last executing test programs: 1m47.66882354s ago: executing program 3 (id=378): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000040)={{0x1}}) r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250", @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES64=0x0], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000007c0)=ANY=[@ANYBLOB="400f02"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000040)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="201002"], 0x0, 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r3, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r2], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x90}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x51, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x348, 0x0, 0x0, 0x1000, 0xfff, r6, 0x0, 0x9}}}, &(0x7f0000000300)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) 1m44.630833912s ago: executing program 3 (id=395): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be140006fffe8000000000000300000000000000aaff020000000000000000000000000001"], 0xfdef) 1m43.807668092s ago: executing program 3 (id=397): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0xffff8000}) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = dup(r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendmmsg$inet(r4, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="ac14"], 0x98}}], 0x1, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10800, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose}]}}) 1m43.699122005s ago: executing program 3 (id=398): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x19c) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r2, 0x400c4d04, &(0x7f0000000180)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000140)={0x30003, 0x0, {[0x4, 0x2, 0x6, 0x9a47, 0x7, 0x80000000, 0x80, 0xe02]}}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000280)={{{0x7, 0x1}}, 0x11b, 0x9, &(0x7f0000000300)="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"}) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x4000003, 0xfc, 0x2, 0xc, 0xff, 0x8, 0x6, 0x1, 0x0, 0x7, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x8, 0x3}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000080)={0xfffffffc, 0xb, 0x6, 0xfffffffc, 0x7d, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r6, &(0x7f0000000300)=ANY=[], 0x5eaa) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000200)={0x2c754362, 0x4, 0x9, 0xd, 0xc, "0100000000e409878000000040000000000018"}) ioctl$TCSETS(r6, 0x40045431, &(0x7f00000001c0)={0x0, 0x80000, 0x0, 0x2, 0x18, "00000000000700000000fffe00"}) r7 = syz_open_pts(r6, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000240)=0x3) syz_init_net_socket$bt_rfcomm(0x1f, 0x2, 0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m43.634293716s ago: executing program 3 (id=399): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r1, &(0x7f0000000340)=[{{0x0, 0x2710}, 0x1, 0x8001, 0x6}], 0x18) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/warn_count', 0x80000, 0x20) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0xfffe, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}}}, 0x108) 1m43.513746649s ago: executing program 3 (id=401): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_io_uring_setup(0x4504, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0x0, 0x2b7, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) (async) r1 = syz_io_uring_setup(0x4504, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0x0, 0x2b7, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) r2 = add_key$user(&(0x7f0000000040), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000100)="389d", 0x2, 0xffffffffffffffff) keyctl$read(0xb, r2, &(0x7f0000000280)=""/130, 0x1001) (async) keyctl$read(0xb, r2, &(0x7f0000000280)=""/130, 0x1001) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x402, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x402, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000640)="b9e60a0032500050002400fcffffffc744240276980000c7442406000000000f011c9e3e66460f38806fca66410f3880200f21f835c00000000f23f8660f3881143126430f01c2c423f916c3088080430000c0c03235000000003a3a3066b8cd008ee0", 0x63}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000340)={[0x40000000002, 0x0, 0xfffffffffffffff8, 0xffffffff7ffffffd, 0x800000020bd, 0xfffbfffffffffffd, 0x67, 0x225561e6, 0x40049, 0x1, 0xb800000000000000, 0x40000000014d7, 0x80000002, 0x2, 0x251, 0x20], 0x2, 0x4382}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x86, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='reno', 0x4) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x2, 0x0, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000540)={0x3, 0xf8, 0xf11d, 0x0, 0x60b7082b}) syz_pidfd_open(0xffffffffffffffff, 0x0) (async) r8 = syz_pidfd_open(0xffffffffffffffff, 0x0) pwrite64(r8, &(0x7f0000000280)="f9f2767052fba3784dce19748e13fc7a3d62878e1702a07e2c6ef0e984cb720b954d0b8538623bc4bd6a8c5fc454cb7be9e9a4d7565f7c0fc2271985bdc6bb9378c6171ac2e5b55d04ddfdd52fc2e2d84f91642c3164779342642861d30e1b14ea7342f11fcfbe7b3d19ff0596774ea69ad6d5f1044a5291d8e54603dcf402638005beb090bac0a2e3e01a2d76d27e63a3282a2472141c1f5fa86493f8d08d6ff205dded965d992feb238148d2a87fab73691fb9b78810256948960419940afafa83493cb58286d4d1968f63f76443bed0684610e39fed11ec7cd41482980d464e4ae1cde63bfe0ade7cce7584aae5efab50a0d7a33570aa", 0xf8, 0x3) 1m43.512627359s ago: executing program 32 (id=401): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_io_uring_setup(0x4504, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0x0, 0x2b7, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) (async) r1 = syz_io_uring_setup(0x4504, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0x0, 0x2b7, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) r2 = add_key$user(&(0x7f0000000040), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000100)="389d", 0x2, 0xffffffffffffffff) keyctl$read(0xb, r2, &(0x7f0000000280)=""/130, 0x1001) (async) keyctl$read(0xb, r2, &(0x7f0000000280)=""/130, 0x1001) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x402, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x402, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000640)="b9e60a0032500050002400fcffffffc744240276980000c7442406000000000f011c9e3e66460f38806fca66410f3880200f21f835c00000000f23f8660f3881143126430f01c2c423f916c3088080430000c0c03235000000003a3a3066b8cd008ee0", 0x63}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000340)={[0x40000000002, 0x0, 0xfffffffffffffff8, 0xffffffff7ffffffd, 0x800000020bd, 0xfffbfffffffffffd, 0x67, 0x225561e6, 0x40049, 0x1, 0xb800000000000000, 0x40000000014d7, 0x80000002, 0x2, 0x251, 0x20], 0x2, 0x4382}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x86, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='reno', 0x4) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x2, 0x0, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000540)={0x3, 0xf8, 0xf11d, 0x0, 0x60b7082b}) syz_pidfd_open(0xffffffffffffffff, 0x0) (async) r8 = syz_pidfd_open(0xffffffffffffffff, 0x0) pwrite64(r8, &(0x7f0000000280)="f9f2767052fba3784dce19748e13fc7a3d62878e1702a07e2c6ef0e984cb720b954d0b8538623bc4bd6a8c5fc454cb7be9e9a4d7565f7c0fc2271985bdc6bb9378c6171ac2e5b55d04ddfdd52fc2e2d84f91642c3164779342642861d30e1b14ea7342f11fcfbe7b3d19ff0596774ea69ad6d5f1044a5291d8e54603dcf402638005beb090bac0a2e3e01a2d76d27e63a3282a2472141c1f5fa86493f8d08d6ff205dded965d992feb238148d2a87fab73691fb9b78810256948960419940afafa83493cb58286d4d1968f63f76443bed0684610e39fed11ec7cd41482980d464e4ae1cde63bfe0ade7cce7584aae5efab50a0d7a33570aa", 0xf8, 0x3) 1m40.763952024s ago: executing program 1 (id=427): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0x8427, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1m40.712162785s ago: executing program 1 (id=428): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42a40, 0x0) (async) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r0, 0x4068aea3, &(0x7f00000004c0)) (async) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000007000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000015000/0x3000)=nil, 0x3000, 0xb635773f06ebbeef, 0x11, r0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000380)="420fc7bc489858000066b878000f00d80f01c566baf80cb864c95782ef66bafc0cecc4639540210066b8fb008e891b1bd9c30f72f718c442812852fcb9800000c00f320f20d835200000000f22d866baf80cb82b499a89ef66bafc0cb0f2eec74424020b000000ff1c24", 0x6a}], 0x1, 0x56, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x2000000000, 0xb, 0x8, 0x4000000000000e51, 0x101, 0x547a, 0x103d, 0x200000000007, 0x0, 0x3aa, 0x1ad100, 0xfffffffffffffffe, 0x7, 0x40000000009, 0x40000000080a8c, 0x9], 0x2, 0xc001}) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) getdents64(r1, &(0x7f0000000080)=""/38, 0x26) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) (async) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x252) getdents64(r1, &(0x7f0000000040)=""/22, 0x16) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000300)={'team0\x00', @random="cadd95250cf7"}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b9004d564bb800100000ba000000000f300f01c20f01df0f001366ba38f8ffef66bafc0ceeb9d80900000f32b8010000000f01d9ad34b6d0b6d00000c0d741e88fe88f0400000f300f01c866baf80cb8dcfd4f8aef66bafc0cb80f000000ef", 0x5f}], 0x1, 0x60, 0x0, 0x0) 1m40.592703148s ago: executing program 1 (id=429): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='lec'], &(0x7f0000000080)='[(#$!,\x00', 0x7, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000134000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000440)="c4e1916c3f0f08642e660f73fdd50fc71a66baf80cb84bdcd185ef66bafc0cb000eeb912020000b81f320000ba000000000f30b805000000b9920000000f01d9650fc72e66b8dd008ee0640f0f9e000000809a", 0x53}], 0x1, 0x5c, 0x0, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000100)=0x5) syz_open_dev$mouse(&(0x7f0000000140), 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m40.580690238s ago: executing program 1 (id=432): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x1d, 0x1, 0x0, 0x0, {0x8a, 0x0, 0x6e80}}, 0x14}, 0x1, 0x0, 0x0, 0x50810}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc0, 0x2, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_ID={0x8}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x80}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x400}]}, @CTA_ZONE={0x6}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x800}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x9a}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xb00}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x10}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x20040004) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000004b40)={&(0x7f0000004a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000004b00)={&(0x7f0000004ac0)=ANY=[@ANYBLOB="300000000103010220000000000000000200000a0c00138006000240040000000c000200ffffffff0000000304000f80"], 0x30}}, 0x20000000) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000005480)={&(0x7f0000005380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000005440)={&(0x7f00000001c0)={0x64, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r6, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi\n', 0x3}], 0x1, 0x1) 1m40.565132428s ago: executing program 1 (id=433): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be140006fffe8000000000004000000000000000aaff020000000000000000000000000001"], 0xfdef) 1m40.454283001s ago: executing program 1 (id=434): r0 = socket$can_raw(0x1d, 0x3, 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, 0x0, 0x3b) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) r6 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) r7 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r7, 0x2) flock(r6, 0x2) (async) r8 = open(&(0x7f0000000180)='.\x00', 0x8080, 0x12e) flock(r8, 0x1) (async) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x2}, &(0x7f0000000000)) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x4}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) (async) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100f0ff000043000280050001002f"], 0xc0}}, 0x0) syz_kvm_setup_cpu$x86(r5, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000003c0)="f3368087b01d0000080f01c30fc71b440f20c03507000000440f22c0c4e279417b2f66ba2000ed0f062e0f38cdc066f20f2dffb8417700000f23d00f21f835000000030f23f8", 0x46}], 0x1, 0xd, &(0x7f0000000140)=[@cstype3={0x5, 0x7}], 0x1) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) getsockname(r3, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000380)=0x80) ioctl$KVM_TRANSLATE(r9, 0xc018ae85, 0x0) (async) syz_kvm_setup_cpu$x86(r0, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000140)="47ae266464420f0966baf80cb8c079cc85ef66bafc0cb8f2ffff7fefb9800000c00f3235002000000f30260f08410f1e0cff470f304713d7b9800000c00f3235008000000f30650fc718", 0x4a}], 0x1, 0x44, &(0x7f0000000280), 0x0) 1m24.996642507s ago: executing program 33 (id=434): r0 = socket$can_raw(0x1d, 0x3, 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, 0x0, 0x3b) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) r6 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) r7 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r7, 0x2) flock(r6, 0x2) (async) r8 = open(&(0x7f0000000180)='.\x00', 0x8080, 0x12e) flock(r8, 0x1) (async) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x2}, &(0x7f0000000000)) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x4}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) (async) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100f0ff000043000280050001002f"], 0xc0}}, 0x0) syz_kvm_setup_cpu$x86(r5, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000003c0)="f3368087b01d0000080f01c30fc71b440f20c03507000000440f22c0c4e279417b2f66ba2000ed0f062e0f38cdc066f20f2dffb8417700000f23d00f21f835000000030f23f8", 0x46}], 0x1, 0xd, &(0x7f0000000140)=[@cstype3={0x5, 0x7}], 0x1) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) getsockname(r3, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000380)=0x80) ioctl$KVM_TRANSLATE(r9, 0xc018ae85, 0x0) (async) syz_kvm_setup_cpu$x86(r0, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000140)="47ae266464420f0966baf80cb8c079cc85ef66bafc0cb8f2ffff7fefb9800000c00f3235002000000f30260f08410f1e0cff470f304713d7b9800000c00f3235008000000f30650fc718", 0x4a}], 0x1, 0x44, &(0x7f0000000280), 0x0) 4.378915382s ago: executing program 0 (id=1230): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0x7, 0x4) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = dup(r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40603d07, &(0x7f0000000000)={0xfffffffe, 0xc}) 4.326202413s ago: executing program 0 (id=1232): syz_open_dev$usbmon(0x0, 0x1, 0x8b00) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x68, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x68}, 0x1, 0x0, 0x7f00000100000000, 0xc004}, 0x4000040) 4.323225584s ago: executing program 0 (id=1233): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x1082) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, 0x0, 0x0, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x8b, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRESHEX=r1, @ANYRESHEX=r2], &(0x7f0000000000)={0xfffffffffffffedb, 0x0, 0x0, 0x0, 0x15555555555556ea}) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000080)={'ipvlan1\x00', 0x6}) 3.174546942s ago: executing program 4 (id=1258): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x27, 0x3, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1d4}}, 0x24040080) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000002030300000000000000000000010000080001"], 0x1c}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x0) getdents64(r4, &(0x7f00000000c0)=""/185, 0xb9) r5 = memfd_secret(0x80000) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="b7dd9b1acefbf92936600ac17a4b9e81a26d218bc5626ca15e0beea75c3f7de2f5dd1655bef9aa9c26855d014633db5da2f04b20b6418b9a2c4e4722c550973ec06841daebd4e719139077f3efe738eaa1", @ANYRES16=0x0, @ANYBLOB="200025bd7000fbdbdf25110000000c00990006000000500000001000be00d7a69877336f1195c55b7a030600b500c403000006001201ff7f00000c0043005b0f000004000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 3.110922024s ago: executing program 4 (id=1259): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be001806fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) (fail_nth: 8) 2.789353731s ago: executing program 4 (id=1261): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1223, 0x3f07, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0xe0, "", [{{0x9, 0x4, 0x0, 0x58, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ptrace(0x10, 0x0) syz_open_procfs(0x0, 0x0) syz_usb_connect$midi(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="20242e0000002e068307b530f0184b4f32f2d180569a374066cf8a507c201accebfa"], 0x0, 0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@default_permissions}]}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1223, 0x3f07, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0xe0, "", [{{0x9, 0x4, 0x0, 0x58, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10, 0x2}}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) ptrace(0x10, 0x0) (async) syz_open_procfs(0x0, 0x0) (async) syz_usb_connect$midi(0x0, 0x0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="20242e0000002e068307b530f0184b4f32f2d180569a374066cf8a507c201accebfa"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) (async) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@default_permissions}]}) (async) 1.63450098s ago: executing program 4 (id=1267): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x89Z7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\x06\x00\x00\x00\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r3, 0xfffd) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000140)={r3, 0x0, 0x0, 0x4000}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x10000}]}]}, 0xfc}}, 0x4040000) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$setpipe(r6, 0x407, 0x5) setsockopt$inet_buf(r5, 0xffffffa4, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 1.534307442s ago: executing program 4 (id=1268): openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20200, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x1, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ef915f210070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c2402080001030000eefe000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x2, 0xa, 0x2) (async) r4 = fcntl$dupfd(r3, 0x406, r3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000000)={0x6dd, 0xffffffffffff7572, 0x7, 0x1}) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, &(0x7f0000000980)) (async) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000000c0)={{r1}, 0x3, &(0x7f0000000040)=[0x5, 0x2, 0x8], 0xc, 0x1}) socket(0x10, 0x3, 0x200) (async) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x44805}, 