last executing test programs: 50.513351491s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f0000000240)='./bus\x00') mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0) mkdir(&(0x7f0000000300)='./proc\x00', 0x8d) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x50) write(r0, &(0x7f0000000400)='10', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) r1 = accept4$vsock_stream(r0, &(0x7f0000000480)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f00000004c0)='ipvlan1\x00') mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x200804, 0x0) 50.122714121s ago: executing program 0 (id=7): r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x8) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x6, 0x6, 0x705, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x6020400) r7 = fsopen(&(0x7f0000000540)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x88) r9 = openat$cgroup_int(r8, &(0x7f0000000580)='pids.max\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0x10000a006) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000280)='|', 0x1}], 0x1) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000400)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r11, 0x29, 0x1000000000021, &(0x7f0000000440)=0x5, 0x4) sendmsg$inet6(r11, &(0x7f0000000480)={&(0x7f00000004c0)={0xa, 0x4e20, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@flowinfo={{0x14, 0x29, 0xb, 0xffff0000}}], 0x18}, 0xc4) splice(r6, 0x0, r10, 0x0, 0x2, 0x6) write$cgroup_pid(r10, &(0x7f0000000300), 0xffffff98) splice(r3, 0x0, r10, 0x0, 0xf, 0x1) write(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54020000200001"], 0x254}}, 0x4) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@local, 0x18, r12}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x18, r12}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) 50.040060803s ago: executing program 0 (id=9): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002180)='net/ip_vs_stats\x00') ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000021c0)=0x8000800) r1 = syz_open_dev$usbfs(&(0x7f0000001f40), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000001f80)={0x80, 0x6, 0x301, 0x3, 0xec, 0x8, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x1c0) mkdir(&(0x7f0000001fc0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000002000)='./file0\x00', &(0x7f0000002040), 0x8, &(0x7f0000002080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = fspick(0xffffffffffffff9c, &(0x7f00000020c0)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000002100)='/.\x00', &(0x7f0000002140)='./file0\x00', 0xffffffffffffff9c) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f00002d8000/0x1000)=nil, 0x1000, 0x3) getresgid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000400)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000008c0)=""/253, 0xfd}, {&(0x7f00000009c0)=""/217, 0xd9}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/161, 0xa1}, {&(0x7f0000001b80)=""/134, 0x86}, {&(0x7f0000001c40)=""/146, 0x92}, {&(0x7f0000001d00)=""/128, 0x80}, {&(0x7f0000001d80)=""/260, 0x104}, {&(0x7f0000001ec0)=""/98, 0x62}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0xffffffde}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xda}], 0x7, 0x40000100, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000300)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@local}}, &(0x7f0000000480)=0xe8) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x1000000, &(0x7f00000004c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1e00}}, {@max_read={'max_read', 0x3d, 0x3}}, {@allow_other}, {@blksize}, {@blksize={'blksize', 0x3d, 0x1800}}, {@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x600}}, {@allow_other}]}}) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='pstore\x00', 0x1104000, &(0x7f0000000440)='/dev/loop0\x00') read$FUSE(r7, &(0x7f0000002480)={0x2020}, 0x2020) 49.956675605s ago: executing program 32 (id=9): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002180)='net/ip_vs_stats\x00') ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000021c0)=0x8000800) r1 = syz_open_dev$usbfs(&(0x7f0000001f40), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000001f80)={0x80, 0x6, 0x301, 0x3, 0xec, 0x8, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x1c0) mkdir(&(0x7f0000001fc0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000002000)='./file0\x00', &(0x7f0000002040), 0x8, &(0x7f0000002080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = fspick(0xffffffffffffff9c, &(0x7f00000020c0)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000002100)='/.\x00', &(0x7f0000002140)='./file0\x00', 0xffffffffffffff9c) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f00002d8000/0x1000)=nil, 0x1000, 0x3) getresgid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000400)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000008c0)=""/253, 0xfd}, {&(0x7f00000009c0)=""/217, 0xd9}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/161, 0xa1}, {&(0x7f0000001b80)=""/134, 0x86}, {&(0x7f0000001c40)=""/146, 0x92}, {&(0x7f0000001d00)=""/128, 0x80}, {&(0x7f0000001d80)=""/260, 0x104}, {&(0x7f0000001ec0)=""/98, 0x62}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0xffffffde}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xda}], 0x7, 0x40000100, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000300)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@local}}, &(0x7f0000000480)=0xe8) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x1000000, &(0x7f00000004c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1e00}}, {@max_read={'max_read', 0x3d, 0x3}}, {@allow_other}, {@blksize}, {@blksize={'blksize', 0x3d, 0x1800}}, {@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x600}}, {@allow_other}]}}) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='pstore\x00', 0x1104000, &(0x7f0000000440)='/dev/loop0\x00') read$FUSE(r7, &(0x7f0000002480)={0x2020}, 0x2020) 48.984676118s ago: executing program 1 (id=14): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x103002, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) close_range(r1, 0xffffffffffffffff, 0x200000000000000) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) r4 = gettid() tkill(r4, 0x14) tkill(r4, 0x12) ioctl$TIOCMSET(r0, 0x5418, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x103002, 0x0) (async) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r3, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) (async) close_range(r1, 0xffffffffffffffff, 0x200000000000000) (async) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) (async) gettid() (async) tkill(r4, 0x14) (async) tkill(r4, 0x12) (async) ioctl$TIOCMSET(r0, 0x5418, 0x0) (async) 48.984424648s ago: executing program 1 (id=15): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) listen(r0, 0x5a) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0xfff0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000001c0)={0x1, 0x10}, 0x8) (async) sendto$inet6(r2, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x182) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f00000022c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x2a) write(r4, &(0x7f0000002300)='10', 0x2) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002340), 0x81, 0x0) (async) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) (async) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000002240)={{0x16, @loopback, 0x4e22, 0x4, 'nq\x00', 0x20, 0xfffffffb, 0x21}, {@broadcast, 0x4e23, 0x1, 0x622, 0x2, 0x2}}, 0x44) (async) close_range(r0, 0xffffffffffffffff, 0x0) 48.944154929s ago: executing program 1 (id=16): ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x1}) copy_file_range(0xffffffffffffffff, &(0x7f0000000000)=0x3, r0, &(0x7f0000000080)=0x9, 0x5, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) quotactl_fd$Q_SETQUOTA(r1, 0x1, r2, &(0x7f0000000200)={0x63, 0x8, 0x6, 0x0, 0x1, 0x3ff, 0x2, 0x200, 0xfffffff7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f076bbee9, 0x8031, r1, 0x28f43000) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, 0x0) unshare(0x62020680) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x1}) (async) copy_file_range(0xffffffffffffffff, &(0x7f0000000000)=0x3, r0, &(0x7f0000000080)=0x9, 0x5, 0x0) (async) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x268}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x6000) (async) quotactl_fd$Q_SETQUOTA(r1, 0x1, r2, &(0x7f0000000200)={0x63, 0x8, 0x6, 0x0, 0x1, 0x3ff, 0x2, 0x200, 0xfffffff7}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f076bbee9, 0x8031, r1, 0x28f43000) (async) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, 0x0) (async) unshare(0x62020680) (async) 47.912076674s ago: executing program 1 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f0000000240)='./bus\x00') mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0) mkdir(&(0x7f0000000300)='./proc\x00', 0x8d) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x50) write(r0, &(0x7f0000000400)='10', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) r1 = accept4$vsock_stream(r0, &(0x7f0000000480)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f00000004c0)='ipvlan1\x00') mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x200804, 0x0) 47.655301841s ago: executing program 1 (id=25): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r0, &(0x7f0000000140)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) pipe2$9p(&(0x7f00000001c0)={0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000200)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="0000b02454d4f0ab7b548224cc4b1c6d0aeed0b55e3adaadff099d1f9256eec95ef8dff912063c88ad6ba4f48f2c"]) write$P9_RVERSION(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="2e00000065ffff005095d7e7"], 0x15) write$P9_RGETATTR(r3, &(0x7f00000003c0)={0xa0, 0x19, 0x0, {0x38b5, {0x40}, 0x40, 0x0, 0x0, 0x0, 0xae, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff39, 0xfffffffffffffffc, 0x3}}, 0xa0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2642, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000080)="93c6040000030085bde27734b040e53eddbafa05252810ef855ec82e46e17b6625cc9d0dd520977561d62cf80745c927c453a2cf792119c340eba76237a28319ce861287a4a3a82c4213bda8e805cfb588ae9191c9b03178da2fea6497789a627f3ce9c7fe14e47603262399299a4fcd3a65eb9cd1f842f2ed6aec2e8301b53689668aaf14", 0x85}], 0x1) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0xffff, @any, 0x7}, 0xe) prctl$PR_MCE_KILL(0x29, 0x0, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) listen(r1, 0x0) 47.224979111s ago: executing program 1 (id=28): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc40af41aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d64083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e6847e16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f004100400000000000000cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f1493c9f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3f) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/tty/drivers\x00', 0x0, 0x0) recvfrom$inet_nvme(r4, 0x0, 0x0, 0x10000, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000a00)=[@text64={0x40, &(0x7f0000000980)="c4a2d8f223450f01cfb9800000c00f3235010000000f3066baf80cb89038748cef66bafc0cb80be20000ef66baf80cb8f2796882ef66bafc0c66edc4827d18a3075b8bec0fc71ac421b171f093440f20c03506000000440f22c0420f01cf", 0x5e}], 0x1, 0x20, &(0x7f0000000a40)=[@dstype3={0x7, 0xe}, @cr4={0x1, 0x401}], 0x2) r5 = open(&(0x7f0000000000)='./file1\x00', 0xc8141, 0x5) fcntl$setlease(r5, 0x400, 0x0) fcntl$getflags(r5, 0x401) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f0000000680)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000700)=@filename='./dev/sda1\x00', &(0x7f0000000740)='./mnt\x00', &(0x7f0000000780)='ext4\x00', 0x8410, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000840)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000880)=0x1, 0x4) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0) bind$inet6(r6, &(0x7f00000008c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) ioctl$KVM_GET_TSC_KHZ_cpu(r4, 0xaea3) connect$inet6(r6, &(0x7f0000000900)={0xa, 0x4e22, 0x0, @remote}, 0x1c) listxattr(&(0x7f00000007c0)='./mnt\x00', &(0x7f0000000800)=""/48, 0x11) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000005c0)={0x4, 0x0, [{0x6, 0x4, 0x0, 0x80000001, 0x0, 0x0, 0x7}, {0x80000007, 0xfffffc00, 0x0, 0x21, 0x9, 0x1, 0xc}, {0x80000000, 0x7, 0x4, 0x0, 0x9, 0x3, 0x6e}, {0x7, 0x9, 0x5, 0x3, 0xffffffff, 0x3ff, 0x8}]}) 47.130465803s ago: executing program 33 (id=28): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3f) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/tty/drivers\x00', 0x0, 0x0) recvfrom$inet_nvme(r4, 0x0, 0x0, 0x10000, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000a00)=[@text64={0x40, &(0x7f0000000980)="c4a2d8f223450f01cfb9800000c00f3235010000000f3066baf80cb89038748cef66bafc0cb80be20000ef66baf80cb8f2796882ef66bafc0c66edc4827d18a3075b8bec0fc71ac421b171f093440f20c03506000000440f22c0420f01cf", 0x5e}], 0x1, 0x20, &(0x7f0000000a40)=[@dstype3={0x7, 0xe}, @cr4={0x1, 0x401}], 0x2) r5 = open(&(0x7f0000000000)='./file1\x00', 0xc8141, 0x5) fcntl$setlease(r5, 0x400, 0x0) fcntl$getflags(r5, 0x401) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f0000000680)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000700)=@filename='./dev/sda1\x00', &(0x7f0000000740)='./mnt\x00', &(0x7f0000000780)='ext4\x00', 0x8410, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000840)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000880)=0x1, 0x4) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0) bind$inet6(r6, &(0x7f00000008c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) ioctl$KVM_GET_TSC_KHZ_cpu(r4, 0xaea3) connect$inet6(r6, &(0x7f0000000900)={0xa, 0x4e22, 0x0, @remote}, 0x1c) listxattr(&(0x7f00000007c0)='./mnt\x00', &(0x7f0000000800)=""/48, 0x11) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000005c0)={0x4, 0x0, [{0x6, 0x4, 0x0, 0x80000001, 0x0, 0x0, 0x7}, {0x80000007, 0xfffffc00, 0x0, 0x21, 0x9, 0x1, 0xc}, {0x80000000, 0x7, 0x4, 0x0, 0x9, 0x3, 0x6e}, {0x7, 0x9, 0x5, 0x3, 0xffffffff, 0x3ff, 0x8}]}) 4.057843502s ago: executing program 3 (id=458): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r0, &(0x7f0000000140)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) listen(r1, 0x0) 3.995471334s ago: executing program 3 (id=460): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) socket$inet(0x2, 0x1, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$system_posix_acl(&(0x7f0000000840)='./file0/file1\x00', &(0x7f0000000880)='system.posix_acl_access\x00', &(0x7f00000008c0)={{}, {}, [], {0x4, 0x1}, [], {0x10, 0x2}, {0x20, 0x3}}, 0x24, 0x3) 3.994996814s ago: executing program 3 (id=461): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000013c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)={0x2c, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0xc800) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000240)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "19fe0891", "0aa3b9dd5fe7a771"}, 0x28) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000300)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f00000003c0)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0xfe86}, {&(0x7f0000000480)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000540)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f0000000580)="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", 0xdf3}], 0x5) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000001380)=0xffff1884, 0x4) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000200)={0x40002000}) 3.133919075s ago: executing program 3 (id=468): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r0, &(0x7f0000000140)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) listen(r1, 0x0) 3.114604865s ago: executing program 3 (id=469): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000205f14120200000000000109022400010000600009040180020300000009210604000122050009058103"], 0x0) (async) syz_usb_connect$uac2(0x1, 0xe5, &(0x7f00000011c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd3, 0x3, 0x1, 0x8, 0x50, 0x3, {0x8, 0xb, 0x0, 0x1, 0x1, 0xb, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0xa, 0x4c, 0x80}, [@feature_unit={0xf, 0x24, 0x6, 0x4, 0x2, [0xa, 0x4, 0xa8678a6695e09fe1, 0xb, 0x7]}, @sample_rate={0x9, 0x24, 0xd, 0x1, 0x3, 0xa, [0x1]}, @input_terminal={0x10, 0x24, 0x2, 0x2, 0x203, 0x6, 0xa, 0x7, 0x1, 0x7c, 0x0, 0x40}, @effect_unit={0xf, 0x24, 0x7, 0x1, 0x0, 0x3, [0x3, 0x2, 0x1, 0x3]}, @extension_unit={0xc, 0x24, 0x9, 0x2, 0x200, 0xfd, "8d8cef99a5"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x7, 0x0, 0x4, 0x2}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9b, 0x2, 0xd4, 0x6}, @as_header={0x10, 0x24, 0x1, 0x3, 0x3, 0x3, 0x1001, 0xb0, 0x8001, 0x1b}]}, {{0x9, 0x5, 0x1, 0x9, 0x258, 0x3, 0x38, 0xbf, {0x8, 0x25, 0x1, 0x80, 0x0, 0x4, 0x3ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0xab044943d67f6e8e, 0x95, 0x3, 0x5, {0x8, 0x25, 0x1, 0x2, 0x30, 0xc5}}}}}}}}]}}, &(0x7f00000014c0)={0xa, &(0x7f00000012c0)={0xa, 0x6, 0x110, 0xb3, 0x5, 0x6, 0xff, 0x1}, 0x1e, &(0x7f0000001300)={0x5, 0xf, 0x1e, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x4, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0xe7b7c170ea96049, 0x1, 0x81, 0x2, 0x40}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0xe, 0x2, 0x6}]}, 0x3, [{0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x401}}, {0xd5, &(0x7f00000013c0)=@string={0xd5, 0x3, "d30eb81713d6a8173ef0ffa473a65fd07191af85c26b6d4230829723a4a78b0ea285e72bec5310b47bb7ed4f418b1fcb3e62d5f4a309d75aa65568ce30983073c7c292f7118d3fcb749695b4eb50ea9870454af6315aabba6f94b7171e99ab7f31edbb56c37556947252895c140a8f2d6578b6a555645b80d04b6814c9b9bfb7972030fc1b2ab168bd250f5e6d342280aab3d898215ec31f408fa0b70430f5fef2cf3cf5b08c7a5cc97ab180446e357798b5ff2fdf8dbdf294f4654ce391fab296c141b850f59b52da9d93e5719421eb6005b3"}}]}) r1 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) writev(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001500), 0x40e41, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001540)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f0000001600)="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", 0xfc) (async) r6 = dup(r4) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000001580)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f00000015c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES32], 0xffe) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000001140)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/18, 0x12, 0x1, &(0x7f0000000140)=""/4096, 0x1000}, &(0x7f0000001180)=0x40) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) 2.288888775s ago: executing program 5 (id=475): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000140)=@x86={0xa, 0x4, 0x7, 0x0, 0x10001, 0x61, 0x55, 0x0, 0x0, 0x6, 0x9, 0x80, 0x0, 0x4, 0x8, 0x8, 0xf, 0x1, 0x4, '\x00', 0x6, 0x7}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001d002106000000000000004f01adb93a5bcbb7e8987937eccb3a8a0007d5"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.173219408s ago: executing program 5 (id=476): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x4801}) openat$tun(0xffffffffffffff9c, &(0x7f0000003540), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000003540), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003580)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003580)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f00000035c0)={'syzkaller0\x00'}) syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x3) (async) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x3) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000080)={0x15, 0x0, 0x0}) socket$inet(0x2, 0x2, 0x800) (async) r3 = socket$inet(0x2, 0x2, 0x800) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={r5, @broadcast, @dev={0xac, 0x14, 0x14, 0x31}}, 0xc) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000100)={0x2890bcba939eb6cf, 0x30, &(0x7f0000000000)="c420fe03ae675e18c21e9f6c0b968b0ee5113a971e3b16130ce9c52229af8be99258abdbb4bc252f2e647f5f736e76b2"}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000003680)={'sit0\x00', 0x4000}) 2.168084918s ago: executing program 5 (id=478): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r0, &(0x7f0000000140)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0xffff, @any, 0x7}, 0xe) listen(r1, 0x0) 2.158039608s ago: executing program 5 (id=480): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r0, &(0x7f0000000140)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0xffff, @any, 0x7}, 0xe) listen(r1, 0x0) (fail_nth: 1) 2.046363731s ago: executing program 5 (id=483): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000005c0)={0x0, &(0x7f0000000180)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @ro64=0x2400, 0x8}}], 0x68}) mmap(&(0x7f0000ea6000/0x4000)=nil, 0x4000, 0x8, 0x10, r1, 0x9ff7000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.919375754s ago: executing program 4 (id=484): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000001500)=0x2754, 0x4) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000240)={0x0, &(0x7f0000000000)=[@wr_crn={0x67, 0x20, {0x7, 0x7f}}, @in_dx={0x69, 0x20, {0xb59c, 0x2}}, @uexit={0x0, 0x18, 0x4}, @nested_vmresume={0x130, 0x18, 0x2}, @nested_vmresume={0x130, 0x18, 0xffffffffffffffff}, @wr_crn={0x67, 0x20, {0x4, 0x6}}, @uexit={0x0, 0x18, 0x265}, @cpuid={0x64, 0x18, {0x8, 0x55}}, @nested_vmresume={0x130, 0x18}, @cpuid={0x64, 0x18, {0x2de, 0x3}}, @wrmsr={0x65, 0x20, {0x37a, 0xe}}, @wr_crn={0x67, 0x20, {0x2, 0xfffffffffffffffa}}, @out_dx={0x6a, 0x28, {0xbb3d, 0x0, 0xa51}}, @nested_load_syzos={0x136, 0x90, {0x0, 0x1, [@nested_amd_invlpga={0x17d, 0x20, {0x60000, 0xc264}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0xb, 0x7ff, 0x1}}, @set_irq_handler={0xc8, 0x20, {0xef, 0x2}}]}}, @cpuid={0x64, 0x18, {0x2, 0x3}}], 0x218}) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000001400)={0x18, &(0x7f0000001440)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000001480), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xd01c4813, &(0x7f00000014c0)={0x2, 0x100, 0x0, 0x2, 0x0, 0x42}) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000400)={[0x5, 0x1, 0x4, 0x4, 0x2, 0x3, 0xffffff7f, 0x22, 0x1000, 0x6, 0x10, 0x4204, 0x6, 0x1, 0x2, 0x512c, 0x401, 0x3, 0x80020000, 0x2, 0x9, 0x7, 0x1, 0x0, 0x0, 0x7, 0xf, 0x4, 0x9, 0x1, 0xf, 0xd, 0x7, 0x6, 0x80, 0xf83, 0x2, 0x0, 0x2, 0x6964, 0xffffffff, 0x29, 0x20000000, 0x1, 0x5, 0x10000, 0x3, 0x8, 0x4, 0xef26, 0xfffffff8, 0x6, 0x10, 0xe9, 0x7fffffff, 0xd000000, 0x7, 0x7, 0x7, 0x6, 0x9, 0x8, 0x9, 0xe, 0x9, 0x2, 0x11, 0x55, 0x9, 0xe, 0x2, 0x4060, 0x5, 0x5, 0x1, 0x1, 0x8, 0x7fffffff, 0x2, 0x6, 0x400, 0x0, 0x2, 0x2, 0x2, 0x1000, 0x8, 0x1, 0x7, 0x6, 0x18000000, 0xb8c, 0x9, 0x9, 0xe, 0x9, 0x8, 0x4, 0xff, 0xe407, 0x7ff, 0x1, 0x9, 0x200, 0x5451, 0x1, 0x1, 0x7, 0x0, 0x6, 0x1ff, 0xcc, 0x5, 0x3, 0x9, 0x4, 0x1, 0x8, 0x1, 0x6, 0x2, 0x2, 0x9, 0x1, 0x3, 0x4, 0x42, 0x0, 0x6, 0x8, 0x3, 0x7fffffff, 0x2, 0x80, 0xd, 0x6, 0x1d2, 0x7, 0x7ff, 0xc00, 0x67, 0x9, 0xbee, 0x0, 0x1, 0xfffffff8, 0x8, 0xa, 0x5677, 0x5, 0x4, 0xa0, 0x40, 0xef5a033, 0x4, 0x3, 0xffff, 0x9, 0xb, 0x7fff, 0xfffffc98, 0x1, 0x6, 0x5, 0x3, 0x0, 0x5, 0x6, 0x1ff, 0x0, 0x6, 0xd, 0x6, 0x1, 0x3, 0x2, 0xfffffff7, 0x1ff, 0x9, 0x2, 0x80000000, 0xd884c0c, 0x6, 0x401, 0x80000000, 0xe, 0x42, 0xc, 0x0, 0x7fff, 0x1, 0x2, 0x551, 0x3, 0x8000, 0x199f, 0x9, 0xd, 0x80, 0x4, 0x47d7, 0x2cfb6b76, 0x8, 0xd, 0xffffff00, 0xfffffffa, 0x3, 0x6, 0x4, 0xb3, 0x3, 0x5, 0xb, 0x8, 0xf30d, 0x6, 0x7, 0x3, 0x8, 0x6, 0x81b7, 0x4, 0x7fff, 0x0, 0x5, 0x7, 0x4, 0x4, 0x0, 0x6, 0x3, 0x3, 0x400, 0x3, 0x9, 0x80000001, 0x8b, 0x2, 0x8, 0x1, 0x0, 0x6, 0x0, 0x1, 0x6, 0x9, 0x5, 0x7, 0x8, 0xffffffff, 0x2, 0x400, 0x9, 0x0, 0xd, 0xb9, 0x7, 0x9, 0x7ff, 0x7, 0x1, 0x4, 0x80, 0x7, 0x1d8a, 0x0, 0x1038, 0x0, 0x0, 0x50, 0xc, 0xfff, 0x5, 0x7fff, 0xffffffc0, 0x7fffffff, 0x9, 0x4, 0x7, 0x7, 0x1, 0xffff, 0x12, 0xbfbd, 0x3, 0x7, 0x9, 0x4, 0xe, 0x0, 0x400, 0x4, 0x9, 0x13, 0x0, 0x6, 0x7, 0xffff, 0x2, 0x9, 0x80000000, 0x2, 0xe0a, 0x80, 0x3, 0x6, 0x81, 0x66, 0x3, 0x8b, 0x7fff, 0x4, 0x2, 0xc, 0x7, 0x1ff, 0x0, 0x43a1, 0xf, 0xfff, 0x2, 0x7, 0x5, 0xfff, 0x0, 0x2, 0x200, 0xffffffff, 0x10, 0xe3, 0xa27, 0x4, 0x7ff, 0x5, 0x8, 0x8, 0x1ff, 0x0, 0x2, 0x6f88, 0x40, 0x9, 0x40800000, 0xfbb, 0xb, 0xaf19, 0x8, 0x91, 0xea7, 0x1, 0xffffff50, 0x8, 0x8, 0x4, 0x7, 0x9, 0x26e9, 0x5, 0x3, 0x9, 0x0, 0xffffff00, 0x0, 0x9807, 0x6550, 0xfffffffb, 0x0, 0xcf, 0x4, 0x2, 0x5, 0x5, 0xffff, 0x400, 0x51c4, 0x5, 0xed1, 0x8, 0xc85, 0x4, 0x7, 0x40, 0x0, 0xfffffff7, 0x9, 0x3, 0xed49, 0x9, 0xa31, 0xffffffff, 0x7f, 0x7, 0x401, 0x2, 0x5, 0x9, 0x9, 0x8, 0x8, 0x0, 0x4, 0x1, 0x6, 0xd, 0x27, 0x0, 0x2, 0x94d1ef72, 0x6, 0x7, 0xffff, 0x9, 0x80000001, 0x1, 0x5, 0xfffffffd, 0xba14, 0xfffffff9, 0xffff, 0x0, 0x20000, 0x7, 0x4, 0x5, 0x0, 0x3, 0x32b8, 0x848, 0x2e3, 0x401, 0x5, 0x4f, 0x6, 0x5, 0x9, 0x6, 0x8, 0x0, 0x6, 0x7fffffff, 0x9, 0xc, 0x6, 0x0, 0x3ff, 0x100, 0x7, 0x3, 0x4, 0x6, 0x8, 0x3, 0x6, 0xeaf, 0x7b6, 0xfffffff8, 0x1, 0x10, 0x39, 0x8, 0xfffffffa, 0x3, 0x7, 0x40, 0x3, 0x8, 0xf54, 0x3, 0x80000001, 0x90, 0x8, 0x2b13, 0x544, 0xfffffffd, 0x80000001, 0x4, 0x2, 0xa, 0xff, 0x7b8a, 0x9, 0x401, 0x8, 0x3, 0x3, 0x7, 0x2, 0x8d5b, 0x0, 0xc0, 0x8, 0x9, 0xfffff800, 0x401, 0xffff5b5a, 0x5, 0x10, 0x1, 0x24, 0x77, 0x1, 0xaea, 0x1, 0x7, 0x0, 0x80, 0x53, 0x5, 0x7ff, 0xfffffffd, 0x2, 0x9, 0x401, 0x7fff, 0xfffffff6, 0x4, 0x7f, 0x0, 0x8, 0x7, 0xd, 0x1c0, 0xfffffffd, 0xfffff610, 0x3, 0x1beb, 0x4, 0x9, 0x7, 0x2ec9, 0x8, 0x80, 0x3, 0xa65, 0x7, 0x7f, 0x3f, 0x7f, 0x7, 0x8, 0xfffffffd, 0x0, 0x7, 0x4, 0x1, 0x2, 0x0, 0x2, 0x1, 0x2, 0x2, 0x8, 0x78a3, 0x8, 0x1, 0x80000001, 0x1, 0x2, 0x8, 0x0, 0x1, 0x5, 0x1400000, 0x2, 0xfffffffa, 0x0, 0x0, 0x0, 0x10000, 0x10000, 0x5d4, 0x1, 0x7, 0x2, 0x3, 0xd, 0x0, 0x9, 0xc, 0xffff, 0x4e0, 0x4, 0x8, 0x1, 0x7, 0x100, 0x380, 0x330, 0x2, 0x0, 0x6, 0x4, 0xea0, 0x200, 0x7, 0x5, 0x8, 0xb, 0x0, 0x0, 0x8, 0x3ff, 0x7ff, 0xfffffffc, 0x7, 0x9, 0x5, 0x8, 0x0, 0x5, 0x3ff, 0xfff, 0x4, 0xc5, 0x10001, 0x7, 0x6, 0x8, 0x4, 0xffffff80, 0x8fb1, 0x5, 0x8, 0x8, 0x10001, 0xebd6, 0x2, 0xb, 0x5, 0xd21, 0x1, 0x0, 0x9, 0x6, 0x1ff, 0x1, 0x8000, 0x7, 0x5, 0x5, 0xb, 0x8, 0x90000000, 0x40, 0x3, 0x80, 0x0, 0x72db, 0x5, 0x6, 0x3, 0xffffffff, 0xfffffff9, 0x7, 0xffff, 0x1, 0x7, 0x8, 0xffff, 0x74f, 0xeb77, 0x6, 0x1, 0x2, 0x5, 0xf49d, 0x80000000, 0x0, 0xff, 0x4, 0x0, 0x3, 0x6, 0x3, 0x1, 0x6, 0x8000, 0x0, 0x7, 0x2af2, 0x5, 0xe6498b2, 0xd, 0x20472238, 0x7fffffff, 0x5, 0x7, 0x1, 0x1, 0x6, 0x7, 0xf, 0x3ff, 0x0, 0xfff, 0x8, 0x9, 0x9, 0xfffffffb, 0x5, 0x8000, 0x0, 0x10, 0x3, 0xffff0001, 0x4, 0x0, 0xd, 0xb, 0x2, 0x5, 0xa83, 0x0, 0xf8e, 0x38e0a333, 0x7, 0x0, 0x2e7, 0x2, 0x6, 0x5, 0xfffffffd, 0x8, 0x7, 0x8a42, 0x4e, 0x4b, 0x9, 0x5, 0x5, 0x0, 0x7, 0x4, 0x14c, 0x10, 0xe7b, 0x1, 0x1, 0x9, 0x800, 0x30a, 0x7ff, 0x200, 0x5, 0x8, 0x0, 0x7fff, 0x1, 0x5, 0x7f, 0xf557, 0x8, 0x80000000, 0x2, 0x93, 0x4, 0x7, 0xfff, 0x8, 0x8, 0x8001, 0x6, 0x1000, 0x4, 0x4, 0xd3, 0x5, 0x1, 0x4ee, 0xbdb, 0x6, 0x7, 0x9, 0x200, 0x75, 0x4f, 0x63, 0xf415, 0x1d, 0x3, 0x3, 0x3, 0x5, 0x6, 0x0, 0x7, 0x7, 0xb6, 0x8, 0x4, 0x0, 0x251, 0x8001, 0x54c, 0x9d1, 0xfffffffb, 0x2aa5, 0x9, 0x2, 0x0, 0x7, 0x6, 0x1, 0x9, 0x7, 0x3ff, 0x3, 0x80, 0x5b9a0, 0x80000001, 0x1, 0x7, 0xaca5, 0x0, 0xbe, 0x9, 0xca, 0x6, 0x450, 0x0, 0xfffffffd, 0x7, 0xfffffffc, 0x9, 0x7, 0x3, 0xb, 0x8, 0x3, 0x0, 0x0, 0x0, 0xfffffffa, 0x4, 0x80000001, 0x3, 0x7fffffff, 0x90ef, 0x0, 0xc, 0x9, 0x9, 0x2, 0x9, 0x8, 0x7, 0xfffffff8, 0x1, 0x2, 0xa, 0x6, 0xfffff537, 0x9, 0x5, 0x7, 0x2, 0x1, 0x7, 0x5, 0xb952, 0x5, 0x2, 0xd1d9, 0x8226, 0x4, 0x101, 0xf6, 0x7, 0x7, 0x5, 0x0, 0x0, 0x0, 0x9, 0x33, 0xffc000, 0x19, 0xa, 0xa4c8, 0x81, 0xa09, 0x8000, 0x5, 0x400, 0x6, 0x9, 0x97e, 0x7, 0x81, 0x6, 0x8, 0x100000, 0x80000000, 0x3, 0xffffffff, 0x9, 0x4, 0x0, 0x6, 0x3, 0x101, 0x1, 0x7, 0xa, 0xfffff184, 0x3, 0xb, 0xf, 0x4, 0x6, 0x8, 0x80, 0x3, 0x3ff, 0x2, 0x3, 0x80000000, 0x80000001, 0x7, 0xffff, 0x6, 0x1, 0x8, 0x100, 0x619f2ec2, 0x0, 0xe0dc, 0x4, 0x5, 0xa9e9, 0x2, 0x24, 0x2, 0x7, 0xfffffff7, 0x2b, 0x4, 0x1, 0x0, 0xffffffff, 0x8, 0x9, 0x5, 0x3a, 0x4, 0x4, 0x1, 0x7, 0x1, 0xb75, 0xd, 0x8, 0x4, 0x7, 0xdb3, 0x0, 0x6, 0x2, 0x4, 0x0, 0x4, 0x9, 0x7, 0x2, 0xfffffffc, 0x12, 0x6, 0x2cd6, 0x4, 0xffffffff, 0xf, 0x6, 0x5, 0x1000, 0xfffffff9, 0x2f13, 0x10001, 0xc1fe, 0x1, 0x0, 0x4, 0x6, 0x101, 0x2, 0x7, 0x7, 0x6, 0x10001, 0x3ca4, 0x1, 0xe2, 0x22a, 0x91d, 0x7, 0x8001, 0x401, 0x9, 0x252, 0x0, 0xfffffffb, 0x506, 0x31a6, 0x75, 0xfffffc01, 0x40, 0x80000001, 0x79, 0xdaf9, 0x5, 0x0, 0x2, 0xfff, 0x0, 0x60, 0x4, 0xa, 0x101, 0x8, 0x8, 0x7ff, 0x8, 0x8, 0xfffff6e0, 0xffffc351]}) r5 = socket(0x10, 0x3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_usb_connect$uac2(0x1, 0xa9, &(0x7f0000001540)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x9e8, 0x62, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x3, 0x1, 0x4a, 0x0, 0x3, {0x8, 0xb, 0x2, 0x0, 0x1, 0x0, 0x20, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x0, 0x9, 0xf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4, 0x8, 0x3f, {0x8, 0x25, 0x1, 0x0, 0x33, 0x2, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x4, 0x9, 0x6, "a7"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x9fbe, 0x1, 0x3}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x3, 0x6, 0x80, "2ecee0"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0xbe, 0x8, 0x91, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x5, 0x5, 0x3, {0x8, 0x25, 0x1, 0x3, 0x33, 0x1, 0x8}}}}}}}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x250, 0x9, 0xb, 0x3, 0x0, 0x9}, 0x5, &(0x7f0000001640)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0x464}}]}) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000300)={0x2, 0x0, [{0x4b564d07, 0x0, 0x2}, {0xbcb, 0x0, 0xda5a}]}) ioprio_get$pid(0x1, 0xffffffffffffffff) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000280)=0x800001, 0x4) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @private2, @private2, 0x4, 0x7ff, 0x3a1, 0x500, 0x80, 0x200000}) 1.710573149s ago: executing program 5 (id=486): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000b855000040ac0529020000000000010902240001000000010904000c8203000000092110800001221800090581030500fd"], 0x0) (async) r1 = socket$inet6(0xa, 0x3, 0xff) r2 = dup2(r1, r1) (async) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x2]}, 0x8, 0x80000) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @local}, 0x1c) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0) 1.197439421s ago: executing program 4 (id=487): modify_ldt$write(0x1, 0x0, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000003c0), 0x82084, 0x0) setresuid(0xee00, 0xee00, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000", @ANYRES8, @ANYBLOB="0d782dbd7000fcdbdf251100000040000280040004002c00038008000100000001000800020007000000080002000000002008000200008000000800020010000000080002000300000004000400200004801c0007800800010006000000080001"], 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x4008800) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002dbd7000fddb0800010000"], 0x2c}, 0x1, 0x0, 0x0, 0x200280c1}, 0x4000001) setns(0xc9, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x80000001}}}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x2000c080) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r3, 0x203, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4004885) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) fspick(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x8) r4 = syz_open_procfs$pagemap(0x0, &(0x7f00000004c0)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000500)={0x60, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xfffffffffffffffe, 0x0, 0xfffffc76, 0xfffffffffffffffe, 0x2f, 0x62, 0x18, 0x20}) write$input_event(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000580), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000005c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, &(0x7f0000000600)) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/keys\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) write$uinput_user_dev(r6, &(0x7f00000008c0)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffe}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0xa, 0x3c1b, 0x1, 0x24, 0x800000d, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0xfffffff9, 0x5, 0x6, 0x8, 0x9b, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0x3, 0xaff, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x3, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x3, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x7, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x1, 0xb, 0x4, 0x9, 0x4, 0xf, 0xffff8001, 0x47, 0x31f3, 0x1, 0xfe000000, 0x8, 0x202, 0x4, 0x5, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x0, 0x2, 0x5, 0x8, 0x4, 0x5, 0xffffffff, 0x4, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4004, 0xffffff11, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x3, 0xa9, 0x5, 0x401, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x40000001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x9a09, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x2, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x9, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0x5, 0x1, 0x78b, 0x81, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x1, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x0, 0x100, 0x9602, 0x7, 0xaf, 0x6fcb, 0x6, 0x1, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1e, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3440, 0xfff]}, 0x45c) 1.183464002s ago: executing program 4 (id=488): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r0, &(0x7f0000000140)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) r1 = accept4$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @none}, &(0x7f0000000100)=0xe, 0x80000) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000001c0)=0x2, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040)={0xb, 0x5, 0xa66f, 0x9, 0xae}, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r4, 0x29, 0x50, 0x0, &(0x7f0000000080)) bind$bt_l2cap(r2, &(0x7f0000000180)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7}, 0xe) listen(r2, 0x0) 1.123793263s ago: executing program 4 (id=489): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./mnt\x00', 0x1ff) (async) mount(&(0x7f00000002c0)=@filename='./dev/sda1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='ext4\x00', 0x8410, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./debug\x00', 0x1ff) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x3b00, 0x0, 0x0) (async) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x18102, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='debugfs\x00', 0x20, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000440)=', 1 ', 0x5) (async) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000480)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) sched_setscheduler(r1, 0x0, &(0x7f0000000500)=0xa6) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f00000005c0)='devtmpfs\x00', 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x1ff) mount(&(0x7f0000000640)=@filename='./dev/sda1\x00', &(0x7f0000000680)='./mnt\x00', &(0x7f00000006c0)='ext4\x00', 0x8410, 0x0) (async) chdir(&(0x7f0000000700)='./mnt\x00') (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000780)=@v1={0x0, @aes256, 0x4, @desc2}) (async) chdir(&(0x7f00000007c0)='./mnt\x00') (async) capset(&(0x7f0000000800)={0x20080522}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./mnt\x00', 0x0, 0x21) syz_usb_connect$uac2(0x5, 0xa2, &(0x7f00000008c0)=ANY=[], &(0x7f0000000900)={0x0, 0x0, 0xffffff03, 0x0}) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a80)=""/171, 0xab}, {&(0x7f0000000b40)=""/211, 0xd3}, {&(0x7f0000000c40)=""/44, 0x2c}, {&(0x7f0000000c80)=""/5, 0x5}, {0x0}, {&(0x7f0000000cc0)=""/7, 0x7}, {0x0}], 0x7, &(0x7f0000000d00)=""/213, 0xd5}, 0xc1e3}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/217, 0xd9}, 0xfffffffe}, {{&(0x7f0000000f00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, &(0x7f0000000f80)=""/230, 0xe6}, 0x800}], 0x3, 0x20, &(0x7f0000001080)={0x0, 0x3938700}) (async) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f00000010c0)=@v2={0x2, @aes128, 0x10, '\x00', @c}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) 933.369878ms ago: executing program 2 (id=490): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r0, &(0x7f0000000140)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0xffff, @any, 0x7}, 0xe) listen(r1, 0x0) 922.403688ms ago: executing program 2 (id=491): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) socket$inet(0x2, 0x1, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$system_posix_acl(&(0x7f0000000840)='./file0/file1\x00', &(0x7f0000000880)='system.posix_acl_access\x00', &(0x7f00000008c0)={{}, {}, [], {0x4, 0x1}, [], {0x10, 0x2}, {0x20, 0x3}}, 0x24, 0x3) 905.184618ms ago: executing program 2 (id=492): capset(&(0x7f0000000880)={0x20080522}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x2000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x1041) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) 834.4177ms ago: executing program 2 (id=493): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0xfffffffc, @empty, 0x4}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000880)=[{&(0x7f00000008c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000100000008000f0fffeffe809005300fff5dd00000010000100070c100000000000244e0000", 0x58}], 0x1) capset(&(0x7f0000000940)={0x20080522}, &(0x7f0000000980)={0x0, 0x9, 0x5, 0x81, 0xffffffff}) pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7, 0x9) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000180)='pimreg0\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'vxcan1\x00', 0x200}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r1, &(0x7f00000007c0)=@sco={0x1f, @none}, &(0x7f0000000840)=0x80) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) r10 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000400), 0x8000, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000440)={'tunl0\x00', @multicast}) syz_io_uring_setup(0x41f4, &(0x7f0000000280)={0x0, 0xf46f, 0x4000, 0x3, 0x3c3, 0x0, r8}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, 0x0, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) 581.783156ms ago: executing program 4 (id=494): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000ac0)='./trace\x00', &(0x7f0000000b00)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./trace/events/sched/sched_switch/trigger\x00', 0x80b02, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x204031, 0xffffffffffffffff, 0xf39fb000) write(r1, &(0x7f0000000b80)='h', 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000380), 0x140, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000a40)={0x2b, 0x5, 0x12, 0x2, 0x8, 0x1000, 0x8, 0x149}) socket$nl_audit(0x10, 0x3, 0x9) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406c256d00000000000001090224000100000000090400000103000000092100000001220500090581030e5003"], 0x0) r4 = geteuid() setuid(r4) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000100)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="00dc6b"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000180)={0xfffffe82, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @lang_id={0x0, 0x3, 0x340a}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x20, 0xc, 0xaf, {0xaf, 0xb, "5d483b49fa495dd386c25cd4be59a44664a9e93212551aefd9acd1513b1c0a3be22935c6d5f4e3f410cfe9e915d453544bde50dfe4dbb7413bcde31ac73b101cbd5fbc0a1caf682ca02549e0a91d4ffa3b90da1203872eea4152279df132934ba56bd667f2b41806340dd0906429f4bce4f6d08cd1daa294ae9587d299ac7bd45604331b9d6ea6377b716b1d688f6351d1053c8842b513369697c004c27145895daacf0f6760948a8c71d5d7ee"}}, &(0x7f0000000a80)=ANY=[@ANYRESOCT=r2], &(0x7f0000000a00)={0x0, 0xf, 0x27, {0x5, 0xf, 0x27, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x8, 0xff}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x3, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x29, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x5, 0x5, 0x4}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x8, 0x3, 0x0, "e857f24c", "a3ee5c77"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x60, 0x18, 0x6, 0x6, 0x8, 0x1}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000480)={0x40, 0x31, 0x5e, "bc5de4605fc6e5655ec1b5f93b9f781bd57afe46d21cdeff5ce446d3c48cc007542c78ba2e8e06fad755ee19ae3034eaad124ab575ff2b035ed2de74a0abd6e8fed2f40757ffa3140fc04c673aac4b5f4a1ae671d9a5e1458e7487e3e09c"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x20, 0x4}}, &(0x7f0000000600)={0x40, 0x7, 0x2}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000680)={0x40, 0xb, 0x2, "9f88"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000700)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, &(0x7f0000000780)={0x40, 0x19, 0x2, '@0'}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x9781}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0xf0}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io(r3, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000980), 0x2, 0x2002) write$evdev(r5, &(0x7f00000009c0)=[{{0x77359400}, 0x11, 0x3, 0x5}], 0x18) syz_usb_control_io(r3, &(0x7f0000000200)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0xc, @string={0xc, 0x3, "09a9842f3f87e8f4783c"}}, 0x0, 0x0, 0x0}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r6 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000058000/0x4000)=nil, 0x4000}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80), 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000d80)={0x5}) syz_fuse_handle_req(r7, &(0x7f0000000dc0)="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", 0x2000, &(0x7f0000002dc0)={&(0x7f0000002e80)={0x50, 0x0, 0x200000000000, {0x7, 0x29, 0x4, 0xa100489, 0xc9f, 0xfff, 0xd, 0x8, 0x0, 0x0, 0x10, 0x400}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 95.351578ms ago: executing program 3 (id=495): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="120110010000004058041350400001020301090224000101ff50090904000d210301010409210400770122b10f090581030002030864b1d70749227eb60c073e18803e3e05f271352108e12a0cd77cf53e7281aa619ff1a2e7a9d09570740f3c911b2d0b73b670e17509bc8a99d2cd52d7ad965142721cf7a34412cc1d2ae3c3004d13b2491bbf5cb4"], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./cfg\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./cfg\x00', &(0x7f0000000a40)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0x1ff) syz_usb_control_io(r0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000ac0)='.\x00', &(0x7f0000000b00), 0x0, &(0x7f0000000b40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x89}}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000ac0)='.\x00', &(0x7f0000000b00), 0x0, &(0x7f0000000b40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x89}}]}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0x1, 0x4}, 0x6) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x60302, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) close(0xffffffffffffffff) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x80}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1e000000, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x3, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x4], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffbfffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2, 0x0, 0x2e2e778e, 0x0, 0x0, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe08, 0x10, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000340)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1e000000, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x3, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x4], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffbfffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2, 0x0, 0x2e2e778e, 0x0, 0x0, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe08, 0x10, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f00000007c0)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f00000007c0)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000140)={'syzkaller0\x00'}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000140)={'syzkaller0\x00'}) syz_usb_connect$uac1(0x5, 0x72, &(0x7f00000008c0)=ANY=[@ANYBLOB="1201500200000040732b1b00400001020301090260000301832000090400efff000100000a240132000a0002010209040100000102000009040101010102000009050109ff0309400507090402010101020000090582090004020f0007250104348d06"], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) 18.13074ms ago: executing program 4 (id=496): listxattr(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xffffffff7ffffffd, 0x160862) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x80201, 0x11) mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0x14, 0x0, &(0x7f0000000200)) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000240)="17000000020001000003d68c5ee17688a2003308020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a1100f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000340)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x100, 0x0, &(0x7f0000000400)=@reply}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = fsopen(&(0x7f0000000500)='fuse\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x8, 0x0, 0x0, 0x0) read(r5, &(0x7f0000000540)=""/137, 0x89) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4001, 0x0) close_range(r0, 0xffffffffffffffff, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./proc\x00', &(0x7f0000000680)='proc\x00', 0x4000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000700)='27', 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(r7, 0x4024700a, &(0x7f0000000740)={0x2e, 0x1e, 0x4, 0x2, 0x3, 0xa9, 0x5, 0x2, 0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) 16.88789ms ago: executing program 2 (id=497): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r0, &(0x7f0000000140)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./trace/uprobe_events\x00', 0x2, 0x0) write(r2, &(0x7f0000000040)='p:mygrou-/myevent ./dummy:0', 0x1b) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000080)=0x4) write$cgroup_int(r2, &(0x7f00000000c0)=0xb4, 0x12) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0xffff, @any, 0x7}, 0xe) listen(r1, 0x0) 0s ago: executing program 2 (id=498): pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendfile(r1, r0, 0x0, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) bind$bt_l2cap(r2, &(0x7f0000000180)={0x1f, 0xd3, @any, 0x3}, 0xe) listen(r2, 0xfffffff9) ioctl$sock_TIOCOUTQ(r2, 0x5411, 0x0) syz_usb_connect$uac2(0x0, 0xe0, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x763, 0x1015, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce, 0x3, 0x1, 0x3, 0x30, 0x2, {0x8, 0xb, 0x1, 0x1, 0x1, 0x7, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xa3, 0x9, 0x1c, 0x1}, [@feature_unit={0x7, 0x24, 0x6, 0xfe, 0x5, [0x5]}, @output_terminal={0xc, 0x24, 0x3, 0x5, 0x300, 0x7, 0x4, 0x6, 0x6386, 0xb}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x0, 0x4, 0x3, 0x9a}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x68}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x7, 0x4, 0xe8, 0x2, "f59a521c8221"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x1, 0xf1, 0x1}, @as_header={0x10, 0x24, 0x1, 0x1, 0x2, 0x2, 0x1, 0x1, 0x100, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x40, 0x1, 0x6, {0x8, 0x25, 0x1, 0x2, 0x3c, 0xab, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x72, 0xa, 0xc, '5'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x36, 0x0, 0x1e, 0x0, 0x9}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xf, 0x4, 0x0, 0x3, "cd4c"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0x2, 0x5, {0x8, 0x25, 0x1, 0x3, 0xf, 0xd, 0x5}}}}}}}}]}}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wake_lock', 0x10500, 0x10) syz_ublk_setup_io_uring(0x22dc, &(0x7f0000000300)={0x0, 0xcb3d, 0x400, 0x1, 0x1c8, 0x0, r3}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f00000002c0)) kernel console output (not intermixed with test programs): failslab+0xac/0x100 [ 35.339584][ T323] __kmalloc_noprof+0x69/0x510 [ 35.339667][ T323] ? ovl_lookup_layer+0x355/0x420 [ 35.339731][ T323] ? ovl_stack_alloc+0x31/0xb0 [ 35.339802][ T323] ovl_stack_alloc+0x31/0xb0 [ 35.339873][ T323] ovl_lookup+0x596/0x1d20 [ 35.339929][ T323] ? __d_lookup_rcu+0x334/0x3c0 [ 35.340031][ T323] ? __cfi_ovl_lookup+0x10/0x10 [ 35.340095][ T323] ? __cfi_d_alloc_parallel+0x10/0x10 [ 35.340185][ T323] ? __kasan_check_write+0x18/0x20 [ 35.340268][ T323] ? rwsem_read_trylock+0x275/0x5a0 [ 35.340342][ T323] ? downgrade_write+0x470/0x470 [ 35.340437][ T323] __lookup_slow+0x2e5/0x420 [ 35.340512][ T323] ? lookup_one_len+0x300/0x300 [ 35.340552][ T323] ? down_read+0x7f/0xe0 [ 35.340638][ T323] lookup_slow+0x57/0x80 [ 35.340702][ T323] link_path_walk+0x991/0xeb0 [ 35.340787][ T323] path_openat+0x298/0x35a0 [ 35.340859][ T323] ? schedule+0xc5/0x240 [ 35.340920][ T323] ? kasan_save_alloc_info+0x3a/0x50 [ 35.340994][ T323] ? __kasan_slab_alloc+0x73/0x90 [ 35.341047][ T323] ? getname+0x1b/0x30 [ 35.341145][ T323] ? x64_sys_call+0xe69/0x2ee0 [ 35.341207][ T323] ? do_syscall_64+0x57/0xf0 [ 35.341264][ T323] ? do_filp_open+0x440/0x440 [ 35.341336][ T323] do_filp_open+0x1f2/0x440 [ 35.341399][ T323] ? __cfi_do_filp_open+0x10/0x10 [ 35.341472][ T323] ? alloc_fd+0x4c1/0x570 [ 35.341571][ T323] do_sys_openat2+0x134/0x1d0 [ 35.341637][ T323] ? fput+0x1a4/0x230 [ 35.341694][ T323] ? do_sys_open+0x100/0x100 [ 35.341781][ T323] __x64_sys_openat+0x13a/0x170 [ 35.341876][ T323] x64_sys_call+0xe69/0x2ee0 [ 35.341939][ T323] do_syscall_64+0x57/0xf0 [ 35.341992][ T323] ? clear_bhb_loop+0x50/0xa0 [ 35.342083][ T323] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.342155][ T323] RIP: 0033:0x7f54f319f559 [ 35.342209][ T323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.342261][ T323] RSP: 002b:00007f54f4105028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 35.342344][ T323] RAX: ffffffffffffffda RBX: 00007f54f3425fa0 RCX: 00007f54f319f559 [ 35.342395][ T323] RDX: 0000000000000002 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 35.342438][ T323] RBP: 00007f54f3236b20 R08: 0000000000000000 R09: 0000000000000000 [ 35.342479][ T323] R10: 0000000000000090 R11: 0000000000000246 R12: 0000000000000000 [ 35.342513][ T323] R13: 00007f54f3426038 R14: 00007f54f3425fa0 R15: 00007ffdc15dd218 [ 35.342565][ T323] [ 35.364817][ T323] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 35.515561][ T327] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 35.776010][ T12] bridge_slave_1: left allmulticast mode [ 35.781715][ T12] bridge_slave_1: left promiscuous mode [ 35.787581][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.796145][ T12] bridge_slave_0: left allmulticast mode [ 35.801899][ T12] bridge_slave_0: left promiscuous mode [ 35.807978][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.861022][ T336] FAULT_INJECTION: forcing a failure. [ 35.861022][ T336] name fail_futex, interval 1, probability 0, space 0, times 1 [ 35.874974][ T336] CPU: 0 UID: 0 PID: 336 Comm: syz.3.11 Not tainted syzkaller #0 f4dc25654f8255e5780388d900d0b326847aed68 [ 35.875012][ T336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 35.875028][ T336] Call Trace: [ 35.875035][ T336] [ 35.875045][ T336] __dump_stack+0x21/0x30 [ 35.875089][ T336] dump_stack_lvl+0x140/0x1c0 [ 35.875126][ T336] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.875164][ T336] dump_stack+0x19/0x20 [ 35.875198][ T336] should_fail_ex+0x3c2/0x510 [ 35.875220][ T336] should_fail+0xf/0x20 [ 35.875240][ T336] get_futex_key+0x178/0x940 [ 35.875261][ T336] ? ttwu_queue_wakelist+0x323/0x520 [ 35.875291][ T336] ? __cfi_get_futex_key+0x10/0x10 [ 35.875312][ T336] ? __smp_call_single_queue+0xd5/0x380 [ 35.875345][ T336] ? ttwu_do_activate+0x620/0x620 [ 35.875374][ T336] ? ttwu_queue_wakelist+0x323/0x520 [ 35.875404][ T336] futex_wait_setup+0xae/0x260 [ 35.875432][ T336] ? __cfi_futex_wait_setup+0x10/0x10 [ 35.875463][ T336] ? __asan_memcpy+0x5a/0x80 [ 35.875495][ T336] __futex_wait+0x12c/0x3d0 [ 35.875524][ T336] ? __cfi___futex_wait+0x10/0x10 [ 35.875566][ T336] ? __cfi_futex_wake_mark+0x10/0x10 [ 35.875596][ T336] ? futex_wake+0x666/0x950 [ 35.875625][ T336] futex_wait+0x128/0x7c0 [ 35.875655][ T336] ? __cfi_futex_wait+0x10/0x10 [ 35.875687][ T336] ? mmap_write_unlock+0x8e/0xe0 [ 35.875714][ T336] ? do_mprotect_pkey+0xbf0/0xe50 [ 35.875742][ T336] do_futex+0x32a/0x510 [ 35.875767][ T336] ? __cfi_do_futex+0x10/0x10 [ 35.875789][ T336] ? mutex_unlock+0x90/0x240 [ 35.875819][ T336] __se_sys_futex+0x13c/0x320 [ 35.875844][ T336] ? fput+0x1a4/0x230 [ 35.875870][ T336] ? __x64_sys_futex+0x110/0x110 [ 35.875897][ T336] __x64_sys_futex+0xe9/0x110 [ 35.875922][ T336] x64_sys_call+0x227f/0x2ee0 [ 35.875946][ T336] do_syscall_64+0x57/0xf0 [ 35.875968][ T336] ? clear_bhb_loop+0x50/0xa0 [ 35.875998][ T336] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.876027][ T336] RIP: 0033:0x7fb38e79f559 [ 35.876047][ T336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.876066][ T336] RSP: 002b:00007fb38f58f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 35.876092][ T336] RAX: ffffffffffffffda RBX: 00007fb38ea25fa8 RCX: 00007fb38e79f559 [ 35.876111][ T336] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb38ea25fa8 [ 35.876127][ T336] RBP: 00007fb38ea25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 35.876142][ T336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.876156][ T336] R13: 00007fb38ea26038 R14: 00007ffebe6a0660 R15: 00007ffebe6a0748 [ 35.876176][ T336] [ 36.189690][ T339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1042 sclass=netlink_route_socket pid=339 comm=syz.3.12 [ 36.211703][ T12] veth1_macvtap: left promiscuous mode [ 36.217456][ T12] veth0_vlan: left promiscuous mode [ 36.223373][ T314] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 36.333357][ T337] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.340447][ T337] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.354238][ T337] bridge_slave_0: entered allmulticast mode [ 36.360634][ T337] bridge_slave_0: entered promiscuous mode [ 36.367569][ T337] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.374727][ T337] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.381989][ T337] bridge_slave_1: entered allmulticast mode [ 36.394682][ T337] bridge_slave_1: entered promiscuous mode [ 36.400969][ T314] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 36.411833][ T314] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.432192][ T314] usb 3-1: config 0 interface 0 has no altsetting 0 [ 36.440348][ T339] ptp ptp0: new virtual clock ptp1 [ 36.443454][ T314] usb 3-1: New USB device found, idVendor=056a, idProduct=00c0, bcdDevice= 0.00 [ 36.455978][ T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.470054][ T339] ptp ptp0: new virtual clock ptp2 [ 36.474051][ T314] usb 3-1: config 0 descriptor?? [ 36.480807][ T332] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 36.514500][ T339] ptp ptp0: new virtual clock ptp3 [ 36.521965][ T339] ptp ptp0: new virtual clock ptp4 [ 36.533926][ T339] ptp ptp0: new virtual clock ptp5 [ 36.539566][ T339] ptp ptp0: guarantee physical clock free running [ 36.570211][ T337] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.577309][ T337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.584658][ T337] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.591716][ T337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.619830][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.627629][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.639257][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.646379][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.664751][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.671829][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.695114][ T337] veth0_vlan: entered promiscuous mode [ 36.707638][ T337] veth1_macvtap: entered promiscuous mode [ 36.798760][ T365] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 36.807586][ T365] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 36.827719][ T377] random: crng reseeded on system resumption [ 36.901315][ T332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.909987][ T332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.923253][ T314] wacom 0003:056A:00C0.0001: unknown main item tag 0x2 [ 36.931348][ T314] wacom 0003:056A:00C0.0001: unknown main item tag 0x0 [ 36.938565][ T314] wacom 0003:056A:00C0.0001: unknown main item tag 0x0 [ 36.950588][ T314] wacom 0003:056A:00C0.0001: hidraw0: USB HID v0.00 Keyboard [HID 056a:00c0] on usb-dummy_hcd.2-1/input0 [ 37.129504][ T332] overlay: filesystem on ./file0 not supported as upperdir [ 37.139938][ T332] fuse: Bad value for 'fd' [ 37.146532][ T332] overlayfs: failed to verify upper (1/file1, ino=24, err=-116) [ 37.154485][ T332] overlayfs: failed to verify index dir 'upper' xattr [ 37.163338][ T332] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 37.178952][ T314] usb 3-1: USB disconnect, device number 2 [ 37.671344][ T36] kauditd_printk_skb: 75 callbacks suppressed [ 37.671384][ T36] audit: type=1400 audit(1792538170.670:149): avc: denied { unmount } for pid=337 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 37.703441][ T36] audit: type=1400 audit(1792538170.680:150): avc: denied { bind } for pid=398 comm="syz.4.