] rust_binder: Write failure EFAULT in pid:99 [ 39.137583][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 39.248616][ T863] syzkaller1: entered promiscuous mode [ 39.254179][ T863] syzkaller1: entered allmulticast mode [ 39.297578][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 39.303706][ T31] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 39.312026][ T31] usb 1-1: config 0 has no interface number 0 [ 39.318304][ T31] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 39.328436][ T31] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 39.339914][ T31] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 39.349147][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.357171][ T31] usb 1-1: Product: syz [ 39.361377][ T31] usb 1-1: Manufacturer: syz [ 39.365981][ T31] usb 1-1: SerialNumber: syz [ 39.371352][ T31] usb 1-1: config 0 descriptor?? [ 39.376625][ T825] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 39.383804][ T825] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 39.402021][ T871] FAULT_INJECTION: forcing a failure. [ 39.402021][ T871] name failslab, interval 1, probability 0, space 0, times 0 [ 39.414717][ T871] CPU: 1 UID: 0 PID: 871 Comm: syz.2.157 Not tainted syzkaller #0 aa47339593e321b90b560b4c24185f0bcfbb52ab [ 39.414743][ T871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 39.414753][ T871] Call Trace: [ 39.414758][ T871] [ 39.414765][ T871] __dump_stack+0x21/0x30 [ 39.414795][ T871] dump_stack_lvl+0x140/0x1c0 [ 39.414817][ T871] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.414841][ T871] ? kstrtouint_from_user+0x117/0x170 [ 39.414861][ T871] dump_stack+0x19/0x20 [ 39.414883][ T871] should_fail_ex+0x3c2/0x510 [ 39.414901][ T871] should_failslab+0xac/0x100 [ 39.414924][ T871] kmem_cache_alloc_noprof+0x42/0x410 [ 39.414942][ T871] ? proc_fail_nth_write+0x184/0x220 [ 39.414966][ T871] ? getname_flags+0xcc/0x6b0 [ 39.414987][ T871] getname_flags+0xcc/0x6b0 [ 39.415006][ T871] user_path_at+0x2b/0x60 [ 39.415025][ T871] path_removexattr+0x16e/0x470 [ 39.415043][ T871] ? listxattr+0x350/0x350 [ 39.415062][ T871] ? mutex_unlock+0x90/0x240 [ 39.415086][ T871] ? __kasan_check_read+0x15/0x20 [ 39.415102][ T871] __x64_sys_removexattr+0x64/0x80 [ 39.415120][ T871] x64_sys_call+0x2ce0/0x2ee0 [ 39.415136][ T871] do_syscall_64+0x57/0xf0 [ 39.415161][ T871] ? clear_bhb_loop+0x50/0xa0 [ 39.415181][ T871] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.415200][ T871] RIP: 0033:0x7f3af9f9de99 [ 39.415213][ T871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.415225][ T871] RSP: 002b:00007f3afaeb6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 39.415242][ T871] RAX: ffffffffffffffda RBX: 00007f3afa225fa0 RCX: 00007f3af9f9de99 [ 39.415255][ T871] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000200000000200 [ 39.415265][ T871] RBP: 00007f3afaeb6090 R08: 0000000000000000 R09: 0000000000000000 [ 39.415275][ T871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.415284][ T871] R13: 00007f3afa226038 R14: 00007f3afa225fa0 R15: 00007fff06b73ea8 [ 39.415298][ T871] [ 39.626449][ T825] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 39.644590][ T825] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 39.674338][ T879] netlink: 72 bytes leftover after parsing attributes in process `syz.1.159'. [ 39.684535][ T879] netlink: 72 bytes leftover after parsing attributes in process `syz.1.159'. [ 39.693863][ T879] netlink: 72 bytes leftover after parsing attributes in process `syz.1.159'. [ 39.704015][ T879] netlink: 72 bytes leftover after parsing attributes in process `syz.1.159'. [ 39.719914][ T879] netlink: 72 bytes leftover after parsing attributes in process `syz.1.159'. [ 39.729067][ T879] netlink: 72 bytes leftover after parsing attributes in process `syz.1.159'. [ 39.742629][ T879] netlink: 72 bytes leftover after parsing attributes in process `syz.1.159'. [ 39.761838][ T879] netlink: 72 bytes leftover after parsing attributes in process `syz.1.159'. [ 39.872791][ T901] capability: warning: `syz.2.168' uses 32-bit capabilities (legacy support in use) [ 40.257600][ T31] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 40.279625][ T31] asix 1-1:0.34: probe with driver asix failed with error -32 [ 40.340989][ T954] loop6: detected capacity change from 0 to 7 [ 40.348421][ C1] operation not supported error, dev loop6, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 2 [ 40.617589][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 40.749874][ T982] can0: slcan on ttyS3. [ 40.778316][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 40.787615][ T982] can0 (unregistered): slcan off ttyS3. [ 40.801950][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.816236][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 40.835449][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 40.852166][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.860353][ T10] usb 4-1: Product: syz [ 40.866031][ T10] usb 4-1: Manufacturer: syz [ 40.870895][ T10] usb 4-1: SerialNumber: syz [ 40.937584][ T446] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 41.080580][ T10] usb 4-1: 0:2 : does not exist [ 41.087943][ T10] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 41.106734][ T10] usb 4-1: USB disconnect, device number 9 [ 41.106802][ T446] usb 2-1: unable to get BOS descriptor or descriptor too short [ 41.122389][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.138341][ T446] usb 2-1: not running at top speed; connect to a