0x0) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$FUSE_IOCTL(r5, &(0x7f0000006380)={0x20, 0x0, 0x0, {0xfffffff2, 0x0, 0x2, 0x7ff}}, 0x20) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x8880) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x15, 0x4) 1.534028462s ago: executing program 5 (id=1269): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be001806fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) (fail_nth: 9) 1.199176081s ago: executing program 5 (id=1270): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600012a60c6eec00be001806fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) 1.158831722s ago: executing program 5 (id=1271): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00140000ee643af50866c7c6ba445e806b34e59f7d15bc6e8653abdfdeec2802cef812560fd5882537b162d51323a0e1a5791d7619a66f10a6eb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) readahead(r4, 0xe9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xb, 0x3}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) prctl$PR_SET_TSC(0x1a, 0x1) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000280)="c4c241a7320f0fd68e66baf80cb818c31289ef66bafc0cec0f01c566baf80cb85055f78eef66bafc0c66b8f3b866ef660f381e5d6764262e410f01c436420f20a348b800400000000000000f23d00f21f835300000080f23f8b9940000400f32", 0x60}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.058321885s ago: executing program 0 (id=1272): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x8b501a, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000000)="390000001000034700bb5be1c3e4feff06000000012778010000190004000400ad003e34d61c00000000313200"/57, 0x39}], 0x1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r5, @ANYBLOB="faed000000000000"], 0x28}}, 0x44080) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r8 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x89Z7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\x06\x00\x00\x00\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r8, 0xfffd) fcntl$addseals(r8, 0x409, 0x7) ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000140)={r8, 0x0, 0x0, 0x4000}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc000000190001000000000000000000fc000000000000000000000000000000ac1414bb0000000000000000000000000000fffd000000010a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000003000000000000000000000000008e000300000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000400000000000000000014000000000000000000000000000000000000000000000000000000000044000500fc000000000000000000000000000001000000006c00000000000000ac1414aa0000000000000000000000000040000000010000000000000000010000000000"], 0xfc}}, 0x4040000) socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=r11, @ANYBLOB="020029bd7000fddbdf2519000000340001800800030000000000080003000100000008000300030000000800030000000000b8fd0300000000000800030001000000200001800800030003000000140002006d61637674617030000000000000000054000180080003000100000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="080003000300000008000100", @ANYRES32=r5, @ANYBLOB="140002006c6f00000000000000000000000000001400020076657468315f6d6163767461700000003400018008000100", @ANYRES32=r5, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x8011}, 0x4) socket$igmp(0x2, 0x3, 0x2) fcntl$setpipe(r10, 0x407, 0x5) 1.008371445s ago: executing program 0 (id=1273): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be140006fffe8000000000000064520000000000aaff020000000000000000000000000001"], 0xfdef) 939.986848ms ago: executing program 0 (id=1274): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x80) r1 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) read(r2, &(0x7f0000000340)=""/1015, 0x3f7) read$FUSE(r2, &(0x7f0000002ac0)={0x2020}, 0x2020) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000009, 0x80010, r0, 0x9) socket$pppl2tp(0x18, 0x1, 0x1) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1000) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000580)=0x6) r4 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x3eb, 0x2118, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x0, 0x8, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x0, 0xfa, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0xb65}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x80, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x14, 0x3, 0x3}}]}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x5, 0x2, 0x6, 0x8, 0xbf}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x455}}, {0x2ac1, &(0x7f0000000180)=@string={0x1b, 0x3, "643aad817a7214c3a9ea524566bdad6b2e4ef6a3ed47104e28"}}, {0x0, &(0x7f0000000640)=@string={0x0, 0x3, "fa44b7e565ea659bdf5422e456ed7de1b3bc368f353c5b39a71ad481a277aa4fd31dca40eff4b88ff41b6dbfa15f5343ca26d48e4cfa9910322c080dc238d360128a68803c6b80e378823983a2efae454b921ef07faf000aeadfebb0c0eb6e73b783b57799510b8c3a9eda607cf5e87dbacff812c911fc00e6dbd195087ca4a248a239648d43fd9818e496bbcf273cec14d15ef58c82aa5a675b270cac4a326f04200f5c9e405f4277031b7433ae5f3e4554f3fc3f37"}}]}) syz_usb_control_io$hid(r4, &(0x7f00000003c0)={0x24, &(0x7f0000000200)={0x0, 0x30, 0xf6, {0xf6, 0xe, "b518773158a7d0637d3095555c8bf705b5280a83c92cab8fa285faac5092de3de451e5964096848dd4c1172a43e2634e15dcb8906066c2cffc62ab3f6dc12c007190090e3ab7ababbd6bd0a0bdcc55913694c4e1018d5154d8d08271d1a4bc08005c8a2b5ef21c1af1953ca0c0f4c9692d76e16ad1998df306c36f2395ef5d4277aa7f3b9fd0991e585cfcae7cce15e1a56e4e76898f148bddfd9fadf9bb12ef9a1a1b0015f6d023843dcb7abe58137b2b3e1ec7915507cfa2eea44dd34ebf7bad2d1232f5e122f68efd18d3754075e5409bb150ec62c644cca19bfed1890dd515b1300665f4db5a98ba41e62ce59cdb5961e212"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}, &(0x7f0000000340)={0x0, 0x22, 0x3, {[@main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x1, 0x0, 0x8, "1d"}]}}, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0xff, 0xfe, 0x1, {0x22, 0x4a3}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000400)={0x0, 0x9, 0x32, "280cfad549484a5b679ef38e8b376adfe77ff9bd5c5f82c897df85aed527fa05ef89d170e1bdbddf7f68828e3a30d72286c4"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000004c0)={0x20, 0x1, 0x20, "4d1e1f8acec519b28b815fd8d891d06049628dc493957c68eed5d5152ab2be65"}, &(0x7f0000000500)={0x20, 0x3, 0x1}}) syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x80) (async) syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) (async) read(r2, &(0x7f0000000340)=""/1015, 0x3f7) (async) read$FUSE(r2, &(0x7f0000002ac0)={0x2020}, 0x2020) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000009, 0x80010, r0, 0x9) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1000) (async) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000580)=0x6) (async) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x3eb, 0x2118, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x0, 0x8, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x0, 0xfa, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0xb65}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x80, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x14, 0x3, 0x3}}]}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x5, 0x2, 0x6, 0x8, 0xbf}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x455}}, {0x2ac1, &(0x7f0000000180)=@string={0x1b, 0x3, "643aad817a7214c3a9ea524566bdad6b2e4ef6a3ed47104e28"}}, {0x0, &(0x7f0000000640)=@string={0x0, 0x3, "fa44b7e565ea659bdf5422e456ed7de1b3bc368f353c5b39a71ad481a277aa4fd31dca40eff4b88ff41b6dbfa15f5343ca26d48e4cfa9910322c080dc238d360128a68803c6b80e378823983a2efae454b921ef07faf000aeadfebb0c0eb6e73b783b57799510b8c3a9eda607cf5e87dbacff812c911fc00e6dbd195087ca4a248a239648d43fd9818e496bbcf273cec14d15ef58c82aa5a675b270cac4a326f04200f5c9e405f4277031b7433ae5f3e4554f3fc3f37"}}]}) (async) syz_usb_control_io$hid(r4, &(0x7f00000003c0)={0x24, &(0x7f0000000200)={0x0, 0x30, 0xf6, {0xf6, 0xe, "b518773158a7d0637d3095555c8bf705b5280a83c92cab8fa285faac5092de3de451e5964096848dd4c1172a43e2634e15dcb8906066c2cffc62ab3f6dc12c007190090e3ab7ababbd6bd0a0bdcc55913694c4e1018d5154d8d08271d1a4bc08005c8a2b5ef21c1af1953ca0c0f4c9692d76e16ad1998df306c36f2395ef5d4277aa7f3b9fd0991e585cfcae7cce15e1a56e4e76898f148bddfd9fadf9bb12ef9a1a1b0015f6d023843dcb7abe58137b2b3e1ec7915507cfa2eea44dd34ebf7bad2d1232f5e122f68efd18d3754075e5409bb150ec62c644cca19bfed1890dd515b1300665f4db5a98ba41e62ce59cdb5961e212"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}, &(0x7f0000000340)={0x0, 0x22, 0x3, {[@main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x1, 0x0, 0x8, "1d"}]}}, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0xff, 0xfe, 0x1, {0x22, 0x4a3}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000400)={0x0, 0x9, 0x32, "280cfad549484a5b679ef38e8b376adfe77ff9bd5c5f82c897df85aed527fa05ef89d170e1bdbddf7f68828e3a30d72286c4"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000004c0)={0x20, 0x1, 0x20, "4d1e1f8acec519b28b815fd8d891d06049628dc493957c68eed5d5152ab2be65"}, &(0x7f0000000500)={0x20, 0x3, 0x1}}) (async) 870.179869ms ago: executing program 2 (id=1275): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) eventfd2(0x0, 0x0) (async) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) (async) io_submit(r1, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = epoll_create1(0x80000) r5 = socket(0x1, 0x80802, 0x0) epoll_create1(0x80000) (async) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x10000001}) shutdown(r5, 0x0) (async) shutdown(r5, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r3, 0x4010e501, &(0x7f0000000000)={r3}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) (async) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={r0, 0xfffffffffffffff2, 0x0, 0x7f}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) io_submit(r1, 0x4, &(0x7f0000000700)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x6, r7, &(0x7f0000000280)="c0eb76f8894f9be3812a69ba45fe59251f62cb42646bf17b3d008d8ff3ade5ec4494c465d13c6187c56acbc627833a414791f7a70a1fa0005c03b855dda14921a715312cd690419ce0f1f819f7a32c8bf89d1f6021e532a7b37e90dde59179d592a180b8fee8ceb32a69f9eb64c7c0627ffc7aeba30ade85ee61c63e3b2c115ef94805aca1e07f13", 0x88, 0x4, 0x0, 0x3}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x6, 0x6, r8, &(0x7f00000003c0)="4f39346281cef723041fcbdae50ceb6ee2a67db24da328ea01eb645891b82496806a7919ee898730f374dd4e11d05ee9", 0x30, 0x5, 0x0, 0x2, r2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0xd, r3, &(0x7f0000000440)="03829f9c412e9afcf6fa0941d235cb90e3fb70d43425db8cd4d3c0cc34bea7a7d41fcc1fe3714331d7d5e228b6d6613eaf424b2e5d47baf1dd75163b2aef7a268983f81c8b3ed4f9232386cc2335d0d285f5fa064db19b4e68e32327ed5459355ce2e18386bfc37ac71a9326031241a686386a6cf28fcc1d7f814e47f2e98b9c03db0f72ea025cd4c39f02614648a030587d7d908424af6b27d517014975657df18ee2012bc14439672568c3daf8c0939254906f22f015ea0d3d0a799d7aa94169ed2bd6c57605478f791065736f0d9a204ccd667cfa6ca3d253b99cc8ee177644bc", 0xe2, 0x8000000000000000, 0x0, 0x0, r2}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0xa0, r0, &(0x7f0000000580)="cb6b0f7b50b9727aa13fdc6a330a110fe38cc96512652df27648dc9191d4e171348a4752cb7709c9cd7fcf97c30f17e7347b3155b4290f121b953e9d5f222a253bd47df82b3b1c462f5c3984149a8854c55d887cb912f9b1b37979082114674a5acc43af3861b934a94bab2796a1c75389eca327c01f7e7f7071c74c33e8bcb86540fd342cac0e789b45eb1e74843a223c30571daa1052537ce7f2c01e33d2d8357b7853d7dad520c07bc80ad8e5796c7a860c0947329a2e63a4efeb56badc9700324fa2036d87a7f8fa19ec446e547db9967264b95d3903254c4771eb191782ef973c9a0fcaa5d6126493", 0xeb, 0x200, 0x0, 0x3, r9}]) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) r10 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r10, &(0x7f0000000040)="a00037d2fa9ba1ce", 0x8, 0x20040080, &(0x7f0000001100)={0xa, 0x8020, 0x0, @mcast1}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) close(0x3) (async) close(0x3) r11 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r11, 0x107, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0x4) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r12 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r12, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="aabfd9ac49284dff", 0x8}], 0x1, &(0x7f0000001240)=ANY=[], 0x1058}, 0x4001) 799.6128ms ago: executing program 2 (id=1276): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x8427, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 744.755672ms ago: executing program 2 (id=1277): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x89Z7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\x06\x00\x00\x00\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r3, 0xfffd) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000140)={r3, 0x0, 0x0, 0x4000}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x10000}]}]}, 0xfc}}, 0x4040000) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$setpipe(r6, 0x407, 0x5) setsockopt$inet_buf(r5, 0xffffffef, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 646.309225ms ago: executing program 2 (id=1278): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14010000", @ANYRES16=0x0, @ANYBLOB="200026bdf000fbdbdf25190000000c00018008000300000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020076657468305f746f5f6261746164760018000180140002007767300000000000000000000000000020000180080003"], 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x20004800) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x8, &(0x7f0000000a40)="47aaf63e3722d2a83d6b95a71d14ea166ec1bbec3c5baae7afd00a52a3543b68c1bda7e00de23c816f603aba4d37d816b52752b766b487aad71d38b670f6f3b3cc48ed3a5315da46c08b579ac8e19d569f448837157ea3057dc0648ec5c071b72aac5f9ba0fcf2002c8d131dad49288f1fc6a2cf9d1138215e83e17555d582393941219571a5d2efdf") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1c000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1d) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_usb_connect$uac2(0x3, 0x83, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100020000002082052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a00000b7f"], 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe80000000000000000000a6109ce800000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000000003c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200"], 0x184}}, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={'ip6_vti0\x00', {0x2, 0x4e23, @rand_addr=0x64010102}}) 451.449709ms ago: executing program 5 (id=1279): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600060a60c6eec00be001806fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) 359.035032ms ago: executing program 5 (id=1280): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) ptrace(0x11, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='dummy_hcd.0', 0xb) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) 90.321048ms ago: executing program 2 (id=1281): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x89Z7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\x06\x00\x00\x00\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r3, 0xfffd) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000140)={r3, 0x0, 0x0, 0x4000}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000100000ac1414bb000000000000000000000000230000fffd000000000a000000000000b9a3d0465b0101dabe3cdd7f02019133882c76ef0f68417ae4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000030000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000006c00000000000000ac1414aa0000000000000000000000000040000000000000000000000000010000000000"], 0xfc}}, 0x4040000) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$setpipe(r8, 0x407, 0x5) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 90.111398ms ago: executing program 5 (id=1282): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12da070000000000ba00e90300000903000000092110000001228c1f48378fb867920000000000000000"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022220000009523b3"], 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096"], 0x0}, 0x0) epoll_create1(0x80000) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x20008004, &(0x7f0000000100)={0x2, 0x4e20}, 0xffffffffffffff29) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000001c0)=0xa, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newsa={0x1c8, 0x10, 0x1, 0xfffffffe, 0x25dfdbfb, {{@in6=@mcast1, @in6=@private1, 0x2, 0x0, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x73}, {@in6=@mcast2, 0x4d5, 0x6c}, @in=@broadcast, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x4000000001f, 0x2}, {0x2, 0xfffffffc}, 0x70bd29, 0x3505, 0x2, 0x1, 0x0, 0x98}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth_trunc={0x8e, 0x14, {{'cbcmac(aes)\x00'}, 0x210, 0x0, "a2ff812769118ad97f080f25c3bc08e011bee7c8db12408c3e20e2c59d9b15730439bb021b773c031be0b86affaba50af069ace9a218c52acca6b4a3952357a524cb"}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20004881}, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0x6e, 0x734, 0x0, 0x0) syz_usb_connect$midi(0x1, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="120000000830144b47401009040000000103300700"/36], &(0x7f0000000200)={0x0, 0x0, 0x51, &(0x7f0000000540)={0x5, 0xf, 0x51, 0x1, [@generic={0x4c, 0x10, 0xa, "02efb88f574c69133427e171a7c673af4794c239b97bc9dde77eb73673f3bd1861f2b385bbc4a8aace6a209263e77c11fc84a5e34e2cd85bdab00bd25a0ea24963380866f10fe4bb09"}]}, 0x5, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x25, &(0x7f0000000140)=@string={0x25, 0x3, "4441cd1c39a81343307d575ca26a48fac5293caa70bfc0cec83a60a2c921ffa24717d1"}}]}) 68.466279ms ago: executing program 2 (id=1283): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0xfffffffd, @mcast2, 0x40005}, 0x1c) (async) syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x200c, 0x1018, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x80, 0xe0, 0x7, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x3, 0x26, 0xc5}, [@processing_unit={0x11, 0x24, 0x8, 0x6, 0x1, [0x0, 0x1, 0x0, 0x2, 0xfffffffffffffffe, 0x3]}, @output_terminal={0xc, 0x24, 0x3, 0xfd, 0x400, 0xa8, 0x3, 0x6, 0xfff9, 0xa}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x4, 0x0, {0x8, 0x25, 0x1, 0x81, 0x9, 0x9, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x4, 0x10, {0x8, 0x25, 0x1, 0x83, 0x0, 0xa, 0x2}}}}}}}}]}}, 0x0) 0s ago: executing program 4 (id=1284): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x5e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r0, 0x80000003) r1 = socket$netlink(0x10, 0x3, 0x4) setresuid(0xee00, 0xee00, 0x0) r2 = getpid() prlimit64(r2, 0x1, 0x0, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, 0x0, 0x0) setsockopt$inet_int(r6, 0x0, 0x31, 0x0, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r8 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) pipe2(&(0x7f0000000080), 0x80) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000680015"], 0x1c}], 0x1}, 0x4000080) kernel console output (not intermixed with test programs): 0> rejected, failed to enable media [ 132.605296][ T3182] tipc: Started in network mode [ 132.610270][ T3182] tipc: Node identity 7f000001, cluster identity 4711 [ 132.617242][ T3182] tipc: Enabling of bearer rejected, failed to enable media [ 132.637311][ T3187] rust_binder: Failed to allocate buffer. len:20480, is_oneway:true [ 132.637339][ T3187] rust_binder: Failure in copy_transaction_data: ENOSPC [ 132.645429][ T3187] rust_binder: 3186:3187 transaction to 3186 failed: ENOSPC [ 132.663285][ T36] audit: type=1400 audit(1785406350.980:397): avc: denied { setopt } for pid=3188 comm="syz.4.