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.734426][ T36] audit: type=1400 audit(1792538170.740:151): avc: denied { read write } for pid=400 comm="syz.2.20" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.760310][ T36] audit: type=1400 audit(1792538170.740:152): avc: denied { open } for pid=400 comm="syz.2.20" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.784335][ T36] audit: type=1400 audit(1792538170.770:153): avc: denied { ioctl } for pid=400 comm="syz.2.20" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.820721][ T405] FAULT_INJECTION: forcing a failure. [ 37.820721][ T405] name fail_futex, interval 1, probability 0, space 0, times 0 [ 37.834607][ T405] CPU: 0 UID: 0 PID: 405 Comm: syz.2.22 Not tainted syzkaller #0 f4dc25654f8255e5780388d900d0b326847aed68 [ 37.834642][ T405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 37.834659][ T405] Call Trace: [ 37.834667][ T405] [ 37.834682][ T405] __dump_stack+0x21/0x30 [ 37.834712][ T405] dump_stack_lvl+0x140/0x1c0 [ 37.834737][ T405] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.834764][ T405] dump_stack+0x19/0x20 [ 37.834788][ T405] should_fail_ex+0x3c2/0x510 [ 37.834805][ T405] should_fail+0xf/0x20 [ 37.834819][ T405] get_futex_key+0x178/0x940 [ 37.834834][ T405] ? __cfi_change_protection+0x10/0x10 [ 37.834852][ T405] ? __cfi_get_futex_key+0x10/0x10 [ 37.834867][ T405] ? __cfi_flush_tlb_func+0x10/0x10 [ 37.834890][ T405] futex_wake+0x150/0x950 [ 37.834911][ T405] ? __cfi_futex_wake+0x10/0x10 [ 37.834931][ T405] ? up_write+0x66/0x280 [ 37.834950][ T405] ? mmap_write_unlock+0x8e/0xe0 [ 37.834970][ T405] ? do_mprotect_pkey+0xbf0/0xe50 [ 37.834988][ T405] do_futex+0x37d/0x510 [ 37.835005][ T405] ? __cfi_do_futex+0x10/0x10 [ 37.835020][ T405] ? mutex_unlock+0x90/0x240 [ 37.835041][ T405] __se_sys_futex+0x13c/0x320 [ 37.835057][ T405] ? fput+0x1a4/0x230 [ 37.835074][ T405] ? __x64_sys_futex+0x110/0x110 [ 37.835091][ T405] ? __cfi_ksys_write+0x10/0x10 [ 37.835115][ T405] __x64_sys_futex+0xe9/0x110 [ 37.835132][ T405] x64_sys_call+0x227f/0x2ee0 [ 37.835149][ T405] do_syscall_64+0x57/0xf0 [ 37.835163][ T405] ? clear_bhb_loop+0x50/0xa0 [ 37.835184][ T405] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.835204][ T405] RIP: 0033:0x7f401d39f559 [ 37.835218][ T405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.835231][ T405] RSP: 002b:00007f401e19e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 37.835248][ T405] RAX: ffffffffffffffda RBX: 00007f401d625fa8 RCX: 00007f401d39f559 [ 37.835261][ T405] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f401d625fac [ 37.835271][ T405] RBP: 00007f401d625fa0 R08: 4000000000000000 R09: 0000000000000000 [ 37.835283][ T405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.835292][ T405] R13: 00007f401d626038 R14: 00007ffeaa5784d0 R15: 00007ffeaa5785b8 [ 37.835307][ T405] [ 37.837044][ T403] FAULT_INJECTION: forcing a failure. [ 37.837044][ T403] name failslab, interval 1, probability 0, space 0, times 0 [ 37.893250][ T406] erofs: (device loop1): erofs_read_superblock: cannot find valid erofs superblock [ 37.907367][ T403] CPU: 1 UID: 0 PID: 403 Comm: syz.1.21 Not tainted syzkaller #0 f4dc25654f8255e5780388d900d0b326847aed68 [ 37.907458][ T403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 37.907504][ T403] Call Trace: [ 37.907535][ T403] [ 37.907571][ T403] __dump_stack+0x21/0x30 [ 37.907683][ T403] dump_stack_lvl+0x140/0x1c0 [ 37.907792][ T403] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.907893][ T403] ? ovl_lookup_single+0x692/0xb20 [ 37.907967][ T403] dump_stack+0x19/0x20 [ 37.908051][ T403] should_fail_ex+0x3c2/0x510 [ 37.908113][ T403] ? ovl_stack_alloc+0x31/0xb0 [ 37.908179][ T403] should_failslab+0xac/0x100 [ 37.908250][ T403] __kmalloc_noprof+0x69/0x510 [ 37.908333][ T403] ? ovl_lookup_layer+0x355/0x420 [ 37.908397][ T403] ? ovl_stack_alloc+0x31/0xb0 [ 37.908458][ T403] ovl_stack_alloc+0x31/0xb0 [ 37.908528][ T403] ovl_lookup+0x596/0x1d20 [ 37.908591][ T403] ? __d_lookup_rcu+0x334/0x3c0 [ 37.908686][ T403] ? __cfi_ovl_lookup+0x10/0x10 [ 37.908757][ T403] ? __cfi_d_alloc_parallel+0x10/0x10 [ 37.908856][ T403] ? __kasan_check_write+0x18/0x20 [ 37.908974][ T403] ? rwsem_read_trylock+0x275/0x5a0 [ 37.909055][ T403] ? downgrade_write+0x470/0x470 [ 37.909122][ T403] __lookup_slow+0x2e5/0x420 [ 37.909185][ T403] ? lookup_one_len+0x300/0x300 [ 37.909245][ T403] ? down_read+0x7f/0xe0 [ 37.909328][ T403] lookup_slow+0x57/0x80 [ 37.909389][ T403] link_path_walk+0x991/0xeb0 [ 37.909477][ T403] path_openat+0x298/0x35a0 [ 37.909543][ T403] ? kasan_save_alloc_info+0x3a/0x50 [ 37.909623][ T403] ? __kasan_slab_alloc+0x73/0x90 [ 37.909678][ T403] ? getname+0x1b/0x30 [ 37.909769][ T403] ? x64_sys_call+0xe69/0x2ee0 [ 37.909832][ T403] ? do_syscall_64+0x57/0xf0 [ 37.909895][ T403] ? do_filp_open+0x440/0x440 [ 37.909967][ T403] do_filp_open+0x1f2/0x440 [ 37.910039][ T403] ? __cfi_do_filp_open+0x10/0x10 [ 37.910113][ T403] ? alloc_fd+0x4c1/0x570 [ 37.910208][ T403] do_sys_openat2+0x134/0x1d0 [ 37.910307][ T403] ? fput+0x1a4/0x230 [ 37.910383][ T403] ? do_sys_open+0x100/0x100 [ 37.910464][ T403] ? __cfi_ksys_write+0x10/0x10 [ 37.910555][ T403] __x64_sys_openat+0x13a/0x170 [ 37.910629][ T403] x64_sys_call+0xe69/0x2ee0 [ 37.910693][ T403] do_syscall_64+0x57/0xf0 [ 37.910747][ T403] ? clear_bhb_loop+0x50/0xa0 [ 37.910827][ T403] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.910901][ T403] RIP: 0033:0x7f9ac279f559 [ 37.910997][ T403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.911041][ T403] RSP: 002b:00007f9ac35bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 37.911111][ T403] RAX: ffffffffffffffda RBX: 00007f9ac2a25fa0 RCX: 00007f9ac279f559 [ 37.911155][ T403] RDX: 0000000000000002 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 37.911206][ T403] RBP: 00007f9ac2836b20 R08: 0000000000000000 R09: 0000000000000000 [ 37.911240][ T403] R10: 0000000000000090 R11: 0000000000000246 R12: 0000000000000000 [ 37.911280][ T403] R13: 00007f9ac2a26038 R14: 00007f9ac2a25fa0 R15: 00007ffdf0f8d2c8 [ 37.911332][ T403] [ 37.963347][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 38.183424][ T36] audit: type=1400 audit(1792538171.160:154): avc: denied { read } for pid=407 comm="syz.3.24" dev="nsfs" ino=4026532555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 38.313458][ T31] usb 5-1: device descriptor read/64, error -71 [ 38.337516][ T36] audit: type=1400 audit(1792538171.160:155): avc: denied { open } for pid=407 comm="syz.3.24" path="net:[4026532555]" dev="nsfs" ino=4026532555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 38.454638][ T411] netlink: 520 bytes leftover after parsing attributes in process `syz.2.23'. [ 38.459919][ T36] audit: type=1400 audit(1792538171.380:156): avc: denied { create } for pid=410 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 38.493569][ T36] audit: type=1400 audit(1792538171.450:157): avc: denied { ioctl } for pid=410 comm="syz.2.23" path="socket:[4708]" dev="sockfs" ino=4708 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.523529][ T36] audit: type=1400 audit(1792538171.450:158): avc: denied { nlmsg_read } for pid=410 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.544532][ T414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1042 sclass=netlink_route_socket pid=414 comm=syz.2.26 [ 38.584614][ T12] bridge_slave_1: left allmulticast mode [ 38.590519][ T12] bridge_slave_1: left promiscuous mode [ 38.597032][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.605155][ T12] bridge_slave_0: left allmulticast mode [ 38.610914][ T12] bridge_slave_0: left promiscuous mode [ 38.617380][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.653370][ T31] usb 5-1: device descriptor read/64, error -71 [ 38.691615][ T414] ptp ptp0: guarantee physical clock free running [ 38.759818][ T12] veth1_macvtap: left promiscuous mode [ 38.765501][ T12] veth0_vlan: left promiscuous mode [ 38.850176][ T420] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.857523][ T420] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.864650][ T420] bridge_slave_0: entered allmulticast mode [ 38.870928][ T420] bridge_slave_0: entered promiscuous mode [ 38.877803][ T420] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.884875][ T420] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.892122][ T420] bridge_slave_1: entered allmulticast mode [ 38.893483][ T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 38.899298][ T420] bridge_slave_1: entered promiscuous mode [ 38.953876][ T420] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.960931][ T420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.968296][ T420] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.975360][ T420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.997961][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.005500][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.015217][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.022311][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.033593][ T31] usb 5-1: device descriptor read/64, error -71 [ 39.040436][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.047548][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.072815][ T420] veth0_vlan: entered promiscuous mode [ 39.085292][ T420] veth1_macvtap: entered promiscuous mode [ 39.273369][ T31] usb 5-1: device descriptor read/64, error -71 [ 39.353356][ T314] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 39.384197][ T31] usb usb5-port1: attempt power cycle [ 39.514552][ T314] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 39.526265][ T314] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 39.540189][ T314] usb 6-1: config 0 interface 0 has no altsetting 0 [ 39.547203][ T314] usb 6-1: New USB device found, idVendor=056a, idProduct=00c0, bcdDevice= 0.00 [ 39.556609][ T314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.565326][ T314] usb 6-1: config 0 descriptor?? [ 39.570752][ T426] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 39.613374][ T363] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 39.673394][ T45] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 39.733359][ T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 39.754431][ T31] usb 5-1: device descriptor read/8, error -71 [ 39.763401][ T363] usb 3-1: Using ep0 maxpacket: 16 [ 39.769713][ T363] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.780767][ T363] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.790684][ T363] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 39.803807][ T363] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 39.812868][ T363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.821823][ T363] usb 3-1: config 0 descriptor?? [ 39.834123][ T45] usb 4-1: not running at top speed; connect to a high speed hub [ 39.842725][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.852943][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 39.861993][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 39.871215][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.882456][ T45] usb 4-1: Found UVC 1.00 device (046d:0825) [ 39.890455][ T31] usb 5-1: device descriptor read/8, error -71 [ 39.991312][ T426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.000007][ T426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.010128][ T314] wacom 0003:056A:00C0.0002: unknown main item tag 0x2 [ 40.017186][ T314] wacom 0003:056A:00C0.0002: unknown main item tag 0x0 [ 40.024205][ T314] wacom 0003:056A:00C0.0002: unknown main item tag 0x0 [ 40.032548][ T314] wacom 0003:056A:00C0.0002: hidraw0: USB HID v0.00 Keyboard [HID 056a:00c0] on usb-dummy_hcd.5-1/input0 [ 40.084498][ T45] usb 4-1: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 40.093608][ T45] usb 4-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 40.102435][ T45] usb 4-1: No streaming interface found for terminal 2. [ 40.110897][ T45] usb 4-1: USB disconnect, device number 2 [ 40.134126][ T31] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 40.154500][ T31] usb 5-1: device descriptor read/8, error -71 [ 40.210090][ T426] overlay: filesystem on ./file0 not supported as upperdir [ 40.219347][ T314] usb 6-1: USB disconnect, device number 2 [ 40.236862][ T363] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input10 [ 40.257646][ T363] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 40.295700][ T31] usb 5-1: device descriptor read/8, error -71 [ 40.403503][ T31] usb usb5-port1: unable to enumerate USB device [ 40.446831][ T432] kvm: emulating exchange as write [ 40.452629][ T45] usb 3-1: USB disconnect, device number 3 [ 40.749282][ T451] .N: renamed from veth0_to_bond (while UP) [ 40.774519][ T454] netlink: 4 bytes leftover after parsing attributes in process `syz.5.39'. [ 41.093436][ T314] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 41.153548][ T10] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 41.223535][ T363] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 41.254396][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.265408][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.275213][ T314] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 41.284476][ T314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.293660][ T314] usb 5-1: config 0 descriptor?? [ 41.305247][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 41.316889][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.326856][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 41.336980][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 41.349489][ T10] usb 6-1: string descriptor 0 read error: -22 [ 41.358541][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 41.367926][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.378969][ T363] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.392133][ T363] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.402803][ T363] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 41.416011][ T363] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 41.425303][ T363] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.435758][ T363] usb 4-1: config 0 descriptor?? [ 41.592398][ T10] cdc_ncm 6-1:1.0: bind() failure [ 41.598591][ T10] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 41.605707][ T10] cdc_ncm 6-1:1.1: bind() failure [ 41.612128][ T10] usb 6-1: USB disconnect, device number 3 [ 41.643231][ T363] plantronics 0003:047F:FFFF.0004: ignoring exceeding usage max [ 41.656314][ T363] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 41.669462][ T363] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 41.701736][ T314] usbhid 5-1:0.0: can't add hid device: -71 [ 41.709436][ T314] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 41.718476][ T314] usb 5-1: USB disconnect, device number 6 [ 41.844988][ T67] usb 4-1: USB disconnect, device number 3 [ 42.463346][ T45] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 42.585413][ T536] netlink: 16 bytes leftover after parsing attributes in process `syz.3.66'. [ 42.615520][ T45] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 42.635596][ T45] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 42.653344][ T67] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 42.674948][ T45] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 42.693392][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.705903][ T45] usb 5-1: Product: syz [ 42.713606][ T45] usb 5-1: Manufacturer: syz [ 42.718319][ T45] usb 5-1: SerialNumber: syz [ 42.825187][ T67] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 42.843579][ T31] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 42.861338][ T67] usb 3-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.883324][ T67] usb 3-1: config 0 interface 0 has no altsetting 0 [ 42.900178][ T67] usb 3-1: New USB device found, idVendor=05ac, idProduct=0229, bcdDevice= 0.00 [ 42.913592][ T67] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.932754][ T67] usb 3-1: config 0 descriptor?? [ 42.938192][ T515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.952307][ T515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.972888][ T45] cdc_ncm 5-1:1.0: bind() failure [ 42.992788][ T45] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 43.000170][ T45] cdc_ncm 5-1:1.1: bind() failure [ 43.017825][ T45] usb 5-1: USB disconnect, device number 7 [ 43.044466][ T31] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 43.056251][ T31] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 43.083332][ T31] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 43.104096][ T31] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 43.123535][ T31] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 43.131602][ T31] usb 4-1: Manufacturer: syz [ 43.141223][ T536] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 43.155501][ T67] apple 0003:05AC:0229.0005: ignoring exceeding usage max [ 43.179443][ T67] apple 0003:05AC:0229.0005: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 43.190918][ T67] apple 0003:05AC:0229.0005: No inputs registered, leaving [ 43.209381][ T67] apple 0003:05AC:0229.0005: hidraw0: USB HID v0.10 Joystick [HID 05ac:0229] on usb-dummy_hcd.2-1/input0 [ 43.375572][ T67] usb 3-1: USB disconnect, device number 4 [ 43.386956][ T31] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 43.403745][ T31] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input12 [ 43.416060][ T31] usb 4-1: USB disconnect, device number 4 [ 43.416217][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 43.466034][ T36] kauditd_printk_skb: 40 callbacks suppressed [ 43.466053][ T36] audit: type=1400 audit(3618631236.754:199): avc: denied { listen } for pid=550 comm="syz.5.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.495276][ T36] audit: type=1400 audit(3618631236.784:200): avc: denied { create } for pid=550 comm="syz.5.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 43.514368][ T36] audit: type=1400 audit(3618631236.784:201): avc: denied { setopt } for pid=550 comm="syz.5.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.533663][ T36] audit: type=1400 audit(3618631236.784:202): avc: denied { read } for pid=550 comm="syz.5.