high speed hub [ 41.158886][ T446] usb 2-1: config 1 interface 0 altsetting 45 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 41.169878][ T446] usb 2-1: config 1 interface 0 altsetting 45 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 41.182868][ T446] usb 2-1: config 1 interface 0 has no altsetting 0 [ 41.192674][ T446] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 41.201791][ T446] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.209795][ T446] usb 2-1: Product: syz [ 41.213956][ T446] usb 2-1: Manufacturer: syz [ 41.218566][ T446] usb 2-1: SerialNumber: syz [ 41.224154][ T976] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 41.435342][ T446] usb 2-1: bad CDC descriptors [ 41.446464][ T446] usb 2-1: USB disconnect, device number 8 [ 41.643845][ T1032] batadv_slave_1: entered promiscuous mode [ 41.666621][ T1032] batadv_slave_1: left promiscuous mode [ 41.793336][ T10] usb 1-1: USB disconnect, device number 10 [ 41.877598][ T446] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 42.027611][ T446] usb 4-1: Using ep0 maxpacket: 32 [ 42.033941][ T446] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 42.042276][ T446] usb 4-1: config 0 has no interface number 0 [ 42.047597][ T439] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 42.048610][ T446] usb 4-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.066958][ T446] usb 4-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.077059][ T446] usb 4-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.090940][ T446] usb 4-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 42.100263][ T446] usb 4-1: New USB device strings: Mfr=20, Product=0, SerialNumber=0 [ 42.108504][ T446] usb 4-1: Manufacturer: syz [ 42.113930][ T446] usb 4-1: config 0 descriptor?? [ 42.197585][ T439] usb 3-1: device descriptor read/64, error -71 [ 42.227602][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 42.377579][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 42.383778][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.394678][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.404434][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 42.413486][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.422061][ T10] usb 1-1: config 0 descriptor?? [ 42.428443][ T10] hub 1-1:0.0: USB hub found [ 42.437595][ T439] usb 3-1: device descriptor read/64, error -71 [ 42.521896][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.530073][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.538192][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.546292][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.554417][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.562531][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.570638][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.578755][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.586824][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.594946][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.603037][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.611183][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.619301][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.627369][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.635489][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.637283][ T10] hub 1-1:0.0: 1 port detected [ 42.643602][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.656443][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.664558][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.672661][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.680767][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.687597][ T439] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 42.688874][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.704393][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.712503][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.720605][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.728721][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.736814][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.744921][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.753022][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.761136][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.769232][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.777311][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.785418][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.793514][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.801601][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.809702][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.817805][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.825872][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.827636][ T439] usb 3-1: device descriptor read/64, error -71 [ 42.833984][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.841501][ T10] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 42.848280][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.856899][ T10] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 42.863011][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.871819][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 42.878143][ T446] logitech-djreceiver 0003:046D:C70E.0003: unknown main item tag 0x0 [ 42.884294][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 42.900446][ T446] logitech-djreceiver 0003:046D:C70E.0003: hidraw0: USB HID v0.77 Device [syz] on