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 132.691152][ T36] audit: type=1400 audit(1785406350.980:398): avc: denied { accept } for pid=3188 comm="syz.4.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 132.701572][ T3193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.875'. [ 132.730682][ T3195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.739283][ T3195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.111957][ T451] usb 1-1: USB disconnect, device number 56 [ 133.153273][ T36] audit: type=1400 audit(1785406351.470:399): avc: denied { getopt } for pid=3202 comm="syz.0.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 133.298252][ T36] audit: type=1400 audit(1785406351.620:400): avc: denied { name_bind } for pid=3210 comm="syz.2.881" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 133.506349][ T451] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 133.636369][ T451] usb 1-1: device descriptor read/64, error -71 [ 133.836354][ T318] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 133.876368][ T451] usb 1-1: device descriptor read/64, error -71 [ 133.987675][ T318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.998626][ T318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.008397][ T318] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 134.021304][ T318] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 134.030377][ T318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.038868][ T318] usb 5-1: config 0 descriptor?? [ 134.116352][ T451] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 134.200993][ T3234] binder: Bad value for 'defcontext' [ 134.208816][ T3234] 9pnet_virtio: no channels available for device syz [ 134.220015][ T36] audit: type=1400 audit(1785406352.540:401): avc: denied { write } for pid=3233 comm="syz.2.889" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.243720][ T36] audit: type=1400 audit(1785406352.540:402): avc: denied { open } for pid=3233 comm="syz.2.889" path="/276/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.254522][ T451] usb 1-1: device descriptor read/64, error -71 [ 134.269532][ T36] audit: type=1400 audit(1785406352.540:403): avc: denied { ioctl } for pid=3233 comm="syz.2.889" path="/276/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.307698][ T3238] FAULT_INJECTION: forcing a failure. [ 134.307698][ T3238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.311821][ T36] audit: type=1400 audit(1785406352.630:404): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 134.321058][ T3238] CPU: 1 UID: 0 PID: 3238 Comm: syz.5.891 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 134.321087][ T3238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.321099][ T3238] Call Trace: [ 134.321106][ T3238] [ 134.321114][ T3238] __dump_stack+0x21/0x30 [ 134.321143][ T3238] dump_stack_lvl+0x140/0x1c0 [ 134.321167][ T3238] ? __cfi_dump_stack_lvl+0x10/0x10 [ 134.321191][ T3238] ? _parse_integer+0x2e/0x40 [ 134.321211][ T3238] ? kstrtoull+0x13b/0x1e0 [ 134.321230][ T3238] dump_stack+0x19/0x20 [ 134.321253][ T3238] should_fail_ex+0x3c2/0x510 [ 134.321273][ T3238] should_fail+0xf/0x20 [ 134.321291][ T3238] should_fail_usercopy+0x1e/0x30 [ 134.321312][ T3238] _copy_from_user+0x20/0xa0 [ 134.321335][ T3238] ___sys_sendmsg+0x1c7/0x370 [ 134.321356][ T3238] ? __sys_sendmsg+0x2a0/0x2a0 [ 134.321374][ T3238] ? proc_fail_nth_write+0x184/0x220 [ 134.321398][ T3238] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 134.321427][ T3238] ? __fget_files+0x2bc/0x330 [ 134.321450][ T3238] __x64_sys_sendmsg+0x206/0x2e0 [ 134.321469][ T3238] ? fput+0x1a4/0x230 [ 134.321491][ T3238] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 134.321509][ T3238] ? ksys_write+0x1f3/0x260 [ 134.321529][ T3238] ? __kasan_check_read+0x15/0x20 [ 134.321549][ T3238] x64_sys_call+0x2a4c/0x2ee0 [ 134.321566][ T3238] do_syscall_64+0x57/0xf0 [ 134.321587][ T3238] ? clear_bhb_loop+0x50/0xa0 [ 134.321609][ T3238] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 134.321632][ T3238] RIP: 0033:0x7f89b179df99 [ 134.321656][ T3238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.321673][ T3238] RSP: 002b:00007f89b2695028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.321693][ T3238] RAX: ffffffffffffffda RBX: 00007f89b1a25fa0 RCX: 00007f89b179df99 [ 134.321708][ T3238] RDX: 0000000004000040 RSI: 0000200000000340 RDI: 0000000000000003 [ 134.321721][ T3238] RBP: 00007f89b2695090 R08: 0000000000000000 R09: 0000000000000000 [ 134.321733][ T3238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.321745][ T3238] R13: 00007f89b1a26038 R14: 00007f89b1a25fa0 R15: 00007ffd99179d08 [ 134.321761][ T3238] [ 134.349085][ T3240] tipc: Started in network mode [ 134.478887][ T318] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 134.490361][ T3240] tipc: Node identity ac14140f, cluster identity 4711 [ 134.536367][ T318] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 134.542411][ T3240] tipc: New replicast peer: 255.255.255.255 [ 134.556392][ T318] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 134.559849][ T3240] tipc: Enabled bearer , priority 10 [ 134.570901][ T318] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 134.613233][ T318] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 134.623439][ T318] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 134.630944][ T318] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 134.638484][ T318] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 134.645928][ T318] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 134.653374][ T318] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 134.660997][ T318] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 134.666346][ T451] usb 1-1: device descriptor read/64, error -71 [ 134.676429][ T318] plantronics 0003:047F:FFFF.000E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 134.769365][ T3278] netlink: 92 bytes leftover after parsing attributes in process `syz.5.896'. [ 134.786481][ T451] usb usb1-port1: attempt power cycle [ 134.802277][ T3282] Unsupported ieee802154 address type: 0 [ 134.809435][ T36] audit: type=1400 audit(1785406353.130:405): avc: denied { create } for pid=3281 comm="syz.5.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 134.830917][ T31] usb 5-1: USB disconnect, device number 31 [ 134.897987][ T3286] netlink: 328 bytes leftover after parsing attributes in process `syz.5.899'. [ 135.126409][ T451] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 135.148240][ T451] usb 1-1: device descriptor read/8, error -71 [ 135.277406][ T451] usb 1-1: device descriptor read/8, error -71 [ 135.401340][ T3315] netlink: 'syz.4.908': attribute type 28 has an invalid length. [ 135.446608][ T3318] netlink: 'syz.4.909': attribute type 46 has an invalid length. [ 135.516366][ T451] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 135.537479][ T451] usb 1-1: device descriptor read/8, error -71 [ 135.556421][ T31] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 135.621815][ T3332] overlayfs: overlapping lowerdir path [ 135.628521][ T3332] netlink: 'syz.2.914': attribute type 4 has an invalid length. [ 135.636201][ T3332] netlink: 17 bytes leftover after parsing attributes in process `syz.2.914'. [ 135.649152][ T3332] fuse: blksize only supported for fuseblk [ 135.656179][ T3332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.914'. [ 135.667265][ T451] usb 1-1: device descriptor read/8, error -71 [ 135.676337][ T45] tipc: Node number set to 2886997007 [ 135.708732][ T31] usb 6-1: config 154 has an invalid interface number: 128 but max is 0 [ 135.720555][ T31] usb 6-1: config 154 has no interface number 0 [ 135.730815][ T31] usb 6-1: config 154 interface 128 has no altsetting 0 [ 135.742401][ T31] usb 6-1: string descriptor 0 read error: -22 [ 135.751860][ T31] usb 6-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=58.09 [ 135.757680][ T3343] incfs: Options parsing error. -22 [ 135.761188][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.774830][ T3343] incfs: mount failed -22 [ 135.779884][ T451] usb usb1-port1: unable to enumerate USB device [ 135.787027][ T31] ums-datafab 6-1:154.128: USB Mass Storage device detected [ 135.827368][ T31] ums-sddr55 6-1:154.128: USB Mass Storage device detected [ 135.896673][ T318] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 135.998937][ T31] usb 6-1: USB disconnect, device number 18 [ 136.057481][ T318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.068543][ T318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.078320][ T318] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.091274][ T318] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.100400][ T318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.108922][ T318] usb 5-1: config 0 descriptor?? [ 136.516871][ T318] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 136.524418][ T318] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 136.532049][ T318] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 136.539654][ T318] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 136.547101][ T318] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 136.554655][ T318] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 136.562099][ T318] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 136.569520][ T318] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 136.576946][ T318] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 136.584366][ T318] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 136.591961][ T318] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 136.600915][ T318] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 136.746364][ T351] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 136.783879][ T318] playstation 0003:054C:05C4.0010: hidraw1: USB HID v0.01 Device [syz1] on syz1 [ 136.810907][ T318] playstation 0003:054C:05C4.0010: Failed to retrieve feature with reportID 18: -5 [ 136.820502][ T318] playstation 0003:054C:05C4.0010: Failed to retrieve DualShock4 pairing info: -5 [ 136.830546][ T318] playstation 0003:054C:05C4.0010: Failed to get MAC address from DualShock4 [ 136.834503][ T451] usb 5-1: USB disconnect, device number 32 [ 136.839397][ T318] playstation 0003:054C:05C4.0010: Failed to create dualshock4. [ 136.854189][ T318] playstation 0003:054C:05C4.0010: probe with driver playstation failed with error -5 [ 136.883767][ T3382] FAULT_INJECTION: forcing a failure. [ 136.883767][ T3382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.896342][ T351] usb 6-1: Using ep0 maxpacket: 8 [ 136.896969][ T3382] CPU: 1 UID: 0 PID: 3382 Comm: syz.2.928 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 136.896997][ T3382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.897010][ T3382] Call Trace: [ 136.897016][ T3382] [ 136.897025][ T3382] __dump_stack+0x21/0x30 [ 136.897054][ T3382] dump_stack_lvl+0x140/0x1c0 [ 136.897078][ T3382] ? __cfi_dump_stack_lvl+0x10/0x10 [ 136.897103][ T3382] dump_stack+0x19/0x20 [ 136.897125][ T3382] should_fail_ex+0x3c2/0x510 [ 136.897147][ T3382] should_fail+0xf/0x20 [ 136.897164][ T3382] should_fail_usercopy+0x1e/0x30 [ 136.897185][ T3382] _copy_from_iter+0x1a6/0x1520 [ 136.897210][ T3382] ? __virt_addr_valid+0x2a1/0x370 [ 136.897231][ T3382] ? __cfi__copy_from_iter+0x10/0x10 [ 136.897253][ T3382] ? __check_object_size+0x54c/0x870 [ 136.897281][ T3382] ? __cfi___check_object_size+0x10/0x10 [ 136.897300][ T3382] ? skb_put+0x10e/0x200 [ 136.897325][ T3382] netlink_sendmsg+0x66d/0xad0 [ 136.897344][ T3382] ? __cfi_netlink_sendmsg+0x10/0x10 [ 136.897363][ T3382] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 136.897385][ T3382] ? security_socket_sendmsg+0x3d/0x100 [ 136.897409][ T3382] ____sys_sendmsg+0x99e/0xa00 [ 136.897429][ T3382] ? __import_iovec+0x5b9/0x7d0 [ 136.897453][ T3382] ? __sys_sendmsg_sock+0x50/0x50 [ 136.897472][ T3382] ? import_iovec+0x80/0xb0 [ 136.897496][ T3382] ___sys_sendmsg+0x2a6/0x370 [ 136.897514][ T3382] ? __sys_sendmsg+0x2a0/0x2a0 [ 136.897533][ T3382] ? proc_fail_nth_write+0x184/0x220 [ 136.897558][ T3382] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 136.897586][ T3382] ? __fget_files+0x2bc/0x330 [ 136.897609][ T3382] __x64_sys_sendmsg+0x206/0x2e0 [ 136.897628][ T3382] ? fput+0x1a4/0x230 [ 136.897650][ T3382] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 136.897668][ T3382] ? ksys_write+0x1f3/0x260 [ 136.897687][ T3382] ? __kasan_check_read+0x15/0x20 [ 136.897706][ T3382] x64_sys_call+0x2a4c/0x2ee0 [ 136.897723][ T3382] do_syscall_64+0x57/0xf0 [ 136.897747][ T3382] ? clear_bhb_loop+0x50/0xa0 [ 136.897770][ T3382] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 136.897793][ T3382] RIP: 0033:0x7f4a3099df99 [ 136.897810][ T3382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.897826][ T3382] RSP: 002b:00007f4a317fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.897847][ T3382] RAX: ffffffffffffffda RBX: 00007f4a30c25fa0 RCX: 00007f4a3099df99 [ 136.897862][ T3382] RDX: 0000000004000040 RSI: 0000200000000340 RDI: 0000000000000003 [ 136.897875][ T3382] RBP: 00007f4a317fb090 R08: 0000000000000000 R09: 0000000000000000 [ 136.897887][ T3382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.897899][ T3382] R13: 00007f4a30c26038 R14: 00007f4a30c25fa0 R15: 00007ffff063bc48 [ 136.897915][ T3382] [ 137.059353][ T3388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.092105][ T351] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.096821][ T3388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.104968][ T351] usb 6-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 137.214053][ T351] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.222200][ T351] usb 6-1: Product: syz [ 137.226528][ T351] usb 6-1: Manufacturer: syz [ 137.231176][ T351] usb 6-1: SerialNumber: syz [ 137.241486][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 137.241505][ T36] audit: type=1404 audit(1785406355.560:418): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 137.247074][ T351] usb 6-1: can't set config #1, error -71 [ 137.248117][ T36] audit: type=1400 audit(1785406355.560:419): avc: denied { ioctl } for pid=3366 comm="syz.5.924" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 137.271015][ T351] usb 6-1: USB disconnect, device number 19 [ 137.293930][ T36] audit: type=1400 audit(1785406355.560:420): avc: denied { create } for pid=3366 comm="syz.5.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 137.300800][ T3390] netlink: 64 bytes leftover after parsing attributes in process `syz.2.931'. [ 137.319624][ T451] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 137.335807][ T3390] tipc: Enabling of bearer rejected, already enabled [ 137.337789][ T36] audit: type=1400 audit(1785406355.570:421): avc: denied { create } for pid=3366 comm="syz.5.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 137.364386][ T36] audit: type=1400 audit(1785406355.570:422): avc: denied { create } for pid=3366 comm="syz.5.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 137.385567][ T36] audit: type=1400 audit(1785406355.570:423): avc: denied { create } for pid=3366 comm="syz.5.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 137.406333][ T36] audit: type=1400 audit(1785406355.570:424): avc: denied { create } for pid=3366 comm="syz.5.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 137.426848][ T36] audit: type=1404 audit(1785406355.620:425): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 137.441870][ T3396] netlink: 'syz.2.932': attribute type 12 has an invalid length. [ 137.454164][ T36] audit: type=1400 audit(1785406355.620:426): avc: denied { create } for pid=3389 comm="syz.2.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 137.474411][ T36] audit: type=1400 audit(1785406355.620:427): avc: denied { write } for pid=3389 comm="syz.2.