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.697526][ T36] audit: type=1400 audit(3618631236.984:203): avc: denied { unlink } for pid=563 comm="syz.4.74" name="#13" dev="tmpfs" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 43.719489][ T36] audit: type=1400 audit(3618631236.984:204): avc: denied { mount } for pid=563 comm="syz.4.74" name="/" dev="overlay" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.903795][ T36] audit: type=1400 audit(3618631237.194:205): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.943377][ T314] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 43.994587][ T36] audit: type=1326 audit(3618631237.284:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=572 comm="syz.2.78" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f401d39f559 code=0x0 [ 44.019380][ T36] audit: type=1326 audit(3618631237.284:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=572 comm="syz.2.78" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f401d39f559 code=0x0 [ 44.124525][ T314] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 44.135390][ T314] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 44.148209][ T314] usb 5-1: config 0 interface 0 has no altsetting 0 [ 44.154908][ T314] usb 5-1: New USB device found, idVendor=056a, idProduct=00c0, bcdDevice= 0.00 [ 44.164129][ T36] audit: type=1400 audit(3618631237.444:208): avc: denied { read } for pid=572 comm="syz.2.78" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 44.186816][ T314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.193821][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 44.199776][ T314] usb 5-1: config 0 descriptor?? [ 44.207674][ T564] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 44.311881][ T579] FAULT_INJECTION: forcing a failure. [ 44.311881][ T579] name fail_futex, interval 1, probability 0, space 0, times 0 [ 44.324817][ T579] CPU: 1 UID: 0 PID: 579 Comm: syz.5.79 Not tainted syzkaller #0 f4dc25654f8255e5780388d900d0b326847aed68 [ 44.324849][ T579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 44.324863][ T579] Call Trace: [ 44.324871][ T579] [ 44.324878][ T579] __dump_stack+0x21/0x30 [ 44.324915][ T579] dump_stack_lvl+0x140/0x1c0 [ 44.324968][ T579] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.325002][ T579] ? kasan_save_track+0x4f/0x80 [ 44.325039][ T579] ? kasan_save_alloc_info+0x3a/0x50 [ 44.325059][ T579] ? __kasan_slab_alloc+0x73/0x90 [ 44.325073][ T579] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 44.325109][ T579] ? init_file+0x9e/0x210 [ 44.325133][ T579] dump_stack+0x19/0x20 [ 44.325164][ T579] should_fail_ex+0x3c2/0x510 [ 44.325191][ T579] should_fail+0xf/0x20 [ 44.325210][ T579] get_futex_key+0x178/0x940 [ 44.325226][ T579] ? __cfi_get_futex_key+0x10/0x10 [ 44.325242][ T579] futex_wake+0x150/0x950 [ 44.325283][ T579] ? __cfi_futex_wake+0x10/0x10 [ 44.325309][ T579] ? security_file_alloc+0x49/0x220 [ 44.325343][ T579] do_futex+0x37d/0x510 [ 44.325367][ T579] ? errseq_sample+0x48/0x70 [ 44.325386][ T579] ? file_init_path+0x434/0x590 [ 44.325422][ T579] ? __cfi_do_futex+0x10/0x10 [ 44.325444][ T579] ? alloc_file_pseudo+0x191/0x1f0 [ 44.325469][ T579] __se_sys_futex+0x13c/0x320 [ 44.325495][ T579] ? __x64_sys_futex+0x110/0x110 [ 44.325511][ T579] ? is_dma_buf_file+0x11/0x50 [ 44.325531][ T579] ? __kasan_check_write+0x18/0x20 [ 44.325571][ T579] __x64_sys_futex+0xe9/0x110 [ 44.325594][ T579] x64_sys_call+0x227f/0x2ee0 [ 44.325616][ T579] do_syscall_64+0x57/0xf0 [ 44.325640][ T579] ? clear_bhb_loop+0x50/0xa0 [ 44.325660][ T579] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.325679][ T579] RIP: 0033:0x7f79c939f559 [ 44.325705][ T579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.325724][ T579] RSP: 002b:00007f79ca2710e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 44.325747][ T579] RAX: ffffffffffffffda RBX: 00007f79c9626188 RCX: 00007f79c939f559 [ 44.325763][ T579] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f79c962618c [ 44.325780][ T579] RBP: 00007f79c9626180 R08: 4000000000000000 R09: 0000000000000000 [ 44.325812][ T579] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 44.325825][ T579] R13: 00007f79c9626218 R14: 00007ffd45b92070 R15: 00007ffd45b92158 [ 44.325845][ T579] [ 44.594553][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 44.601003][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.611992][ T31] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 44.614830][ T582] fuse: Unknown parameter '0000000000000000000000300000000000000000003' [ 44.622872][ T31] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 44.632026][ T564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.646232][ T31] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 44.651511][ T564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.667509][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 44.678410][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 44.682397][ T314] wacom 0003:056A:00C0.0006: unknown main item tag 0x2 [ 44.686501][ T31] usb 4-1: SerialNumber: syz [ 44.696818][ T570] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 44.705457][ T570] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 44.713372][ T31] hub 4-1:1.0: bad descriptor, ignoring hub [ 44.719361][ T31] hub 4-1:1.0: probe with driver hub failed with error -5 [ 44.723444][ T314] wacom 0003:056A:00C0.0006: unknown main item tag 0x0 [ 44.727223][ T31] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 44.746617][ T314] wacom 0003:056A:00C0.0006: unknown main item tag 0x0 [ 44.760995][ T314] wacom 0003:056A:00C0.0006: hidraw0: USB HID v0.00 Keyboard [HID 056a:00c0] on usb-dummy_hcd.4-1/input0 [ 44.883186][ T427] usb 5-1: USB disconnect, device number 8 [ 44.922159][ T594] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.046062][ T31] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 45.074042][ T31] usb 4-1: USB disconnect, device number 5 [ 45.269699][ T617] kvm: kvm [615]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 45.310816][ T627] clocksource: Switched to clocksource kvm-clock [ 45.463513][ T634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.97'. [ 45.513367][ T427] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 45.643409][ T427] usb 3-1: device descriptor read/64, error -71 [ 45.763369][ T314] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 45.813362][ T67] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 45.883345][ T427] usb 3-1: device descriptor read/64, error -71 [ 45.913416][ T10] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 45.921955][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.932928][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.943580][ T314] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 45.952633][ T314] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 45.960704][ T314] usb 5-1: Manufacturer: syz [ 45.964217][ T67] usb 6-1: no configurations [ 45.969927][ T67] usb 6-1: can't read configurations, error -22 [ 45.973576][ T314] usb 5-1: config 0 descriptor?? [ 46.074579][ T10] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 46.085497][ T10] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 46.098361][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 46.105061][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=00c0, bcdDevice= 0.00 [ 46.113448][ T67] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 46.114451][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.129740][ T427] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 46.138314][ T10] usb 4-1: config 0 descriptor?? [ 46.143666][ T653] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 46.273783][ T427] usb 3-1: device descriptor read/64, error -71 [ 46.274577][ T67] usb 6-1: no configurations [ 46.284784][ T67] usb 6-1: can't read configurations, error -22 [ 46.291272][ T67] usb usb6-port1: attempt power cycle [ 46.513350][ T427] usb 3-1: device descriptor read/64, error -71 [ 46.552282][ T653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.560931][ T653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.571172][ T10] wacom 0003:056A:00C0.0008: unknown main item tag 0x2 [ 46.578128][ T10] wacom 0003:056A:00C0.0008: unknown main item tag 0x0 [ 46.585099][ T10] wacom 0003:056A:00C0.0008: unknown main item tag 0x0 [ 46.593306][ T10] wacom 0003:056A:00C0.0008: hidraw0: USB HID v0.00 Keyboard [HID 056a:00c0] on usb-dummy_hcd.3-1/input0 [ 46.624952][ T427] usb usb3-port1: attempt power cycle [ 46.633327][ T67] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 46.654139][ T67] usb 6-1: no configurations [ 46.658797][ T67] usb 6-1: can't read configurations, error -22 [ 46.773748][ T480] usb 4-1: USB disconnect, device number 6 [ 46.793340][ T67] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 46.814069][ T67] usb 6-1: no configurations [ 46.818703][ T67] usb 6-1: can't read configurations, error -22 [ 46.825121][ T67] usb usb6-port1: unable to enumerate USB device [ 46.963390][ T427] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 46.984266][ T427] usb 3-1: device descriptor read/8, error -71 [ 46.993735][ T314] uclogic 0003:256C:006D.0007: v1 frame probing failed: -71 [ 47.001074][ T314] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 47.008711][ T314] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 47.018975][ T314] usb 5-1: USB disconnect, device number 9 [ 47.114390][ T427] usb 3-1: device descriptor read/8, error -71 [ 47.353358][ T427] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 47.374384][ T427] usb 3-1: device descriptor read/8, error -71 [ 47.504391][ T427] usb 3-1: device descriptor read/8, error -71 [ 48.123333][ T67] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 48.159095][ T427] usb usb3-port1: unable to enumerate USB device [ 48.273331][ T67] usb 5-1: Using ep0 maxpacket: 8 [ 48.284220][ T67] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 48.285842][ T678] capability: warning: `syz.3.113' uses deprecated v2 capabilities in a way that may be insecure [ 48.292754][ T67] usb 5-1: config 179 has no interface number 0 [ 48.312882][ T67] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 48.324162][ T67] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 48.335885][ T67] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 48.347398][ T67] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 48.359513][ T67] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 48.374365][ T67] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 48.385240][ T67] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.398321][ T676] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 48.633344][ T480] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 48.678683][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 48.678701][ T36] audit: type=1400 audit(4099.350:233): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 48.706036][ T690] can0: slcan on ptm0. [ 48.731081][ T36] audit: type=1400 audit(4099.390:234): avc: denied { search } for pid=150 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.752141][ T36] audit: type=1400 audit(4099.390:235): avc: denied { read } for pid=150 comm="dhcpcd" name="n15" dev="tmpfs" ino=767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.773224][ T689] can0 (unregistered): slcan off ptm0. [ 48.783401][ T36] audit: type=1400 audit(4099.390:236): avc: denied { open } for pid=150 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.806170][ T36] audit: type=1400 audit(4099.390:237): avc: denied { getattr } for pid=150 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.807442][ T480] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 48.836693][ T67] usb 5-1: USB disconnect, device number 10 [ 48.836771][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 48.853634][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 48.865890][ T480] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 48.895208][ T36] audit: type=1400 audit(4099.390:238): avc: denied { mount } for pid=689 comm="syz.5.117" name="/" dev="configfs" ino=2431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 48.913551][ T480] usb 3-1: config 0 interface 0 has no altsetting 0 [ 48.920581][ T36] audit: type=1400 audit(4099.390:239): avc: denied { search } for pid=689 comm="syz.5.117" name="/" dev="configfs" ino=2431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 48.945397][ T480] usb 3-1: New USB device found, idVendor=056a, idProduct=00c0, bcdDevice= 0.00 [ 48.957070][ T480] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.993589][ T480] usb 3-1: config 0 descriptor?? [ 48.999917][ T36] audit: type=1400 audit(4099.390:240): avc: denied { write } for pid=689 comm="syz.5.117" name="usb_gadget" dev="configfs" ino=2432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 49.001789][ T683] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 49.063158][ T36] audit: type=1400 audit(4099.390:241): avc: denied { add_name } for pid=689 comm="syz.5.117" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 49.103078][ T36] audit: type=1400 audit(4099.390:242): avc: denied { create } for pid=689 comm="syz.5.117" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 49.141828][ T711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.120'. [ 49.403356][ T67] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 49.445658][ T683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.455299][ T683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.465724][ T480] wacom 0003:056A:00C0.0009: unknown main item tag 0x2 [ 49.472641][ T480] wacom 0003:056A:00C0.0009: unknown main item tag 0x0 [ 49.480184][ T480] wacom 0003:056A:00C0.0009: unknown main item tag 0x0 [ 49.488341][ T480] wacom 0003:056A:00C0.0009: hidraw0: USB HID v0.00 Keyboard [HID 056a:00c0] on usb-dummy_hcd.2-1/input0 [ 49.563334][ T67] usb 4-1: Using ep0 maxpacket: 16 [ 49.570202][ T67] usb 4-1: unable to get BOS descriptor or descriptor too short [ 49.580519][ T67] usb 4-1: config 3 has an invalid interface number: 105 but max is 1 [ 49.588858][ T67] usb 4-1: config 3 has an invalid interface number: 164 but max is 1 [ 49.597309][ T67] usb 4-1: config 3 has no interface number 0 [ 49.603525][ T67] usb 4-1: config 3 has no interface number 1 [ 49.609786][ T67] usb 4-1: config 3 interface 105 has no altsetting 0 [ 49.616745][ T67] usb 4-1: config 3 interface 164 has no altsetting 0 [ 49.624978][ T67] usb 4-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=4c.06 [ 49.634144][ T67] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.642148][ T67] usb 4-1: Product: syz [ 49.646592][ T67] usb 4-1: Manufacturer: syz [ 49.651284][ T67] usb 4-1: SerialNumber: syz [ 49.681034][ T480] usb 3-1: USB disconnect, device number 9 [ 49.837261][ T755] random: crng reseeded on system resumption [ 49.871541][ T67] uvcvideo 4-1:3.164: Found multiple Units with ID 5 [ 49.878803][ T67] uvcvideo 4-1:3.164: Found multiple Units with ID 1 [ 49.886179][ T67] usb 4-1: Found UVC 0.03 device syz (04c8:0720) [ 49.892680][ T67] uvcvideo 4-1:3.164: Entity type for entity Output 65535 was not initialized! [ 49.902043][ T67] uvcvideo 4-1:3.164: Entity type for entity Input 65535 was not initialized! [ 49.911157][ T67] usb 4-1: Failed to create links for entity 65535 [ 49.917835][ T67] usb 4-1: Failed to register entities (-22). [ 49.926884][ T67] usb 4-1: USB disconnect, device number 7 [ 50.103343][ T480] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 50.253328][ T480] usb 5-1: Using ep0 maxpacket: 16 [ 50.264353][ T480] usb 5-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 50.273582][ T480] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.282824][ T480] usb 5-1: Product: syz [ 50.287764][ T480] usb 5-1: Manufacturer: syz [ 50.292522][ T480] usb 5-1: SerialNumber: syz [ 50.298105][ T480] usb 5-1: config 0 descriptor?? [ 50.304234][ T480] usb-storage 5-1:0.0: USB Mass Storage device detected [ 50.312915][ T480] usb-storage 5-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 50.320362][ T480] usb-storage 5-1:0.0: This device (054c,002e,0500 S 04 P 5c) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 50.320362][ T480] Please send a copy of this message to and [ 50.505367][ T31] usb 5-1: USB disconnect, device number 11 [ 50.513647][ T67] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 50.633391][ T311] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 50.664506][ T67] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 50.671781][ T67] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 50.681733][ T67] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 50.694044][ T67] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 50.703116][ T67] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.711328][ T67] usb 3-1: Product: syz [ 50.715654][ T67] usb 3-1: Manufacturer: syz [ 50.720277][ T67] usb 3-1: SerialNumber: syz [ 50.725671][ T67] usb 3-1: config 0 descriptor?? [ 50.731857][ T67] usb 3-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress f8 [ 50.773388][ T311] usb 4-1: device descriptor read/64, error -71 [ 50.931604][ T769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.940238][ T769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.952349][ T67] usb 3-1: USB disconnect, device number 10 [ 50.962377][ T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.013355][ T311] usb 4-1: device descriptor read/64, error -71 [ 51.253351][ T311] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 51.323339][ T427] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 51.383342][ T311] usb 4-1: device descriptor read/64, error -71 [ 51.473420][ T427] usb 5-1: Using ep0 maxpacket: 32 [ 51.483739][ T427] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 51.492859][ T427] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.501169][ T427] usb 5-1: Product: syz [ 51.505425][ T427] usb 5-1: Manufacturer: syz [ 51.510075][ T427] usb 5-1: SerialNumber: syz [ 51.526298][ T785] syzkaller1: entered promiscuous mode [ 51.533216][ T785] syzkaller1: entered allmulticast mode [ 51.544053][ T788] kvm: kvm [783]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 51.552752][ T788] kvm: kvm [783]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 51.623347][ T311] usb 4-1: device descriptor read/64, error -71 [ 51.733496][ T311] usb usb4-port1: attempt power cycle [ 51.922391][ T427] usb 5-1: 1:1: cannot get freq (v2/v3): err -32 [ 52.073372][ T311] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 52.094359][ T311] usb 4-1: device descriptor read/8, error -71 [ 52.130057][ T781] ======================================================= [ 52.130057][ T781] WARNING: The mand mount option has been deprecated and [ 52.130057][ T781] and is ignored by this kernel. Remove the mand [ 52.130057][ T781] option from the mount to silence this warning. [ 52.130057][ T781] ======================================================= [ 52.167245][ T427] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 52.175569][ T427] usb 5-1: 2:1: cannot get freq (v2/v3): err -71 [ 52.182442][ T427] usb 5-1: 2:1: cannot set freq 44100 (v2/v3): err -71 [ 52.195063][ T427] usb 5-1: USB disconnect, device number 12 [ 52.208772][ T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.234410][ T311] usb 4-1: device descriptor read/8, error -71 [ 52.443349][ T67] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 52.473342][ T311] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 52.494363][ T311] usb 4-1: device descriptor read/8, error -71 [ 52.594724][ T67] usb 3-1: config 1 has an invalid interface number: 1 but max is 0 [ 52.602811][ T67] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.612970][ T67] usb 3-1: config 1 has no interface number 0 [ 52.619101][ T67] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 10 [ 52.629990][ T67] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 52.640780][ T311] usb 4-1: device descriptor read/8, error -71 [ 52.647430][ T67] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 52.656512][ T67] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 52.664555][ T67] usb 3-1: Product: syz [ 52.668752][ T67] usb 3-1: Manufacturer: syz [ 52.673909][ T67] usb 3-1: SerialNumber: syz [ 52.754027][ T311] usb usb4-port1: unable to enumerate USB device [ 52.927122][ T67] usb 3-1: USB disconnect, device number 11 [ 52.943667][ T480] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 52.958158][ T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.124502][ T480] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 53.135391][ T480] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 53.148245][ T480] usb 5-1: config 0 interface 0 has no altsetting 0 [ 53.154927][ T480] usb 5-1: New USB device found, idVendor=056a, idProduct=00c0, bcdDevice= 0.00 [ 53.164037][ T480] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.172689][ T480] usb 5-1: config 0 descriptor?? [ 53.178027][ T857] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 53.588816][ T857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.598547][ T857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.613154][ T480] wacom 0003:056A:00C0.000A: unknown main item tag 0x2 [ 53.620194][ T480] wacom 0003:056A:00C0.000A: unknown main item tag 0x0 [ 53.627289][ T480] wacom 0003:056A:00C0.000A: unknown main item tag 0x0 [ 53.635290][ T480] wacom 0003:056A:00C0.000A: hidraw0: USB HID v0.00 Keyboard [HID 056a:00c0] on usb-dummy_hcd.4-1/input0 [ 53.809547][ T311] usb 5-1: USB disconnect, device number 13 [ 53.843343][ T67] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 53.991319][ T873] netlink: 64 bytes leftover after parsing attributes in process `syz.5.148'. [ 54.000452][ T873] netlink: 17 bytes leftover after parsing attributes in process `syz.5.148'. [ 54.001866][ T67] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 54.015613][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 54.015655][ T36] audit: type=1400 audit(4104.690:273): avc: denied { read write } for pid=872 comm="syz.5.148" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 54.020299][ T67] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 54.027082][ T873] deleting an unspecified loop device is not supported. [ 54.050274][ T67] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 54.062483][ T36] audit: type=1400 audit(4104.690:274): avc: denied { open } for pid=872 comm="syz.5.148" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 54.068237][ T67] usb 4-1: New USB device found, idVendor=05ac, idProduct=024f, bcdDevice= 0.00 [ 54.082070][ T36] audit: type=1400 audit(4104.700:275): avc: denied { ioctl } for pid=872 comm="syz.5.148" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 54.105434][ T67] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.148039][ T67] usb 4-1: config 0 descriptor?? [ 54.153436][ T864] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 54.337525][ T36] audit: type=1400 audit(4105.010:276): avc: denied { set_context_mgr } for pid=879 comm="syz.2.