usb-dummy_hcd.3-1/input16 [ 42.915447][ T446] usb 4-1: USB disconnect, device number 10 [ 42.929499][ T10] usb 1-1: USB disconnect, device number 11 [ 42.932767][ T1044] fido_id[1044]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 43.077594][ T439] usb 3-1: device descriptor read/64, error -71 [ 43.187704][ T439] usb usb3-port1: attempt power cycle [ 43.258494][ T1048] netlink: 'syz.3.207': attribute type 64 has an invalid length. [ 43.307474][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 43.307489][ T36] audit: type=1400 audit(1784315534.930:251): avc: denied { read } for pid=1049 comm="syz.1.208" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.336503][ T36] audit: type=1400 audit(1784315534.930:252): avc: denied { open } for pid=1049 comm="syz.1.208" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.360691][ T36] audit: type=1400 audit(1784315534.950:253): avc: denied { ioctl } for pid=1049 comm="syz.1.208" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.392779][ T36] audit: type=1326 audit(1784315535.020:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1055 comm="syz.0.210" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa9a339de99 code=0x0 [ 43.447577][ T36] audit: type=1400 audit(1784315535.070:255): avc: denied { write } for pid=1055 comm="syz.0.210" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 43.470198][ T36] audit: type=1400 audit(1784315535.070:256): avc: denied { ioctl } for pid=1055 comm="syz.0.210" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 43.527607][ T439] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 43.558582][ T439] usb 3-1: device descriptor read/8, error -71 [ 43.688543][ T439] usb 3-1: device descriptor read/8, error -71 [ 43.787588][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 43.927590][ T439] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 43.937661][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 43.943803][ T10] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 43.952033][ T10] usb 2-1: config 0 has no interface number 0 [ 43.958155][ T10] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 43.968216][ T10] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 43.978708][ T439] usb 3-1: device descriptor read/8, error -71 [ 43.985619][ T10] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 43.994693][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.002703][ T10] usb 2-1: Product: syz [ 44.006841][ T10] usb 2-1: Manufacturer: syz [ 44.011436][ T10] usb 2-1: SerialNumber: syz [ 44.016558][ T10] usb 2-1: config 0 descriptor?? [ 44.021796][ T1062] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 44.029063][ T1062] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 44.111122][ T439] usb 3-1: device descriptor read/8, error -71 [ 44.226011][ T439] usb usb3-port1: unable to enumerate USB device [ 44.238449][ T1062] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 44.277299][ T1062] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 44.458761][ T446] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 44.618678][ T446] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 44.625935][ T446] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 44.635657][ T446] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 44.650893][ T446] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 44.660948][ T446] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.668978][ T446] usb 1-1: Product: syz [ 44.673139][ T446] usb 1-1: Manufacturer: syz [ 44.677774][ T446] usb 1-1: SerialNumber: syz [ 44.683128][ T446] usb 1-1: config 0 descriptor?? [ 44.689126][ T446] usb 1-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress f8 [ 44.889405][ T1071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.898001][ T1071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.910407][ T10] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 44.910783][ T446] usb 1-1: USB disconnect, device number 12 [ 44.920632][ T10] asix 2-1:0.34: probe with driver asix failed with error -61 [ 44.950180][ T524] udevd[524]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.217683][ T439] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 45.387583][ T439] usb 3-1: Using ep0 maxpacket: 16 [ 45.393985][ T439] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 45.402254][ T439] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 45.412547][ T439] usb 3-1: config 0 has no interface number 0 [ 45.420234][ T439] usb 3-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 45.437653][ T439] usb 3-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 45.446136][ T439] usb 3-1: Product: syz [ 45.455828][ T36] audit: type=1400 audit(1784315537.080:257): avc: denied { setopt } for pid=1112 comm="syz.0.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.455974][ T439] usb 3-1: Manufacturer: syz [ 45.476536][ T36] audit: type=1400 audit(1784315537.110:258): avc: denied { write } for pid=1112 comm="syz.0.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.492333][ T439] usb 3-1: SerialNumber: syz [ 45.507313][ T439] usb 3-1: config 0 descriptor?? [ 45.513470][ T439] usb 3-1: Found UVC 0.00 device syz (046c:14e8) [ 45.520152][ T439] uvcvideo 3-1:0.105: Entity type for entity Output 1 was not initialized! [ 45.531079][ T439] usb 3-1: Failed to create links for entity 1 [ 45.537252][ T439] usb 3-1: Failed to register entities (-22). [ 45.789544][ T10] usb 3-1: USB disconnect, device number 10 [ 45.837588][ T439] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 45.838418][ T36] audit: type=1400 audit(1784315537.470:259): avc: denied { listen } for pid=1127 comm="syz.0.