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 137.507533][ T451] usb 1-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 137.520475][ T451] usb 1-1: config 1 interface 0 has no altsetting 0 [ 137.528944][ T451] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 137.541589][ T451] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.551211][ T451] usb 1-1: Product: syz [ 137.555418][ T451] usb 1-1: Manufacturer: syz [ 137.560093][ T451] usb 1-1: SerialNumber: syz [ 137.596098][ T3404] tmpfs: Unknown parameter 'nr_^nodes' [ 137.602756][ T3404] tmpfs: Unknown parameter 'nr_^nodes' [ 137.618996][ T3409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.627584][ T3409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.768352][ T451] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 137.780958][ T451] usb 1-1: USB disconnect, device number 61 [ 138.146670][ T3421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.155344][ T3421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.232132][ T3425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.944'. [ 138.241086][ T451] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 138.396376][ T451] usb 6-1: Using ep0 maxpacket: 32 [ 138.402571][ T451] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.413476][ T451] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.423274][ T451] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 138.432438][ T451] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.441265][ T451] usb 6-1: config 0 descriptor?? [ 138.447522][ T451] hub 6-1:0.0: USB hub found [ 138.496383][ T31] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 138.509625][ T3433] tipc: Enabling of bearer rejected, failed to enable media [ 138.647481][ T451] hub 6-1:0.0: 11 ports detected [ 138.652826][ T451] hub 6-1:0.0: insufficient power available to use all downstream ports [ 138.666348][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 138.678711][ T31] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 138.678985][ T3441] rust_binder: 3440:3441 transaction to 0 failed: ENOENT [ 138.687361][ T31] usb 5-1: config 0 has no interface number 0 [ 138.692804][ T3441] syzkaller1: entered promiscuous mode [ 138.697916][ T31] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 138.700642][ T3441] syzkaller1: entered allmulticast mode [ 138.706548][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.729169][ T31] usb 5-1: Product: syz [ 138.733392][ T31] usb 5-1: Manufacturer: syz [ 138.738142][ T31] usb 5-1: SerialNumber: syz [ 138.745600][ T31] usb 5-1: config 0 descriptor?? [ 138.751621][ T31] smsc95xx v2.0.0 [ 138.816209][ T3448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.954'. [ 138.835351][ T3450] FAULT_INJECTION: forcing a failure. [ 138.835351][ T3450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.848571][ T451] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 138.854971][ T451] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 138.862502][ T3450] CPU: 1 UID: 0 PID: 3450 Comm: syz.0.955 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 138.862535][ T3450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.862548][ T3450] Call Trace: [ 138.862553][ T3450] [ 138.862560][ T3450] __dump_stack+0x21/0x30 [ 138.862591][ T3450] dump_stack_lvl+0x140/0x1c0 [ 138.862614][ T3450] ? __cfi_dump_stack_lvl+0x10/0x10 [ 138.862639][ T3450] ? check_stack_object+0x138/0x150 [ 138.862659][ T3450] dump_stack+0x19/0x20 [ 138.862679][ T3450] should_fail_ex+0x3c2/0x510 [ 138.862699][ T3450] should_fail+0xf/0x20 [ 138.862716][ T3450] should_fail_usercopy+0x1e/0x30 [ 138.862742][ T3450] _copy_to_user+0x24/0xa0 [ 138.862764][ T3450] simple_read_from_buffer+0xed/0x160 [ 138.862798][ T3450] proc_fail_nth_read+0x1aa/0x220 [ 138.862822][ T3450] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 138.862845][ T3450] ? bpf_lsm_file_permission+0xd/0x20 [ 138.862867][ T3450] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 138.862890][ T3450] vfs_read+0x28b/0xc70 [ 138.862909][ T3450] ? __cfi_vfs_read+0x10/0x10 [ 138.862925][ T3450] ? __kasan_check_write+0x18/0x20 [ 138.862943][ T3450] ? mutex_lock+0x97/0x1d0 [ 138.862965][ T3450] ? __cfi_mutex_lock+0x10/0x10 [ 138.862989][ T3450] ksys_read+0x145/0x260 [ 138.863006][ T3450] ? __cfi_ksys_read+0x10/0x10 [ 138.863024][ T3450] ? __kasan_check_read+0x15/0x20 [ 138.863040][ T3450] __x64_sys_read+0x7f/0x90 [ 138.863057][ T3450] x64_sys_call+0x2638/0x2ee0 [ 138.863073][ T3450] do_syscall_64+0x57/0xf0 [ 138.863097][ T3450] ? clear_bhb_loop+0x50/0xa0 [ 138.863120][ T3450] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 138.863148][ T3450] RIP: 0033:0x7fdd67b5e7ce [ 138.863165][ T3450] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 138.863181][ T3450] RSP: 002b:00007fdd68b35fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 138.863201][ T3450] RAX: ffffffffffffffda RBX: 00007fdd68b366c0 RCX: 00007fdd67b5e7ce [ 138.863215][ T3450] RDX: 000000000000000f RSI: 00007fdd68b360a0 RDI: 0000000000000004 [ 138.863227][ T3450] RBP: 00007fdd68b36090 R08: 0000000000000000 R09: 0000000000000000 [ 138.863238][ T3450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.863250][ T3450] R13: 00007fdd67e26038 R14: 00007fdd67e25fa0 R15: 00007fff24995408 [ 138.863265][ T3450] [ 139.100486][ T451] usbhid 6-1:0.0: can't add hid device: -71 [ 139.106545][ T451] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 139.126826][ T451] usb 6-1: USB disconnect, device number 20 [ 139.300790][ T31] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 139.311624][ T31] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 139.722625][ T3463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.737040][ T3463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.757869][ T3465] 9pnet_fd: Insufficient options for proto=fd [ 140.326335][ T351] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 140.456392][ T351] usb 1-1: device descriptor read/64, error -71 [ 140.527018][ T31] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 140.537971][ T31] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 140.549229][ T31] usb 5-1: USB disconnect, device number 33 [ 140.696388][ T351] usb 1-1: device descriptor read/64, error -71 [ 140.936383][ T351] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 141.064292][ T3505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.972'. [ 141.073267][ T351] usb 1-1: device descriptor read/64, error -71 [ 141.277982][ T3517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.287471][ T3517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.296578][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 141.316428][ T351] usb 1-1: device descriptor read/64, error -71 [ 141.426400][ T65] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 141.434140][ T351] usb usb1-port1: attempt power cycle [ 141.456403][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 141.462674][ T10] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 141.470838][ T10] usb 6-1: config 0 has no interface number 0 [ 141.476973][ T10] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 141.487149][ T10] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 141.498623][ T10] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 141.507931][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.515921][ T10] usb 6-1: Product: syz [ 141.520348][ T10] usb 6-1: Manufacturer: syz [ 141.524987][ T10] usb 6-1: SerialNumber: syz [ 141.530327][ T10] usb 6-1: config 0 descriptor?? [ 141.535587][ T3507] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 141.542836][ T3507] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 141.587364][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.598347][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.608124][ T65] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 141.621042][ T65] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 141.630124][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.638740][ T65] usb 5-1: config 0 descriptor?? [ 141.751408][ T3507] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 141.758689][ T3507] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 141.786350][ T351] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 141.807400][ T351] usb 1-1: device descriptor read/8, error -71 [ 141.937381][ T351] usb 1-1: device descriptor read/8, error -71 [ 141.966920][ T10] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 141.977058][ T10] asix 6-1:0.34: probe with driver asix failed with error -61 [ 142.047017][ T65] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 142.054684][ T65] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 142.062147][ T65] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 142.069588][ T65] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 142.077004][ T65] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 142.084395][ T65] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 142.092013][ T65] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 142.099450][ T65] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 142.106868][ T65] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 142.114268][ T65] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 142.122077][ T65] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 142.131161][ T65] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 142.176396][ T351] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 142.197430][ T351] usb 1-1: device descriptor read/8, error -71 [ 142.337486][ T351] usb 1-1: device descriptor read/8, error -71 [ 142.347197][ T31] usb 5-1: USB disconnect, device number 34 [ 142.456466][ T351] usb usb1-port1: unable to enumerate USB device [ 143.096448][ T31] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 143.108205][ T36] kauditd_printk_skb: 70 callbacks suppressed [ 143.108224][ T36] audit: type=1400 audit(1785406361.430:498): avc: denied { write } for pid=3529 comm="syz.0.981" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 143.246356][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 143.252957][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 143.261355][ T31] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 143.271505][ T31] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 143.282587][ T31] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x81 has invalid maxpacket 8201, setting to 1024 [ 143.293737][ T31] usb 5-1: config 1 interface 2 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 1024 [ 143.305143][ T31] usb 5-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 143.314240][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.322254][ T31] usb 5-1: Manufacturer: 〺 [ 143.326968][ T31] usb 5-1: SerialNumber: 뵕岝귯뫨냀㇑䋼늮壦펒ᄰጪ魥ꑩ籟訿徯㟂↺꒧礂뛙䆈ꆗﲞ᪏讘졳澓旇ᓒ쩯췣臟빔ᕇᕌ盭䕥꺚㊵ㄳꉙ䴧፹掗꼆 [ 143.496369][ T382] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 143.547987][ T31] usb 5-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 143.556506][ T31] usb 5-1: found format II with max.bitrate = 512, frame size=4095 [ 143.566614][ T31] usb 5-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 143.576069][ T31] usb 5-1: found format II with max.bitrate = 512, frame size=4095 [ 143.589547][ T31] usb 5-1: USB disconnect, device number 35 [ 143.597750][ T427] udevd[427]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 143.618938][ T36] audit: type=1400 audit(1785406361.940:499): avc: denied { create } for pid=3533 comm="syz.2.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.656470][ T382] usb 1-1: Using ep0 maxpacket: 32 [ 143.665001][ T382] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 143.673378][ T382] usb 1-1: config 0 has no interface number 0 [ 143.679587][ T382] usb 1-1: config 0 interface 184 has no altsetting 0 [ 143.687839][ T382] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 143.697161][ T382] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.705211][ T382] usb 1-1: Product: syz [ 143.709463][ T382] usb 1-1: Manufacturer: syz [ 143.714083][ T382] usb 1-1: SerialNumber: syz [ 143.719551][ T382] usb 1-1: config 0 descriptor?? [ 143.727065][ T382] smsc75xx v1.0.0 [ 143.927621][ T36] audit: type=1400 audit(1785406362.250:500): avc: denied { create } for pid=3529 comm="syz.0.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 143.967379][ T36] audit: type=1400 audit(1785406362.270:501): avc: denied { create } for pid=3529 comm="syz.0.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 143.974747][ T3548] syzkaller0: entered promiscuous mode [ 143.994230][ T3548] syzkaller0: entered allmulticast mode [ 144.008417][ T36] audit: type=1400 audit(1785406362.280:502): avc: denied { ioctl } for pid=3547 comm="syz.2.986" path="socket:[27418]" dev="sockfs" ino=27418 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 144.075599][ T351] usb 6-1: USB disconnect, device number 21 [ 144.209894][ T36] audit: type=1400 audit(1785406362.530:503): avc: denied { create } for pid=3529 comm="syz.0.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 144.356379][ T65] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 144.396385][ T351] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 144.486340][ T65] usb 5-1: device descriptor read/64, error -71 [ 144.547504][ T351] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.558472][ T351] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.568243][ T351] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 144.581142][ T351] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 144.590223][ T351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.599158][ T351] usb 6-1: config 0 descriptor?? [ 144.612787][ T382] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 144.625041][ T382] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 144.634482][ T382] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 144.645317][ T382] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 144.654996][ T382] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 144.665363][ T382] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 144.674827][ T382] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 144.684366][ T382] usb 1-1: USB disconnect, device number 66 [ 144.726360][ T65] usb 5-1: device descriptor read/64, error -71 [ 144.966351][ T65] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 145.007033][ T351] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 145.014505][ T351] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 145.022082][ T351] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 145.029634][ T351] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 145.037389][ T351] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 145.045010][ T351] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 145.045201][ T36] audit: type=1400 audit(1785406363.360:504): avc: denied { write } for pid=3565 comm="syz.2.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 145.053061][ T351] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 145.080685][ T351] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 145.083407][ T36] audit: type=1400 audit(1785406363.390:505): avc: denied { connect } for pid=3565 comm="syz.2.993" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 145.091654][ T351] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 145.110336][ T36] audit: type=1400 audit(1785406363.430:506): avc: denied { read write } for pid=3567 comm="syz.2.994" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 145.115848][ T65] usb 5-1: device descriptor read/64, error -71 [ 145.139202][ T36] audit: type=1400 audit(1785406363.430:507): avc: denied { open } for pid=3567 comm="syz.2.994" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 145.145797][ T351] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 145.180597][ T351] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 145.192084][ T351] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 145.340394][ T351] usb 6-1: USB disconnect, device number 22 [ 145.355331][ T3580] syz.2.999 uses obsolete (PF_INET,SOCK_PACKET) [ 145.375153][ T3583] veth1_to_bond: entered allmulticast mode [ 145.381614][ T3583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.390455][ T3583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.399562][ T3582] veth1_to_bond: left allmulticast mode [ 145.416414][ T65] usb 5-1: device descriptor read/64, error -71 [ 145.526448][ T65] usb usb5-port1: attempt power cycle [ 145.866440][ T65] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 145.880707][ T3591] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 145.902004][ T65] usb 5-1: device descriptor read/8, error -71 [ 145.951499][ T3606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.960573][ T3606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.037491][ T65] usb 5-1: device descriptor read/8, error -71 [ 146.276413][ T65] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 146.297613][ T65] usb 5-1: device descriptor read/8, error -71 [ 146.427441][ T65] usb 5-1: device descriptor read/8, error -71 [ 146.503819][ T310] Bluetooth: hci0: Frame reassembly failed (-84) [ 146.538163][ T65] usb usb5-port1: unable to enumerate USB device [ 146.546348][ T451] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 146.697484][ T451] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.708424][ T451] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.718313][ T451] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 146.731218][ T451] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 146.740274][ T451] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.748832][ T451] usb 1-1: config 0 descriptor?? [ 146.796364][ T65] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 146.948745][ T3627] SELinux: policydb magic number 0xbaf8498c does not match expected magic number 0xf97cff8c [ 146.959063][ T3627] SELinux: failed to load policy [ 146.988210][ T65] usb 6-1: unable to get BOS descriptor or descriptor too short [ 146.996514][ T65] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 147.004117][ T65] usb 6-1: can't read configurations, error -71 [ 147.162265][ T451] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 147.173910][ T451] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 147.183193][ T3633] FAULT_INJECTION: forcing a failure. [ 147.183193][ T3633] name failslab, interval 1, probability 0, space 0, times 0 [ 147.186759][ T451] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 147.196243][ T3633] CPU: 0 UID: 0 PID: 3633 Comm: syz.4.1021 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 147.196279][ T3633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 147.196291][ T3633] Call Trace: [ 147.196297][ T3633] [ 147.196305][ T3633] __dump_stack+0x21/0x30 [ 147.196335][ T3633] dump_stack_lvl+0x140/0x1c0 [ 147.196359][ T3633] ? __cfi_dump_stack_lvl+0x10/0x10 [ 147.196384][ T3633] dump_stack+0x19/0x20 [ 147.196406][ T3633] should_fail_ex+0x3c2/0x510 [ 147.196426][ T3633] should_failslab+0xac/0x100 [ 147.196449][ T3633] kmem_cache_alloc_node_noprof+0x45/0x420 [ 147.196469][ T3633] ? selinux_socket_getpeersec_dgram+0x25b/0x370 [ 147.196494][ T3633] ? __alloc_skb+0x10c/0x360 [ 147.196517][ T3633] __alloc_skb+0x10c/0x360 [ 147.196541][ T3633] netlink_alloc_large_skb+0xf7/0x1b0 [ 147.196567][ T3633] netlink_sendmsg+0x576/0xad0 [ 147.196585][ T3633] ? __cfi_netlink_sendmsg+0x10/0x10 [ 147.196605][ T3633] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 147.196624][ T3633] ? security_socket_sendmsg+0x3d/0x100 [ 147.196652][ T3633] ____sys_sendmsg+0x99e/0xa00 [ 147.196671][ T3633] ? __import_iovec+0x5b9/0x7d0 [ 147.196699][ T3633] ? __sys_sendmsg_sock+0x50/0x50 [ 147.196718][ T3633] ? import_iovec+0x80/0xb0 [ 147.196743][ T3633] ___sys_sendmsg+0x2a6/0x370 [ 147.196761][ T3633] ? __sys_sendmsg+0x2a0/0x2a0 [ 147.196779][ T3633] ? proc_fail_nth_write+0x184/0x220 [ 147.196805][ T3633] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 147.196832][ T3633] ? __fget_files+0x2bc/0x330 [ 147.196855][ T3633] __x64_sys_sendmsg+0x206/0x2e0 [ 147.196891][ T3633] ? fput+0x1a4/0x230 [ 147.196913][ T3633] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 147.196931][ T3633] ? ksys_write+0x1f3/0x260 [ 147.196951][ T3633] ? __kasan_check_read+0x15/0x20 [ 147.196970][ T3633] x64_sys_call+0x2a4c/0x2ee0 [ 147.196987][ T3633] do_syscall_64+0x57/0xf0 [ 147.197007][ T3633] ? clear_bhb_loop+0x50/0xa0 [ 147.197031][ T3633] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 147.197053][ T3633] RIP: 0033:0x7f605439df99 [ 147.197070][ T3633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.197086][ T3633] RSP: 002b:00007f6052de3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.197107][ T3633] RAX: ffffffffffffffda RBX: 00007f6054625fa0 RCX: 00007f605439df99 [ 147.197122][ T3633] RDX: 0000000004000040 RSI: 0000200000000340 RDI: 0000000000000003 [ 147.197135][ T3633] RBP: 00007f6052de3090 R08: 0000000000000000 R09: 0000000000000000 [ 147.197154][ T3633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.197167][ T3633] R13: 00007f6054626038 R14: 00007f6054625fa0 R15: 00007fff2f6fc1f8 [ 147.197183][ T3633] [ 147.472116][ T451] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 147.479676][ T451] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 147.487434][ T451] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 147.494879][ T451] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 147.502350][ T451] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 147.509841][ T451] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 147.518871][ T451] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 147.526545][ T451] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 147.541855][ T451] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 147.569096][ T451] usb 1-1: USB disconnect, device number 67 [ 147.584355][ T3647] fido_id[3647]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 148.279360][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 148.279378][ T36] audit: type=1400 audit(1785406366.600:537): avc: denied { watch_reads } for pid=3660 comm="syz.4.1030" path="/128/file0" dev="tmpfs" ino=676 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 148.308980][ T36] audit: type=1400 audit(1785406366.630:538): avc: denied { create } for pid=3660 comm="syz.4.