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 54.356802][ T480] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 54.360742][ T880] rust_binder: 880 RLIMIT_NICE not set [ 54.364395][ T36] audit: type=1400 audit(4105.030:277): avc: denied { map } for pid=879 comm="syz.2.151" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 54.369847][ T864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.370359][ T864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.399693][ T36] audit: type=1400 audit(4105.030:278): avc: denied { call } for pid=879 comm="syz.2.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 54.422917][ T311] rust_binder: 879: undelivered TRANSACTION_COMPLETE [ 54.427411][ T36] audit: type=1400 audit(4105.030:279): avc: denied { transfer } for pid=879 comm="syz.2.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 54.452963][ T36] audit: type=1400 audit(4105.030:280): avc: denied { read } for pid=879 comm="syz.2.151" path="socket:[9269]" dev="sockfs" ino=9269 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 54.476617][ T36] audit: type=1400 audit(4105.140:281): avc: denied { write } for pid=881 comm="syz.2.152" path="socket:[9279]" dev="sockfs" ino=9279 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.522911][ T36] audit: type=1400 audit(4105.190:282): avc: denied { shutdown } for pid=881 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.544516][ T480] usb 6-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 54.553644][ T480] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.561698][ T480] usb 6-1: Product: syz [ 54.565947][ T480] usb 6-1: Manufacturer: syz [ 54.570573][ T480] usb 6-1: SerialNumber: syz [ 54.575458][ T427] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 54.652907][ T864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.662319][ T864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.672733][ T67] apple 0003:05AC:024F.000B: item fetching failed at offset 5/6 [ 54.680873][ T67] apple 0003:05AC:024F.000B: parse failed [ 54.686826][ T67] apple 0003:05AC:024F.000B: probe with driver apple failed with error -22 [ 54.743336][ T427] usb 5-1: Using ep0 maxpacket: 16 [ 54.749598][ T427] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.760588][ T427] usb 5-1: config 0 interface 0 has no altsetting 0 [ 54.767268][ T427] usb 5-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 54.776406][ T427] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.785150][ T427] usb 5-1: config 0 descriptor?? [ 54.795602][ T480] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 54.802700][ T480] usb 6-1: found format II with max.bitrate = 44931, frame size=8 [ 54.812709][ T480] usb 6-1: found format II with max.bitrate = 44931, frame size=8 [ 54.821430][ T480] usb 6-1: 2:1: cannot set freq 4584960 to ep 0x82 [ 54.834500][ T480] usb 6-1: USB disconnect, device number 8 [ 54.845733][ T855] udevd[855]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.875473][ T314] usb 4-1: USB disconnect, device number 12 [ 55.215953][ T427] uclogic 0003:5543:0064.000C: unknown main item tag 0x0 [ 55.223684][ T427] uclogic 0003:5543:0064.000C: unknown main item tag 0x0 [ 55.230754][ T427] uclogic 0003:5543:0064.000C: unknown main item tag 0x0 [ 55.237985][ T427] uclogic 0003:5543:0064.000C: unknown main item tag 0x0 [ 55.245092][ T427] uclogic 0003:5543:0064.000C: unknown main item tag 0x0 [ 55.252377][ T427] uclogic 0003:5543:0064.000C: No inputs registered, leaving [ 55.261089][ T427] uclogic 0003:5543:0064.000C: hiddev96,hidraw0: USB HID v0.01 Device [HID 5543:0064] on usb-dummy_hcd.4-1/input0 [ 55.416446][ T878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.425061][ T878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.433619][ T427] usb 5-1: USB disconnect, device number 14 [ 55.480920][ T908] overlayfs: failed to clone upperpath [ 55.497066][ T905] netlink: 108 bytes leftover after parsing attributes in process `syz.3.158'. [ 55.620869][ T913] mtrr: base(0xb7000) is not aligned on a size(0x0000) boundary [ 55.796290][ T919] tap0: tun_chr_ioctl cmd 1074025672 [ 55.801651][ T919] tap0: ignored: set checksum disabled [ 55.807773][ T919] tap0: tun_chr_ioctl cmd 1074025673 [ 55.813175][ T921] tap0: tun_chr_ioctl cmd 1074025672 [ 55.818709][ T921] tap0: ignored: set checksum disabled [ 55.949060][ T926] kvm: pic: non byte write [ 55.953811][ T926] kvm: pic: single mode not supported [ 55.953825][ T926] kvm: pic: level sensitive irq not supported [ 55.959363][ T926] kvm: pic: non byte write [ 55.970433][ T926] kvm: pic: non byte write [ 56.044390][ T937] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 56.136571][ T949] netlink: 'syz.2.175': attribute type 12 has an invalid length. [ 56.157291][ T951] overlayfs: failed to clone upperpath [ 56.204117][ T67] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 56.363330][ T67] usb 5-1: Using ep0 maxpacket: 8 [ 56.369551][ T67] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 56.378243][ T311] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 56.386180][ T67] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 56.394830][ T67] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 56.404008][ T67] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 56.415295][ T67] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 56.427055][ T67] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 56.436370][ T67] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.444552][ T67] usb 5-1: Product: syz [ 56.448793][ T67] usb 5-1: Manufacturer: syz [ 56.453629][ T67] usb 5-1: SerialNumber: syz [ 56.462243][ T67] usb 5-1: config 0 descriptor?? [ 56.470061][ T67] hub 5-1:0.0: bad descriptor, ignoring hub [ 56.476710][ T67] hub 5-1:0.0: probe with driver hub failed with error -5 [ 56.489688][ T67] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input26 [ 56.554851][ T311] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.565080][ T311] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.575550][ T311] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 56.584675][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.592741][ T311] usb 4-1: Product: syz [ 56.597034][ T311] usb 4-1: Manufacturer: syz [ 56.601648][ T311] usb 4-1: SerialNumber: syz [ 56.697450][ T427] usb 5-1: USB disconnect, device number 15 [ 56.827588][ T311] usb 4-1: unit 4 not found! [ 56.836697][ T311] usb 4-1: USB disconnect, device number 13 [ 56.855975][ T600] udevd[600]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.253868][ T985] netlink: 'syz.4.187': attribute type 10 has an invalid length. [ 57.265751][ T985] base or size exceeds the MTRR width [ 57.271567][ T985] netlink: 'syz.4.187': attribute type 27 has an invalid length. [ 57.593367][ T45] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 57.653355][ T427] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 57.693364][ T311] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 57.743346][ T45] usb 4-1: Invalid ep0 maxpacket: 64 [ 57.783366][ T427] usb 5-1: device descriptor read/64, error -71 [ 57.844448][ T311] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 57.855354][ T311] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.868207][ T311] usb 6-1: config 0 interface 0 has no altsetting 0 [ 57.874915][ T311] usb 6-1: New USB device found, idVendor=056a, idProduct=00c0, bcdDevice= 0.00 [ 57.884033][ T45] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 57.891560][ T311] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.900526][ T311] usb 6-1: config 0 descriptor?? [ 57.905898][ T995] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 58.043364][ T427] usb 5-1: device descriptor read/64, error -71 [ 58.043364][ T45] usb 4-1: Invalid ep0 maxpacket: 64 [ 58.055120][ T45] usb usb4-port1: attempt power cycle [ 58.146830][ T1005] overlayfs: failed to clone upperpath [ 58.146837][ T1004] overlayfs: failed to clone upperpath [ 58.159346][ T1004] ./dev/sda1: Can't lookup blockdev [ 58.283345][ T427] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 58.316270][ T995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.324972][ T995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.335794][ T311] usbhid 6-1:0.0: can't add hid device: -71 [ 58.341790][ T311] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 58.350665][ T311] usb 6-1: USB disconnect, device number 9 [ 58.393473][ T45] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 58.413737][ T45] usb 4-1: Invalid ep0 maxpacket: 64 [ 58.423342][ T427] usb 5-1: device descriptor read/64, error -71 [ 58.543347][ T45] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 58.563827][ T45] usb 4-1: Invalid ep0 maxpacket: 64 [ 58.569305][ T45] usb usb4-port1: unable to enumerate USB device [ 58.663438][ T427] usb 5-1: device descriptor read/64, error -71 [ 58.793444][ T427] usb usb5-port1: attempt power cycle [ 59.083347][ T45] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 59.133342][ T427] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 59.154583][ T427] usb 5-1: device descriptor read/8, error -71 [ 59.233542][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 59.239869][ T45] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.250814][ T45] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.260649][ T45] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 59.273482][ T45] usb 6-1: config 0 interface 0 has no altsetting 0 [ 59.280120][ T45] usb 6-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 59.289196][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.297859][ T45] usb 6-1: config 0 descriptor?? [ 59.305143][ T427] usb 5-1: device descriptor read/8, error -71 [ 59.508301][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 59.508319][ T36] audit: type=1400 audit(4110.180:302): avc: denied { bind } for pid=1045 comm="syz.5.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.543378][ T427] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 59.564560][ T427] usb 5-1: device descriptor read/8, error -71 [ 59.694479][ T427] usb 5-1: device descriptor read/8, error -71 [ 59.718926][ T45] logitech 0003:046D:C24F.000D: unknown main item tag 0x2 [ 59.726168][ T45] logitech 0003:046D:C24F.000D: unknown main item tag 0x0 [ 59.733528][ T45] logitech 0003:046D:C24F.000D: unknown main item tag 0x0 [ 59.741522][ T45] input: HID 046d:c24f as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:046D:C24F.000D/input/input27 [ 59.803477][ T427] usb usb5-port1: unable to enumerate USB device [ 59.816500][ T45] logitech 0003:046D:C24F.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 046d:c24f] on usb-dummy_hcd.5-1/input0 [ 59.833386][ T45] logitech 0003:046D:C24F.000D: implement() called with too large value 245 (n: 0)! (kworker/1:1) [ 59.853392][ T45] logitech 0003:046D:C24F.000D: implement() called with too large value 248 (n: 0)! (kworker/1:1) [ 59.864037][ T45] logitech 0003:046D:C24F.000D: implement() called with too large value 129 (n: 0)! (kworker/1:1) [ 59.874641][ T45] logitech 0003:046D:C24F.000D: implement() called with too large value 132 (n: 0)! (kworker/1:1) [ 59.885240][ T45] logitech 0003:046D:C24F.000D: implement() called with too large value 3 (n: 0)! (kworker/1:1) [ 59.896901][ T45] logitech 0003:046D:C24F.000D: implement() called with too large value 248 (n: 0)! (kworker/1:1) [ 59.907546][ T45] logitech 0003:046D:C24F.000D: implement() called with too large value 18 (n: 0)! (kworker/1:1) [ 59.920591][ T45] logitech 0003:046D:C24F.000D: Force feedback support for Logitech Gaming Wheels [ 59.932500][ T45] usb 6-1: USB disconnect, device number 10 [ 60.509030][ T36] audit: type=1400 audit(4111.180:303): avc: denied { name_bind } for pid=1071 comm="syz.4.218" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 60.703343][ T427] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 60.763371][ T45] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 60.823410][ T311] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 60.854225][ T427] usb 6-1: not running at top speed; connect to a high speed hub [ 60.862793][ T427] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.872995][ T427] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 60.881922][ T427] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 60.891079][ T427] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.901726][ T427] usb 6-1: Found UVC 1.00 device (046d:0825) [ 60.903491][ T45] usb 4-1: device descriptor read/64, error -71 [ 60.973343][ T311] usb 5-1: device descriptor read/64, error -71 [ 61.153357][ T45] usb 4-1: device descriptor read/64, error -71 [ 61.171127][ T1065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.179800][ T1065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.183819][ T1064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.196613][ T1064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.205980][ T427] usb 6-1: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 61.213478][ T311] usb 5-1: device descriptor read/64, error -71 [ 61.216764][ T427] usb 6-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 61.229976][ T427] usb 6-1: No streaming interface found for terminal 2. [ 61.239065][ T427] usb 6-1: USB disconnect, device number 11 [ 61.393470][ T45] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 61.453350][ T311] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 61.523358][ T45] usb 4-1: device descriptor read/64, error -71 [ 61.583340][ T311] usb 5-1: device descriptor read/64, error -71 [ 61.763443][ T45] usb 4-1: device descriptor read/64, error -71 [ 61.823346][ T311] usb 5-1: device descriptor read/64, error -71 [ 61.873552][ T45] usb usb4-port1: attempt power cycle [ 61.889633][ T1083] tipc: Started in network mode [ 61.894590][ T1083] tipc: Node identity 0000000000002e000000000000000001, cluster identity 4711 [ 61.903541][ T1083] tipc: Enabling of bearer rejected, failed to enable media [ 61.933422][ T311] usb usb5-port1: attempt power cycle [ 61.973446][ T31] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 62.125005][ T31] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 62.135891][ T31] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 62.148779][ T31] usb 6-1: config 0 interface 0 has no altsetting 0 [ 62.155536][ T31] usb 6-1: New USB device found, idVendor=056a, idProduct=00c0, bcdDevice= 0.00 [ 62.164759][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.173436][ T31] usb 6-1: config 0 descriptor?? [ 62.178755][ T1079] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 62.223371][ T45] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 62.244431][ T45] usb 4-1: device descriptor read/8, error -71 [ 62.274631][ T311] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 62.294315][ T311] usb 5-1: device descriptor read/8, error -71 [ 62.374319][ T45] usb 4-1: device descriptor read/8, error -71 [ 62.424449][ T311] usb 5-1: device descriptor read/8, error -71 [ 62.589511][ T31] usbhid 6-1:0.0: can't add hid device: -71 [ 62.595772][ T31] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 62.604691][ T31] usb 6-1: USB disconnect, device number 12 [ 62.613479][ T45] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 62.634476][ T45] usb 4-1: device descriptor read/8, error -71 [ 62.663348][ T311] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 62.684521][ T311] usb 5-1: device descriptor read/8, error -71 [ 62.774642][ T45] usb 4-1: device descriptor read/8, error -71 [ 62.814480][ T311] usb 5-1: device descriptor read/8, error -71 [ 62.883458][ T45] usb usb4-port1: unable to enumerate USB device [ 62.923436][ T311] usb usb5-port1: unable to enumerate USB device [ 63.272505][ T36] audit: type=1400 audit(4113.940:304): avc: denied { mounton } for pid=1100 comm="syz.5.225" path="/53/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 63.391446][ T1112] Zero length message leads to an empty skb [ 63.611799][ T1114] input: syz0 as /devices/virtual/input/input28 [ 63.853330][ T311] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 63.873344][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 63.913346][ T427] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 64.003338][ T311] usb 6-1: Using ep0 maxpacket: 8 [ 64.003340][ T10] usb 4-1: device descriptor read/64, error -71 [ 64.015973][ T311] usb 6-1: config 0 has no interfaces? [ 64.021466][ T311] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 64.030547][ T311] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.039276][ T311] usb 6-1: config 0 descriptor?? [ 64.064437][ T427] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 64.075381][ T427] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 64.088322][ T427] usb 5-1: config 0 interface 0 has no altsetting 0 [ 64.095021][ T427] usb 5-1: New USB device found, idVendor=056a, idProduct=00c0, bcdDevice= 0.00 [ 64.104149][ T427] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.112783][ T427] usb 5-1: config 0 descriptor?? [ 64.118183][ T1125] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 64.245991][ T36] audit: type=1400 audit(4114.920:305): avc: denied { read } for pid=1113 comm="syz.5.229" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 64.268412][ T10] usb 4-1: device descriptor read/64, error -71 [ 64.284588][ T480] usb 6-1: USB disconnect, device number 13 [ 64.328332][ T427] usbhid 5-1:0.0: can't add hid device: -71 [ 64.334838][ T427] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 64.343502][ T427] usb 5-1: USB disconnect, device number 24 [ 64.523361][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 64.653356][ T10] usb 4-1: device descriptor read/64, error -71 [ 64.893380][ T10] usb 4-1: device descriptor read/64, error -71 [ 64.987856][ T36] audit: type=1400 audit(4115.660:306): avc: denied { accept } for pid=1135 comm="syz.2.238" lport=47149 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 65.003694][ T10] usb usb4-port1: attempt power cycle [ 65.043354][ T480] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 65.107608][ T36] audit: type=1400 audit(4115.780:307): avc: denied { mounton } for pid=1148 comm="syz.2.243" path="/84/file0" dev="tmpfs" ino=533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 65.153478][ T311] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 65.193353][ T480] usb 6-1: device descriptor read/64, error -71 [ 65.304501][ T311] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 193, changing to 7 [ 65.317010][ T311] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 65.326145][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.334195][ T311] usb 5-1: Product: syz [ 65.338383][ T311] usb 5-1: Manufacturer: syz [ 65.342992][ T311] usb 5-1: SerialNumber: syz [ 65.353316][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 65.374474][ T10] usb 4-1: device descriptor read/8, error -71 [ 65.433358][ T480] usb 6-1: device descriptor read/64, error -71 [ 65.504442][ T10] usb 4-1: device descriptor read/8, error -71 [ 65.553451][ T311] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 65.563721][ T311] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 65.574945][ T311] usb 5-1: USB disconnect, device number 25 [ 65.585098][ T600] udevd[600]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 65.673347][ T480] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 65.743375][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 65.764490][ T10] usb 4-1: device descriptor read/8, error -71 [ 65.803345][ T480] usb 6-1: device descriptor read/64, error -71 [ 65.894494][ T10] usb 4-1: device descriptor read/8, error -71 [ 65.951549][ T1152] overlayfs: failed to clone upperpath [ 66.003448][ T10] usb usb4-port1: unable to enumerate USB device [ 66.043343][ T480] usb 6-1: device descriptor read/64, error -71 [ 66.153468][ T480] usb usb6-port1: attempt power cycle [ 66.470868][ T1159] netlink: 20 bytes leftover after parsing attributes in process `syz.2.247'. [ 66.493344][ T480] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 66.514348][ T480] usb 6-1: device descriptor read/8, error -71 [ 66.644406][ T480] usb 6-1: device descriptor read/8, error -71 [ 66.691223][ T36] audit: type=1400 audit(4117.360:308): avc: denied { create } for pid=1166 comm="syz.3.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 66.883350][ T480] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 66.904542][ T480] usb 6-1: device descriptor read/8, error -71 [ 66.985041][ T36] audit: type=1400 audit(4117.660:309): avc: denied { map } for pid=1169 comm="syz.4.251" path="socket:[10436]" dev="sockfs" ino=10436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.033521][ T36] audit: type=1400 audit(4117.710:310): avc: denied { cmd } for pid=1174 comm="syz.4.253" path="socket:[10443]" dev="sockfs" ino=10443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 67.056608][ T480] usb 6-1: device descriptor read/8, error -71 [ 67.183463][ T480] usb usb6-port1: unable to enumerate USB device [ 67.203374][ T311] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 67.354506][ T311] usb 4-1: config 0 has no interfaces? [ 67.362580][ T311] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 67.371733][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.380073][ T311] usb 4-1: Product: syz [ 67.384933][ T311] usb 4-1: Manufacturer: syz [ 67.389585][ T311] usb 4-1: SerialNumber: syz [ 67.396938][ T311] usb 4-1: config 0 descriptor?? [ 67.421716][ T36] audit: type=1400 audit(4118.090:311): avc: denied { mount } for pid=1186 comm="syz.2.258" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 67.443408][ T480] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 67.486126][ T1188] incfs: Error accessing: ./file0. [ 67.491360][ T1188] incfs: mount failed -2 [ 67.594386][ T480] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 67.605286][ T480] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 67.618425][ T480] usb 5-1: config 0 interface 0 has no altsetting 0 [ 67.625080][ T480] usb 5-1: New USB device found, idVendor=056a, idProduct=00c0, bcdDevice= 0.00 [ 67.634375][ T480] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.643187][ T480] usb 5-1: config 0 descriptor?? [ 67.651255][ T1181] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 67.702976][ T1196] netlink: 'syz.2.262': attribute type 7 has an invalid length. [ 67.809171][ T36] audit: type=1400 audit(4118.480:312): avc: denied { unmount } for pid=420 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.836319][ T36] audit: type=1400 audit(4118.510:313): avc: denied { read } for pid=1202 comm="syz.5.265" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 67.837201][ T1203] device-mapper: ioctl: Unable to rename non-existent device, to 4Vҁ [ 72.239936][ T1379] __dump_stack+0x21/0x30 [ 72.240029][ T1379] dump_stack_lvl+0x140/0x1c0 [ 72.240128][ T1379] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.240218][ T1379] dump_stack+0x19/0x20 [ 72.240291][ T1379] should_fail_ex+0x3c2/0x510 [ 72.240353][ T1379] should_fail+0xf/0x20 [ 72.240410][ T1379] get_futex_key+0x178/0x940 [ 72.240463][ T1379] ? __cfi___futex_wait+0x10/0x10 [ 72.240533][ T1379] ? __cfi_get_futex_key+0x10/0x10 [ 72.240595][ T1379] ? __cfi_futex_wake_mark+0x10/0x10 [ 72.240665][ T1379] futex_wake+0x150/0x950 [ 72.240730][ T1379] ? futex_wait+0x2b8/0x7c0 [ 72.240800][ T1379] ? __cfi_futex_wake+0x10/0x10 [ 72.240871][ T1379] ? vfs_write+0xbcf/0xfd0 [ 72.240951][ T1379] do_futex+0x37d/0x510 [ 72.241012][ T1379] ? __cfi_do_futex+0x10/0x10 [ 72.241073][ T1379] ? mutex_unlock+0x90/0x240 [ 72.241158][ T1379] __se_sys_futex+0x13c/0x320 [ 72.241217][ T1379] ? fput+0x1a4/0x230 [ 72.241286][ T1379] ? __x64_sys_futex+0x110/0x110 [ 72.241353][ T1379] ? fdget+0x188/0x1e0 [ 72.241405][ T1379] __x64_sys_futex+0xe9/0x110 [ 72.241467][ T1379] x64_sys_call+0x227f/0x2ee0 [ 72.241527][ T1379] do_syscall_64+0x57/0xf0 [ 72.241553][ T1379] ? clear_bhb_loop+0x50/0xa0 [ 72.241620][ T1379] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.241691][ T1379] RIP: 0033:0x7fb38e79f559 [ 72.241734][ T1379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.241785][ T1379] RSP: 002b:00007fb38d1f70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 72.241846][ T1379] RAX: ffffffffffffffda RBX: 00007fb38ea26098 RCX: 00007fb38e79f559 [ 72.241895][ T1379] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb38ea2609c [ 72.241936][ T1379] RBP: 00007fb38ea26090 R08: 4000000000000000 R09: 0000000000000000 [ 72.241977][ T1379] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 72.242018][ T1379] R13: 00007fb38ea26128 R14: 00007ffebe6a0660 R15: 00007ffebe6a0748 [ 72.242080][ T1379] [ 72.261807][ T36] audit: type=1400 audit(4122.930:353): avc: denied { mounton } for pid=1377 comm="syz.3.327" path="/55/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 72.495225][ T36] audit: type=1400 audit(4122.950:354): avc: denied { write } for pid=1377 comm="syz.3.327" name="sched_switch" dev="tracefs" ino=11067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 72.517902][ T36] audit: type=1400 audit(4122.950:355): avc: denied { add_name } for pid=1377 comm="syz.3.327" name="enable" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 72.736573][ T1392] netlink: 'syz.2.330': attribute type 10 has an invalid length. [ 72.746161][ T1392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.330'. [ 72.943363][ T1407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.337'. [ 73.063368][ T1089] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 73.193433][ T1089] usb 5-1: device descriptor read/64, error -71 [ 73.433344][ T1089] usb 5-1: device descriptor read/64, error -71 [ 73.560408][ T45] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 73.576790][ T1422] overlayfs: failed to clone upperpath [ 73.587854][ T45] usb 6-1: USB disconnect, device number 19 [ 73.673339][ T1089] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 73.823331][ T1089] usb 5-1: device descriptor read/64, error -71 [ 74.014427][ T45] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 74.063326][ T1089] usb 5-1: device descriptor read/64, error -71 [ 74.183443][ T1089] usb usb5-port1: attempt power cycle [ 74.188985][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 74.196016][ T45] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.207324][ T45] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 74.220606][ T45] usb 6-1: config 0 interface 0 has no altsetting 0 [ 74.227477][ T45] usb 6-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 74.238699][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.247782][ T45] usb 6-1: config 0 descriptor?? [ 74.276396][ T1456] netlink: 28 bytes leftover after parsing attributes in process `syz.3.355'. [ 74.440918][ T1460] overlayfs: failed to clone upperpath [ 74.486461][ T1466] overlayfs: missing 'lowerdir' [ 74.523338][ T10] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 74.533334][ T1089] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 74.566092][ T1089] usb 5-1: device descriptor read/8, error -71 [ 74.592311][ T1473] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 74.599675][ T1473] IPv6: NLM_F_CREATE should be set when creating new route [ 74.606943][ T1473] IPv6: NLM_F_CREATE should be set when creating new route [ 74.667651][ T45] input: HID 04f2:1236 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:04F2:1236.000E/input/input29 [ 74.694391][ T1089] usb 5-1: device descriptor read/8, error -71 [ 74.701389][ T45] chicony 0003:04F2:1236.000E: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 04f2:1236] on usb-dummy_hcd.5-1/input0 [ 74.770072][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 74.777762][ T10] usb 4-1: can't read configurations, error -71 [ 74.933364][ T1089] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 74.964511][ T1089] usb 5-1: device descriptor read/8, error -71 [ 75.105342][ T1089] usb 5-1: device descriptor read/8, error -71 [ 75.223686][ T1089] usb usb5-port1: unable to enumerate USB device [ 75.242474][ T1489] overlayfs: failed to clone upperpath [ 75.420219][ T1493] syz.2.367 (1493): attempted to duplicate a private mapping with mremap. This is not supported. [ 75.525722][ T1512] overlayfs: failed to resolve './bus': -2 [ 75.547879][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 75.547902][ T36] audit: type=1400 audit(4126.220:362): avc: denied { mount } for pid=1513 comm="syz.2.375" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.734154][ T36] audit: type=1400 audit(4126.410:363): avc: denied { connect } for pid=1522 comm="syz.2.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 75.773323][ T36] audit: type=1400 audit(4126.410:364): avc: denied { write } for pid=1522 comm="syz.2.378" laddr=fe80::1016:9cff:fe9d:ee5c lport=1 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 75.841621][ T1529] overlayfs: missing 'lowerdir' [ 75.851440][ T36] audit: type=1400 audit(4126.520:365): avc: denied { getopt } for pid=1528 comm="syz.2.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.870219][ T10] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 75.913157][ T1535] overlayfs: failed to resolve './bus': -2 [ 75.992972][ T1538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'. [ 76.043749][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 76.052430][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.062684][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 76.071689][ T10] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 76.080905][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.263330][ T45] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 76.299834][ T1089] usb 4-1: USB disconnect, device number 29 [ 76.425421][ T45] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 76.435610][ T45] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 76.445866][ T45] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 76.458088][ T45] usb 5-1: New USB device found, idVendor=0e41, idProduct=5058, bcdDevice= 0.40 [ 76.467961][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.476346][ T45] usb 5-1: Product: syz [ 76.480781][ T45] usb 5-1: Manufacturer: syz [ 76.485809][ T45] usb 5-1: SerialNumber: syz [ 76.493560][ T1532] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 76.640534][ T10] usb 6-1: USB disconnect, device number 20 [ 76.708992][ T45] usb 5-1: MIDIStreaming interface descriptor not found [ 76.721439][ T45] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -12 [ 76.732146][ T45] usb 5-1: USB disconnect, device number 35 [ 76.742864][ T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 76.821562][ T1548] netlink: 140 bytes leftover after parsing attributes in process `syz.2.389'. [ 76.830964][ T1548] fuse: Bad value for 'user_id' [ 76.835922][ T1548] fuse: Bad value for 'user_id' [ 76.860127][ T1554] overlayfs: failed to resolve './bus': -2 [ 76.877171][ T1556] SELinux: Context system_u:object_r:ssh_keygen_exec_t:s0 is not valid (left unmapped). [ 76.887257][ T36] audit: type=1400 audit(4127.560:366): avc: denied { relabelto } for pid=1555 comm="syz.3.393" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:ssh_keygen_exec_t:s0" [ 76.888670][ T1556] netlink: 140 bytes leftover after parsing attributes in process `syz.3.393'. [ 76.914552][ T36] audit: type=1400 audit(4127.560:367): avc: denied { associate } for pid=1555 comm="syz.3.393" name="ptp0" dev="devtmpfs" ino=196 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ssh_keygen_exec_t:s0" [ 76.951859][ T1548] fuse: Bad value for 'user_id' [ 76.959512][ T1548] fuse: Bad value for 'user_id' [ 77.043378][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 77.128571][ T1569] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.142280][ T1569] overlay: Unknown parameter 'measure' [ 77.194681][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 77.203040][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.213305][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 77.227248][ T10] usb 6-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 77.236397][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 77.244417][ T10] usb 6-1: Product: syz [ 77.248711][ T10] usb 6-1: Manufacturer: syz [ 77.258846][ T10] usb 6-1: Found UVC 1.00 device syz (8086:0ad2) [ 77.266928][ T10] usb 6-1: No streaming interface found for terminal 2. [ 77.316036][ T1579] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 77.347304][ T1579] kvm: MWAIT instruction emulated as NOP! [ 77.403345][ T480] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 77.459859][ T10] usb 6-1: USB disconnect, device number 21 [ 77.554853][ T480] usb 4-1: unable to get BOS descriptor or descriptor too short [ 77.562988][ T480] usb 4-1: not running at top speed; connect to a high speed hub [ 77.573903][ T480] usb 4-1: string descriptor 0 read error: -22 [ 77.580192][ T480] usb 4-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 77.589361][ T480] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.600095][ T480] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 77.743381][ T45] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 77.800519][ T1573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.809198][ T1573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.818651][ T480] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 77.851258][ T480] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 77.859842][ T600] udevd[600]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 77.870569][ T480] usb 4-1: USB disconnect, device number 30 [ 77.903334][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 77.909734][ T45] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 77.917959][ T45] usb 5-1: config 0 has no interface number 0 [ 77.926410][ T45] usb 5-1: config 0 interface 184 has no altsetting 0 [ 77.934698][ T45] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 77.943779][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.951792][ T45] usb 5-1: Product: syz [ 77.956004][ T45] usb 5-1: Manufacturer: syz [ 77.960622][ T45] usb 5-1: SerialNumber: syz [ 77.965981][ T45] usb 5-1: config 0 descriptor?? [ 77.971799][ T45] smsc75xx v1.0.0 [ 77.998066][ T36] audit: type=1400 audit(4128.670:368): avc: denied { mounton } for pid=1601 comm="syz.5.407" path="/75/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 78.021914][ T36] audit: type=1400 audit(4128.670:369): avc: denied { bind } for pid=1601 comm="syz.5.