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.917977][ T36] audit: type=1400 audit(1784315537.550:260): avc: denied { read } for pid=1127 comm="syz.0.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.997639][ T439] usb 4-1: device descriptor read/64, error -71 [ 46.207605][ T446] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 46.237596][ T439] usb 4-1: device descriptor read/64, error -71 [ 46.357625][ T446] usb 1-1: Using ep0 maxpacket: 16 [ 46.363809][ T446] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.373972][ T446] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 46.384589][ T446] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 46.393681][ T446] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.401691][ T446] usb 1-1: Product: syz [ 46.405840][ T446] usb 1-1: Manufacturer: syz [ 46.410440][ T446] usb 1-1: SerialNumber: syz [ 46.442517][ T1135] netlink: 'syz.2.241': attribute type 22 has an invalid length. [ 46.477585][ T439] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 46.561704][ T10] usb 2-1: USB disconnect, device number 9 [ 46.607636][ T439] usb 4-1: device descriptor read/64, error -71 [ 46.617463][ T446] usb 1-1: 0:2 : does not exist [ 46.624068][ T446] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 46.634560][ T446] usb 1-1: USB disconnect, device number 13 [ 46.641452][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.847640][ T439] usb 4-1: device descriptor read/64, error -71 [ 46.957695][ T439] usb usb4-port1: attempt power cycle [ 47.027610][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 47.167585][ T31] usb 2-1: device descriptor read/64, error -71 [ 47.297582][ T439] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 47.318565][ T439] usb 4-1: device descriptor read/8, error -71 [ 47.407589][ T31] usb 2-1: device descriptor read/64, error -71 [ 47.448723][ T439] usb 4-1: device descriptor read/8, error -71 [ 47.657593][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 47.697585][ T439] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 47.718563][ T439] usb 4-1: device descriptor read/8, error -71 [ 47.797583][ T31] usb 2-1: device descriptor read/64, error -71 [ 47.848670][ T439] usb 4-1: device descriptor read/8, error -71 [ 47.957709][ T439] usb usb4-port1: unable to enumerate USB device [ 47.977029][ T1149] batadv_slave_0: entered allmulticast mode [ 47.983221][ T1149] veth1_to_bond: entered promiscuous mode [ 47.989455][ T1149] __nla_validate_parse: 29 callbacks suppressed [ 47.989471][ T1149] netlink: 148 bytes leftover after parsing attributes in process `syz.0.246'. [ 48.037607][ T31] usb 2-1: device descriptor read/64, error -71 [ 48.058951][ T1148] veth1_to_bond: left promiscuous mode [ 48.065650][ T1148] batadv_slave_0: left allmulticast mode [ 48.147686][ T31] usb usb2-port1: attempt power cycle [ 48.216322][ T1158] FAULT_INJECTION: forcing a failure. [ 48.216322][ T1158] name failslab, interval 1, probability 0, space 0, times 0 [ 48.228978][ T1158] CPU: 0 UID: 0 PID: 1158 Comm: syz.0.250 Not tainted syzkaller #0 aa47339593e321b90b560b4c24185f0bcfbb52ab [ 48.229004][ T1158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 48.229013][ T1158] Call Trace: [ 48.229019][ T1158] [ 48.229025][ T1158] __dump_stack+0x21/0x30 [ 48.229050][ T1158] dump_stack_lvl+0x140/0x1c0 [ 48.229070][ T1158] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.229091][ T1158] ? number+0xc9d/0xf00 [ 48.229107][ T1158] dump_stack+0x19/0x20 [ 48.229126][ T1158] should_fail_ex+0x3c2/0x510 [ 48.229145][ T1158] should_failslab+0xac/0x100 [ 48.229164][ T1158] __kmalloc_node_noprof+0x69/0x500 [ 48.229181][ T1158] ? __kvmalloc_node_noprof+0x128/0x300 [ 48.229204][ T1158] __kvmalloc_node_noprof+0x128/0x300 [ 48.229227][ T1158] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 48.229255][ T1158] ? snprintf+0xe9/0x140 [ 48.229270][ T1158] ? __cfi_snprintf+0x10/0x10 [ 48.229285][ T1158] alloc_netdev_mqs+0xb6/0x13d0 [ 48.229305][ T1158] ? __cfi_vlan_setup+0x10/0x10 [ 48.229328][ T1158] register_vlan_device+0x368/0x630 [ 48.229350][ T1158] ? vlan_ioctl_handler+0x670/0x670 [ 48.229372][ T1158] ? ns_capable+0x90/0xf0 [ 48.229394][ T1158] vlan_ioctl_handler+0x246/0x670 [ 48.229414][ T1158] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 48.229430][ T1158] ? __cfi_vlan_ioctl_handler+0x10/0x10 [ 48.229452][ T1158] ? __kasan_check_write+0x18/0x20 [ 48.229467][ T1158] ? mutex_unlock+0x90/0x240 [ 48.229487][ T1158] ? __cfi_vlan_ioctl_handler+0x10/0x10 [ 48.229508][ T1158] sock_ioctl+0x60c/0x7e0 [ 48.229525][ T1158] ? __cfi_sock_ioctl+0x10/0x10 [ 48.229543][ T1158] ? bpf_lsm_file_ioctl+0xd/0x20 [ 48.229562][ T1158] ? security_file_ioctl+0x3e/0x110 [ 48.229584][ T1158] ? __cfi_sock_ioctl+0x10/0x10 [ 48.229600][ T1158] __se_sys_ioctl+0x135/0x1b0 [ 48.229618][ T1158] __x64_sys_ioctl+0x7f/0xa0 [ 48.229636][ T1158] x64_sys_call+0x1878/0x2ee0 [ 48.229650][ T1158] do_syscall_64+0x57/0xf0 [ 48.229666][ T1158] ? clear_bhb_loop+0x50/0xa0 [ 48.229686][ T1158] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.229704][ T1158] RIP: 0033:0x7fa9a339de99 [ 48.229718][ T1158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.229731][ T1158] RSP: 002b:00007fa9a4256028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 48.229749][ T1158] RAX: ffffffffffffffda RBX: 00007fa9a3625fa0 RCX: 00007fa9a339de99 [ 