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 148.333519][ T451] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 148.341765][ T36] audit: type=1400 audit(1785406366.630:539): avc: denied { write } for pid=3660 comm="syz.4.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 148.368372][ T36] audit: type=1400 audit(1785406366.650:540): avc: denied { setopt } for pid=3665 comm="syz.4.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 148.426437][ T31] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 148.455914][ T3675] loop3: detected capacity change from 0 to 7 [ 148.462652][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.471994][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 148.480157][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.489345][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 148.496445][ T451] usb 1-1: device descriptor read/64, error -71 [ 148.497534][ T3675] loop3: unable to read partition table [ 148.509202][ T3675] loop_reread_partitions: partition scan of loop3 (Wý* %4FLQk݊5) failed (rc=-5) [ 148.516660][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 148.530189][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.530201][ T585] Bluetooth: hci0: command 0x1003 tx timeout [ 148.530223][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 148.539349][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 148.546009][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.568255][ T3678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.568430][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 148.578000][ T3678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.585005][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.593502][ T31] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 148.601477][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 148.620629][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 88, setting to 64 [ 148.630457][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.633614][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 148.640480][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 148.640830][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.651837][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 148.659126][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 148.689513][ T31] usb 6-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 148.698708][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.710269][ T31] usb 6-1: config 0 descriptor?? [ 148.715575][ T3659] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 148.723076][ T3659] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 148.776362][ T451] usb 1-1: device descriptor read/64, error -71 [ 148.781229][ T3682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1036'. [ 148.857206][ T3686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1038'. [ 148.881502][ T36] audit: type=1400 audit(1785406367.200:541): avc: denied { block_suspend } for pid=3688 comm="syz.4.1039" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 149.026362][ T451] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 149.090300][ T31] usb 6-1: string descriptor 0 read error: -71 [ 149.098292][ T31] usbhid 6-1:0.0: can't add hid device: -71 [ 149.104271][ T31] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 149.114937][ T31] usb 6-1: USB disconnect, device number 25 [ 149.156395][ T451] usb 1-1: device descriptor read/64, error -71 [ 149.217811][ T36] audit: type=1400 audit(1785406367.540:542): avc: denied { mounton } for pid=3707 comm="syz.2.1041" path="/331/file0" dev="tmpfs" ino=1741 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 149.241042][ T36] audit: type=1400 audit(1785406367.540:543): avc: denied { mount } for pid=3707 comm="syz.2.1041" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 149.249014][ T3710] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1042'. [ 149.262764][ T36] audit: type=1400 audit(1785406367.560:544): avc: denied { mount } for pid=3709 comm="syz.2.1042" name="/" dev="ramfs" ino=29871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 149.416391][ T451] usb 1-1: device descriptor read/64, error -71 [ 149.526439][ T451] usb usb1-port1: attempt power cycle [ 149.765096][ T36] audit: type=1400 audit(1785406624.076:545): avc: denied { create } for pid=3721 comm="syz.4.1046" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 149.786736][ T36] audit: type=1400 audit(1785406624.076:546): avc: denied { read } for pid=3721 comm="syz.4.1046" name="file0" dev="tmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 149.846371][ T31] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 149.887470][ T451] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 149.907499][ T451] usb 1-1: device descriptor read/8, error -71 [ 150.006373][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 150.012664][ T31] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 150.020869][ T31] usb 6-1: config 0 has no interface number 0 [ 150.027084][ T31] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 150.037142][ T31] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 150.048001][ T451] usb 1-1: device descriptor read/8, error -71 [ 150.054709][ T31] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 150.063875][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.072005][ T31] usb 6-1: Product: syz [ 150.076190][ T31] usb 6-1: Manufacturer: syz [ 150.080846][ T31] usb 6-1: SerialNumber: syz [ 150.085997][ T31] usb 6-1: config 0 descriptor?? [ 150.091277][ T3718] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 150.098558][ T3718] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 150.126466][ T45] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 150.277230][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.288210][ T451] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 150.295822][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.305671][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 150.318691][ T45] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.320119][ T3718] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 150.327987][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.335552][ T3718] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 150.344578][ T45] usb 5-1: config 0 descriptor?? [ 150.355636][ T451] usb 1-1: device descriptor read/8, error -71 [ 150.487212][ T451] usb 1-1: device descriptor read/8, error -71 [ 150.559494][ T31] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 150.596335][ T451] usb usb1-port1: unable to enumerate USB device [ 150.759800][ T31] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 150.770044][ T31] asix 6-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 150.771202][ T45] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 150.788961][ T31] asix 6-1:0.34: probe with driver asix failed with error -32 [ 150.797688][ T45] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 150.805154][ T45] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 150.812573][ T45] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 150.820003][ T45] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 150.827449][ T45] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 150.834863][ T45] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 150.842361][ T45] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 150.850932][ T45] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 150.858371][ T45] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 150.865908][ T45] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 150.875082][ T45] plantronics 0003:047F:FFFF.0014: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 151.089433][ T351] usb 5-1: USB disconnect, device number 40 [ 151.695211][ T3771] 9pnet_fd: Insufficient options for proto=fd [ 151.702917][ T3771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.711566][ T3771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.720055][ T3773] 9pnet_fd: Insufficient options for proto=fd [ 151.743890][ T3778] FAULT_INJECTION: forcing a failure. [ 151.743890][ T3778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.757152][ T3778] CPU: 1 UID: 0 PID: 3778 Comm: syz.2.1065 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 151.757185][ T3778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.757197][ T3778] Call Trace: [ 151.757206][ T3778] [ 151.757216][ T3778] __dump_stack+0x21/0x30 [ 151.757245][ T3778] dump_stack_lvl+0x140/0x1c0 [ 151.757260][ T3778] ? __cfi_dump_stack_lvl+0x10/0x10 [ 151.757274][ T3778] ? is_bpf_text_address+0x17b/0x1a0 [ 151.757289][ T3778] ? kernel_text_address+0xa9/0xe0 [ 151.757304][ T3778] dump_stack+0x19/0x20 [ 151.757317][ T3778] should_fail_ex+0x3c2/0x510 [ 151.757331][ T3778] should_fail+0xf/0x20 [ 151.757341][ T3778] should_fail_usercopy+0x1e/0x30 [ 151.757353][ T3778] _copy_from_user+0x20/0xa0 [ 151.757367][ T3778] ___sys_sendmsg+0x1c7/0x370 [ 151.757378][ T3778] ? __sys_sendmsg+0x2a0/0x2a0 [ 151.757389][ T3778] ? kstrtouint+0x78/0xf0 [ 151.757400][ T3778] ? __fget_files+0x2bc/0x330 [ 151.757414][ T3778] __sys_sendmmsg+0x2b4/0x4e0 [ 151.757424][ T3778] ? __cfi___sys_sendmmsg+0x10/0x10 [ 151.757436][ T3778] ? __cfi_ksys_write+0x10/0x10 [ 151.757448][ T3778] __x64_sys_sendmmsg+0xa4/0xc0 [ 151.757459][ T3778] x64_sys_call+0xfec/0x2ee0 [ 151.757469][ T3778] do_syscall_64+0x57/0xf0 [ 151.757480][ T3778] ? clear_bhb_loop+0x50/0xa0 [ 151.757495][ T3778] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 151.757508][ T3778] RIP: 0033:0x7f4a3099df99 [ 151.757519][ T3778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.757529][ T3778] RSP: 002b:00007f4a317fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 151.757542][ T3778] RAX: ffffffffffffffda RBX: 00007f4a30c25fa0 RCX: 00007f4a3099df99 [ 151.757551][ T3778] RDX: 0000000000000001 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 151.757558][ T3778] RBP: 00007f4a317fb090 R08: 0000000000000000 R09: 0000000000000000 [ 151.757565][ T3778] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 151.757572][ T3778] R13: 00007f4a30c26038 R14: 00007f4a30c25fa0 R15: 00007ffff063bc48 [ 151.757581][ T3778] [ 151.869503][ T3782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.936050][ T45] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 151.940101][ T3782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.000659][ T3785] FAULT_INJECTION: forcing a failure. [ 152.000659][ T3785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.013847][ T3785] CPU: 0 UID: 0 PID: 3785 Comm: syz.0.1067 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 152.013879][ T3785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.013892][ T3785] Call Trace: [ 152.013897][ T3785] [ 152.013902][ T3785] __dump_stack+0x21/0x30 [ 152.013922][ T3785] dump_stack_lvl+0x140/0x1c0 [ 152.013936][ T3785] ? __cfi_dump_stack_lvl+0x10/0x10 [ 152.013950][ T3785] ? check_stack_object+0x138/0x150 [ 152.013962][ T3785] dump_stack+0x19/0x20 [ 152.013975][ T3785] should_fail_ex+0x3c2/0x510 [ 152.013987][ T3785] should_fail+0xf/0x20 [ 152.013998][ T3785] should_fail_usercopy+0x1e/0x30 [ 152.014010][ T3785] _copy_to_user+0x24/0xa0 [ 152.014024][ T3785] simple_read_from_buffer+0xed/0x160 [ 152.014038][ T3785] proc_fail_nth_read+0x1aa/0x220 [ 152.014054][ T3785] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 152.014069][ T3785] ? bpf_lsm_file_permission+0xd/0x20 [ 152.014083][ T3785] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 152.014097][ T3785] vfs_read+0x28b/0xc70 [ 152.014108][ T3785] ? __cfi_vfs_read+0x10/0x10 [ 152.014118][ T3785] ? __kasan_check_write+0x18/0x20 [ 152.014128][ T3785] ? mutex_lock+0x97/0x1d0 [ 152.014143][ T3785] ? __cfi_mutex_lock+0x10/0x10 [ 152.014157][ T3785] ksys_read+0x145/0x260 [ 152.014168][ T3785] ? __cfi_ksys_read+0x10/0x10 [ 152.014178][ T3785] ? __kasan_check_read+0x15/0x20 [ 152.014188][ T3785] __x64_sys_read+0x7f/0x90 [ 152.014198][ T3785] x64_sys_call+0x2638/0x2ee0 [ 152.014208][ T3785] do_syscall_64+0x57/0xf0 [ 152.014219][ T3785] ? clear_bhb_loop+0x50/0xa0 [ 152.014233][ T3785] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 152.014247][ T3785] RIP: 0033:0x7fdd67b5e7ce [ 152.014257][ T3785] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 152.014267][ T3785] RSP: 002b:00007fdd68b35fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 152.014279][ T3785] RAX: ffffffffffffffda RBX: 00007fdd68b366c0 RCX: 00007fdd67b5e7ce [ 152.014287][ T3785] RDX: 000000000000000f RSI: 00007fdd68b360a0 RDI: 0000000000000004 [ 152.014294][ T3785] RBP: 00007fdd68b36090 R08: 0000000000000000 R09: 0000000000000000 [ 152.014301][ T3785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.014308][ T3785] R13: 00007fdd67e26038 R14: 00007fdd67e25fa0 R15: 00007fff24995408 [ 152.014316][ T3785] [ 152.146148][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 152.262778][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.272937][ T45] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 152.283247][ T45] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 152.292323][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.300439][ T45] usb 5-1: Product: syz [ 152.304607][ T45] usb 5-1: Manufacturer: syz [ 152.309271][ T45] usb 5-1: SerialNumber: syz [ 152.314404][ T45] usb 5-1: config 0 descriptor?? [ 152.416060][ T65] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 152.567057][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.578025][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.587811][ T65] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 152.600710][ T65] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.609775][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.614555][ T45] usb 6-1: USB disconnect, device number 26 [ 152.626232][ T65] usb 1-1: config 0 descriptor?? [ 152.995934][ T45] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 153.035908][ T65] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 153.043406][ T65] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 153.050837][ T65] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 153.058274][ T65] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 153.065673][ T65] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 153.073118][ T65] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 153.080565][ T65] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 153.088060][ T65] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 153.095469][ T65] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 153.102891][ T65] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 153.110442][ T65] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 153.119438][ T65] plantronics 0003:047F:FFFF.0015: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 153.157211][ T45] usb 6-1: unable to get BOS descriptor or descriptor too short [ 153.165255][ T45] usb 6-1: not running at top speed; connect to a high speed hub [ 153.174017][ T45] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 153.187007][ T45] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 153.196107][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.204098][ T45] usb 6-1: Product: syz [ 153.208276][ T45] usb 6-1: Manufacturer: syz [ 153.212881][ T45] usb 6-1: SerialNumber: syz [ 153.316746][ T31] usb 1-1: USB disconnect, device number 72 [ 153.471662][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 153.471681][ T36] audit: type=1400 audit(1785406627.786:558): avc: denied { mounton } for pid=3791 comm="syz.5.1070" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 153.472451][ T3803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.510434][ T3803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.520655][ T3803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.529323][ T3803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.736852][ T36] audit: type=1400 audit(1785406628.056:559): avc: denied { name_bind } for pid=3805 comm="syz.2.1074" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 153.758554][ T36] audit: type=1400 audit(1785406628.056:560): avc: denied { node_bind } for pid=3805 comm="syz.2.1074" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 153.836642][ T3809] devpts: called with bogus options [ 153.853218][ T3812] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1076'. [ 153.862346][ T3812] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1076'. [ 153.871355][ T3812] netlink: 'syz.0.1076': attribute type 6 has an invalid length. [ 153.879183][ T3812] netlink: 'syz.0.1076': attribute type 5 has an invalid length. [ 153.887115][ T3812] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1076'. [ 153.898611][ T3814] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1076'. [ 153.907643][ T3814] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1076'. [ 153.916648][ T3814] netlink: 'syz.0.1076': attribute type 6 has an invalid length. [ 153.924378][ T3814] netlink: 'syz.0.1076': attribute type 5 has an invalid length. [ 153.932352][ T3814] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1076'. [ 153.953344][ T3818] tipc: Started in network mode [ 153.958470][ T3818] tipc: Node identity 7f000001, cluster identity 4711 [ 153.965489][ T3818] tipc: Enabling of bearer rejected, failed to enable media [ 154.027900][ T36] audit: type=1400 audit(1785406628.346:561): avc: denied { mounton } for pid=3824 comm="syz.0.1079" path="/212/file0" dev="tmpfs" ino=1118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 154.116064][ T36] audit: type=1400 audit(1785406628.436:562): avc: denied { bind } for pid=3828 comm="syz.0.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.157717][ T36] audit: type=1400 audit(1785406628.476:563): avc: denied { setopt } for pid=3828 comm="syz.0.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.495749][ T31] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 154.633579][ T65] usb 5-1: USB disconnect, device number 41 [ 154.646815][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.656809][ T36] audit: type=1400 audit(1785406628.966:564): avc: denied { cmd } for pid=3843 comm="iou-wrk-3844" path="socket:[29239]" dev="sockfs" ino=29239 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 154.659035][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.693170][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 154.706852][ T31] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.716422][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.725896][ T31] usb 1-1: config 0 descriptor?? [ 155.035111][ T36] audit: type=1400 audit(1785406629.346:565): avc: denied { setopt } for pid=3859 comm="syz.2.