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.563038][ T1630] __nla_validate_parse: 1 callbacks suppressed [ 78.563055][ T1630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.416'. [ 78.622200][ T1636] netlink: 'syz.2.419': attribute type 25 has an invalid length. [ 78.631076][ T1636] SELinux: Context system_u:object_r:hald_keymap_exec_t:s0 is not valid (left unmapped). [ 78.641730][ T36] audit: type=1400 audit(4129.310:370): avc: denied { relabelto } for pid=1635 comm="syz.2.419" name="file0" dev="tmpfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 78.672947][ T36] audit: type=1400 audit(4129.310:371): avc: denied { associate } for pid=1635 comm="syz.2.419" name="file0" dev="tmpfs" ino=1062 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 79.013371][ T480] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 79.107147][ T1648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.116283][ T1648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.126603][ T1648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.135281][ T1648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.167069][ T480] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 79.175327][ T480] usb 4-1: config 0 has no interface number 0 [ 79.181499][ T480] usb 4-1: config 0 interface 200 has no altsetting 0 [ 79.189905][ T480] usb 4-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=67.93 [ 79.199061][ T480] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.207143][ T480] usb 4-1: Product: syz [ 79.211344][ T480] usb 4-1: Manufacturer: syz [ 79.215995][ T480] usb 4-1: SerialNumber: syz [ 79.221607][ T480] usb 4-1: config 0 descriptor?? [ 79.689866][ T1669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.699543][ T1669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.420421][ T1704] netlink: 5892 bytes leftover after parsing attributes in process `syz.5.442'. [ 80.459100][ T1707] input: syz0 as /devices/virtual/input/input30 [ 80.853128][ T1713] ./dev/sda1: Can't lookup blockdev [ 80.858931][ T1713] ./dev/sda1: Can't lookup blockdev [ 80.864408][ T1713] ./dev/sda1: Can't lookup blockdev [ 80.869870][ T1713] ./dev/sda1: Can't lookup blockdev [ 80.875265][ T1713] ./dev/sda1: Can't lookup blockdev [ 80.880709][ T1713] ./dev/sda1: Can't lookup blockdev [ 80.886190][ T1713] ./dev/sda1: Can't lookup blockdev [ 80.891628][ T1713] ./dev/sda1: Can't lookup blockdev [ 80.897008][ T1713] ./dev/sda1: Can't lookup blockdev [ 80.902461][ T1713] ./dev/sda1: Can't lookup blockdev [ 80.907913][ T1713] ./dev/sda1: Can't lookup blockdev [ 80.913374][ T1713] ./dev/sda1: Can't lookup blockdev [ 80.918782][ T1713] ./dev/sda1: Can't lookup blockdev [ 80.924245][ T1713] ./dev/sda1: Can't lookup blockdev [ 80.929663][ T1713] ./dev/sda1: Can't lookup blockdev [ 80.935242][ T1713] ./dev/sda1: Can't lookup blockdev [ 80.940665][ T1713] ./dev/sda1: Can't lookup blockdev [ 80.946137][ T1713] ./dev/sda1: Can't lookup blockdev [ 80.951551][ T1713] ./dev/sda1: Can't lookup blockdev [ 80.956980][ T1713] ./dev/sda1: Can't lookup blockdev [ 80.962404][ T1713] ./dev/sda1: Can't lookup blockdev [ 80.967847][ T1713] ./dev/sda1: Can't lookup blockdev [ 80.973252][ T1713] ./dev/sda1: Can't lookup blockdev [ 80.978730][ T1713] ./dev/sda1: Can't lookup blockdev [ 80.984154][ T1713] ./dev/sda1: Can't lookup blockdev [ 80.989558][ T1713] ./dev/sda1: Can't lookup blockdev [ 80.995000][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.004837][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.010399][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.016208][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.021733][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.027519][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.033095][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.038937][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.044608][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.050149][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.055920][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.061446][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.067201][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.072752][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.078571][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.084234][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.089822][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.095552][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.101065][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.106837][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.112427][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.118144][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.123827][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.129358][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.137288][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.158438][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.167195][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.181489][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.187002][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.192643][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.201880][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.207407][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.213131][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.219293][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.225302][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.230752][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.246239][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.251710][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.257448][ T1713] ./dev/sda1: Can't lookup blockdev [ 81.314467][ T1724] kvm: apic: phys broadcast and lowest prio [ 81.532832][ T36] kauditd_printk_skb: 38 callbacks suppressed [ 81.532850][ T36] audit: type=1400 audit(4132.200:410): avc: denied { unmount } for pid=337 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 81.564308][ T36] audit: type=1400 audit(4132.240:411): avc: denied { getopt } for pid=1740 comm="syz.4.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 81.583153][ T36] audit: type=1400 audit(4132.240:412): avc: denied { bind } for pid=1740 comm="syz.4.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 81.744960][ T480] ftdi_sio 4-1:0.200: FTDI USB Serial Device converter detected [ 81.753120][ T480] ftdi_sio ttyUSB0: unknown device type: 0x6793 [ 81.766985][ T480] usb 4-1: USB disconnect, device number 31 [ 81.774455][ T480] ftdi_sio 4-1:0.200: device disconnected [ 82.645111][ T1770] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 82.670733][ T1770] incfs: Can't find or create .index dir in ./file0 [ 82.683530][ T1770] incfs: mount failed -30 [ 82.703648][ T1774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.712178][ T1774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.750481][ T1781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.759239][ T1781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.943363][ T1089] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 83.074157][ T1089] usb 4-1: device descriptor read/64, error -71 [ 83.284678][ T1786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.293336][ T1786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.313457][ T1089] usb 4-1: device descriptor read/64, error -71 [ 83.474397][ T45] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -110 [ 83.485413][ T45] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -110 [ 83.495313][ T45] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 83.505736][ T45] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -110 [ 83.550368][ T36] audit: type=1400 audit(4134.220:413): avc: denied { write } for pid=1787 comm="syz.5.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 83.570948][ T1089] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 83.656378][ T1802] FAULT_INJECTION: forcing a failure. [ 83.656378][ T1802] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 83.669524][ T1802] CPU: 1 UID: 0 PID: 1802 Comm: syz.5.480 Not tainted syzkaller #0 f4dc25654f8255e5780388d900d0b326847aed68 [ 83.669559][ T1802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 83.669574][ T1802] Call Trace: [ 83.669582][ T1802] [ 83.669590][ T1802] __dump_stack+0x21/0x30 [ 83.669630][ T1802] dump_stack_lvl+0x140/0x1c0 [ 83.669664][ T1802] ? __cfi_dump_stack_lvl+0x10/0x10 [ 83.669699][ T1802] ? check_stack_object+0x138/0x150 [ 83.669733][ T1802] dump_stack+0x19/0x20 [ 83.669766][ T1802] should_fail_ex+0x3c2/0x510 [ 83.669789][ T1802] should_fail+0xf/0x20 [ 83.669809][ T1802] should_fail_usercopy+0x1e/0x30 [ 83.669833][ T1802] _copy_to_user+0x24/0xa0 [ 83.669861][ T1802] simple_read_from_buffer+0xed/0x160 [ 83.669888][ T1802] proc_fail_nth_read+0x1aa/0x220 [ 83.669916][ T1802] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 83.669944][ T1802] ? avc_has_perm_noaudit+0x289/0x360 [ 83.669976][ T1802] ? bpf_lsm_file_permission+0xd/0x20 [ 83.670000][ T1802] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 83.670028][ T1802] vfs_read+0x288/0xc70 [ 83.670058][ T1802] ? __cfi_avc_has_perm+0x10/0x10 [ 83.670082][ T1802] ? __cfi_vfs_read+0x10/0x10 [ 83.670112][ T1802] ? __kasan_check_write+0x18/0x20 [ 83.670142][ T1802] ? mutex_lock+0x97/0x1d0 [ 83.670169][ T1802] ? __cfi_mutex_lock+0x10/0x10 [ 83.670198][ T1802] ksys_read+0x145/0x260 [ 83.670229][ T1802] ? __cfi_ksys_read+0x10/0x10 [ 83.670259][ T1802] ? release_sock+0x171/0x1f0 [ 83.670283][ T1802] ? __kasan_check_read+0x15/0x20 [ 83.670314][ T1802] __x64_sys_read+0x7f/0x90 [ 83.670346][ T1802] x64_sys_call+0x2638/0x2ee0 [ 83.670369][ T1802] do_syscall_64+0x57/0xf0 [ 83.670390][ T1802] ? clear_bhb_loop+0x50/0xa0 [ 83.670419][ T1802] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 83.670448][ T1802] RIP: 0033:0x7f79c935fd8e [ 83.670468][ T1802] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 83.670488][ T1802] RSP: 002b:00007f79ca2b2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 83.670513][ T1802] RAX: ffffffffffffffda RBX: 00007f79ca2b36c0 RCX: 00007f79c935fd8e [ 83.670531][ T1802] RDX: 000000000000000f RSI: 00007f79ca2b30a0 RDI: 0000000000000003 [ 83.670547][ T1802] RBP: 00007f79ca2b3090 R08: 0000000000000000 R09: 0000000000000000 [ 83.670563][ T1802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.670578][ T1802] R13: 00007f79c9626038 R14: 00007f79c9625fa0 R15: 00007ffd45b92158 [ 83.670598][ T1802] [ 83.689468][ T1805] SELinux: Context system_u:object_r:var_spool_t:s0 is not valid (left unmapped). [ 83.743509][ T1089] usb 4-1: device descriptor read/64, error -71 [ 83.750062][ T36] audit: type=1400 audit(4134.420:414): avc: denied { relabelto } for pid=1803 comm="syz.2.482" name="file0" dev="tmpfs" ino=1215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:var_spool_t:s0" [ 83.909955][ T1811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.911697][ T36] audit: type=1400 audit(4134.420:415): avc: denied { associate } for pid=1803 comm="syz.2.482" name="file0" dev="tmpfs" ino=1215 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:var_spool_t:s0" [ 83.925199][ T1811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.016668][ T1811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.025615][ T1811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.055881][ T36] audit: type=1400 audit(4134.730:416): avc: denied { bind } for pid=1814 comm="syz.5.486" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.073443][ T1089] usb 4-1: device descriptor read/64, error -71 [ 84.183492][ T1089] usb usb4-port1: attempt power cycle [ 84.293347][ T45] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 84.423347][ T45] usb 6-1: device descriptor read/64, error -71 [ 84.523347][ T1089] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 84.544477][ T1089] usb 4-1: device descriptor read/8, error -71 [ 84.642945][ T1828] ./dev/sda1: Can't lookup blockdev [ 84.646476][ T1827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.656788][ T1827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.663455][ T45] usb 6-1: device descriptor read/64, error -71 [ 84.674529][ T1089] usb 4-1: device descriptor read/8, error -71 [ 84.888066][ T1836] overlayfs: failed to clone upperpath [ 84.903424][ T45] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 84.913333][ T1089] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 84.934453][ T1089] usb 4-1: device descriptor read/8, error -71 [ 85.033381][ T45] usb 6-1: device descriptor read/64, error -71 [ 85.064470][ T1089] usb 4-1: device descriptor read/8, error -71 [ 85.173473][ T1089] usb usb4-port1: unable to enumerate USB device [ 85.273377][ T45] usb 6-1: device descriptor read/64, error -71 [ 85.383463][ T45] usb usb6-port1: attempt power cycle [ 85.723367][ T45] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 85.748576][ T45] usb 6-1: device descriptor read/8, error -71 [ 85.770213][ T1847] FAULT_INJECTION: forcing a failure. [ 85.770213][ T1847] name failslab, interval 1, probability 0, space 0, times 0 [ 85.782950][ T1847] CPU: 0 UID: 0 PID: 1847 Comm: syz.4.496 Not tainted syzkaller #0 f4dc25654f8255e5780388d900d0b326847aed68 [ 85.782990][ T1847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 85.783008][ T1847] Call Trace: [ 85.783016][ T1847] [ 85.783026][ T1847] __dump_stack+0x21/0x30 [ 85.783086][ T1847] dump_stack_lvl+0x140/0x1c0 [ 85.783124][ T1847] ? __cfi_dump_stack_lvl+0x10/0x10 [ 85.783162][ T1847] ? __kasan_check_write+0x18/0x20 [ 85.783200][ T1847] ? down_write+0xee/0x2b0 [ 85.783233][ T1847] dump_stack+0x19/0x20 [ 85.783273][ T1847] should_fail_ex+0x3c2/0x510 [ 85.783296][ T1847] should_failslab+0xac/0x100 [ 85.783319][ T1847] __kmalloc_cache_noprof+0x41/0x470 [ 85.783356][ T1847] ? cgroup_mkdir+0xbe2/0x1600 [ 85.783380][ T1847] cgroup_mkdir+0xbe2/0x1600 [ 85.783405][ T1847] ? __cfi_cgroup_mkdir+0x10/0x10 [ 85.783428][ T1847] kernfs_iop_mkdir+0x1be/0x2d0 [ 85.783458][ T1847] vfs_mkdir+0x591/0x810 [ 85.783487][ T1847] do_mkdirat+0x240/0x530 [ 85.783515][ T1847] ? __cfi_do_mkdirat+0x10/0x10 [ 85.783543][ T1847] ? __kasan_check_write+0x18/0x20 [ 85.783576][ T1847] ? getname_flags+0x203/0x6b0 [ 85.783612][ T1847] ? __kasan_check_write+0x18/0x20 [ 85.783646][ T1847] __x64_sys_mkdirat+0x8b/0xa0 [ 85.783674][ T1847] x64_sys_call+0x2ba8/0x2ee0 [ 85.783699][ T1847] do_syscall_64+0x57/0xf0 [ 85.783721][ T1847] ? clear_bhb_loop+0x50/0xa0 [ 85.783753][ T1847] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 85.783790][ T1847] RIP: 0033:0x7f93cd59f559 [ 85.783811][ T1847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.783834][ T1847] RSP: 002b:00007f93ce4b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 85.783861][ T1847] RAX: ffffffffffffffda RBX: 00007f93cd825fa0 RCX: 00007f93cd59f559 [ 85.783880][ T1847] RDX: 00000000000001ff RSI: 0000200000000780 RDI: ffffffffffffff9c [ 85.783897][ T1847] RBP: 00007f93cd636b20 R08: 0000000000000000 R09: 0000000000000000 [ 85.783914][ T1847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.783929][ T1847] R13: 00007f93cd826038 R14: 00007f93cd825fa0 R15: 00007ffd7253ff38 [ 85.783950][ T1847] [ 85.884814][ T45] usb 6-1: device descriptor read/8, error -71 [ 85.892482][ T1847] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] PREEMPT SMP KASAN PTI [ 86.020546][ T1847] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 86.028987][ T1847] CPU: 0 UID: 0 PID: 1847 Comm: syz.4.496 Not tainted syzkaller #0 f4dc25654f8255e5780388d900d0b326847aed68 [ 86.040482][ T1847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 86.050544][ T1847] RIP: 0010:cgroup_mkdir+0x122a/0x1600 [ 86.056122][ T1847] Code: eb 05 e8 79 4d 08 00 48 89 df e8 11 9e 00 00 48 81 fb 01 f0 ff ff 0f 83 9a fb ff ff 4c 8d b3 08 01 00 00 4d 89 f4 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 f7 e8 e7 c7 61 00 48 8b bb 08 01 00 00 [ 86.075740][ T1847] RSP: 0018:ffffc9001110fc88 EFLAGS: 00010206 [ 86.081828][ T1847] RAX: 83243f0b48fc6300 RBX: 0000000000000000 RCX: ffff8881f6c3adc0 [ 86.089838][ T1847] RDX: ffff88810b6c0300 RSI: ffff8881324a4000 RDI: ffff888100042000 [ 86.097866][ T1847] RBP: ffffc9001110fd38 R08: ffffffff81de7868 R09: ffffffff81e2954f [ 86.105842][ T1847] R10: ffffffff81e2c034 R11: ffffffff81e2906e R12: 0000000000000021 [ 86.113818][ T1847] R13: dffffc0000000000 R14: 0000000000000108 R15: ffff8881324a4010 [ 86.121797][ T1847] FS: 00007f93ce4b36c0(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 86.130735][ T1847] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.133426][ T45] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 86.137322][ T1847] CR2: 00007f401d33b3c0 CR3: 000000010bb9e000 CR4: 00000000003526b0 [ 86.137347][ T1847] DR0: ffffffffffffffff DR1: 00000000000001fb DR2: ffffffffffffffff [ 86.160931][ T1847] DR3: 0000000000008001 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 86.163446][ T36] audit: type=1400 audit(4136.830:417): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 86.168923][ T1847] Call Trace: [ 86.168933][ T1847] [ 86.168947][ T1847] ? __cfi_cgroup_mkdir+0x10/0x10 [ 86.192435][ T45] usb 6-1: device descriptor read/8, error -71 [ 86.193505][ T1847] kernfs_iop_mkdir+0x1be/0x2d0 [ 86.193540][ T1847] vfs_mkdir+0x591/0x810 [ 86.193570][ T1847] do_mkdirat+0x240/0x530 [ 86.201073][ T36] audit: type=1400 audit(4136.830:418): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.201548][ T1847] ? __cfi_do_mkdirat+0x10/0x10 [ 86.207960][ T36] audit: type=1400 audit(4136.830:419): avc: denied { write } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.212564][ T1847] ? __kasan_check_write+0x18/0x20 [ 86.212605][ T1847] ? getname_flags+0x203/0x6b0 [ 86.277237][ T1847] ? __kasan_check_write+0x18/0x20 [ 86.282372][ T1847] __x64_sys_mkdirat+0x8b/0xa0 [ 86.287151][ T1847] x64_sys_call+0x2ba8/0x2ee0 [ 86.291831][ T1847] do_syscall_64+0x57/0xf0 [ 86.296252][ T1847] ? clear_bhb_loop+0x50/0xa0 [ 86.300934][ T1847] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 86.306834][ T1847] RIP: 0033:0x7f93cd59f559 [ 86.311271][ T1847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.313404][ T311] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 86.330894][ T1847] RSP: 002b:00007f93ce4b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 86.330925][ T1847] RAX: ffffffffffffffda RBX: 00007f93cd825fa0 RCX: 00007f93cd59f559 [ 86.330943][ T1847] RDX: 00000000000001ff RSI: 0000200000000780 RDI: ffffffffffffff9c [ 86.330959][ T1847] RBP: 00007f93cd636b20 R08: 0000000000000000 R09: 0000000000000000 [ 86.330974][ T1847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.330989][ T1847] R13: 00007f93cd826038 R14: 00007f93cd825fa0 R15: 00007ffd7253ff38 [ 86.341305][ T45] usb 6-1: device descriptor read/8, error -71 [ 86.346939][ T1847] [ 86.346951][ T1847] Modules linked in: [ 86.347227][ T1847] ---[ end trace 0000000000000000 ]--- [ 86.405595][ T1847] RIP: 0010:cgroup_mkdir+0x122a/0x1600 [ 86.411194][ T1847] Code: eb 05 e8 79 4d 08 00 48 89 df e8 11 9e 00 00 48 81 fb 01 f0 ff ff 0f 83 9a fb ff ff 4c 8d b3 08 01 00 00 4d 89 f4 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 f7 e8 e7 c7 61 00 48 8b bb 08 01 00 00 [ 86.430944][ T1847] RSP: 0018:ffffc9001110fc88 EFLAGS: 00010206 [ 86.438076][ T1847] RAX: 83243f0b48fc6300 RBX: 0000000000000000 RCX: ffff8881f6c3adc0 [ 86.446157][ T1847] RDX: ffff88810b6c0300 RSI: ffff8881324a4000 RDI: ffff888100042000 [ 86.455372][ T1847] RBP: ffffc9001110fd38 R08: ffffffff81de7868 R09: ffffffff81e2954f [ 86.463441][ T1847] R10: ffffffff81e2c034 R11: ffffffff81e2906e R12: 0000000000000021 [ 86.471439][ T1847] R13: dffffc0000000000 R14: 0000000000000108 R15: ffff8881324a4010 [ 86.479470][ T1847] FS: 00007f93ce4b36c0(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 86.488446][ T1847] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.493612][ T45] usb usb6-port1: unable to enumerate USB device [ 86.495100][ T1847] CR2: 00007f401d33b3c0 CR3: 000000010bb9e000 CR4: 00000000003526b0 [ 86.504106][ T311] usb 4-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 86.509426][ T1847] DR0: ffffffffffffffff DR1: 00000000000001fb DR2: ffffffffffffffff [ 86.521993][ T311] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 86.528849][ T1847] DR3: 0000000000008001 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 86.541558][ T311] usb 4-1: config 1 interface 0 has no altsetting 0 [ 86.549717][ T1847] Kernel panic - not syncing: Fatal exception [ 86.556394][ T1847] Kernel Offset: disabled