48.229761][ T1158] RDX: 0000200000000000 RSI: 0000000000008982 RDI: 0000000000000003 [ 48.229772][ T1158] RBP: 00007fa9a4256090 R08: 0000000000000000 R09: 0000000000000000 [ 48.229782][ T1158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.229792][ T1158] R13: 00007fa9a3626038 R14: 00007fa9a3625fa0 R15: 00007ffd27037118 [ 48.229805][ T1158] [ 48.467614][ T446] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 48.518672][ T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 48.540921][ T31] usb 2-1: device descriptor read/8, error -71 [ 48.649287][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 48.649313][ T36] audit: type=1400 audit(1784315540.280:262): avc: denied { bind } for pid=1167 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.670021][ T446] usb 1-1: Using ep0 maxpacket: 16 [ 48.680475][ T31] usb 2-1: device descriptor read/8, error -71 [ 48.687092][ T446] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 48.695210][ T446] usb 1-1: config 0 has no interface number 0 [ 48.701432][ T446] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 48.711478][ T446] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 48.723570][ T446] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 48.734190][ T446] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.742262][ T446] usb 1-1: Product: syz [ 48.746497][ T446] usb 1-1: Manufacturer: syz [ 48.751400][ T446] usb 1-1: SerialNumber: syz [ 48.756737][ T446] usb 1-1: config 0 descriptor?? [ 48.763552][ T1160] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 48.770852][ T1160] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 48.917604][ T31] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 48.963089][ T31] usb 2-1: device descriptor read/8, error -71 [ 48.991026][ T1160] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 48.993806][ T36] audit: type=1400 audit(1784315540.620:263): avc: denied { create } for pid=1187 comm="syz.2.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.998335][ T1160] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 49.020105][ T36] audit: type=1400 audit(1784315540.630:264): avc: denied { ioctl } for pid=1187 comm="syz.2.261" path="socket:[14650]" dev="sockfs" ino=14650 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.128827][ T31] usb 2-1: device descriptor read/8, error -71 [ 49.169906][ T36] audit: type=1400 audit(1784315540.800:265): avc: denied { getopt } for pid=1196 comm="syz.3.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.237685][ T31] usb usb2-port1: unable to enumerate USB device [ 49.327611][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 49.447610][ T439] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 49.477569][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 49.483767][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.493906][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 49.504159][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 49.513222][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.521310][ T10] usb 3-1: Product: syz [ 49.525474][ T10] usb 3-1: Manufacturer: syz [ 49.530178][ T10] usb 3-1: SerialNumber: syz [ 49.607610][ T439] usb 4-1: Using ep0 maxpacket: 8 [ 49.619247][ T439] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 49.627692][ T439] usb 4-1: config 179 has no interface number 0 [ 49.633971][ T439] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 49.647943][ T439] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 49.655038][ T446] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 49.659521][ T439] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 49.669521][ T446] asix 1-1:0.34: probe with driver asix failed with error -61 [ 49.680682][ T439] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 49.699468][ T439] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 49.712874][ T439] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 49.722119][ T439] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.743259][ T10] usb 3-1: 0:2 : does not exist [ 49.749037][ T1202] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 49.763413][ T10] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 49.777758][ T10] usb 3-1: USB disconnect, device number 11 [ 49.791754][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 49.976205][ T36] audit: type=1400 audit(1784315541.600:266): avc: denied { read write } for pid=1201 comm="syz.3.265" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 49.999326][ T36] audit: type=1400 audit(1784315541.600:267): avc: denied { open } for pid=1201 comm="syz.3.265" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 50.016354][ T1202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.022455][ T36] audit: type=1400 audit(1784315541.600:268): avc: denied { setattr } for pid=1218 comm="syz.1.272" name="/" dev="incremental-fs" ino=408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.054303][ T36] audit: type=1400 audit(1784315541.600:269): avc: denied { ioctl } for pid=1201 comm="syz.3.265" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 50.055017][ T1202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.079038][ T36] audit: type=1400 audit(1784315541.630:270): avc: denied { bind } for pid=1218 comm="syz.1.