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 155.055815][ T65] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 155.067400][ T36] audit: type=1400 audit(1785406629.386:566): avc: denied { write } for pid=3866 comm="syz.2.1092" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 155.070615][ T3867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.095314][ T3867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.134769][ T31] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 155.142445][ T31] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 155.150055][ T31] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 155.157502][ T31] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 155.164902][ T31] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 155.172324][ T31] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 155.179766][ T31] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 155.187210][ T31] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 155.194624][ T31] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 155.202055][ T31] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 155.209655][ T31] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 155.216761][ T65] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 155.219328][ T31] plantronics 0003:047F:FFFF.0016: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 155.231169][ T65] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 155.250624][ T65] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 41845, setting to 64 [ 155.261662][ T65] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 155.275558][ T65] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.284634][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 155.292753][ T65] usb 5-1: SerialNumber: syz [ 155.298347][ T3848] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 155.306706][ T65] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 155.436218][ T65] usb 1-1: USB disconnect, device number 73 [ 155.510748][ T31] usb 5-1: USB disconnect, device number 42 [ 155.624211][ T36] audit: type=1400 audit(1785406629.936:567): avc: denied { write } for pid=3869 comm="syz.2.1093" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 155.627500][ T3870] hub 8-0:1.0: USB hub found [ 155.651954][ T3870] hub 8-0:1.0: 1 port detected [ 155.670882][ T3872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.679429][ T3872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.698056][ T45] usb 6-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 155.706796][ T45] usb 6-1: found format II with max.bitrate = 512, frame size=4095 [ 155.714764][ T45] usb 6-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 155.726542][ T45] usb 6-1: found format II with max.bitrate = 512, frame size=4095 [ 155.736099][ T45] usb 6-1: 2:1 : no UAC_FORMAT_TYPE desc [ 155.753136][ T45] usb 6-1: USB disconnect, device number 27 [ 155.767818][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 155.828335][ T3880] fuse: Bad value for 'rootmode' [ 155.887832][ T3883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.896605][ T3883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.205553][ T45] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 156.221354][ T3901] FAULT_INJECTION: forcing a failure. [ 156.221354][ T3901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.234531][ T3901] CPU: 0 UID: 0 PID: 3901 Comm: syz.2.1106 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 156.234560][ T3901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.234568][ T3901] Call Trace: [ 156.234573][ T3901] [ 156.234579][ T3901] __dump_stack+0x21/0x30 [ 156.234599][ T3901] dump_stack_lvl+0x140/0x1c0 [ 156.234613][ T3901] ? __cfi_dump_stack_lvl+0x10/0x10 [ 156.234628][ T3901] dump_stack+0x19/0x20 [ 156.234641][ T3901] should_fail_ex+0x3c2/0x510 [ 156.234653][ T3901] should_fail+0xf/0x20 [ 156.234663][ T3901] should_fail_usercopy+0x1e/0x30 [ 156.234676][ T3901] _copy_from_iter+0x1a6/0x1520 [ 156.234690][ T3901] ? __cfi__copy_from_iter+0x10/0x10 [ 156.234704][ T3901] tun_get_user+0x231/0x3720 [ 156.234715][ T3901] ? arch_stack_walk+0x10a/0x170 [ 156.234726][ T3901] ? ptr_ring_consume+0x430/0x430 [ 156.234736][ T3901] ? _parse_integer+0x2e/0x40 [ 156.234752][ T3901] ? kstrtoull+0x13b/0x1e0 [ 156.234763][ T3901] ? __kasan_check_write+0x18/0x20 [ 156.234774][ T3901] ? ref_tracker_alloc+0x32b/0x5b0 [ 156.234786][ T3901] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 156.234798][ T3901] ? selinux_file_permission+0x318/0xb60 [ 156.234810][ T3901] ? __kasan_check_write+0x18/0x20 [ 156.234820][ T3901] ? proc_fail_nth_write+0x184/0x220 [ 156.234836][ T3901] tun_chr_write_iter+0x1fa/0x310 [ 156.234852][ T3901] vfs_write+0x762/0xfd0 [ 156.234863][ T3901] ? __cfi_vfs_write+0x10/0x10 [ 156.234875][ T3901] ksys_write+0x145/0x260 [ 156.234885][ T3901] ? __cfi_ksys_write+0x10/0x10 [ 156.234896][ T3901] ? __kasan_check_read+0x15/0x20 [ 156.234906][ T3901] __x64_sys_write+0x7f/0x90 [ 156.234917][ T3901] x64_sys_call+0x271c/0x2ee0 [ 156.234927][ T3901] do_syscall_64+0x57/0xf0 [ 156.234939][ T3901] ? clear_bhb_loop+0x50/0xa0 [ 156.234953][ T3901] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 156.234967][ T3901] RIP: 0033:0x7f4a3099df99 [ 156.234985][ T3901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.234995][ T3901] RSP: 002b:00007f4a317fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 156.235008][ T3901] RAX: ffffffffffffffda RBX: 00007f4a30c25fa0 RCX: 00007f4a3099df99 [ 156.235016][ T3901] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 0000000000000005 [ 156.235023][ T3901] RBP: 00007f4a317fb090 R08: 0000000000000000 R09: 0000000000000000 [ 156.235031][ T3901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.235037][ T3901] R13: 00007f4a30c26038 R14: 00007f4a30c25fa0 R15: 00007ffff063bc48 [ 156.235046][ T3901] [ 156.415636][ T45] usb 6-1: device descriptor read/64, error -71 [ 156.545509][ T451] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 156.558662][ T3908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.567345][ T3908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.675519][ T451] usb 5-1: device descriptor read/64, error -71 [ 156.735512][ T45] usb 6-1: device descriptor read/64, error -71 [ 156.925476][ T451] usb 5-1: device descriptor read/64, error -71 [ 156.975538][ T45] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 157.105509][ T45] usb 6-1: device descriptor read/64, error -71 [ 157.132088][ T3918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.140732][ T3918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.175469][ T451] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 157.215473][ T65] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 157.305441][ T451] usb 5-1: device descriptor read/64, error -71 [ 157.345448][ T45] usb 6-1: device descriptor read/64, error -71 [ 157.345448][ T65] usb 1-1: device descriptor read/64, error -71 [ 157.455548][ T45] usb usb6-port1: attempt power cycle [ 157.545460][ T451] usb 5-1: device descriptor read/64, error -71 [ 157.615453][ T65] usb 1-1: device descriptor read/64, error -71 [ 157.656045][ T451] usb usb5-port1: attempt power cycle [ 157.690604][ T3928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.699207][ T3928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.795397][ T45] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 157.816364][ T45] usb 6-1: device descriptor read/8, error -71 [ 157.865392][ T65] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 157.946349][ T45] usb 6-1: device descriptor read/8, error -71 [ 157.995387][ T451] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 158.015348][ T65] usb 1-1: device descriptor read/64, error -71 [ 158.016446][ T451] usb 5-1: device descriptor read/8, error -71 [ 158.156467][ T451] usb 5-1: device descriptor read/8, error -71 [ 158.185344][ T45] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 158.206487][ T45] usb 6-1: device descriptor read/8, error -71 [ 158.235394][ T3930] usb usb8: usbfs: process 3930 (syz.2.1118) did not claim interface 0 before use [ 158.265314][ T65] usb 1-1: device descriptor read/64, error -71 [ 158.326683][ T3934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.335552][ T3934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.344718][ T45] usb 6-1: device descriptor read/8, error -71 [ 158.376221][ T65] usb usb1-port1: attempt power cycle [ 158.405323][ T451] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 158.426524][ T451] usb 5-1: device descriptor read/8, error -71 [ 158.455402][ T45] usb usb6-port1: unable to enumerate USB device [ 158.556234][ T451] usb 5-1: device descriptor read/8, error -71 [ 158.665417][ T451] usb usb5-port1: unable to enumerate USB device [ 158.725252][ T65] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 158.746244][ T65] usb 1-1: device descriptor read/8, error -71 [ 158.876369][ T65] usb 1-1: device descriptor read/8, error -71 [ 158.892846][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 158.892879][ T36] audit: type=1400 audit(1785406633.207:582): avc: denied { mount } for pid=3935 comm="syz.2.1121" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 158.925487][ T3939] netlink: 388 bytes leftover after parsing attributes in process `syz.5.1122'. [ 158.943120][ T3946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.952409][ T3946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.125196][ T65] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 159.146193][ T65] usb 1-1: device descriptor read/8, error -71 [ 159.235163][ T451] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 159.276161][ T65] usb 1-1: device descriptor read/8, error -71 [ 159.365421][ T451] usb 6-1: device descriptor read/64, error -71 [ 159.385311][ T65] usb usb1-port1: unable to enumerate USB device [ 159.529282][ T3970] kvm: pic: level sensitive irq not supported [ 159.529444][ T3970] kvm: pic: single mode not supported [ 159.598230][ T3974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.605146][ T451] usb 6-1: device descriptor read/64, error -71 [ 159.612961][ T3974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.855191][ T451] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 159.985159][ T451] usb 6-1: device descriptor read/64, error -71 [ 160.182090][ T3996] kvm: pic: non byte write [ 160.205638][ T45] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 160.225076][ T451] usb 6-1: device descriptor read/64, error -71 [ 160.248906][ T4003] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 160.335278][ T451] usb usb6-port1: attempt power cycle [ 160.346599][ T4008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.355225][ T4008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.356705][ T45] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 160.373837][ T45] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 160.383654][ T45] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 41845, setting to 64 [ 160.394616][ T45] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 160.408430][ T45] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.417508][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 160.425512][ T45] usb 5-1: SerialNumber: syz [ 160.431277][ T3983] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 160.439562][ T45] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 160.643161][ T65] usb 5-1: USB disconnect, device number 47 [ 160.675037][ T451] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 160.696105][ T451] usb 6-1: device descriptor read/8, error -71 [ 160.825978][ T451] usb 6-1: device descriptor read/8, error -71 [ 160.872199][ T4010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.881100][ T4010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.064980][ T451] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 161.086040][ T451] usb 6-1: device descriptor read/8, error -71 [ 161.107304][ T4014] /dev/sr0: Can't lookup blockdev [ 161.216365][ T451] usb 6-1: device descriptor read/8, error -71 [ 161.229803][ T4021] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1147'. [ 161.325053][ T451] usb usb6-port1: unable to enumerate USB device [ 161.344951][ T45] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 161.461356][ T36] audit: type=1326 audit(1785406635.777:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4029 comm="syz.2.1151" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a3099df99 code=0x0 [ 161.495029][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 161.501557][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 161.511344][ T45] usb 1-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 161.520446][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.528512][ T45] usb 1-1: Product: syz [ 161.532677][ T45] usb 1-1: Manufacturer: syz [ 161.537347][ T382] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 161.544948][ T45] usb 1-1: SerialNumber: syz [ 161.563393][ T36] audit: type=1400 audit(1785406635.877:584): avc: denied { read write } for pid=4029 comm="syz.2.1151" name="usbmon0" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 161.587312][ T36] audit: type=1400 audit(1785406635.877:585): avc: denied { open } for pid=4029 comm="syz.2.1151" path="/dev/usbmon0" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 161.611037][ T36] audit: type=1400 audit(1785406635.887:586): avc: denied { ioctl } for pid=4029 comm="syz.2.1151" path="/dev/usbmon0" dev="devtmpfs" ino=89 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 161.704916][ T451] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 161.725021][ T382] usb 5-1: Using ep0 maxpacket: 32 [ 161.731195][ T382] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 161.739464][ T382] usb 5-1: config 0 has no interface number 0 [ 161.745592][ T382] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 161.756268][ T36] audit: type=1400 audit(1785406636.077:587): avc: denied { bind } for pid=4013 comm="syz.0.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.776585][ T45] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 161.785844][ T382] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 161.795101][ T382] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.803088][ T382] usb 5-1: Product: syz [ 161.808675][ T45] usb 1-1: USB disconnect, device number 78 [ 161.815872][ T382] usb 5-1: Manufacturer: syz [ 161.820981][ T382] usb 5-1: SerialNumber: syz [ 161.826254][ T382] usb 5-1: config 0 descriptor?? [ 161.831515][ T4025] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 161.835016][ T451] usb 6-1: device descriptor read/64, error -71 [ 162.045322][ T4025] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 162.273554][ T36] audit: type=1400 audit(1785406636.587:588): avc: denied { execute } for pid=4036 comm="syz.0.1154" path="/228/file1" dev="tmpfs" ino=1202 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 162.384784][ T451] usb 6-1: device descriptor read/64, error -71 [ 162.624785][ T451] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 162.644767][ T351] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 162.653983][ T4025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.662521][ T4025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.673647][ T382] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 162.683934][ T382] asix 5-1:0.188: probe with driver asix failed with error -71 [ 162.691552][ T36] audit: type=1400 audit(1785406637.007:589): avc: denied { getopt } for pid=4047 comm="syz.4.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 162.712387][ T382] usb 5-1: USB disconnect, device number 48 [ 162.794736][ T451] usb 6-1: Using ep0 maxpacket: 16 [ 162.801245][ T451] usb 6-1: unable to get BOS descriptor or descriptor too short [ 162.807250][ T351] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 162.809850][ T451] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.818099][ T351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.829552][ T451] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 162.836315][ T351] usb 1-1: Product: syz [ 162.845475][ T451] usb 6-1: too many endpoints for config 1 interface 1 altsetting 138: 95, using maximum allowed: 30 [ 162.849441][ T351] usb 1-1: Manufacturer: syz [ 162.860432][ T451] usb 6-1: config 1 interface 1 altsetting 138 has 0 endpoint descriptors, different from the interface descriptor's value: 95 [ 162.864921][ T351] usb 1-1: SerialNumber: syz [ 162.878163][ T451] usb 6-1: config 1 interface 1 has no altsetting 0 [ 162.891433][ T451] usb 6-1: New USB device found, idVendor=1235, idProduct=9212, bcdDevice= 0.40 [ 162.900576][ T451] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.908615][ T451] usb 6-1: Product: 罙莆嗈豫웰嫑쀡ྐ顈獅ﭼ䯢 [ 162.916218][ T451] usb 6-1: Manufacturer: ࠇ [ 162.920808][ T451] usb 6-1: SerialNumber: 묥鴝⒱缶ꥒ釆䯎ꀨ㏺䍴위鉌쇡〔熔䂪攛﫸⥹䭮笡㿒奕鄧ǰᒵ怤⿰降﫶誨x恀ㆩ姧ᖴ螉⋌领ݗ煽莋㸀 [ 163.064758][ T382] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 163.144937][ T451] usb 6-1: USB disconnect, device number 37 [ 163.159787][ T435] udevd[435]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 163.203686][ T4054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.212296][ T4054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.221693][ T382] usb 5-1: unable to get BOS descriptor or descriptor too short [ 163.229819][ T382] usb 5-1: not running at top speed; connect to a high speed hub [ 163.238525][ T382] usb 5-1: config 0 has an invalid interface number: 175 but max is 0 [ 163.246880][ T382] usb 5-1: config 0 has no interface number 0 [ 163.252988][ T382] usb 5-1: config 0 interface 175 has no altsetting 0 [ 163.265811][ T382] usb 5-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 0.02 [ 163.275127][ T382] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.283156][ T382] usb 5-1: Product: syz [ 163.287449][ T382] usb 5-1: Manufacturer: syz [ 163.292227][ T382] usb 5-1: SerialNumber: syz [ 163.297815][ T382] usb 5-1: config 0 descriptor?? [ 163.672926][ T36] audit: type=1400 audit(1785406637.987:590): avc: denied { getopt } for pid=4060 comm="syz.5.