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 50.094576][ T1202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.115440][ T1202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.150620][ T36] audit: type=1400 audit(1784315541.780:271): avc: denied { append } for pid=1222 comm="syz.1.274" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 50.399660][ T1236] netlink: 20 bytes leftover after parsing attributes in process `syz.2.279'. [ 50.413058][ T439] usb 4-1: USB disconnect, device number 15 [ 50.413223][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 50.427430][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 50.495144][ T1242] FAULT_INJECTION: forcing a failure. [ 50.495144][ T1242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.508267][ T1242] CPU: 1 UID: 0 PID: 1242 Comm: syz.2.281 Not tainted syzkaller #0 aa47339593e321b90b560b4c24185f0bcfbb52ab [ 50.508296][ T1242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 50.508307][ T1242] Call Trace: [ 50.508313][ T1242] [ 50.508321][ T1242] __dump_stack+0x21/0x30 [ 50.508351][ T1242] dump_stack_lvl+0x140/0x1c0 [ 50.508364][ T1242] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.508378][ T1242] ? vfs_write+0xbcf/0xfd0 [ 50.508389][ T1242] dump_stack+0x19/0x20 [ 50.508402][ T1242] should_fail_ex+0x3c2/0x510 [ 50.508414][ T1242] should_fail+0xf/0x20 [ 50.508424][ T1242] should_fail_usercopy+0x1e/0x30 [ 50.508436][ T1242] _copy_from_user+0x20/0xa0 [ 50.508449][ T1242] __se_sys_io_uring_setup+0x170/0x2b0 [ 50.508468][ T1242] ? __kasan_check_write+0x18/0x20 [ 50.508479][ T1242] ? __x64_sys_io_uring_setup+0x80/0x80 [ 50.508493][ T1242] ? __kasan_check_read+0x15/0x20 [ 50.508502][ T1242] __x64_sys_io_uring_setup+0x5f/0x80 [ 50.508515][ T1242] x64_sys_call+0x22c0/0x2ee0 [ 50.508525][ T1242] do_syscall_64+0x57/0xf0 [ 50.508535][ T1242] ? clear_bhb_loop+0x50/0xa0 [ 50.508548][ T1242] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.508561][ T1242] RIP: 0033:0x7f3af9f9de99 [ 50.508570][ T1242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.508581][ T1242] RSP: 002b:00007f3afaeb5ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 50.508594][ T1242] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f3af9f9de99 [ 50.508601][ T1242] RDX: 0000000000000088 RSI: 0000000000000008 RDI: 0000000000000e26 [ 50.508608][ T1242] RBP: 0000000000000000 R08: 0000200000000340 R09: 0000000000000000 [ 50.508615][ T1242] R10: 0000000000000090 R11: 0000000000000206 R12: 0000000000000088 [ 50.508621][ T1242] R13: 0000000000000090 R14: 00007f3afaeb5fd8 R15: 0000000000000000 [ 50.508629][ T1242] [ 50.937375][ T1262] syzkaller0: entered promiscuous mode [ 50.942896][ T1262] syzkaller0: entered allmulticast mode [ 50.949184][ T1262] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 50.987599][ T45] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 51.147617][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 51.156833][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.177415][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 51.189973][ T45] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 51.199303][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.207385][ T45] usb 3-1: Product: syz [ 51.214222][ T45] usb 3-1: Manufacturer: syz [ 51.219097][ T45] usb 3-1: SerialNumber: syz [ 51.249434][ T10] usb 1-1: USB disconnect, device number 14 [ 51.443545][ T45] usb 3-1: 0:2 : does not exist [ 51.451055][ T45] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 51.462924][ T45] usb 3-1: USB disconnect, device number 12 [ 51.481989][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.937593][ T45] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 52.107564][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 52.128271][ T45] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 52.136512][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.157569][ T45] usb 4-1: config 0 has no interface number 0 [ 52.163709][ T45] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 52.188064][ T45] usb 4-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 52.202407][ T45] usb 4-1: config 0 interface 196 has no altsetting 0 [ 52.207616][ T10] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 52.210892][ T45] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 52.226031][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.234222][ T45] usb 4-1: Product: syz [ 52.238664][ T45] usb 4-1: Manufacturer: syz [ 52.243312][ T45] usb 4-1: SerialNumber: syz [ 52.252915][ T45] usb 4-1: config 0 descriptor?? [ 52.378639][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 52.385271][ T10] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 52.407561][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.428053][ T10] usb 3-1: config 0 descriptor?? [ 52.547576][ T446] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 52.698604][ T446] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 52.708672][ T446] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 52.718620][ T446] usb 1-1: config 1 interface 0 has no altsetting 0 [ 52.726561][ T446] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 52.735987][ T446] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.744017][ T446] usb 1-1: Product: syz [ 52.748237][ T446] usb 1-1: Manufacturer: syz [ 52.752850][ T446] usb 1-1: SerialNumber: syz [ 52.758529][ T1302] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 52.765685][ T1302] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 52.835850][ T10] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x1 [ 52.842998][ T10] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x5 [ 52.850091][ T10] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x6 [ 52.857126][ T10] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 52.864184][ T10] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 52.871235][ T10] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 52.878309][ T10] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 52.885342][ T10] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 52.892393][ T10] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 52.899446][ T10] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 53.041425][ T446] rtl8150 1-1:1.0: couldn't reset the device [ 53.045844][ T10] hid-led 0003:0FC5:B080.0004: probe with driver hid-led failed with error -71 [ 53.048032][ T446] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 53.061594][ T10] usb 3-1: USB disconnect, device number 13 [ 53.068517][ T446] usb 1-1: USB disconnect, device number 15 [ 53.695345][ T1329] binfmt_misc: register: failed to install interpreter file ./file0 [ 53.704802][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 53.704817][ T36] audit: type=1400 audit(1784315545.340:274): avc: denied { write } for pid=1328 comm="syz.2.312" path="socket:[16678]" dev="sockfs" ino=16678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 53.769748][ T36] audit: type=1400 audit(1784315545.390:275): avc: denied { mounton } for pid=1331 comm="syz.2.314" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 54.028352][ T1356] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 54.040214][ T725] Bluetooth: hci0: Frame reassembly failed (-84) [ 54.117581][ T439] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 54.277573][ T439] usb 1-1: Using ep0 maxpacket: 16 [ 54.285461][ T439] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.298026][ T439] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 54.308970][ T439] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 54.321957][ T439] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.330606][ T439] usb 1-1: Product: syz [ 54.337566][ T439] usb 1-1: Manufacturer: syz [ 54.342169][ T439] usb 1-1: SerialNumber: syz [ 54.553683][ T439] usb 1-1: 0:2 : does not exist [ 54.560806][ T439] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 54.578132][ T439] usb 1-1: USB disconnect, device number 16 [ 54.625323][ T45] ipheth 4-1:0.196: Unable to find endpoints [ 54.646652][ T45] usb 4-1: USB disconnect, device number 16 [ 54.888471][ T1383] syz.3.328 (1383): /proc/1382/oom_adj is deprecated, please use /proc/1382/oom_score_adj instead. [ 54.915269][ T36] audit: type=1400 audit(1784315546.540:276): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 55.477606][ T439] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 55.650201][ T439] usb 2-1: Using ep0 maxpacket: 16 [ 55.665929][ T439] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.680471][ T439] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 55.698134][ T439] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 55.707266][ T439] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.720725][ T439] usb 2-1: Product: syz [ 55.724908][ T439] usb 2-1: Manufacturer: syz [ 55.737569][ T439] usb 2-1: SerialNumber: syz [ 55.945173][ T439] usb 2-1: 0:2 : does not exist [ 55.952510][ T439] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 55.966707][ T439] usb 2-1: USB disconnect, device number 14 [ 55.974539][ T1421] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 55.983534][ T36] audit: type=1400 audit(1784315547.620:277): avc: denied { mount } for pid=1420 comm="syz.3.343" name="/" dev="overlay" ino=432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 56.012932][ T296] ------------[ cut here ]------------ [ 56.018438][ T296] WARNING: CPU: 0 PID: 296 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 56.027779][ T296] Modules linked in: [ 56.031663][ T296] CPU: 0 UID: 0 PID: 296 Comm: syz-executor Not tainted syzkaller #0 aa47339593e321b90b560b4c24185f0bcfbb52ab [ 56.043293][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 56.053390][ T296] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 56.059223][ T296] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 83 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 36 d0 3e ff <0f> 0b e9 3e ff ff ff e8 2a d0 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 56.078881][ T296] RSP: 0018:ffffc9000b6cfb88 EFLAGS: 00010293 [ 56.084943][ T296] RAX: ffffffff8248a1ba RBX: 0000000000000000 RCX: ffff8881260c1300 [ 56.087565][ T31] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 56.093053][ T296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.108453][ T296] RBP: ffffc9000b6cfbb0 R08: ffff88813201337f R09: 1ffff1102640266f [ 56.116409][ T296] R10: dffffc0000000000 R11: ffffed1026402670 R12: 0000000000000000 [ 56.117594][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 56.124400][ T296] R13: dffffc0000000000 R14: ffff8881320132e0 R15: ffff888116858660 [ 56.130488][ T1357] Bluetooth: hci0: command 0x1003 tx timeout [ 56.138456][ T296] FS: 000055555939f500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 56.153319][ T296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.159923][ T296] CR2: 00007fff034a3c20 CR3: 0000000104700000 CR4: 00000000003526b0 [ 56.167939][ T296] Call Trace: [ 56.171213][ T296] [ 56.174129][ T296] ovl_do_remove+0x824/0xd10 [ 56.178779][ T296] ? ovl_set_redirect+0x780/0x780 [ 56.183808][ T296] ? __cfi_down_write+0x10/0x10 [ 56.188697][ T296] ovl_rmdir+0x1e/0x30 [ 56.192777][ T296] vfs_rmdir+0x3db/0x560 [ 56.197030][ T296] incfs_kill_sb+0x102/0x220 [ 56.201641][ T296] deactivate_locked_super+0xd2/0x270 [ 56.207017][ T296] deactivate_super+0xb8/0xe0 [ 56.211704][ T296] cleanup_mnt+0x438/0x4d0 [ 56.216120][ T296] __cleanup_mnt+0x1d/0x40 [ 56.220542][ T296] task_work_run+0x1e8/0x260 [ 56.225134][ T296] ? __cfi_task_work_run+0x10/0x10 [ 56.230263][ T296] ? __x64_sys_umount+0x12e/0x180 [ 56.235293][ T296] ? __cfi___x64_sys_umount+0x10/0x10 [ 56.240683][ T296] ? __kasan_check_read+0x15/0x20 [ 56.245707][ T296] resume_user_mode_work+0x35/0x50 [ 56.250831][ T296] syscall_exit_to_user_mode+0x63/0xb0 [ 56.256294][ T296] do_syscall_64+0x63/0xf0 [ 56.257569][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 56.260729][ T296] ? clear_bhb_loop+0x50/0xa0 [ 56.267187][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.270483][ T296] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.270512][ T296] RIP: 0033:0x7f69c559f0d7 [ 56.280840][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.286442][ T296] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 56.286461][ T296] RSP: 002b:00007fff034a4278 EFLAGS: 00000246 [ 56.292575][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 56.299739][ T296] ORIG_RAX: 00000000000000a6 [ 56.299753][ T296] RAX: 0000000000000000 RBX: 00007f69c563330a RCX: 00007f69c559f0d7 [ 56.319671][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.325443][ T296] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff034a4330 [ 56.325459][ T296] RBP: 00007fff034a4330 R08: 00007fff034a5330 R09: 00000000ffffffff [ 56.334837][ T31] usb 1-1: Product: syz [ 56.339163][ T296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff034a53c0 [ 56.347375][ T31] usb 1-1: Manufacturer: syz [ 56.355098][ T296] R13: 00007f69c563330a R14: 000000000000dab3 R15: 00007fff034a5400 [ 56.363273][ T31] usb 1-1: SerialNumber: syz [ 56.371029][ T296] [ 56.371038][ T296] ---[ end trace 0000000000000000 ]--- [ 56.408987][ T296] ------------[ cut here ]------------ [ 56.414448][ T296] WARNING: CPU: 1 PID: 296 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 56.423793][ T296] Modules linked in: [ 56.427717][ T296] CPU: 1 UID: 0 PID: 296 Comm: syz-executor Tainted: G W syzkaller #0 aa47339593e321b90b560b4c24185f0bcfbb52ab [ 56.440863][ T296] Tainted: [W]=WARN [ 56.444665][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 56.454746][ T296] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 56.460415][ T296] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 83 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 36 d0 3e ff <0f> 0b e9 3e ff ff ff e8 2a d0 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 56.480062][ T296] RSP: 0018:ffffc9000b6cfb88 EFLAGS: 00010293 [ 56.486139][ T296] RAX: ffffffff8248a1ba RBX: 0000000000000000 RCX: ffff8881260c1300 [ 56.494129][ T296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.502124][ T296] RBP: ffffc9000b6cfbb0 R08: ffff88813201337f R09: 1ffff1102640266f [ 56.510118][ T296] R10: dffffc0000000000 R11: ffffed1026402670 R12: 0000000000000000 [ 56.518122][ T296] R13: dffffc0000000000 R14: ffff8881320132e0 R15: ffff888116858660 [ 56.526106][ T296] FS: 000055555939f500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 56.535080][ T296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.541694][ T296] CR2: 00007fa9a33eb580 CR3: 0000000104700000 CR4: 00000000003526b0 [ 56.549695][ T296] DR0: 000000000000000c DR1: 0000000000000000 DR2: 0000000000000000 [ 56.557725][ T296] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 56.565704][ T296] Call Trace: [ 56.569002][ T296] [ 56.571935][ T296] ovl_do_remove+0x824/0xd10 [ 56.576528][ T296] ? ovl_set_redirect+0x780/0x780 [ 56.581568][ T296] ? __cfi_down_write+0x10/0x10 [ 56.586434][ T296] ovl_rmdir+0x1e/0x30 [ 56.590564][ T296] vfs_rmdir+0x3db/0x560 [ 56.594830][ T296] incfs_kill_sb+0x197/0x220 [ 56.599474][ T296] deactivate_locked_super+0xd2/0x270 [ 56.604853][ T296] deactivate_super+0xb8/0xe0 [ 56.609547][ T296] cleanup_mnt+0x438/0x4d0 [ 56.613991][ T296] __cleanup_mnt+0x1d/0x40 [ 56.618426][ T296] task_work_run+0x1e8/0x260 [ 56.623050][ T296] ? __cfi_task_work_run+0x10/0x10 [ 56.628174][ T296] ? __x64_sys_umount+0x12e/0x180 [ 56.633206][ T296] ? __cfi___x64_sys_umount+0x10/0x10 [ 56.638624][ T296] ? __kasan_check_read+0x15/0x20 [ 56.643648][ T296] resume_user_mode_work+0x35/0x50 [ 56.648779][ T296] syscall_exit_to_user_mode+0x63/0xb0 [ 56.654264][ T296] do_syscall_64+0x63/0xf0 [ 56.658691][ T296] ? clear_bhb_loop+0x50/0xa0 [ 56.663392][ T296] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.669319][ T296] RIP: 0033:0x7f69c559f0d7 [ 56.673730][ T296] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 56.693354][ T296] RSP: 002b:00007fff034a4278 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 56.701791][ T296] RAX: 0000000000000000 RBX: 00007f69c563330a RCX: 00007f69c559f0d7 [ 56.709779][ T296] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff034a4330 [ 56.717783][ T296] RBP: 00007fff034a4330 R08: 00007fff034a5330 R09: 00000000ffffffff [ 56.725749][ T296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff034a53c0 [ 56.733727][ T296] R13: 00007f69c563330a R14: 000000000000dab3 R15: 00007fff034a5400 [ 56.741721][ T296] [ 56.744734][ T296] ---[ end trace 0000000000000000 ]--- [ 56.751392][ T36] audit: type=1400 audit(1784315548.380:278): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 56.751730][ T31] usb 1-1: 0:2 : does not exist [ 56.778591][ T31] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 56.795556][ T31] usb 1-1: USB disconnect, device number 17