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 163.904830][ T382] usb-storage 5-1:0.175: USB Mass Storage device detected [ 163.965643][ T382] usb 5-1: USB disconnect, device number 49 [ 164.127559][ T36] audit: type=1400 audit(1785406638.447:591): avc: denied { ioctl } for pid=4067 comm="syz.5.1164" path="/dev/input/event2" dev="devtmpfs" ino=209 ioctlcmd=0x4519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 164.414544][ T382] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 164.559534][ T4074] incfs: Error accessing: ./file0/file0. [ 164.564554][ T382] usb 6-1: Using ep0 maxpacket: 8 [ 164.565428][ T4074] incfs: mount failed -2 [ 164.571607][ T382] usb 6-1: unable to get BOS descriptor or descriptor too short [ 164.584669][ T382] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 164.598545][ T382] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 164.609071][ T382] usb 6-1: config 4 has no interface number 0 [ 164.617071][ T382] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 164.626243][ T382] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.634331][ T382] usb 6-1: Product: syz [ 164.638818][ T382] usb 6-1: Manufacturer: syz [ 164.643548][ T382] usb 6-1: SerialNumber: syz [ 164.864307][ T382] uvcvideo 6-1:4.147: Found multiple Units with ID 6 [ 164.871199][ T382] usb 6-1: Found UVC 0.02 device syz (04f2:b746) [ 164.877826][ T382] usb 6-1: No valid video chain found. [ 164.887831][ T382] usb 6-1: USB disconnect, device number 38 [ 165.044457][ T45] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 165.204414][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 165.212231][ T45] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 165.221633][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.229993][ T45] usb 5-1: Product: syz [ 165.234346][ T45] usb 5-1: Manufacturer: syz [ 165.239237][ T45] usb 5-1: SerialNumber: syz [ 165.248472][ T45] usb 5-1: config 0 descriptor?? [ 165.413783][ T318] usb 1-1: USB disconnect, device number 79 [ 165.419872][ T36] audit: type=1400 audit(1785406639.728:592): avc: denied { ioctl } for pid=4078 comm="syz.5.1168" path="socket:[32105]" dev="sockfs" ino=32105 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 165.465494][ T36] audit: type=1400 audit(1785406639.788:593): avc: denied { write } for pid=4081 comm="syz.0.1169" path="socket:[32112]" dev="sockfs" ino=32112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 165.506162][ T4085] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 165.557062][ T4087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=4087 comm=syz.0.1171 [ 165.904392][ T318] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 166.065460][ T318] usb 1-1: config 1 has an invalid descriptor of length 96, skipping remainder of the config [ 166.075751][ T318] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 166.086269][ T318] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 166.095618][ T318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.103729][ T318] usb 1-1: Product: syz [ 166.108004][ T318] usb 1-1: Manufacturer: syz [ 166.112688][ T318] usb 1-1: SerialNumber: syz [ 166.266212][ T36] audit: type=1400 audit(1785406640.588:594): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 166.360404][ T4106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.369152][ T4106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.380774][ T318] usb 1-1: 1:1 : invalid UAC_AS_GENERAL desc [ 166.387195][ T318] usb 1-1: 0:2 : does not exist [ 166.394547][ T318] usb 1-1: USB disconnect, device number 80 [ 166.400994][ T4107] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1175'. [ 166.405008][ T435] udevd[435]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 166.410396][ T4107] bridge_slave_1: left allmulticast mode [ 166.431834][ T4107] bridge_slave_1: left promiscuous mode [ 166.437542][ T4107] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.446326][ T4107] bridge_slave_0: left allmulticast mode [ 166.452077][ T4107] bridge_slave_0: left promiscuous mode [ 166.457902][ T4107] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.197936][ T45] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 167.354205][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 167.360513][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.370709][ T45] usb 1-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 167.379805][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.388538][ T45] usb 1-1: config 0 descriptor?? [ 167.394645][ T45] rndis_host 1-1:0.0: probe with driver rndis_host failed with error -22 [ 167.474210][ T318] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 167.595329][ T351] usb 1-1: USB disconnect, device number 81 [ 167.607140][ T65] usb 5-1: USB disconnect, device number 50 [ 167.625218][ T318] usb 6-1: config index 0 descriptor too short (expected 1051, got 27) [ 167.633528][ T318] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 167.644623][ T318] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 167.655989][ T318] usb 6-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 167.665146][ T318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.673144][ T318] usb 6-1: Product: syz [ 167.677335][ T318] usb 6-1: Manufacturer: syz [ 167.681959][ T318] usb 6-1: SerialNumber: syz [ 167.687198][ T318] usb 6-1: config 0 descriptor?? [ 167.753635][ T4125] netlink: 'syz.2.1184': attribute type 4 has an invalid length. [ 167.924747][ T45] usb 6-1: USB disconnect, device number 39 [ 167.944206][ T65] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 168.115274][ T65] usb 5-1: config index 0 descriptor too short (expected 189, got 36) [ 168.123510][ T65] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 168.131998][ T65] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 168.140976][ T65] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.152021][ T65] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.162101][ T65] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 168.174939][ T65] usb 5-1: config 0 interface 0 has no altsetting 0 [ 168.181579][ T65] usb 5-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.00 [ 168.190778][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.199444][ T65] usb 5-1: config 0 descriptor?? [ 168.344061][ T351] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 168.455368][ T36] audit: type=1400 audit(1785406642.778:595): avc: denied { associate } for pid=4136 comm="syz.5.1189" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 168.476448][ T36] audit: type=1400 audit(1785406642.778:596): avc: denied { mounton } for pid=4136 comm="syz.5.1189" path="/syzcgroup/unified/syz5" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 168.500250][ T36] audit: type=1400 audit(1785406642.778:597): avc: denied { mount } for pid=4136 comm="syz.5.1189" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 168.523402][ T351] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.534704][ T351] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.544570][ T351] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 168.553807][ T351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.564394][ T351] usb 1-1: config 0 descriptor?? [ 168.608211][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.615172][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.622056][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.628969][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.635877][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.642750][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.649667][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.656575][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.663471][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.670399][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.677513][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.684419][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.691324][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.698538][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.705243][ T4149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.705763][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.720907][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.725513][ T4149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.734015][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.742382][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.749358][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.756433][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.763440][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.770408][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.777351][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.784401][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.791303][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.798205][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.805118][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.811995][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.819145][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.826076][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.832969][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.839870][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.847122][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.854092][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.861076][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.868007][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.874962][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.881961][ T65] apple 0003:05AC:0230.0017: unknown main item tag 0x0 [ 168.889653][ T65] apple 0003:05AC:0230.0017: hidraw0: USB HID v0.00 Device [HID 05ac:0230] on usb-dummy_hcd.4-1/input0 [ 168.904222][ T65] usb 5-1: USB disconnect, device number 51 [ 168.980091][ T4133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.988659][ T4133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.997591][ T4133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.006237][ T4133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.355072][ T36] audit: type=1400 audit(1785406643.678:598): avc: denied { read } for pid=4160 comm="syz.4.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.355116][ T4162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1196'. [ 169.589730][ T4174] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1200'. [ 169.637977][ T36] audit: type=1400 audit(1785406643.958:599): avc: denied { setopt } for pid=4177 comm="syz.5.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 169.725318][ T3079] Bluetooth: hci0: Frame reassembly failed (-84) [ 170.305302][ T4204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.313989][ T4204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.693799][ T424] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 170.844894][ T424] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.855064][ T4214] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1215'. [ 170.855849][ T36] audit: type=1400 audit(1785406645.178:600): avc: denied { create } for pid=4213 comm="syz.2.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 170.865683][ T4214] 9pnet_fd: Insufficient options for proto=fd [ 170.884153][ T424] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.884183][ T424] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 170.884222][ T424] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.921968][ T424] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.930785][ T424] usb 5-1: config 0 descriptor?? [ 171.117610][ T351] usbhid 1-1:0.0: can't add hid device: -71 [ 171.124718][ T351] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 171.134908][ T351] usb 1-1: USB disconnect, device number 82 [ 171.141303][ T36] audit: type=1400 audit(1785406645.458:601): avc: denied { wake_alarm } for pid=4219 comm="syz.0.1217" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 171.209079][ T36] audit: type=1400 audit(1785406645.528:602): avc: denied { write } for pid=4223 comm="syz.0.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 171.342849][ T424] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 171.350390][ T424] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 171.357855][ T424] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 171.365307][ T424] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 171.372736][ T424] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 171.380205][ T424] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 171.387885][ T424] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 171.395335][ T424] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 171.402814][ T424] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 171.410485][ T424] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 171.418162][ T424] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 171.427153][ T424] plantronics 0003:047F:FFFF.0018: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 171.801472][ T36] audit: type=1400 audit(1785406646.118:603): avc: denied { mount } for pid=4241 comm="syz.2.1223" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 171.825742][ T36] audit: type=1400 audit(1785406646.118:604): avc: denied { search } for pid=4241 comm="syz.2.1223" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 171.847509][ T585] Bluetooth: hci0: command 0x1003 tx timeout [ 171.849130][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 171.855497][ T36] audit: type=1400 audit(1785406646.118:605): avc: denied { read } for pid=4241 comm="syz.2.1223" name="buffer_size_kb" dev="tracefs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 171.906150][ T36] audit: type=1400 audit(1785406646.118:606): avc: denied { open } for pid=4241 comm="syz.2.1223" path="/409/tracefs_dir/buffer_size_kb" dev="tracefs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 171.948932][ T36] audit: type=1400 audit(1785406646.208:607): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 172.101738][ T4258] fuse: Unknown parameter '`{%A1fgr00000000000000000000' [ 172.119025][ T4260] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1229'. [ 172.128794][ T4260] bridge0: port 1(Wgq) entered disabled state [ 172.137299][ T4260] Wgq (unregistering): left allmulticast mode [ 172.140121][ T65] usb 5-1: USB disconnect, device number 52 [ 172.143843][ T4260] Wgq (unregistering): left promiscuous mode [ 172.159099][ T4260] bridge0: port 1(Wgq) entered disabled state [ 172.193610][ T424] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 172.363547][ T424] usb 6-1: Using ep0 maxpacket: 8 [ 172.369738][ T424] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.381440][ T424] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.391270][ T424] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 172.408274][ T424] usb 6-1: New USB device found, idVendor=056a, idProduct=0494, bcdDevice= 0.00 [ 172.418840][ T424] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.428021][ T424] usb 6-1: config 0 descriptor?? [ 172.452048][ T4286] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1239'. [ 172.527790][ T4299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.536399][ T4299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.583592][ T65] usb 1-1: new low-speed USB device number 83 using dummy_hcd [ 172.723663][ T65] usb 1-1: device descriptor read/64, error -71 [ 172.747182][ T4314] FAULT_INJECTION: forcing a failure. [ 172.747182][ T4314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.760377][ T4314] CPU: 0 UID: 0 PID: 4314 Comm: syz.4.1249 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 172.760412][ T4314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.760424][ T4314] Call Trace: [ 172.760430][ T4314] [ 172.760438][ T4314] __dump_stack+0x21/0x30 [ 172.760468][ T4314] dump_stack_lvl+0x140/0x1c0 [ 172.760490][ T4314] ? __cfi_dump_stack_lvl+0x10/0x10 [ 172.760514][ T4314] dump_stack+0x19/0x20 [ 172.760535][ T4314] should_fail_ex+0x3c2/0x510 [ 172.760556][ T4314] should_fail+0xf/0x20 [ 172.760574][ T4314] should_fail_usercopy+0x1e/0x30 [ 172.760593][ T4314] _copy_from_iter+0x1a6/0x1520 [ 172.760615][ T4314] ? __kasan_check_write+0x18/0x20 [ 172.760633][ T4314] ? skb_set_owner_w+0x280/0x3d0 [ 172.760651][ T4314] ? __virt_addr_valid+0x2a1/0x370 [ 172.760671][ T4314] ? __cfi__copy_from_iter+0x10/0x10 [ 172.760693][ T4314] ? __check_object_size+0x54c/0x870 [ 172.760711][ T4314] ? __cfi___check_object_size+0x10/0x10 [ 172.760729][ T4314] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 172.760748][ T4314] skb_copy_datagram_from_iter+0xf4/0x6f0 [ 172.760774][ T4314] tun_get_user+0xd99/0x3720 [ 172.760794][ T4314] ? ptr_ring_consume+0x430/0x430 [ 172.760810][ T4314] ? _parse_integer+0x2e/0x40 [ 172.760828][ T4314] ? kstrtoull+0x13b/0x1e0 [ 172.760846][ T4314] ? __kasan_check_write+0x18/0x20 [ 172.760864][ T4314] ? ref_tracker_alloc+0x32b/0x5b0 [ 172.760884][ T4314] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 172.760904][ T4314] ? selinux_file_permission+0x318/0xb60 [ 172.760923][ T4314] ? __kasan_check_write+0x18/0x20 [ 172.760940][ T4314] ? proc_fail_nth_write+0x184/0x220 [ 172.760965][ T4314] tun_chr_write_iter+0x1fa/0x310 [ 172.760990][ T4314] vfs_write+0x762/0xfd0 [ 172.761009][ T4314] ? __cfi_vfs_write+0x10/0x10 [ 172.761028][ T4314] ksys_write+0x145/0x260 [ 172.761046][ T4314] ? __cfi_ksys_write+0x10/0x10 [ 172.761064][ T4314] ? __kasan_check_read+0x15/0x20 [ 172.761081][ T4314] __x64_sys_write+0x7f/0x90 [ 172.761099][ T4314] x64_sys_call+0x271c/0x2ee0 [ 172.761116][ T4314] do_syscall_64+0x57/0xf0 [ 172.761142][ T4314] ? clear_bhb_loop+0x50/0xa0 [ 172.761165][ T4314] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 172.761186][ T4314] RIP: 0033:0x7f605439df99 [ 172.761202][ T4314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.761219][ T4314] RSP: 002b:00007f6052de3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 172.761239][ T4314] RAX: ffffffffffffffda RBX: 00007f6054625fa0 RCX: 00007f605439df99 [ 172.761252][ T4314] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 0000000000000005 [ 172.761264][ T4314] RBP: 00007f6052de3090 R08: 0000000000000000 R09: 0000000000000000 [ 172.761276][ T4314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.761288][ T4314] R13: 00007f6054626038 R14: 00007f6054625fa0 R15: 00007fff2f6fc1f8 [ 172.761303][ T4314] [ 173.054007][ T4253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.060209][ T4316] 9pnet_fd: p9_fd_create_unix (4316): problem connecting socket: ./cgroup: -30 [ 173.063593][ T4253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.073996][ T4316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.088398][ T424] hid (null): unknown global tag 0xe [ 173.088685][ T4316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.094512][ T424] hid (null): unknown global tag 0xc [ 173.106993][ T424] hid (null): invalid report_count 939142936 [ 173.113005][ T424] hid (null): global environment stack underflow [ 173.126412][ T424] wacom 0003:056A:0494.0019: unknown global tag 0xe [ 173.133132][ T424] wacom 0003:056A:0494.0019: item 0 2 1 14 parsing failed [ 173.140539][ T424] wacom 0003:056A:0494.0019: parse failed [ 173.146454][ T424] wacom 0003:056A:0494.0019: probe with driver wacom failed with error -22 [ 173.173513][ T65] usb 1-1: device descriptor read/64, error -71 [ 173.215060][ T4320] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1252'. [ 173.226508][ T4320] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1305 sclass=netlink_xfrm_socket pid=4320 comm=syz.4.1252 [ 173.389954][ T4335] FAULT_INJECTION: forcing a failure. [ 173.389954][ T4335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.403186][ T4335] CPU: 1 UID: 0 PID: 4335 Comm: syz.4.1259 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 173.403218][ T4335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.403229][ T4335] Call Trace: [ 173.403235][ T4335] [ 173.403244][ T4335] __dump_stack+0x21/0x30 [ 173.403272][ T4335] dump_stack_lvl+0x140/0x1c0 [ 173.403295][ T4335] ? __cfi_dump_stack_lvl+0x10/0x10 [ 173.403319][ T4335] dump_stack+0x19/0x20 [ 173.403340][ T4335] should_fail_ex+0x3c2/0x510 [ 173.403361][ T4335] should_fail+0xf/0x20 [ 173.403381][ T4335] should_fail_usercopy+0x1e/0x30 [ 173.403401][ T4335] _copy_from_iter+0x1a6/0x1520 [ 173.403422][ T4335] ? __kasan_check_write+0x18/0x20 [ 173.403440][ T4335] ? _copy_from_iter+0x215/0x1520 [ 173.403460][ T4335] ? __cfi__copy_from_iter+0x10/0x10 [ 173.403481][ T4335] ? __virt_addr_valid+0x2a1/0x370 [ 173.403502][ T4335] ? __cfi__copy_from_iter+0x10/0x10 [ 173.403522][ T4335] ? __check_object_size+0x54c/0x870 [ 173.403541][ T4335] ? __cfi___check_object_size+0x10/0x10 [ 173.403559][ T4335] copy_page_from_iter+0x1e5/0x2a0 [ 173.403581][ T4335] skb_copy_datagram_from_iter+0x300/0x6f0 [ 173.403609][ T4335] tun_get_user+0xd99/0x3720 [ 173.403628][ T4335] ? cgroup_rstat_updated+0x144/0x800 [ 173.403647][ T4335] ? ptr_ring_consume+0x430/0x430 [ 173.403664][ T4335] ? _parse_integer+0x2e/0x40 [ 173.403681][ T4335] ? kstrtoull+0x13b/0x1e0 [ 173.403698][ T4335] ? __kasan_check_write+0x18/0x20 [ 173.403715][ T4335] ? ref_tracker_alloc+0x32b/0x5b0 [ 173.403735][ T4335] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 173.403756][ T4335] ? selinux_file_permission+0x318/0xb60 [ 173.403775][ T4335] ? __kasan_check_write+0x18/0x20 [ 173.403792][ T4335] ? proc_fail_nth_write+0x184/0x220 [ 173.403817][ T4335] tun_chr_write_iter+0x1fa/0x310 [ 173.403842][ T4335] vfs_write+0x762/0xfd0 [ 173.403860][ T4335] ? __cfi_vfs_write+0x10/0x10 [ 173.403880][ T4335] ksys_write+0x145/0x260 [ 173.403896][ T4335] ? xfd_validate_state+0x68/0x140 [ 173.403919][ T4335] ? __cfi_ksys_write+0x10/0x10 [ 173.403937][ T4335] ? __kasan_check_read+0x15/0x20 [ 173.403954][ T4335] __x64_sys_write+0x7f/0x90 [ 173.403971][ T4335] x64_sys_call+0x271c/0x2ee0 [ 173.403988][ T4335] do_syscall_64+0x57/0xf0 [ 173.404006][ T4335] ? clear_bhb_loop+0x50/0xa0 [ 173.404036][ T4335] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 173.404057][ T4335] RIP: 0033:0x7f605439df99 [ 173.404073][ T4335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.404088][ T4335] RSP: 002b:00007f6052de3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 173.404108][ T4335] RAX: ffffffffffffffda RBX: 00007f6054625fa0 RCX: 00007f605439df99 [ 173.404122][ T4335] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 0000000000000005 [ 173.404135][ T4335] RBP: 00007f6052de3090 R08: 0000000000000000 R09: 0000000000000000 [ 173.404147][ T4335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.404158][ T4335] R13: 00007f6054626038 R14: 00007f6054625fa0 R15: 00007fff2f6fc1f8 [ 173.404173][ T4335] [ 173.413672][ T65] usb 1-1: new low-speed USB device number 84 using dummy_hcd [ 173.853565][ T65] usb 1-1: device descriptor read/64, error -71 [ 174.013411][ T9] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 174.093385][ T65] usb 1-1: device descriptor read/64, error -71 [ 174.112533][ T4348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.121099][ T4348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.132129][ T4348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.141193][ T4348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.149907][ T4348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.158557][ T4348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.163389][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 174.167567][ T4348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.173351][ T9] usb 5-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 174.180191][ T4348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.193524][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 174.207589][ T65] usb usb1-port1: attempt power cycle [ 174.213480][ T9] usb 5-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 174.222650][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.231532][ T9] usb 5-1: config 0 descriptor?? [ 174.553342][ T65] usb 1-1: new low-speed USB device number 85 using dummy_hcd [ 174.574274][ T65] usb 1-1: device descriptor read/8, error -71 [ 174.638410][ T9] ortek 0003:1223:3F07.001A: unknown main item tag 0x4 [ 174.645395][ T9] ortek 0003:1223:3F07.001A: unknown main item tag 0x5 [ 174.652271][ T9] ortek 0003:1223:3F07.001A: unknown main item tag 0x2 [ 174.659389][ T9] ortek 0003:1223:3F07.001A: unexpected long global item [ 174.666621][ T9] ortek 0003:1223:3F07.001A: probe with driver ortek failed with error -22 [ 174.704322][ T65] usb 1-1: device descriptor read/8, error -71 [ 174.804672][ T4350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.813390][ T4350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.839022][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 174.839042][ T36] audit: type=1400 audit(1785406649.159:620): avc: denied { unlink } for pid=4339 comm="syz.4.1261" name="#5" dev="tmpfs" ino=1017 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 174.841725][ T4340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.845655][ T36] audit: type=1400 audit(1785406649.159:621): avc: denied { mount } for pid=4339 comm="syz.4.1261" name="/" dev="overlay" ino=1012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 174.868071][ T4340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.908839][ T424] usb 5-1: USB disconnect, device number 53 [ 174.914087][ T36] audit: type=1400 audit(1785406649.229:622): avc: denied { unmount } for pid=1536 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 174.963355][ T65] usb 1-1: new low-speed USB device number 86 using dummy_hcd [ 174.984325][ T65] usb 1-1: device descriptor read/8, error -71 [ 175.003822][ T351] usb 6-1: USB disconnect, device number 40 [ 175.014262][ T4359] FAULT_INJECTION: forcing a failure. [ 175.014262][ T4359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.027506][ T4359] CPU: 1 UID: 0 PID: 4359 Comm: syz.5.1269 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 175.027537][ T4359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 175.027549][ T4359] Call Trace: [ 175.027555][ T4359] [ 175.027563][ T4359] __dump_stack+0x21/0x30 [ 175.027592][ T4359] dump_stack_lvl+0x140/0x1c0 [ 175.027615][ T4359] ? __cfi_dump_stack_lvl+0x10/0x10 [ 175.027638][ T4359] ? exc_page_fault+0x65/0xc0 [ 175.027664][ T4359] dump_stack+0x19/0x20 [ 175.027688][ T4359] should_fail_ex+0x3c2/0x510 [ 175.027711][ T4359] should_fail+0xf/0x20 [ 175.027730][ T4359] should_fail_usercopy+0x1e/0x30 [ 175.027752][ T4359] _copy_from_iter+0x1a6/0x1520 [ 175.027777][ T4359] ? __kasan_check_write+0x18/0x20 [ 175.027797][ T4359] ? _copy_from_iter+0x215/0x1520 [ 175.027820][ T4359] ? __cfi__copy_from_iter+0x10/0x10 [ 175.027841][ T4359] ? __virt_addr_valid+0x2a1/0x370 [ 175.027862][ T4359] ? __cfi__copy_from_iter+0x10/0x10 [ 175.027885][ T4359] ? __check_object_size+0x54c/0x870 [ 175.027905][ T4359] ? __cfi___check_object_size+0x10/0x10 [ 175.027926][ T4359] copy_page_from_iter+0x1e5/0x2a0 [ 175.027951][ T4359] skb_copy_datagram_from_iter+0x300/0x6f0 [ 175.027977][ T4359] tun_get_user+0xd99/0x3720 [ 175.027998][ T4359] ? ptr_ring_consume+0x430/0x430 [ 175.028015][ T4359] ? _parse_integer+0x2e/0x40 [ 175.028034][ T4359] ? kstrtoull+0x13b/0x1e0 [ 175.028052][ T4359] ? __kasan_check_write+0x18/0x20 [ 175.028071][ T4359] ? ref_tracker_alloc+0x32b/0x5b0 [ 175.028094][ T4359] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 175.028115][ T4359] ? selinux_file_permission+0x318/0xb60 [ 175.028134][ T4359] ? __kasan_check_write+0x18/0x20 [ 175.028153][ T4359] ? proc_fail_nth_write+0x184/0x220 [ 175.028180][ T4359] tun_chr_write_iter+0x1fa/0x310 [ 175.028207][ T4359] vfs_write+0x762/0xfd0 [ 175.028227][ T4359] ? __cfi_vfs_write+0x10/0x10 [ 175.028250][ T4359] ksys_write+0x145/0x260 [ 175.028269][ T4359] ? __cfi_ksys_write+0x10/0x10 [ 175.028287][ T4359] ? __kasan_check_read+0x15/0x20 [ 175.028306][ T4359] __x64_sys_write+0x7f/0x90 [ 175.028325][ T4359] x64_sys_call+0x271c/0x2ee0 [ 175.028352][ T4359] do_syscall_64+0x57/0xf0 [ 175.028374][ T4359] ? clear_bhb_loop+0x50/0xa0 [ 175.028398][ T4359] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 175.028420][ T4359] RIP: 0033:0x7f89b179df99 [ 175.028437][ T4359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.028454][ T4359] RSP: 002b:00007f89b2695028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 175.028475][ T4359] RAX: ffffffffffffffda RBX: 00007f89b1a25fa0 RCX: 00007f89b179df99 [ 175.028489][ T4359] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 0000000000000005 [ 175.028502][ T4359] RBP: 00007f89b2695090 R08: 0000000000000000 R09: 0000000000000000 [ 175.028516][ T4359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.028526][ T4359] R13: 00007f89b1a26038 R14: 00007f89b1a25fa0 R15: 00007ffd99179d08 [ 175.028543][ T4359] [ 175.337461][ T65] usb 1-1: device descriptor read/8, error -71 [ 175.460645][ T4366] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1272'. [ 175.469889][ T65] usb usb1-port1: unable to enumerate USB device [ 175.476613][ T4366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1272'. [ 175.529587][ T4363] kvm_intel: kvm [4362]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xaba6 [ 175.593263][ T424] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 175.656603][ T36] audit: type=1400 audit(1785406649.979:623): avc: denied { ioctl } for pid=4372 comm="syz.2.1275" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 175.683314][ T36] audit: type=1400 audit(1785406650.009:624): avc: denied { getopt } for pid=4372 comm="syz.2.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 175.753160][ T424] usb 5-1: Using ep0 maxpacket: 16 [ 175.763917][ T424] usb 5-1: config index 0 descriptor too short (expected 37359, got 202) [ 175.772486][ T424] usb 5-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 175.781256][ T424] usb 5-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 175.791501][ T424] usb 5-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 175.802444][ T424] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.817253][ T424] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.825359][ T424] usb 5-1: Product: syz [ 175.829527][ T424] usb 5-1: Manufacturer: syz [ 175.834177][ T424] usb 5-1: SerialNumber: syz [ 175.865503][ T4381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.874081][ T4381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.882444][ T4381] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1278'. [ 175.943127][ T65] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 176.043831][ T424] usb 5-1: 0:2 : does not exist [ 176.050485][ T424] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 176.061053][ T424] usb 5-1: USB disconnect, device number 54 [ 176.068522][ T435] udevd[435]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:33.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 176.104180][ T65] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 176.112525][ T65] usb 1-1: config 0 has no interface number 0 [ 176.128250][ T65] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 176.137397][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.146899][ T65] usb 1-1: Product: syz [ 176.151167][ T65] usb 1-1: Manufacturer: syz [ 176.155824][ T65] usb 1-1: SerialNumber: syz [ 176.161071][ T65] usb 1-1: config 0 descriptor?? [ 176.195103][ T4387] dummy_hcd dummy_hcd.0: remove, state 1 [ 176.200871][ T4387] usb usb1: USB disconnect, device number 1 [ 176.368378][ T65] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -19 [ 176.378527][ T65] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -19 [ 176.388272][ T65] asix 1-1:0.251: probe with driver asix failed with error -5 [ 176.396870][ T65] usb 1-1: USB disconnect, device number 87 [ 176.407921][ T4387] dummy_hcd dummy_hcd.0: stopped [ 176.412917][ T4387] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 176.425641][ T4390] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1281'. [ 176.481802][ T4394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.490339][ T4394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.554333][ T36] audit: type=1400 audit(1785406650.879:625): avc: denied { lock } for pid=4396 comm="syz.4.1284" path="socket:[35907]" dev="sockfs" ino=35907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 176.578151][ T4371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.586736][ T4371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.600622][ T4371] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 176.613247][ T4371] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 176.621655][ T4371] CPU: 0 UID: 0 PID: 4371 Comm: syz.0.1274 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 176.633186][ T4371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.643242][ T4371] RIP: 0010:set_link_state+0x2a/0x1240 [ 176.648704][ T4371] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 dd 01 ce fd 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 b8 c4 26 fe 4d 8b 75 00 49 8d 95 93 [ 176.668300][ T4371] RSP: 0018:ffffc900045af718 EFLAGS: 00010046 [ 176.674365][ T4371] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88811656b900 [ 176.682351][ T4371] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 176.690310][ T4371] RBP: ffffc900045af7a0 R08: 0000000000000003 R09: 0000000000000004 [ 176.698273][ T4371] R10: dffffc0000000000 R11: fffff520008b5ee0 R12: 0000000000000000 [ 176.706243][ T4371] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8881053ac000 [ 176.714220][ T4371] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 176.723178][ T4371] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 176.729768][ T4371] CR2: 0000000000000000 CR3: 0000000116526000 CR4: 00000000003526b0 [ 176.737735][ T4371] DR0: 0000000000003706 DR1: 0000000000000000 DR2: 0000000000000000 [ 176.745785][ T4371] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 176.753751][ T4371] Call Trace: [ 176.757020][ T4371] [ 176.759942][ T4371] ? __kasan_check_write+0x18/0x20 [ 176.765046][ T4371] dummy_pullup+0xd1/0x130 [ 176.769481][ T4371] ? __cfi_dummy_pullup+0x10/0x10 [ 176.773033][ T424] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 176.774557][ T4371] usb_gadget_disconnect_locked+0x151/0x400 [ 176.785320][ T36] audit: type=1400 audit(1785406651.099:626): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 176.788078][ T4371] gadget_unbind_driver+0xaf/0x3f0 [ 176.809910][ T36] audit: type=1400 audit(1785406651.099:627): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.814870][ T4371] ? __cfi_gadget_unbind_driver+0x10/0x10 [ 176.814897][ T4371] device_release_driver_internal+0x4ad/0x830 [ 176.836541][ T36] audit: type=1400 audit(1785406651.099:628): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.841849][ T4371] driver_detach+0x1f5/0x2d0 [ 176.849792][ T36] audit: type=1400 audit(1785406651.099:629): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.869101][ T4371] bus_remove_driver+0x254/0x2b0 [ 176.869139][ T4371] driver_unregister+0x79/0xb0 [ 176.869156][ T4371] usb_gadget_unregister_driver+0x52/0x80 [ 176.909614][ T4371] raw_release+0xdb/0x280 [ 176.913938][ T4371] ? __cfi_raw_release+0x10/0x10 [ 176.918879][ T4371] __fput+0x208/0xa30 [ 176.922864][ T4371] ____fput+0x20/0x30 [ 176.926848][ T4371] task_work_run+0x1e8/0x260 [ 176.931455][ T4371] ? __cfi_task_work_run+0x10/0x10 [ 176.936588][ T4371] ? __kasan_check_write+0x18/0x20 [ 176.941713][ T4371] do_exit+0xa46/0x2850 [ 176.945856][ T4371] ? futex_wake+0x666/0x950 [ 176.950345][ T4371] ? __cfi_do_exit+0x10/0x10 [ 176.953061][ T424] usb 6-1: device descriptor read/64, error -71 [ 176.954924][ T4371] ? __cfi_futex_wake+0x10/0x10 [ 176.954948][ T4371] ? __kasan_check_write+0x18/0x20 [ 176.961310][ T451] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 176.966023][ T4371] ? _raw_spin_lock_irq+0x93/0x120 [ 176.966052][ T4371] do_group_exit+0x21f/0x2f0 [ 176.966076][ T4371] ? __kasan_check_write+0x18/0x20 [ 176.993797][ T4371] ? recalc_sigpending+0x16c/0x1d0 [ 176.998920][ T4371] get_signal+0x134c/0x1490 [ 177.003429][ T4371] arch_do_signal_or_restart+0xbc/0x700 [ 177.008960][ T4371] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 177.015127][ T4371] syscall_exit_to_user_mode+0x57/0xb0 [ 177.020625][ T4371] do_syscall_64+0x63/0xf0 [ 177.025038][ T4371] ? clear_bhb_loop+0x50/0xa0 [ 177.029710][ T4371] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 177.035609][ T4371] RIP: 0033:0x7fdd67b9df99 [ 177.040012][ T4371] Code: Unable to access opcode bytes at 0x7fdd67b9df6f. [ 177.047015][ T4371] RSP: 002b:00007fdd68b360e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 177.055416][ T4371] RAX: 0000000000000001 RBX: 00007fdd67e25fa8 RCX: 00007fdd67b9df99 [ 177.063379][ T4371] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdd67e25fac [ 177.071339][ T4371] RBP: 00007fdd67e25fa0 R08: 4000000000000000 R09: 0000000000000000 [ 177.079304][ T4371] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 177.087270][ T4371] R13: 00007fdd67e26038 R14: 00007fff24995320 R15: 00007fff24995408 [ 177.095238][ T4371] [ 177.098242][ T4371] Modules linked in: [ 177.102129][ T4371] ---[ end trace 0000000000000000 ]--- [ 177.107575][ T4371] RIP: 0010:set_link_state+0x2a/0x1240 [ 177.113031][ T4371] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 dd 01 ce fd 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 b8 c4 26 fe 4d 8b 75 00 49 8d 95 93 [ 177.132679][ T4371] RSP: 0018:ffffc900045af718 EFLAGS: 00010046 [ 177.138745][ T4371] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88811656b900 [ 177.146720][ T4371] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.154691][ T4371] RBP: ffffc900045af7a0 R08: 0000000000000003 R09: 0000000000000004 [ 177.162656][ T4371] R10: dffffc0000000000 R11: fffff520008b5ee0 R12: 0000000000000000 [ 177.163002][ T451] usb 5-1: Using ep0 maxpacket: 8 [ 177.170621][ T4371] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8881053ac000 [ 177.170642][ T4371] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 177.170658][ T4371] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.170671][ T4371] CR2: 0000000000000000 CR3: 0000000116526000 CR4: 00000000003526b0 [ 177.177185][ T451] usb 5-1: unable to get BOS descriptor or descriptor too short [ 177.183659][ T4371] DR0: 0000000000003706 DR1: 0000000000000000 DR2: 0000000000000000 [ 177.183681][ T4371] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 177.183695][ T4371] Kernel panic - not syncing: Fatal exception [ 177.184011][ T4371] Kernel Offset: disabled